system commands

configure 
   —  system 
      —  alarm-contact-in-power boolean
      —  alarm-contact-input number 
         —  admin-state keyword
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  clear-message string
         —  description string
         —  normal-state keyword
         —  trigger-message string
      —  alarms 
         —  admin-state keyword
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  max-cleared number
      —  allow-boot-license-violations boolean
      —  apply-groups reference
      —  apply-groups-exclude reference
      —  bluetooth 
         —  admin-state keyword
         —  advertising-timeout number
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  device string 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
         —  module string 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  provisioned-identifier string
         —  pairing-button boolean
         —  passkey string
         —  power-mode keyword
      —  boot-bad-exec string
      —  boot-good-exec string
      —  central-frequency-clock 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  bits 
            —  input 
               —  admin-state keyword
            —  interface-type keyword
            —  output 
               —  admin-state keyword
               —  line-length keyword
               —  ql-minimum keyword
               —  source keyword
               —  squelch boolean
            —  ql-override keyword
            —  ssm-bit number
         —  gnss 
            —  admin-state keyword
            —  ql-override keyword
         —  ptp 
            —  admin-state keyword
            —  ql-override keyword
         —  ql-minimum keyword
         —  ql-selection boolean
         —  ref-order 
            —  fifth keyword
            —  first keyword
            —  fourth keyword
            —  second keyword
            —  sixth keyword
            —  third keyword
         —  ref1 
            —  admin-state keyword
            —  ql-override keyword
            —  source-port string
         —  ref2 
            —  admin-state keyword
            —  ql-override keyword
            —  source-port string
         —  revert boolean
         —  synce 
            —  admin-state keyword
            —  ql-override keyword
         —  wait-to-restore number
      —  clli-code string
      —  congestion-management boolean
      —  contact string
      —  coordinates string
      —  cpm-http-redirect 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  optimized-mode boolean
      —  cron 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  schedule string owner string 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  count number
            —  day-of-month number
            —  description string
            —  end-time 
               —  date-and-time string
               —  day keyword
               —  time string
            —  hour number
            —  interval number
            —  minute number
            —  month (keyword | number)
            —  script-policy 
               —  name string
               —  owner string
            —  type keyword
            —  weekday (keyword | number)
      —  dhcp6 
         —  adv-noaddrs-global keyword
         —  apply-groups reference
         —  apply-groups-exclude reference
      —  dns 
         —  address-pref keyword
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  dnssec 
            —  ad-validation keyword
      —  efm-oam 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  dying-gasp-tx-on-reset boolean
         —  grace-tx boolean
      —  eth-cfm 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  grace boolean
         —  md-auto-id 
            —  ma-index-range 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  end number
               —  start number
            —  md-index-range 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  end number
               —  start number
         —  named-display boolean
         —  redundancy 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  mc-lag 
               —  propagate-hold-time (number | keyword)
               —  standby-mep boolean
         —  sender-id 
            —  local-name string
            —  type keyword
         —  slm 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  inactivity-timer number
      —  fan-control 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  cooling-profile keyword
      —  grpc 
         —  admin-state keyword
         —  allow-unsecure-connection 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  gnmi 
            —  admin-state keyword
            —  auto-config-save boolean
            —  proto-version keyword
         —  gnoi 
            —  cert-mgmt 
               —  admin-state keyword
            —  file 
               —  admin-state keyword
            —  system 
               —  admin-state keyword
         —  listening-port number
         —  max-msg-size number
         —  md-cli 
            —  admin-state keyword
         —  rib-api 
            —  admin-state keyword
            —  purge-timeout number
         —  tcp-keepalive 
            —  admin-state keyword
            —  idle-time number
            —  interval number
            —  retries number
         —  tls-server-profile reference
      —  grpc-tunnel 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  destination-group string 
            —  allow-unsecure-connection 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  destination (ipv4-address-no-zone | ipv6-address-no-zone | fully-qualified-domain-name) port number 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  local-source-address (ipv4-address-no-zone | ipv6-address-no-zone)
               —  originated-qos-marking keyword
               —  router-instance string
            —  tcp-keepalive 
               —  admin-state keyword
               —  idle-time number
               —  interval number
               —  retries number
            —  tls-client-profile reference
         —  tunnel string 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  destination-group reference
            —  handler string 
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  port number
               —  target-type 
                  —  custom-type string
                  —  grpc-server 
                  —  ssh-server 
            —  target-name 
               —  custom-string string
               —  node-name 
               —  user-agent 
      —  icmp-vse boolean
      —  ip 
         —  allow-qinq-network-interface boolean
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  enforce-unique-if-index boolean
         —  forward-6in4 boolean
         —  forward-ip-over-gre boolean
         —  ipv6-eh keyword
         —  mpls 
            —  label-stack-statistics-count number
      —  l2tp 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  non-multi-chassis-tunnel-id-range 
            —  end number
            —  start number
      —  lacp 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  system-priority number
      —  lldp 
         —  admin-state keyword
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  message-fast-tx number
         —  message-fast-tx-init number
         —  notification-interval number
         —  reinit-delay number
         —  tx-credit-max number
         —  tx-hold-multiplier number
         —  tx-interval number
      —  load-balancing 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  l2tp-load-balancing boolean
         —  l4-load-balancing boolean
         —  lsr-load-balancing keyword
         —  mc-enh-load-balancing boolean
         —  service-id-lag-hashing boolean
         —  system-ip-load-balancing boolean
      —  location string
      —  login-control 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  exponential-backoff boolean
         —  ftp 
            —  inbound-max-sessions number
         —  idle-timeout (keyword | number)
         —  login-banner boolean
         —  login-scripts 
            —  global-script string
            —  per-user-script 
               —  file-name string
               —  user-directory string
         —  motd 
            —  text string
            —  url string
         —  pre-login-message 
            —  message string
            —  name boolean
         —  ssh 
            —  graceful-shutdown boolean
            —  inbound-max-sessions number
            —  outbound-max-sessions number
            —  ttl-security number
         —  telnet 
            —  graceful-shutdown boolean
            —  inbound-max-sessions number
            —  outbound-max-sessions number
            —  ttl-security number
      —  management-interface 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  cli 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  classic-cli 
               —  allow-immediate boolean
               —  rollback 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  local-checkpoints number
                  —  location string
                  —  remote-checkpoints number
                  —  rescue 
                     —  location string
            —  cli-engine keyword
            —  md-cli 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  auto-config-save boolean
               —  environment 
                  —  command-alias 
                     —  alias string 
                        —  admin-state keyword
                        —  apply-groups reference
                        —  apply-groups-exclude reference
                        —  cli-command string
                        —  description string
                        —  mount-point (keyword | string) 
                        —  python-script reference
                  —  command-completion 
                     —  enter boolean
                     —  space boolean
                     —  tab boolean
                  —  console 
                     —  length number
                     —  width number
                  —  info-output 
                     —  always-display 
                        —  admin-state boolean
                  —  message-severity-level 
                     —  cli keyword
                  —  more boolean
                  —  progress-indicator 
                     —  admin-state keyword
                     —  delay number
                     —  type keyword
                  —  prompt 
                     —  context boolean
                     —  newline boolean
                     —  timestamp boolean
                     —  uncommitted-changes-indicator boolean
                  —  python 
                     —  memory-reservation number
                     —  minimum-available-memory number
                     —  timeout number
                  —  time-display keyword
                  —  time-format keyword
         —  commit-history number
         —  configuration-mode keyword
         —  configuration-save 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  configuration-backups number
            —  incremental-saves boolean
         —  netconf 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  auto-config-save boolean
            —  capabilities 
               —  candidate boolean
            —  port number
         —  operations 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  global-timeouts 
               —  asynchronous-execution (number | keyword)
               —  asynchronous-retention (number | keyword)
               —  synchronous-execution (number | keyword)
         —  remote-management 
            —  admin-state keyword
            —  allow-unsecure-connection 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  client-tls-profile reference
            —  connection-timeout number
            —  device-label string
            —  device-name string
            —  hello-interval number
            —  manager string 
               —  admin-state keyword
               —  allow-unsecure-connection 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  client-tls-profile reference
               —  connection-timeout number
               —  description string
               —  device-label string
               —  device-name string
               —  manager-address (ipv4-address-no-zone | ipv6-address-no-zone | fully-qualified-domain-name)
               —  manager-port number
               —  router-instance string
               —  source-address (ipv4-address-no-zone | ipv6-address-no-zone)
               —  source-port (number | keyword)
            —  router-instance string
            —  source-address (ipv4-address-no-zone | ipv6-address-no-zone)
            —  source-port (number | keyword)
         —  schema-path string
         —  snmp 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  engine-id string
            —  general-port number
            —  max-bulk-duration number
            —  packet-size number
            —  streaming 
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
         —  yang-modules 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  nmda 
               —  nmda-support boolean
            —  nokia-combined-modules boolean
            —  nokia-submodules boolean
            —  openconfig-modules boolean
            —  shared-model-management boolean
      —  name string
      —  network-element-discovery 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  generate-traps boolean
         —  profile string 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  neid string
            —  neip 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  auto-generate 
                  —  ipv4 
                     —  vendor-id-value number
                  —  ipv6 
                     —  vendor-id-value number
               —  ipv4 string
               —  ipv6 string
            —  platform-type string
            —  system-mac string
            —  vendor-id string
      —  ospf-dynamic-hostnames boolean
      —  persistence 
         —  ancp 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  location keyword
         —  application-assurance 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  location keyword
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  dhcp-server 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  location keyword
         —  nat-port-forwarding 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  location keyword
         —  options 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  dhcp-leasetime-threshold number
         —  python-policy-cache 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  location keyword
         —  subscriber-mgmt 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  location keyword
      —  power-management power-zone number 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  mode keyword
         —  power-safety-alert number
         —  power-safety-level number
      —  ptp 
         —  admin-state keyword
         —  alternate-profile string 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  domain number
            —  log-announce-interval number
            —  profile keyword
         —  announce-receipt-timeout number
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  clock-type keyword
         —  domain number
         —  local-priority number
         —  log-announce-interval number
         —  network-type keyword
         —  port reference 
            —  address string
            —  admin-state keyword
            —  alternate-profile reference
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  local-priority number
            —  log-delay-interval number
            —  log-sync-interval number
            —  master-only boolean
         —  priority1 number
         —  priority2 number
         —  profile keyword
         —  ptsf 
            —  monitor-ptsf-unusable 
               —  admin-state keyword
         —  router string 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  peer (ipv4-address-no-zone | ipv6-address-no-zone) 
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  local-priority number
               —  log-sync-interval number
            —  peer-limit number
         —  tx-while-sync-uncertain boolean
      —  script-control 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  script string owner string 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  location string
         —  script-policy string owner string 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  expire-time (number | keyword)
            —  lifetime (number | keyword)
            —  lock-override boolean
            —  max-completed number
            —  python-lifetime number
            —  python-script 
               —  name reference
            —  results string
            —  script 
               —  name string
               —  owner string
      —  security 
         —  aaa 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  cli-session-group string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  combined-max-sessions number
               —  description string
               —  ssh-max-sessions number
               —  telnet-max-sessions number
            —  health-check (number | keyword)
            —  local-profiles 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  profile string 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  cli-session-group reference
                  —  combined-max-sessions number
                  —  default-action keyword
                  —  entry number 
                     —  action keyword
                     —  apply-groups reference
                     —  apply-groups-exclude reference
                     —  description string
                     —  match string
                  —  grpc 
                     —  rpc-authorization 
                        —  gnmi-capabilities keyword
                        —  gnmi-get keyword
                        —  gnmi-set keyword
                        —  gnmi-subscribe keyword
                        —  gnoi-cert-mgmt-cangenerate keyword
                        —  gnoi-cert-mgmt-getcert keyword
                        —  gnoi-cert-mgmt-install keyword
                        —  gnoi-cert-mgmt-revoke keyword
                        —  gnoi-cert-mgmt-rotate keyword
                        —  gnoi-file-get keyword
                        —  gnoi-file-put keyword
                        —  gnoi-file-remove keyword
                        —  gnoi-file-stat keyword
                        —  gnoi-file-transfertoremote keyword
                        —  gnoi-system-cancelreboot keyword
                        —  gnoi-system-ping keyword
                        —  gnoi-system-reboot keyword
                        —  gnoi-system-rebootstatus keyword
                        —  gnoi-system-setpackage keyword
                        —  gnoi-system-switchcontrolprocessor keyword
                        —  gnoi-system-time keyword
                        —  gnoi-system-traceroute keyword
                        —  md-cli-session keyword
                        —  rib-api-getversion keyword
                        —  rib-api-modify keyword
                  —  li boolean
                  —  netconf 
                     —  base-op-authorization 
                        —  action boolean
                        —  cancel-commit boolean
                        —  close-session boolean
                        —  commit boolean
                        —  copy-config boolean
                        —  create-subscription boolean
                        —  delete-config boolean
                        —  discard-changes boolean
                        —  edit-config boolean
                        —  get boolean
                        —  get-config boolean
                        —  get-data boolean
                        —  get-schema boolean
                        —  kill-session boolean
                        —  lock boolean
                        —  validate boolean
                  —  ssh-max-sessions number
                  —  telnet-max-sessions number
            —  management-interface 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  md-cli 
                  —  command-accounting-during-load boolean
               —  output-authorization 
                  —  md-interfaces boolean
                  —  telemetry-data boolean
            —  remote-servers 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  ldap 
                  —  admin-state keyword
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  public-key-authentication boolean
                  —  route-preference keyword
                  —  server number 
                     —  address (ipv4-address-no-zone | ipv6-address-no-zone) 
                        —  apply-groups reference
                        —  apply-groups-exclude reference
                        —  port number
                     —  admin-state keyword
                     —  apply-groups reference
                     —  apply-groups-exclude reference
                     —  bind-authentication 
                        —  password string
                        —  root-dn string
                     —  search 
                        —  base-dn string
                     —  server-name string
                     —  tls-profile reference
                  —  server-retry number
                  —  server-timeout number
                  —  use-default-template boolean
               —  radius 
                  —  access-algorithm keyword
                  —  accounting boolean
                  —  accounting-port number
                  —  admin-state keyword
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  authorization boolean
                  —  interactive-authentication boolean
                  —  port number
                  —  route-preference keyword
                  —  server number 
                     —  address (ipv4-address-no-zone | ipv6-address-no-zone)
                     —  apply-groups reference
                     —  apply-groups-exclude reference
                     —  authenticator keyword
                     —  secret string
                     —  tls-client-profile reference
                  —  server-retry number
                  —  server-timeout number
                  —  use-default-template boolean
               —  tacplus 
                  —  accounting 
                     —  record-type keyword
                  —  admin-control 
                     —  tacplus-map-to-priv-lvl number
                  —  admin-state keyword
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  authorization 
                     —  request-format 
                        —  access-operation-cmd keyword
                     —  use-priv-lvl boolean
                  —  interactive-authentication boolean
                  —  priv-lvl-map 
                     —  apply-groups reference
                     —  apply-groups-exclude reference
                     —  priv-lvl number 
                        —  apply-groups reference
                        —  apply-groups-exclude reference
                        —  user-profile-name reference
                  —  route-preference keyword
                  —  server number 
                     —  address (ipv4-address-no-zone | ipv6-address-no-zone)
                     —  apply-groups reference
                     —  apply-groups-exclude reference
                     —  port number
                     —  secret string
                  —  server-timeout number
                  —  use-default-template boolean
               —  vprn-server 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  inband reference
                  —  outband reference
                  —  vprn reference
            —  user-template keyword 
               —  access 
                  —  console boolean
                  —  ftp boolean
                  —  grpc boolean
                  —  li boolean
                  —  netconf boolean
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  console 
                  —  login-exec string
               —  home-directory (sat-url | cflash-without-slot-url)
               —  profile string
               —  restricted-to-home boolean
               —  save-when-restricted boolean
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  cli-script 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  authorization 
               —  cron 
                  —  cli-user reference
               —  event-handler 
                  —  cli-user reference
         —  cpm-filter 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  default-action keyword
            —  ip-filter 
               —  admin-state keyword
               —  entry number 
                  —  action 
                     —  accept 
                     —  default 
                     —  drop 
                     —  queue reference
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  description string
                  —  log reference
                  —  match 
                     —  dscp keyword
                     —  dst-ip 
                        —  address (ipv4-prefix-with-host-bits | ipv4-address)
                        —  ip-prefix-list reference
                        —  mask string
                     —  dst-port 
                        —  eq number
                        —  mask number
                        —  port-list reference
                        —  range 
                           —  end number
                           —  start number
                     —  fragment keyword
                     —  icmp 
                        —  code number
                        —  type number
                     —  ip-option 
                        —  mask number
                        —  type number
                     —  multiple-option boolean
                     —  option-present boolean
                     —  port 
                        —  eq number
                        —  mask number
                        —  port-list reference
                        —  range 
                           —  end number
                           —  start number
                     —  protocol (number | keyword)
                     —  router-instance string
                     —  src-ip 
                        —  address (ipv4-prefix-with-host-bits | ipv4-address)
                        —  ip-prefix-list reference
                        —  mask string
                     —  src-port 
                        —  eq number
                        —  mask number
                        —  port-list reference
                        —  range 
                           —  end number
                           —  start number
                     —  tcp-flags 
                        —  ack boolean
                        —  syn boolean
            —  ipv6-filter 
               —  admin-state keyword
               —  entry number 
                  —  action 
                     —  accept 
                     —  default 
                     —  drop 
                     —  queue reference
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  description string
                  —  log reference
                  —  match 
                     —  dscp keyword
                     —  dst-ip 
                        —  address (ipv6-prefix-with-host-bits | ipv6-address)
                        —  ipv6-prefix-list reference
                        —  mask string
                     —  dst-port 
                        —  eq number
                        —  mask number
                        —  port-list reference
                        —  range 
                           —  end number
                           —  start number
                     —  extension-header 
                        —  hop-by-hop boolean
                     —  flow-label number
                     —  fragment keyword
                     —  icmp 
                        —  code number
                        —  type number
                     —  next-header (number | keyword)
                     —  port 
                        —  eq number
                        —  mask number
                        —  port-list reference
                        —  range 
                           —  end number
                           —  start number
                     —  router-instance string
                     —  src-ip 
                        —  address (ipv6-prefix-with-host-bits | ipv6-address)
                        —  ipv6-prefix-list reference
                        —  mask string
                     —  src-port 
                        —  eq number
                        —  mask number
                        —  port-list reference
                        —  range 
                           —  end number
                           —  start number
                     —  tcp-flags 
                        —  ack boolean
                        —  syn boolean
            —  mac-filter 
               —  admin-state keyword
               —  entry number 
                  —  action 
                     —  accept 
                     —  default 
                     —  drop 
                     —  queue reference
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  description string
                  —  log reference
                  —  match 
                     —  cfm-opcode 
                        —  eq number
                        —  gt number
                        —  lt number
                        —  range 
                           —  end number
                           —  start number
                     —  dst-mac 
                        —  address string
                        —  mask string
                     —  etype string
                     —  frame-type keyword
                     —  llc-dsap 
                        —  dsap number
                        —  mask number
                     —  llc-ssap 
                        —  mask number
                        —  ssap number
                     —  service reference
                     —  src-mac 
                        —  address string
                        —  mask string
         —  cpm-queue 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  queue number 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  cbs number
               —  mbs number
               —  rate 
                  —  cir (number | keyword)
                  —  pir (number | keyword)
         —  cpu-protection 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  ip-src-monitoring 
               —  included-protocols 
                  —  dhcp boolean
                  —  gtp boolean
                  —  icmp boolean
                  —  igmp boolean
            —  link-specific-rate (number | keyword)
            —  policy number 
               —  alarm boolean
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  description string
               —  eth-cfm 
                  —  entry number 
                     —  apply-groups reference
                     —  apply-groups-exclude reference
                     —  level start number end number 
                     —  opcode start number end number 
                     —  pir (number | keyword)
               —  out-profile-rate 
                  —  log-events boolean
                  —  pir (number | keyword)
               —  overall-rate (number | keyword)
               —  per-source-parameters 
                  —  ip-src-monitoring 
                     —  limit-dhcp-ci-addr-zero boolean
               —  per-source-rate (number | keyword)
            —  port-overall-rate 
               —  action-low-priority boolean
               —  pir (number | keyword)
            —  protocol-protection 
               —  allow-sham-links boolean
               —  block-pim-tunneled boolean
         —  dist-cpu-protection 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  policy string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  description string
               —  local-monitoring-policer string 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  description string
                  —  exceed-action keyword
                  —  log-events keyword
                  —  rate 
                     —  kbps 
                        —  limit (keyword | number)
                        —  mbs number
                     —  packets 
                        —  initial-delay number
                        —  limit (keyword | number)
                        —  within number
               —  protocol keyword 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  dynamic-parameters 
                     —  detection-time number
                     —  exceed-action 
                        —  action keyword
                        —  hold-down (keyword | number)
                     —  log-events keyword
                     —  rate 
                        —  kbps 
                           —  limit (keyword | number)
                           —  mbs number
                        —  packets 
                           —  initial-delay number
                           —  limit (keyword | number)
                           —  within number
                  —  enforcement 
                     —  dynamic 
                        —  mon-policer-name reference
                     —  dynamic-local-mon-bypass 
                     —  static 
                        —  policer-name reference
               —  static-policer string 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  description string
                  —  detection-time number
                  —  exceed-action 
                     —  action keyword
                     —  hold-down (keyword | number)
                  —  log-events keyword
                  —  rate 
                     —  kbps 
                        —  limit (keyword | number)
                        —  mbs number
                     —  packets 
                        —  initial-delay number
                        —  limit (keyword | number)
                        —  within number
               —  type keyword
         —  dot1x 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  radius-policy string 
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  retry number
               —  server number 
                  —  accounting-port number
                  —  address string
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  authentication-port number
                  —  secret string
                  —  type keyword
               —  source-address string
               —  timeout number
         —  ftp-server boolean
         —  hash-control 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  management-interface 
               —  classic-cli 
                  —  read-algorithm keyword
                  —  write-algorithm keyword
               —  grpc 
                  —  hash-algorithm keyword
               —  md-cli 
                  —  hash-algorithm keyword
               —  netconf 
                  —  hash-algorithm keyword
         —  keychains 
            —  keychain string 
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  bidirectional 
                  —  entry number 
                     —  admin-state keyword
                     —  algorithm keyword
                     —  apply-groups reference
                     —  apply-groups-exclude reference
                     —  authentication-key string
                     —  begin-time string
                     —  option keyword
                     —  tolerance (number | keyword)
               —  description string
               —  receive 
                  —  entry number 
                     —  admin-state keyword
                     —  algorithm keyword
                     —  apply-groups reference
                     —  apply-groups-exclude reference
                     —  authentication-key string
                     —  begin-time string
                     —  end-time string
                     —  tolerance (number | keyword)
               —  send 
                  —  entry number 
                     —  admin-state keyword
                     —  algorithm keyword
                     —  apply-groups reference
                     —  apply-groups-exclude reference
                     —  authentication-key string
                     —  begin-time string
               —  tcp-option-number 
                  —  receive keyword
                  —  send keyword
         —  management 
            —  allow-ftp boolean
            —  allow-grpc boolean
            —  allow-netconf boolean
            —  allow-ssh boolean
            —  allow-telnet boolean
            —  allow-telnet6 boolean
            —  apply-groups reference
            —  apply-groups-exclude reference
         —  management-access-filter 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  ip-filter 
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  default-action keyword
               —  entry number 
                  —  action keyword
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  description string
                  —  log-events boolean
                  —  match 
                     —  dst-port 
                        —  mask number
                        —  port number
                     —  mgmt-port 
                        —  cpm 
                        —  lag string
                        —  port-id string
                     —  protocol (number | keyword)
                     —  router-instance string
                     —  src-ip 
                        —  address (ipv4-prefix | ipv4-address)
                        —  ip-prefix-list reference
                        —  mask string
                     —  src-port 
                        —  mask number
                        —  port number
            —  ipv6-filter 
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  default-action keyword
               —  entry number 
                  —  action keyword
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  description string
                  —  log-events boolean
                  —  match 
                     —  dst-port 
                        —  mask number
                        —  port number
                     —  flow-label number
                     —  mgmt-port 
                        —  cpm 
                        —  lag string
                        —  port-id string
                     —  next-header (number | keyword)
                     —  router-instance string
                     —  src-ip 
                        —  address (ipv6-prefix | ipv6-address)
                        —  ipv6-prefix-list reference
                        —  mask string
                     —  src-port 
                        —  mask number
                        —  port number
            —  mac-filter 
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  default-action keyword
               —  entry number 
                  —  action keyword
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  description string
                  —  log-events boolean
                  —  match 
                     —  cfm-opcode 
                        —  eq number
                        —  gt number
                        —  lt number
                        —  range 
                           —  end number
                           —  start number
                     —  dot1p 
                        —  mask number
                        —  priority number
                     —  dst-mac 
                        —  address string
                        —  mask string
                     —  etype string
                     —  frame-type keyword
                     —  llc-dsap 
                        —  dsap number
                        —  mask number
                     —  llc-ssap 
                        —  mask number
                        —  ssap number
                     —  service string
                     —  snap-oui keyword
                     —  snap-pid number
                     —  src-mac 
                        —  address string
                        —  mask string
         —  per-peer-queuing boolean
         —  pki 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  ca-profile string 
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  auto-crl-update 
                  —  admin-state keyword
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  crl-urls 
                     —  url-entry number 
                        —  apply-groups reference
                        —  apply-groups-exclude reference
                        —  transmission-profile reference
                        —  url http-url-path-loose
                  —  periodic-update-interval number
                  —  pre-update-time number
                  —  retry-interval number
                  —  schedule-type keyword
               —  cert-file string
               —  cmpv2 
                  —  accept-unprotected-message 
                     —  error-message boolean
                     —  pkiconf-message boolean
                  —  always-set-sender-for-ir boolean
                  —  http 
                     —  response-timeout number
                     —  version keyword
                  —  key-list 
                     —  key string 
                        —  apply-groups reference
                        —  apply-groups-exclude reference
                        —  password string
                  —  recipient-subject string
                  —  response-signing-cert string
                  —  response-signing-use-extracert 
                  —  same-recipient-nonce-for-poll-request boolean
                  —  signing-cert-subject string
                  —  url 
                     —  service-name string
                     —  transmission-profile reference
                     —  url-string http-optional-url-loose
                  —  use-ca-subject 
               —  crl-file string
               —  description string
               —  ocsp 
                  —  responder-url http-optional-url-loose
                  —  service-name string
                  —  transmission-profile reference
               —  revocation-check keyword
            —  certificate-auto-update string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  key-file-name string
               —  profile reference
            —  certificate-display-format keyword
            —  certificate-expiration-warning 
               —  hours number
               —  repeat-hours number
            —  certificate-update-profile string 
               —  after-issue number
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  before-expiry number
               —  cmpv2 
                  —  ca-profile reference
               —  dsa 
                  —  key-size number
               —  ecdsa 
                  —  curve keyword
               —  est 
                  —  est-profile reference
               —  hash-algorithm keyword
               —  retry-interval number
               —  rsa 
                  —  key-size number
               —  same-as-existing-key 
            —  common-name-list string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  common-name number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  cn-type keyword
                  —  cn-value string
            —  crl-expiration-warning 
               —  hours number
               —  repeat-hours number
            —  est-profile string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  check-id-kp-cmcra-only boolean
               —  client-tls-profile string
               —  http-authentication 
                  —  password string
                  —  username string
               —  server 
                  —  fqdn string
                  —  ipv4 string
                  —  ipv6 (ipv4-address-no-zone | ipv6-address-no-zone)
                  —  port number
               —  transmission-profile string
            —  imported-format keyword
            —  maximum-cert-chain-depth number
         —  python-script 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  authorization 
               —  cron 
                  —  cli-user reference
               —  event-handler 
                  —  cli-user reference
         —  snmp 
            —  access string context string security-model keyword security-level keyword 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  notify string
               —  prefix-match keyword
               —  read string
               —  write string
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  attempts 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  count number
               —  lockout number
               —  time number
            —  community string 
               —  access-permissions keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  source-access-list reference
               —  version keyword
            —  source-access-list string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  source-host string 
                  —  address (ipv4-address-no-zone | ipv6-address-no-zone)
                  —  apply-groups reference
                  —  apply-groups-exclude reference
            —  usm-community string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  group string
               —  source-access-list reference
            —  view string subtree string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  mask string
               —  type keyword
         —  source-address 
            —  ipv4 keyword 
               —  address string
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  interface-name string
            —  ipv6 keyword 
               —  address string
               —  apply-groups reference
               —  apply-groups-exclude reference
         —  ssh 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  authentication-method 
               —  server 
                  —  public-key-only boolean
            —  client-cipher-list-v2 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  cipher number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  name keyword
            —  client-kex-list-v2 
               —  kex number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  name keyword
            —  client-mac-list-v2 
               —  mac number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  name keyword
            —  key-re-exchange 
               —  client 
                  —  admin-state keyword
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  mbytes (number | keyword)
                  —  minutes (number | keyword)
               —  server 
                  —  admin-state keyword
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  mbytes (number | keyword)
                  —  minutes (number | keyword)
            —  permit-empty-passwords boolean
            —  preserve-key boolean
            —  server-admin-state keyword
            —  server-cipher-list-v2 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  cipher number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  name keyword
            —  server-kex-list-v2 
               —  kex number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  name keyword
            —  server-mac-list-v2 
               —  mac number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  name keyword
         —  system-passwords 
            —  admin-password string
            —  apply-groups reference
            —  apply-groups-exclude reference
         —  tech-support 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  ts-location (ts-sat-url | cflash-url | string)
         —  telnet-server boolean
         —  telnet6-server boolean
         —  tls 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  cert-profile string 
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  entry number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  certificate-file string
                  —  key-file string
                  —  send-chain 
                     —  ca-profile reference 
            —  client-cipher-list string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  tls12-cipher number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  name keyword
               —  tls13-cipher number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  name keyword
            —  client-group-list string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  tls13-group number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  name keyword
            —  client-signature-list string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  tls13-signature number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  name keyword
            —  client-tls-profile string 
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  cert-profile reference
               —  cipher-list reference
               —  group-list reference
               —  protocol-version keyword
               —  signature-list reference
               —  status-verify 
                  —  default-result keyword
               —  trust-anchor-profile reference
            —  server-cipher-list string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  tls12-cipher number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  name keyword
               —  tls13-cipher number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  name keyword
            —  server-group-list string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  tls13-group number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  name keyword
            —  server-signature-list string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  tls13-signature number 
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  name keyword
            —  server-tls-profile string 
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  authenticate-client 
                  —  common-name-list reference
                  —  trust-anchor-profile reference
               —  cert-profile reference
               —  cipher-list reference
               —  group-list reference
               —  protocol-version keyword
               —  signature-list reference
               —  status-verify 
                  —  default-result keyword
               —  tls-re-negotiate-timer number
            —  trust-anchor-profile string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  trust-anchor reference 
         —  user-params 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  attempts 
               —  count number
               —  lockout number
               —  time number
            —  authentication-order 
               —  exit-on-reject boolean
               —  order keyword
            —  local-user 
               —  password 
                  —  aging number
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  complexity-rules 
                     —  allow-user-name boolean
                     —  credits 
                        —  lowercase number
                        —  numeric number
                        —  special-character number
                        —  uppercase number
                     —  minimum-classes number
                     —  minimum-length number
                     —  repeated-characters number
                     —  required 
                        —  lowercase number
                        —  numeric number
                        —  special-character number
                        —  uppercase number
                  —  hashing keyword
                  —  history-size number
                  —  minimum-age number
                  —  minimum-change number
               —  user string 
                  —  access 
                     —  console boolean
                     —  ftp boolean
                     —  grpc boolean
                     —  li boolean
                     —  netconf boolean
                     —  snmp boolean
                  —  apply-groups reference
                  —  apply-groups-exclude reference
                  —  cli-engine keyword
                  —  console 
                     —  cannot-change-password boolean
                     —  login-exec (sat-url | cflash-url | ftp-tftp-url | filename)
                     —  member reference
                     —  new-password-at-login boolean
                  —  home-directory (sat-url | cflash-without-slot-url)
                  —  password string
                  —  public-keys 
                     —  ecdsa 
                        —  ecdsa-key number 
                           —  apply-groups reference
                           —  apply-groups-exclude reference
                           —  description string
                           —  key-value string
                     —  rsa 
                        —  rsa-key number 
                           —  apply-groups reference
                           —  apply-groups-exclude reference
                           —  description string
                           —  key-value string
                  —  restricted-to-home boolean
                  —  save-when-restricted boolean
                  —  snmp 
                     —  apply-groups reference
                     —  apply-groups-exclude reference
                     —  authentication 
                        —  authentication-key string
                        —  authentication-protocol keyword
                        —  privacy 
                           —  privacy-key string
                           —  privacy-protocol keyword
                     —  group string
                  —  ssh-authentication-method 
                     —  server 
                        —  public-key-only keyword
         —  vprn-network-exceptions 
            —  count number
            —  window number
      —  selective-fib boolean
      —  software-repository string 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  description string
         —  primary-location string
         —  secondary-location string
         —  tertiary-location string
      —  switch-fabric 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  failure-recovery 
            —  admin-state keyword
         —  sfm-loss-threshold number
      —  telemetry 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  destination-group string 
            —  allow-unsecure-connection 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  description string
            —  destination (ipv4-address-no-zone | ipv6-address-no-zone | fully-qualified-domain-name) port number 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  router-instance string
            —  tcp-keepalive 
               —  admin-state keyword
               —  idle-time number
               —  interval number
               —  retries number
            —  tls-client-profile reference
         —  notification-bundling 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  max-msg-count number
            —  max-time-granularity number
         —  persistent-subscriptions 
            —  subscription string 
               —  admin-state keyword
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  description string
               —  destination-group reference
               —  encoding keyword
               —  local-source-address (ipv4-address-no-zone | ipv6-address-no-zone)
               —  mode keyword
               —  originated-qos-marking keyword
               —  sample-interval number
               —  sensor-group reference
         —  sensor-groups 
            —  sensor-group string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  description string
               —  path string 
      —  thresholds 
         —  cflash-cap-alarm-percent string 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  falling-threshold number
            —  interval number
            —  rising-threshold number
            —  rmon-event-type keyword
            —  startup-alarm keyword
         —  cflash-cap-warn-percent string 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  falling-threshold number
            —  interval number
            —  rising-threshold number
            —  rmon-event-type keyword
            —  startup-alarm keyword
         —  kb-memory-use-alarm 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  falling-threshold number
            —  interval number
            —  rising-threshold number
            —  rmon-event-type keyword
            —  startup-alarm keyword
         —  kb-memory-use-warn 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  falling-threshold number
            —  interval number
            —  rising-threshold number
            —  rmon-event-type keyword
            —  startup-alarm keyword
         —  rmon 
            —  alarm number 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  falling-event number
               —  falling-threshold number
               —  interval number
               —  owner string
               —  rising-event number
               —  rising-threshold number
               —  sample-type keyword
               —  startup-alarm keyword
               —  variable-oid string
            —  event number 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  description string
               —  event-type keyword
               —  owner string
      —  time 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  dst-zone string 
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  end 
               —  day keyword
               —  hours-minutes string
               —  month keyword
               —  week keyword
            —  offset number
            —  start 
               —  day keyword
               —  hours-minutes string
               —  month keyword
               —  week keyword
         —  ntp 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  authentication-check boolean
            —  authentication-key number 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  key string
               —  type keyword
            —  broadcast reference interface-name string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  key-id reference
               —  ttl number
               —  version number
            —  broadcast-client string interface-name string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  authenticate boolean
            —  multicast 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  key-id reference
               —  version number
            —  multicast-client 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  authenticate boolean
            —  ntp-server 
               —  authenticate boolean
            —  peer (ipv4-address-no-zone | ipv6-address-no-zone) router-instance string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  key-id reference
               —  prefer boolean
               —  version number
            —  server (ipv4-address-no-zone | ipv6-address-no-zone | keyword) router-instance string 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  key-id reference
               —  prefer boolean
               —  version number
         —  prefer-local-time boolean
         —  sntp 
            —  admin-state keyword
            —  apply-groups reference
            —  apply-groups-exclude reference
            —  server (ipv4-address-no-zone | ipv6-address-no-zone) 
               —  apply-groups reference
               —  apply-groups-exclude reference
               —  interval number
               —  prefer boolean
               —  version number
            —  sntp-state keyword
         —  zone 
            —  non-standard 
               —  name string
               —  offset string
            —  standard 
               —  name keyword
      —  transmission-profile string 
         —  apply-groups reference
         —  apply-groups-exclude reference
         —  http-version keyword
         —  ipv4-source-address string
         —  ipv6-source-address string
         —  redirection number
         —  retry number
         —  router-instance string
         —  timeout number
      —  usb keyword 
         —  admin-state keyword
         —  apply-groups reference
         —  apply-groups-exclude reference