Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Mapping OpenConfig System Terminal Model Commands to Junos Configuration

Note:

See OpenConfig Data Model Version topic to understand the data models supported version and its Junos OS or Junos Evolved OS release for Juniper Networks ACX Series, MX Series and PTX Series.

The following tables show the mapping of system terminal commands with the relevant configurations in Junos:

  • Table 1: gRPC Server Configuration
  • Table 2: Telnet Server Configuration
Table 1: gRPC Server Configuration

Command Name

OpenConfig Configuration

Junos Configuration

Port

 
openconfig-system:system {
    grpc-servers {              
        grpc-server  <> {
            config {
                port <>;
            }
        }
    }
} 

system { 
    services {
        extension-service {
            request-response {
                grpc {
                    ssl {
                        port <>;
                    }
                }
            }
        }
    }
}

The OpenConfig port leaf value maps to the Junos port statement.

Listen address

 
openconfig-system:system { 
    grpc-servers {              
        grpc-server  <> {
            config {
                 listen-addresses <>;
            }
        }
    }
}
 
system { 
    services {
        extension-service {
            request-response {
                grpc {
                    ssl {
                        address <>;
            }
                }
            }
        }
    }
}

The OpenConfig listen-addresses is a leaf-list and maps to the Junos address statement. Consequently, the listen-addresses leaf value is restricted to a single value.

Certificate-id

 
openconfig-system:system { 
    grpc-servers {              
        grpc-server  <> {
            config {
                 certificate-id <>;
            }
        }
    }
} 
system { 
    services {
        extension-service {
            request-response {
                grpc {
                    ssl {
                        local-certificate <>;
                    }
                }
            }
        }
    }
}

The OpenConfig certificate-id leaf maps to the Junos statement local-certificate. The single OpenConfig certificate value is merged with Junos certificates.
Enable 
openconfig-system:system { 
    grpc-servers {              
        grpc-server  <> {
            config {
                 enable <>;
            }
        }
    }
} 
system { 
    services {
        extension-service {
            request-response {
                grpc {
                    ssl {
                        ……….
                    }
                }
            }
        }
    }
}

The OpenConfig enable leaf value toggles the set system services ssh configuration. When enable is not set, the SSH configuration is enabled by default as the data model defines TRUE as the default value for leaf enable.

Metadata-authentication

 
openconfig-system:system { 
    grpc-servers {              
        grpc-server  <> {
            config {
                 metadata-authentication <>;
            }
        }
    }
}

Not supported.

Metadata authentication is enabled by default in Junos. There is no Junos statement to enable or disable this feature.

Transport-security

 
openconfig-system:system { 
    grpc-servers {              
        grpc-server  <> {
            config {
                 transport-security <>;
            }
        }
    }
} 

system { 
    services {
        extension-service {
            request-response {
                grpc {
                    ssl {
                           ………
                    }
                }
            }
        }
    }
}

The OpenConfig transport-security leaf is a toggle to enable or disable gRPC Secure Sockets Layer (SSL)/Transport Layer Security (TLS). The default value for transport-security is TRUE. SSL is enabled by default. However, if the value for transport-security is FALSE, the configuration commit will fail.
Table 2: Telnet Server Configuration

Command Name

OpenConfig Configuration

Junos Configuration

Rate-limit

 
openconfig-system:system { 
    telnet-server {
        config {
            rate-limit <>;
        }
    }
} 

system { 
    services {
        telnet {
            rate-limit <>;
        }
    } 
}

The OpenConfig rate-limit leaf is set to the Junos telnet server rate-limit value.

Session-limit 
openconfig-system:system { 
    telnet-server {
        config {
            session-limit <>;
        }
    }
} 

system { 
    services {
        telnet {
            connection-limit <>;
        }
    } 
}

The OpenConfig session-limit leaf is set to the Junos telnet server connection-limit value.

Timeout

 
openconfig-system:system { 
    telnet-server {
        config {
            timeout <>;
        }
    }
}

Not supported.

The OpenConfig timeout leaf is not supported on Junos.

Enable 
openconfig-system:system { 
    telnet-server {
        config {
            enable <>;
        }
    }
} 

system { 
    services {
        telnet {
            ……..
        }
    } 
}

The OpenConfig enable leaf is a toggle to enable or disable the telnet server configuration. It's disabled or set to FALSE by default.