Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

[edit access]

Sub Hierarchies

[edit access aaa-options {aaa-options-name}]

[edit access accounting-backup-options]

[edit access address-assignment]

[edit access diameter]

[edit access domain]

[edit access firewall-authentication]

[edit access group-profile {profile-name}]

[edit access gx-plus]

[edit access ldap-options]

[edit access ldap-server {server-address}]

[edit access nasreq]

[edit access ocs]

[edit access pcrf]

[edit access profile {profile-name}]

[edit access profile{profile-name} ldap-options]

[edit access protocol-attributes {attribute-set-name}]

[edit access radius]

[edit access radius-disconnect {client-address}]

[edit access radius-options]

[edit access radius-server {address}]

[edit access radsec]

[edit access s6a]

[edit access saml]

[edit access securid-server]

[edit access tunnel-profile {profile-name}]

[edit access tunnel-switch-profile {profile-name}]

[edit access]
aaa-options (Access Profile)	accounting-backup-options (Access Profile)	address-assignment (Access)
address-assignment (Address-Assignment Pools)	address-pool	address-pool (Access)
address-preservation (Access)	address-protection	diameter (Subscriber Aware Policy Control)
domain (Domain Map)	domain-name-server (Routing Instances and Access Profiles)	domain-name-server-inet (Routing Instances and Access Profiles)
domain-name-server-inet6 (Routing Instances and Access Profiles)	firewall-authentication	group-profile (Access)
group-profile (Group Profile)	gx-plus (Gx-Plus)	ldap-options
ldap-server	linked-pool-aggregation (Address-Assignment Pools)	nasreq (Diameter Application)
ocs (Diameter Applications)	pcrf (Diameter Applications)	profile
profile (Access)	profile (Subscriber Access)	radius-disconnect
radius-disconnect-port	radius-options (Access)	radius-server
radius-server-name	radsec	report-interface-descriptions (Access)
s6a	saml	saml-options
securid-server	terminate-code	tunnel-profile (Tunnel Profile)
tunnel-switch-profile (L2TP Tunnel Switching, Definition)	wins-server (Access)

[aaa-options]

[edit access aaa-options {aaa-options-name}]
aaa-context (AAA Options)	access-profile (AAA Options)	subscriber-context (AAA Options)

[accounting-backup-options]

[edit access accounting-backup-options]
max-pending-accounting-stops (Access Profile)	max-withhold-time (Access Profile)

[address-assignment]

[edit access address-assignment]
address-pools	pool (Access)	pool (Address-Assignment Pools)

[edit access address-assignment (Access)]
dynamic-pool

[edit access address-assignment address-pools {name}]
default-pool (Address Pools)	family (Address Pools)

[edit access address-assignment address-pools {name} family inet]
network (Address Pools)

[edit access address-assignment address-pools {name} family inet network {network-prefix}]
external-assigned (Address Pools)

[edit access address-assignment address-pools {name} family inet6]
network (Address Pools)

[edit access address-assignment address-pools {name} family inet6 network {network-prefix}]
external-assigned (Address Pools)

[edit access address-assignment pool]
excluded-address (Address-Assignment Pools)	family (Address-Assignment Pools)	link (Access)

[edit access address-assignment pool <name> family (inet \| inet6)]
network (Access)

[edit access address-assignment pool <name> family (inet \| inet6) dhcp-attributes]
name-server (Access)

[edit access address-assignment pool <name> family (inet \| inet6) xauth-attributes]
wins-server (Access)

[edit access address-assignment pool <name> family inet]
xauth-attributes

[edit access address-assignment pool <name> family inet6]
xauth-attributes

[edit access address-assignment pool {pool-name} family {family}]
dhcp-attributes (Address-Assignment Pools)

[edit access address-assignment pool {name} family (inet \| inet6)]
excluded-range (Address-Assignment Pools)	host (Address-Assignment Pools)	range (Address-Assignment Pools)

[edit access address-assignment pool {pool-name} family inet]
dhcp-attributes (Access IPv4 Address Pools)	network

[edit access address-assignment pool {pool-name} family inet dhcp-attributes]
option-match

[edit access address-assignment pool {pool-name} family inet dhcp-attributes option-match]
option-82 (Address-Assignment Pools)

[edit access address-assignment pool {pool-name} family inet6]
dhcp-attributes (Access IPv6 Address Pools)	prefix (Address-Assignment Pools)

[edit access address-assignment pool pool-name family inet]
range (Access)

[edit access address-assignment pool pool-name family inet6]
prefix (Access IPv6)	range (Access)

[diameter]

[edit access diameter]
applications (Diameter)	firmware-revision	network-element (Diameter Base Protocol)
origin (Diameter Base Protocol)	peer (Diameter Base Protocol)	product-name
traceoptions (Diameter Base Protocol for Subscriber Aware Policy Control)

[edit access diameter applications pcc-gx]
maximum-pending-requests (Diameter)

[edit access diameter network-element {element-name}]
function (Diameter Network Element for Subscriber Management)	peer (Diameter Network Element)

[edit access diameter network-element {element-name} peer {peer-name}]
priority (Diameter Network Element)	timeout (Diameter Network Element)

[edit access diameter origin]
host (Diameter Origin)	realm (Diameter Origin)

[edit access diameter peer {peer-name}]
address (Diameter Peer)	connect-actively	disconnect-peer-timeout
incoming-queue	outgoing-queue	watchdog-timeout

[domain]

[edit access domain]
delimiter (Domain Map)	map (Domain Map)	parse-direction (Domain Map)
parse-order (Domain Map)	realm-delimiter (Domain Map)	realm-parse-direction (Domain Map)

[edit access domain map {domain-map-name}]
aaa-logical-system (Domain Map)	aaa-routing-instance (Domain Map)	access-profile (Domain Map)
address-pool (Domain Map)	dynamic-profile (Domain Map)	override-chap-password
override-password (Domain Map)	strip-domain (Domain Map)	strip-username (Domain Map)
sub-domain	target-logical-system (Domain Map)	target-routing-instance (Domain Map)
tunnel-profile (Domain Map)	tunnel-switch-profile (L2TP Tunnel Switching, Application)	using-user-password

[edit access domain map {domain-map-name} aaa-logical-system {logical-system-name}]
aaa-routing-instance (Domain Map)

[edit access domain map {domain-map-name} target-logical-system {logical-system-name}]
target-routing-instance (Domain Map)

[firewall-authentication]

[edit access firewall-authentication]
pass-through (Access Firewall-Authentication)	traceoptions (Access)	user-firewall (Access Firewall-Authentication)
web-authentication (Access Firewall-Authentication)

[edit access firewall-authentication pass-through]
default-profile	ftp (Access)	http (Access)
telnet (Access)

[edit access firewall-authentication pass-through (ftp \| http \| telnet)]
banner (Access FTP HTTP Telnet Authentication)

[edit access firewall-authentication pass-through (ftp \| http \| telnet) banner]
fail	login (Access)	success

[edit access firewall-authentication user-firewall]
default-ssl-termination-profile (Access)

[edit access firewall-authentication web-authentication]
banner (Access Web Authentication)	default-profile	logo (Access)

[edit access firewall-authentication web-authentication banner]
fail	logout (Access)	success

[group-profile]

[edit access group-profile {profile-name}]
l2tp (Group Profile)	ppp (Group Profile)

[edit access group-profile {profile-name} client {client-name} ppp]
primary-dns	primary-wins

[edit access group-profile {profile-name} l2tp]
interface-id	lcp-renegotiation	local-chap
maximum-sessions-per-tunnel

[edit access group-profile {profile-name} ppp]
cell-overhead	encapsulation-overhead	framed-pool
interface-id	keepalive	ppp-options (L2TP)
secondary-dns	secondary-wins

[edit access group-profile {profile-name} ppp ppp-options]
aaa-options (PPP Profile)	chap (L2TP)	ignore-magic-number-mismatch (Access Group Profile)
initiate-ncp (Dynamic and Static PPP)	ipcp-suggest-dns-option	mru (Dynamic and Static PPPoE)
mtu (Dynamic and Static PPPoE)	pap (L2TP)	peer-ip-address-optional

[edit access group-profile {profile-name}ppp ppp]
idle-timeout (Access)

[gx-plus]

[edit access gx-plus]
global (Gx-Plus)	partition (Gx-Plus)

[edit access gx-plus global]
include-ipv6 (Gx-Plus)	max-outstanding-requests (Diameter Applications)

[edit access gx-plus partition {partition-name}]
destination-host (Gx-Plus)	destination-realm (Gx-Plus)	diameter-instance (Diameter Applications)

[ldap-options]

[edit access ldap-options]
assemble	base-distinguished-name	revert-interval (Access LDAP)
search

[edit access ldap-options search]
admin-search	search-filter

[edit access ldap-options search admin-search]
distinguished-name (Access)	password (Access)

[ldap-server]

[edit access ldap-server {server-address}]
port (Access LDAP)	retry (Access LDAP)	routing-instance (Access LDAP)
timeout (Access LDAP)

[edit access ldap-server server-address]
source-address (Access LDAP)

[nasreq]

[edit access nasreq]
partition (NASREQ Diameter Application)

[ocs]

[edit access ocs]
global (OCS)	partition (OCS)

[edit access ocs global]
service-context-id (OCS)

[edit access ocs partition {partition-name}]
backup (OCS Partition)	called-station-id (OCS Partition)	charging-id (OCS Partition)
destination-host (OCS Partition)	destination-realm (OCS Partition)	diameter-instance (Diameter Applications)
draining (Diameter Applications)	draining-response-timeout (Diameter Applications)	final-response-timeout (OCS Partition)
force-continue (OCS Partition)	ggsn-address (OCS Partition)	ggsn-mcc-mnc (OCS Partition)
max-outstanding-requests (Diameter Applications)	send-origin-state-id (Diameter Applications)	sftp-backup (OCS Partition)
user-name-include (OCS Partition)

[edit access ocs partition alternative-partition-name {alternative-partition-name}]
alternative-partition-name (OCS Partition)

[pcrf]

[edit access pcrf]
global (PCRF)	partition (PCRF)

[edit access pcrf partition {partition-name}]
accept-sdr (PCRF Partition)	destination-host (PCRF Partition)	destination-realm (PCRF Partition)
diameter-instance (Diameter Applications)	draining (Diameter Applications)	draining-response-timeout (Diameter Applications)
ip-can-type (PCRF Partition)	local-decision (PCRF Partition)	logout-response-timeout (PCRF Partition)
max-outstanding-requests (Diameter Applications)	report-local-rule (PCRF Partition)	report-resource-allocation (PCRF Partition)
report-successful-resource-allocation (PCRF Partition)	send-network-family-indicator (PCRF Partition)	send-origin-state-id (Diameter Applications)
subscription-id-data-include (PCRF Partition)	subscription-id-type (PCRF Partition)	update-response-timeout (PCRF Partition)

[edit access pcrf partition {partition-name}],]
send-dyn-subscription-indicator (PCRF Partition)

[profile]

[edit access profile {profile-name}]
accounting (Access Profile)	accounting-order	authentication-order
authentication-order (Access Profile)	authorization-order	charging-service-list
client	client-group	client-name-filter
domain-name-server (Routing Instances and Access Profiles)	domain-name-server-inet (Routing Instances and Access Profiles)	domain-name-server-inet6 (Routing Instances and Access Profiles)
jsrc (Access Profile)	ldap-server	local (Flat-File Access Profile)
preauthentication-order (Access Profile)	provisioning-order (Diameter Applications)	radius (Access Profile)
radius-server	radius-server-name	saml (Access Profile)
service (Service Accounting)	session-limit-per-username (Access Profile)	session-options
session-options (Access Profile)	subscriber (Access Profile)

[edit access profile {profile-name} accounting]
accounting-stop-on-access-deny	accounting-stop-on-failure	address-change-immediate-update
ancp-speed-change-immediate-update (ANCP)	coa-immediate-update	coa-no-override service-class-attribute
duplication (Access Profile)	duplication-filter (Access Profile)	duplication-vrf (Duplicate Accounting)
family-state-change-immediate-update	immediate-update	order
send-acct-status-on-config-change (Access Profile)	statistics (Access Profile)	update-interval
wait-for-acct-on-ack (Access Profile)

[edit access profile {profile-name} accounting duplication-vrf]
access-profile-name (Duplicate Accounting)	vrf-name (Duplicate Accounting)

[edit access profile {profile-name} client {client-name}]
client-group	firewall-user	ike (Access Profile)
l2tp (Profile)	maximum-sessions (L2TP)	ppp (Profile)

[edit access profile {profile-name} client {client-name} ike]
interface-id

[edit access profile {profile-name} client {client-name} l2tp]
aaa-access-profile (L2TP LNS)	interface-id	lcp-renegotiation
local-chap	maximum-sessions-per-tunnel	multilink
service-profile (L2TP)

[edit access profile {profile-name} client {client-name} ppp]
cell-overhead	encapsulation-overhead	framed-pool
interface-id	keepalive	keepalive-retries
secondary-dns	secondary-wins

[edit access profile {name} client {name} xauth]
ip-address (Access Profile)

[edit access profile {profile-name} client {client-name}ppp ]
idle-timeout (Access)

[edit access profile {profile-name} client-name-filter {client-name}]
count	domain-name (Access Profile)	separator

[edit access profile {profile-name} jsrc]
attributes (JSRC Attributes)

[edit access profile {profile-name} jsrc attributes]
exclude (JSRC Attributes)

[edit access profile {profile-name} ldap-options]
assemble	revert-interval (Access LDAP)	search

[edit access profile {profile-name} ldap-options search]
admin-search	search-filter

[edit access profile {profile-name} ldap-options search admin-search]
distinguished-name (Access)	password (Access)

[edit access profile {profile-name} ldap-server {ip-address}]
no-tls-certificate-check	port (Access LDAP)	retry (Access LDAP)
routing-instance (Access LDAP)	source-address (Access LDAP)	timeout (Access LDAP)
tls-min-version	tls-peer-name	tls-timeout
tls-type

[edit access profile {profile-name} ppp]
primary-dns	primary-wins

[edit access profile profile-name]
radius-options (Access)

[edit access profile profile-name authentication-order ldap]
ldap-options

[edit access profile {profile-name} radius]
accounting-server	accounting-server-name	attributes (RADIUS Attributes)
authentication-server	options (Access Profile)

[edit access profile {profile-name} radius attributes]
exclude (RADIUS Attributes)

[edit access profile {profile-name} radius options]
calling-station-id-format (Subscriber Management)	interface-description-format	nas-port-extended-format
nas-port-id-format (Subscriber Management)	nas-port-type	nas-port-type (Subscriber Management)
override (RADIUS Options)	revert-interval (Access)

[edit access profile {profile-name} radius-server {address}]
accounting-port (RADIUS Server)	port (RADIUS Server)	radsec-destination
retry (RADIUS Server)	routing-instance (Access RADIUS)	secret (Access Profile)
secret (RADIUS Server)	source-address (Access RADIUS)	timeout (RADIUS Server)

[edit access profile {profile-name} service]
accounting (Service Accounting)	accounting-order (Service Accounting)

[edit access profile {profile-name} service accounting]
statistics (Service Accounting)	update-interval (Service Accounting)

[edit access profile {profile-name} session-options]
client-idle-timeout (Access Profile)	client-session-timeout (Access Profile)	pcc-context
strip-user-name (Access Profile)

[edit access profile {profile-name} session-options strip-user-name]
delimiter (Access Profile)	parse-direction (Access Profile)

[profileldap-options]

[edit access profile{profile-name} ldap-options]
base-distinguished-name

[protocol-attributes]

[edit access protocol-attributes {attribute-set-name}]
option-match

[edit access protocol-attributes {attribute-set-name} option-match]
option-82 (Address-Assignment Pools)

[radius]

[edit access radius]
clients	network-elements (RADIUS)	servers (RADIUS)
snoop-segments (RADIUS)

[edit access radius clients {client-name}]
accounting (RADIUS Client)	address (RADIUS Clients)	prefer-framed-ip-address (RADIUS Clients)
prefer-framed-ipv6-prefix (RADIUS Clients)	source-interface (RADIUS Client)

[edit access radius clients {client-name} accounting]
response-cache-timeout (RADIUS Client)	secret (RADIUS Client)

[edit access radius network-element {name}]
maximum-pending-reqs-limit	pending-queue-watermark	pending-queue-watermark-abate
server (RADIUS Network Elements)

[edit access radius network-element {name} server {name}]
priority (RADIUS Network Elements)

[edit access radius servers {name}]
accounting-port (RADIUS Server)	accounting-secret (RADIUS Server)	address (RADIUS Server)
allow-dynamic-requests (RADIUS Server)	dead-criteria-retries (RADIUS Server)	dynamic-requests-secret (RADIUS Server)
port (RADIUS Server)	retry (RADIUS Server)	revert-interval (RADIUS Server)
secret (RADIUS Server)	source-interface (RADIUS Server)	timeout (RADIUS Server)

[edit access radius snoop-segments {segment-name}]
destination-ip-address (RADIUS Snoop Segment)	destination-port (RADIUS Snoop Segment)	request-cache-timeout (RADIUS Snoop Segment)
shared-secret (RADIUS Snoop Segment)	source-interface (RADIUS Snoop Segment)	source-ip-address (RADIUS Snoop Segment)

[radius-disconnect]

[edit access radius-disconnect {client-address}]
secret (RADIUS Server)

[radius-options]

[edit access radius-options]
interim-rate (Access)	request-rate (Access)	revert-interval (Access RADIUS)
revert-interval (Access)	timeout-grace (Access)	unique-nas-port (Access)

[radius-server]

[edit access radius-server {address}]
accounting-port (RADIUS Server)	port (RADIUS Server)	radsec-destination
retry (RADIUS Server)	routing-instance (Access RADIUS)	secret (RADIUS Server)
source-address (Access RADIUS)	timeout (RADIUS Server)

[radsec]

[edit access radsec destination ]
dynamic-requests

[s6a]

[edit access s6a]
partition (s6a)

[saml]

[edit access saml]
identity-provider (SAML)	service-provider (SAML)

[edit access saml identity-provider {identity-provider}]
identity-provider attribute-mapping (SAML)	identity-provider settings (SAML)

[securid-server]

[edit access securid-server]
configuration-file

[tunnel-profile]

[edit access tunnel-profile {profile-name}]
tunnel (Tunnel Profile)

[edit access tunnel-profile {profile-name} tunnel {tunnel-id}]
identification (Tunnel Profile)	logical-system (Tunnel Profile)	max-sessions (Tunnel Profile)
medium (Tunnel Profile)	nas-port-method (Tunnel Profile)	preference (Tunnel Profile)
remote-gateway (Tunnel Profile)	routing-instance (Tunnel Profile)	secret (Tunnel Profile)
source-gateway (Tunnel Profile)	type (Tunnel Profile)

[edit access tunnel-profile {profile-name} tunnel {tunnel-id} remote-gateway]
address (Tunnel Profile Remote Gateway)	gateway-name (Tunnel Profile Remote Gateway)

[edit access tunnel-profile {profile-name} tunnel {tunnel-id} source-gateway]
address (Tunnel Profile Source Gateway)	gateway-name (Tunnel Profile Source Gateway)

[tunnel-switch-profile]

[edit access tunnel-switch-profile {profile-name}]
avp (L2TP Tunnel Switching)	tunnel-profile (L2TP Tunnel Switching)

[edit access tunnel-switch-profile {profile-name} avp]
bearer-type (L2TP Tunnel Switching)	calling-number (L2TP Tunnel Switching)	cisco-nas-port-info (L2TP Tunnel Switching)