set fips-mode enable 
set fips-mode self-test afterkeygen 
set fips-mode self-test interval <NUMBER> 
set key protection enable 
set all 
set vendor-def 
set envar <STRING> 
set clock dst-off 
set clock dst recurring start-weekday last <NUMBER> <NUMBER> <TIME> end-weekday last <NUMBER> <NUMBER> <TIME> 
set clock dst recurring start-weekday last <NUMBER> <NUMBER> <TIME> end-weekday last <NUMBER> <NUMBER> <TIME> offset <NUMBER> 
set clock dst recurring start-weekday last <NUMBER> <NUMBER> <TIME> end-weekday <NUMBER> <NUMBER> ...
set clock dst recurring start-weekday <NUMBER> <NUMBER> ...
set clock dst recurring start-date <NUMBER> <NUMBER> <TIME> end-date <NUMBER> <NUMBER> <TIME> ...
set clock dst start-date <NUMBER> <NUMBER> <NUMBER> <TIME> end-date <NUMBER> <NUMBER> <NUMBER> <TIME> ...
set clock timezone <NUMBER> <NUMBER> 
set clock timezone <NUMBER> 
set clock ntp 
set clock <DAY> <TIME> 
set tail-route 
set vrouter <NAME_STRING> 
set vrouter <NAME_STRING> router-id <IPv4> 
set vrouter <NAME_STRING> router-id <NUMBER> 
set vrouter <NAME_STRING> protocol pim enable 
set vrouter <NAME_STRING> protocol pim spt-threshold <NUMBER> 
set vrouter <NAME_STRING> protocol pim spt-threshold infinity 
set vrouter <NAME_STRING> protocol pim accept-group <NUMBER> 
set vrouter <NAME_STRING> protocol pim mgroup <IPv4> accept-source <NUMBER> 
set vrouter <NAME_STRING> protocol pim mgroup <IPv4> accept-rp ...
set vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> rp proxy 
set vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> rp address <IPv4> mgroup-list <NUMBER> always 
set vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> rp address <IPv4> mgroup-list <NUMBER> 
set vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> rp candidate interface <IF_NAME_GENERAL2> mgroup-list <NUMBER> priority <NUMBER> holdtime <NUMBER> 
set vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> rp candidate interface <IF_NAME_GENERAL2> mgroup-list <NUMBER> priority <NUMBER> 
set vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> rp candidate interface <IF_NAME_GENERAL2> mgroup-list <NUMBER> holdtime ...
set vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> rp candidate interface <IF_NAME_GENERAL2> 
set vrouter <NAME_STRING> protocol pim 
set vrouter <NAME_STRING> protocol nhrp retry-interval <NUMBER> 
set vrouter <NAME_STRING> protocol nhrp max-query <NUMBER> 
set vrouter <NAME_STRING> protocol nhrp holdtime <NUMBER> 
set vrouter <NAME_STRING> protocol nhrp cache <IPv4_NUM> 
set vrouter <NAME_STRING> protocol nhrp acvpn-profile <STRING> 
set vrouter <NAME_STRING> protocol nhrp nhs <IPv4> 
set vrouter <NAME_STRING> protocol nhrp 
set vrouter <NAME_STRING> protocol rip enable 
set vrouter <NAME_STRING> protocol rip default-metric <NUMBER> 
set vrouter <NAME_STRING> protocol rip route-map <NAME_STRING> in 
set vrouter <NAME_STRING> protocol rip route-map <NAME_STRING> out 
set vrouter <NAME_STRING> protocol rip update-timer <NUMBER> 
set vrouter <NAME_STRING> protocol rip invalid-timer <NUMBER> 
set vrouter <NAME_STRING> protocol rip hold-timer <NUMBER> 
set vrouter <NAME_STRING> protocol rip flush-timer <NUMBER> 
set vrouter <NAME_STRING> protocol rip trusted-neighbors <NUMBER> 
set vrouter <NAME_STRING> protocol rip advertise-def-route always metric <NUMBER> preserve-metric 
set vrouter <NAME_STRING> protocol rip advertise-def-route always metric <NUMBER> 
set vrouter <NAME_STRING> protocol rip advertise-def-route always 
set vrouter <NAME_STRING> protocol rip advertise-def-route metric <NUMBER> 
set vrouter <NAME_STRING> protocol rip advertise-def-route preserve-metric 
set vrouter <NAME_STRING> protocol rip reject-default-route 
set vrouter <NAME_STRING> protocol rip threshold-update <NUMBER> 
set vrouter <NAME_STRING> protocol rip max-neighbor-count <NUMBER> 
set vrouter <NAME_STRING> protocol rip no-source-validation 
set vrouter <NAME_STRING> protocol rip alt-route <NUMBER> 
set vrouter <NAME_STRING> protocol rip retransmit-timer <NUMBER> retry-count <NUMBER> 
set vrouter <NAME_STRING> protocol rip retransmit-timer <NUMBER> 
set vrouter <NAME_STRING> protocol rip poll-timer <NUMBER> retry-count <NUMBER> 
set vrouter <NAME_STRING> protocol rip poll-timer <NUMBER> 
set vrouter <NAME_STRING> protocol rip version v1 
set vrouter <NAME_STRING> protocol rip version v2 
set vrouter <NAME_STRING> protocol rip summary-ip <IPv4> <NETMASK> metric <NUMBER> 
set vrouter <NAME_STRING> protocol rip summary-ip <IPv4> <NETMASK> 
set vrouter <NAME_STRING> protocol rip summary-ip <IPv4_NUM> ...
set vrouter <NAME_STRING> protocol rip redistribute route-map <NAME_STRING> protocol bgp 
set vrouter <NAME_STRING> protocol rip redistribute route-map <NAME_STRING> protocol ospf 
set vrouter <NAME_STRING> protocol rip redistribute route-map <NAME_STRING> protocol connected 
set vrouter <NAME_STRING> protocol rip redistribute route-map <NAME_STRING> protocol static 
set vrouter <NAME_STRING> protocol rip redistribute route-map <NAME_STRING> protocol imported 
set vrouter <NAME_STRING> protocol rip redistribute route-map <NAME_STRING> protocol discovered 
set vrouter <NAME_STRING> protocol rip redistribute route-map <NAME_STRING> protocol connected ...
set vrouter <NAME_STRING> protocol rip 
set vrouter <NAME_STRING> protocol bgp <NUMBER> 
set vrouter <NAME_STRING> protocol bgp enable 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> med <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> activate 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> weight <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> send-community 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> route-map <NAME_STRING> in 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> route-map <NAME_STRING> out 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> advertise-def-route 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> reject-default-route 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> nhself-enable 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> reflector-client 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> adv-interval <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> remove-private-as 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> force-reconnect 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> hold-time <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> retry-time <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> remove-private-as ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> force-reconnect ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> adv-interval ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> keepalive <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> adv-interval ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> keepalive ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> advertise-def-route ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> md5-authentication <STRING> 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> ebgp-multihop <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> advertise-def-route ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> md5-authentication ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> weight ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> peer-group <STRING> 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> weight ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> peer-group ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> med ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> remote-as <NUMBER> local-ip <IPvx_NUM> outgoing-interface <IF_NAME_GENERAL2> 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> remote-as <NUMBER> local-ip <IPvx_NUM> 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> remote-as <NUMBER> local-ip <IPv4_NUM> outgoing-interface ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> remote-as <NUMBER> src-interface <IF_NAME_GENERAL> outgoing-interface ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> remote-as <NUMBER> outgoing-interface ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> enable 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> activate ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> remote-as ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> weight ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> send-community 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> route-map <NAME_STRING> in 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> route-map <NAME_STRING> out 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> nhself-enable 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> reflector-client 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> keepalive ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> hold-time ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> retry-time ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> keepalive ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> nhself-enable ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> md5-authentication <STRING> 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> ebgp-multihop ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> force-reconnect 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> nhself-enable ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> md5-authentication ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> weight ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> remote-as <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> weight ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group <STRING> remote-as ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPv4> ...
set vrouter <NAME_STRING> protocol bgp ipv4 neighbor peer-group ...
set vrouter <NAME_STRING> protocol bgp ipv4 network <IPv4> <NETMASK> weight <NUMBER> no-check 
set vrouter <NAME_STRING> protocol bgp ipv4 network <IPv4> <NETMASK> weight <NUMBER> check <IPv4> <NETMASK> 
set vrouter <NAME_STRING> protocol bgp ipv4 network <IPv4> <NETMASK> weight <NUMBER> check <IPv4_NUM> 
set vrouter <NAME_STRING> protocol bgp ipv4 network <IPv4> <NETMASK> weight <NUMBER> check <IPv6_NUM> 
set vrouter <NAME_STRING> protocol bgp ipv4 network <IPv4> <NETMASK> weight <NUMBER> check <IPv4_NUM> ...
set vrouter <NAME_STRING> protocol bgp ipv4 network <IPv4> <NETMASK> weight <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 network <IPv4> <NETMASK> weight 
set vrouter <NAME_STRING> protocol bgp ipv4 network <IPv4> <NETMASK> route-map <STRING> no-check ...
set vrouter <NAME_STRING> protocol bgp ipv4 network <IPv4> <NETMASK> no-check ...
set vrouter <NAME_STRING> protocol bgp ipv4 network <IPv4_NUM> weight ...
set vrouter <NAME_STRING> protocol bgp ipv4 network <IPv6_NUM> weight ...
set vrouter <NAME_STRING> protocol bgp ipv4 network <IPv4_NUM> ...
set vrouter <NAME_STRING> protocol bgp ipv4 aggregate <IPv4> <NETMASK> as-set summary-only advertise-map <STRING> attribute-map <STRING> 
set vrouter <NAME_STRING> protocol bgp ipv4 aggregate <IPv4> <NETMASK> as-set summary-only advertise-map <STRING> 
set vrouter <NAME_STRING> protocol bgp ipv4 aggregate <IPv4> <NETMASK> as-set summary-only attribute-map ...
set vrouter <NAME_STRING> protocol bgp ipv4 aggregate <IPv4> <NETMASK> as-set suppress-map <STRING> advertise-map ...
set vrouter <NAME_STRING> protocol bgp ipv4 aggregate <IPv4> <NETMASK> as-set advertise-map ...
set vrouter <NAME_STRING> protocol bgp ipv4 aggregate <IPv4> <NETMASK> summary-only ...
set vrouter <NAME_STRING> protocol bgp ipv4 aggregate <IPv4_NUM> ...
set vrouter <NAME_STRING> protocol bgp ipv4 aggregate 
set vrouter <NAME_STRING> protocol bgp ipv4 aggregate <IPv6_NUM> ...
set vrouter <NAME_STRING> protocol bgp ipv4 aggregate 
set vrouter <NAME_STRING> protocol bgp ipv4 aggregate <IPv4_NUM> ...
set vrouter <NAME_STRING> protocol bgp ipv4 local-pref <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 med ...
set vrouter <NAME_STRING> protocol bgp ipv4 synchronization 
set vrouter <NAME_STRING> protocol bgp ipv4 flap-damping 
set vrouter <NAME_STRING> protocol bgp ipv4 advertise-def-route 
set vrouter <NAME_STRING> protocol bgp ipv4 reject-default-route 
set vrouter <NAME_STRING> protocol bgp ipv4 redistribute route-map <NAME_STRING> protocol ospf 
set vrouter <NAME_STRING> protocol bgp ipv4 redistribute route-map <NAME_STRING> protocol rip 
set vrouter <NAME_STRING> protocol bgp ipv4 redistribute route-map <NAME_STRING> protocol connected 
set vrouter <NAME_STRING> protocol bgp ipv4 redistribute route-map <NAME_STRING> protocol static 
set vrouter <NAME_STRING> protocol bgp ipv4 redistribute route-map <NAME_STRING> protocol discovered 
set vrouter <NAME_STRING> protocol bgp ipv4 redistribute route-map <NAME_STRING> protocol imported 
set vrouter <NAME_STRING> protocol bgp ipv4 redistribute route-map <NAME_STRING> protocol ripng 
set vrouter <NAME_STRING> protocol bgp ipv4 redistribute route-map <NAME_STRING> protocol connected ...
set vrouter <NAME_STRING> protocol bgp ipv4 redistribute route-map <NAME_STRING> protocol rip ...
set vrouter <NAME_STRING> protocol bgp ipv4 redistribute route-map <NAME_STRING> protocol ...
set vrouter <NAME_STRING> protocol bgp ipv4 redistribute route-map <NAME_STRING> protocol ospf ...
set vrouter <NAME_STRING> protocol bgp ipv4 always-compare-med 
set vrouter <NAME_STRING> protocol bgp ipv4 
set vrouter <NAME_STRING> protocol bgp ipv4 always-compare-med ...
set vrouter <NAME_STRING> protocol bgp ipv4 redistribute ...
set vrouter <NAME_STRING> protocol bgp ipv4 reflector cluster-id <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 reflector 
set vrouter <NAME_STRING> protocol bgp ipv4 redistribute ...
set vrouter <NAME_STRING> protocol bgp ipv4 reflector ...
set vrouter <NAME_STRING> protocol bgp ipv4 ...
set vrouter <NAME_STRING> protocol bgp ipv4 community-list <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 community-list <NUMBER> permit <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 community-list <NUMBER> permit no-export 
set vrouter <NAME_STRING> protocol bgp ipv4 community-list <NUMBER> permit no-advertise 
set vrouter <NAME_STRING> protocol bgp ipv4 community-list <NUMBER> permit no-export-subconfed 
set vrouter <NAME_STRING> protocol bgp ipv4 community-list <NUMBER> permit none 
set vrouter <NAME_STRING> protocol bgp ipv4 community-list <NUMBER> permit as <NUMBER> <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 community-list <NUMBER> deny <NUMBER> ...
set vrouter <NAME_STRING> protocol bgp ipv4 community-list <NUMBER> default-permit 
set vrouter <NAME_STRING> protocol bgp ipv4 community-list <NUMBER> permit ...
set vrouter <NAME_STRING> protocol bgp ipv4 ...
set vrouter <NAME_STRING> protocol bgp ipv4 community-list ...
set vrouter <NAME_STRING> protocol bgp ipv4 synchronization ...
set vrouter <NAME_STRING> protocol bgp ipv4 confederation id <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 confederation peer <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 confederation rfc3065 
set vrouter <NAME_STRING> protocol bgp ipv4 synchronization ...
set vrouter <NAME_STRING> protocol bgp ipv4 confederation ...
set vrouter <NAME_STRING> protocol bgp ipv4 network ...
set vrouter <NAME_STRING> protocol bgp ipv4 keepalive ...
set vrouter <NAME_STRING> protocol bgp ipv4 hold-time ...
set vrouter <NAME_STRING> protocol bgp ipv4 retry-time ...
set vrouter <NAME_STRING> protocol bgp ipv4 as-path-access-list <NUMBER> 
set vrouter <NAME_STRING> protocol bgp ipv4 as-path-access-list <NUMBER> permit <STRING> 
set vrouter <NAME_STRING> protocol bgp ipv4 as-path-access-list <NUMBER> deny <STRING> ...
set vrouter <NAME_STRING> protocol bgp ipv4 as-path-access-list <NUMBER> permit ...
set vrouter <NAME_STRING> protocol bgp ipv4 network ...
set vrouter <NAME_STRING> protocol bgp ipv4 keepalive ...
set vrouter <NAME_STRING> protocol bgp ipv6 neighbor ...
set vrouter <NAME_STRING> protocol bgp neighbor ...
set vrouter <NAME_STRING> protocol bgp <NUMBER> 
set vrouter <NAME_STRING> protocol bgp enable ...
set vrouter <NAME_STRING> protocol ospf enable 
set vrouter <NAME_STRING> protocol ospf auto-vlink 
set vrouter <NAME_STRING> protocol ospf rfc-1583 
set vrouter <NAME_STRING> protocol ospf reject-default-route 
set vrouter <NAME_STRING> protocol ospf hello-threshold <NUMBER> 
set vrouter <NAME_STRING> protocol ospf lsa-threshold <NUMBER> <NUMBER> 
set vrouter <NAME_STRING> protocol ospf area <IPv4> range <IPv4> <NETMASK> advertise 
set vrouter <NAME_STRING> protocol ospf area <IPv4> range <IPv4> <NETMASK> no-advertise 
set vrouter <NAME_STRING> protocol ospf area <IPv4> range <IPv4_NUM> ...
set vrouter <NAME_STRING> protocol ospf area <IPv4> 
set vrouter <NAME_STRING> protocol ospf area <IPv4> metric-default-route <NUMBER> 
set vrouter <NAME_STRING> protocol ospf area <IPv4> no-summary 
set vrouter <NAME_STRING> protocol ospf area <IPv4> type-default-route 1 
set vrouter <NAME_STRING> protocol ospf area <IPv4> type-default-route 2 
set vrouter <NAME_STRING> protocol ospf area <IPv4> 
set vrouter <NAME_STRING> protocol ospf area <IPv4> stub 
set vrouter <NAME_STRING> protocol ospf area <IPv4> nssa 
set vrouter <NAME_STRING> protocol ospf area <IPv4> range ...
set vrouter <NAME_STRING> protocol ospf area <IPv4> 
set vrouter <NAME_STRING> protocol ospf area <NUMBER> ...
set vrouter <NAME_STRING> protocol ospf advertise-def-route always metric <NUMBER> preserve-metric metric-type 1 
set vrouter <NAME_STRING> protocol ospf advertise-def-route always metric <NUMBER> preserve-metric metric-type 2 
set vrouter <NAME_STRING> protocol ospf advertise-def-route always metric <NUMBER> metric-type ...
set vrouter <NAME_STRING> protocol ospf advertise-def-route metric <NUMBER> metric-type ...
set vrouter <NAME_STRING> protocol ospf advertise-def-route preserve-metric metric-type ...
set vrouter <NAME_STRING> protocol ospf vlink area-id <IPv4> router-id <IPv4> transit-delay <NUMBER> 
set vrouter <NAME_STRING> protocol ospf vlink area-id <IPv4> router-id <IPv4> retransmit-interval <NUMBER> 
set vrouter <NAME_STRING> protocol ospf vlink area-id <IPv4> router-id <IPv4> hello-interval <NUMBER> 
set vrouter <NAME_STRING> protocol ospf vlink area-id <IPv4> router-id <IPv4> dead-interval <NUMBER> 
set vrouter <NAME_STRING> protocol ospf vlink area-id <IPv4> router-id <IPv4> authentication md5 key-id <NUMBER> 
set vrouter <NAME_STRING> protocol ospf vlink area-id <IPv4> router-id <IPv4> authentication md5 
set vrouter <NAME_STRING> protocol ospf vlink area-id <IPv4> router-id <IPv4> authentication md5 <STRING> key-id ...
set vrouter <NAME_STRING> protocol ospf vlink area-id <IPv4> router-id <IPv4> authentication active-md5-key-id <NUMBER> 
set vrouter <NAME_STRING> protocol ospf vlink area-id <IPv4> router-id <IPv4> authentication password <STRING> 
set vrouter <NAME_STRING> protocol ospf vlink area-id <IPv4> router-id <IPv4> 
set vrouter <NAME_STRING> protocol ospf vlink area-id <IPv4> router-id <NUMBER> ...
set vrouter <NAME_STRING> protocol ospf vlink area-id <NUMBER> router-id ...
set vrouter <NAME_STRING> protocol ospf redistribute route-map <NAME_STRING> protocol bgp 
set vrouter <NAME_STRING> protocol ospf redistribute route-map <NAME_STRING> protocol rip 
set vrouter <NAME_STRING> protocol ospf redistribute route-map <NAME_STRING> protocol connected 
set vrouter <NAME_STRING> protocol ospf redistribute route-map <NAME_STRING> protocol static 
set vrouter <NAME_STRING> protocol ospf redistribute route-map <NAME_STRING> protocol imported 
set vrouter <NAME_STRING> protocol ospf redistribute route-map <NAME_STRING> protocol discovered 
set vrouter <NAME_STRING> protocol ospf retransmit dc non-dc <NUMBER> 
set vrouter <NAME_STRING> protocol ospf retransmit dc 
set vrouter <NAME_STRING> protocol ospf retransmit dc <NUMBER> non-dc ...
set vrouter <NAME_STRING> protocol ospf retransmit non-dc ...
set vrouter <NAME_STRING> protocol ospf summary-import ip <IPv4> <NETMASK> tag <IPv4> 
set vrouter <NAME_STRING> protocol ospf summary-import ip <IPv4> <NETMASK> tag <NUMBER> 
set vrouter <NAME_STRING> protocol ospf summary-import ip <IPv4> <NETMASK> 
set vrouter <NAME_STRING> protocol ospf summary-import ip <IPv4_NUM> ...
set vrouter <NAME_STRING> protocol ospf summary-import ip ...
set vrouter <NAME_STRING> protocol ospf 
set vrouter <NAME_STRING> protocol ospf rfc-1583 ...
set vrouter <NAME_STRING> add-default-route vrouter untrust-vr 
set vrouter <NAME_STRING> add-default-route vrouter trust-vr 
set vrouter <NAME_STRING> add-default-route vrouter untrust-vr ...
set vrouter <NAME_STRING> max-routes <NUMBER> 
set vrouter <NAME_STRING> adv-inact-interface 
set vrouter <NAME_STRING> route-lookup preference destination-routing <NUMBER> source-routing <NUMBER> sibr-routing <NUMBER> 
set vrouter <NAME_STRING> route-lookup preference destination-routing <NUMBER> source-routing <NUMBER> 
set vrouter <NAME_STRING> route-lookup preference destination-routing <NUMBER> sibr-routing ...
set vrouter <NAME_STRING> route-lookup preference source-routing ...
set vrouter <NAME_STRING> preference connected <NUMBER> 
set vrouter <NAME_STRING> preference static ...
set vrouter <NAME_STRING> preference auto-exported ...
set vrouter <NAME_STRING> preference imported ...
set vrouter <NAME_STRING> preference rip ...
set vrouter <NAME_STRING> preference ripng ...
set vrouter <NAME_STRING> preference ospf ...
set vrouter <NAME_STRING> preference ospf-e2 ...
set vrouter <NAME_STRING> preference ebgp ...
set vrouter <NAME_STRING> preference ibgp ...
set vrouter <NAME_STRING> preference nhrp ...
set vrouter <NAME_STRING> route source in-interface <IF_NAME_GENERAL3> <IPv4> <NETMASK> vrouter <NAME_STRING> 
set vrouter <NAME_STRING> route source in-interface <IF_NAME_GENERAL3> <IPv4> <NETMASK> vrouter <NAME_STRING> preference <NUMBER> metric <NUMBER> description <STRING> ...
set vrouter <NAME_STRING> route source in-interface <IF_NAME_GENERAL3> <IPv4> <NETMASK> vrouter <NAME_STRING> preference <NUMBER> metric <NUMBER> ...
set vrouter <NAME_STRING> route source in-interface <IF_NAME_GENERAL3> <IPv4> <NETMASK> vrouter <NAME_STRING> preference <NUMBER> metric <NUMBER> permanent description ...
set vrouter <NAME_STRING> route source in-interface <IF_NAME_GENERAL3> <IPv4> <NETMASK> vrouter <NAME_STRING> preference <NUMBER> metric <NUMBER> description ...
set vrouter <NAME_STRING> route source in-interface <IF_NAME_GENERAL3> <IPv4> <NETMASK> vrouter <NAME_STRING> preference <NUMBER> metric <NUMBER> ...
set vrouter <NAME_STRING> route source in-interface <IF_NAME_GENERAL3> <IPv4> <NETMASK> vrouter <NAME_STRING> preference <NUMBER> ...
set vrouter <NAME_STRING> route source in-interface <IF_NAME_GENERAL3> <IPv4> <NETMASK> vrouter <NAME_STRING> metric ...
set vrouter <NAME_STRING> route source in-interface <IF_NAME_GENERAL3> <IPv4> <NETMASK> interface <IF_NAME_GENERAL2> gateway <IPv4> ...
set vrouter <NAME_STRING> route source in-interface <IF_NAME_GENERAL3> <IPv4> <NETMASK> interface <IF_NAME_GENERAL2> ...
set vrouter <NAME_STRING> route source in-interface <IF_NAME_GENERAL3> <IPv4> <NETMASK> gateway ...
set vrouter <NAME_STRING> route source in-interface <IF_NAME_GENERAL3> <IPv4_NUM> vrouter ...
set vrouter <NAME_STRING> route source <IPv4> ...
set vrouter <NAME_STRING> route <IPv4> <NETMASK> vrouter <NAME_STRING> preference <NUMBER> metric <NUMBER> description <STRING> 
set vrouter <NAME_STRING> route <IPv4> <NETMASK> vrouter <NAME_STRING> preference <NUMBER> metric <NUMBER> 
set vrouter <NAME_STRING> route <IPv4> <NETMASK> vrouter <NAME_STRING> preference <NUMBER> metric <NUMBER> description ...
set vrouter <NAME_STRING> route <IPv4> <NETMASK> vrouter <NAME_STRING> preference <NUMBER> metric <NUMBER> permanent tag <NUMBER> description ...
set vrouter <NAME_STRING> route <IPv4> <NETMASK> vrouter <NAME_STRING> preference <NUMBER> metric <NUMBER> permanent description ...
set vrouter <NAME_STRING> route <IPv4> <NETMASK> vrouter <NAME_STRING> preference <NUMBER> metric <NUMBER> tag ...
set vrouter <NAME_STRING> route <IPv4> <NETMASK> vrouter <NAME_STRING> preference <NUMBER> ...
set vrouter <NAME_STRING> route <IPv4> <NETMASK> vrouter <NAME_STRING> metric ...
set vrouter <NAME_STRING> route <IPv4> <NETMASK> interface <IF_NAME_GENERAL> gateway <IPvx> ...
set vrouter <NAME_STRING> route <IPv4> <NETMASK> interface <IF_NAME_GENERAL> gateway <IPv4> ...
set vrouter <NAME_STRING> route <IPv4> <NETMASK> interface <IF_NAME_GENERAL> ...
set vrouter <NAME_STRING> route <IPv4> <NETMASK> gateway ...
set vrouter <NAME_STRING> route <IPv4> <NETMASK> 
set vrouter <NAME_STRING> route <IPv4> <NETMASK> gateway ...
set vrouter <NAME_STRING> route <IPvx_NUM> vrouter ...
set vrouter <NAME_STRING> route <IPv4_NUM> vrouter ...
set vrouter <NAME_STRING> import-from vrouter <NAME_STRING> route-map <NAME_STRING> protocol bgp 
set vrouter <NAME_STRING> import-from vrouter <NAME_STRING> route-map <NAME_STRING> protocol ospf 
set vrouter <NAME_STRING> import-from vrouter <NAME_STRING> route-map <NAME_STRING> protocol rip 
set vrouter <NAME_STRING> import-from vrouter <NAME_STRING> route-map <NAME_STRING> protocol ripng 
set vrouter <NAME_STRING> import-from vrouter <NAME_STRING> route-map <NAME_STRING> protocol connected 
set vrouter <NAME_STRING> import-from vrouter <NAME_STRING> route-map <NAME_STRING> protocol static 
set vrouter <NAME_STRING> import-from vrouter <NAME_STRING> route-map <NAME_STRING> protocol imported 
set vrouter <NAME_STRING> import-from vrouter <NAME_STRING> route-map <NAME_STRING> protocol discovered 
set vrouter <NAME_STRING> import-from vrouter <NAME_STRING> route-map <NAME_STRING> protocol rip ...
set vrouter <NAME_STRING> import-from vrouter <NAME_STRING> route-map <NAME_STRING> protocol ...
set vrouter <NAME_STRING> export-to vrouter <NAME_STRING> route-map ...
set vrouter <NAME_STRING> access-list <NUMBER> <IPvx_NUM> <NUMBER> 
set vrouter <NAME_STRING> access-list <NUMBER> default-route <NUMBER> ...
set vrouter <NAME_STRING> access-list <NUMBER> 
set vrouter <NAME_STRING> access-list <NUMBER> <IPv4> <NETMASK> <NUMBER> ...
set vrouter <NAME_STRING> access-list <NUMBER> <IPv4> default-route ...
set vrouter <NAME_STRING> access-list <NUMBER> <IPv4_NUM> <NUMBER> ...
set vrouter <NAME_STRING> access-list <NUMBER> default-route ...
set vrouter <NAME_STRING> access-list <NUMBER> permit default-route <NUMBER> 
set vrouter <NAME_STRING> access-list <NUMBER> permit ip <IPv6_NUM> <NUMBER> ...
set vrouter <NAME_STRING> access-list <NUMBER> permit ip <IPv6_NUM> ...
set vrouter <NAME_STRING> access-list <NUMBER> permit ip <IPv4> <NETMASK> <NUMBER> ...
set vrouter <NAME_STRING> access-list <NUMBER> permit ip <IPv4_NUM> <NUMBER> ...
set vrouter <NAME_STRING> access-list <NUMBER> deny default-route ...
set vrouter <NAME_STRING> access-list <NUMBER> 
set vrouter <NAME_STRING> access-list extended <NUMBER> entry <NUMBER> 
set vrouter <NAME_STRING> access-list extended <NUMBER> 
set vrouter <NAME_STRING> access-list extended <NUMBER> src-ip <IPv4> <NETMASK> dst-ip <IPv4> <NETMASK> src-port <NUMBER_RANGE> dst-port <NUMBER_RANGE> protocol tcp udp icmp any tos <NUMBER> entry <NUMBER> 
set vrouter <NAME_STRING> access-list extended <NUMBER> src-ip <IPv4> <NETMASK> dst-ip <IPv4> <NETMASK> src-port <NUMBER_RANGE> dst-port <NUMBER_RANGE> protocol tcp udp icmp any entry ...
set vrouter <NAME_STRING> access-list extended <NUMBER> src-ip <IPv4> <NETMASK> dst-ip <IPv4> <NETMASK> src-port <NUMBER_RANGE> dst-port <NUMBER_RANGE> protocol tcp udp icmp tos ...
set vrouter <NAME_STRING> access-list extended <NUMBER> src-ip <IPv4> <NETMASK> dst-ip <IPv4> <NETMASK> src-port <NUMBER_RANGE> dst-port <NUMBER_RANGE> protocol tcp udp any ...
set vrouter <NAME_STRING> access-list extended <NUMBER> src-ip <IPv4> <NETMASK> dst-ip <IPv4> <NETMASK> src-port <NUMBER_RANGE> dst-port <NUMBER_RANGE> protocol tcp icmp ...
set vrouter <NAME_STRING> access-list extended <NUMBER> src-ip <IPv4> <NETMASK> dst-ip <IPv4> <NETMASK> src-port <NUMBER_RANGE> dst-port <NUMBER_RANGE> protocol udp ...
set vrouter <NAME_STRING> access-list extended <NUMBER> src-ip <IPv4> <NETMASK> dst-ip <IPv4> <NETMASK> src-port <NUMBER_RANGE> dst-port <NUMBER_RANGE> tos ...
set vrouter <NAME_STRING> access-list extended <NUMBER> src-ip <IPv4> <NETMASK> dst-ip <IPv4> <NETMASK> src-port <NUMBER_RANGE> protocol ...
set vrouter <NAME_STRING> access-list extended <NUMBER> src-ip <IPv4> <NETMASK> dst-ip <IPv4> <NETMASK> dst-port ...
set vrouter <NAME_STRING> access-list extended <NUMBER> src-ip <IPv4> <NETMASK> dst-ip <IPv4_NUM> src-port ...
set vrouter <NAME_STRING> access-list extended <NUMBER> src-ip <IPv4> <NETMASK> src-port ...
set vrouter <NAME_STRING> access-list extended <NUMBER> src-ip <IPv4_NUM> dst-ip ...
set vrouter <NAME_STRING> access-list extended <NUMBER> dst-ip ...
set vrouter <NAME_STRING> access-list ipv6 <NUMBER> ...
set vrouter <NAME_STRING> access-list <NUMBER> ...
set vrouter <NAME_STRING> action-group <NAME_STRING> 
set vrouter <NAME_STRING> action-group <NAME_STRING> action-entry <NUMBER> 
set vrouter <NAME_STRING> action-group <NAME_STRING> next-interface <IF_NAME_GENERAL3> next-hop <IPv4> action-entry ...
set vrouter <NAME_STRING> action-group <NAME_STRING> next-interface <IF_NAME_GENERAL3> action-entry ...
set vrouter <NAME_STRING> action-group <NAME_STRING> next-hop ...
set vrouter <NAME_STRING> action-group name <NAME_STRING> ...
set vrouter <NAME_STRING> action-group <NAME_STRING> ...
set vrouter <NAME_STRING> match-group <NAME_STRING> 
set vrouter <NAME_STRING> match-group <NAME_STRING> match-entry <NUMBER> 
set vrouter <NAME_STRING> match-group <NAME_STRING> ext-acl <NUMBER> match-entry ...
set vrouter <NAME_STRING> match-group name <NAME_STRING> ...
set vrouter <NAME_STRING> match-group <NAME_STRING> ...
set vrouter <NAME_STRING> pbr policy <NAME_STRING> 
set vrouter <NAME_STRING> pbr policy <NAME_STRING> <NUMBER> 
set vrouter <NAME_STRING> pbr policy <NAME_STRING> match-group <NAME_STRING> action-group <NAME_STRING> <NUMBER> ...
set vrouter <NAME_STRING> pbr policy <NAME_STRING> action-group ...
set vrouter <NAME_STRING> pbr policy name <NAME_STRING> ...
set vrouter <NAME_STRING> pbr policy <NAME_STRING> ...
set vrouter <NAME_STRING> pbr <NAME_STRING> 
set vrouter <NAME_STRING> route-map <NAME_STRING> permit <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> deny <NUMBER> ...
set vrouter <NAME_STRING> route-map <NAME_STRING> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match interface <IF_NAME_GENERAL3> <IF_NAME_GENERAL3> <IF_NAME_GENERAL3> <IF_NAME_GENERAL3> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match interface <IF_NAME_GENERAL3> <IF_NAME_GENERAL3> <IF_NAME_GENERAL3> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match interface <IF_NAME_GENERAL3> <IF_NAME_GENERAL3> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match interface <IF_NAME_GENERAL3> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match ip <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match ip <NUMBER> <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match ip <NUMBER> <NUMBER> <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match ip <NUMBER> <NUMBER> <NUMBER> <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match next-hop <NUMBER> ...
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match metric <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match route-type internal-ospf type1-external-ospf type2-external-ospf 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match route-type internal-ospf type1-external-ospf 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match route-type internal-ospf type2-external-ospf ...
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match route-type type1-external-ospf ...
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match tag <IPv4> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match tag <IPv4> <IPv4> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match tag <IPv4> <IPv4> <IPv4> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match tag <IPv4> <IPv4> <IPv4> <IPv4> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match tag <IPv4> <IPv4> <IPv4> <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match tag <IPv4> <IPv4> <NUMBER> ...
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match tag <IPv4> <NUMBER> ...
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match tag <NUMBER> ...
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match community <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match as-path <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> metric <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> preserve metric 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> preserve preference 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> metric-type type-1 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> metric-type type-2 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> next-hop <IPv6> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> next-hop <IPv4> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> tag <IPv4> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> tag <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> community <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> as-path <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> weight <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> offset-metric <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> local-pref <NUMBER> 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> origin incomplete 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> origin igp 
set vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> 
set vrouter <NAME_STRING> route-map ipv6 name <NAME_STRING> ...
set vrouter <NAME_STRING> route-map name <NAME_STRING> ...
set vrouter <NAME_STRING> route-map <NAME_STRING> ...
set vrouter <NAME_STRING> route-map name ...
set vrouter <NAME_STRING> mroute mgroup <IPv4> source <IPv4> iif <IF_NAME_GENERAL> oif <IF_NAME_GENERAL2> 
set vrouter <NAME_STRING> mroute mgroup <IPv4> source <IPv4> iif <IF_NAME_GENERAL> oif <IF_NAME_GENERAL2> out-group <IPv4> 
set vrouter <NAME_STRING> mroute mgroup <IPv4> source <IPv4> iif <IF_NAME_GENERAL> oif <IF_NAME_GENERAL2> 
set vrouter <NAME_STRING> mroute mgroup <IPv4> source <IPv4> iif <IF_NAME_GENERAL> 
set vrouter <NAME_STRING> mroute mgroup <IPv4> source <IPv4> iif <IF_NAME_GENERAL> oif <IF_NAME_GENERAL2> ...
set vrouter <NAME_STRING> mroute mgroup <IPv4> source <IPv4> iif <IF_NAME_GENERAL> 
set vrouter <NAME_STRING> mroute mgroup <IPv4> iif ...
set vrouter <NAME_STRING> mroute mgroup <IPv4> source <IPv4> ...
set vrouter <NAME_STRING> mroute multiple-iif-enable 
set vrouter <NAME_STRING> mroute max-entries <NUMBER> 
set vrouter <NAME_STRING> mroute negative-cache timer <NUMBER> 
set vrouter <NAME_STRING> mroute negative-cache 
set vrouter <NAME_STRING> sharable 
set vrouter <NAME_STRING> nsrp-config-sync 
set vrouter <NAME_STRING> snmp trap private 
set vrouter <NAME_STRING> source-routing enable 
set vrouter <NAME_STRING> sibr-routing enable 
set vrouter <NAME_STRING> ignore-subnet-conflict 
set vrouter <NAME_STRING> max-ecmp-routes <NUMBER> 
set vrouter <NAME_STRING> source-routing ...
set vrouter <NAME_STRING> ...
set vrouter <NAME_STRING> default-vrouter 
set vrouter <NAME_STRING> sharable ...
set vrouter <NAME_STRING> default-vrouter 
set vrouter <NAME_STRING> sharable ...
set vrouter <NAME_STRING> max-routes ...
set vrouter <NAME_STRING> auto-route-export 
set vrouter <NAME_STRING> ...
set vrouter <NAME_STRING> protocol ...
set vrouter <NAME_STRING> <NUMBER> 
set vrouter <NAME_STRING> id <NUMBER> sharable 
set vrouter <NAME_STRING> id <NUMBER> 
set vrouter <NAME_STRING> sharable ...
set vrouter <NAME_STRING> ...
set vrouter name <NAME_STRING> ...
set vrouter <NAME_STRING> ...
set management-vrouter <STRING> 
set service <NAME_STRING> timeout unit 
set service <NAME_STRING> timeout 
set service <NAME_STRING> 
set service <NAME_STRING> protocol tcp src-port <NUMBER_RANGE> dst-port <NUMBER_RANGE> timeout never 
set service <NAME_STRING> protocol tcp src-port <NUMBER_RANGE> dst-port <NUMBER_RANGE> timeout <NUMBER> 
set service <NAME_STRING> protocol tcp src-port <NUMBER_RANGE> dst-port <NUMBER_RANGE> 
set service <NAME_STRING> protocol tcp src-port <NUMBER_RANGE> 
set service <NAME_STRING> protocol tcp dst-port ...
set service <NAME_STRING> protocol udp src-port ...
set service <NAME_STRING> protocol icmp type <NUMBER> code <NUMBER> 
set service <NAME_STRING> protocol sun-rpc program <NUMBER_RANGE> timeout ...
set service <NAME_STRING> protocol ms-rpc uuid <STRING> timeout ...
set service <NAME_STRING> protocol <NUMBER> src-port ...
set service <NAME_STRING> timeout never 
set service <NAME_STRING> timeout <NUMBER> 
set service <NAME_STRING> timeout unit 10sec 
set service <NAME_STRING> + tcp src-port <NUMBER_RANGE> dst-port <NUMBER_RANGE> 
set service <NAME_STRING> + udp src-port ...
set service <NAME_STRING> + icmp type <NUMBER> code <NUMBER> 
set service <NAME_STRING> + sun-rpc program <NUMBER_RANGE> 
set service <NAME_STRING> + ms-rpc uuid <STRING> 
set service <NAME_STRING> + <NUMBER> src-port ...
set alg sip enable 
set alg sip signaling-inactivity-timeout <NUMBER> 
set alg sip media-inactivity-timeout <NUMBER> 
set alg sip T1-interval <NUMBER> 
set alg sip T4-interval <NUMBER> 
set alg sip C-timeout <NUMBER> 
set alg sip hold-retain-resource 
set alg sip app-screen unknown-message route permit 
set alg sip app-screen unknown-message nat permit ...
set alg sip app-screen unknown-message permit ...
set alg sip app-screen protect deny timeout <NUMBER> 
set alg sip app-screen protect deny dst-ip ipv6 <IPv6_NUM> 
set alg sip app-screen protect deny dst-ip <IPv4_NUM> ...
set alg sip app-screen protect deny 
set alg sip 
set alg mgcp enable 
set alg mgcp inactive-media-timeout <NUMBER> 
set alg mgcp transaction-timeout <NUMBER> 
set alg mgcp max-call-duration <NUMBER> 
set alg mgcp app-screen unknown-message nat permit 
set alg mgcp app-screen unknown-message route permit ...
set alg mgcp app-screen unknown-message permit ...
set alg mgcp app-screen message-flood threshold <NUMBER> 
set alg mgcp app-screen message-flood 
set alg mgcp app-screen connection-flood threshold <NUMBER> 
set alg mgcp app-screen connection-flood 
set alg sccp app-screen unknown-message nat permit 
set alg sccp app-screen unknown-message route permit ...
set alg sccp app-screen unknown-message 
set alg sccp app-screen call-flood threshold <NUMBER> 
set alg sccp app-screen call-flood 
set alg sccp enable 
set alg sccp inactive-media-timeout <NUMBER> 
set alg sunrpc 
set alg sunrpc enable 
set alg msrpc 
set alg msrpc enable 
set alg xing enable 
set alg tftp enable 
set alg talk enable 
set alg sql 
set alg sql enable 
set alg rtsp 
set alg rtsp enable 
set alg rsh enable 
set alg real enable 
set alg pptp enable 
set alg appleichat enable 
set alg appleichat re-assembly enable 
set alg appleichat call-answer-time <NUMBER> 
set alg ftp enable 
set alg dns enable 
set alg http enable 
set alg h323 enable 
set alg h323 incoming-table timeout <NUMBER> 
set alg h323 app-screen unknown-message route permit 
set alg h323 app-screen unknown-message nat permit ...
set alg h323 app-screen unknown-message permit ...
set alg h323 app-screen message-flood gatekeeper threshold <NUMBER> 
set alg h323 app-screen message-flood gatekeeper 
set alg h323 gate source-port-any 
set alg sctp enable 
set password-policy user-type admin complexity-scheme <NUMBER> 
set password-policy user-type admin minimum-length <NUMBER> 
set password-policy user-type auth complexity-scheme ...
set password-policy user-type auth ...
set auth-server id <NUMBER> 
set auth-server <NAME_STRING> type radius 
set auth-server <NAME_STRING> type tacacs 
set auth-server <NAME_STRING> type securid 
set auth-server <NAME_STRING> type ldap 
set auth-server <NAME_STRING> tacacs port <NUMBER> 
set auth-server <NAME_STRING> tacacs secret <STRING> 
set auth-server <NAME_STRING> radius port <NUMBER> 
set auth-server <NAME_STRING> radius accounting-port <NUMBER> 
set auth-server <NAME_STRING> radius timeout <NUMBER> 
set auth-server <NAME_STRING> radius retries <NUMBER> 
set auth-server <NAME_STRING> radius attribute acct-session-id length <NUMBER> 
set auth-server <NAME_STRING> radius compatibility rfc-2138 
set auth-server <NAME_STRING> radius zone-verification 
set auth-server <NAME_STRING> radius secret <STRING> 
set auth-server <NAME_STRING> radius timeout ...
set auth-server <NAME_STRING> backup1 <STRING> 
set auth-server <NAME_STRING> backup2 <STRING> 
set auth-server <NAME_STRING> timeout <NUMBER> 
set auth-server <NAME_STRING> account-type admin 
set auth-server <NAME_STRING> account-type auth eap-ikev2 l2tp xauth 802.1X 
set auth-server <NAME_STRING> account-type auth eap-ikev2 l2tp xauth ...
set auth-server <NAME_STRING> account-type auth eap-ikev2 l2tp ...
set auth-server <NAME_STRING> account-type auth eap-ikev2 xauth ...
set auth-server <NAME_STRING> account-type auth l2tp ...
set auth-server <NAME_STRING> account-type ...
set auth-server <NAME_STRING> username separator <STRING> number <NUMBER> 
set auth-server <NAME_STRING> username domain <STRING> 
set auth-server <NAME_STRING> fail-over revert-interval <NUMBER> 
set auth-server <NAME_STRING> src-interface <IF_NAME_GENERAL> 
set auth-server <NAME_STRING> forced-timeout <NUMBER> 
set auth-server <NAME_STRING> forced-timeout ...
set auth-server <NAME_STRING> id <NUMBER> 
set auth-server <NAME_STRING> ...
set auth-server <NAME_STRING> securid auth-port <NUMBER> 
set auth-server <NAME_STRING> securid duress <NUMBER> 
set auth-server <NAME_STRING> securid encr <NUMBER> 
set auth-server <NAME_STRING> securid timeout <NUMBER> 
set auth-server <NAME_STRING> securid retries <NUMBER> 
set auth-server <NAME_STRING> timeout ...
set auth-server <NAME_STRING> ldap server-name <STRING> <NUMBER> <STRING> <STRING> 
set auth-server <NAME_STRING> ldap dn <STRING> 
set auth-server <NAME_STRING> ldap cn <STRING> 
set auth-server <NAME_STRING> ldap port <NUMBER> 
set auth-server <NAME_STRING> server-name <STRING> 
set auth-server <NAME_STRING> backup1 ...
set auth-server <NAME_STRING> timeout ...
set auth-server <NAME_STRING> server-name ...
set auth-server <NAME_STRING> timeout ...
set auth-server <NAME_STRING> server-name ...
set auth-server <NAME_STRING> ...
set auth-server ...
set auth banner telnet login <STRING> 
set auth banner telnet success <STRING> 
set auth banner telnet fail <STRING> 
set auth banner ftp login ...
set auth banner http login ...
set auth default auth server <NAME_STRING> 
set auth radius accounting port <NUMBER> 
set auth radius accounting action cleanup-session 
set scheduler <NAME_STRING> 
set scheduler <NAME_STRING> recurrent sunday start <TIME> stop <TIME> start <TIME> stop <TIME> comment <STRING> 
set scheduler <NAME_STRING> recurrent sunday start <TIME> stop <TIME> start <TIME> stop <TIME> 
set scheduler <NAME_STRING> recurrent sunday start <TIME> stop <TIME> comment ...
set scheduler <NAME_STRING> recurrent monday start ...
set scheduler <NAME_STRING> recurrent tuesday start ...
set scheduler <NAME_STRING> recurrent wednesday start ...
set scheduler <NAME_STRING> recurrent thursday start ...
set scheduler <NAME_STRING> recurrent friday start ...
set scheduler <NAME_STRING> recurrent saturday start ...
set scheduler <NAME_STRING> once start <DAY> <TIME> stop <DAY> <TIME> comment ...
set admin vsys name <NAME_STRING> 
set admin vsys password restrict length <NUMBER> 
set admin vsys password <STRING> 
set admin vsys password ...
set admin vsys user <NAME_STRING> access schedule <NAME_STRING> 
set admin vsys user <NAME_STRING> trustee modem 
set admin vsys user <NAME_STRING> trustee interface 
set admin vsys user <NAME_STRING> role audit 
set admin vsys user <NAME_STRING> role crypto 
set admin vsys user <NAME_STRING> role security 
set admin vsys user <NAME_STRING> password <STRING> privilege read-only 
set admin vsys user <NAME_STRING> password <STRING> privilege all 
set admin vsys user <NAME_STRING> password <STRING> 
set admin vsys user <NAME_STRING> ...
set admin vsys manager-ip enforce 
set admin vsys manager-ip <IPv4> <NETMASK> 
set admin vsys manager-ip <IPv4> 
set admin vsys manager-ip <IPv6> 
set admin vsys manager-ip all device 
set admin vsys manager-ip all 
set admin vsys manager-ip <IPv6_NUM> 
set admin vsys manager-ip ...
set admin vsys port <NUMBER> 
set admin vsys root access 
set admin vsys root access console 
set admin vsys access attempts <NUMBER> 
set admin vsys access lock-on-failure <NUMBER> 
set admin vsys access lock-on-failure ...
set admin vsys telnet port <NUMBER> 
set admin vsys ssh port <NUMBER> 
set admin vsys ssh password enable username <NAME_STRING> 
set admin vsys ssh password disable username ...
set admin vsys http redirect 
set admin vsys mail alert 
set admin vsys mail server-name <STRING> 
set admin vsys mail mail-addr1 <STRING> 
set admin vsys mail mail-addr2 <STRING> 
set admin vsys mail traffic-log 
set admin vsys auth dial-in timeout <NUMBER> 
set admin vsys auth web timeout <NUMBER> 
set admin vsys auth server <NAME_STRING> 
set admin vsys auth remote primary 
set admin vsys auth remote root 
set admin vsys auth remote read-only 
set admin vsys auth remote fallback permit root 
set admin vsys auth remote fallback permit non-root 
set admin vsys auth banner ack-secondary 
set admin vsys auth banner secondary <STRING> 
set admin vsys auth banner console login <STRING> 
set admin vsys auth banner telnet login ...
set admin vsys auth web ...
set admin vsys device-reset 
set admin vsys hw-reset 
set admin vsys privilege get-external 
set admin vsys privilege read-write 
set admin vsys format dos 
set admin vsys format unix 
set admin vsys privilege ...
set admin vsys manager-ip ...
set admin vsys ...
set admin ...
set vip session timeout 
set vip session timeout <NUMBER> 
set vip multi-port 
set zone id <NUMBER> <NAME_STRING> tunnel <NAME_STRING> 
set zone id <NUMBER> <NAME_STRING> L2 <NUMBER> <NUMBER> 
set zone id <NUMBER> <NAME_STRING> L2 <NUMBER> 
set zone id <NUMBER> <NAME_STRING> L2 
set zone id <NUMBER> <NAME_STRING> shared-dmz 
set zone id <NUMBER> <NAME_STRING> 
set zone <ZONE_NAME> block 
set zone <ZONE_NAME> tcp-rst 
set zone <ZONE_NAME> pbr <NAME_STRING> 
set zone <ZONE_NAME> manage 
set zone <ZONE_NAME> manage ping 
set zone <ZONE_NAME> manage telnet 
set zone <ZONE_NAME> manage ssh 
set zone <ZONE_NAME> manage snmp 
set zone <ZONE_NAME> manage web 
set zone <ZONE_NAME> manage ident-reset 
set zone <ZONE_NAME> manage mtrace 
set zone <ZONE_NAME> manage ...
set zone <ZONE_NAME> manage ssl 
set zone <ZONE_NAME> manage ...
set zone <ZONE_NAME> webauth 
set zone <ZONE_NAME> screen alarm-without-drop 
set zone <ZONE_NAME> screen on-tunnel 
set zone <ZONE_NAME> screen ip-spoofing drop-no-rpf-route 
set zone <ZONE_NAME> screen ip-spoofing zone-based 
set zone <ZONE_NAME> screen ip-spoofing 
set zone <ZONE_NAME> screen tear-drop 
set zone <ZONE_NAME> screen unknown-protocol 
set zone <ZONE_NAME> screen land 
set zone <ZONE_NAME> screen ip-filter-src 
set zone <ZONE_NAME> screen ip-bad-option 
set zone <ZONE_NAME> screen ip-record-route 
set zone <ZONE_NAME> screen ip-timestamp-opt 
set zone <ZONE_NAME> screen ip-security-opt 
set zone <ZONE_NAME> screen ip-loose-src-route 
set zone <ZONE_NAME> screen ip-strict-src-route 
set zone <ZONE_NAME> screen ip-stream-opt 
set zone <ZONE_NAME> screen block-frag 
set zone <ZONE_NAME> screen icmp-flood threshold <NUMBER> 
set zone <ZONE_NAME> screen icmp-flood 
set zone <ZONE_NAME> screen ip-sweep threshold <NUMBER> 
set zone <ZONE_NAME> screen ip-sweep 
set zone <ZONE_NAME> screen tcp-sweep threshold <NUMBER> 
set zone <ZONE_NAME> screen tcp-sweep 
set zone <ZONE_NAME> screen udp-sweep threshold <NUMBER> 
set zone <ZONE_NAME> screen udp-sweep 
set zone <ZONE_NAME> screen icmp-fragment 
set zone <ZONE_NAME> screen icmp-large 
set zone <ZONE_NAME> screen icmp-id 
set zone <ZONE_NAME> screen ping-death 
set zone <ZONE_NAME> screen syn-frag 
set zone <ZONE_NAME> screen syn-fin 
set zone <ZONE_NAME> screen fin-no-ack 
set zone <ZONE_NAME> screen tcp-no-flag 
set zone <ZONE_NAME> screen port-scan threshold <NUMBER> 
set zone <ZONE_NAME> screen port-scan 
set zone <ZONE_NAME> screen udp-flood dst-ip <IPv4> threshold <NUMBER> 
set zone <ZONE_NAME> screen udp-flood dst-ip <IPv4> 
set zone <ZONE_NAME> screen udp-flood threshold <NUMBER> 
set zone <ZONE_NAME> screen udp-flood 
set zone <ZONE_NAME> screen mal-url code-red 
set zone <ZONE_NAME> screen mal-url <STRING> <STRING> <NUMBER> 
set zone <ZONE_NAME> screen limit-session source-ip-based <NUMBER> 
set zone <ZONE_NAME> screen limit-session source-ip-based 
set zone <ZONE_NAME> screen limit-session destination-ip-based <NUMBER> ...
set zone <ZONE_NAME> screen limit-session 
set zone <ZONE_NAME> screen component-block zip 
set zone <ZONE_NAME> screen component-block jar 
set zone <ZONE_NAME> screen component-block exe 
set zone <ZONE_NAME> screen component-block activex 
set zone <ZONE_NAME> screen component-block 
set zone <ZONE_NAME> screen mal-url ...
set zone <ZONE_NAME> screen winnuke 
set zone <ZONE_NAME> screen syn-ack-ack-proxy threshold <NUMBER> 
set zone <ZONE_NAME> screen syn-ack-ack-proxy 
set zone <ZONE_NAME> screen port-scan ...
set zone <ZONE_NAME> screen syn-flood timeout <NUMBER> 
set zone <ZONE_NAME> screen syn-flood alarm-threshold <NUMBER> 
set zone <ZONE_NAME> screen syn-flood queue-size <NUMBER> 
set zone <ZONE_NAME> screen syn-flood attack-threshold <NUMBER> 
set zone <ZONE_NAME> screen syn-flood source-threshold <NUMBER> 
set zone <ZONE_NAME> screen syn-flood destination-threshold <NUMBER> 
set zone <ZONE_NAME> screen syn-flood 
set zone <ZONE_NAME> screen syn-frag ...
set zone <ZONE_NAME> ip-classification net <IPv4_NUM> vsys <STRING> 
set zone <ZONE_NAME> ip-classification net <IPv4_NUM> root 
set zone <ZONE_NAME> ip-classification range <IPv4_RANGE> ...
set zone <ZONE_NAME> ip-classification 
set zone <ZONE_NAME> shared 
set zone <ZONE_NAME> reassembly-for-alg 
set zone <ZONE_NAME> g-arp 
set zone <ZONE_NAME> no-dhcp-relay 
set zone <ZONE_NAME> asymmetric-vpn 
set zone <ZONE_NAME> 
set zone <ZONE_NAME> no-dhcp-relay ...
set zone <ZONE_NAME> ...
set zone <ZONE_NAME> vrouter <NAME_STRING> 
set zone <ZONE_NAME> ...
set zone name <NAME_STRING> ...
set zone <ZONE_NAME> ...
set interface <IF_NAME_NEW_TUNNEL> tunnel keep-alive interval <NUMBER> threshold <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tunnel keep-alive interval <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tunnel keep-alive threshold ...
set interface <IF_NAME_NEW_TUNNEL> tunnel encap gre key <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tunnel encap gre 
set interface <IF_NAME_NEW_TUNNEL> tunnel encap ip6in4 manual 
set interface <IF_NAME_NEW_TUNNEL> tunnel encap ip6in4 6to4 
set interface <IF_NAME_NEW_TUNNEL> tunnel local-if <IF_NAME_GENERAL2> 
set interface <IF_NAME_NEW_TUNNEL> tunnel local-if <IF_NAME_GENERAL2> dst-ip <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tunnel keep-alive ...
set interface <IF_NAME_NEW_TUNNEL> nhtb <IPvx> vpn <STRING> 
set interface <IF_NAME_NEW_TUNNEL> import 
set interface <IF_NAME_NEW_TUNNEL> pvc <NUMBER> <NUMBER> mux vc protocol routed qos ubr zone <ZONE_NAME> 
set interface <IF_NAME_NEW_TUNNEL> pvc <NUMBER> <NUMBER> mux vc protocol routed qos ubr 
set interface <IF_NAME_NEW_TUNNEL> pvc <NUMBER> <NUMBER> mux vc protocol routed qos cbr <NUMBER> <NUMBER> ...
set interface <IF_NAME_NEW_TUNNEL> pvc <NUMBER> <NUMBER> mux vc protocol routed qos vbr-nrt <NUMBER> <NUMBER> <NUMBER> ...
set interface <IF_NAME_NEW_TUNNEL> pvc <NUMBER> <NUMBER> mux vc protocol routed ...
set interface <IF_NAME_NEW_TUNNEL> pvc <NUMBER> <NUMBER> mux vc protocol bridged ...
set interface <IF_NAME_NEW_TUNNEL> pvc <NUMBER> <NUMBER> mux vc ...
set interface <IF_NAME_NEW_TUNNEL> pvc <NUMBER> <NUMBER> mux llc protocol ...
set interface <IF_NAME_NEW_TUNNEL> pvc <NUMBER> <NUMBER> protocol ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> zone ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> g-arp 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> aggregate <IF_NAME_GENERAL2> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> group <IF_NAME_GENERAL2> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ip manageable 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ip <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ip 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ip <IPv4> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> route-deny 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> gateway <IPv4> no-default-route 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> gateway <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bandwidth <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bandwidth egress mbw <NUMBER> ingress mbw <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bandwidth egress mbw <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bandwidth egress gbw <NUMBER> mbw <NUMBER> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bandwidth egress gbw <NUMBER> ingress ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bandwidth egress mbw ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bandwidth ingress mbw ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bandwidth egress ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> description <STRING> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mtu <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> pmtu ipv6 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> pmtu ipv4 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> loopback-group <IF_NAME_GENERAL2> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> proxy dns 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> vlan trunk 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> nsrp manage zone <ZONE_NAME> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bypass-others-ipsec 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bypass-non-ip-all 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bypass-non-ip 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bypass-icmpv6-ndp 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bypass-icmpv6-mld 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bypass-icmpv6-mrd 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bypass-icmpv6-msp 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bypass-icmpv6-snd 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bypass-ipv6-others-ipsec 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> primary <IF_NAME_GENERAL2> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> manage-ip <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> broadcast arp trace-route 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> broadcast arp 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> broadcast flood 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> broadcast-ipv6 ndp trace-route 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> broadcast-ipv6 ndp 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> broadcast-ipv6 flood 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> vwire <STRING> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> manage ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol pim enable 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol pim dr-priority <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol pim join-prune-interval <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol pim hello-interval <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol pim neighbor-policy <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol pim boot-strap-border 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol pim 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol mld enable 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol mld 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp router 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp host 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp enable 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp no-check-subnet 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp no-check-router-alert 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp join-group 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp join-group all 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp join-group <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp join-group <IPv4> include <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp join-group <IPv4> include <IPv4> <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp join-group <IPv4> include <IPv4> <IPv4> <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp join-group <IPv4> include <IPv4> <IPv4> <IPv4> <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp join-group <IPv4> exclude <IPv4> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp join-group <IPv4> to_include 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp join-group <IPv4> to_include <IPv4> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp join-group <IPv4> to_exclude ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp join-group <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp static-group ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp static-group <IPv4> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp static-group ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp query-interval <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp query-max-response-time ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp leave-interval ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp version ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp last-member-query-interval ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp join-group ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp proxy 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp proxy always 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp proxy 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp accept routers ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp accept hosts ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp accept groups ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol igmp ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol nhrp enable 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip enable 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip split-horizon poison-reverse 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip split-horizon 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip metric <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip route-map <NAME_STRING> in 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip route-map <NAME_STRING> out 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip authentication md5 key-id <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip authentication md5 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip authentication md5 <STRING> key-id ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip authentication active-md5-key-id <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip authentication password <STRING> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip passive-mode 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip send-version v1 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip send-version v2 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip send-version v1v2 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip receive-version v1 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip receive-version v2 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip receive-version v1v2 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip demand-circuit 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip neighbor <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip summary-enable 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol rip neighbor ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf enable 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf priority <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf transit-delay <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf retransmit-interval <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf hello-interval <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf dead-interval <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf cost <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf neighbor-list <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf link-type p2p 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf link-type p2mp 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf area <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf area <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf passive 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf ignore-mtu 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf authentication md5 key-id <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf authentication md5 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf authentication md5 <STRING> key-id ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf authentication active-md5-key-id <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf authentication password <STRING> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf reduce-flooding 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ospf demand-circuit 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol bgp 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol irdp enable 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol irdp response-delay <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol irdp init-adv-packet <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol irdp init-adv-interval <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol irdp broadcast-address 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol irdp max-adv-interval <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol irdp min-adv-interval <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol irdp lifetime <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol irdp <IPv4> preference <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol irdp <IPv4> advertise 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> protocol ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> pbr <NAME_STRING> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> pbr 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> vip interface-ip port <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> vip interface-ip 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> vip <IPv4> port ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> vip interface-ip ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> vip interface-ip + <NUMBER> <STRING> <IPv4> manual 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> vip interface-ip + <NUMBER> <STRING> <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> vip interface-ip + 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> vip interface-ip <NUMBER> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> vip <IPv4> + ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> vip interface-ip ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> keepalives interval <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> keepalives down-count <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> keepalives up-count <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> keepalives 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp client enable 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp client settings vendor <STRING> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp client settings server <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp client settings lease <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp client settings autoconfig 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp client settings update-dhcpserver 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp client settings admin-preference <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp client settings client-id <STRING> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp client 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server service 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server enable 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server disable 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server auto 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option lease <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option gateway <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option netmask ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option domainname <STRING> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option dns1 ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option dns2 ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option dns3 ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option smtp ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option pop3 ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option news ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option wins1 ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option wins2 ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option nis1 ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option nis2 ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option nistag <STRING> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option custom <NUMBER> string <STRING> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option custom <NUMBER> ip <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option custom <NUMBER> integer <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server ip all 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server ip <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server ip <IPv4> to <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server ip <IPv4> mac <MACADDR> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server ip <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server config next-server-ip option66 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server config next-server-ip ip <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server config next-server-ip 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server config updatable src-interface <IF_NAME_GENERAL2> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server config updatable 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp server option ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp relay service 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp relay vpn 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp relay server-name <STRING> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dhcp ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ppp profile <STRING> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mrru <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> short-sequence 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> drop-timeout <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> minimum-links <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> fragment-threshold <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip interface-ip <IPv4> <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip interface-ip <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip interface-ip 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip interface-ip incoming 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip interface-ip fix-port 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip interface-ip random-port 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip interface-ip 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip interface-ip shift-from <IPv4> to <IPv4> <IPv4> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip interface-ip shift-from <IPv4> to <IPv4> <IPv4> incoming ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip interface-ip shift-from <IPv4> to <IPv4> incoming ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip interface-ip ipv6 prefix <IPv6_NUM> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip interface-ip <IPv6> <IPv6> fix-port ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip interface-ip <IPv6> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip interface-ip <IPv4> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip interface-ip ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dip <NUMBER> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ext ip <IPv4> <NETMASK> dip <NUMBER> <IPv4> <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ext ip <IPv4> <NETMASK> dip <NUMBER> <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ext ip <IPv4> <NETMASK> dip <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ext ip <IPv4> <NETMASK> dip <NUMBER> shift-from <IPv4> to <IPv4> <IPv4> fix-port 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ext ip <IPv4> <NETMASK> dip <NUMBER> shift-from <IPv4> to <IPv4> <IPv4> random-port 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ext ip <IPv4> <NETMASK> dip <NUMBER> shift-from <IPv4> to <IPv4> <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ext ip <IPv4> <NETMASK> dip <NUMBER> shift-from <IPv4> to <IPv4> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ext ip <IPv4> <NETMASK> dip <NUMBER> ipv6 prefix <IPv6_NUM> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ext ip <IPv4> <NETMASK> dip <NUMBER> <IPv6> <IPv6> fix-port ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ext ip <IPv4> <NETMASK> dip <NUMBER> <IPv6> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ext ip <IPv4> <NETMASK> dip <NUMBER> <IPv4> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ext ip <IPv4_NUM> dip ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ext ip <IPv6_NUM> dip ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ext ip <IPv4> <NETMASK> dip ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ext ip <IPv4_NUM> dip ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mip <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mip <IPv4> netmask <NETMASK> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mip <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mip <IPv4> ipv6 host <IPv6> vrouter <STRING> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mip <IPv4> ipv6 host <IPv6> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mip <IPv4> ipv6 host <IPvx> vrouter ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mip <IPv4> ipv6 prefix <IPv6_NUM> netmask <NETMASK> vrouter ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mip <IPv4> ipv6 prefix <IPv6_NUM> vrouter ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mip <IPv4> ipv6 host ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mip <IPv4> ipv6 ipv4 vrouter ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mip <IPv4> host <IPv4> netmask <NETMASK> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mip <IPv4> host <IPv4> vrouter ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mip <IPv4> host ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mip <IPv6_NUM> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mip <IPv6> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor interface <IF_NAME_GENERAL2> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor interface <IF_NAME_GENERAL2> weight <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor zone <ZONE_NAME> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor threshold <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor threshold <NUMBER> action down 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor threshold <NUMBER> action down logically 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor threshold <NUMBER> action down physically 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor threshold <NUMBER> action up ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip ip <IPvx> interval <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip ip <IPvx> threshold <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip ip <IPvx> weight <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip ip <IPvx> zone <ZONE_NAME> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip ip <IPvx> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip ip <IPvx> interface <IF_NAME_GENERAL2> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip ip <IPvx> method ping 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip ip <IPvx> method arp 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip ip <IPvx> method ping ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip ip <IPvx> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip ip <IPvx> weight ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip ip 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip threshold <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip weight <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip dynamic 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor track-ip 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> monitor ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ntp-server 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mlfr-uni-nni fragment-thresholds <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mlfr-uni-nni hello-timer <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mlfr-uni-nni acknowledge-timer <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> mlfr-uni-nni acknowledge-retries <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> minimum-links <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> drop-timeout <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bundle-ID <STRING> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> frame-relay dlci <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> frame-relay inverse-arp 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> frame-relay lmi no-keepalive 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> frame-relay lmi type ansi 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> frame-relay lmi type itu 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> frame-relay lmi t392-dce <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> frame-relay lmi n392-dce <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> frame-relay lmi n393-dce <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> frame-relay lmi t391-dte <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> frame-relay lmi n391-dte <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> frame-relay lmi n392-dte <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> frame-relay lmi n393-dte <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> frame-relay lmi ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dot1x 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dot1x port-control force-unauthorized 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dot1x port-control auto 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dot1x control-mode virtual 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dot1x control-mode interface 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dot1x max-user <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dot1x reauth-period <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dot1x auth-server <STRING> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dot1x retry 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dot1x retry count <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dot1x retry period <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> dot1x silent-period <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> nsgp enforce-ipsec 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> nsgp 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> webauth ssl-only 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> webauth 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> webauth-ip <IPv4> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> tag <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> bypass-non-ip ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ip manageable 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ip unnumbered interface <IF_NAME_GENERAL2> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ip <IPv4> <NETMASK> secondary 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ip <IPv4> <NETMASK> tag <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ip <IPv4> <NETMASK> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ip <IPv4_NUM> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ip <IPv4> ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ip ...
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> route-deny 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> route nosession 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> route session 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> route 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> nat 
set interface <IF_NAME_NEW_TUNNEL> tag <NUMBER> ...
set interface <IF_NAME_NEW_TUNNEL> bundle <IF_NAME_GENERAL2> 
set interface <IF_NAME_NEW_TUNNEL> encap 
set interface <IF_NAME_NEW_TUNNEL> zone ...
set interface <IF_NAME_NEW_TUNNEL> ...
set interface <IF_NAME_NEW_TUNNEL> encap ppp 
set interface <IF_NAME_NEW_TUNNEL> encap frame-relay 
set interface <IF_NAME_NEW_TUNNEL> encap mlfr-uni-nni 
set interface <IF_NAME_NEW_TUNNEL> encap mlppp 
set interface <IF_NAME_NEW_TUNNEL> encap cisco-hdlc 
set interface <IF_NAME_NEW_TUNNEL> encap ...
set interface <IF_NAME_NEW_TUNNEL> encap pppoe zone ...
set interface <IF_NAME_NEW_TUNNEL> ...
set interface <IF_NAME_NEW_TUNNEL> port <IF_NAME_GENERAL2> 
set interface <IF_NAME_NEW_TUNNEL> port <NUMBER> phy auto 100mb 
set interface <IF_NAME_NEW_TUNNEL> port <NUMBER> phy auto 10mb 
set interface <IF_NAME_NEW_TUNNEL> port <NUMBER> phy auto 
set interface <IF_NAME_NEW_TUNNEL> port <NUMBER> phy full ...
set interface <IF_NAME_NEW_TUNNEL> port <NUMBER> phy half ...
set interface <IF_NAME_NEW_TUNNEL> port <NUMBER> phy full ...
set interface <IF_NAME_NEW_TUNNEL> ...
set interface <IF_NAME_NEW_TUNNEL> shutdown 
set interface <IF_NAME_NEW_TUNNEL> wlan 0 
set interface <IF_NAME_NEW_TUNNEL> wlan 1 
set interface <IF_NAME_NEW_TUNNEL> wlan both 
set interface <IF_NAME_NEW_TUNNEL> wlan ...
set interface <IF_NAME_NEW_TUNNEL> ...
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode auto 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode itu-dmt 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode adsl2 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode adsl2plus 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode adsl2-annexM 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode adsl2plus-annexM 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode ansi-dmt 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode auto ...
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode ansi 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode gdmt 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode etsi 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode annex-b-ur2 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode annex-b-non-ur2 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode gdmtbis 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode adsl2plus 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode auto 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode glite 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode itu-dmt 
set interface <IF_NAME_NEW_TUNNEL> phy operating-mode ansi-dmt 
set interface <IF_NAME_NEW_TUNNEL> phy annex-b-mode dt 
set interface <IF_NAME_NEW_TUNNEL> phy annex-b-mode non-dt 
set interface <IF_NAME_NEW_TUNNEL> phy holddown <NUMBER> 
set interface <IF_NAME_NEW_TUNNEL> phy primary <IF_NAME_GENERAL2> ...
set interface <IF_NAME_NEW_TUNNEL> phy auto 
set interface <IF_NAME_NEW_TUNNEL> phy full 1000mb 
set interface <IF_NAME_NEW_TUNNEL> phy full 100mb 
set interface <IF_NAME_NEW_TUNNEL> phy full 10mb 
set interface <IF_NAME_NEW_TUNNEL> phy full 100mb ...
set interface <IF_NAME_NEW_TUNNEL> phy full 
set interface <IF_NAME_NEW_TUNNEL> phy half ...
set interface <IF_NAME_NEW_TUNNEL> phy link-down 
set interface <IF_NAME_NEW_TUNNEL> phy 
set interface <IF_NAME_NEW_TUNNEL> phy manual 
set interface <IF_NAME_NEW_TUNNEL> phy link-down ...
set interface <IF_NAME_NEW_TUNNEL> phy ...
set interface <IF_NAME_NEW_TUNNEL> ...
set ip tftp retry <NUMBER> 
set ip tftp timeout <NUMBER> ...
set tftp source-interface <IF_NAME_GENERAL> 
set ffilter <NUMBER> 
set ffilter 
set ffilter src-ip <IPvx> dst-ip <IPvx> ip-proto <NUMBER> src-port <NUMBER> dst-port <NUMBER> 
set ffilter src-ip <IPvx> dst-ip <IPvx> ip-proto <NUMBER> src-port <NUMBER> 
set ffilter src-ip <IPvx> dst-ip <IPvx> ip-proto <NUMBER> dst-port ...
set ffilter src-ip <IPvx> dst-ip <IPvx> src-port ...
set ffilter src-ip <IPvx> ip-proto ...
set ffilter dst-ip ...
set mac <MACADDR> vlan <NUMBER> 
set mac <MACADDR> interface <IF_NAME_GENERAL> vlan ...
set mac-learn-sticky 
set fprofile packet enable 
set fprofile packet count <NUMBER> 
set fprofile packet wrap 
set fprofile packet start 
set fprofile packet stop 
set fprofile packet enable ...
set flow multicast install-hw-session 
set flow tcp-mss 
set flow tcp-mss <NUMBER> 
set flow vpn-tcp-mss ...
set flow path-mtu 
set flow no-tcp-seq-check 
set flow tcp-rst-invalid-session 
set flow initial-timeout <NUMBER> 
set flow check tcp-rst-sequence 
set flow mac-flooding 
set flow gre-out-tcp-mss ...
set flow gre-in-tcp-mss ...
set flow tcp-syn-check 
set flow tcp-syn-bit-check 
set flow allow-dns-reply 
set flow max-frag-pkt-size <NUMBER> 
set flow all-tcp-mss <NUMBER> 
set flow tcp-syn-check-in-tunnel 
set flow syn-proxy syn-cookie 
set flow route-change-timeout <NUMBER> 
set flow icmp-ur-session-close 
set flow icmp-ur-msg-filter 
set flow mac-cache mgt 
set flow reverse-route clear-text prefer 
set flow reverse-route clear-text always 
set flow reverse-route tunnel prefer 
set flow reverse-route tunnel always 
set flow hub-n-spoke-mip 
set flow aging high-watermark <NUMBER> 
set flow aging low-watermark <NUMBER> 
set flow aging early-ageout <NUMBER> 
set flow icmp time-exceeded 
set flow log-dropped-packet 
set flow force-ip-reassembly 
set flow icmp ...
set flow hub-n-spoke-mip 
set flow ...
set flow tcp-mss ...
set console timeout <NUMBER> 
set console page <NUMBER> 
set console disable 
set console dbuf 
set console aux disable 
set console save-on-exit default-no 
set console ...
set domain <STRING> 
set hostname <STRING> 
set dbuf size <NUMBER> 
set dbuf usb default-file 
set dbuf usb filename <STRING> 
set dbuf usb enable 
set dbuf usb filesize <NUMBER> 
set dbuf usb filename ...
set alias <STRING> <STRING> 
set failover auto 
set failover holddown <NUMBER> recover <NUMBER> 
set failover holddown <NUMBER> 
set failover enable 
set failover type track-ip 
set failover type tunnel-if 
set failover type route vrouter <STRING> <IPv4_NUM> 
set failover type route vrouter <STRING> <IPv4> <NETMASK> 
set failover enable ...
set webauth server <NAME_STRING> 
set webauth banner success <STRING> 
set pki pre-prime <NUMBER> 
set pki src-interface <IF_NAME_GENERAL> 
set pki authority default cert-status revocation-check crl best-effort 
set pki authority default cert-status revocation-check crl 
set pki authority default cert-status revocation-check ocsp best-effort ...
set pki authority default cert-status revocation-check none 
set pki authority default cert-status ocsp cert-verify id <NUMBER> 
set pki authority default cert-status ocsp url <STRING> 
set pki authority default cert-status ocsp not-verify-revoke 
set pki authority default cert-status crl refresh monthly 
set pki authority default cert-status crl refresh weekly 
set pki authority default cert-status crl refresh daily 
set pki authority default cert-status crl refresh default 
set pki authority default cert-status crl url <STRING> 
set pki authority default cert-status crl server-name <STRING> 
set pki authority default scep ca-cgi <STRING> 
set pki authority default scep ra-cgi <STRING> 
set pki authority default scep ca-id <STRING> 
set pki authority default scep mode auto 
set pki authority default scep mode manual 
set pki authority default scep challenge <STRING> 
set pki authority default scep authentication passed <NUMBER> 
set pki authority default scep authentication passed 
set pki authority default scep authentication failed <NUMBER> ...
set pki authority default scep current 
set pki authority default scep polling-int <NUMBER> 
set pki authority default scep renew-start <NUMBER> 
set pki authority default cert-path full 
set pki authority default cert-path partial 
set pki authority <NUMBER> cert-status ...
set pki ldap server-name <STRING> 
set pki ldap crl-url <STRING> 
set pki x509 dn country-name <STRING> 
set pki x509 dn state-name <STRING> 
set pki x509 dn local-name <STRING> 
set pki x509 dn org-name <STRING> 
set pki x509 dn org-unit-name <STRING> 
set pki x509 dn name <STRING> 
set pki x509 dn phone <STRING> 
set pki x509 dn email <STRING> 
set pki x509 dn ip <IPv4> 
set pki x509 dn domain-component <STRING> 
set pki x509 default send-to <STRING> 
set pki x509 default no-preload-ca 
set pki x509 default crl-refresh default 
set pki x509 default crl-refresh daily 
set pki x509 default crl-refresh weekly 
set pki x509 default crl-refresh monthly 
set pki x509 default cert-path full 
set pki x509 default cert-path partial 
set pki x509 default send-to ...
set pki x509 raw-cn enable 
set pki x509 friendly-name <NUMBER> 
set pki x509 friendly-name <STRING> <NUMBER> ...
set pki x509 renew <NUMBER> 
set pki x509 cert-fqdn <STRING> 
set nsrp cluster id <NUMBER> 
set nsrp cluster name <NAME_STRING> 
set nsrp data-forwarding 
set nsrp rto-mirror hb-interval <NUMBER> 
set nsrp rto-mirror hb-threshold <NUMBER> 
set nsrp rto-mirror id <NUMBER> direction in 
set nsrp rto-mirror id <NUMBER> direction out 
set nsrp rto-mirror id <NUMBER> 
set nsrp rto-mirror sync 
set nsrp rto-mirror route threshold <NUMBER> 
set nsrp rto-mirror route 
set nsrp rto-mirror session ageout-ack 
set nsrp rto-mirror session off 
set nsrp rto-mirror session clear-on-inactive 
set nsrp rto-mirror session non-vsi 
set nsrp rto-mirror session off 
set nsrp rto-mirror session clear-on-inactive 
set nsrp rto-mirror session non-vsi 
set nsrp rto-mirror session clear-on-inactive ...
set nsrp rto-mirror session ...
set nsrp vsd-group init-hold <NUMBER> 
set nsrp vsd-group hb-threshold <NUMBER> 
set nsrp vsd-group hb-interval <NUMBER> 
set nsrp vsd-group master-always-exist 
set nsrp vsd-group id <NUMBER> monitor interface <IF_NAME_GENERAL2> 
set nsrp vsd-group id <NUMBER> monitor interface <IF_NAME_GENERAL2> weight <NUMBER> 
set nsrp vsd-group id <NUMBER> monitor sm <NUMBER> 
set nsrp vsd-group id <NUMBER> monitor sm <NUMBER> weight ...
set nsrp vsd-group id <NUMBER> monitor zone <ZONE_NAME> 
set nsrp vsd-group id <NUMBER> monitor zone <ZONE_NAME> weight ...
set nsrp vsd-group id <NUMBER> monitor threshold ...
set nsrp vsd-group id <NUMBER> monitor track-ip ip ...
set nsrp vsd-group id <NUMBER> monitor zone ...
set nsrp vsd-group id <NUMBER> 
set nsrp vsd-group id <NUMBER> priority <NUMBER> 
set nsrp vsd-group id <NUMBER> mode ineligible 
set nsrp vsd-group id <NUMBER> preempt 
set nsrp vsd-group id <NUMBER> preempt hold-down <NUMBER> 
set nsrp vsd-group id <NUMBER> preempt 
set nsrp vsd-group id <NUMBER> preempt hold-down ...
set nsrp vsd-group id <NUMBER> ...
set nsrp vsd-group id <NUMBER> priority ...
set nsrp vsd-group all 
set nsrp vsd-group 
set nsrp ha-link probe interval threshold <NUMBER> 
set nsrp ha-link probe interval 
set nsrp ha-link probe interval <NUMBER> threshold ...
set nsrp ha-link probe threshold ...
set nsrp config sync 
set nsrp active-active transparent 
set nsrp link-hold-time <NUMBER> 
set nsrp link-up-on-backup 
set nsrp interface <IF_NAME_GENERAL> 
set nsrp encrypt password <STRING> 
set nsrp encrypt <LLX4_NUMBER> 
set nsrp auth password ...
set nsrp secondary-path <IF_NAME_GENERAL> 
set nsrp monitor interface ...
set nsrp arp <NUMBER> 
set nsrp track-ip ip ...
set nsrp interface ...
set nsrp encrypt ...
set nsrp link-hold-time ...
set nsrp rto-mirror ...
set infranet controller name <STRING> host-name <STRING> port <NUMBER> 
set infranet controller name <STRING> host-name <STRING> 
set infranet controller name <STRING> timeout <NUMBER> 
set infranet controller name <STRING> password <STRING> 
set infranet controller name <STRING> src-interface <IF_NAME_GENERAL> 
set infranet controller name <STRING> ca-idx <NUMBER> 
set infranet controller name <STRING> cert-subject <STRING> 
set infranet controller name <STRING> url <STRING> 
set infranet controller name <STRING> 
set infranet controller contact-interval <NUMBER> 
set infranet controller timeout action open 
set infranet controller timeout action close 
set infranet controller timeout action no-change 
set infranet controller cleanup-infranet-state-delay <NUMBER> 
set infranet enforcer mode test 
set infranet policy command <STRING> 
set infranet enforcer ...
set dns host dns1 src-interface 
set dns host dns1 admin-preference 
set dns host dns1 
set dns host dns1 <IPvx> src-interface <IF_NAME_GENERAL> admin-preference <NUMBER> 
set dns host dns1 <IPvx> src-interface <IF_NAME_GENERAL> 
set dns host dns1 <IPvx> admin-preference ...
set dns host dns2 src-interface 
set dns host dns2 admin-preference 
set dns host dns2 
set dns host dns2 <IPvx> src-interface <IF_NAME_GENERAL> admin-preference <NUMBER> 
set dns host dns2 <IPvx> src-interface <IF_NAME_GENERAL> 
set dns host dns2 <IPvx> admin-preference ...
set dns host dns3 src-interface 
set dns host dns3 admin-preference 
set dns host dns3 
set dns host dns3 <IPvx> src-interface <IF_NAME_GENERAL> admin-preference <NUMBER> 
set dns host dns3 <IPvx> src-interface <IF_NAME_GENERAL> 
set dns host dns3 <IPvx> admin-preference ...
set dns host schedule <TIME> interval <NUMBER> 
set dns host schedule <TIME> 
set dns host name <STRING> <IPvx> 
set dns host name <STRING> 
set dns host name <STRING> <IPvx> 
set dns proxy enable 
set dns proxy 
set dns server-select domain <STRING> outgoing-interface <IF_NAME_GENERAL> primary-server <IPvx> secondary-server <IPvx> tertiary-server <IPvx> failover 
set dns server-select domain <STRING> outgoing-interface <IF_NAME_GENERAL> primary-server <IPvx> secondary-server <IPvx> tertiary-server <IPvx> 
set dns server-select domain <STRING> outgoing-interface <IF_NAME_GENERAL> primary-server <IPvx> secondary-server <IPvx> failover ...
set dns server-select domain <STRING> outgoing-interface <IF_NAME_GENERAL> primary-server <IPvx> failover ...
set dns server-select domain <STRING> outgoing-interface <IF_NAME_GENERAL> failover ...
set dns server-select domain <STRING> primary-server ...
set dns ddns enable 
set dns ddns id <NUMBER> server 
set dns ddns id <NUMBER> service 
set dns ddns id <NUMBER> mininum-update-interval 
set dns ddns id <NUMBER> refresh-interval 
set dns ddns id <NUMBER> clear-text 
set dns ddns id <NUMBER> username 
set dns ddns id <NUMBER> agent 
set dns ddns id <NUMBER> src-interface 
set dns ddns id <NUMBER> host-name 
set dns ddns id <NUMBER> 
set dns ddns id <NUMBER> server <NAME_STRING> server-type dyndns refresh-interval <NUMBER> minimum-update-interval <NUMBER> clear-text 
set dns ddns id <NUMBER> server <NAME_STRING> server-type dyndns refresh-interval <NUMBER> minimum-update-interval <NUMBER> 
set dns ddns id <NUMBER> server <NAME_STRING> server-type dyndns refresh-interval <NUMBER> clear-text ...
set dns ddns id <NUMBER> server <NAME_STRING> server-type dyndns minimum-update-interval ...
set dns ddns id <NUMBER> server <NAME_STRING> server-type ddo refresh-interval ...
set dns ddns id <NUMBER> username <NAME_STRING> password <NAME_STRING> agent <NAME_STRING> 
set dns ddns id <NUMBER> username <NAME_STRING> password <NAME_STRING> 
set dns ddns id <NUMBER> src-interface <IF_NAME_GENERAL> host-name <NAME_STRING> service dyndns 
set dns ddns id <NUMBER> src-interface <IF_NAME_GENERAL> host-name <NAME_STRING> service statdns 
set dns ddns id <NUMBER> src-interface <IF_NAME_GENERAL> host-name <NAME_STRING> service custom 
set dns ddns id <NUMBER> src-interface <IF_NAME_GENERAL> host-name <NAME_STRING> service 
set dns ddns id <NUMBER> src-interface <IF_NAME_GENERAL> host-name <NAME_STRING> 
set dns ddns id <NUMBER> src-interface <IF_NAME_GENERAL> 
set dns ddns id <NUMBER> server-type dyndns ...
set dns ddns 
set address <ZONE_NAME> <NAME_STRING> <IPv4> <NETMASK/WILDCARD MASK><STRING> 
set address <ZONE_NAME> <NAME_STRING> <IPv4> <NETMASK/WILDCARD MASK>
set address <ZONE_NAME> <NAME_STRING> <IPv4_NUM> <STRING> ...
set address <ZONE_NAME> <NAME_STRING> <IPv6_NUM> <STRING> ...
set address <ZONE_NAME> <NAME_STRING> <STRING> ipv6 <STRING> ...
set address <ZONE_NAME> <NAME_STRING> <STRING> <STRING> ...
set address <ZONE_NAME> <NAME_STRING> <STRING> ...
set group address <ZONE_NAME> <NAME_STRING> remove <NAME_STRING> 
set group address <ZONE_NAME> <NAME_STRING> clear 
set group address <ZONE_NAME> <NAME_STRING> 
set group address <ZONE_NAME> <NAME_STRING> ipv6 mip hidden 
set group address <ZONE_NAME> <NAME_STRING> ipv6 mip add <NAME_STRING> comment <STRING> 
set group address <ZONE_NAME> <NAME_STRING> ipv6 mip add <NAME_STRING> 
set group address <ZONE_NAME> <NAME_STRING> ipv6 mip comment ...
set group address <ZONE_NAME> <NAME_STRING> ipv6 vip hidden ...
set group address <ZONE_NAME> <NAME_STRING> ipv6 hidden ...
set group address <ZONE_NAME> <NAME_STRING> ...
set group service ...
set group address ...
set vpnmonitor interval <NUMBER> 
set vpnmonitor threshold <NUMBER> 
set ippool <NAME_STRING> <IPv4> <IPv4> 
set user uid <NUMBER> 
set user <NAME_STRING> type auth ike l2tp xauth wan 
set user <NAME_STRING> type auth ike l2tp xauth ...
set user <NAME_STRING> type auth ike l2tp wan ...
set user <NAME_STRING> type auth ike xauth ...
set user <NAME_STRING> type auth l2tp ...
set user <NAME_STRING> type ike ...
set user <NAME_STRING> remote-settings dns1 
set user <NAME_STRING> remote-settings dns2 
set user <NAME_STRING> remote-settings wins1 
set user <NAME_STRING> remote-settings wins2 
set user <NAME_STRING> remote-settings ippool 
set user <NAME_STRING> remote-settings ipaddr 
set user <NAME_STRING> 
set user <NAME_STRING> password <STRING> 
set user <NAME_STRING> hash-password <STRING> 
set user <NAME_STRING> ike-id asn1-dn container <STRING> wildcard <STRING> share-limit <NUMBER> 
set user <NAME_STRING> ike-id asn1-dn container <STRING> wildcard <STRING> 
set user <NAME_STRING> ike-id asn1-dn container <STRING> share-limit ...
set user <NAME_STRING> ike-id asn1-dn wildcard <STRING> ...
set user <NAME_STRING> ike-id fqdn <STRING> ...
set user <NAME_STRING> ike-id ip <STRING> ...
set user <NAME_STRING> ike-id u-fqdn <STRING> ...
set user <NAME_STRING> ike-id <STRING> share-limit ...
set user <NAME_STRING> type auth ike l2tp xauth wan 
set user <NAME_STRING> type auth ike l2tp xauth ...
set user <NAME_STRING> type auth ike l2tp wan ...
set user <NAME_STRING> type auth ike xauth ...
set user <NAME_STRING> type auth l2tp ...
set user <NAME_STRING> type ike ...
set user <NAME_STRING> no_use2 <NAME_STRING> 
set user <NAME_STRING> no_use1 <NUMBER> 
set user <NAME_STRING> remote-settings dns1 <IPv4> 
set user <NAME_STRING> remote-settings dns2 <IPv4> 
set user <NAME_STRING> remote-settings wins1 <IPv4> 
set user <NAME_STRING> remote-settings wins2 <IPv4> 
set user <NAME_STRING> remote-settings ippool <NAME_STRING> 
set user <NAME_STRING> remote-settings ipaddr <IPv4> 
set user <NAME_STRING> enable 
set user <NAME_STRING> disable 
set user <NAME_STRING> uid <NUMBER> 
set user ...
set user-group id <NUMBER> 
set user-group <NAME_STRING> type auth l2tp xauth 
set user-group <NAME_STRING> type auth l2tp ...
set user-group <NAME_STRING> type auth xauth ...
set user-group <NAME_STRING> type l2tp ...
set user-group <NAME_STRING> location local 
set user-group <NAME_STRING> location external 
set user-group <NAME_STRING> user <NAME_STRING> 
set user-group <NAME_STRING> id <NUMBER> 
set user-group <NAME_STRING> ...
set user-group ...
set crypto-policy 
set ike ikeid-enumeration 
set ike dos-protection 
set ike gateway ikev2 <NAME_STRING> auth-method 
set ike gateway ikev2 <NAME_STRING> eap 
set ike gateway ikev2 <NAME_STRING> my-cert 
set ike gateway ikev2 <NAME_STRING> peer-ca 
set ike gateway ikev2 <NAME_STRING> policy-checking 
set ike gateway ikev2 <NAME_STRING> peer-cert-type 
set ike gateway ikev2 <NAME_STRING> nat-traversal udp-checksum 
set ike gateway ikev2 <NAME_STRING> nat-traversal 
set ike gateway ikev2 <NAME_STRING> dpd-liveness interval <NUMBER> 
set ike gateway ikev2 <NAME_STRING> dpd-liveness retry <NUMBER> 
set ike gateway ikev2 <NAME_STRING> dpd-liveness always-send 
set ike gateway ikev2 <NAME_STRING> dpd-liveness hub-override 
set ike gateway ikev2 <NAME_STRING> 
set ike gateway ikev2 <NAME_STRING> heartbeat hello 
set ike gateway ikev2 <NAME_STRING> heartbeat threshold 
set ike gateway ikev2 <NAME_STRING> heartbeat reconnect 
set ike gateway ikev2 <NAME_STRING> heartbeat hub-override 
set ike gateway ikev2 <NAME_STRING> 
set ike gateway ikev2 <NAME_STRING> modecfg client pd interface <IF_NAME_GENERAL> sla-id <NUMBER> sla-len <NUMBER> 
set ike gateway ikev2 <NAME_STRING> modecfg client pd interface <IF_NAME_GENERAL> 
set ike gateway ikev2 <NAME_STRING> modecfg client action update-dhcpserver 
set ike gateway ikev2 <NAME_STRING> modecfg client admin-preference <NUMBER> 
set ike gateway ikev2 <NAME_STRING> modecfg server action add-route 
set ike gateway ikev2 <NAME_STRING> modecfg server info-origin local dns 
set ike gateway ikev2 <NAME_STRING> ...
set ike gateway ikev2 <NAME_STRING> xauth accounting off 
set ike gateway ikev2 <NAME_STRING> xauth accounting server 
set ike gateway ikev2 <NAME_STRING> xauth server auth-method 
set ike gateway ikev2 <NAME_STRING> xauth do-edipi-auth 
set ike gateway ikev2 <NAME_STRING> xauth 
set ike gateway ikev2 <NAME_STRING> dpd-liveness ...
set ike gateway <NAME_STRING> my-cert ...
set ike ikev2 initiator-send-dummy-ipsec 
set ike ikev2 ike-sa-soft-lifetime 
set ike ikev2 stateless-cookie-threshold 
set ike p2-proposal <NAME_STRING> 
set ike p1-proposal <NAME_STRING> 
set ike policy-checking 
set ike accept-all-proposal 
set ike initial-contact 
set ike responder-set-commit 
set ike initiator-set-commit 
set ike respond-bad-spi 
set ike member-hold-sa 
set ike responder-mode 
set ike p1-max-dialgrp-sessions 
set ike heartbeat ...
set ike ikeid-enumeration <NUMBER> <NUMBER> 
set ike ikeid-enumeration <NUMBER> 
set ike ikeid-enumeration 
set ike id-mode ip 
set ike id-mode subnet 
set ike gateway ikev2 <NAME_STRING> auth-method self eap peer eap 
set ike gateway ikev2 <NAME_STRING> auth-method self eap peer dsa-sig 
set ike gateway ikev2 <NAME_STRING> auth-method self eap peer rsa-sig 
set ike gateway ikev2 <NAME_STRING> auth-method self eap peer preshare 
set ike gateway ikev2 <NAME_STRING> auth-method self dsa-sig peer ...
set ike gateway ikev2 <NAME_STRING> auth-method self rsa-sig peer ...
set ike gateway ikev2 <NAME_STRING> auth-method self preshare peer ...
set ike gateway ikev2 <NAME_STRING> eap supplicant md5 username <NAME_STRING> password <STRING> 
set ike gateway ikev2 <NAME_STRING> eap authenticator passthrough <NAME_STRING> user <NAME_STRING> send-id-req 
set ike gateway ikev2 <NAME_STRING> eap authenticator passthrough <NAME_STRING> user <NAME_STRING> 
set ike gateway ikev2 <NAME_STRING> eap authenticator passthrough <NAME_STRING> send-id-req ...
set ike gateway ikev2 <NAME_STRING> policy-checking 
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> local-id <STRING> outgoing-zone <ZONE_NAME> local-address <IPvx> preshare <STRING> proposal <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> 
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> local-id <STRING> outgoing-zone <ZONE_NAME> local-address <IPvx> preshare <STRING> proposal <NAME_STRING> <NAME_STRING> <NAME_STRING> 
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> local-id <STRING> outgoing-zone <ZONE_NAME> local-address <IPvx> preshare <STRING> proposal <NAME_STRING> <NAME_STRING> 
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> local-id <STRING> outgoing-zone <ZONE_NAME> local-address <IPvx> preshare <STRING> proposal <NAME_STRING> 
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> local-id <STRING> outgoing-zone <ZONE_NAME> local-address <IPvx> preshare <STRING> sec-level basic 
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> local-id <STRING> outgoing-zone <ZONE_NAME> local-address <IPvx> preshare <STRING> sec-level compatible 
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> local-id <STRING> outgoing-zone <ZONE_NAME> local-address <IPvx> preshare <STRING> sec-level standard 
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> local-id <STRING> outgoing-zone <ZONE_NAME> local-address <IPvx> seed-preshare <STRING> ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> local-id <STRING> outgoing-zone <ZONE_NAME> local-address <IPvx> proposal ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> local-id <STRING> outgoing-zone <ZONE_NAME> local-address <IPv4> preshare ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> local-id <STRING> outgoing-zone <ZONE_NAME> preshare ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> local-id <STRING> preshare ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> local-id <STRING> outgoing-interface <IF_NAME_GENERAL> local-address ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> local-id <STRING> preshare ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> aggressive local-id ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> main local-id ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> wildcard <STRING> local-id ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn container <STRING> ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id asn1-dn wildcard <STRING> ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id fqdn <STRING> ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id ip-addr <STRING> ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id u-fqdn <STRING> ...
set ike gateway ikev2 <NAME_STRING> address <STRING> id <STRING> ...
set ike gateway ikev2 <NAME_STRING> address <STRING> ...
set ike gateway ikev2 <NAME_STRING> dialup <NAME_STRING> ...
set ike gateway ikev2 <NAME_STRING> cert my-ca-hash <STRING> 
set ike gateway ikev2 <NAME_STRING> cert my-cert system 
set ike gateway ikev2 <NAME_STRING> cert my-cert <NUMBER> 
set ike gateway ikev2 <NAME_STRING> cert my-cert-hash <STRING> 
set ike gateway ikev2 <NAME_STRING> cert peer-cert-type x509-sig 
set ike gateway ikev2 <NAME_STRING> cert peer-cert-type pkcs7 
set ike gateway ikev2 <NAME_STRING> cert peer-ca all 
set ike gateway ikev2 <NAME_STRING> cert peer-ca self-signed 
set ike gateway ikev2 <NAME_STRING> cert peer-ca <NUMBER> 
set ike gateway ikev2 <NAME_STRING> cert peer-ca-hash <STRING> 
set ike gateway ikev2 <NAME_STRING> nat-traversal keepalive-frequency <NUMBER> 
set ike gateway ikev2 <NAME_STRING> nat-traversal udp-checksum 
set ike gateway ikev2 <NAME_STRING> nat-traversal 
set ike gateway ikev2 <NAME_STRING> dpd-liveness interval ...
set ike gateway ikev2 <NAME_STRING> heartbeat hello <NUMBER> 
set ike gateway ikev2 <NAME_STRING> heartbeat threshold <NUMBER> 
set ike gateway ikev2 <NAME_STRING> heartbeat reconnect <NUMBER> 
set ike gateway ikev2 <NAME_STRING> heartbeat hub-override 
set ike gateway ikev2 <NAME_STRING> modecfg client ...
set ike gateway ikev2 <NAME_STRING> ...
set ike gateway ikev2 <NAME_STRING> xauth client any username <NAME_STRING> password <STRING> 
set ike gateway ikev2 <NAME_STRING> xauth client chap username ...
set ike gateway ikev2 <NAME_STRING> xauth client securid username ...
set ike gateway ikev2 <NAME_STRING> xauth server auth-method chap pap 
set ike gateway ikev2 <NAME_STRING> xauth server auth-method chap 
set ike gateway ikev2 <NAME_STRING> xauth server <NAME_STRING> query-config user-group <NAME_STRING> 
set ike gateway ikev2 <NAME_STRING> xauth server <NAME_STRING> query-config user <NAME_STRING> 
set ike gateway ikev2 <NAME_STRING> xauth server <NAME_STRING> query-config 
set ike gateway ikev2 <NAME_STRING> xauth server <NAME_STRING> user-group ...
set ike gateway ikev2 <NAME_STRING> xauth bypass-auth 
set ike gateway ikev2 <NAME_STRING> xauth accounting off 
set ike gateway ikev2 <NAME_STRING> xauth accounting server <NAME_STRING> 
set ike gateway ikev2 <NAME_STRING> xauth do-edipi-auth 
set ike gateway ikev2 <NAME_STRING> xauth 
set ike gateway ikev2 <NAME_STRING> dpd-liveness ...
set ike gateway ikev2 <NAME_STRING> dynamic asn1-dn ...
set ike gateway ikev2 <NAME_STRING> acvpn-profile proposal ...
set ike gateway ikev2 <NAME_STRING> acvpn-dynamic local-id <STRING> 
set ike gateway ikev2 <NAME_STRING> acvpn-dynamic 
set ike gateway ikev2 <NAME_STRING> dialup ...
set ike gateway <NAME_STRING> policy-checking ...
set ike ikev2 initiator-send-dummy-ipsec 
set ike ikev2 ike-sa-soft-lifetime <NUMBER> 
set ike ikev2 stateless-cookie-threshold <NUMBER> 
set ike p2-proposal <NAME_STRING> group14 esp 3des sha-1 seconds <NUMBER> kbyte <NUMBER> ...
set ike p2-proposal <NAME_STRING> group14 esp 3des sha-1 seconds <NUMBER> 
set ike p2-proposal <NAME_STRING> group14 esp 3des sha-1 minutes <NUMBER> ...
set ike p2-proposal <NAME_STRING> group14 esp 3des sha-1 hours <NUMBER> ...
set ike p2-proposal <NAME_STRING> group14 esp 3des sha-1 days <NUMBER> ...
set ike p2-proposal <NAME_STRING> group14 esp 3des sha-1 kbyte ...
set ike p2-proposal <NAME_STRING> group14 esp 3des md5 seconds ...
set ike p2-proposal <NAME_STRING> group14 esp 3des sha2-256 seconds ...
set ike p2-proposal <NAME_STRING> group14 esp 3des 
set ike p2-proposal <NAME_STRING> group14 esp 3des null seconds ...
set ike p2-proposal <NAME_STRING> group14 esp 3des 
set ike p2-proposal <NAME_STRING> group14 esp aes128 sha-1 ...
set ike p2-proposal <NAME_STRING> group14 esp aes192 sha-1 ...
set ike p2-proposal <NAME_STRING> group14 esp aes256 sha-1 ...
set ike p2-proposal <NAME_STRING> group14 esp null sha-1 ...
set ike p2-proposal <NAME_STRING> group14 esp 
set ike p2-proposal <NAME_STRING> group14 esp des sha-1 ...
set ike p2-proposal <NAME_STRING> group14 esp aes128 ...
set ike p2-proposal <NAME_STRING> group14 ah sha-1 ...
set ike p2-proposal <NAME_STRING> group5 esp ...
set ike p2-proposal <NAME_STRING> group2 esp ...
set ike p2-proposal <NAME_STRING> group1 esp ...
set ike p2-proposal <NAME_STRING> no-pfs esp ...
set ike p2-proposal <NAME_STRING> esp ...
set ike p1-proposal <NAME_STRING> ecdsa-sig group14 esp 3des sha-1 seconds <NUMBER> 
set ike p1-proposal <NAME_STRING> ecdsa-sig group14 esp 3des sha-1 minutes <NUMBER> ...
set ike p1-proposal <NAME_STRING> ecdsa-sig group14 esp 3des sha-1 hours <NUMBER> ...
set ike p1-proposal <NAME_STRING> ecdsa-sig group14 esp 3des sha-1 days <NUMBER> ...
set ike p1-proposal <NAME_STRING> ecdsa-sig group14 esp 3des sha-1 
set ike p1-proposal <NAME_STRING> ecdsa-sig group14 esp 3des md5 seconds ...
set ike p1-proposal <NAME_STRING> ecdsa-sig group14 esp 3des sha2-256 seconds ...
set ike p1-proposal <NAME_STRING> ecdsa-sig group14 esp aes128 sha-1 ...
set ike p1-proposal <NAME_STRING> ecdsa-sig group14 esp aes192 sha-1 ...
set ike p1-proposal <NAME_STRING> ecdsa-sig group14 esp aes256 sha-1 ...
set ike p1-proposal <NAME_STRING> ecdsa-sig group14 esp des sha-1 ...
set ike p1-proposal <NAME_STRING> ecdsa-sig group14 esp aes128 ...
set ike p1-proposal <NAME_STRING> ecdsa-sig group5 esp ...
set ike p1-proposal <NAME_STRING> ecdsa-sig group2 esp ...
set ike p1-proposal <NAME_STRING> ecdsa-sig group1 esp ...
set ike p1-proposal <NAME_STRING> ecdsa-sig esp ...
set ike p1-proposal <NAME_STRING> dsa-sig group14 ...
set ike p1-proposal <NAME_STRING> rsa-sig group14 ...
set ike p1-proposal <NAME_STRING> preshare group14 ...
set ike p1-proposal <NAME_STRING> group14 ...
set ike policy-checking 
set ike accept-all-proposal 
set ike initial-contact all-peers 
set ike initial-contact single-gateway <NAME_STRING> 
set ike initial-contact 
set ike responder-set-commit 
set ike initiator-set-commit 
set ike respond-bad-spi <NUMBER> 
set ike soft-lifetime-buffer <NUMBER> 
set ike member-sa-hold-time <NUMBER> 
set ike responder-mode 
set ike p1-max-dialgrp-sessions count <NUMBER> 
set ike p1-max-dialgrp-sessions percentage <NUMBER> ...
set ike heartbeat ...
set ipsec access-session enable 
set ipsec access-session maximum 
set ipsec access-session upper-threshold 
set ipsec access-session lower-threshold 
set ipsec access-session dead-p2-sa-timeout 
set ipsec access-session log-error 
set ipsec access-session info-exch-connected 
set ipsec access-session 
set ipsec access-session enable 
set ipsec access-session maximum <NUMBER> 
set ipsec access-session upper-threshold <NUMBER> 
set ipsec access-session lower-threshold <NUMBER> 
set ipsec access-session dead-p2-sa-timeout <NUMBER> 
set ipsec access-session log-error 
set ipsec access-session info-exch-connected 
set ipsec access-session 
set xauth default ippool <NAME_STRING> 
set xauth default dns1 <IPv4> 
set xauth default dns2 <IPv4> 
set xauth default wins1 <IPv4> 
set xauth default wins2 <IPv4> 
set xauth default auth server <NAME_STRING> chap query-config 
set xauth default auth server <NAME_STRING> chap 
set xauth default auth server <NAME_STRING> query-config ...
set xauth default accounting off 
set xauth default accounting server <NAME_STRING> 
set xauth lifetime <NUMBER> 
set xauth server auth-retry <NUMBER> 
set sa-filter all 
set sa-filter <IPvx> 
set vpn <NAME_STRING> proxy-id local-ip <IPv4> <NETMASK> remote-ip <IPv4> <NETMASK> <STRING> 
set vpn <NAME_STRING> proxy-id local-ip <IPv4> <NETMASK> remote-ip <IPv4_NUM> <STRING> ...
set vpn <NAME_STRING> proxy-id local-ip <IPv4> <NETMASK> remote-ip <IPv6_NUM> <STRING> ...
set vpn <NAME_STRING> proxy-id local-ip <IPv4_NUM> remote-ip ...
set vpn <NAME_STRING> proxy-id local-ip <IPv6_NUM> remote-ip ...
set vpn <NAME_STRING> monitor hub-override 
set vpn <NAME_STRING> monitor 
set vpn <NAME_STRING> bind interface <IF_NAME_GENERAL> 
set vpn <NAME_STRING> bind zone <ZONE_NAME> 
set vpn <NAME_STRING> dscp-mark 
set vpn <NAME_STRING> 
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> ah md5 key <LLX2_NUMBER> 
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> ah md5 key <LX5_NUMBER> 
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> ah md5 key <LLX4_NUMBER> 
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> ah md5 password <STRING> 
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> ah sha-1 key ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> ah sha2-256 key ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp aes128 key <LLX_NUMBER> auth md5 key <LLX2_NUMBER> 
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp aes128 key <LLX_NUMBER> auth md5 key <LX5_NUMBER> 
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp aes128 key <LLX_NUMBER> auth md5 key <LLX4_NUMBER> 
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp aes128 key <LLX_NUMBER> auth md5 password <STRING> 
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp aes128 key <LLX_NUMBER> auth sha-1 key ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp aes128 key <LLX_NUMBER> auth sha2-256 key ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp aes128 key <LLX_NUMBER> 
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp aes128 key <LLX3_NUMBER> auth ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp aes128 key <LLX2_NUMBER> auth ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp aes128 key <LLX3_NUMBER> ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp aes128 key <LLX4_NUMBER> auth ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp aes128 password <STRING> auth ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp aes192 key ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp aes256 key ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp 3des key ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp null auth ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp des key ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPvx> esp 3des ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address <IPv4> ah ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> ah ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-zone <ZONE_NAME> local-address ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> ah ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> outgoing-interface <IF_NAME_GENERAL> local-address ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> ah ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> gateway <IPvx> ...
set vpn <NAME_STRING> id <NUMBER> manual <LX_NUMBER> <LX_NUMBER> gateway <IPv4> ...
set vpn <NAME_STRING> id <NUMBER> gateway <NAME_STRING> no-replay transport idletime <NUMBER> proposal <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> 
set vpn <NAME_STRING> id <NUMBER> gateway <NAME_STRING> no-replay transport idletime <NUMBER> proposal <NAME_STRING> <NAME_STRING> <NAME_STRING> 
set vpn <NAME_STRING> id <NUMBER> gateway <NAME_STRING> no-replay transport idletime <NUMBER> proposal <NAME_STRING> <NAME_STRING> 
set vpn <NAME_STRING> id <NUMBER> gateway <NAME_STRING> no-replay transport idletime <NUMBER> proposal <NAME_STRING> 
set vpn <NAME_STRING> id <NUMBER> gateway <NAME_STRING> no-replay transport idletime <NUMBER> sec-level basic 
set vpn <NAME_STRING> id <NUMBER> gateway <NAME_STRING> no-replay transport idletime <NUMBER> sec-level compatible 
set vpn <NAME_STRING> id <NUMBER> gateway <NAME_STRING> no-replay transport idletime <NUMBER> sec-level standard 
set vpn <NAME_STRING> id <NUMBER> gateway <NAME_STRING> no-replay transport proposal ...
set vpn <NAME_STRING> id <NUMBER> gateway <NAME_STRING> no-replay tunnel idletime ...
set vpn <NAME_STRING> id <NUMBER> gateway <NAME_STRING> no-replay idletime ...
set vpn <NAME_STRING> id <NUMBER> gateway <NAME_STRING> replay transport ...
set vpn <NAME_STRING> id <NUMBER> gateway <NAME_STRING> transport ...
set vpn <NAME_STRING> id <NUMBER> dscp-mark <NUMBER> 
set vpn <NAME_STRING> id <NUMBER> monitor source-interface <IF_NAME_GENERAL> destination-ip <IPvx> optimized rekey 
set vpn <NAME_STRING> id <NUMBER> monitor source-interface <IF_NAME_GENERAL> destination-ip <IPvx> optimized 
set vpn <NAME_STRING> id <NUMBER> monitor source-interface <IF_NAME_GENERAL> destination-ip <IPvx> hub-override 
set vpn <NAME_STRING> id <NUMBER> monitor source-interface <IF_NAME_GENERAL> destination-ip <IPvx> rekey ...
set vpn <NAME_STRING> id <NUMBER> monitor source-interface <IF_NAME_GENERAL> optimized ...
set vpn <NAME_STRING> id <NUMBER> monitor optimized ...
set vpn <NAME_STRING> id <NUMBER> df-bit clear 
set vpn <NAME_STRING> id <NUMBER> df-bit set 
set vpn <NAME_STRING> id <NUMBER> df-bit copy 
set vpn <NAME_STRING> id <NUMBER> bind interface ...
set vpn <NAME_STRING> id <NUMBER> acvpn-dynamic <NAME_STRING> <NAME_STRING> 
set vpn <NAME_STRING> id <NUMBER> acvpn-profile <NAME_STRING> no-replay ...
set vpn <NAME_STRING> id <NUMBER> failover-weight <NUMBER> 
set vpn <NAME_STRING> id <NUMBER> backup-weight <NUMBER> 
set vpn <NAME_STRING> manual ...
set vpn-group id <NUMBER> vpn <NAME_STRING> weight <NUMBER> 
set vpn-group id <NUMBER> vpn <NAME_STRING> 
set vpn-group id <NUMBER> 
set l2tp default ippool <NAME_STRING> 
set l2tp default dns1 <IPv4> 
set l2tp default dns2 <IPv4> 
set l2tp default wins1 <IPv4> 
set l2tp default wins2 <IPv4> 
set l2tp default accounting off 
set l2tp default accounting server <NAME_STRING> 
set l2tp default ppp-auth chap pap 
set l2tp default ppp-auth chap 
set l2tp default ppp-auth pap 
set l2tp default ppp-auth any 
set l2tp default accounting ...
set l2tp default auth server <NAME_STRING> query-config 
set l2tp default auth server <NAME_STRING> 
set l2tp default ...
set l2tp <NAME_STRING> auth 
set l2tp <NAME_STRING> auth server <NAME_STRING> query-config user <NAME_STRING> ...
set l2tp <NAME_STRING> auth server <NAME_STRING> query-config user-group <NAME_STRING> ...
set l2tp <NAME_STRING> auth server <NAME_STRING> query-config ...
set l2tp <NAME_STRING> auth server <NAME_STRING> user ...
set l2tp <NAME_STRING> accounting off ...
set l2tp <NAME_STRING> accounting server ...
set l2tp <NAME_STRING> accounting server <NAME_STRING> ...
set l2tp <NAME_STRING> remote-setting ippool dns1 dns2 wins1 wins2 <IPv4> 
set l2tp <NAME_STRING> remote-setting ippool dns1 dns2 wins1 wins2 
set l2tp <NAME_STRING> remote-setting ippool dns1 dns2 wins1 
set l2tp <NAME_STRING> remote-setting ippool dns1 dns2 wins1 <IPv4> wins2 ...
set l2tp <NAME_STRING> remote-setting ippool dns1 dns2 wins2 ...
set l2tp <NAME_STRING> remote-setting ippool dns1 dns2 <IPv4> wins1 ...
set l2tp <NAME_STRING> remote-setting ippool dns1 wins1 ...
set l2tp <NAME_STRING> remote-setting ippool dns1 <IPv4> dns2 ...
set l2tp <NAME_STRING> remote-setting ippool dns2 ...
set l2tp <NAME_STRING> remote-setting ippool <NAME_STRING> dns1 ...
set l2tp <NAME_STRING> remote-setting dns1 ...
set l2tp <NAME_STRING> peer-ip <IPv4> host <STRING> secret <STRING> keepalive <NUMBER> 
set l2tp <NAME_STRING> peer-ip <IPv4> host <STRING> secret <STRING> 
set l2tp <NAME_STRING> peer-ip <IPv4> host <STRING> keepalive ...
set l2tp <NAME_STRING> peer-ip <IPv4> host <STRING> outgoing-interface <IF_NAME_GENERAL> secret ...
set l2tp <NAME_STRING> peer-ip <IPv4> host <STRING> secret ...
set l2tp <NAME_STRING> peer-ip <IPv4> outgoing-interface ...
set l2tp <NAME_STRING> host ...
set l2tp <NAME_STRING> id <NUMBER> peer-ip ...
set l2tp <NAME_STRING> peer-ip ...
set dip sticky 
set dip group <NUMBER> member <NUMBER> 
set dip group <NUMBER> 
set dip alarm-raise <NUMBER> alarm-clear <NUMBER> 
set dip alarm-raise <NUMBER> 
set dip group ...
set arp nat-dst 
set arp age <NUMBER> 
set arp <IPv4> <IF_NAME_GENERAL> 
set arp <IPv4> 
set arp <IPv4> <MACADDR> <IF_NAME_GENERAL> 
set traffic-shaping mode off 
set traffic-shaping mode on 
set traffic-shaping mode auto 
set traffic-shaping ip_precedence <NUMBER> <NUMBER> <NUMBER> <NUMBER> <NUMBER> <NUMBER> <NUMBER> <NUMBER> 
set traffic-shaping dscp-class-selector 
set group-expression id <NUMBER> 
set group-expression <NAME_STRING> id <NUMBER> 
set group-expression <NAME_STRING> not <NAME_STRING> 
set group-expression <NAME_STRING> <NAME_STRING> and <NAME_STRING> 
set group-expression <NAME_STRING> <NAME_STRING> or <NAME_STRING> ...
set group-expression <NAME_STRING> ...
set group-expression ...
set url protocol type websense 
set url protocol type scfp 
set url protocol type sc-cpa 
set url protocol websense 
set url protocol <STRING> 
set url protocol scfp 
set url protocol ...
set url protocol sc-cpa 
set url protocol ...
set url account <NAME_STRING> 
set url ...
set anti-spam profile ns-profile 
set proxy-id manual-update 
set policy id <NUMBER> application 
set policy id <NUMBER> attack 
set policy id <NUMBER> gtp 
set policy id <NUMBER> av <NAME_STRING> 
set policy id <NUMBER> anti-spam 
set policy id <NUMBER> disable 
set policy id <NUMBER> 
set policy id <NUMBER> disable ...
set policy id <NUMBER> ...
set policy <NUMBER> ...
set policy move <NUMBER> before <NUMBER> 
set policy move <NUMBER> after <NUMBER> ...
set policy id <NUMBER> 
set policy id <NUMBER> application <ENUM> 
set policy id <NUMBER> attack <NAME_STRING> action <ENUM> ip-action <ENUM> target <ENUM> timeout <NUMBER> 
set policy id <NUMBER> attack <NAME_STRING> action <ENUM> ip-action <ENUM> target <ENUM> 
set policy id <NUMBER> attack <NAME_STRING> action <ENUM> ip-action <ENUM> timeout ...
set policy id <NUMBER> attack <NAME_STRING> action <ENUM> 
set policy id <NUMBER> gtp <NAME_STRING> 
set policy id <NUMBER> av <NAME_STRING> ...
set policy id <NUMBER> anti-spam ns-profile 
set policy id <NUMBER> disable 
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter traffic priority <NUMBER> dscp value <NUMBER> av <NAME_STRING> ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter traffic priority <NUMBER> dscp value <NUMBER> anti-spam ns-profile attack <NAME_STRING> ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter traffic priority <NUMBER> dscp value <NUMBER> anti-spam ns-profile 
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter traffic priority <NUMBER> dscp value <NUMBER> ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter traffic priority <NUMBER> ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter traffic dscp value ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter traffic gbw <NUMBER> priority <NUMBER> mbw <NUMBER> dscp disable ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter traffic gbw <NUMBER> priority <NUMBER> mbw <NUMBER> dscp enable value <NUMBER> ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter traffic gbw <NUMBER> priority <NUMBER> mbw <NUMBER> dscp enable ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter traffic gbw <NUMBER> priority <NUMBER> mbw <NUMBER> ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter traffic gbw <NUMBER> priority <NUMBER> pbw <NUMBER> dscp ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter traffic gbw <NUMBER> priority <NUMBER> dscp ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter traffic gbw <NUMBER> mbw ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter traffic priority ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup url-filter ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-session-backup ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop no-idle-reset url-filter ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> alarm-without-drop url-filter ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess sess-limit per-src-ip <NUMBER> ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> no-hw-sess ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count alarm <NUMBER> <NUMBER> sess-limit ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert count ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log alert ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> log count ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> schedule <NAME_STRING> count ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user-group <NAME_STRING> log ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> user <NAME_STRING> schedule ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> group-expression <NAME_STRING> schedule ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth server <NAME_STRING> schedule ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit auth user-group ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit webauth redirect-unauthenticated user-group ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit webauth user-group ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit infranet-auth redirect-url <STRING> redirect-unauthenticated schedule ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit infranet-auth redirect-url <STRING> redirect-all schedule ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit infranet-auth redirect-url <STRING> schedule ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit infranet-auth redirect-unauthenticated ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit schedule ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> deny schedule ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> reject schedule ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> encrypt vpn <NAME_STRING> id <NUMBER> pair-policy <NUMBER> l2tp <NAME_STRING> auth server ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> encrypt vpn <NAME_STRING> id <NUMBER> pair-policy <NUMBER> l2tp <NAME_STRING> webauth ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> encrypt vpn <NAME_STRING> id <NUMBER> pair-policy <NUMBER> auth ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> encrypt vpn <NAME_STRING> id <NUMBER> l2tp ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> encrypt vpn <NAME_STRING> pair-policy ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> encrypt vpn-tunnel <NAME_STRING> ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> encrypt vpn-group <NUMBER> auth ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> encrypt l2tp <NAME_STRING> ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> tunnel vpn ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> nat src dip-id <NUMBER> dst ip <IPv4> port <NUMBER> permit ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> nat src dip-id <NUMBER> dst ip <IPv4> <IPv4> permit ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> nat src dip-id <NUMBER> dst ip <IPv4> permit ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> nat src dip-id <NUMBER> permit ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> nat src dip-id ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> nat src dst ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> nat src ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> nat dst ip ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> nat ...
set policy id <NUMBER> top name <NAME_STRING> <NAME_STRING> <NAME_STRING> <NAME_STRING> permit ...
set policy id <NUMBER> top name <NAME_STRING> from <NAME_STRING> to <NAME_STRING> ...
set policy id <NUMBER> top name <NAME_STRING> <POLICY_DIR> <NAME_STRING> ...
set policy id <NUMBER> top ...
set policy id <NUMBER> before <NUMBER> name ...
set policy id <NUMBER> name ...
set policy id <NUMBER> disable ...
set policy id <NUMBER> ...
set policy top ...
set policy ...
set policy default-permit-all 
set policy swrs 
set policy default-status-disabled 
set policy ...
set policy global ...
set policy ...
set pppoe name <NAME_STRING> interface <IF_NAME_GENERAL> 
set pppoe name <NAME_STRING> interface 
set pppoe name <NAME_STRING> ac <NAME_STRING> 
set pppoe name <NAME_STRING> authentication PAP 
set pppoe name <NAME_STRING> authentication CHAP 
set pppoe name <NAME_STRING> authentication PAP 
set pppoe name <NAME_STRING> authentication CHAP 
set pppoe name <NAME_STRING> authentication any 
set pppoe name <NAME_STRING> idle-interval <NUMBER> 
set pppoe name <NAME_STRING> static-ip 
set pppoe name <NAME_STRING> username <NAME_STRING> password <NAME_STRING> 
set pppoe name <NAME_STRING> service <NAME_STRING> 
set pppoe name <NAME_STRING> update-dhcpserver 
set pppoe name <NAME_STRING> name-server admin-preference <NUMBER> 
set pppoe name <NAME_STRING> default-route-metric <NUMBER> 
set pppoe name <NAME_STRING> ppp lcp-echo-timeout 
set pppoe name <NAME_STRING> ppp lcp-echo-retries 
set pppoe name <NAME_STRING> ppp lcp-echo-timeout <NUMBER> 
set pppoe name <NAME_STRING> ppp lcp-echo-retries <NUMBER> 
set pppoe name <NAME_STRING> ppp ipcp ipv6cp 
set pppoe name <NAME_STRING> ppp ipcp ipv6cp ipcp 
set pppoe name <NAME_STRING> ppp ipcp ipv6cp 
set pppoe name <NAME_STRING> ppp ipcp ...
set pppoe name <NAME_STRING> ppp ipv6cp ...
set pppoe name <NAME_STRING> auto-connect <NUMBER> 
set pppoe name <NAME_STRING> netmask <NETMASK> 
set pppoe name <NAME_STRING> clear-on-disconnect 
set pppoe name <NAME_STRING> enable 
set pppoe name <NAME_STRING> 
set pppoe interface ...
set alarm threshold CPU <NUMBER> 
set alarm threshold CPU ...
set alarm threshold memory <NUMBER> 
set alarm threshold session percent <NUMBER> 
set alarm threshold session count <NUMBER> 
set alarm snapshot CPU on 
set alarm snapshot CPU trigger 
set alarm snapshot accum_time service-session-counter <NUMBER> 
set alarm snapshot accum_time task-runtime-counter ...
set alarm snapshot accum_time flow-counter ...
set alarm security interval <NUMBER> 
set alarm security audible 
set alarm security enable ...
set alarm security local-force ...
set alarm security overwrite disable ...
set alarm security potential-violation policy-violation rate <NUMBER> per second 
set alarm security potential-violation policy-violation rate <NUMBER> per minute 
set alarm security potential-violation replay enable 
set alarm security potential-violation crypto-failure-self-test enable 
set alarm security potential-violation key-gen-failure-self-test enable 
set alarm security potential-violation non-crypto-failure-self-test enable 
set alarm security potential-violation encryption-failures <NUMBER> 
set alarm security potential-violation decryption-failures <NUMBER> 
set alarm security potential-violation ike-p1-failures <NUMBER> 
set alarm security potential-violation ike-p2-failures <NUMBER> 
set alarm security potential-violation authentication-violation enable 
set syslog src-interface 
set syslog enable 
set syslog config <STRING> transport 
set syslog config <STRING> port 
set syslog config <STRING> log all 
set syslog config <STRING> log event 
set syslog config <STRING> log traffic 
set syslog config <STRING> log idp 
set syslog config <STRING> 
set syslog config 
set syslog src-interface <IF_NAME_GENERAL> 
set syslog enable 
set syslog config <STRING> log all 
set syslog config <STRING> log event 
set syslog config <STRING> log traffic 
set syslog config <STRING> log idp 
set syslog config <STRING> port <NUMBER> 
set syslog config <STRING> transport tcp 
set syslog config <STRING> facilities local0 local0 
set syslog config <STRING> facilities local0 local1 
set syslog config <STRING> facilities local0 local2 
set syslog config <STRING> facilities local0 local3 
set syslog config <STRING> facilities local0 local4 
set syslog config <STRING> facilities local0 local5 
set syslog config <STRING> facilities local0 local6 
set syslog config <STRING> facilities local0 local7 
set syslog config <STRING> facilities local0 AUTH/SEC 
set syslog config <STRING> facilities local1 local0 ...
set syslog config <STRING> facilities local2 local0 ...
set syslog config <STRING> facilities local3 local0 ...
set syslog config <STRING> facilities local4 local0 ...
set syslog config <STRING> facilities local5 local0 ...
set syslog config <STRING> facilities local6 local0 ...
set syslog config <STRING> facilities local7 local0 ...
set syslog config <STRING> facilities AUTH/SEC local0 ...
set syslog config <STRING> 
set webtrends host-name <STRING> 
set webtrends port <NUMBER> 
set webtrends enable 
set webtrends VPN 
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> rule-id <NUMBER> success 
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> rule-id <NUMBER> failure 
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> rule-id <NUMBER> 
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> success ...
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port rule-id ...
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> rule-id ...
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> 
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv6> dst-port ...
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv6_NUM> dst-port ...
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> src-ip <IPv4> src-netmask <NETMASK> dst-ip dst-port ...
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> src-ip <IPv4> src-netmask <NETMASK> dst-port ...
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> src-ip <IPv4> 
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> src-ip <IPv6> <IPv6_NUM> dst-ip ...
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> src-ip <IPv6_NUM> ...
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> src-ip dst-ip ...
set log exclude-id <NUMBER> user-id <STRING> event-type <NUMBER> dst-ip ...
set log exclude-id <NUMBER> user-id <STRING> event-type src-ip ...
set log exclude-id <NUMBER> user-id <STRING> src-ip ...
set log exclude-id <NUMBER> event-type ...
set log cli enable 
set log cli file-size <NUMBER> 
set log usb filesize <NUMBER> 
set log usb enable 
set log module <STRING> level <STRING> destination <STRING> 
set log traffic detail level 
set log traffic detail level <NUMBER> 
set log audit-loss-mitigation 
set log module ...
set syn-threshold <NUMBER> 
set firewall default-deny 
set firewall log-self exclude ike 
set firewall log-self exclude nsm 
set firewall log-self exclude web 
set firewall log-self exclude ssh 
set firewall log-self exclude telnet 
set firewall log-self exclude snmp 
set firewall log-self exclude multicast 
set firewall log-self exclude icmp 
set firewall log-self exclude 
set firewall log-self ike ...
set nsmgmt all 
set nsmgmt init id <STRING> 
set nsmgmt init otp <STRING> 
set nsmgmt init installer 
set nsmgmt init installer name <STRING> password <STRING> 
set nsmgmt init installer name ...
set nsmgmt server primary <STRING> 
set nsmgmt server primary <STRING> port <NUMBER> 
set nsmgmt server primary <STRING> src-interface <IF_NAME_GENERAL> 
set nsmgmt server secondary <STRING> 
set nsmgmt server secondary <STRING> port <NUMBER> 
set nsmgmt server secondary <STRING> src-interface <IF_NAME_GENERAL> 
set nsmgmt bulkcli reboot-timeout disable 
set nsmgmt bulkcli reboot-timeout <NUMBER> 
set nsmgmt enable 
set nsmgmt report alarm traffic enable 
set nsmgmt report alarm attack enable ...
set nsmgmt report alarm di enable ...
set nsmgmt report alarm other enable ...
set nsmgmt report log config enable ...
set nsmgmt report log info enable ...
set nsmgmt report log self enable ...
set nsmgmt report log traffic enable ...
set nsmgmt report statistics ethernet enable ...
set nsmgmt report statistics attack enable ...
set nsmgmt report statistics flow enable ...
set nsmgmt report statistics policy enable ...
set nsmgmt report proto-dist user-service <STRING> icmp <NUMBER_RANGE> 
set nsmgmt report proto-dist user-service <STRING> tcp <NUMBER_RANGE> ...
set nsmgmt report proto-dist user-service <STRING> udp <NUMBER_RANGE> ...
set nsmgmt report proto-dist user-service <STRING> gre <NUMBER_RANGE> ...
set nsmgmt report proto-dist user-service <STRING> esp <NUMBER_RANGE> ...
set nsmgmt report proto-dist user-service <STRING> ah <NUMBER_RANGE> ...
set nsmgmt report proto-dist user-service <STRING> ospf <NUMBER_RANGE> ...
set nsmgmt report proto-dist enable ...
set nsmgmt init ...
set nsmgmt ...
set ssh enable 
set ssh host-identity cert-dsa <NUMBER> 
set ssh pka-dsa all 
set ssh pka-dsa user-name <NAME_STRING> index <NUMBER> 
set ssh pka-dsa user-name <NAME_STRING> all 
set ssh pka-dsa user-name <NAME_STRING> pka-key-id <NAME_STRING> 
set ssh pka-dsa user-name <NAME_STRING> cert-id <NUMBER> 
set ssh pka-dsa index ...
set ssh host-key 
set ssh 
set ssh pka-dsa user-name <NAME_STRING> cert-id <NUMBER> 
set ssh pka-dsa user-name <NAME_STRING> key <STRING> 
set ssh pka-dsa cert-id ...
set ssh ...
set ssh enable 
set ssh pka-rsa all 
set ssh pka-rsa username <NAME_STRING> index <NUMBER> 
set ssh pka-rsa username <NAME_STRING> all 
set ssh pka-rsa username <NAME_STRING> pka-key-id <NAME_STRING> 
set ssh pka-rsa index ...
set ssh host-key 
set ssh 
set ssh pka-rsa username <NAME_STRING> key <STRING> <STRING> <STRING> 
set ssh pka-rsa username <NAME_STRING> pka-key-id <NAME_STRING> 
set ssh pka-rsa key <STRING> ...
set ssh pka-rsa key ...
set ssh key-gen-time <NUMBER> 
set ssh ...
set ssh version v2 
set ssh version v1 
set ssh version v2 ...
set ssh ...
set scp enable 
set config lock timeout <NUMBER> 
set license-key update-url 
set license-key update-url <STRING> 
set telnet client enable 
set timer <NUMBER> 
set timer <DAY> <TIME> action reset 
set pattern-update proxy http <STRING> 
set pattern-update proxy ssl <STRING> 
set script record 
set  cls-tail  
set ssl enable 
set ssl port <NUMBER> 
set ssl encrypt rc4 md5 
set ssl encrypt rc4-40 md5 ...
set ssl encrypt 3des sha-1 
set ssl encrypt des sha-1 ...
set ssl cert <NUMBER> 
set ssl ca <NUMBER> 
set ntp interval <NUMBER> 
set ntp timezone <NUMBER> <NUMBER> 
set ntp timezone <NUMBER> 
set ntp auth required 
set ntp auth preferred 
set ntp max-adjustment <NUMBER> 
set ntp server backup1 key-id <NUMBER> preshare-key <STRING> 
set ntp server backup1 src-interface <IF_NAME_GENERAL> 
set ntp server backup1 <STRING> 
set ntp server backup2 key-id ...
set ntp server key-id ...
set ntp no-ha-sync 
set multicast-group-policy from <ZONE_NAME> mgroup any to <STRING> mgroup <IPv4> igmp-message bi-directional 
set multicast-group-policy from <ZONE_NAME> mgroup any to <STRING> mgroup <IPv4> igmp-message 
set multicast-group-policy from <ZONE_NAME> mgroup any to <STRING> mgroup <IPv4> pim-message bsr-static-rp join-prune bi-directional ...
set multicast-group-policy from <ZONE_NAME> mgroup any to <STRING> mgroup <IPv4> pim-message bsr-static-rp bi-directional ...
set multicast-group-policy from <ZONE_NAME> mgroup any to <STRING> mgroup <IPv4> pim-message join-prune ...
set multicast-group-policy from <ZONE_NAME> mgroup any to <STRING> mgroup <IPv4> bi-directional ...
set multicast-group-policy from <ZONE_NAME> mgroup any to <STRING> igmp-message ...
set multicast-group-policy from <ZONE_NAME> mgroup <IPv4> <NETMASK> to ...
set multicast-group-policy from <ZONE_NAME> mgroup <IPv4_NUM> to ...
set multicast-group-policy from <ZONE_NAME> mgroup-list <NUMBER> to ...
set modem idle-time <NUMBER> 
set modem speed <NUMBER> 
set modem isp-failover holddown <NUMBER> 
set modem isp-failover type route vrouter <STRING> <IPv4_NUM> 
set modem isp-failover type route vrouter <STRING> <IPv4> <NETMASK> 
set modem isp <STRING> ppp no-default-route 
set modem isp <STRING> 
set modem isp <STRING> alternative-number <STRING> 
set modem isp <STRING> primary-number <STRING> 
set modem isp <STRING> primary-number <STRING> alternative-number ...
set modem isp <STRING> account login <STRING> password <STRING> 
set modem isp <STRING> priority <NUMBER> 
set modem interval <NUMBER> 
set modem retry <NUMBER> 
set modem settings <STRING> active 
set modem settings <STRING> init-strings <unknown type> 
set snmp community <STRING> mib-filter <STRING> 
set snmp community <STRING> 
set snmp community <STRING> Read-Only trap-on traffic version v1 mib-filter ...
set snmp community <STRING> Read-Only trap-on traffic version v2c mib-filter ...
set snmp community <STRING> Read-Only trap-on traffic version any mib-filter ...
set snmp community <STRING> Read-Only trap-on traffic version 
set snmp community <STRING> Read-Only trap-on traffic mib-filter ...
set snmp community <STRING> Read-Only trap-on version ...
set snmp community <STRING> Read-Only trap-off version ...
set snmp community <STRING> Read-Only version ...
set snmp community <STRING> Read-Write trap-on ...
set snmp community <STRING> Read-Only ...
set snmp host <STRING> <IPv4> <NETMASK> src-interface <IF_NAME_GENERAL> trap v1 
set snmp host <STRING> <IPv4> <NETMASK> src-interface <IF_NAME_GENERAL> trap v2 
set snmp host <STRING> <IPv4> <NETMASK> src-interface <IF_NAME_GENERAL> 
set snmp host <STRING> <IPv4> <NETMASK> ...
set snmp host <STRING> <IPv4> 
set snmp host <STRING> <IPv4_NUM> src-interface ...
set snmp location <STRING> 
set snmp contact <STRING> 
set snmp name <STRING> 
set snmp auth-trap enable 
set snmp mib-filter name <STRING> type ip action include 
set snmp mib-filter name <STRING> type ip action exclude 
set snmp mib-filter <STRING> ip <IPv4> <NETMASK> 
set snmp port listen <NUMBER> 
set snmp port trap <NUMBER> 
set envar ...
get tech-support 
get envar resource 
get envar 
get os task <STRING> 
get os task 
get os flow 
get os kernel 
get os misc 
get os cost 
get memory region <STRING> free 
get memory region <STRING> used 
get memory region <STRING> debug 
get memory region <STRING> 
get memory region 
get memory kernel used 
get memory kernel free 
get memory kernel all 
get memory kernel error 
get memory kernel bin 
get memory kernel 
get memory module all 
get memory module <NUMBER> 
get memory pool task <NUMBER> <STRING> debug 
get memory pool task <NUMBER> <STRING> 
get memory pool task <NUMBER> 
get memory pool task 
get memory pool name <STRING> debug 
get memory pool name <STRING> used 
get memory pool name <STRING> free 
get memory pool name <STRING> all 
get memory pool name <STRING> error 
get memory pool name <STRING> 
get memory pool name 
get memory pool 
get memory chunk task ...
get memory <NUMBER> used ...
get memory used ...
get clock 
get clock dst 
get file info 
get file <STRING> 
get file 
get sys-cfg
get system version 
get system 
get performance cpu detail 
get performance cpu 
get performance session detail 
get performance session 
get performance cpu-limit detail vsys all 
get performance cpu-limit detail vsys <NAME_STRING> 
get performance cpu-limit detail 
get performance cpu-limit 
get vrouter <NAME_STRING> protocol pim 
get vrouter <NAME_STRING> protocol pim statistics 
get vrouter <NAME_STRING> protocol pim config 
get vrouter <NAME_STRING> protocol pim interface 
get vrouter <NAME_STRING> protocol pim neighbor 
get vrouter <NAME_STRING> protocol pim rpf 
get vrouter <NAME_STRING> protocol pim join-prune 
get vrouter <NAME_STRING> protocol pim mroute mgroup <IPv4> source <IPv4> detail 
get vrouter <NAME_STRING> protocol pim mroute mgroup <IPv4> source <IPv4> brief 
get vrouter <NAME_STRING> protocol pim mroute mgroup <IPv4> source <IPv4> 
get vrouter <NAME_STRING> protocol pim mroute mgroup <IPv4> detail ...
get vrouter <NAME_STRING> protocol pim mroute detail ...
get vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> bsr 
get vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> rp all 
get vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> rp mgroup <IPv4> active 
get vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> rp mgroup <IPv4> 
get vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> rp active 
get vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> rp candidate 
get vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> rp proxy 
get vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> rp 
get vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> igmp-members 
get vrouter <NAME_STRING> protocol pim zone <ZONE_NAME> 
get vrouter <NAME_STRING> protocol pim zone 
get vrouter <NAME_STRING> protocol pim bsr ...
get vrouter <NAME_STRING> protocol nhrp cache <IPv4_NUM> 
get vrouter <NAME_STRING> protocol nhrp cache 
get vrouter <NAME_STRING> protocol nhrp peer <IPv4> 
get vrouter <NAME_STRING> protocol nhrp peer 
get vrouter <NAME_STRING> protocol nhrp 
get vrouter <NAME_STRING> protocol rip 
get vrouter <NAME_STRING> protocol rip interface 
get vrouter <NAME_STRING> protocol rip rules-redistribute 
get vrouter <NAME_STRING> protocol rip routes-redistribute 
get vrouter <NAME_STRING> protocol rip neighbors 
get vrouter <NAME_STRING> protocol rip trusted-neighbors 
get vrouter <NAME_STRING> protocol rip advertise-def-route 
get vrouter <NAME_STRING> protocol rip reject-default-route 
get vrouter <NAME_STRING> protocol rip timer 
get vrouter <NAME_STRING> protocol rip route-map 
get vrouter <NAME_STRING> protocol rip update-threshold 
get vrouter <NAME_STRING> protocol rip config 
get vrouter <NAME_STRING> protocol rip garbage-list 
get vrouter <NAME_STRING> protocol rip database prefix <IPv4_NUM> 
get vrouter <NAME_STRING> protocol rip database 
get vrouter <NAME_STRING> protocol rip summary 
get vrouter <NAME_STRING> protocol rip 
get vrouter <NAME_STRING> protocol bgp router-id 
get vrouter <NAME_STRING> protocol bgp neighbor <IPvx> 
get vrouter <NAME_STRING> protocol bgp neighbor peer-group <STRING> 
get vrouter <NAME_STRING> protocol bgp neighbor peer-group 
get vrouter <NAME_STRING> protocol bgp neighbor 
get vrouter <NAME_STRING> protocol bgp neighbor <IPv4> 
get vrouter <NAME_STRING> protocol bgp neighbor peer-group ...
get vrouter <NAME_STRING> protocol bgp keepalive 
get vrouter <NAME_STRING> protocol bgp hold-time 
get vrouter <NAME_STRING> protocol bgp as-number 
get vrouter <NAME_STRING> protocol bgp ipv4 network 
get vrouter <NAME_STRING> protocol bgp ipv4 aggregate 
get vrouter <NAME_STRING> protocol bgp ipv4 aggregate <IPv4> <NETMASK> 
get vrouter <NAME_STRING> protocol bgp ipv4 aggregate <IPv4_NUM> 
get vrouter <NAME_STRING> protocol bgp ipv4 aggregate 
get vrouter <NAME_STRING> protocol bgp ipv4 aggregate <IPv6_NUM> 
get vrouter <NAME_STRING> protocol bgp ipv4 aggregate 
get vrouter <NAME_STRING> protocol bgp ipv4 aggregate <IPvx_NUM> 
get vrouter <NAME_STRING> protocol bgp ipv4 aggregate 
get vrouter <NAME_STRING> protocol bgp ipv4 aggregate <IPv4_NUM> ...
get vrouter <NAME_STRING> protocol bgp ipv4 flap-damping 
get vrouter <NAME_STRING> protocol bgp ipv4 rib-in 
get vrouter <NAME_STRING> protocol bgp ipv4 rib-in neighbor <IPvx> 
get vrouter <NAME_STRING> protocol bgp ipv4 rib-in neighbor <IPvx> received 
get vrouter <NAME_STRING> protocol bgp ipv4 rib-in neighbor <IPvx> advertised 
get vrouter <NAME_STRING> protocol bgp ipv4 rib-in neighbor <IPv4> ...
get vrouter <NAME_STRING> protocol bgp ipv4 rib-in neighbor received ...
get vrouter <NAME_STRING> protocol bgp ipv4 rib-in <IPv6_NUM> 
get vrouter <NAME_STRING> protocol bgp ipv4 rib-in <IPv4> <NETMASK> 
get vrouter <NAME_STRING> protocol bgp ipv4 rib-in <IPv4_NUM> 
get vrouter <NAME_STRING> protocol bgp ipv4 rib-in <IPvx_NUM> 
get vrouter <NAME_STRING> protocol bgp ipv4 rib-in <IPv4> ...
get vrouter <NAME_STRING> protocol bgp ipv4 
get vrouter <NAME_STRING> protocol bgp ipv4 rib-in ...
get vrouter <NAME_STRING> protocol bgp ipv4 community-list 
get vrouter <NAME_STRING> protocol bgp ipv4 reflector 
get vrouter <NAME_STRING> protocol bgp ipv4 reject-default-route 
get vrouter <NAME_STRING> protocol bgp ipv4 comm-rib-in 
get vrouter <NAME_STRING> protocol bgp ipv4 always-compare-med 
get vrouter <NAME_STRING> protocol bgp ipv4 redistribution 
get vrouter <NAME_STRING> protocol bgp ipv4 config 
get vrouter <NAME_STRING> protocol bgp ipv4 rib-in ...
get vrouter <NAME_STRING> protocol bgp ipv4 community-list ...
get vrouter <NAME_STRING> protocol bgp ipv4 flap-damping ...
get vrouter <NAME_STRING> protocol bgp ipv4 as-path-access-list 
get vrouter <NAME_STRING> protocol bgp ipv4 local-pref 
get vrouter <NAME_STRING> protocol bgp ipv4 med 
get vrouter <NAME_STRING> protocol bgp ipv4 confederation 
get vrouter <NAME_STRING> protocol bgp ipv4 flap-damping ...
get vrouter <NAME_STRING> protocol bgp ipv4 as-path-access-list ...
get vrouter <NAME_STRING> protocol bgp ipv6 network ...
get vrouter <NAME_STRING> protocol bgp network ...
get vrouter <NAME_STRING> protocol ospf 
get vrouter <NAME_STRING> protocol ospf area 
get vrouter <NAME_STRING> protocol ospf area <IPv4> 
get vrouter <NAME_STRING> protocol ospf area <NUMBER> 
get vrouter <NAME_STRING> protocol ospf authentication 
get vrouter <NAME_STRING> protocol ospf reject-default-route 
get vrouter <NAME_STRING> protocol ospf advertise-def-route 
get vrouter <NAME_STRING> protocol ospf auto-vlink 
get vrouter <NAME_STRING> protocol ospf rfc-1583 
get vrouter <NAME_STRING> protocol ospf hello-threshold 
get vrouter <NAME_STRING> protocol ospf lsa-threshold 
get vrouter <NAME_STRING> protocol ospf summary-import 
get vrouter <NAME_STRING> protocol ospf stub <IPv4> 
get vrouter <NAME_STRING> protocol ospf stub 
get vrouter <NAME_STRING> protocol ospf vlink 
get vrouter <NAME_STRING> protocol ospf routes-redistribute summary 
get vrouter <NAME_STRING> protocol ospf routes-redistribute 
get vrouter <NAME_STRING> protocol ospf rules-redistribute 
get vrouter <NAME_STRING> protocol ospf neighbor 
get vrouter <NAME_STRING> protocol ospf vneighbor 
get vrouter <NAME_STRING> protocol ospf interface 
get vrouter <NAME_STRING> protocol ospf database detail area <IPv4> asbr-summary link-state-id <IPv4> 
get vrouter <NAME_STRING> protocol ospf database detail area <IPv4> asbr-summary adv-router <IPv4> link-state-id <IPv4> 
get vrouter <NAME_STRING> protocol ospf database detail area <IPv4> asbr-summary adv-router <IPv4> 
get vrouter <NAME_STRING> protocol ospf database detail area <IPv4> asbr-summary self-originate link-state-id ...
get vrouter <NAME_STRING> protocol ospf database detail area <IPv4> asbr-summary 
get vrouter <NAME_STRING> protocol ospf database detail area <IPv4> external link-state-id ...
get vrouter <NAME_STRING> protocol ospf database detail area <IPv4> network link-state-id ...
get vrouter <NAME_STRING> protocol ospf database detail area <IPv4> nssa-external link-state-id ...
get vrouter <NAME_STRING> protocol ospf database detail area <IPv4> router link-state-id ...
get vrouter <NAME_STRING> protocol ospf database detail area <IPv4> summary link-state-id ...
get vrouter <NAME_STRING> protocol ospf database detail area <IPv4> adv-router ...
get vrouter <NAME_STRING> protocol ospf database detail area <NUMBER> asbr-summary ...
get vrouter <NAME_STRING> protocol ospf database detail asbr-summary ...
get vrouter <NAME_STRING> protocol ospf database area ...
get vrouter <NAME_STRING> protocol ospf config 
get vrouter <NAME_STRING> protocol ospf statistics 
get vrouter <NAME_STRING> protocol ospf 
get vrouter <NAME_STRING> rule 
get vrouter <NAME_STRING> zone 
get vrouter <NAME_STRING> statistics 
get vrouter <NAME_STRING> route v4 backup 
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description ip <IPv4> active 
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description ip <IPv4> 
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description ip <IPv6> 
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description ip <IPvx> active ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description ip <IPv4> ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description id <NUMBER> 
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description prefix <IPv4_NUM> 
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description prefix <IPv6_NUM> 
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description prefix <IPvx_NUM> 
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description prefix <IPv4_NUM> ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description 
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description prefix ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description protocol connected prefix ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description protocol imported prefix ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description protocol discovered prefix ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description protocol static description 
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description protocol static prefix ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description protocol bgp prefix ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description protocol ripng prefix ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description protocol ospf prefix ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description protocol rip prefix ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description protocol nhrp prefix ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description protocol prefix ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description protocol ripng ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> description prefix ...
get vrouter <NAME_STRING> route v4 source in-interface <IF_NAME_GENERAL3> ip ...
get vrouter <NAME_STRING> route v4 source in-interface description 
get vrouter <NAME_STRING> route v4 source in-interface ...
get vrouter <NAME_STRING> route v4 source description 
get vrouter <NAME_STRING> route v4 source ip ...
get vrouter <NAME_STRING> route v4 source description ...
get vrouter <NAME_STRING> route v4 summary 
get vrouter <NAME_STRING> route v4 ip ...
get vrouter <NAME_STRING> route v4 source ...
get vrouter <NAME_STRING> route v6 summary ...
get vrouter <NAME_STRING> route ...
get vrouter <NAME_STRING> interface 
get vrouter <NAME_STRING> access-list <NUMBER> permit-only 
get vrouter <NAME_STRING> access-list <NUMBER> 
get vrouter <NAME_STRING> access-list 
get vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> config 
get vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> match 
get vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> set 
get vrouter <NAME_STRING> route-map <NAME_STRING> <NUMBER> 
get vrouter <NAME_STRING> route-map <NAME_STRING> config 
get vrouter <NAME_STRING> route-map <NAME_STRING> 
get vrouter <NAME_STRING> route-map 
get vrouter <NAME_STRING> pbr access-list <NUMBER> 
get vrouter <NAME_STRING> pbr access-list configuration 
get vrouter <NAME_STRING> pbr access-list 
get vrouter <NAME_STRING> pbr match-group name <NAME_STRING> 
get vrouter <NAME_STRING> pbr match-group configuration ...
get vrouter <NAME_STRING> pbr action-group name <NAME_STRING> 
get vrouter <NAME_STRING> pbr action-group configuration ...
get vrouter <NAME_STRING> pbr policy name <NAME_STRING> 
get vrouter <NAME_STRING> pbr policy configuration ...
get vrouter <NAME_STRING> pbr configuration ...
get vrouter <NAME_STRING> mroute mgroup <IPv4> source <IPv4> iif <IF_NAME_GENERAL> brief 
get vrouter <NAME_STRING> mroute mgroup <IPv4> source <IPv4> iif <IF_NAME_GENERAL> 
get vrouter <NAME_STRING> mroute mgroup <IPv4> source <IPv4> brief ...
get vrouter <NAME_STRING> mroute mgroup <IPv4> brief ...
get vrouter <NAME_STRING> mroute brief ...
get vrouter <NAME_STRING> mcore cachemiss 
get vrouter <NAME_STRING> mcore 
get vrouter <NAME_STRING> preference 
get vrouter <NAME_STRING> route-lookup preference 
get vrouter <NAME_STRING> router-id 
get vrouter <NAME_STRING> config 
get vrouter <NAME_STRING> default-vrouter 
get vrouter <NAME_STRING> 
get vrouter <NAME_STRING> config ...
get vrouter 
get route 
get irdp interface <IF_NAME> 
get irdp 
get service pre-defined 
get service user 
get service timeout tcp port <NUMBER> <NUMBER> 
get service timeout tcp port <NUMBER> 
get service timeout tcp table <NUMBER_RANGE> 
get service timeout udp port ...
get service timeout other port ...
get service group <NAME_STRING> 
get service group 
get service <NAME_STRING> 
get service 
get gate 
get alg sip calls details 
get alg sip calls 
get alg sip setting 
get alg sip counters 
get alg sip rate 
get alg sip details 
get alg sip transactions 
get alg sip 
get alg mgcp sessions src-ip <IPv4> dst-ip <IPv4> 
get alg mgcp sessions src-ip <IPv4> 
get alg mgcp sessions src-ip 
get alg mgcp sessions dst-ip ...
get alg mgcp calls endpoint <STRING> 
get alg mgcp calls 
get alg mgcp counters 
get alg mgcp endpoints name <STRING> ...
get alg mgcp endpoints 
get alg mgcp 
get alg sccp calls detail 
get alg sccp calls 
get alg sccp counters 
get alg sccp 
get alg sunrpc 
get alg msrpc 
get alg sql 
get alg rtsp 
get alg pptp 
get alg pptp counters 
get alg pptp xlate 
get alg appleichat 
get alg h323 counters 
get alg h323 
get alg 
get session id <NUMBER> 
get session service <NAME_STRING> 
get session info 
get session ike-nat 
get session rm 
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> dst-port <NUMBER> <NUMBER> vsd-id <NUMBER> hardware 0 
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> dst-port <NUMBER> <NUMBER> vsd-id <NUMBER> hardware 1 
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> dst-port <NUMBER> <NUMBER> vsd-id <NUMBER> hardware 2 
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> dst-port <NUMBER> <NUMBER> vsd-id <NUMBER> hardware 3 
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> dst-port <NUMBER> <NUMBER> vsd-id <NUMBER> hardware 4 
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> dst-port <NUMBER> <NUMBER> vsd-id <NUMBER> hardware 5 
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> dst-port <NUMBER> <NUMBER> vsd-id <NUMBER> hardware 
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> dst-port <NUMBER> <NUMBER> vsd-id <NUMBER> 
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> dst-port <NUMBER> <NUMBER> ...
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> dst-port <NUMBER> vsd-id ...
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> vsd-id ...
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> dst-port ...
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> dst-port ...
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> src-port ...
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> src-port ...
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> protocol ...
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> dst-mac ...
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NETMASK> src-mac ...
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> src-mac ...
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> src-mac ...
get session tunnel policy-id <NUMBER> src-ip <IPvx> netmask <NETMASK> dst-ip ...
get session tunnel policy-id <NUMBER> src-ip <IPvx> dst-ip ...
get session tunnel policy-id <NUMBER> dst-ip ...
get session tunnel policy-id src-ip ...
get session tunnel src-ip ...
get session policy-id ...
get password-policy 
get auth-server all 
get auth-server id <NUMBER> 
get auth-server <NAME_STRING> 
get auth settings 
get auth settings radius accounting 
get auth table id <NUMBER> 
get auth table ip <IPv4> 
get auth table infranet auth-id <NUMBER> 
get auth table infranet 
get auth table 
get auth queue 
get auth history id <NUMBER> 
get auth history ip <IPv4> 
get auth history 
get auth banner 
get auth statistics 
get auth 
get scheduler name <NAME_STRING> 
get scheduler once 
get scheduler recurrent 
get scheduler 
get admin user trustee 
get admin user login 
get admin user 
get admin manager-ip 
get admin manager-ip all device 
get admin manager-ip 
get admin current-user 
get admin ssh all 
get admin 
get admin auth settings 
get admin auth banner secondary 
get admin auth banner 
get admin auth 
get admin ssh ...
get vip session timeout 
get vip server 
get vip <IPv4> port <NUMBER> 
get vip <IPv4> port-status 
get vip 
get zone all 
get zone id <NUMBER> 
get zone <ZONE_NAME> screen counter 
get zone <ZONE_NAME> screen info 
get zone <ZONE_NAME> screen attack 
get zone <ZONE_NAME> screen 
get zone <ZONE_NAME> track-ip ip 
get zone <ZONE_NAME> track-ip 
get zone <ZONE_NAME> 
get zone 
get interface <IF_NAME_GENERAL> dot1x 
get interface <IF_NAME_GENERAL> dot1x statistics 
get interface <IF_NAME_GENERAL> cisco-hdlc statistic 
get interface <IF_NAME_GENERAL> cisco-hdlc config 
get interface <IF_NAME_GENERAL> cisco-hdlc 
get interface <IF_NAME_GENERAL> frame-relay pvc 
get interface <IF_NAME_GENERAL> frame-relay statistics 
get interface <IF_NAME_GENERAL> frame-relay inverse-arp 
get interface <IF_NAME_GENERAL> frame-relay 
get interface <IF_NAME_GENERAL> frame-relay pvc 
get interface <IF_NAME_GENERAL> frame-relay lmi 
get interface <IF_NAME_GENERAL> frame-relay statistics 
get interface <IF_NAME_GENERAL> frame-relay 
get interface <IF_NAME_GENERAL> mlfr-uni-nni lip 
get interface <IF_NAME_GENERAL> mlfr-uni-nni statistics 
get interface <IF_NAME_GENERAL> mlfr-uni-nni 
get interface <IF_NAME_GENERAL> mlfr-uni-nni config 
get interface <IF_NAME_GENERAL> mlfr-uni-nni statistics 
get interface <IF_NAME_GENERAL> mlfr-uni-nni members 
get interface <IF_NAME_GENERAL> mlfr-uni-nni 
get interface <IF_NAME_GENERAL> ntp-server 
get interface <IF_NAME_GENERAL> monitor 
get interface <IF_NAME_GENERAL> monitor track-ip ip ...
get interface <IF_NAME_GENERAL> monitor ...
get interface <IF_NAME_GENERAL> screen 
get interface <IF_NAME_GENERAL> mip <IPvx> 
get interface <IF_NAME_GENERAL> mip detail 
get interface <IF_NAME_GENERAL> mip 
get interface <IF_NAME_GENERAL> dip detail 
get interface <IF_NAME_GENERAL> dip <NUMBER> detail 
get interface <IF_NAME_GENERAL> dip <NUMBER> 
get interface <IF_NAME_GENERAL> dip 
get interface <IF_NAME_GENERAL> ppp 
get interface <IF_NAME_GENERAL> dhcp server ip idle 
get interface <IF_NAME_GENERAL> dhcp server ip allocate 
get interface <IF_NAME_GENERAL> dhcp server ip 
get interface <IF_NAME_GENERAL> dhcp server option 
get interface <IF_NAME_GENERAL> dhcp server 
get interface <IF_NAME_GENERAL> dhcp client 
get interface <IF_NAME_GENERAL> dhcp relay 
get interface <IF_NAME_GENERAL> dhcp 
get interface <IF_NAME_GENERAL> extensive 
get interface <IF_NAME_GENERAL> statistics 
get interface <IF_NAME_GENERAL> protocol pim statistics 
get interface <IF_NAME_GENERAL> protocol pim 
get interface <IF_NAME_GENERAL> protocol igmp 
get interface <IF_NAME_GENERAL> protocol igmp group <IPv4> source all 
get interface <IF_NAME_GENERAL> protocol igmp group <IPv4> source 
get interface <IF_NAME_GENERAL> protocol igmp group <IPv4> all ...
get interface <IF_NAME_GENERAL> protocol igmp group all ...
get interface <IF_NAME_GENERAL> protocol igmp statistic all 
get interface <IF_NAME_GENERAL> protocol igmp statistic 
get interface <IF_NAME_GENERAL> protocol igmp statistic source all ...
get interface <IF_NAME_GENERAL> protocol igmp statistic all ...
get interface <IF_NAME_GENERAL> protocol igmp source 
get interface <IF_NAME_GENERAL> protocol igmp source <IPv4> all ...
get interface <IF_NAME_GENERAL> protocol igmp config 
get interface <IF_NAME_GENERAL> protocol nhrp 
get interface <IF_NAME_GENERAL> protocol rip neighbor <IPv4> 
get interface <IF_NAME_GENERAL> protocol rip 
get interface <IF_NAME_GENERAL> protocol ospf 
get interface <IF_NAME_GENERAL> protocol ...
get interface <IF_NAME_GENERAL> association <MACADDR> 
get interface <IF_NAME_GENERAL> association 
get interface <IF_NAME_GENERAL> port <NUMBER> phy 
get interface <IF_NAME_GENERAL> port phy ...
get interface <IF_NAME_GENERAL> 
get interface <IF_NAME_GENERAL> secondary <IPv4> 
get interface <IF_NAME_GENERAL> secondary 
get interface <IF_NAME_GENERAL> counter 
get interface <IF_NAME_GENERAL> mac-table 
get interface <IF_NAME_GENERAL> ...
get interface 
get interface all 
get interface <IF_NAME_GENERAL> ...
get log usb info 
get log exclude 
get log cli file 
get log setting module <STRING> 
get log setting 
get log self sort-by date start-date <STRING> end-date <STRING> 
get log self sort-by date start-date <STRING> 
get log self sort-by date end-date ...
get log self sort-by time start-time <STRING> end-time <STRING> 
get log self sort-by time start-time <STRING> 
get log self sort-by time end-time ...
get log self sort-by src-ip <IPv4> src-netmask <NETMASK> 
get log self sort-by src-ip <IPv4> 
get log self sort-by src-ip <IPv4_RANGE> 
get log self sort-by src-ip 
get log self sort-by dst-ip <IPv4> dst-netmask <NETMASK> 
get log self sort-by dst-ip <IPv4> 
get log self sort-by dst-ip <IPv4_RANGE> 
get log self sort-by dst-ip 
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> min-duration <STRING> max-duration <STRING> service <STRING> src-ip <IPv4> src-netmask <NETMASK> src-port <NUMBER> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> no-rule-displayed 
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> min-duration <STRING> max-duration <STRING> service <STRING> src-ip <IPv4> src-netmask <NETMASK> src-port <NUMBER> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> detail level 
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> min-duration <STRING> max-duration <STRING> service <STRING> src-ip <IPv4> src-netmask <NETMASK> src-port <NUMBER> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> 
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> min-duration <STRING> max-duration <STRING> service <STRING> src-ip <IPv4> src-netmask <NETMASK> src-port <NUMBER> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER_RANGE> no-rule-displayed ...
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> min-duration <STRING> max-duration <STRING> service <STRING> src-ip <IPv4> src-netmask <NETMASK> src-port <NUMBER> dst-ip <IPv4> dst-netmask <NETMASK> no-rule-displayed ...
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> min-duration <STRING> max-duration <STRING> service <STRING> src-ip <IPv4> src-netmask <NETMASK> src-port <NUMBER> dst-ip <IPv4> dst-port ...
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> min-duration <STRING> max-duration <STRING> service <STRING> src-ip <IPv4> src-netmask <NETMASK> src-port <NUMBER> dst-ip <IPv4_RANGE> dst-port ...
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> min-duration <STRING> max-duration <STRING> service <STRING> src-ip <IPv4> src-netmask <NETMASK> src-port <NUMBER> dst-port ...
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> min-duration <STRING> max-duration <STRING> service <STRING> src-ip <IPv4> src-netmask <NETMASK> src-port <NUMBER_RANGE> dst-ip ...
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> min-duration <STRING> max-duration <STRING> service <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip ...
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> min-duration <STRING> max-duration <STRING> service <STRING> src-ip <IPv4> src-port ...
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> min-duration <STRING> max-duration <STRING> service <STRING> src-ip <IPv4_RANGE> src-port ...
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> min-duration <STRING> max-duration <STRING> service <STRING> src-port ...
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> min-duration <STRING> max-duration <STRING> src-ip ...
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> min-duration <STRING> service ...
get log self start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> max-duration ...
get log self start-date <STRING> end-date <STRING> start-time <STRING> min-duration ...
get log self start-date <STRING> end-date <STRING> end-time ...
get log self start-date <STRING> start-time ...
get log self end-date ...
get log flow-deny sort-by ...
get log traffic sort-by date ...
get log traffic policy <NUMBER> start-date ...
get log traffic policy <NUMBER_RANGE> start-date ...
get log traffic start-date ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> protocol <NUMBER> user-name <STRING> policy-id <NUMBER> interface <IF_NAME> sort-by date 
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> protocol <NUMBER> user-name <STRING> policy-id <NUMBER> interface <IF_NAME> sort-by time 
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> protocol <NUMBER> user-name <STRING> policy-id <NUMBER> interface <IF_NAME> sort-by src-ip 
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> protocol <NUMBER> user-name <STRING> policy-id <NUMBER> interface <IF_NAME> sort-by dst-ip 
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> protocol <NUMBER> user-name <STRING> policy-id <NUMBER> interface <IF_NAME> sort-by dst-port 
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> protocol <NUMBER> user-name <STRING> policy-id <NUMBER> interface <IF_NAME> sort-by user-name 
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> protocol <NUMBER> user-name <STRING> policy-id <NUMBER> interface <IF_NAME> sort-by policy-id 
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> protocol <NUMBER> user-name <STRING> policy-id <NUMBER> interface <IF_NAME> sort-by interface 
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> protocol <NUMBER> user-name <STRING> policy-id <NUMBER> interface <IF_NAME> 
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> protocol <NUMBER> user-name <STRING> policy-id <NUMBER> sort-by ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> protocol <NUMBER> user-name <STRING> policy-id <NUMBER_RANGE> interface ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> protocol <NUMBER> user-name <STRING> interface ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> protocol <NUMBER> policy-id ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> protocol <NUMBER_RANGE> user-name ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER> user-name ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> dst-port <NUMBER_RANGE> protocol ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-netmask <NETMASK> protocol ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4> dst-port ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv6> dst-port ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPv4_RANGE> dst-port ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-ip <IPvx_NUM> dst-port ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> src-netmask <NETMASK> dst-port ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4> dst-ip ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv6> dst-ip ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPv4_RANGE> dst-ip ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> src-ip <IPvx_NUM> dst-ip ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> begin <STRING> dst-ip ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> exclude <STRING> src-ip ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> include <STRING> begin ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> end-time <STRING> exclude ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> start-time <STRING> include ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> end-date <STRING> end-time ...
get log event module <STRING> level emergency type <NUMBER> start-date <STRING> start-time ...
get log event module <STRING> level emergency type <NUMBER> end-date ...
get log event module <STRING> level emergency type <NUMBER_RANGE> start-date ...
get log event module <STRING> level emergency start-date ...
get log event module <STRING> level alert type ...
get log event module <STRING> level critical type ...
get log event module <STRING> level error type ...
get log event module <STRING> level warning type ...
get log event module <STRING> level notification type ...
get log event module <STRING> level information type ...
get log event module <STRING> level debug type ...
get log event module <STRING> type ...
get log event level ...
get log asset-recovery 
get log audit-loss-mitigation 
get log ...
get log exclude ...
get alarm traffic policy <NUMBER> service <STRING> src-address <STRING> dst-address <STRING> detail start-time <STRING> end-time <STRING> second threshold <NUMBER> rate <NUMBER> 
get alarm traffic policy <NUMBER> service <STRING> src-address <STRING> dst-address <STRING> detail start-time <STRING> end-time <STRING> second threshold <NUMBER> rate <NUMBER_RANGE> 
get alarm traffic policy <NUMBER> service <STRING> src-address <STRING> dst-address <STRING> detail start-time <STRING> end-time <STRING> second threshold <NUMBER> 
get alarm traffic policy <NUMBER> service <STRING> src-address <STRING> dst-address <STRING> detail start-time <STRING> end-time <STRING> second threshold <NUMBER_RANGE> rate ...
get alarm traffic policy <NUMBER> service <STRING> src-address <STRING> dst-address <STRING> detail start-time <STRING> end-time <STRING> second rate ...
get alarm traffic policy <NUMBER> service <STRING> src-address <STRING> dst-address <STRING> detail start-time <STRING> end-time <STRING> minute threshold ...
get alarm traffic policy <NUMBER> service <STRING> src-address <STRING> dst-address <STRING> detail start-time <STRING> end-time <STRING> 
get alarm traffic policy <NUMBER> service <STRING> src-address <STRING> dst-address <STRING> detail start-time <STRING> second ...
get alarm traffic policy <NUMBER> service <STRING> src-address <STRING> dst-address <STRING> detail end-time ...
get alarm traffic policy <NUMBER> service <STRING> src-address <STRING> dst-address <STRING> 
get alarm traffic policy <NUMBER> service <STRING> src-address <STRING> detail ...
get alarm traffic policy <NUMBER> service <STRING> dst-address ...
get alarm traffic policy <NUMBER> src-address ...
get alarm traffic policy <NUMBER_RANGE> service ...
get alarm traffic service ...
get alarm event module ...
get alarm threshold 
get alarm security config 
get alarm security all 
get alarm security ack-id <NUMBER> 
get alarm security statistics 
get alarm snapshot CPU alarm_time <STRING> 
get alarm snapshot CPU all 
get event module ...
get alg-portnum 
get ip tftp 
get ffilter 
get mac-learn interface <IF_NAME_GENERAL> 
get mac-learn 
get asp stat 
get fprofile packet ip proto top <NUMBER> 
get fprofile packet ip proto all 
get fprofile packet ip proto 
get fprofile packet ip src-ip top ...
get fprofile packet ip dst-ip top ...
get fprofile packet ip sport top ...
get fprofile packet ip dport top ...
get fprofile packet ip top ...
get fprofile packet none-ip proto top ...
get fprofile packet none-ip src-mac top ...
get fprofile packet none-ip dst-mac top ...
get fprofile packet none-ip top ...
get fprofile packet top ...
get fprofile 
get flow perf 
get flow tcp-mss 
get flow vpn-tcp-mss 
get flow syn-proxy syn-cookie 
get flow 
get counter flow interface <IF_NAME_GENERAL2> 
get counter flow zone <ZONE_NAME> 
get counter flow 
get counter screen interface <IF_NAME_GENERAL2> 
get counter screen interface 
get counter screen zone <ZONE_NAME> 
get counter screen zone 
get counter policy <NUMBER> second 
get counter policy <NUMBER> minute 
get counter policy <NUMBER> hour 
get counter policy <NUMBER> day 
get counter policy <NUMBER> month 
get counter statistics interface <IF_NAME_GENERAL2> extensive 
get counter statistics interface <IF_NAME_GENERAL2> 
get counter statistics zone <ZONE_NAME> 
get counter statistics 
get counter flow ...
get console 
get domain 
get hostname 
get alias 
get failover 
get webauth banner 
get webauth 
get pki pre-prime 
get pki authority default scep 
get pki authority default cert-status 
get pki authority default cert-path 
get pki authority <NUMBER> scep ...
get pki ldap 
get pki x509 list crl 
get pki x509 list pending-cert 
get pki x509 list local-cert 
get pki x509 list ca-cert 
get pki x509 list cert 
get pki x509 list key-pair 
get pki x509 dn 
get pki x509 pkcs10 <NUMBER> 
get pki x509 pkcs10 
get pki x509 send-to 
get pki x509 crl-refresh 
get pki x509 cert-path 
get pki x509 raw-cn 
get pki x509 cert-fqdn 
get pki x509 cert system 
get pki x509 cert <NUMBER> 
get pki x509 default 
get pki src-interface 
get ssl cert-list 
get ssl ca-list 
get ssl 
get nsrp group 
get nsrp cluster 
get nsrp monitor interface 
get nsrp monitor interface all 
get nsrp monitor interface 
get nsrp monitor zone ...
get nsrp monitor sm ...
get nsrp monitor track-ip ...
get nsrp monitor ...
get nsrp vsd-group all 
get nsrp vsd-group id <NUMBER> monitor interface ...
get nsrp vsd-group id <NUMBER> 
get nsrp vsd-group 
get nsrp rto-mirror 
get nsrp ha-link 
get nsrp counter 
get nsrp counter protocol 
get nsrp counter rto 
get nsrp counter packet-fwd 
get nsrp track-ip ip ...
get nsrp 
get nsrp ha-link ...
get nrtp group 
get nrtp counters send 
get nrtp counters receive <NUMBER> 
get nrtp counters receive 
get nrtp counters all 
get nrtp xmtq 
get infranet controller name <STRING> 
get infranet controller 
get infranet enforcer 
get dns host cache 
get dns host report 
get dns host settings 
get dns host server-list 
get dns name <STRING> 
get dns server-select 
get dns proxy 
get dns ddns id <NUMBER> 
get dns ddns 
get address <ZONE_NAME> group <NAME_STRING> 
get address <ZONE_NAME> group 
get address <ZONE_NAME> name <NAME_STRING> 
get address <ZONE_NAME> 
get address 
get group address <ZONE_NAME> <NAME_STRING> 
get group address <ZONE_NAME> 
get group service <NAME_STRING> ...
get rm group active 
get rm group <NUMBER> detail 
get rm group <NUMBER> 
get rm resource active ...
get rm settings 
get vpnmonitor 
get ippool <NAME_STRING> 
get ippool 
get user all 
get user id <NUMBER> 
get user <NAME_STRING> 
get user-group all 
get user-group local 
get user-group external 
get user-group id <NUMBER> 
get user-group <NAME_STRING> 
get crypto-policy 
get ike ikeid-enumeration table detail <IPvx> 
get ike ikeid-enumeration table detail 
get ike ikeid-enumeration table 
get ike ikeid-enumeration 
get ike cookies 
get ike conn-entry 
get ike id-mode 
get ike gateway <NAME_STRING> modecfg client pd 
get ike gateway <NAME_STRING> modecfg 
get ike gateway <NAME_STRING> dpd-liveness 
get ike gateway <NAME_STRING> 
get ike gateway 
get ike ikev2 initiator-send-dummy-ipsec 
get ike ikev2 ike-sa-soft-lifetime 
get ike ikev2 stateless-cookie-threshold 
get ike ikev2 eap active 
get ike p2-proposal <NAME_STRING> ...
get ike p1-proposal <NAME_STRING> ...
get ike p2-sec-level 
get ike p1-sec-level 
get ike policy-checking 
get ike accept-all-proposal 
get ike cert 
get ike ca-and-type 
get ike soft-lifetime-buffer 
get ike respond-bad-spi 
get ike initiator-set-commit 
get ike responder-set-commit 
get ike initial-contact all-peers 
get ike initial-contact single-gateway <NAME_STRING> 
get ike initial-contact 
get ike member-sa-hold-time 
get ike p1-max-dialgrp-sessions 
get ike heartbeat 
get ipsec access-session status 
get ipsec access-session all 
get ipsec access-session id <NUMBER> 
get ipsec access-session ipv4-address <IPv4> 
get ipsec access-session ipv6-address <IPv6> 
get ipsec access-session ike-cfg-ipv4-address <IPv4> 
get ipsec access-session xauth-user-name <STRING> 
get xauth active 
get xauth lifetime 
get xauth default 
get xauth server 
get xauth client 
get sa id <NUMBER> 
get sa active stat 
get sa active 
get sa inactive stat ...
get sa stat ...
get sa-filter 
get vpn proxy-id 
get vpn auto 
get vpn manual 
get vpn <NAME_STRING> detail 
get vpn <NAME_STRING> 
get vpn 
get vpn-group id <NUMBER> 
get vpn-group 
get l2tp all active 
get l2tp all 
get l2tp default 
get l2tp <NAME_STRING> active 
get l2tp <NAME_STRING> 
get dip-in 
get xlate 
get dip all 
get dip 
get arp all 
get arp asic <NUMBER> 
get arp 
get socket id <NUMBER> 
get socket 
get traffic-shaping mode 
get traffic-shaping interface 
get traffic-shaping interface <IF_NAME_GENERAL> 
get traffic-shaping ip_precedence 
get traffic-shaping dscp-class-selector 
get traffic-shaping statistics 
get traffic-shaping 
get mip all 
get mip 
get group-expression all 
get group-expression id <NUMBER> 
get group-expression <NAME_STRING> 
get url 
get url all 
get url vsys-name <STRING> 
get url 
get url all ...
get anti-spam 
get proxy-id 
get policy global id <NUMBER> sess-limit count src-ip <IPvx> 
get policy global id <NUMBER> sess-limit count 
get policy global id <NUMBER> 
get policy global 
get policy global disabled 
get policy global 
get policy all 
get policy from <NAME_STRING> to <NAME_STRING> ...
get policy from <NAME_STRING> src-ip <IPvx> ...
get policy from <NAME_STRING> dst-ip <IPvx> ...
get policy from <NAME_STRING> service <NAME_STRING> ...
get policy from <NAME_STRING> action deny ...
get policy from <NAME_STRING> action permit ...
get policy from <NAME_STRING> action tunnel ...
get policy from <NAME_STRING> action reject ...
get policy from <NAME_STRING> action av ...
get policy from <NAME_STRING> action idp ...
get policy from <NAME_STRING> action uf ...
get policy from <NAME_STRING> <POLICY_DIR> ...
get policy from <NAME_STRING> id ...
get policy from <NAME_STRING> 
get policy from <NAME_STRING> dst-address <NAME_STRING> ...
get policy from <NAME_STRING> ...
get policy from <NAME_STRING> src-address <NAME_STRING> ...
get policy from <NAME_STRING> ...
get policy ...
get pppoe 
get pppoe all 
get pppoe id <NUMBER> 
get pppoe id <NUMBER> configuration 
get pppoe id <NUMBER> statistics 
get pppoe name <NAME_STRING> 
get pppoe name <NAME_STRING> configuration ...
get pppoe configuration ...
get syslog 
get webtrends 
get firewall 
get active-user 
get global-pro policy-manager 
get nsmgmt proto-dist table bytes 
get nsmgmt proto-dist table packets 
get nsmgmt proto-dist user-service 
get nsmgmt 
get nsmgmt proto-dist ...
get ssh 
get ssh report 
get ssh host-identity 
get ssh host-key 
get ssh pka-dsa all 
get ssh pka-dsa user-name <NAME_STRING> index <NUMBER> 
get ssh pka-dsa user-name <NAME_STRING> 
get ssh pka-dsa index <NUMBER> ...
get ssh pka-dsa cert user-name <NAME_STRING> 
get ssh pka-dsa cert all 
get ssh pka-dsa cert 
get ssh pka-dsa 
get ssh pka-dsa index ...
get ssh 
get ssh report 
get ssh host-key 
get ssh pka-rsa all 
get ssh pka-rsa username <NAME_STRING> index <NUMBER> 
get ssh pka-rsa username <NAME_STRING> 
get ssh pka-rsa index <NUMBER> ...
get ssh pka-rsa 
get ssh pka-rsa index ...
get ssh 
get scp 
get config all 
get config saved timestamp 
get config saved 
get config datafile <STRING> 
get config datafile 
get config rollback 
get config lock 
get config global hash 
get config global 
get config nsmgmt-dirty 
get config timestamp 
get config hash 
get config 
get config lock ...
get license-key 
get timer 
get pattern-update proxy 
get script command 
get script output 
get script 
get ip-classification zone <ZONE_NAME> ip <IPv4> 
get ip-classification zone <ZONE_NAME> 
get ip-classification 
get ntp 
get multicast-group-policy 
get multicast-group-policy between <ZONE_NAME> <STRING> 
get igmp interface all ...
get igmp group ...
get mld interface <IF_NAME_GENERAL> 
get mld interface 
get mld group <IPv6> 
get mld group 
get mld statistic 
get mld config 
get pim statistics 
get dot1x 
get dot1x statistics 
get dot1x session 
get dot1x session id <NUMBER> 
get driver drop 
get driver switch 
get driver reg 
get driver counter 
get driver log 
get driver bdr <NUMBER> 
get driver bdr 
get driver mbuf <NUMBER> <NUMBER> 
get driver rxbd <NUMBER> 
get driver phy 
get driver mibcnt hex 
get driver mibcnt 
get driver mac 
get driver vlan 
get driver npe <NUMBER> 
get modem settings 
get modem config 
get modem stats 
get modem state 
get modem queue xmt-q 
get modem queue rcv-q 
get modem 
get fips-mode self-test 
get snmp community <STRING> 
get snmp auth-trap 
get snmp settings 
get snmp statistics 
get snmp mib-filter 
get snmp 
get snmp usm 
get snmp sec 
get snmp group 
get snmp view 
get snmp access 
get snmp system 
get snmp engine 
get snmp trap 
get snmp 
get snmpwalk frdte 
clear cluster vrouter <NAME_STRING> statistics 
clear cluster vrouter <NAME_STRING> mroute all 
clear cluster vrouter <NAME_STRING> mroute mgroup <IPv4> source <IPv4> iif <IF_NAME_GENERAL> 
clear cluster vrouter <NAME_STRING> mroute mgroup <IPv4> source <IPv4> 
clear cluster vrouter <NAME_STRING> mroute mgroup <IPv4> 
clear cluster vrouter <NAME_STRING> protocol pim mroute all 
clear cluster vrouter <NAME_STRING> protocol pim mroute mgroup <IPv4> source <IPv4> 
clear cluster vrouter <NAME_STRING> protocol pim mroute mgroup <IPv4> 
clear cluster vrouter <NAME_STRING> protocol pim statistics 
clear cluster vrouter <NAME_STRING> protocol rip 
clear cluster vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> flap-route <IPv4> add 
clear cluster vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> flap-route <IPv4> 
clear cluster vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> flap-route <IPv6> add ...
clear cluster vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> flap-route <IPv4> ...
clear cluster vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> soft-in 
clear cluster vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> soft-out 
clear cluster vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> flap-route ...
clear cluster vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> stats 
clear cluster vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> flap-route ...
clear cluster vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPvx> stats ...
clear cluster vrouter <NAME_STRING> protocol bgp ipv4 neighbor <IPv4> ...
clear cluster vrouter <NAME_STRING> protocol bgp ipv6 neighbor ...
clear cluster vrouter <NAME_STRING> protocol bgp neighbor ...
clear cluster vrouter <NAME_STRING> protocol ospf statistics 
clear cluster vrouter <NAME_STRING> protocol 
clear cluster alg sip call 
clear cluster alg sip counters 
clear cluster alg sip rate 
clear cluster alg mgcp counters 
clear cluster alg sccp counters 
clear cluster alg h323 counters 
clear cluster session all 
clear cluster session id <NUMBER> 
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> dst-port <NUMBER> <NUMBER> vsd-id <NUMBER> vsys-name <NAME_STRING> 
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> dst-port <NUMBER> <NUMBER> vsd-id <NUMBER> vsys-id <NUMBER> 
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> dst-port <NUMBER> <NUMBER> vsd-id <NUMBER> 
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> dst-port <NUMBER> <NUMBER> ...
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> dst-port <NUMBER> vsd-id ...
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> <NUMBER> vsd-id ...
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> src-port <NUMBER> dst-port ...
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> <NUMBER> dst-port ...
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> protocol <NUMBER> src-port ...
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> dst-mac <MACADDR> src-port ...
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> src-mac <MACADDR> protocol ...
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NUMBER> dst-mac ...
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> netmask <NETMASK> src-mac ...
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> dst-ip <IPvx> src-mac ...
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NUMBER> src-mac ...
clear cluster session policy-id <NUMBER> src-ip <IPvx> netmask <NETMASK> dst-ip ...
clear cluster session policy-id <NUMBER> src-ip <IPvx> dst-ip ...
clear cluster session policy-id <NUMBER> dst-ip ...
clear cluster session src-ip ...
clear cluster auth history 
clear cluster auth statistics 
clear cluster auth queue 
clear cluster auth table ipaddr <IPv4> 
clear cluster auth table id <NUMBER> 
clear cluster auth table infranet auth-id <NUMBER> 
clear cluster auth table infranet 
clear cluster auth table 
clear cluster auth 
clear cluster admin all 
clear cluster admin name <STRING> 
clear cluster admin lock <STRING> 
clear cluster admin lock 
clear cluster admin ...
clear cluster interface <IF_NAME_GENERAL> dot1x statistics 
clear cluster interface <IF_NAME_GENERAL> frame-relay stats 
clear cluster interface <IF_NAME_GENERAL> mlfr-uni-nni stats 
clear cluster interface <IF_NAME_GENERAL> status-change 
clear cluster interface <IF_NAME_GENERAL> counter 
clear cluster interface <IF_NAME_GENERAL> extensive 
clear cluster interface <IF_NAME_GENERAL> ...
clear cluster log self end-time <STRING> 
clear cluster log self 
clear cluster log flow-deny end-time ...
clear cluster log traffic policy <NUMBER> end-time ...
clear cluster log traffic policy <NUMBER_RANGE> end-time ...
clear cluster log traffic end-time ...
clear cluster log system saved 
clear cluster log system 
clear cluster alarm traffic policy <NUMBER> end-time <STRING> 
clear cluster alarm traffic policy <NUMBER> 
clear cluster alarm traffic policy <NUMBER_RANGE> end-time ...
clear cluster alarm traffic end-time ...
clear cluster event end-time <STRING> 
clear cluster event 
clear cluster mac-learn stats 
clear cluster mac-learn 
clear cluster fprofile 
clear cluster flow 
clear cluster counter all 
clear cluster counter interface 
clear cluster counter flow 
clear cluster counter screen interface <IF_NAME_GENERAL2> 
clear cluster counter screen zone <ZONE_NAME> 
clear cluster counter screen 
clear cluster counter ha 
clear cluster counter all ...
clear cluster dbuf 
clear cluster nsrp counter 
clear cluster nsrp counter protocol 
clear cluster nsrp counter rto 
clear cluster nsrp counter packet-fwd 
clear cluster nrtp queues 
clear cluster dhcp server <IF_NAME_GENERAL2> ip all 
clear cluster dhcp server <IF_NAME_GENERAL2> ip <IPv4> 
clear cluster dhcp client <IF_NAME_GENERAL2> ip 
clear cluster dns server-select domain <STRING> 
clear cluster dns server-select 
clear cluster dns proxy 
clear cluster dns ddns id <NUMBER> 
clear cluster dns ddns 
clear cluster dns 
clear cluster ippool <STRING> <IPv4> <IPv4> 
clear cluster ippool <STRING> <IPv4> 
clear cluster ippool <STRING> 
clear cluster ike-cookie ikeid-enumeration table <IPvx> 
clear cluster ike-cookie ikeid-enumeration table 
clear cluster ike-cookie all 
clear cluster ike-cookie <IPvx> 
clear cluster ipsec access-session all 
clear cluster ipsec access-session id <NUMBER> 
clear cluster ipsec access-session ipv4-address <IPv4> 
clear cluster ipsec access-session ipv6-address <IPv6> 
clear cluster ipsec access-session ike-cfg-ipv4-address <IPv4> 
clear cluster ipsec access-session xauth-user-name <STRING> 
clear cluster ipsec dbg-counters 
clear cluster sa-statistics id <NUMBER> 
clear cluster sa-statistics 
clear cluster sa <NUMBER> 
clear cluster l2tp all 
clear cluster l2tp ip <IPv4> 
clear cluster l2tp <STRING> 
clear cluster dip-in all 
clear cluster dip-in <NUMBER> <IPv4> <NUMBER> 
clear cluster dip-in <NUMBER> 
clear cluster arp all 
clear cluster arp <IPv4> 
clear cluster arp 
clear cluster arp <IPv4> ...
clear cluster traffic-shaping statistics 
clear cluster anti-spam stat 
clear cluster pppoe name <NAME_STRING> 
clear cluster pppoe 
clear cluster active-user all 
clear cluster active-user <IPvx> 
clear cluster config nsmgmt-dirty <STRING> 
clear cluster config nsmgmt-dirty 
clear cluster script 
clear cluster igmp interface <IF_NAME_GENERAL> statistic 
clear cluster igmp interface <IF_NAME_GENERAL> group all 
clear cluster igmp interface <IF_NAME_GENERAL> group <IPv4> 
clear cluster MLD interface <IF_NAME_GENERAL> group <IPv6> 
clear cluster MLD interface <IF_NAME_GENERAL> group 
clear cluster MLD interface <IF_NAME_GENERAL> statistic 
clear cluster multicast pim statistics 
clear cluster dot1x statistics 
clear cluster dot1x session 
clear cluster dot1x session id <NUMBER> 
clear cluster snmp statistics 
clear vrouter ...
exec save config from tftp <IPvx> <STRING> to tftp <IPvx> <STRING> from <IF_NAME_GENERAL> 
exec save config from tftp <IPvx> <STRING> to tftp <IPvx> <STRING> 
exec save config from tftp <IPvx> <STRING> to slot1 <STRING> ...
exec save config from tftp <IPvx> <STRING> to flash merge ...
exec save config from tftp <IPvx> <STRING> to flash ...
exec save config from tftp <IPvx> <STRING> to usb <STRING> 
exec save config from tftp <IPvx> <STRING> to flash ...
exec save config from tftp <IPvx> <STRING> merge ...
exec save config from slot1 <STRING> to ...
exec save config from flash to ...
exec save config from usb <STRING> to ...
exec save config from flash ...
exec save config to last-known-good 
exec save config to tftp ...
exec save config all-virtual-system 
exec save config 
exec save software from tftp <IPvx> <STRING> to tftp <IPvx> <STRING> ...
exec save software from tftp <IPvx> <STRING> to slot1 <STRING> ...
exec save software from tftp <IPvx> <STRING> to flash ...
exec save software from tftp <IPvx> <STRING> to usb <STRING> ...
exec save software from tftp <IPvx> <STRING> to flash ...
exec save software from slot1 <STRING> to ...
exec save software from usb <STRING> to ...
exec save software from flash to ...
exec save software from url <STRING> 
exec save software from flash ...
exec save software from ...
exec save file <STRING> from tftp <IPvx> <STRING> ...
exec save file <STRING> from slot1 <STRING> 
exec save file <STRING> from usb <STRING> 
exec save file <STRING> from ...
exec save file <STRING> to tftp ...
exec save 
exec save image-key tftp <IPvx> ...
exec save image-key usb <STRING> 
exec save software ...
exec vrouter <NAME_STRING> protocol bgp neighbor <IPv4> tcp-connect 
exec vrouter <NAME_STRING> protocol bgp neighbor <IPv4> connect 
exec vrouter <NAME_STRING> protocol bgp neighbor <IPv4> disconnect 
exec password check <STRING> <STRING> 
exec auth table infranet auth-id <NUMBER> ip <IPv4> user <STRING> role <STRING> role-names <STRING> src-zone <STRING> vsys <STRING> user-context <STRING> 
exec auth table infranet auth-id <NUMBER> ip <IPv4> user <STRING> role <STRING> role-names <STRING> src-zone <STRING> vsys <STRING> idle-timeout <NUMBER> 
exec auth table infranet auth-id <NUMBER> ip <IPv4> user <STRING> role <STRING> role-names <STRING> src-zone <STRING> vsys <STRING> 
exec auth table infranet auth-id <NUMBER> ip <IPv4> user <STRING> role <STRING> role-names <STRING> src-zone <STRING> user-context ...
exec auth table infranet auth-id <NUMBER> ip <IPv4> user <STRING> role <STRING> role-names <STRING> vsys ...
exec auth table infranet auth-id <NUMBER> ip <IPv4> user <STRING> role <STRING> src-zone ...
exec auth table infranet auth-id <NUMBER> ip <IPv4> user <STRING> role-names ...
exec auth table infranet auth-id <NUMBER> ip <IPv4> role ...
exec alarm ack-id <NUMBER> 
exec alarm all 
exec failover force 
exec failover revert 
exec pki rsa new-key <NUMBER> & 
exec pki rsa new-key <NUMBER> 
exec pki rsa new-key 
exec pki dsa new-key <NUMBER> & 
exec pki dsa new-key <NUMBER> 
exec pki dsa new-key 
exec pki ecdsa new-key <STRING> & 
exec pki ecdsa new-key <STRING> 
exec pki ecdsa new-key 
exec pki convert-cert 
exec pki x509 pkcs10 
exec pki x509 tftp <IPvx> from <IF_NAME_GENERAL> cert-name <STRING> 
exec pki x509 tftp <IPvx> from <IF_NAME_GENERAL> crl-name ...
exec pki x509 tftp <IPvx> cert-name ...
exec pki x509 scep key last-key 
exec pki x509 scep key <NUMBER> 
exec pki x509 scep cert <NUMBER> 
exec pki x509 scep renew <NUMBER> 
exec pki x509 install-factory-certs <STRING> 
exec pki x509 self-signed-cert key-pair <NUMBER> 
exec nsrp vsd-group <NUMBER> mode init 
exec nsrp vsd-group <NUMBER> mode pb 
exec nsrp vsd-group <NUMBER> mode backup 
exec nsrp vsd-group <NUMBER> mode ineligible 
exec nsrp sync rto all from peer 
exec nsrp sync rto session from ...
exec nsrp sync rto vpn from ...
exec nsrp sync rto l2tp from ...
exec nsrp sync rto dns from ...
exec nsrp sync rto arp from peer ...
exec nsrp sync rto auth-table from ...
exec nsrp sync rto dhcp from ...
exec nsrp sync rto RM from ...
exec nsrp sync rto phase1-SA from ...
exec nsrp sync rto attack-db from ...
exec nsrp sync rto rpc from ...
exec nsrp sync rto h323 from ...
exec nsrp sync rto xlate-ctx from ...
exec nsrp sync rto dip-in from ...
exec nsrp sync rto sccp from ...
exec nsrp sync rto mgcp from ...
exec nsrp sync rto route from ...
exec nsrp sync rto infranet from ...
exec nsrp sync rto ndp from ...
exec nsrp sync rto infranet ...
exec nsrp sync global-config check-sum 
exec nsrp sync global-config save 
exec nsrp sync file name <STRING> from peer 
exec nsrp sync file from ...
exec nsrp sync pki 
exec nsrp probe <IF_NAME_GENERAL> 
exec nsrp probe <IF_NAME_GENERAL> count <NUMBER> 
exec nsrp probe <IF_NAME_GENERAL> count <NUMBER> <MACADDR> 
exec nsrp probe <IF_NAME_GENERAL> <MACADDR> ...
exec infranet controller ip <IPv4> keepalive 
exec infranet controller ip <IPv4> enforcer-id <STRING> 
exec infranet controller ip <IPv4> vsys enable 
exec infranet controller ip <IPv4> vsys disable 
exec infranet controller connect 
exec infranet controller disconnect 
exec infranet controller check-sessions 
exec infranet controller notify-prefix <STRING> 
exec infranet controller notify drop 
exec infranet controller notify deny 
exec infranet controller notify auth-expire 
exec infranet controller notify idp-attack auth-only 
exec infranet controller notify idp-attack 
exec infranet controller unnotify drop 
exec infranet controller unnotify deny 
exec infranet controller unnotify auth-expire 
exec infranet controller unnotify idp-attack 
exec infranet controller keepalive ...
exec bulkcli vsys <STRING> <unknown type> 
exec dhcp client <IF_NAME_GENERAL2> renew 
exec dhcp 
exec dns refresh 
exec dns ddns id <NUMBER> 
exec ike preshare-gen <NAME_STRING> <STRING> 
exec anti-spam testscan <STRING> <NUMBER> 
exec anti-spam testscan <STRING> 
exec proxy-id update 
exec pppoe name <NAME_STRING> connect 
exec pppoe name <NAME_STRING> disconnect 
exec pppoe connect ...
exec syslog reconnect <STRING> 
exec syslog reconnect 
exec log cli tftp file-name <STRING> ip-addr <IPv4> 
exec ssh tftp pka-dsa user-name <NAME_STRING> file-name <STRING> ip-addr <IPv4> from <IF_NAME_GENERAL> 
exec ssh tftp pka-dsa user-name <NAME_STRING> file-name <STRING> ip-addr <IPv4> 
exec ssh tftp pka-dsa file-name <STRING> ...
exec ssh tftp pka-dsa file-name ...
exec ssh 
exec ssh tftp pka-rsa username <NAME_STRING> file-name <STRING> ip-addr <IPv4> from <IF_NAME_GENERAL> 
exec ssh tftp pka-rsa username <NAME_STRING> file-name <STRING> ip-addr <IPv4> 
exec ssh tftp pka-rsa file-name <STRING> ...
exec ssh tftp pka-rsa file-name ...
exec config rollback enable 
exec config rollback disable 
exec config rollback 
exec config lock start 
exec config lock abort 
exec config lock end 
exec config lock ...
exec license-key virtualization <STRING> 
exec license-key zone <STRING> 
exec license-key vrouter <STRING> 
exec license-key nsrp <STRING> 
exec license-key vpn <STRING> 
exec license-key vsys <STRING> 
exec license-key capacity <STRING> 
exec license-key delete <STRING> 
exec license-key update trial 
exec license-key update 
exec license-key <STRING> 
exec license-key delete ...
exec license-key ...
exec script start <NUMBER> frequency <NUMBER> 
exec script start <NUMBER> count <NUMBER> 
exec script start <NUMBER> 
exec script start frequency ...
exec script start-nowrap <NUMBER> ...
exec script stop 
exec ntp server primary update 
exec ntp server backup1 update ...
exec ntp server backup2 update ...
exec ntp update ...
exec igmp interface <IF_NAME_GENERAL> query 
exec igmp interface <IF_NAME_GENERAL> query <IPv4> 
exec igmp interface <IF_NAME_GENERAL> query <IPv4> s_bit <IPv4> 
exec igmp interface <IF_NAME_GENERAL> query <IPv4> s_bit <IPv4> <IPv4> 
exec igmp interface <IF_NAME_GENERAL> query <IPv4> s_bit <IPv4> <IPv4> <IPv4> 
exec igmp interface <IF_NAME_GENERAL> query <IPv4> s_bit <IPv4> <IPv4> <IPv4> <IPv4> 
exec igmp interface <IF_NAME_GENERAL> query <IPv4> <IPv4> ...
exec igmp interface <IF_NAME_GENERAL> report <IPv4> is_include <IPv4> ...
exec igmp interface <IF_NAME_GENERAL> report <IPv4> is_exclude <IPv4> ...
exec igmp interface <IF_NAME_GENERAL> report <IPv4> to_include <IPv4> ...
exec igmp interface <IF_NAME_GENERAL> report <IPv4> to_exclude <IPv4> ...
exec igmp interface <IF_NAME_GENERAL> report <IPv4> allow_new <IPv4> ...
exec igmp interface <IF_NAME_GENERAL> report <IPv4> block_old <IPv4> ...
exec igmp interface <IF_NAME_GENERAL> report <IPv4> 
exec igmp interface <IF_NAME_GENERAL> leave <IPv4> <NUMBER> <NUMBER> 
exec igmp interface <IF_NAME_GENERAL> leave <IPv4> <NUMBER> <NUMBER> <NUMBER> 
exec igmp interface <IF_NAME_GENERAL> leave <IPv4> <NUMBER> <NUMBER> <NUMBER> <NUMBER> 
exec igmp interface <IF_NAME_GENERAL> leave <IPv4> <NUMBER> <NUMBER> <NUMBER> <NUMBER> <NUMBER> 
exec igmp interface <IF_NAME_GENERAL> leave <IPv4> <NUMBER> <NUMBER> <NUMBER> <NUMBER> <NUMBER> <NUMBER> 
exec igmp interface <IF_NAME_GENERAL> leave <IPv4> 
exec modem command <STRING> 
exec fips-mode self-test 
exec port-mode trust-untrust 
exec port-mode home-work 
exec port-mode dual-untrust 
exec port-mode combined 
exec port-mode extended 
exec port-mode dmz-dual-untrust 
exec port-mode dual-dmz 
exec port-mode ...
delete cluster file <STRING> 
delete cluster crypto file 
delete cluster crypto auth-key 
delete cluster node_secret ipaddr <IPv4> 
delete cluster node_secret 
delete cluster pki object-id system 
delete cluster pki object-id <NUMBER> 
delete cluster nsmgmt keys 
delete cluster nsmgmt 
delete cluster ssh device all 
delete file ...