[
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show configuration",
  "cmd": "show configuration",
  "desc": "Troubleshooting — View the current active configuration, also known as the running configuration, from the operational mode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show configuration commands",
  "cmd": "show configuration commands",
  "desc": "Troubleshooting — Get a collection of all the set commands required which led to the running configuration."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show configuration json",
  "cmd": "show configuration json",
  "desc": "Troubleshooting — View the current active configuration in JSON format. :::{code-block} none {\"interfaces\": {\"ethernet\": {\"eth0\": {\"address\": [\"192.0.2.11/24\", \"192.0.2.35/24\"], \"hw-id\": \"52:54:00:48:a0:c6\"}, \"eth1\": {\"address\": [\"203.0.…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show configuration json pretty",
  "cmd": "show configuration json pretty",
  "desc": "Troubleshooting — View the current active configuration in readable JSON format. :::{code-block} none { \"interfaces\": { \"ethernet\": { \"eth0\": { \"address\": [ \"192.0.2.11/24\", \"192.0.2.35/24\" ], \"hw-id\": \"52:54:00:48:a0:c6\" }, \"eth1\": { \"a…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show",
  "cmd": "show",
  "desc": "Troubleshooting · docs"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set",
  "cmd": "set",
  "desc": "System — Use this command to set the value of a parameter or to create a new element."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "delete",
  "cmd": "delete",
  "desc": "System — To delete a configuration entry use the delete command, this also deletes all sub-levels under the current level you\\'ve specified in the delete command."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "commit",
  "cmd": "commit",
  "desc": "System — Any change you do on the configuration, will not take effect until committed using the commit command in configuration mode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "save",
  "cmd": "save",
  "desc": "System — Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "exit \\[discard\\]",
  "cmd": "exit \\[discard\\]",
  "desc": "System — Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the exit discard command must be used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "commit-confirm <minutes>",
  "cmd": "commit-confirm <minutes>",
  "desc": "System — Use this command to temporarily commit your changes and set the number of minutes available for confirmation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "copy",
  "cmd": "copy",
  "desc": "System — Copy a configuration element. You can copy and remove configuration subtrees."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "rename",
  "cmd": "rename",
  "desc": "System — Rename a configuration element. You can also rename config subtrees: :::{code-block} none vyos@router# rename rule 10 to rule 5 [edit firewall name FromWorld] vyos@router# commit [edit firewall name FromWorld] ::: Note…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "comment <config node> \"comment text\"",
  "cmd": "comment <config node> \"comment text\"",
  "desc": "System — Add comment as an annotation to a configuration node. The comment command allows you to insert a comment above the <config node> configuration section."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "run",
  "cmd": "run",
  "desc": "System — Access to these commands are possible through the use of the run [command] command."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show system commit",
  "cmd": "show system commit",
  "desc": "Troubleshooting — View all existing revisions on the local system. :::{code-block} none vyos@vyos:~$ show system commit 0 2015-03-30 08:53:03 by vyos via cli 1 2015-03-30 08:52:20 by vyos via cli 2 2015-03-26 21:26:01 by root via boot-co…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system config-management commit-revisions <N>",
  "cmd": "set system config-management commit-revisions <N>",
  "desc": "System — You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "compare <saved \\| N> <M>",
  "cmd": "compare <saved \\| N> <M>",
  "desc": "System — Use this command to spot what the differences are between different configurations."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show system commit diff <number>",
  "cmd": "show system commit diff <number>",
  "desc": "Troubleshooting — Show commit revision difference."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "rollback <N>",
  "cmd": "rollback <N>",
  "desc": "System — Rollback to revision N (currently requires reboot) :::{code-block} none vyos@vyos# compare 1 [edit system] >host-name vyos-1 [edit] vyos@vyos# rollback 1 Proceed with reboot?"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system config-management commit-archive location <URI>",
  "cmd": "set system config-management commit-archive location <URI>",
  "desc": "System — Specify remote location of commit archive as any of the below URI (Uniform Resource Identifier) - http://<user>:<passwd>@<host>:/<dir> - https://<user>:<passwd>@<host>:/<dir> - ftp://<user>:<passwd>@<host>/<dir> - sftp:…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system config-management commit-archive vrf <name>",
  "cmd": "set system config-management commit-archive vrf <name>",
  "desc": "System — Specify name of the VRF (Virtual Routing and Forwarding) instance used to upload the configuration to the remote system."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "load <URI>",
  "cmd": "load <URI>",
  "desc": "System — Use this command to load a configuration which will replace the running configuration."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "protocols static arp <ipaddress> hwaddr <macaddress>",
  "cmd": "protocols static arp <ipaddress> hwaddr <macaddress>",
  "desc": "Routing — This will configure a static ARP entry, always resolving 192.0.2.100 to 00:53:27:de:23:aa."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack table-size <1-50000000>",
  "cmd": "set system conntrack table-size <1-50000000>",
  "desc": "System — :defaultvalue: The connection tracking table contains one entry for each connection being tracked by the system."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show protocols static arp",
  "cmd": "show protocols static arp",
  "desc": "Troubleshooting — Display all known ARP table entries spanning across all interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set interfaces {{ var0 }} <interface> address <address | dhcp |",
  "cmd": "set interfaces {{ var0 }} <interface> address <address | dhcp |",
  "desc": "DHCP — dhcpv6> Configure interface <interface> with one or more interface addresses. * **address** can be specified multiple times as IPv4 and/or IPv6 address, e.g."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "list}",
  "cmd": "list}",
  "desc": "System — :show-coverage:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "delete raid <RAID‐1‐device> member <disk‐partition>",
  "cmd": "delete raid <RAID‐1‐device> member <disk‐partition>",
  "desc": "System · general"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "format disk <disk‐device1> like <disk‐device2>",
  "cmd": "format disk <disk‐device1> like <disk‐device2>",
  "desc": "System · general"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "add raid <RAID‐1‐device> member <disk‐partition>",
  "cmd": "add raid <RAID‐1‐device> member <disk‐partition>",
  "desc": "System · general"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show raid <RAID‐1‐device>",
  "cmd": "show raid <RAID‐1‐device>",
  "desc": "Troubleshooting — shows output for show raid md0 as sdb1 is being added to the RAID 1 set and is in the process of being resynchronized."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show disk sda format",
  "cmd": "show disk sda format",
  "desc": "Troubleshooting — Use this command to display the formatting of a hard disk. :::{code-block} none vyos@vyos:~$ show disk sda format Disk /dev/sda: 1073 MB, 1073741824 bytes 85 heads, 9 sectors/track, 2741 cylinders Units = cylinders of 7…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show hardware usb",
  "cmd": "show hardware usb",
  "desc": "Troubleshooting — Retrieve a tree-like representation of all connected USB devices. :::{note} If a device is unplugged and plugged in again, it is assigned a new Port, Dev, and If."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show hardware usb serial",
  "cmd": "show hardware usb serial",
  "desc": "Troubleshooting — Retrieve a list and description of all connected USB serial devices. The device name displayed, (for example usb0b2.4p1.0), can be used directly when accessing the serial console as console-server device."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show version",
  "cmd": "show version",
  "desc": "Troubleshooting — Return the currently running VyOS version and build information. This includes the name of the release train, e.g., sagitta on VyOS 1.4, and circinus on VyOS 1.5."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show version kernel",
  "cmd": "show version kernel",
  "desc": "Troubleshooting — Return the version number of the currently running Linux kernel. :::{code-block} none vyos@vyos:~$ show version kernel 5.10.46-amd64-vyos :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show version frr",
  "cmd": "show version frr",
  "desc": "Troubleshooting — Return the version number of FRR (Free Range Routing - <https://frrouting.org/>) used in this release."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option reboot-on-upgrade-failure [timeout <min>]",
  "cmd": "set system option reboot-on-upgrade-failure [timeout <min>]",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication mode <local | radius>",
  "cmd": "set vpn sstp authentication mode <local | radius>",
  "desc": "VPN — Set authentication backend. The configured authentication backend is used for all queries."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication local-users username <user> password <pass>",
  "cmd": "set vpn sstp authentication local-users username <user> password <pass>",
  "desc": "VPN — Create <user> for local authentication on this system. The users password will be set to <pass>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp client-ip-pool <POOL-NAME> range <x.x.x.x-x.x.x.x | x.x.x.x/x>",
  "cmd": "set vpn sstp client-ip-pool <POOL-NAME> range <x.x.x.x-x.x.x.x | x.x.x.x/x>",
  "desc": "VPN — Use this command to define the first IP address of a pool of addresses to be given to SSTP clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp default-pool <POOL-NAME>",
  "cmd": "set vpn sstp default-pool <POOL-NAME>",
  "desc": "VPN — Use this command to define default address pool name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp gateway-address <gateway>",
  "cmd": "set vpn sstp gateway-address <gateway>",
  "desc": "VPN — Specifies single <gateway> IP address to be used as local address of PPP interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp ssl ca-certificate <file>",
  "cmd": "set vpn sstp ssl ca-certificate <file>",
  "desc": "VPN — Name of installed certificate authority certificate."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp ssl certificate <file>",
  "cmd": "set vpn sstp ssl certificate <file>",
  "desc": "VPN — Name of installed server certificate."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius server <server> key <secret>",
  "cmd": "set vpn sstp authentication radius server <server> key <secret>",
  "desc": "VPN — Configure RADIUS <server> and its required shared <secret> for communicating with the RADIUS server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius source-address <address>",
  "cmd": "set vpn sstp authentication radius source-address <address>",
  "desc": "VPN — Source IPv4 address used in all RADIUS server queries."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius server <server> port <port>",
  "cmd": "set vpn sstp authentication radius server <server> port <port>",
  "desc": "VPN — Configure RADIUS <server> and its required port for authentication requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius server <server> fail-time <time>",
  "cmd": "set vpn sstp authentication radius server <server> fail-time <time>",
  "desc": "VPN — Mark RADIUS server as offline for this given <time> in seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius server <server> disable",
  "cmd": "set vpn sstp authentication radius server <server> disable",
  "desc": "VPN — Temporary disable this RADIUS server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius acct-timeout <timeout>",
  "cmd": "set vpn sstp authentication radius acct-timeout <timeout>",
  "desc": "VPN — Timeout to wait reply for Interim-Update packets. (default 3 seconds)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius dynamic-author server <address>",
  "cmd": "set vpn sstp authentication radius dynamic-author server <address>",
  "desc": "VPN — Specifies IP address for Dynamic Authorization Extension server (DM/CoA). This IP must exist on any VyOS interface or it can be 0.0.0.0."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius dynamic-author port <port>",
  "cmd": "set vpn sstp authentication radius dynamic-author port <port>",
  "desc": "VPN — UDP port for Dynamic Authorization Extension server (DM/CoA)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius dynamic-author key <secret>",
  "cmd": "set vpn sstp authentication radius dynamic-author key <secret>",
  "desc": "VPN — Secret for Dynamic Authorization Extension server (DM/CoA)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius max-try <number>",
  "cmd": "set vpn sstp authentication radius max-try <number>",
  "desc": "VPN — Maximum number of tries to send Access-Request/Accounting-Request queries"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius timeout <timeout>",
  "cmd": "set vpn sstp authentication radius timeout <timeout>",
  "desc": "VPN — Timeout to wait response from server (seconds)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius nas-identifier <identifier>",
  "cmd": "set vpn sstp authentication radius nas-identifier <identifier>",
  "desc": "VPN — Value to send to RADIUS server in NAS-Identifier attribute and to be matched in DM/CoA requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius nas-ip-address <address>",
  "cmd": "set vpn sstp authentication radius nas-ip-address <address>",
  "desc": "VPN — Value to send to RADIUS server in NAS-IP-Address attribute and to be matched in DM/CoA requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius rate-limit attribute <attribute>",
  "cmd": "set vpn sstp authentication radius rate-limit attribute <attribute>",
  "desc": "VPN — Specifies which RADIUS server attribute contains the rate limit information. The default attribute is Filter-Id."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius rate-limit enable",
  "cmd": "set vpn sstp authentication radius rate-limit enable",
  "desc": "VPN — Enables bandwidth shaping via RADIUS."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication radius rate-limit vendor",
  "cmd": "set vpn sstp authentication radius rate-limit vendor",
  "desc": "VPN — Specifies the vendor dictionary, This dictionary needs to be present in /usr/share/accel-ppp/radius."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp ppp-options ipv6 <require | prefer | allow | deny>",
  "cmd": "set vpn sstp ppp-options ipv6 <require | prefer | allow | deny>",
  "desc": "VPN — Specifies IPv6 negotiation preference. * **require** - Require IPv6 negotiation * **prefer** - Ask client for IPv6 negotiation, do not fail if it rejects * **allow** - Negotiate IPv6 only if client requests * **deny** -…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp client-ipv6-pool <IPv6-POOL-NAME> prefix <address> mask <number-of-bits>",
  "cmd": "set vpn sstp client-ipv6-pool <IPv6-POOL-NAME> prefix <address> mask <number-of-bits>",
  "desc": "VPN — Use this command to set the IPv6 address pool from which an SSTP client will get an IPv6 prefix of your defined length (mask) to terminate the SSTP endpoint at their side."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp client-ipv6-pool <IPv6-POOL-NAME> delegate <address> delegation-prefix <numb…",
  "cmd": "set vpn sstp client-ipv6-pool <IPv6-POOL-NAME> delegate <address> delegation-prefix <number-of-bits>",
  "desc": "VPN — Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on SSTP. You will have to set your IPv6 pool and the length of the delegation prefix."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp default-ipv6-pool <IPv6-POOL-NAME>",
  "cmd": "set vpn sstp default-ipv6-pool <IPv6-POOL-NAME>",
  "desc": "VPN — Use this command to define default IPv6 address pool name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp ppp-options ipv6-accept-peer-interface-id",
  "cmd": "set vpn sstp ppp-options ipv6-accept-peer-interface-id",
  "desc": "VPN — Accept peer interface identifier. By default this is not defined."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp ppp-options ipv6-interface-id <random | x:x:x:x>",
  "cmd": "set vpn sstp ppp-options ipv6-interface-id <random | x:x:x:x>",
  "desc": "VPN — Specifies if a fixed or random interface identifier is used for IPv6. The default is fixed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp extended-scripts on-change <path_to_script>",
  "cmd": "set vpn sstp extended-scripts on-change <path_to_script>",
  "desc": "VPN — Script to run when the session interface is changed by RADIUS CoA handling"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp extended-scripts on-down <path_to_script>",
  "cmd": "set vpn sstp extended-scripts on-down <path_to_script>",
  "desc": "VPN — Script to run when the session interface about to terminate"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp extended-scripts on-pre-up <path_to_script>",
  "cmd": "set vpn sstp extended-scripts on-pre-up <path_to_script>",
  "desc": "VPN — Script to run before the session interface comes up"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp extended-scripts on-up <path_to_script>",
  "cmd": "set vpn sstp extended-scripts on-up <path_to_script>",
  "desc": "VPN — Script to run when the session interface is completely configured and started"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication local-users username <user> disable",
  "cmd": "set vpn sstp authentication local-users username <user> disable",
  "desc": "VPN — Disable <user> account."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication local-users username <user> static-ip <address>",
  "cmd": "set vpn sstp authentication local-users username <user> static-ip <address>",
  "desc": "VPN — Assign a static IP address to <user> account."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication local-users username <user> rate-limit download <bandwidth>",
  "cmd": "set vpn sstp authentication local-users username <user> rate-limit download <bandwidth>",
  "desc": "VPN — Rate limit the download bandwidth for <user> to <bandwidth> kbit/s."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication local-users username <user> rate-limit upload <bandwidth>",
  "cmd": "set vpn sstp authentication local-users username <user> rate-limit upload <bandwidth>",
  "desc": "VPN — Rate limit the upload bandwidth for <user> to <bandwidth> kbit/s."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication protocols <pap | chap | mschap | mschap-v2>",
  "cmd": "set vpn sstp authentication protocols <pap | chap | mschap | mschap-v2>",
  "desc": "VPN — Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp client-ip-pool <POOL-NAME> next-pool <NEXT-POOL-NAME>",
  "cmd": "set vpn sstp client-ip-pool <POOL-NAME> next-pool <NEXT-POOL-NAME>",
  "desc": "VPN — Use this command to define the next address pool name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp ppp-options disable-ccp",
  "cmd": "set vpn sstp ppp-options disable-ccp",
  "desc": "VPN — Disable Compression Control Protocol (CCP). CCP is enabled by default."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp ppp-options interface-cache <number>",
  "cmd": "set vpn sstp ppp-options interface-cache <number>",
  "desc": "VPN — Specifies number of interfaces to cache. This prevents interfaces from being removed once the corresponding session is destroyed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp ppp-options ipv4 <require | prefer | allow | deny>",
  "cmd": "set vpn sstp ppp-options ipv4 <require | prefer | allow | deny>",
  "desc": "VPN — Specifies IPv4 negotiation preference. * **require** - Require IPv4 negotiation * **prefer** - Ask client for IPv4 negotiation, do not fail if it rejects * **allow** - Negotiate IPv4 only if client requests (Default val…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp ppp-options lcp-echo-failure <number>",
  "cmd": "set vpn sstp ppp-options lcp-echo-failure <number>",
  "desc": "VPN — Defines the maximum <number> of unanswered echo requests. Upon reaching the value <number>, the session will be reset."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp ppp-options lcp-echo-interval <interval>",
  "cmd": "set vpn sstp ppp-options lcp-echo-interval <interval>",
  "desc": "VPN — If this option is specified and is greater than 0, then the PPP module will send LCP echo requests every <interval> seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp ppp-options lcp-echo-timeout",
  "cmd": "set vpn sstp ppp-options lcp-echo-timeout",
  "desc": "VPN — Specifies timeout in seconds to wait for any peer activity. If this option is specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp ppp-options min-mtu <number>",
  "cmd": "set vpn sstp ppp-options min-mtu <number>",
  "desc": "VPN — Defines the minimum acceptable MTU. If a client tries to negotiate an MTU lower than this it will be NAKed, and disconnected if it rejects a greater MTU."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp ppp-options mppe <require | prefer | deny>",
  "cmd": "set vpn sstp ppp-options mppe <require | prefer | deny>",
  "desc": "VPN — Specifies MPPE (Microsoft Point-to-Point Encryption) negotiation preference. * **require** - ask client for mppe, if it rejects drop connection * **prefer** - ask client for mppe, if it rejects don't fail."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp ppp-options mru <number>",
  "cmd": "set vpn sstp ppp-options mru <number>",
  "desc": "VPN — Defines preferred MRU. By default is not defined."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp description <description>",
  "cmd": "set vpn sstp description <description>",
  "desc": "VPN — Set description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp limits burst <value>",
  "cmd": "set vpn sstp limits burst <value>",
  "desc": "VPN — Burst count"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp limits connection-limit <value>",
  "cmd": "set vpn sstp limits connection-limit <value>",
  "desc": "VPN — Maximum accepted connection rate (e.g. 1/min, 60/sec)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp limits timeout <value>",
  "cmd": "set vpn sstp limits timeout <value>",
  "desc": "VPN — Timeout in seconds"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp mtu",
  "cmd": "set vpn sstp mtu",
  "desc": "VPN — Maximum Transmission Unit (MTU) (default: **1500**)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp max-concurrent-sessions",
  "cmd": "set vpn sstp max-concurrent-sessions",
  "desc": "VPN — Maximum number of concurrent session start attempts"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp name-server <address>",
  "cmd": "set vpn sstp name-server <address>",
  "desc": "VPN — Connected clients should use <address> as their DNS server. This command accepts both IPv4 and IPv6 addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set vpn sstp shaper fwmark <1-2147483647>",
  "cmd": "set vpn sstp shaper fwmark <1-2147483647>",
  "desc": "QoS — Match firewall mark value"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp snmp master-agent",
  "cmd": "set vpn sstp snmp master-agent",
  "desc": "VPN — Enable SNMP"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp wins-server <address>",
  "cmd": "set vpn sstp wins-server <address>",
  "desc": "VPN — Windows Internet Name Service (WINS) servers propagated to client"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp host-name <hostname>",
  "cmd": "set vpn sstp host-name <hostname>",
  "desc": "VPN — If this option is given, only SSTP connections to the specified host and with the same TLS SNI will be allowed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show sstp-server sessions",
  "cmd": "show sstp-server sessions",
  "desc": "VPN — Use this command to locally check the active sessions in the SSTP server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set protocols nhrp tunnel <tunnel> authentication <secret>",
  "cmd": "set protocols nhrp tunnel <tunnel> authentication <secret>",
  "desc": "VPN — Enables Cisco style authentication on NHRP packets. This embeds the plaintext password to the outgoing NHRP packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set protocols nhrp tunnel <tunnel> holdtime <timeout>",
  "cmd": "set protocols nhrp tunnel <tunnel> holdtime <timeout>",
  "desc": "VPN — Holdtime is the number of seconds that have to pass before stopping to advertise an NHRP NBMA address as valid."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set protocols nhrp tunnel <tunnel> map tunnel-ip <tunnel-ip> nbma <nbma-ip>",
  "cmd": "set protocols nhrp tunnel <tunnel> map tunnel-ip <tunnel-ip> nbma <nbma-ip>",
  "desc": "VPN — * **tunnel-ip** - Tunnel ip address in format **x.x.x.x**. * **nbma-ip** - NBMA ip address in format **x.x.x.x** or **local** Map an IP address of a station to the station’s NBMA address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set protocols nhrp tunnel <tunnel> mtu <mtu>",
  "cmd": "set protocols nhrp tunnel <tunnel> mtu <mtu>",
  "desc": "VPN — Configure NHRP advertised MTU."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols nhrp tunnel <tunnel> multicast <nbma-ip>",
  "cmd": "set protocols nhrp tunnel <tunnel> multicast <nbma-ip>",
  "desc": "Multicast — * **nbma-ip** - NBMA ip address in format **x.x.x.x** or **dynamic** Sends multicast packets to the specified NBMA address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set protocols nhrp tunnel <tunnel> network-id <network-id>",
  "cmd": "set protocols nhrp tunnel <tunnel> network-id <network-id>",
  "desc": "VPN — * **network-id** - NHRP network id <1-4294967295> Enable NHRP on this interface and set the interface’s network ID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set protocols nhrp tunnel <tunnel> nhs tunnel-ip <tunnel-ip> nbma <nbma-ip>",
  "cmd": "set protocols nhrp tunnel <tunnel> nhs tunnel-ip <tunnel-ip> nbma <nbma-ip>",
  "desc": "VPN — * **tunnel-ip** - Tunnel ip address in format **x.x.x.x** or **dynamic** * **nbma-ip** - NBMA ip address in format **x.x.x.x** Configure the Next Hop Server address and its NBMA address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set protocols nhrp tunnel <tunnel> redirect",
  "cmd": "set protocols nhrp tunnel <tunnel> redirect",
  "desc": "VPN — This enable redirect replies on the NHS similar to ICMP redirects except this is managed by the nhrp protocol."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set protocols nhrp tunnel <tunnel> registration-no-unique",
  "cmd": "set protocols nhrp tunnel <tunnel> registration-no-unique",
  "desc": "VPN — Allow the client to not set the unique flag in the NHRP packets. This is useful when a station has a dynamic IP address that could change over time."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set protocols nhrp tunnel <tunnel> shortcut",
  "cmd": "set protocols nhrp tunnel <tunnel> shortcut",
  "desc": "VPN — Enable shortcut (spoke-to-spoke) tunnels to allow NHC to talk to each others directly after establishing a connection without going through the hub."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec profile <profile-name> authentication mode pre-shared-secret",
  "cmd": "set vpn ipsec profile <profile-name> authentication mode pre-shared-secret",
  "desc": "VPN — Set preshared secret mode authentication"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec profile <profile-name> authentication pre-shared-secret <secret>",
  "cmd": "set vpn ipsec profile <profile-name> authentication pre-shared-secret <secret>",
  "desc": "VPN — Set preshared secret"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec profile <profile-name> bind tunnel <tunnel name>",
  "cmd": "set vpn ipsec profile <profile-name> bind tunnel <tunnel name>",
  "desc": "VPN — Bind IPSEC profile to the specific tunnel interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec profile <profile-name> esp-group 'ESP-HUB'",
  "cmd": "set vpn ipsec profile <profile-name> esp-group 'ESP-HUB'",
  "desc": "VPN — Map ESP group to IPSEC profile"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec profile <profile-name> ike-group 'IKE-HUB'",
  "cmd": "set vpn ipsec profile <profile-name> ike-group 'IKE-HUB'",
  "desc": "VPN — Map IKE group to IPSEC profile"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show ip nhrp cache",
  "cmd": "show ip nhrp cache",
  "desc": "Troubleshooting — Forwarding cache information."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show ip nhrp nhs",
  "cmd": "show ip nhrp nhs",
  "desc": "Troubleshooting — Next hop server information."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show ip nhrp shortcut",
  "cmd": "show ip nhrp shortcut",
  "desc": "Troubleshooting — Shortcut information."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication mode <local | radius>",
  "cmd": "set vpn l2tp remote-access authentication mode <local | radius>",
  "desc": "VLAN — Set authentication backend. The configured authentication backend is used for all queries."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication local-users username <user> password <pass>",
  "cmd": "set vpn l2tp remote-access authentication local-users username <user> password <pass>",
  "desc": "VLAN — Create <user> for local authentication on this system. The users password will be set to <pass>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access client-ip-pool <POOL-NAME> range <x.x.x.x-x.x.x.x | x.x.x.x/x>",
  "cmd": "set vpn l2tp remote-access client-ip-pool <POOL-NAME> range <x.x.x.x-x.x.x.x | x.x.x.x/x>",
  "desc": "VLAN — Use this command to define the first IP address of a pool of addresses to be given to l2tp clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access default-pool <POOL-NAME>",
  "cmd": "set vpn l2tp remote-access default-pool <POOL-NAME>",
  "desc": "VLAN — Use this command to define default address pool name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access gateway-address <gateway>",
  "cmd": "set vpn l2tp remote-access gateway-address <gateway>",
  "desc": "VLAN — Specifies single <gateway> IP address to be used as local address of PPP interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec interface <INTERFACE>",
  "cmd": "set vpn ipsec interface <INTERFACE>",
  "desc": "VPN — Use this command to define IPsec interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access ipsec-settings authentication mode <pre-shared-secret | x509>",
  "cmd": "set vpn l2tp remote-access ipsec-settings authentication mode <pre-shared-secret | x509>",
  "desc": "VLAN — Set mode for IPsec authentication between VyOS and L2TP clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access ipsec-settings authentication pre-shared-secret <secret>",
  "cmd": "set vpn l2tp remote-access ipsec-settings authentication pre-shared-secret <secret>",
  "desc": "VLAN — Set predefined shared secret phrase."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius server <server> key <secret>",
  "cmd": "set vpn l2tp remote-access authentication radius server <server> key <secret>",
  "desc": "VLAN — Configure RADIUS <server> and its required shared <secret> for communicating with the RADIUS server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius source-address <address>",
  "cmd": "set vpn l2tp remote-access authentication radius source-address <address>",
  "desc": "VLAN — Source IPv4 address used in all RADIUS server queries."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius server <server> port <port>",
  "cmd": "set vpn l2tp remote-access authentication radius server <server> port <port>",
  "desc": "VLAN — Configure RADIUS <server> and its required port for authentication requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius server <server> fail-time <time>",
  "cmd": "set vpn l2tp remote-access authentication radius server <server> fail-time <time>",
  "desc": "VLAN — Mark RADIUS server as offline for this given <time> in seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius server <server> disable",
  "cmd": "set vpn l2tp remote-access authentication radius server <server> disable",
  "desc": "VLAN — Temporary disable this RADIUS server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius acct-timeout <timeout>",
  "cmd": "set vpn l2tp remote-access authentication radius acct-timeout <timeout>",
  "desc": "VLAN — Timeout to wait reply for Interim-Update packets. (default 3 seconds)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius dynamic-author server <address>",
  "cmd": "set vpn l2tp remote-access authentication radius dynamic-author server <address>",
  "desc": "VLAN — Specifies IP address for Dynamic Authorization Extension server (DM/CoA). This IP must exist on any VyOS interface or it can be 0.0.0.0."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius dynamic-author port <port>",
  "cmd": "set vpn l2tp remote-access authentication radius dynamic-author port <port>",
  "desc": "VLAN — UDP port for Dynamic Authorization Extension server (DM/CoA)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius dynamic-author key <secret>",
  "cmd": "set vpn l2tp remote-access authentication radius dynamic-author key <secret>",
  "desc": "VLAN — Secret for Dynamic Authorization Extension server (DM/CoA)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius max-try <number>",
  "cmd": "set vpn l2tp remote-access authentication radius max-try <number>",
  "desc": "VLAN — Maximum number of tries to send Access-Request/Accounting-Request queries"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius timeout <timeout>",
  "cmd": "set vpn l2tp remote-access authentication radius timeout <timeout>",
  "desc": "VLAN — Timeout to wait response from server (seconds)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius nas-identifier <identifier>",
  "cmd": "set vpn l2tp remote-access authentication radius nas-identifier <identifier>",
  "desc": "VLAN — Value to send to RADIUS server in NAS-Identifier attribute and to be matched in DM/CoA requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius nas-ip-address <address>",
  "cmd": "set vpn l2tp remote-access authentication radius nas-ip-address <address>",
  "desc": "VLAN — Value to send to RADIUS server in NAS-IP-Address attribute and to be matched in DM/CoA requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius rate-limit attribute <attribute>",
  "cmd": "set vpn l2tp remote-access authentication radius rate-limit attribute <attribute>",
  "desc": "VLAN — Specifies which RADIUS server attribute contains the rate limit information. The default attribute is Filter-Id."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius rate-limit enable",
  "cmd": "set vpn l2tp remote-access authentication radius rate-limit enable",
  "desc": "VLAN — Enables bandwidth shaping via RADIUS."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication radius rate-limit vendor",
  "cmd": "set vpn l2tp remote-access authentication radius rate-limit vendor",
  "desc": "VLAN — Specifies the vendor dictionary. This dictionary needs to be present in /usr/share/accel-ppp/radius."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access lns host-name <hostname>",
  "cmd": "set vpn l2tp remote-access lns host-name <hostname>",
  "desc": "VLAN — Sent to the client (LAC) in the Host-Name attribute"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access lns shared-secret <secret>",
  "cmd": "set vpn l2tp remote-access lns shared-secret <secret>",
  "desc": "VLAN — Tunnel password used to authenticate the client (LAC)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access ppp-options ipv6 <require | prefer | allow | deny>",
  "cmd": "set vpn l2tp remote-access ppp-options ipv6 <require | prefer | allow | deny>",
  "desc": "VLAN — Specifies IPv6 negotiation preference. * **require** - Require IPv6 negotiation * **prefer** - Ask client for IPv6 negotiation, do not fail if it rejects * **allow** - Negotiate IPv6 only if client requests * **deny** -…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access client-ipv6-pool <IPv6-POOL-NAME> prefix <address> mask <numbe…",
  "cmd": "set vpn l2tp remote-access client-ipv6-pool <IPv6-POOL-NAME> prefix <address> mask <number-of-bits>",
  "desc": "VLAN — Use this command to set the IPv6 address pool from which an l2tp client will get an IPv6 prefix of your defined length (mask) to terminate the l2tp endpoint at their side."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access client-ipv6-pool <IPv6-POOL-NAME> delegate <address> delegatio…",
  "cmd": "set vpn l2tp remote-access client-ipv6-pool <IPv6-POOL-NAME> delegate <address> delegation-prefix <number-of-bits>",
  "desc": "VLAN — Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on l2tp. You will have to set your IPv6 pool and the length of the delegation prefix."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access default-ipv6-pool <IPv6-POOL-NAME>",
  "cmd": "set vpn l2tp remote-access default-ipv6-pool <IPv6-POOL-NAME>",
  "desc": "VLAN — Use this command to define default IPv6 address pool name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access ppp-options ipv6-accept-peer-interface-id",
  "cmd": "set vpn l2tp remote-access ppp-options ipv6-accept-peer-interface-id",
  "desc": "VLAN — Accept peer interface identifier. By default this is not defined."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access ppp-options ipv6-interface-id <random | x:x:x:x>",
  "cmd": "set vpn l2tp remote-access ppp-options ipv6-interface-id <random | x:x:x:x>",
  "desc": "VLAN — Specifies if a fixed or random interface identifier is used for IPv6. The default is fixed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access extended-scripts on-change <path_to_script>",
  "cmd": "set vpn l2tp remote-access extended-scripts on-change <path_to_script>",
  "desc": "VLAN — Script to run when the session interface is changed by RADIUS CoA handling"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access extended-scripts on-down <path_to_script>",
  "cmd": "set vpn l2tp remote-access extended-scripts on-down <path_to_script>",
  "desc": "VLAN — Script to run when the session interface is about to terminate"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access extended-scripts on-pre-up <path_to_script>",
  "cmd": "set vpn l2tp remote-access extended-scripts on-pre-up <path_to_script>",
  "desc": "VLAN — Script to run before the session interface comes up"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access extended-scripts on-up <path_to_script>",
  "cmd": "set vpn l2tp remote-access extended-scripts on-up <path_to_script>",
  "desc": "VLAN — Script to run when the session interface is completely configured and started"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication local-users username <user> disable",
  "cmd": "set vpn l2tp remote-access authentication local-users username <user> disable",
  "desc": "VLAN — Disable <user> account."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication local-users username <user> static-ip <address>",
  "cmd": "set vpn l2tp remote-access authentication local-users username <user> static-ip <address>",
  "desc": "VLAN — Assign a static IP address to <user> account."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication local-users username <user> rate-limit download…",
  "cmd": "set vpn l2tp remote-access authentication local-users username <user> rate-limit download <bandwidth>",
  "desc": "VLAN — Rate limit the download bandwidth for <user> to <bandwidth> kbit/s."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication local-users username <user> rate-limit upload <…",
  "cmd": "set vpn l2tp remote-access authentication local-users username <user> rate-limit upload <bandwidth>",
  "desc": "VLAN — Rate limit the upload bandwidth for <user> to <bandwidth> kbit/s"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication protocols <pap | chap | mschap | mschap-v2>",
  "cmd": "set vpn l2tp remote-access authentication protocols <pap | chap | mschap | mschap-v2>",
  "desc": "VLAN — Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access client-ip-pool <POOL-NAME> next-pool <NEXT-POOL-NAME>",
  "cmd": "set vpn l2tp remote-access client-ip-pool <POOL-NAME> next-pool <NEXT-POOL-NAME>",
  "desc": "VLAN — Use this command to define the next address pool name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access ppp-options disable-ccp",
  "cmd": "set vpn l2tp remote-access ppp-options disable-ccp",
  "desc": "VLAN — Disable Compression Control Protocol (CCP). CCP is enabled by default."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access ppp-options interface-cache <number>",
  "cmd": "set vpn l2tp remote-access ppp-options interface-cache <number>",
  "desc": "VLAN — Specifies number of interfaces to cache. This prevents interfaces from being removed once the corresponding session is destroyed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access ppp-options ipv4 <require | prefer | allow | deny>",
  "cmd": "set vpn l2tp remote-access ppp-options ipv4 <require | prefer | allow | deny>",
  "desc": "VLAN — Specifies IPv4 negotiation preference. * **require** - Require IPv4 negotiation * **prefer** - Ask client for IPv4 negotiation, do not fail if it rejects * **allow** - Negotiate IPv4 only if client requests (Default val…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access ppp-options lcp-echo-failure <number>",
  "cmd": "set vpn l2tp remote-access ppp-options lcp-echo-failure <number>",
  "desc": "VLAN — Defines the maximum <number> of unanswered echo requests. Upon reaching the value <number>, the session will be reset."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access ppp-options lcp-echo-interval <interval>",
  "cmd": "set vpn l2tp remote-access ppp-options lcp-echo-interval <interval>",
  "desc": "VLAN — If this option is specified and is greater than 0, then the PPP module will send LCP echo requests every <interval> seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access ppp-options lcp-echo-timeout",
  "cmd": "set vpn l2tp remote-access ppp-options lcp-echo-timeout",
  "desc": "VLAN — Specifies timeout in seconds to wait for any peer activity. If this option is specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access ppp-options min-mtu <number>",
  "cmd": "set vpn l2tp remote-access ppp-options min-mtu <number>",
  "desc": "VLAN — Defines the minimum acceptable MTU. If a client tries to negotiate an MTU lower than this it will be NAKed, and disconnected if it rejects a greater MTU."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access ppp-options mppe <require | prefer | deny>",
  "cmd": "set vpn l2tp remote-access ppp-options mppe <require | prefer | deny>",
  "desc": "VLAN — Specifies MPPE (Microsoft Point-to-Point Encryption) negotiation preference. * **require** - ask client for mppe, if it rejects drop connection * **prefer** - ask client for mppe, if it rejects don't fail."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access ppp-options mru <number>",
  "cmd": "set vpn l2tp remote-access ppp-options mru <number>",
  "desc": "VLAN — Defines preferred MRU. By default is not defined."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access description <description>",
  "cmd": "set vpn l2tp remote-access description <description>",
  "desc": "VLAN — Set description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access limits burst <value>",
  "cmd": "set vpn l2tp remote-access limits burst <value>",
  "desc": "VLAN — Burst count"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access limits connection-limit <value>",
  "cmd": "set vpn l2tp remote-access limits connection-limit <value>",
  "desc": "VLAN — Maximum accepted connection rate (e.g. 1/min, 60/sec)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access limits timeout <value>",
  "cmd": "set vpn l2tp remote-access limits timeout <value>",
  "desc": "VLAN — Timeout in seconds"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access mtu",
  "cmd": "set vpn l2tp remote-access mtu",
  "desc": "VLAN — Maximum Transmission Unit (MTU) (default: **1436**)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access max-concurrent-sessions",
  "cmd": "set vpn l2tp remote-access max-concurrent-sessions",
  "desc": "VLAN — Maximum number of concurrent session start attempts"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access name-server <address>",
  "cmd": "set vpn l2tp remote-access name-server <address>",
  "desc": "VLAN — Connected clients should use <address> as their DNS server. This command accepts both IPv4 and IPv6 addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access shaper fwmark <1-2147483647>",
  "cmd": "set vpn l2tp remote-access shaper fwmark <1-2147483647>",
  "desc": "VLAN — Match firewall mark value"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access snmp master-agent",
  "cmd": "set vpn l2tp remote-access snmp master-agent",
  "desc": "VLAN — Enable SNMP"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access wins-server <address>",
  "cmd": "set vpn l2tp remote-access wins-server <address>",
  "desc": "VLAN — Windows Internet Name Service (WINS) servers propagated to client"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication mode <local | radius>",
  "cmd": "set vpn pptp remote-access authentication mode <local | radius>",
  "desc": "VLAN — Set authentication backend. The configured authentication backend is used for all queries."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication local-users username <user> password <pass>",
  "cmd": "set vpn pptp remote-access authentication local-users username <user> password <pass>",
  "desc": "VLAN — Create <user> for local authentication on this system. The users password will be set to <pass>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access client-ip-pool <POOL-NAME> range <x.x.x.x-x.x.x.x | x.x.x.x/x>",
  "cmd": "set vpn pptp remote-access client-ip-pool <POOL-NAME> range <x.x.x.x-x.x.x.x | x.x.x.x/x>",
  "desc": "VLAN — Use this command to define the first IP address of a pool of addresses to be given to PPTP clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access default-pool <POOL-NAME>",
  "cmd": "set vpn pptp remote-access default-pool <POOL-NAME>",
  "desc": "VLAN — Use this command to define default address pool name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access gateway-address <gateway>",
  "cmd": "set vpn pptp remote-access gateway-address <gateway>",
  "desc": "VLAN — Specifies single <gateway> IP address to be used as local address of PPP interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius server <server> key <secret>",
  "cmd": "set vpn pptp remote-access authentication radius server <server> key <secret>",
  "desc": "VLAN — Configure RADIUS <server> and its required shared <secret> for communicating with the RADIUS server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius source-address <address>",
  "cmd": "set vpn pptp remote-access authentication radius source-address <address>",
  "desc": "VLAN — Source IPv4 address used in all RADIUS server queries."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius server <server> port <port>",
  "cmd": "set vpn pptp remote-access authentication radius server <server> port <port>",
  "desc": "VLAN — Configure RADIUS <server> and its required port for authentication requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius server <server> fail-time <time>",
  "cmd": "set vpn pptp remote-access authentication radius server <server> fail-time <time>",
  "desc": "VLAN — Mark RADIUS server as offline for this given <time> in seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius server <server> disable",
  "cmd": "set vpn pptp remote-access authentication radius server <server> disable",
  "desc": "VLAN — Temporary disable this RADIUS server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius acct-timeout <timeout>",
  "cmd": "set vpn pptp remote-access authentication radius acct-timeout <timeout>",
  "desc": "VLAN — Timeout to wait reply for Interim-Update packets. (default 3 seconds)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius dynamic-author server <address>",
  "cmd": "set vpn pptp remote-access authentication radius dynamic-author server <address>",
  "desc": "VLAN — Specifies IP address for Dynamic Authorization Extension server (DM/CoA). This IP must exist on any VyOS interface or it can be 0.0.0.0."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius dynamic-author port <port>",
  "cmd": "set vpn pptp remote-access authentication radius dynamic-author port <port>",
  "desc": "VLAN — UDP port for Dynamic Authorization Extension server (DM/CoA)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius dynamic-author key <secret>",
  "cmd": "set vpn pptp remote-access authentication radius dynamic-author key <secret>",
  "desc": "VLAN — Secret for Dynamic Authorization Extension server (DM/CoA)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius max-try <number>",
  "cmd": "set vpn pptp remote-access authentication radius max-try <number>",
  "desc": "VLAN — Maximum number of tries to send Access-Request/Accounting-Request queries"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius timeout <timeout>",
  "cmd": "set vpn pptp remote-access authentication radius timeout <timeout>",
  "desc": "VLAN — Timeout to wait response from server (seconds)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius nas-identifier <identifier>",
  "cmd": "set vpn pptp remote-access authentication radius nas-identifier <identifier>",
  "desc": "VLAN — Value to send to RADIUS server in NAS-Identifier attribute and to be matched in DM/CoA requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius nas-ip-address <address>",
  "cmd": "set vpn pptp remote-access authentication radius nas-ip-address <address>",
  "desc": "VLAN — Value to send to RADIUS server in NAS-IP-Address attribute and to be matched in DM/CoA requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius rate-limit attribute <attribute>",
  "cmd": "set vpn pptp remote-access authentication radius rate-limit attribute <attribute>",
  "desc": "VLAN — Specifies which RADIUS server attribute contains the rate limit information. The default attribute is Filter-Id."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius rate-limit enable",
  "cmd": "set vpn pptp remote-access authentication radius rate-limit enable",
  "desc": "VLAN — Enables bandwidth shaping via RADIUS."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication radius rate-limit vendor",
  "cmd": "set vpn pptp remote-access authentication radius rate-limit vendor",
  "desc": "VLAN — Specifies the vendor dictionary, dictionary needs to be in /usr/share/accel-ppp/radius."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access ppp-options ipv6 <require | prefer | allow | deny>",
  "cmd": "set vpn pptp remote-access ppp-options ipv6 <require | prefer | allow | deny>",
  "desc": "VLAN — Specifies IPv6 negotiation preference. * **require** - Require IPv6 negotiation * **prefer** - Ask client for IPv6 negotiation, do not fail if it rejects * **allow** - Negotiate IPv6 only if client requests * **deny** -…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access client-ipv6-pool <IPv6-POOL-NAME> prefix <address> mask <numbe…",
  "cmd": "set vpn pptp remote-access client-ipv6-pool <IPv6-POOL-NAME> prefix <address> mask <number-of-bits>",
  "desc": "VLAN — Use this command to set the IPv6 address pool from which a PPTP client will get an IPv6 prefix of your defined length (mask) to terminate the PPTP endpoint at their side."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access client-ipv6-pool <IPv6-POOL-NAME> delegate <address> delegatio…",
  "cmd": "set vpn pptp remote-access client-ipv6-pool <IPv6-POOL-NAME> delegate <address> delegation-prefix <number-of-bits>",
  "desc": "VLAN — Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPTP. You will have to set your IPv6 pool and the length of the delegation prefix."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access default-ipv6-pool <IPv6-POOL-NAME>",
  "cmd": "set vpn pptp remote-access default-ipv6-pool <IPv6-POOL-NAME>",
  "desc": "VLAN — Use this command to define default IPv6 address pool name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access ppp-options ipv6-accept-peer-interface-id",
  "cmd": "set vpn pptp remote-access ppp-options ipv6-accept-peer-interface-id",
  "desc": "VLAN — Accept peer interface identifier. By default is not defined."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access ppp-options ipv6-interface-id <random | x:x:x:x>",
  "cmd": "set vpn pptp remote-access ppp-options ipv6-interface-id <random | x:x:x:x>",
  "desc": "VLAN — Specifies fixed or random interface identifier for IPv6. By default is fixed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access extended-scripts on-change <path_to_script>",
  "cmd": "set vpn pptp remote-access extended-scripts on-change <path_to_script>",
  "desc": "VLAN — Script to run when session interface changed by RADIUS CoA handling"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access extended-scripts on-down <path_to_script>",
  "cmd": "set vpn pptp remote-access extended-scripts on-down <path_to_script>",
  "desc": "VLAN — Script to run when session interface going to terminate"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access extended-scripts on-pre-up <path_to_script>",
  "cmd": "set vpn pptp remote-access extended-scripts on-pre-up <path_to_script>",
  "desc": "VLAN — Script to run before session interface comes up"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access extended-scripts on-up <path_to_script>",
  "cmd": "set vpn pptp remote-access extended-scripts on-up <path_to_script>",
  "desc": "VLAN — Script to run when session interface is completely configured and started"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication local-users username <user> disable",
  "cmd": "set vpn pptp remote-access authentication local-users username <user> disable",
  "desc": "VLAN — Disable <user> account."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication local-users username <user> static-ip <address>",
  "cmd": "set vpn pptp remote-access authentication local-users username <user> static-ip <address>",
  "desc": "VLAN — Assign static IP address to <user> account."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication local-users username <user> rate-limit download…",
  "cmd": "set vpn pptp remote-access authentication local-users username <user> rate-limit download <bandwidth>",
  "desc": "VLAN — Download bandwidth limit in kbit/s for <user>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication local-users username <user> rate-limit upload <…",
  "cmd": "set vpn pptp remote-access authentication local-users username <user> rate-limit upload <bandwidth>",
  "desc": "VLAN — Upload bandwidth limit in kbit/s for <user>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication protocols <pap | chap | mschap | mschap-v2>",
  "cmd": "set vpn pptp remote-access authentication protocols <pap | chap | mschap | mschap-v2>",
  "desc": "VLAN — Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access client-ip-pool <POOL-NAME> next-pool <NEXT-POOL-NAME>",
  "cmd": "set vpn pptp remote-access client-ip-pool <POOL-NAME> next-pool <NEXT-POOL-NAME>",
  "desc": "VLAN — Use this command to define the next address pool name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access ppp-options disable-ccp",
  "cmd": "set vpn pptp remote-access ppp-options disable-ccp",
  "desc": "VLAN — Disable Compression Control Protocol (CCP). CCP is enabled by default."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access ppp-options interface-cache <number>",
  "cmd": "set vpn pptp remote-access ppp-options interface-cache <number>",
  "desc": "VLAN — Specifies number of interfaces to keep in cache. It means that don’t destroy interface after corresponding session is destroyed, instead place it to cache and use it later for new sessions repeatedly."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access ppp-options ipv4 <require | prefer | allow | deny>",
  "cmd": "set vpn pptp remote-access ppp-options ipv4 <require | prefer | allow | deny>",
  "desc": "VLAN — Specifies IPv4 negotiation preference. * **require** - Require IPv4 negotiation * **prefer** - Ask client for IPv4 negotiation, do not fail if it rejects * **allow** - Negotiate IPv4 only if client requests (Default val…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access ppp-options lcp-echo-failure <number>",
  "cmd": "set vpn pptp remote-access ppp-options lcp-echo-failure <number>",
  "desc": "VLAN — Defines the maximum <number> of unanswered echo requests. Upon reaching the value <number>, the session will be reset."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access ppp-options lcp-echo-interval <interval>",
  "cmd": "set vpn pptp remote-access ppp-options lcp-echo-interval <interval>",
  "desc": "VLAN — If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every <interval> seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access ppp-options lcp-echo-timeout",
  "cmd": "set vpn pptp remote-access ppp-options lcp-echo-timeout",
  "desc": "VLAN — Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access ppp-options min-mtu <number>",
  "cmd": "set vpn pptp remote-access ppp-options min-mtu <number>",
  "desc": "VLAN — Defines minimum acceptable MTU. If client will try to negotiate less then specified MTU then it will be NAKed or disconnected if rejects greater MTU."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access ppp-options mppe <require | prefer | deny>",
  "cmd": "set vpn pptp remote-access ppp-options mppe <require | prefer | deny>",
  "desc": "VLAN — Specifies MPPE (Microsoft Point-to-Point Encryption) negotiation preference. * **require** - ask client for mppe, if it rejects drop connection * **prefer** - ask client for mppe, if it rejects don't fail."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access ppp-options mru <number>",
  "cmd": "set vpn pptp remote-access ppp-options mru <number>",
  "desc": "VLAN — Defines preferred MRU. By default is not defined."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access description <description>",
  "cmd": "set vpn pptp remote-access description <description>",
  "desc": "VLAN — Set description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access limits burst <value>",
  "cmd": "set vpn pptp remote-access limits burst <value>",
  "desc": "VLAN — Burst count"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access limits connection-limit <value>",
  "cmd": "set vpn pptp remote-access limits connection-limit <value>",
  "desc": "VLAN — Acceptable rate of connections (e.g. 1/min, 60/sec)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access limits timeout <value>",
  "cmd": "set vpn pptp remote-access limits timeout <value>",
  "desc": "VLAN — Timeout in seconds"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access mtu",
  "cmd": "set vpn pptp remote-access mtu",
  "desc": "VLAN — Maximum Transmission Unit (MTU) (default: **1436**)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access max-concurrent-sessions",
  "cmd": "set vpn pptp remote-access max-concurrent-sessions",
  "desc": "VLAN — Maximum number of concurrent session start attempts"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access name-server <address>",
  "cmd": "set vpn pptp remote-access name-server <address>",
  "desc": "VLAN — Connected client should use <address> as their DNS server. This command accepts both IPv4 and IPv6 addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access shaper fwmark <1-2147483647>",
  "cmd": "set vpn pptp remote-access shaper fwmark <1-2147483647>",
  "desc": "VLAN — Match firewall mark value"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access snmp master-agent",
  "cmd": "set vpn pptp remote-access snmp master-agent",
  "desc": "VLAN — Enable SNMP"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access wins-server <address>",
  "cmd": "set vpn pptp remote-access wins-server <address>",
  "desc": "VLAN — Windows Internet Name Service (WINS) servers propagated to client"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show pptp-server sessions",
  "cmd": "show pptp-server sessions",
  "desc": "VPN — Use this command to locally check the active sessions in the PPTP server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec authentication psk <name> dhcp-interface",
  "cmd": "set vpn ipsec authentication psk <name> dhcp-interface",
  "desc": "VPN — ID for authentication generated from DHCP address dynamically."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec authentication psk id <id>",
  "cmd": "set vpn ipsec authentication psk id <id>",
  "desc": "VPN — static ID's for authentication. In general local and remote address <x.x.x.x>, <h:h:h:h:h:h:h:h> or %any."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec authentication psk secret <secret>",
  "cmd": "set vpn ipsec authentication psk secret <secret>",
  "desc": "VPN — A predefined shared secret used in configured mode pre-shared-secret. Base64-encoded secrets are allowed if secret-type base64 is configured."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec authentication psk secret-type <type>",
  "cmd": "set vpn ipsec authentication psk secret-type <type>",
  "desc": "VPN — Specifies the secret type: * **plaintext** - Plain text type (default value). * **base64** - Base64 type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> authentication mode <mode>",
  "cmd": "set vpn ipsec site-to-site peer <name> authentication mode <mode>",
  "desc": "VPN — Mode for authentication between VyOS and remote peer: * **pre-shared-secret** - Use predefined shared secret phrase."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> authentication local-id <id>",
  "cmd": "set vpn ipsec site-to-site peer <name> authentication local-id <id>",
  "desc": "VPN — ID for the local VyOS router. If defined, during the authentication it will be send to remote peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> authentication remote-id <id>",
  "cmd": "set vpn ipsec site-to-site peer <name> authentication remote-id <id>",
  "desc": "VPN — ID for remote peer, instead of using peer name or address. Useful in case if the remote peer is behind NAT or if mode x509 is used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> authentication rsa local-key <key>",
  "cmd": "set vpn ipsec site-to-site peer <name> authentication rsa local-key <key>",
  "desc": "VPN — Name of PKI key-pair with local private key."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> authentication rsa remote-key <key>",
  "cmd": "set vpn ipsec site-to-site peer <name> authentication rsa remote-key <key>",
  "desc": "VPN — Name of PKI key-pair with remote public key."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> authentication rsa passphrase <passphrase>",
  "cmd": "set vpn ipsec site-to-site peer <name> authentication rsa passphrase <passphrase>",
  "desc": "VPN — Local private key passphrase."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> authentication use-x509-id <id>",
  "cmd": "set vpn ipsec site-to-site peer <name> authentication use-x509-id <id>",
  "desc": "VPN — Use local ID from x509 certificate. Cannot be used when id is defined."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> authentication x509 ca-certificate <name>",
  "cmd": "set vpn ipsec site-to-site peer <name> authentication x509 ca-certificate <name>",
  "desc": "VPN — Name of CA certificate in PKI configuration. Using for authenticating remote peer in x509 mode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> authentication x509 certificate <name>",
  "cmd": "set vpn ipsec site-to-site peer <name> authentication x509 certificate <name>",
  "desc": "VPN — Name of certificate in PKI configuration, which will be used for authenticating local router on remote peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec authentication x509 passphrase <passphrase>",
  "cmd": "set vpn ipsec authentication x509 passphrase <passphrase>",
  "desc": "VPN — Private key passphrase, if needed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> connection-type <type>",
  "cmd": "set vpn ipsec site-to-site peer <name> connection-type <type>",
  "desc": "VPN — Operational mode defines how to handle this connection process. * **initiate** - does initial connection to remote peer immediately after configuring and after boot."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> default-esp-group <name>",
  "cmd": "set vpn ipsec site-to-site peer <name> default-esp-group <name>",
  "desc": "VPN — Name of ESP group to use by default for traffic encryption. Might be overwritten by individual settings for tunnel or VTI interface binding."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> description <description>",
  "cmd": "set vpn ipsec site-to-site peer <name> description <description>",
  "desc": "VPN — Description for this peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> dhcp-interface <interface>",
  "cmd": "set vpn ipsec site-to-site peer <name> dhcp-interface <interface>",
  "desc": "VPN — Specify the interface which IP address, received from DHCP for IPSec connection with this peer, will be used as local-address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> force-udp-encapsulation",
  "cmd": "set vpn ipsec site-to-site peer <name> force-udp-encapsulation",
  "desc": "VPN — Force encapsulation of ESP into UDP datagrams. Useful in case if between local and remote side is firewall or NAT, which not allows passing plain ESP packets between them."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> ike-group <name>",
  "cmd": "set vpn ipsec site-to-site peer <name> ike-group <name>",
  "desc": "VPN — Name of IKE group to use for key exchanges."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> local-address <address>",
  "cmd": "set vpn ipsec site-to-site peer <name> local-address <address>",
  "desc": "VPN — Local IP address for IPsec connection with this peer. If defined any, then an IP address which configured on interface with default route will be used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> remote-address <address>",
  "cmd": "set vpn ipsec site-to-site peer <name> remote-address <address>",
  "desc": "VPN — Remote IP address or hostname for IPsec connection. IPv4 or IPv6 address is used when a peer has a public static IP address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> replay-window <size>",
  "cmd": "set vpn ipsec site-to-site peer <name> replay-window <size>",
  "desc": "VPN — IPsec replay window to configure for CHILD_SAs (default: 32), a value of 0 disables IPsec replay protection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> virtual-address <address>",
  "cmd": "set vpn ipsec site-to-site peer <name> virtual-address <address>",
  "desc": "VPN — Defines a virtual IP address which is requested by the initiator and one or several IPv4 and/or IPv6 addresses are assigned from multiple pools by the responder."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> tunnel <number> disable",
  "cmd": "set vpn ipsec site-to-site peer <name> tunnel <number> disable",
  "desc": "VPN — Disable this tunnel."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> tunnel <number> esp-group <name>",
  "cmd": "set vpn ipsec site-to-site peer <name> tunnel <number> esp-group <name>",
  "desc": "VPN — Specify ESP group for this CHILD SA."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> tunnel <number> priority <number>",
  "cmd": "set vpn ipsec site-to-site peer <name> tunnel <number> priority <number>",
  "desc": "VPN — Priority for policy-based IPsec VPN tunnels (lowest value more preferable)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> tunnel <number> protocol <name>",
  "cmd": "set vpn ipsec site-to-site peer <name> tunnel <number> protocol <name>",
  "desc": "VPN — Define the protocol for match traffic, which should be encrypted and send to this peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> tunnel <number> local prefix <network>",
  "cmd": "set vpn ipsec site-to-site peer <name> tunnel <number> local prefix <network>",
  "desc": "VPN — IP network at the local side."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> tunnel <number> local port <number>",
  "cmd": "set vpn ipsec site-to-site peer <name> tunnel <number> local port <number>",
  "desc": "VPN — Local port number. Have effect only when used together with prefix."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> tunnel <number> remote prefix <network>",
  "cmd": "set vpn ipsec site-to-site peer <name> tunnel <number> remote prefix <network>",
  "desc": "VPN — IP network at the remote side."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> tunnel <number> remote port <number>",
  "cmd": "set vpn ipsec site-to-site peer <name> tunnel <number> remote port <number>",
  "desc": "VPN — Remote port number. Have effect only when used together with prefix."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> vti bind <interface>",
  "cmd": "set vpn ipsec site-to-site peer <name> vti bind <interface>",
  "desc": "VPN — VTI interface to bind to this peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> vti esp-group <name>",
  "cmd": "set vpn ipsec site-to-site peer <name> vti esp-group <name>",
  "desc": "VPN — ESP group for encrypt traffic, passed this VTI interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> vti traffic-selector local prefix <network>",
  "cmd": "set vpn ipsec site-to-site peer <name> vti traffic-selector local prefix <network>",
  "desc": "VPN — Local prefix for interesting traffic."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <name> vti traffic-selector remote prefix <network>",
  "cmd": "set vpn ipsec site-to-site peer <name> vti traffic-selector remote prefix <network>",
  "desc": "VPN — Remote prefix for interesting traffic."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show vpn ike sa",
  "cmd": "show vpn ike sa",
  "desc": "VPN — Shows active IKE SAs information."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show vpn ike secrets",
  "cmd": "show vpn ike secrets",
  "desc": "VPN — Shows configured authentication keys."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show vpn ike status",
  "cmd": "show vpn ike status",
  "desc": "VPN — Shows Strongswan daemon status."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show vpn ipsec connections",
  "cmd": "show vpn ipsec connections",
  "desc": "VPN — Shows summary status of all configured IKE and IPsec SAs."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show vpn ipsec sa [detail]",
  "cmd": "show vpn ipsec sa [detail]",
  "desc": "VPN — Shows active IPsec SAs information."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show vpn ipsec status",
  "cmd": "show vpn ipsec status",
  "desc": "VPN — Shows status of IPsec process."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show vpn ipsec policy",
  "cmd": "show vpn ipsec policy",
  "desc": "VPN — Shows the in-kernel crypto policies."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show vpn ipsec state",
  "cmd": "show vpn ipsec state",
  "desc": "VPN — Shows the in-kernel crypto state."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show log ipsec",
  "cmd": "show log ipsec",
  "desc": "VPN — Shows IPsec logs."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "reset vpn ipsec site-to-site all",
  "cmd": "reset vpn ipsec site-to-site all",
  "desc": "VPN — Clear all ipsec connection and reinitiate them if VyOS is configured as initiator."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "reset vpn ipsec site-to-site peer <name>",
  "cmd": "reset vpn ipsec site-to-site peer <name>",
  "desc": "VPN — Clear all peer IKE SAs with IPsec SAs and reinitiate them if VyOS is configured as initiator."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "reset vpn ipsec site-to-site peer <name> tunnel <number>",
  "cmd": "reset vpn ipsec site-to-site peer <name> tunnel <number>",
  "desc": "VPN — Clear scpecific IPsec SA and reinitiate it if VyOS is configured as initiator."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "reset vpn ipsec site-to-site peer <name> vti <number>",
  "cmd": "reset vpn ipsec site-to-site peer <name> vti <number>",
  "desc": "VPN — Clear IPsec SA which is map to vti interface of this peer and reinitiate it if VyOS is configured as initiator."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "restart ipsec",
  "cmd": "restart ipsec",
  "desc": "VPN — Restart Strongswan daemon."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec ike-group <name> close-action <action>",
  "cmd": "set vpn ipsec ike-group <name> close-action <action>",
  "desc": "VPN — Defines the action to take if the remote peer unexpectedly closes a CHILD_SA: * **none** - Set action to none (default), * **trap** - Installs a trap policy (IPsec policy without Security Association) for the CHILD_SA a…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec ike-group <name> ikev2-reauth",
  "cmd": "set vpn ipsec ike-group <name> ikev2-reauth",
  "desc": "VPN — Whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec ike-group <name> key-exchange",
  "cmd": "set vpn ipsec ike-group <name> key-exchange",
  "desc": "VPN — Which protocol should be used to initialize the connection If not set both protocols are handled and connections will use IKEv2 when initiating, but accept any protocol version when responding: * **ikev1** - Use IKEv1 f…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec ike-group <name> lifetime",
  "cmd": "set vpn ipsec ike-group <name> lifetime",
  "desc": "VPN — IKE lifetime in seconds <0-86400> (default 28800)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec ike-group <name> mode",
  "cmd": "set vpn ipsec ike-group <name> mode",
  "desc": "VPN — IKEv1 Phase 1 Mode Selection: * **main** - Use Main mode for Key Exchanges in the IKEv1 Protocol (Recommended Default)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec ike-group <name> proposal <number> dh-group <dh-group number>",
  "cmd": "set vpn ipsec ike-group <name> proposal <number> dh-group <dh-group number>",
  "desc": "VPN — Dh-group. Default value is **2**."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec ike-group <name> proposal <number> encryption <encryption>",
  "cmd": "set vpn ipsec ike-group <name> proposal <number> encryption <encryption>",
  "desc": "VPN — Encryption algorithm. Default value is **aes128**."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec ike-group <name> proposal <number> hash <hash>",
  "cmd": "set vpn ipsec ike-group <name> proposal <number> hash <hash>",
  "desc": "VPN — Hash algorithm. Default value is **sha1**."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec ike-group <name> proposal <number> prf <prf>",
  "cmd": "set vpn ipsec ike-group <name> proposal <number> prf <prf>",
  "desc": "VPN — Pseudo-random function."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec ike-group <name> dead-peer-detection action <action>",
  "cmd": "set vpn ipsec ike-group <name> dead-peer-detection action <action>",
  "desc": "VPN — Action to perform for this CHILD_SA on DPD timeout. * **trap** - Installs a trap policy (IPsec policy without Security Association), which will catch matching traffic and tries to re-negotiate the tunnel on-demand."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec ike-group <name> dead-peer-detection interval <interval>",
  "cmd": "set vpn ipsec ike-group <name> dead-peer-detection interval <interval>",
  "desc": "VPN — Keep-alive interval in seconds <2-86400> (default 30)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec ike-group <name> dead-peer-detection timeout <timeout>",
  "cmd": "set vpn ipsec ike-group <name> dead-peer-detection timeout <timeout>",
  "desc": "VPN — Keep-alive timeout in seconds <2-86400> (default 120) **IKEv1 only**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec esp-group <name> compression",
  "cmd": "set vpn ipsec esp-group <name> compression",
  "desc": "VPN — Enables the IPComp(IP Payload Compression) protocol which allows compressing the content of IP packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec esp-group <name> disable-rekey",
  "cmd": "set vpn ipsec esp-group <name> disable-rekey",
  "desc": "VPN — Do not locally initiate a re-key of the SA, remote peer must re-key before expiration."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec esp-group <name> life-bytes <bytes>",
  "cmd": "set vpn ipsec esp-group <name> life-bytes <bytes>",
  "desc": "VPN — ESP life in bytes <1024-26843545600000>. Number of bytes transmitted over an IPsec SA before it expires."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec esp-group <name> life-packets <packets>",
  "cmd": "set vpn ipsec esp-group <name> life-packets <packets>",
  "desc": "VPN — ESP life in packets <1000-26843545600000>. Number of packets transmitted over an IPsec SA before it expires."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec esp-group <name> lifetime <timeout>",
  "cmd": "set vpn ipsec esp-group <name> lifetime <timeout>",
  "desc": "VPN — ESP lifetime in seconds <30-86400> (default 3600). How long a particular instance of a connection (a set of encryption/authentication keys for user packets) should last, from successful negotiation to expiry."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec esp-group <name> mode <mode>",
  "cmd": "set vpn ipsec esp-group <name> mode <mode>",
  "desc": "VPN — The type of the connection: * **tunnel** - Tunnel mode (default). * **transport** - Transport mode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec esp-group <name> pfs < dh-group>",
  "cmd": "set vpn ipsec esp-group <name> pfs < dh-group>",
  "desc": "VPN — Whether Perfect Forward Secrecy of keys is desired on the connection's keying channel and defines a Diffie-Hellman group for PFS: * **enable** - Inherit Diffie-Hellman group from IKE group (default)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec esp-group <name> proposal <number> encryption <encryption>",
  "cmd": "set vpn ipsec esp-group <name> proposal <number> encryption <encryption>",
  "desc": "VPN — Encryption algorithm. Default value is **aes128**."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec esp-group <name> proposal <number> hash <hash>",
  "cmd": "set vpn ipsec esp-group <name> proposal <number> hash <hash>",
  "desc": "VPN — Hash algorithm. Default value is **sha1**."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec interface <name>",
  "cmd": "set vpn ipsec interface <name>",
  "desc": "VPN — Interface name to restrict outbound IPsec policies. There is a possibility to specify multiple interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec log level <number>",
  "cmd": "set vpn ipsec log level <number>",
  "desc": "VPN — Level of logging. Default value is **0**."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec log subsystem <name>",
  "cmd": "set vpn ipsec log subsystem <name>",
  "desc": "VPN — Subsystem of the daemon."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec options disable-route-autoinstall",
  "cmd": "set vpn ipsec options disable-route-autoinstall",
  "desc": "VPN — Do not automatically install routes to remote networks."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec options flexvpn",
  "cmd": "set vpn ipsec options flexvpn",
  "desc": "VPN — Allows FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec options interface <name>",
  "cmd": "set vpn ipsec options interface <name>",
  "desc": "VPN — Interface Name to use. The name of the interface on which virtual IP addresses should be installed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec options virtual-ip",
  "cmd": "set vpn ipsec options virtual-ip",
  "desc": "VPN — Allows the installation of virtual-ip addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec options retransmission attempts",
  "cmd": "set vpn ipsec options retransmission attempts",
  "desc": "VPN — Number of attempts before the peer is considered to be in the down state. Default value is **5**."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec options retransmission base",
  "cmd": "set vpn ipsec options retransmission base",
  "desc": "VPN — Base number of exponential backoff. Default value is **1.8**."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec options retransmission timeout",
  "cmd": "set vpn ipsec options retransmission timeout",
  "desc": "VPN — Timeout in seconds before the first retransmission. Default value is **4**."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set nat [source | destination] rule <rule> load-balance hash [source-address | destinatio…",
  "cmd": "set nat [source | destination] rule <rule> load-balance hash [source-address | destination-address | source-port | destination-port | random]",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set nat [source | destination] rule <rule> load-balance backend <x.x.x.x> weight <1-100>",
  "cmd": "set nat [source | destination] rule <rule> load-balance backend <x.x.x.x> weight <1-100>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set nat cgnat pool external <pool-name> external-port-range <port-range>",
  "cmd": "set nat cgnat pool external <pool-name> external-port-range <port-range>",
  "desc": "NAT — Set an external port-range for the external pool, the default range is 1024-65535."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set nat cgnat pool external <pool-name> per-user-limit port <num>",
  "cmd": "set nat cgnat pool external <pool-name> per-user-limit port <num>",
  "desc": "NAT — Set external source port limits that will be allocated to each subscriber individually."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set nat cgnat pool external <pool-name> range [address | address range | network] [seq]",
  "cmd": "set nat cgnat pool external <pool-name> range [address | address range | network] [seq]",
  "desc": "NAT — Set the range of external IP addresses for the CGNAT pool. The sequence is optional; if set, a lower value means higher priority."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set nat cgnat pool internal <pool-name> range [address range | network]",
  "cmd": "set nat cgnat pool internal <pool-name> range [address range | network]",
  "desc": "NAT — Set the range of internal IP addresses for the CGNAT pool."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set nat cgnat rule <num> source pool <internal-pool-name>",
  "cmd": "set nat cgnat rule <num> source pool <internal-pool-name>",
  "desc": "NAT — Set the rule for the source pool."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set nat cgnat rule <num> translation pool <external-pool-name>",
  "cmd": "set nat cgnat rule <num> translation pool <external-pool-name>",
  "desc": "NAT — Set the rule for the translation pool."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set nat cgnat log-allocation",
  "cmd": "set nat cgnat log-allocation",
  "desc": "NAT — Enable logging of IP address and ports allocations."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "show nat cgnat allocation",
  "cmd": "show nat cgnat allocation",
  "desc": "NAT — Show address and port allocations"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "show nat cgnat allocation external-address <address>",
  "cmd": "show nat cgnat allocation external-address <address>",
  "desc": "NAT — Show all allocations for an external IP address"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "show nat cgnat allocation internal-address <address>",
  "cmd": "show nat cgnat allocation internal-address <address>",
  "desc": "NAT — Show all allocations for an internal IP address"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> listen-address <address>",
  "cmd": "set load-balancing haproxy service <name> listen-address <address>",
  "desc": "System — Set the IP address for the service to bind to. By default, the service listens on all IPv4 and IPv6 addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set load-balancing haproxy service <name> port <port>",
  "cmd": "set load-balancing haproxy service <name> port <port>",
  "desc": "Interfaces — Create service *<name>* to listen on \\<port\\>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> mode <tcp|http>",
  "cmd": "set load-balancing haproxy service <name> mode <tcp|http>",
  "desc": "System — Configure service *<name>* mode TCP or HTTP"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> backend <name>",
  "cmd": "set load-balancing haproxy service <name> backend <name>",
  "desc": "System — Configure service *<name>* to use the backend \\<name\\>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> ssl certificate <name>",
  "cmd": "set load-balancing haproxy service <name> ssl certificate <name>",
  "desc": "System — Set the SSL certificate \\<name\\> for service \\<name\\>. You can define multiple certificates."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> http-response-headers <header-name> value <head…",
  "cmd": "set load-balancing haproxy service <name> http-response-headers <header-name> value <header-value>",
  "desc": "System — Set custom HTTP headers to include in all responses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set load-balancing haproxy service <name> logging facility <facility> level <level>",
  "cmd": "set load-balancing haproxy service <name> logging facility <facility> level <level>",
  "desc": "Logging — Specify facility and level for logging. For an explanation on syslog_facilities and syslog_severity_level, see tables in the syslog configuration section."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> timeout client <seconds>",
  "cmd": "set load-balancing haproxy service <name> timeout client <seconds>",
  "desc": "System — Set the maximum inactivity time on the client side for this service. Value range 1-3600 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> http-compression algorithm <gzip | deflate | id…",
  "cmd": "set load-balancing haproxy service <name> http-compression algorithm <gzip | deflate | identity | raw-deflate>",
  "desc": "System — Set the compression algorithm to be used when compressing HTTP responses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> http-compression mime-type <mime-type>",
  "cmd": "set load-balancing haproxy service <name> http-compression mime-type <mime-type>",
  "desc": "System — Set the list of HTTP response MIME types which haproxy will attempt to compress, if received uncompressed from backend server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> rule <rule> domain-name <name>",
  "cmd": "set load-balancing haproxy service <name> rule <rule> domain-name <name>",
  "desc": "System — Match domain name"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> rule <rule> ssl <sni>",
  "cmd": "set load-balancing haproxy service <name> rule <rule> ssl <sni>",
  "desc": "System · services"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> rule <rule> url-path <match> <url>",
  "cmd": "set load-balancing haproxy service <name> rule <rule> url-path <match> <url>",
  "desc": "System — Define URL path matching rules for a specific service. Use this command to specify how to match the URL path against incoming requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> rule <rule> set backend <name>",
  "cmd": "set load-balancing haproxy service <name> rule <rule> set backend <name>",
  "desc": "System — Assign a specific backend to a rule"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> rule <rule> redirect-location <url>",
  "cmd": "set load-balancing haproxy service <name> rule <rule> redirect-location <url>",
  "desc": "System — Redirect URL to a new location."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> balance <balance>",
  "cmd": "set load-balancing haproxy backend <name> balance <balance>",
  "desc": "System — Specify the load balancing algorithm for distributing requests among available servers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> mode <mode>",
  "cmd": "set load-balancing haproxy backend <name> mode <mode>",
  "desc": "System — Configure backend *<name>* mode TCP or HTTP."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> server <name> address <x.x.x.x>",
  "cmd": "set load-balancing haproxy backend <name> server <name> address <x.x.x.x>",
  "desc": "System — Set the address of the backend server that receives incoming traffic."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set load-balancing haproxy backend <name> server <name> port <port>",
  "cmd": "set load-balancing haproxy backend <name> server <name> port <port>",
  "desc": "Interfaces — Set the address of the backend port."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> server <name> check",
  "cmd": "set load-balancing haproxy backend <name> server <name> check",
  "desc": "System — Active health check backend server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set load-balancing haproxy backend <name> server <name> check port <port>",
  "cmd": "set load-balancing haproxy backend <name> server <name> check port <port>",
  "desc": "Interfaces — Set an alternative port number for health checks. Overrides the default server port used for TCP/HTTP checks."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> server <name> send-proxy",
  "cmd": "set load-balancing haproxy backend <name> server <name> send-proxy",
  "desc": "System — Send a Proxy Protocol version 1 header (text format)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> server <name> send-proxy-v2",
  "cmd": "set load-balancing haproxy backend <name> server <name> send-proxy-v2",
  "desc": "System — Send a Proxy Protocol version 2 header (binary format)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> ssl ca-certificate <ca-certificate>",
  "cmd": "set load-balancing haproxy backend <name> ssl ca-certificate <ca-certificate>",
  "desc": "System — Use SSL encryption for backend requests and authenticate the backend against <ca-certificate>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> ssl no-verify",
  "cmd": "set load-balancing haproxy backend <name> ssl no-verify",
  "desc": "System — Use SSL encryption for backend requests without validating the server certificate."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> http-response-headers <header-name> value <head…",
  "cmd": "set load-balancing haproxy backend <name> http-response-headers <header-name> value <header-value>",
  "desc": "System — Set custom HTTP headers to include in all responses from the backend."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set load-balancing haproxy backend <name> logging facility <facility> level <level>",
  "cmd": "set load-balancing haproxy backend <name> logging facility <facility> level <level>",
  "desc": "Logging — Specify facility and level for logging. For an explanation on syslog_facilities and syslog_severity_level, see tables in the syslog configuration section."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> timeout check <seconds>",
  "cmd": "set load-balancing haproxy backend <name> timeout check <seconds>",
  "desc": "System — Set the timeout in seconds for established connections. Value range 1-3600 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> timeout connect <seconds>",
  "cmd": "set load-balancing haproxy backend <name> timeout connect <seconds>",
  "desc": "System — Set the maximum time to wait for a connection attempt to a server to succeed. Value range 1-3600 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> timeout server <seconds>",
  "cmd": "set load-balancing haproxy backend <name> timeout server <seconds>",
  "desc": "System — Set the maximum inactivity time on the server side. Value range 1-3600 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy global-parameters max-connections <num>",
  "cmd": "set load-balancing haproxy global-parameters max-connections <num>",
  "desc": "System — Limit maximum number of connections"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy global-parameters ssl-bind-ciphers <ciphers>",
  "cmd": "set load-balancing haproxy global-parameters ssl-bind-ciphers <ciphers>",
  "desc": "System — Limit the cipher algorithms allowed during SSL/TLS handshake."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy global-parameters tls-version-min <version>",
  "cmd": "set load-balancing haproxy global-parameters tls-version-min <version>",
  "desc": "System — Specify the minimum required TLS version 1.2 or 1.3"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set load-balancing haproxy global-parameters logging facility <facility> level <level>",
  "cmd": "set load-balancing haproxy global-parameters logging facility <facility> level <level>",
  "desc": "Logging — Specify facility and level for logging. For an explanation on syslog_facilities and syslog_severity_level, see tables in the syslog configuration section."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy timeout check <seconds>",
  "cmd": "set load-balancing haproxy timeout check <seconds>",
  "desc": "System — Set the timeout in seconds for established connections. Value range 1-3600 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy timeout client <seconds>",
  "cmd": "set load-balancing haproxy timeout client <seconds>",
  "desc": "System — Set the maximum inactivity time on the client side. Value range 1-3600 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy timeout connect <seconds>",
  "cmd": "set load-balancing haproxy timeout connect <seconds>",
  "desc": "System — Set the maximum time to wait for a connection attempt to a server to succeed. Value range 1-3600 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy timeout server <seconds>",
  "cmd": "set load-balancing haproxy timeout server <seconds>",
  "desc": "System — Set the maximum inactivity time on the server side. Value range 1-3600 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> http-check",
  "cmd": "set load-balancing haproxy backend <name> http-check",
  "desc": "System — Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> http-check method <method>",
  "cmd": "set load-balancing haproxy backend <name> http-check method <method>",
  "desc": "System — Set the HTTP method: OPTION, GET, POST, or PUT."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> http-check uri <path>",
  "cmd": "set load-balancing haproxy backend <name> http-check uri <path>",
  "desc": "System — Set the endpoint to use for health checks."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> http-check expect <condition>",
  "cmd": "set load-balancing haproxy backend <name> http-check expect <condition>",
  "desc": "System — Set the expected result condition for a server to be considered healthy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> health-check <protocol>",
  "cmd": "set load-balancing haproxy backend <name> health-check <protocol>",
  "desc": "System · loadbalancing"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall zone ...",
  "cmd": "set firewall zone ...",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall zone <name> interface <interface>",
  "cmd": "set firewall zone <name> interface <interface>",
  "desc": "Firewall — Assign interfaces as a member of a zone. :::{note} * An interface can only be a member of one zone."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall zone <name> local-zone",
  "cmd": "set firewall zone <name> local-zone",
  "desc": "Firewall — Define the zone as the local zone for traffic that originates from or is destined to the router itself."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall zone <name> default-action [drop | reject]",
  "cmd": "set firewall zone <name> default-action [drop | reject]",
  "desc": "Firewall — Modify the zone default-action, which applies to traffic destined to this zone that does not match any of the source zone rulesets applied."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall zone <name> default-log",
  "cmd": "set firewall zone <name> default-log",
  "desc": "Firewall — Enable logging of packets that match this zone's default-action (disabled by default)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall zone <name> description",
  "cmd": "set firewall zone <name> description",
  "desc": "Firewall — Add a meaningful description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall zone <Destination Zone> from <Source Zone> firewall name <ipv4-rule-set-name>",
  "cmd": "set firewall zone <Destination Zone> from <Source Zone> firewall name <ipv4-rule-set-name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall zone <Destination Zone> from <Source Zone> firewall ipv6-name <ipv6-rule-set…",
  "cmd": "set firewall zone <Destination Zone> from <Source Zone> firewall ipv6-name <ipv6-rule-set-name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall zone <Destination Zone> default-firewall name <ipv4-rule-set-name>",
  "cmd": "set firewall zone <Destination Zone> default-firewall name <ipv4-rule-set-name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall zone <Destination Zone> default-firewall ipv6-name <ipv6-rule-set-name>",
  "cmd": "set firewall zone <Destination Zone> default-firewall ipv6-name <ipv6-rule-set-name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall zone-policy",
  "cmd": "show firewall zone-policy",
  "desc": "Firewall — Display a basic summary of the zone configuration. :::{code-block} none vyos@vyos:~$ show firewall zone-policy Zone Interfaces From Zone Firewall IPv4 Firewall IPv6 ------ ------------ ----------- --------------- ------…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall zone-policy zone <zone>",
  "cmd": "show firewall zone-policy zone <zone>",
  "desc": "Firewall — Display a basic summary of a particular zone. :::{code-block} none vyos@vyos:~$ show firewall zone-policy zone WAN Zone Interfaces From Zone Firewall IPv4 Firewall IPv6 ------ ------------ ----------- --------------- --…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 ...",
  "cmd": "set firewall ipv6 ...",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> action [accept | continue | drop | jump…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> action [accept | continue | drop | jump | queue | reject | return | synproxy]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> action [accept | continue | drop | jump |…",
  "cmd": "set firewall ipv6 input filter rule <1-999999> action [accept | continue | drop | jump | queue | reject | return | synproxy]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> action [accept | continue | drop | jump |…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> action [accept | continue | drop | jump | queue | reject | return]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> action [accept | continue | drop | jump | q…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> action [accept | continue | drop | jump | queue | reject | return]",
  "desc": "Firewall — This required setting defines the action of the current rule. If you set the action to jump, you must also define a jump-target."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> jump-target <text>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> jump-target <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> jump-target <text>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> jump-target <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> jump-target <text>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> jump-target <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> jump-target <text>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> jump-target <text>",
  "desc": "Firewall — Use this command only when action is set to jump. Specify the jump target."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> queue <0-65535>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> queue <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> queue <0-65535>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> queue <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> queue <0-65535>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> queue <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> queue <0-65535>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> queue <0-65535>",
  "desc": "Firewall — Use this command only when action is set to queue. Specify the queue target."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> queue-options bypass",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> queue-options bypass",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> queue-options bypass",
  "cmd": "set firewall ipv6 input filter rule <1-999999> queue-options bypass",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> queue-options bypass",
  "cmd": "set firewall ipv6 output filter rule <1-999999> queue-options bypass",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> queue-options bypass",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> queue-options bypass",
  "desc": "Firewall — Use this command only when action is set to queue. This command allows the packet to go through the firewall when no userspace software is connected to the queue."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> queue-options fanout",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> queue-options fanout",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> queue-options fanout",
  "cmd": "set firewall ipv6 input filter rule <1-999999> queue-options fanout",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> queue-options fanout",
  "cmd": "set firewall ipv6 output filter rule <1-999999> queue-options fanout",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> queue-options fanout",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> queue-options fanout",
  "desc": "Firewall — Use this command only when action is set to queue. This command distributes packets among multiple queues."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter default-action [accept | drop]",
  "cmd": "set firewall ipv6 forward filter default-action [accept | drop]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter default-action [accept | drop]",
  "cmd": "set firewall ipv6 input filter default-action [accept | drop]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter default-action [accept | drop]",
  "cmd": "set firewall ipv6 output filter default-action [accept | drop]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> default-action [accept | drop | jump | queue | reject | ret…",
  "cmd": "set firewall ipv6 name <name> default-action [accept | drop | jump | queue | reject | return]",
  "desc": "Firewall — Set the default action of the rule-set if a packet does not match any rule criteria."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> default-jump-target <text>",
  "cmd": "set firewall ipv6 name <name> default-jump-target <text>",
  "desc": "Firewall — To be used only when default-action is set to jump. Use this command to specify the jump target for the default rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> log",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> log",
  "cmd": "set firewall ipv6 input filter rule <1-999999> log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> log",
  "cmd": "set firewall ipv6 output filter rule <1-999999> log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> log",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> log",
  "desc": "Firewall — Enable logging for matched packets. If this configuration command is not present, logging is disabled."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter default-log",
  "cmd": "set firewall ipv6 forward filter default-log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter default-log",
  "cmd": "set firewall ipv6 input filter default-log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter default-log",
  "cmd": "set firewall ipv6 output filter default-log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> default-log",
  "cmd": "set firewall ipv6 name <name> default-log",
  "desc": "Firewall — Use this command to enable the logging of the default action on the specified chain."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> log-options level [emerg | alert | crit…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> log-options level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> log-options level [emerg | alert | crit |…",
  "cmd": "set firewall ipv6 input filter rule <1-999999> log-options level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> log-options level [emerg | alert | crit |…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> log-options level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> log-options level [emerg | alert | crit | e…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> log-options level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "Firewall — Define log-level. Only applicable if rule log is enabled."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> log-options group <0-65535>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> log-options group <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> log-options group <0-65535>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> log-options group <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> log-options group <0-65535>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> log-options group <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> log-options group <0-65535>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> log-options group <0-65535>",
  "desc": "Firewall — Define the log group to send messages to. Only applicable if rule log is enabled."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> log-options snapshot-length <0-9000>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> log-options snapshot-length <0-9000>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> log-options snapshot-length <0-9000>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> log-options snapshot-length <0-9000>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> log-options snapshot-length <0-9000>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> log-options snapshot-length <0-9000>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> log-options snapshot-length <0-9000>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> log-options snapshot-length <0-9000>",
  "desc": "Firewall — Define the length of packet payload to include in a netlink message. Only applicable when rule logging is enabled and log group is defined."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> log-options queue-threshold <0-65535>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> log-options queue-threshold <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> log-options queue-threshold <0-65535>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> log-options queue-threshold <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> log-options queue-threshold <0-65535>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> log-options queue-threshold <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> log-options queue-threshold <0-65535>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> log-options queue-threshold <0-65535>",
  "desc": "Firewall — Define the number of packets to queue inside the kernel before sending them to userspace."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> description <text>",
  "cmd": "set firewall ipv6 name <name> description <text>",
  "desc": "Firewall — Provide a rule-set description to a custom firewall chain."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> description <text>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> description <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> description <text>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> description <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> description <text>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> description <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> description <text>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> description <text>",
  "desc": "Firewall — Provide a description for each rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> disable",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> disable",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> disable",
  "cmd": "set firewall ipv6 input filter rule <1-999999> disable",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> disable",
  "cmd": "set firewall ipv6 output filter rule <1-999999> disable",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> disable",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> disable",
  "desc": "Firewall — Command for disabling a rule but keep it in the configuration."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set firewall ipv6 forward filter rule <1-999999> connection-status nat [destination | sou…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> connection-status nat [destination | source]",
  "desc": "NAT · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set firewall ipv6 input filter rule <1-999999> connection-status nat [destination | sourc…",
  "cmd": "set firewall ipv6 input filter rule <1-999999> connection-status nat [destination | source]",
  "desc": "NAT · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set firewall ipv6 output filter rule <1-999999> connection-status nat [destination | sour…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> connection-status nat [destination | source]",
  "desc": "NAT · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set firewall ipv6 name <name> rule <1-999999> connection-status nat [destination | source]",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> connection-status nat [destination | source]",
  "desc": "NAT — Match packets based on NAT connection status."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> connection-mark <1-2147483647>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> connection-mark <1-2147483647>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> connection-mark <1-2147483647>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> connection-mark <1-2147483647>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> connection-mark <1-2147483647>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> connection-mark <1-2147483647>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> connection-mark <1-2147483647>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> connection-mark <1-2147483647>",
  "desc": "Firewall — Match packets based on connection mark."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> source address [address | addressrange |…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> source address [address | addressrange | CIDR]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> source address [address | addressrange | C…",
  "cmd": "set firewall ipv6 input filter rule <1-999999> source address [address | addressrange | CIDR]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> source address [address | addressrange |…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> source address [address | addressrange | CIDR]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> source address [address | addressrange | CI…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> source address [address | addressrange | CIDR]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> destination address [address | addressra…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> destination address [address | addressrange | CIDR]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> destination address [address | addressrang…",
  "cmd": "set firewall ipv6 input filter rule <1-999999> destination address [address | addressrange | CIDR]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> destination address [address | addressran…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> destination address [address | addressrange | CIDR]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> destination address [address | addressrange…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> destination address [address | addressrange | CIDR]",
  "desc": "Firewall — Match based on source or destination address. This is similar to network groups, but you can negate the matching addresses here."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> source address-mask [address]",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> source address-mask [address]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> source address-mask [address]",
  "cmd": "set firewall ipv6 input filter rule <1-999999> source address-mask [address]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> source address-mask [address]",
  "cmd": "set firewall ipv6 output filter rule <1-999999> source address-mask [address]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> source address-mask [address]",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> source address-mask [address]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> destination address-mask [address]",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> destination address-mask [address]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> destination address-mask [address]",
  "cmd": "set firewall ipv6 input filter rule <1-999999> destination address-mask [address]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> destination address-mask [address]",
  "cmd": "set firewall ipv6 output filter rule <1-999999> destination address-mask [address]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> destination address-mask [address]",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> destination address-mask [address]",
  "desc": "Firewall — Apply an arbitrary netmask to mask addresses and match only a specific portion. This is useful for IPv6 because rules remain valid when the IPv6 prefix changes if the host portion of the system's IPv6 address is static."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> source fqdn <fqdn>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> source fqdn <fqdn>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> source fqdn <fqdn>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> source fqdn <fqdn>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> source fqdn <fqdn>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> source fqdn <fqdn>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> source fqdn <fqdn>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> source fqdn <fqdn>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> destination fqdn <fqdn>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> destination fqdn <fqdn>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> destination fqdn <fqdn>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> destination fqdn <fqdn>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> destination fqdn <fqdn>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> destination fqdn <fqdn>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> destination fqdn <fqdn>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> destination fqdn <fqdn>",
  "desc": "Firewall — Specify a Fully Qualified Domain Name as source or destination to match. Ensure that the router can resolve the DNS query."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> source geoip country-code <country>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> source geoip country-code <country>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> source geoip country-code <country>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> source geoip country-code <country>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> source geoip country-code <country>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> source geoip country-code <country>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> source geoip country-code <country>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> source geoip country-code <country>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> destination geoip country-code <country>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> destination geoip country-code <country>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> destination geoip country-code <country>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> destination geoip country-code <country>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> destination geoip country-code <country>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> destination geoip country-code <country>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> destination geoip country-code <country>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> destination geoip country-code <country>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> source geoip inverse-match",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> source geoip inverse-match",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> source geoip inverse-match",
  "cmd": "set firewall ipv6 input filter rule <1-999999> source geoip inverse-match",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> source geoip inverse-match",
  "cmd": "set firewall ipv6 output filter rule <1-999999> source geoip inverse-match",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> source geoip inverse-match",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> source geoip inverse-match",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> destination geoip inverse-match",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> destination geoip inverse-match",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> destination geoip inverse-match",
  "cmd": "set firewall ipv6 input filter rule <1-999999> destination geoip inverse-match",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> destination geoip inverse-match",
  "cmd": "set firewall ipv6 output filter rule <1-999999> destination geoip inverse-match",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> destination geoip inverse-match",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> destination geoip inverse-match",
  "desc": "Firewall — Match IP addresses based on their geolocation. For more information, see GeoIP matching."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> source mac-address <mac-address>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> source mac-address <mac-address>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> source mac-address <mac-address>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> source mac-address <mac-address>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> source mac-address <mac-address>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> source mac-address <mac-address>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> source mac-address <mac-address>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> source mac-address <mac-address>",
  "desc": "Firewall — You can specify only a source MAC address to match. :::{code-block} none set firewall ipv6 input filter rule 100 source mac-address 00:53:00:11:22:33 set firewall ipv6 input filter rule 101 source mac-address !00:53:00:…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> source port [1-65535 | portname | start-…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> source port [1-65535 | portname | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> source port [1-65535 | portname | start-en…",
  "cmd": "set firewall ipv6 input filter rule <1-999999> source port [1-65535 | portname | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> source port [1-65535 | portname | start-e…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> source port [1-65535 | portname | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> source port [1-65535 | portname | start-end]",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> source port [1-65535 | portname | start-end]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> destination port [1-65535 | portname | s…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> destination port [1-65535 | portname | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> destination port [1-65535 | portname | sta…",
  "cmd": "set firewall ipv6 input filter rule <1-999999> destination port [1-65535 | portname | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> destination port [1-65535 | portname | st…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> destination port [1-65535 | portname | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> destination port [1-65535 | portname | star…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> destination port [1-65535 | portname | start-end]",
  "desc": "Firewall — Specify a port by number or by name as defined in /etc/services. :::{code-block} none set firewall ipv6 forward filter rule 10 source port '22' set firewall ipv6 forward filter rule 11 source port '!http' set firewall i…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> source group address-group <name | !name>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> source group address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> source group address-group <name | !name>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> source group address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> source group address-group <name | !name>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> source group address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> source group address-group <name | !name>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> source group address-group <name | !name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> destination group address-group <name |…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> destination group address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> destination group address-group <name | !n…",
  "cmd": "set firewall ipv6 input filter rule <1-999999> destination group address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> destination group address-group <name | !…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> destination group address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> destination group address-group <name | !na…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> destination group address-group <name | !name>",
  "desc": "Firewall — Specify an address group. You can prepend the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> source group dynamic-address-group <name…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> source group dynamic-address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> source group dynamic-address-group <name |…",
  "cmd": "set firewall ipv6 input filter rule <1-999999> source group dynamic-address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> source group dynamic-address-group <name…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> source group dynamic-address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> source group dynamic-address-group <name |…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> source group dynamic-address-group <name | !name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> destination group dynamic-address-group…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> destination group dynamic-address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> destination group dynamic-address-group <n…",
  "cmd": "set firewall ipv6 input filter rule <1-999999> destination group dynamic-address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> destination group dynamic-address-group <…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> destination group dynamic-address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> destination group dynamic-address-group <na…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> destination group dynamic-address-group <name | !name>",
  "desc": "Firewall — Specify a dynamic address group. You can prepend the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> source group network-group <name | !name>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> source group network-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> source group network-group <name | !name>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> source group network-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> source group network-group <name | !name>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> source group network-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> source group network-group <name | !name>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> source group network-group <name | !name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> destination group network-group <name |…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> destination group network-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> destination group network-group <name | !n…",
  "cmd": "set firewall ipv6 input filter rule <1-999999> destination group network-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> destination group network-group <name | !…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> destination group network-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> destination group network-group <name | !na…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> destination group network-group <name | !name>",
  "desc": "Firewall — Specify a network group. You can prepend the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> source group port-group <name | !name>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> source group port-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> source group port-group <name | !name>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> source group port-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> source group port-group <name | !name>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> source group port-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> source group port-group <name | !name>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> source group port-group <name | !name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> destination group port-group <name | !na…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> destination group port-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> destination group port-group <name | !name>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> destination group port-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> destination group port-group <name | !nam…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> destination group port-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> destination group port-group <name | !name>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> destination group port-group <name | !name>",
  "desc": "Firewall — Specify a port group. You can prepend the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> source group domain-group <name | !name>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> source group domain-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> source group domain-group <name | !name>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> source group domain-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> source group domain-group <name | !name>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> source group domain-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> source group domain-group <name | !name>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> source group domain-group <name | !name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> destination group domain-group <name | !…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> destination group domain-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> destination group domain-group <name | !na…",
  "cmd": "set firewall ipv6 input filter rule <1-999999> destination group domain-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> destination group domain-group <name | !n…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> destination group domain-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> destination group domain-group <name | !nam…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> destination group domain-group <name | !name>",
  "desc": "Firewall — Specify a domain group. You can prepend the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> source group mac-group <name | !name>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> source group mac-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> source group mac-group <name | !name>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> source group mac-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> source group mac-group <name | !name>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> source group mac-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> source group mac-group <name | !name>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> source group mac-group <name | !name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> destination group mac-group <name | !nam…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> destination group mac-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> destination group mac-group <name | !name>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> destination group mac-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> destination group mac-group <name | !name>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> destination group mac-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> destination group mac-group <name | !name>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> destination group mac-group <name | !name>",
  "desc": "Firewall — Specify a MAC group. You can prepend the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> dscp [0-63 | start-end]",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> dscp [0-63 | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> dscp [0-63 | start-end]",
  "cmd": "set firewall ipv6 input filter rule <1-999999> dscp [0-63 | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> dscp [0-63 | start-end]",
  "cmd": "set firewall ipv6 output filter rule <1-999999> dscp [0-63 | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> dscp [0-63 | start-end]",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> dscp [0-63 | start-end]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> dscp-exclude [0-63 | start-end]",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> dscp-exclude [0-63 | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> dscp-exclude [0-63 | start-end]",
  "cmd": "set firewall ipv6 input filter rule <1-999999> dscp-exclude [0-63 | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> dscp-exclude [0-63 | start-end]",
  "cmd": "set firewall ipv6 output filter rule <1-999999> dscp-exclude [0-63 | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> dscp-exclude [0-63 | start-end]",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> dscp-exclude [0-63 | start-end]",
  "desc": "Firewall — Match based on dscp value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> fragment [match-frag | match-non-frag]",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> fragment [match-frag | match-non-frag]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> fragment [match-frag | match-non-frag]",
  "cmd": "set firewall ipv6 input filter rule <1-999999> fragment [match-frag | match-non-frag]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> fragment [match-frag | match-non-frag]",
  "cmd": "set firewall ipv6 output filter rule <1-999999> fragment [match-frag | match-non-frag]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> fragment [match-frag | match-non-frag]",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> fragment [match-frag | match-non-frag]",
  "desc": "Firewall — Match packets based on fragmentation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> icmpv6 [code | type] <0-255>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> icmpv6 [code | type] <0-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> icmpv6 [code | type] <0-255>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> icmpv6 [code | type] <0-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> icmpv6 [code | type] <0-255>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> icmpv6 [code | type] <0-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> icmpv6 [code | type] <0-255>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> icmpv6 [code | type] <0-255>",
  "desc": "Firewall — Match packets based on ICMP or ICMPv6 code and type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> icmpv6 type-name <text>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> icmpv6 type-name <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> icmpv6 type-name <text>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> icmpv6 type-name <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> icmpv6 type-name <text>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> icmpv6 type-name <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> icmpv6 type-name <text>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> icmpv6 type-name <text>",
  "desc": "Firewall — Match based on ICMPv6 type-name. Press **Tab** for information about supported **type-name** criteria."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> inbound-interface name <iface>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> inbound-interface name <iface>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> inbound-interface name <iface>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> inbound-interface name <iface>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> inbound-interface name <iface>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> inbound-interface name <iface>",
  "desc": "Firewall — Match based on inbound interface. You can use the wildcard *."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> inbound-interface group <iface_group>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> inbound-interface group <iface_group>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> inbound-interface group <iface_group>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> inbound-interface group <iface_group>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> inbound-interface group <iface_group>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> inbound-interface group <iface_group>",
  "desc": "Firewall — Match based on the inbound interface group. You can prepend the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> outbound-interface name <iface>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> outbound-interface name <iface>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> outbound-interface name <iface>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> outbound-interface name <iface>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> outbound-interface name <iface>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> outbound-interface name <iface>",
  "desc": "Firewall — Match based on outbound interface. You can use the wildcard *."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> outbound-interface group <iface_group>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> outbound-interface group <iface_group>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> outbound-interface group <iface_group>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> outbound-interface group <iface_group>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> outbound-interface group <iface_group>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> outbound-interface group <iface_group>",
  "desc": "Firewall — Match based on outbound interface group. You can prepend the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set firewall ipv6 forward filter rule <1-999999> ipsec [match-ipsec-in | match-ipsec-out…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> ipsec [match-ipsec-in | match-ipsec-out | match-none-in | match-none-out]",
  "desc": "VPN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set firewall ipv6 input filter rule <1-999999> ipsec [match-ipsec-in | match-none-in]",
  "cmd": "set firewall ipv6 input filter rule <1-999999> ipsec [match-ipsec-in | match-none-in]",
  "desc": "VPN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set firewall ipv6 output filter rule <1-999999> ipsec [match-ipsec-out | match-none-out]",
  "cmd": "set firewall ipv6 output filter rule <1-999999> ipsec [match-ipsec-out | match-none-out]",
  "desc": "VPN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set firewall ipv6 name <name> rule <1-999999> ipsec [match-ipsec-in | match-ipsec-out | m…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> ipsec [match-ipsec-in | match-ipsec-out | match-none-in | match-none-out]",
  "desc": "VPN — Match packets based on IPsec."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> limit burst <0-4294967295>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> limit burst <0-4294967295>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> limit burst <0-4294967295>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> limit burst <0-4294967295>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> limit burst <0-4294967295>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> limit burst <0-4294967295>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> limit burst <0-4294967295>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> limit burst <0-4294967295>",
  "desc": "Firewall — Match based on the maximum number of packets allowed to exceed the rate limit."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> limit rate <text>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> limit rate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> limit rate <text>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> limit rate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> limit rate <text>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> limit rate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> limit rate <text>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> limit rate <text>",
  "desc": "Firewall — Match based on the maximum average rate, specified as integer/unit. For example, specify 5/minutes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> packet-length <text>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> packet-length <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> packet-length <text>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> packet-length <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> packet-length <text>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> packet-length <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> packet-length <text>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> packet-length <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> packet-length-exclude <text>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> packet-length-exclude <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> packet-length-exclude <text>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> packet-length-exclude <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> packet-length-exclude <text>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> packet-length-exclude <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> packet-length-exclude <text>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> packet-length-exclude <text>",
  "desc": "Firewall — Match based on packet length. You can specify multiple values from 1 to 65535 and ranges."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set firewall ipv6 forward filter rule <1-999999> packet-type [broadcast | host | multicas…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> packet-type [broadcast | host | multicast | other]",
  "desc": "Multicast · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set firewall ipv6 input filter rule <1-999999> packet-type [broadcast | host | multicast…",
  "cmd": "set firewall ipv6 input filter rule <1-999999> packet-type [broadcast | host | multicast | other]",
  "desc": "Multicast · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set firewall ipv6 output filter rule <1-999999> packet-type [broadcast | host | multicast…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> packet-type [broadcast | host | multicast | other]",
  "desc": "Multicast · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set firewall ipv6 name <name> rule <1-999999> packet-type [broadcast | host | multicast |…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> packet-type [broadcast | host | multicast | other]",
  "desc": "Multicast — Match based on packet type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> protocol [<text> | <0-255> | all | tcp_u…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> protocol [<text> | <0-255> | all | tcp_udp]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> protocol [<text> | <0-255> | all | tcp_udp]",
  "cmd": "set firewall ipv6 input filter rule <1-999999> protocol [<text> | <0-255> | all | tcp_udp]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> protocol [<text> | <0-255> | all | tcp_ud…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> protocol [<text> | <0-255> | all | tcp_udp]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> protocol [<text> | <0-255> | all | tcp_udp]",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> protocol [<text> | <0-255> | all | tcp_udp]",
  "desc": "Firewall — Match based on protocol number or name as defined in /etc/protocols. Specify all for all protocols and tcp_udp for TCP and UDP packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> recent count <1-255>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> recent count <1-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> recent count <1-255>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> recent count <1-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> recent count <1-255>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> recent count <1-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> recent count <1-255>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> recent count <1-255>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> recent time [second | minute | hour]",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> recent time [second | minute | hour]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> recent time [second | minute | hour]",
  "cmd": "set firewall ipv6 input filter rule <1-999999> recent time [second | minute | hour]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> recent time [second | minute | hour]",
  "cmd": "set firewall ipv6 output filter rule <1-999999> recent time [second | minute | hour]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> recent time [second | minute | hour]",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> recent time [second | minute | hour]",
  "desc": "Firewall — Match packets based on recently seen sources."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> tcp flags [not] <text>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> tcp flags [not] <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> tcp flags [not] <text>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> tcp flags [not] <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> tcp flags [not] <text>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> tcp flags [not] <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> tcp flags [not] <text>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> tcp flags [not] <text>",
  "desc": "Firewall — Allowed values for TCP flags: ack, cwr, ecn, fin, psh, rst, syn, and urg. You can specify multiple values."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> state [established | invalid | new | rel…",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> state [established | invalid | new | related]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> state [established | invalid | new | relat…",
  "cmd": "set firewall ipv6 input filter rule <1-999999> state [established | invalid | new | related]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> state [established | invalid | new | rela…",
  "cmd": "set firewall ipv6 output filter rule <1-999999> state [established | invalid | new | related]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> state [established | invalid | new | relate…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> state [established | invalid | new | related]",
  "desc": "Firewall — Match based on packet state."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> time startdate <text>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> time startdate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> time startdate <text>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> time startdate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> time startdate <text>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> time startdate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> time startdate <text>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> time startdate <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> time starttime <text>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> time starttime <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> time starttime <text>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> time starttime <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> time starttime <text>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> time starttime <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> time starttime <text>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> time starttime <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> time stopdate <text>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> time stopdate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> time stopdate <text>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> time stopdate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> time stopdate <text>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> time stopdate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> time stopdate <text>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> time stopdate <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> time stoptime <text>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> time stoptime <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> time stoptime <text>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> time stoptime <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> time stoptime <text>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> time stoptime <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> time stoptime <text>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> time stoptime <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> time weekdays <text>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> time weekdays <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> time weekdays <text>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> time weekdays <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> time weekdays <text>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> time weekdays <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> time weekdays <text>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> time weekdays <text>",
  "desc": "Firewall — Match packets based on time criteria."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> hop-limit <eq | gt | lt> <0-255>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> hop-limit <eq | gt | lt> <0-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> hop-limit <eq | gt | lt> <0-255>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> hop-limit <eq | gt | lt> <0-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> hop-limit <eq | gt | lt> <0-255>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> hop-limit <eq | gt | lt> <0-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> hop-limit <eq | gt | lt> <0-255>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> hop-limit <eq | gt | lt> <0-255>",
  "desc": "Firewall — Match the hop-limit parameter. Use eq for equal, gt for greater than, and lt for less than."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> recent time <second | minute | hour>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> recent time <second | minute | hour>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> recent time <second | minute | hour>",
  "cmd": "set firewall ipv6 input filter rule <1-999999> recent time <second | minute | hour>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> recent time <second | minute | hour>",
  "cmd": "set firewall ipv6 output filter rule <1-999999> recent time <second | minute | hour>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> recent time <second | minute | hour>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> recent time <second | minute | hour>",
  "desc": "Firewall — Match when the specified number of connections occur within the specified time period."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 prerouting raw rule <1-999999> set dscp <0-63>",
  "cmd": "set firewall ipv6 prerouting raw rule <1-999999> set dscp <0-63>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> set dscp <0-63>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> set dscp <0-63>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output [filter | raw] rule <1-999999> set dscp <0-63>",
  "cmd": "set firewall ipv6 output [filter | raw] rule <1-999999> set dscp <0-63>",
  "desc": "ACL — Set a specific value of Differentiated Services Codepoint (DSCP)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 prerouting raw rule <1-999999> set mark <1-2147483647>",
  "cmd": "set firewall ipv6 prerouting raw rule <1-999999> set mark <1-2147483647>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> set mark <1-2147483647>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> set mark <1-2147483647>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output [filter | raw] rule <1-999999> set mark <1-2147483647>",
  "cmd": "set firewall ipv6 output [filter | raw] rule <1-999999> set mark <1-2147483647>",
  "desc": "ACL — Set a specific packet mark value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 prerouting raw rule <1-999999> set tcp-mss <500-1460>",
  "cmd": "set firewall ipv6 prerouting raw rule <1-999999> set tcp-mss <500-1460>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> set tcp-mss <500-1460>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> set tcp-mss <500-1460>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output [filter | raw] rule <1-999999> set tcp-mss <500-1460>",
  "cmd": "set firewall ipv6 output [filter | raw] rule <1-999999> set tcp-mss <500-1460>",
  "desc": "ACL — Set the TCP-MSS (TCP maximum segment size) for the connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 prerouting raw rule <1-999999> set hop-limit <0-255>",
  "cmd": "set firewall ipv6 prerouting raw rule <1-999999> set hop-limit <0-255>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> set hop-limit <0-255>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> set hop-limit <0-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output [filter | raw] rule <1-999999> set hop-limit <0-255>",
  "cmd": "set firewall ipv6 output [filter | raw] rule <1-999999> set hop-limit <0-255>",
  "desc": "ACL — Set hop limit value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> set connection-mark <0-2147483647>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> set connection-mark <0-2147483647>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output [filter | raw] rule <1-999999> set connection-mark <0-2147483647>",
  "cmd": "set firewall ipv6 output [filter | raw] rule <1-999999> set connection-mark <0-2147483647>",
  "desc": "ACL — Set connection mark value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 [input | forward] filter rule <1-999999> action synproxy",
  "cmd": "set firewall ipv6 [input | forward] filter rule <1-999999> action synproxy",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 [input | forward] filter rule <1-999999> protocol tcp",
  "cmd": "set firewall ipv6 [input | forward] filter rule <1-999999> protocol tcp",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 [input | forward] filter rule <1-999999> synproxy tcp mss <501-65535>",
  "cmd": "set firewall ipv6 [input | forward] filter rule <1-999999> synproxy tcp mss <501-65535>",
  "desc": "ACL — Set the TCP MSS (maximum segment size) for the connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 [input | forward] filter rule <1-999999> synproxy tcp window-scale <1-1…",
  "cmd": "set firewall ipv6 [input | forward] filter rule <1-999999> synproxy tcp window-scale <1-14>",
  "desc": "ACL — Set the window scale factor for TCP window scaling."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall",
  "cmd": "show firewall",
  "desc": "Firewall — Show a basic firewall overview for all rule-sets, not only for IPv6: :::{code-block} none vyos@vyos:~$ show firewall Rulesets Information --------------------------------- IPv4 Firewall \"forward filter\" Rule Action Prot…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall summary",
  "cmd": "show firewall summary",
  "desc": "Firewall — This will show you a summary of rule-sets and groups :::{code-block} none vyos@vyos:~$ show firewall summary Ruleset Summary IPv6 Ruleset: Ruleset Hook Ruleset Priority Description -------------- -------------------- --…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show firewall ipv6 [forward | input | output] filter",
  "cmd": "show firewall ipv6 [forward | input | output] filter",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall ipv6 ipv6-name <name>",
  "cmd": "show firewall ipv6 ipv6-name <name>",
  "desc": "Firewall — This command will give an overview of a single rule-set. :::{code-block} none vyos@vyos:~$ show firewall ipv6 input filter Ruleset Information --------------------------------- ipv6 Firewall \"input filter\" Rule Action P…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show firewall ipv6 [forward | input | output] filter rule <1-999999>",
  "cmd": "show firewall ipv6 [forward | input | output] filter rule <1-999999>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall ipv6 name <name> rule <1-999999>",
  "cmd": "show firewall ipv6 name <name> rule <1-999999>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall ipv6 ipv6-name <name> rule <1-999999>",
  "cmd": "show firewall ipv6 ipv6-name <name> rule <1-999999>",
  "desc": "Firewall — This command will give an overview of a rule in a single rule-set"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall group <name>",
  "cmd": "show firewall group <name>",
  "desc": "Firewall — Show an overview of defined groups, including the type, members, and where the group is used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall statistics",
  "cmd": "show firewall statistics",
  "desc": "Firewall — Show statistics of all rule-sets since the last boot."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show log firewall",
  "cmd": "show log firewall",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show log firewall ipv6",
  "cmd": "show log firewall ipv6",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show log firewall ipv6 [forward | input | output | name]",
  "cmd": "show log firewall ipv6 [forward | input | output | name]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show log firewall ipv6 [forward | input | output] filter",
  "cmd": "show log firewall ipv6 [forward | input | output] filter",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show log firewall ipv6 name <name>",
  "cmd": "show log firewall ipv6 name <name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show log firewall ipv6 [forward | input | output] filter rule <rule>",
  "cmd": "show log firewall ipv6 [forward | input | output] filter rule <rule>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show log firewall ipv6 name <name> rule <rule>",
  "cmd": "show log firewall ipv6 name <name> rule <rule>",
  "desc": "Firewall — Show firewall logs for all firewalls, all IPv6 firewalls, specific hooks, specific priorities, specific custom chains, or specific rule-sets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "update geoip",
  "cmd": "update geoip",
  "desc": "Firewall — Command used to update GeoIP database and firewall sets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge ...",
  "cmd": "set firewall bridge ...",
  "desc": "Firewall — Configure bridge firewall rules for traffic at the bridge layer. See the Bridge Firewall Configuration page for detailed information."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall flowtable ...",
  "cmd": "set firewall flowtable ...",
  "desc": "Firewall — Configure firewall flowtables for stateful connection tracking and rules. See the Flowtables Firewall Configuration page for detailed information."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options ...",
  "cmd": "set firewall global-options ...",
  "desc": "Firewall — Configure global firewall options such as all-ping, broadcast-ping, syn-cookies, and other system-wide firewall settings."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group ...",
  "cmd": "set firewall group ...",
  "desc": "Firewall — Organize firewall rules by creating reusable address, network, interface, MAC, port, and domain groups."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 ...",
  "cmd": "set firewall ipv4 ...",
  "desc": "Firewall — Configure IPv4-specific firewall rules. See the IPv4 Firewall Configuration page for detailed information."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> action [accept | continue | drop | jump…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> action [accept | continue | drop | jump | queue | reject | return | synproxy]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> action [accept | continue | drop | jump |…",
  "cmd": "set firewall ipv4 input filter rule <1-999999> action [accept | continue | drop | jump | queue | reject | return | synproxy]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> action [accept | continue | drop | jump |…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> action [accept | continue | drop | jump | queue | reject | return]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> action [accept | continue | drop | jump | q…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> action [accept | continue | drop | jump | queue | reject | return]",
  "desc": "Firewall — This required setting defines the action of the current rule. If you set the action to jump, you must also specify a jump-target."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> jump-target <text>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> jump-target <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> jump-target <text>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> jump-target <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> jump-target <text>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> jump-target <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> jump-target <text>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> jump-target <text>",
  "desc": "Firewall — Use this command only when the action is set to jump. Specify the jump target."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> queue <0-65535>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> queue <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> queue <0-65535>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> queue <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> queue <0-65535>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> queue <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> queue <0-65535>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> queue <0-65535>",
  "desc": "Firewall — Use this command only when the action is set to queue. Specify the queue target to use."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> queue-options bypass",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> queue-options bypass",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> queue-options bypass",
  "cmd": "set firewall ipv4 input filter rule <1-999999> queue-options bypass",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> queue-options bypass",
  "cmd": "set firewall ipv4 output filter rule <1-999999> queue-options bypass",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> queue-options bypass",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> queue-options bypass",
  "desc": "Firewall — Use this command only when the action is set to queue. Allow the packet to pass through the firewall when no userspace software is connected to the queue."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> queue-options fanout",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> queue-options fanout",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> queue-options fanout",
  "cmd": "set firewall ipv4 input filter rule <1-999999> queue-options fanout",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> queue-options fanout",
  "cmd": "set firewall ipv4 output filter rule <1-999999> queue-options fanout",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> queue-options fanout",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> queue-options fanout",
  "desc": "Firewall — Use this command only when the action is set to queue. Distribute packets between several queues."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter default-action [accept | drop]",
  "cmd": "set firewall ipv4 forward filter default-action [accept | drop]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter default-action [accept | drop]",
  "cmd": "set firewall ipv4 input filter default-action [accept | drop]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter default-action [accept | drop]",
  "cmd": "set firewall ipv4 output filter default-action [accept | drop]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> default-action [accept | drop | jump | queue | reject | ret…",
  "cmd": "set firewall ipv4 name <name> default-action [accept | drop | jump | queue | reject | return]",
  "desc": "Firewall — This command sets the default action of the rule-set if a packet does not match the criteria of any rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> default-jump-target <text>",
  "cmd": "set firewall ipv4 name <name> default-jump-target <text>",
  "desc": "Firewall — Use this command only when you set default-action to jump. Specify the jump target for the default rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> log",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> log",
  "cmd": "set firewall ipv4 input filter rule <1-999999> log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> log",
  "cmd": "set firewall ipv4 output filter rule <1-999999> log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> log",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> log",
  "desc": "Firewall — Enable logging for the matched packet. If this command is not present, then logging is not enabled."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter default-log",
  "cmd": "set firewall ipv4 forward filter default-log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter default-log",
  "cmd": "set firewall ipv4 input filter default-log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter default-log",
  "cmd": "set firewall ipv4 output filter default-log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> default-log",
  "cmd": "set firewall ipv4 name <name> default-log",
  "desc": "Firewall — Use this command to enable logging of the default action on the specified chain."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> log-options level [emerg | alert | crit…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> log-options level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> log-options level [emerg | alert | crit |…",
  "cmd": "set firewall ipv4 input filter rule <1-999999> log-options level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> log-options level [emerg | alert | crit |…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> log-options level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> log-options level [emerg | alert | crit | e…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> log-options level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "Firewall — Define the log level. Only applicable if you enable rule logging."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> log-options group <0-65535>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> log-options group <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> log-options group <0-65535>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> log-options group <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> log-options group <0-65535>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> log-options group <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> log-options group <0-65535>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> log-options group <0-65535>",
  "desc": "Firewall — Define the log group to send messages to. Only applicable if you enable rule logging."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> log-options snapshot-length <0-9000>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> log-options snapshot-length <0-9000>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> log-options snapshot-length <0-9000>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> log-options snapshot-length <0-9000>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> log-options snapshot-length <0-9000>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> log-options snapshot-length <0-9000>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> log-options snapshot-length <0-9000>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> log-options snapshot-length <0-9000>",
  "desc": "Firewall — Define the length of packet payload to include in a netlink message. Only applicable if you enable rule logging and define the log group."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> log-options queue-threshold <0-65535>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> log-options queue-threshold <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> log-options queue-threshold <0-65535>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> log-options queue-threshold <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> log-options queue-threshold <0-65535>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> log-options queue-threshold <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> log-options queue-threshold <0-65535>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> log-options queue-threshold <0-65535>",
  "desc": "Firewall — Define the number of packets to queue inside the kernel before sending them to userspace."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> description <text>",
  "cmd": "set firewall ipv4 name <name> description <text>",
  "desc": "Firewall — Provide a rule-set description for a custom firewall chain."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> description <text>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> description <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> description <text>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> description <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> description <text>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> description <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> description <text>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> description <text>",
  "desc": "Firewall — Provide a description for each rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> disable",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> disable",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> disable",
  "cmd": "set firewall ipv4 input filter rule <1-999999> disable",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> disable",
  "cmd": "set firewall ipv4 output filter rule <1-999999> disable",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> disable",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> disable",
  "desc": "Firewall — Command for disabling a rule but keeping it in the configuration."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set firewall ipv4 forward filter rule <1-999999> connection-status nat [destination | sou…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> connection-status nat [destination | source]",
  "desc": "NAT · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set firewall ipv4 input filter rule <1-999999> connection-status nat [destination | sourc…",
  "cmd": "set firewall ipv4 input filter rule <1-999999> connection-status nat [destination | source]",
  "desc": "NAT · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set firewall ipv4 output filter rule <1-999999> connection-status nat [destination | sour…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> connection-status nat [destination | source]",
  "desc": "NAT · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set firewall ipv4 name <name> rule <1-999999> connection-status nat [destination | source]",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> connection-status nat [destination | source]",
  "desc": "NAT — Match based on nat connection status."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> connection-mark <1-2147483647>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> connection-mark <1-2147483647>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> connection-mark <1-2147483647>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> connection-mark <1-2147483647>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> connection-mark <1-2147483647>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> connection-mark <1-2147483647>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> connection-mark <1-2147483647>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> connection-mark <1-2147483647>",
  "desc": "Firewall — Match based on connection mark."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> conntrack-helper <module>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> conntrack-helper <module>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> conntrack-helper <module>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> conntrack-helper <module>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> conntrack-helper <module>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> conntrack-helper <module>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> conntrack-helper <module>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> conntrack-helper <module>",
  "desc": "Firewall — Match based on connection tracking protocol helper module to secure use of that helper module."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> source address [address | addressrange |…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> source address [address | addressrange | CIDR]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> source address [address | addressrange | C…",
  "cmd": "set firewall ipv4 input filter rule <1-999999> source address [address | addressrange | CIDR]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> source address [address | addressrange |…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> source address [address | addressrange | CIDR]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> source address [address | addressrange | CI…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> source address [address | addressrange | CIDR]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> destination address [address | addressra…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> destination address [address | addressrange | CIDR]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> destination address [address | addressrang…",
  "cmd": "set firewall ipv4 input filter rule <1-999999> destination address [address | addressrange | CIDR]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> destination address [address | addressran…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> destination address [address | addressrange | CIDR]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> destination address [address | addressrange…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> destination address [address | addressrange | CIDR]",
  "desc": "Firewall — Match criteria based on source and/or destination address. This is similar to the network groups part, but here you are able to negate the matching addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> source address-mask [address]",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> source address-mask [address]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> source address-mask [address]",
  "cmd": "set firewall ipv4 input filter rule <1-999999> source address-mask [address]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> source address-mask [address]",
  "cmd": "set firewall ipv4 output filter rule <1-999999> source address-mask [address]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> source address-mask [address]",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> source address-mask [address]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> destination address-mask [address]",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> destination address-mask [address]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> destination address-mask [address]",
  "cmd": "set firewall ipv4 input filter rule <1-999999> destination address-mask [address]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> destination address-mask [address]",
  "cmd": "set firewall ipv4 output filter rule <1-999999> destination address-mask [address]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> destination address-mask [address]",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> destination address-mask [address]",
  "desc": "Firewall — An arbitrary netmask can be applied to mask addresses to only match against a specific portion."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> source fqdn <fqdn>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> source fqdn <fqdn>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> source fqdn <fqdn>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> source fqdn <fqdn>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> source fqdn <fqdn>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> source fqdn <fqdn>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> source fqdn <fqdn>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> source fqdn <fqdn>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> destination fqdn <fqdn>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> destination fqdn <fqdn>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> destination fqdn <fqdn>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> destination fqdn <fqdn>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> destination fqdn <fqdn>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> destination fqdn <fqdn>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> destination fqdn <fqdn>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> destination fqdn <fqdn>",
  "desc": "Firewall — Specify a Fully Qualified Domain Name as source/destination to match. Ensure that the router is able to resolve this dns query."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> source geoip country-code <country>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> source geoip country-code <country>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> source geoip country-code <country>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> source geoip country-code <country>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> source geoip country-code <country>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> source geoip country-code <country>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> source geoip country-code <country>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> source geoip country-code <country>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> destination geoip country-code <country>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> destination geoip country-code <country>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> destination geoip country-code <country>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> destination geoip country-code <country>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> destination geoip country-code <country>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> destination geoip country-code <country>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> destination geoip country-code <country>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> destination geoip country-code <country>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> source geoip inverse-match",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> source geoip inverse-match",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> source geoip inverse-match",
  "cmd": "set firewall ipv4 input filter rule <1-999999> source geoip inverse-match",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> source geoip inverse-match",
  "cmd": "set firewall ipv4 output filter rule <1-999999> source geoip inverse-match",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> source geoip inverse-match",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> source geoip inverse-match",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> destination geoip inverse-match",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> destination geoip inverse-match",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> destination geoip inverse-match",
  "cmd": "set firewall ipv4 input filter rule <1-999999> destination geoip inverse-match",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> destination geoip inverse-match",
  "cmd": "set firewall ipv4 output filter rule <1-999999> destination geoip inverse-match",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> destination geoip inverse-match",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> destination geoip inverse-match",
  "desc": "Firewall — Match IP addresses based on its geolocation. More info: geoip matching."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> source mac-address <mac-address>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> source mac-address <mac-address>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> source mac-address <mac-address>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> source mac-address <mac-address>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> source mac-address <mac-address>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> source mac-address <mac-address>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> source mac-address <mac-address>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> source mac-address <mac-address>",
  "desc": "Firewall — You can only specify a source mac-address to match. :::{code-block} none set firewall ipv4 input filter rule 100 source mac-address 00:53:00:11:22:33 set firewall ipv4 input filter rule 101 source mac-address !00:53:00:…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> source port [1-65535 | portname | start-…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> source port [1-65535 | portname | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> source port [1-65535 | portname | start-en…",
  "cmd": "set firewall ipv4 input filter rule <1-999999> source port [1-65535 | portname | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> source port [1-65535 | portname | start-e…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> source port [1-65535 | portname | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> source port [1-65535 | portname | start-end]",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> source port [1-65535 | portname | start-end]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> destination port [1-65535 | portname | s…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> destination port [1-65535 | portname | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> destination port [1-65535 | portname | sta…",
  "cmd": "set firewall ipv4 input filter rule <1-999999> destination port [1-65535 | portname | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> destination port [1-65535 | portname | st…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> destination port [1-65535 | portname | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> destination port [1-65535 | portname | star…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> destination port [1-65535 | portname | start-end]",
  "desc": "Firewall — A port can be set by number or name as defined in /etc/services. :::{code-block} none set firewall ipv4 forward filter rule 10 source port '22' set firewall ipv4 forward filter rule 11 source port '!http' set firewall i…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> source group address-group <name | !name>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> source group address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> source group address-group <name | !name>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> source group address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> source group address-group <name | !name>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> source group address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> source group address-group <name | !name>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> source group address-group <name | !name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> destination group address-group <name |…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> destination group address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> destination group address-group <name | !n…",
  "cmd": "set firewall ipv4 input filter rule <1-999999> destination group address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> destination group address-group <name | !…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> destination group address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> destination group address-group <name | !na…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> destination group address-group <name | !name>",
  "desc": "Firewall — Use a specific address-group. Prepending the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> source group dynamic-address-group <name…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> source group dynamic-address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> source group dynamic-address-group <name |…",
  "cmd": "set firewall ipv4 input filter rule <1-999999> source group dynamic-address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> source group dynamic-address-group <name…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> source group dynamic-address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> source group dynamic-address-group <name |…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> source group dynamic-address-group <name | !name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> destination group dynamic-address-group…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> destination group dynamic-address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> destination group dynamic-address-group <n…",
  "cmd": "set firewall ipv4 input filter rule <1-999999> destination group dynamic-address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> destination group dynamic-address-group <…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> destination group dynamic-address-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> destination group dynamic-address-group <na…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> destination group dynamic-address-group <name | !name>",
  "desc": "Firewall — Use a specific dynamic-address-group. Prepending the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> source group network-group <name | !name>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> source group network-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> source group network-group <name | !name>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> source group network-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> source group network-group <name | !name>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> source group network-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> source group network-group <name | !name>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> source group network-group <name | !name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> destination group network-group <name |…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> destination group network-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> destination group network-group <name | !n…",
  "cmd": "set firewall ipv4 input filter rule <1-999999> destination group network-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> destination group network-group <name | !…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> destination group network-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> destination group network-group <name | !na…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> destination group network-group <name | !name>",
  "desc": "Firewall — Use a specific network-group. Prepending the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> source group port-group <name | !name>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> source group port-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> source group port-group <name | !name>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> source group port-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> source group port-group <name | !name>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> source group port-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> source group port-group <name | !name>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> source group port-group <name | !name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> destination group port-group <name | !na…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> destination group port-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> destination group port-group <name | !name>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> destination group port-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> destination group port-group <name | !nam…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> destination group port-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> destination group port-group <name | !name>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> destination group port-group <name | !name>",
  "desc": "Firewall — Use a specific port-group. Prepending the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> source group domain-group <name | !name>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> source group domain-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> source group domain-group <name | !name>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> source group domain-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> source group domain-group <name | !name>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> source group domain-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> source group domain-group <name | !name>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> source group domain-group <name | !name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> destination group domain-group <name | !…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> destination group domain-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> destination group domain-group <name | !na…",
  "cmd": "set firewall ipv4 input filter rule <1-999999> destination group domain-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> destination group domain-group <name | !n…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> destination group domain-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> destination group domain-group <name | !nam…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> destination group domain-group <name | !name>",
  "desc": "Firewall — Use a specific domain-group. Prepending the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> source group mac-group <name | !name>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> source group mac-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> source group mac-group <name | !name>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> source group mac-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> source group mac-group <name | !name>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> source group mac-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> source group mac-group <name | !name>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> source group mac-group <name | !name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> destination group mac-group <name | !nam…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> destination group mac-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> destination group mac-group <name | !name>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> destination group mac-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> destination group mac-group <name | !name>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> destination group mac-group <name | !name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> destination group mac-group <name | !name>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> destination group mac-group <name | !name>",
  "desc": "Firewall — Use a specific mac-group. Prepending the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> dscp [0-63 | start-end]",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> dscp [0-63 | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> dscp [0-63 | start-end]",
  "cmd": "set firewall ipv4 input filter rule <1-999999> dscp [0-63 | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> dscp [0-63 | start-end]",
  "cmd": "set firewall ipv4 output filter rule <1-999999> dscp [0-63 | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> dscp [0-63 | start-end]",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> dscp [0-63 | start-end]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> dscp-exclude [0-63 | start-end]",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> dscp-exclude [0-63 | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> dscp-exclude [0-63 | start-end]",
  "cmd": "set firewall ipv4 input filter rule <1-999999> dscp-exclude [0-63 | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> dscp-exclude [0-63 | start-end]",
  "cmd": "set firewall ipv4 output filter rule <1-999999> dscp-exclude [0-63 | start-end]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> dscp-exclude [0-63 | start-end]",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> dscp-exclude [0-63 | start-end]",
  "desc": "Firewall — Match based on dscp value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> fragment [match-frag | match-non-frag]",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> fragment [match-frag | match-non-frag]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> fragment [match-frag | match-non-frag]",
  "cmd": "set firewall ipv4 input filter rule <1-999999> fragment [match-frag | match-non-frag]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> fragment [match-frag | match-non-frag]",
  "cmd": "set firewall ipv4 output filter rule <1-999999> fragment [match-frag | match-non-frag]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> fragment [match-frag | match-non-frag]",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> fragment [match-frag | match-non-frag]",
  "desc": "Firewall — Match based on fragmentation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> icmp [code | type] <0-255>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> icmp [code | type] <0-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> icmp [code | type] <0-255>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> icmp [code | type] <0-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> icmp [code | type] <0-255>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> icmp [code | type] <0-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> icmp [code | type] <0-255>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> icmp [code | type] <0-255>",
  "desc": "Firewall — Match based on icmp code and type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> icmp type-name <text>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> icmp type-name <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> icmp type-name <text>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> icmp type-name <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> icmp type-name <text>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> icmp type-name <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> icmp type-name <text>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> icmp type-name <text>",
  "desc": "Firewall — Match based on icmp type-name. Use tab for information about what **type-name** criteria are supported."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> inbound-interface name <iface>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> inbound-interface name <iface>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> inbound-interface name <iface>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> inbound-interface name <iface>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> inbound-interface name <iface>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> inbound-interface name <iface>",
  "desc": "Firewall — Match based on inbound interface. Wildcard * is supported."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> inbound-interface group <iface_group>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> inbound-interface group <iface_group>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> inbound-interface group <iface_group>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> inbound-interface group <iface_group>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> inbound-interface group <iface_group>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> inbound-interface group <iface_group>",
  "desc": "Firewall — Match based on the inbound interface group. Prepend the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> outbound-interface name <iface>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> outbound-interface name <iface>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> outbound-interface name <iface>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> outbound-interface name <iface>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> outbound-interface name <iface>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> outbound-interface name <iface>",
  "desc": "Firewall — Match based on outbound interface. Wildcard * is supported."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> outbound-interface group <iface_group>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> outbound-interface group <iface_group>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> outbound-interface group <iface_group>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> outbound-interface group <iface_group>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> outbound-interface group <iface_group>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> outbound-interface group <iface_group>",
  "desc": "Firewall — Match based on outbound interface group. Prepend the character !"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set firewall ipv4 forward filter rule <1-999999> ipsec [match-ipsec-in | match-ipsec-out…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> ipsec [match-ipsec-in | match-ipsec-out | match-none-in | match-none-out]",
  "desc": "VPN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set firewall ipv4 input filter rule <1-999999> ipsec [match-ipsec-in | match-none-in]",
  "cmd": "set firewall ipv4 input filter rule <1-999999> ipsec [match-ipsec-in | match-none-in]",
  "desc": "VPN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set firewall ipv4 output filter rule <1-999999> ipsec [match-ipsec-out | match-none-out]",
  "cmd": "set firewall ipv4 output filter rule <1-999999> ipsec [match-ipsec-out | match-none-out]",
  "desc": "VPN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set firewall ipv4 name <name> rule <1-999999> ipsec [match-ipsec-in | match-ipsec-out | m…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> ipsec [match-ipsec-in | match-ipsec-out | match-none-in | match-none-out]",
  "desc": "VPN — Match based on ipsec."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> limit burst <0-4294967295>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> limit burst <0-4294967295>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> limit burst <0-4294967295>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> limit burst <0-4294967295>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> limit burst <0-4294967295>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> limit burst <0-4294967295>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> limit burst <0-4294967295>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> limit burst <0-4294967295>",
  "desc": "Firewall — Match based on the maximum number of packets to allow in excess of rate."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> limit rate <text>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> limit rate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> limit rate <text>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> limit rate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> limit rate <text>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> limit rate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> limit rate <text>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> limit rate <text>",
  "desc": "Firewall — Specify the maximum average rate as **integer/unit**. For example: **5/minutes**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> packet-length <text>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> packet-length <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> packet-length <text>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> packet-length <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> packet-length <text>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> packet-length <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> packet-length <text>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> packet-length <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> packet-length-exclude <text>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> packet-length-exclude <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> packet-length-exclude <text>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> packet-length-exclude <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> packet-length-exclude <text>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> packet-length-exclude <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> packet-length-exclude <text>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> packet-length-exclude <text>",
  "desc": "Firewall — Match based on packet length. Specify multiple values from 1 to 65535 and ranges."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set firewall ipv4 forward filter rule <1-999999> packet-type [broadcast | host | multicas…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> packet-type [broadcast | host | multicast | other]",
  "desc": "Multicast · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set firewall ipv4 input filter rule <1-999999> packet-type [broadcast | host | multicast…",
  "cmd": "set firewall ipv4 input filter rule <1-999999> packet-type [broadcast | host | multicast | other]",
  "desc": "Multicast · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set firewall ipv4 output filter rule <1-999999> packet-type [broadcast | host | multicast…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> packet-type [broadcast | host | multicast | other]",
  "desc": "Multicast · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set firewall ipv4 name <name> rule <1-999999> packet-type [broadcast | host | multicast |…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> packet-type [broadcast | host | multicast | other]",
  "desc": "Multicast — Match based on the packet type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> protocol [<text> | <0-255> | all | tcp_u…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> protocol [<text> | <0-255> | all | tcp_udp]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> protocol [<text> | <0-255> | all | tcp_udp]",
  "cmd": "set firewall ipv4 input filter rule <1-999999> protocol [<text> | <0-255> | all | tcp_udp]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> protocol [<text> | <0-255> | all | tcp_ud…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> protocol [<text> | <0-255> | all | tcp_udp]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> protocol [<text> | <0-255> | all | tcp_udp]",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> protocol [<text> | <0-255> | all | tcp_udp]",
  "desc": "Firewall — Match based on protocol number or name as defined in /etc/protocols. Special names are all for all protocols and tcp_udp for TCP and UDP based packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> recent count <1-255>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> recent count <1-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> recent count <1-255>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> recent count <1-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> recent count <1-255>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> recent count <1-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> recent count <1-255>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> recent count <1-255>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> recent time [second | minute | hour]",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> recent time [second | minute | hour]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> recent time [second | minute | hour]",
  "cmd": "set firewall ipv4 input filter rule <1-999999> recent time [second | minute | hour]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> recent time [second | minute | hour]",
  "cmd": "set firewall ipv4 output filter rule <1-999999> recent time [second | minute | hour]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> recent time [second | minute | hour]",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> recent time [second | minute | hour]",
  "desc": "Firewall — Match based on recently seen sources."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> tcp flags [not] <text>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> tcp flags [not] <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> tcp flags [not] <text>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> tcp flags [not] <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> tcp flags [not] <text>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> tcp flags [not] <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> tcp flags [not] <text>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> tcp flags [not] <text>",
  "desc": "Firewall — Specify TCP flags. Allowed values are ack, cwr, ecn, fin, psh, rst, syn, and urg."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> state [established | invalid | new | rel…",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> state [established | invalid | new | related]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> state [established | invalid | new | relat…",
  "cmd": "set firewall ipv4 input filter rule <1-999999> state [established | invalid | new | related]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> state [established | invalid | new | rela…",
  "cmd": "set firewall ipv4 output filter rule <1-999999> state [established | invalid | new | related]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> state [established | invalid | new | relate…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> state [established | invalid | new | related]",
  "desc": "Firewall — Match against the state of a packet."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> time startdate <text>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> time startdate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> time startdate <text>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> time startdate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> time startdate <text>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> time startdate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> time startdate <text>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> time startdate <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> time starttime <text>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> time starttime <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> time starttime <text>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> time starttime <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> time starttime <text>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> time starttime <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> time starttime <text>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> time starttime <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> time stopdate <text>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> time stopdate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> time stopdate <text>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> time stopdate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> time stopdate <text>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> time stopdate <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> time stopdate <text>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> time stopdate <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> time stoptime <text>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> time stoptime <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> time stoptime <text>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> time stoptime <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> time stoptime <text>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> time stoptime <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> time stoptime <text>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> time stoptime <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> time weekdays <text>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> time weekdays <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> time weekdays <text>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> time weekdays <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> time weekdays <text>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> time weekdays <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> time weekdays <text>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> time weekdays <text>",
  "desc": "Firewall — Time to match the defined rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> ttl <eq | gt | lt> <0-255>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> ttl <eq | gt | lt> <0-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> ttl <eq | gt | lt> <0-255>",
  "cmd": "set firewall ipv4 input filter rule <1-999999> ttl <eq | gt | lt> <0-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> ttl <eq | gt | lt> <0-255>",
  "cmd": "set firewall ipv4 output filter rule <1-999999> ttl <eq | gt | lt> <0-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> ttl <eq | gt | lt> <0-255>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> ttl <eq | gt | lt> <0-255>",
  "desc": "Firewall — Match the time to live parameter, where 'eq' means 'equal', 'gt' means 'greater than', and 'lt' means 'less than'."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 prerouting raw rule <1-999999> set dscp <0-63>",
  "cmd": "set firewall ipv4 prerouting raw rule <1-999999> set dscp <0-63>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> set dscp <0-63>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> set dscp <0-63>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output [filter | raw] rule <1-999999> set dscp <0-63>",
  "cmd": "set firewall ipv4 output [filter | raw] rule <1-999999> set dscp <0-63>",
  "desc": "ACL — Set a specific value of Differentiated Services Codepoint (DSCP)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 prerouting raw rule <1-999999> set mark <1-2147483647>",
  "cmd": "set firewall ipv4 prerouting raw rule <1-999999> set mark <1-2147483647>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> set mark <1-2147483647>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> set mark <1-2147483647>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output [filter | raw] rule <1-999999> set mark <1-2147483647>",
  "cmd": "set firewall ipv4 output [filter | raw] rule <1-999999> set mark <1-2147483647>",
  "desc": "ACL — Set a specific packet mark value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 prerouting raw rule <1-999999> set tcp-mss <500-1460>",
  "cmd": "set firewall ipv4 prerouting raw rule <1-999999> set tcp-mss <500-1460>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> set tcp-mss <500-1460>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> set tcp-mss <500-1460>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output [filter | raw] rule <1-999999> set tcp-mss <500-1460>",
  "cmd": "set firewall ipv4 output [filter | raw] rule <1-999999> set tcp-mss <500-1460>",
  "desc": "ACL — Set the TCP-MSS (TCP maximum segment size) for the connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 prerouting raw rule <1-999999> set ttl <0-255>",
  "cmd": "set firewall ipv4 prerouting raw rule <1-999999> set ttl <0-255>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> set ttl <0-255>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> set ttl <0-255>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output [filter | raw] rule <1-999999> set ttl <0-255>",
  "cmd": "set firewall ipv4 output [filter | raw] rule <1-999999> set ttl <0-255>",
  "desc": "ACL — Set the TTL (Time to Live) value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> set connection-mark <0-2147483647>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> set connection-mark <0-2147483647>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output [filter | raw] rule <1-999999> set connection-mark <0-2147483647>",
  "cmd": "set firewall ipv4 output [filter | raw] rule <1-999999> set connection-mark <0-2147483647>",
  "desc": "ACL — Set connection mark value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 [input | forward] filter rule <1-999999> action synproxy",
  "cmd": "set firewall ipv4 [input | forward] filter rule <1-999999> action synproxy",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 [input | forward] filter rule <1-999999> protocol tcp",
  "cmd": "set firewall ipv4 [input | forward] filter rule <1-999999> protocol tcp",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 [input | forward] filter rule <1-999999> synproxy tcp mss <501-65535>",
  "cmd": "set firewall ipv4 [input | forward] filter rule <1-999999> synproxy tcp mss <501-65535>",
  "desc": "ACL — Set the TCP-MSS (maximum segment size) for the connection"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 [input | forward] filter rule <1-999999> synproxy tcp window-scale <1-1…",
  "cmd": "set firewall ipv4 [input | forward] filter rule <1-999999> synproxy tcp window-scale <1-14>",
  "desc": "ACL — Set the window scale factor for TCP window scaling"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show firewall ipv4 [forward | input | output] filter",
  "cmd": "show firewall ipv4 [forward | input | output] filter",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall ipv4 name <name>",
  "cmd": "show firewall ipv4 name <name>",
  "desc": "Firewall — This command will give an overview of a single rule-set. :::{code-block} none vyos@vyos:~$ show firewall ipv4 input filter Ruleset Information --------------------------------- IPv4 Firewall \"input filter\" Rule Action P…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show firewall ipv4 [forward | input | output] filter rule <1-999999>",
  "cmd": "show firewall ipv4 [forward | input | output] filter rule <1-999999>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall ipv4 name <name> rule <1-999999>",
  "cmd": "show firewall ipv4 name <name> rule <1-999999>",
  "desc": "Firewall — This command gives an overview of a rule in a single rule-set, plus information for default action."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show log firewall ipv4",
  "cmd": "show log firewall ipv4",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show log firewall ipv4 [forward | input | output | name]",
  "cmd": "show log firewall ipv4 [forward | input | output | name]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show log firewall ipv4 [forward | input | output] filter",
  "cmd": "show log firewall ipv4 [forward | input | output] filter",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show log firewall ipv4 name <name>",
  "cmd": "show log firewall ipv4 name <name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show log firewall ipv4 [forward | input | output] filter rule <rule>",
  "cmd": "show log firewall ipv4 [forward | input | output] filter rule <rule>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show log firewall ipv4 name <name> rule <rule>",
  "cmd": "show log firewall ipv4 name <name> rule <rule>",
  "desc": "Firewall — Show the logs of all firewall; show all IPv4 firewall logs; show all logs for particular hook; show all logs for particular hook and priority; show all logs for particular custom chain; show logs for specific rule-set."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge <options>",
  "cmd": "set firewall bridge <options>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999> action [accept | continue | drop | jum…",
  "cmd": "set firewall bridge forward filter rule <1-999999> action [accept | continue | drop | jump | queue | return]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999> action [accept | continue | drop | jump…",
  "cmd": "set firewall bridge input filter rule <1-999999> action [accept | continue | drop | jump | queue | return]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999> action [accept | continue | drop | jump…",
  "cmd": "set firewall bridge output filter rule <1-999999> action [accept | continue | drop | jump | queue | return]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999> action [accept | continue | drop |…",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> action [accept | continue | drop | jump | notrack | queue | return]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999> action [accept | continue | drop | jump |…",
  "cmd": "set firewall bridge name <name> rule <1-999999> action [accept | continue | drop | jump | queue | return]",
  "desc": "Firewall — This required setting defines the action of the current rule. If action is set to jump, then jump-target is also needed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999> jump-target <text>",
  "cmd": "set firewall bridge forward filter rule <1-999999> jump-target <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999> jump-target <text>",
  "cmd": "set firewall bridge input filter rule <1-999999> jump-target <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999> jump-target <text>",
  "cmd": "set firewall bridge output filter rule <1-999999> jump-target <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999> jump-target <text>",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> jump-target <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999> jump-target <text>",
  "cmd": "set firewall bridge name <name> rule <1-999999> jump-target <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999> queue <0-65535>",
  "cmd": "set firewall bridge forward filter rule <1-999999> queue <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999> queue <0-65535>",
  "cmd": "set firewall bridge input filter rule <1-999999> queue <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999> queue <0-65535>",
  "cmd": "set firewall bridge output filter rule <1-999999> queue <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999> queue <0-65535>",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> queue <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999> queue <0-65535>",
  "cmd": "set firewall bridge name <name> rule <1-999999> queue <0-65535>",
  "desc": "Firewall — Also, if action is set to queue, use next command to specify the queue options. Possible options are bypass and fanout:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999> queue-options bypass",
  "cmd": "set firewall bridge forward filter rule <1-999999> queue-options bypass",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999> queue-options bypass",
  "cmd": "set firewall bridge input filter rule <1-999999> queue-options bypass",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999> queue-options bypass",
  "cmd": "set firewall bridge output filter rule <1-999999> queue-options bypass",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999> queue-options bypass",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> queue-options bypass",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999> queue-options bypass",
  "cmd": "set firewall bridge name <name> rule <1-999999> queue-options bypass",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999> queue-options fanout",
  "cmd": "set firewall bridge forward filter rule <1-999999> queue-options fanout",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999> queue-options fanout",
  "cmd": "set firewall bridge input filter rule <1-999999> queue-options fanout",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999> queue-options fanout",
  "cmd": "set firewall bridge output filter rule <1-999999> queue-options fanout",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999> queue-options fanout",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> queue-options fanout",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999> queue-options fanout",
  "cmd": "set firewall bridge name <name> rule <1-999999> queue-options fanout",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter default-action [accept | drop]",
  "cmd": "set firewall bridge forward filter default-action [accept | drop]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter default-action [accept | drop]",
  "cmd": "set firewall bridge input filter default-action [accept | drop]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter default-action [accept | drop]",
  "cmd": "set firewall bridge output filter default-action [accept | drop]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter default-action [accept | drop]",
  "cmd": "set firewall bridge prerouting filter default-action [accept | drop]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> default-action [accept | continue | drop | jump | reject…",
  "cmd": "set firewall bridge name <name> default-action [accept | continue | drop | jump | reject | return]",
  "desc": "Firewall — This sets the default action of the rule-set if a packet does not match any of the rules in that chain."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> default-jump-target <text>",
  "cmd": "set firewall bridge name <name> default-jump-target <text>",
  "desc": "Firewall — To be used only when default-action is set to jump. Use this command to specify jump target for default rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999> log",
  "cmd": "set firewall bridge forward filter rule <1-999999> log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999> log",
  "cmd": "set firewall bridge input filter rule <1-999999> log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999> log",
  "cmd": "set firewall bridge output filter rule <1-999999> log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999> log",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999> log",
  "cmd": "set firewall bridge name <name> rule <1-999999> log",
  "desc": "Firewall — Enable logging for the matched packet. If this configuration command is not present, then the log is not enabled."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter default-log",
  "cmd": "set firewall bridge forward filter default-log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter default-log",
  "cmd": "set firewall bridge input filter default-log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter default-log",
  "cmd": "set firewall bridge output filter default-log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter default-log",
  "cmd": "set firewall bridge prerouting filter default-log",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> default-log",
  "cmd": "set firewall bridge name <name> default-log",
  "desc": "Firewall — Use this command to enable the logging of the default action on the specified chain."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999> log-options level [emerg | alert | cri…",
  "cmd": "set firewall bridge forward filter rule <1-999999> log-options level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999> log-options level [emerg | alert | crit…",
  "cmd": "set firewall bridge input filter rule <1-999999> log-options level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999> log-options level [emerg | alert | crit…",
  "cmd": "set firewall bridge output filter rule <1-999999> log-options level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999> log-options level [emerg | alert |…",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> log-options level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999> log-options level [emerg | alert | crit |…",
  "cmd": "set firewall bridge name <name> rule <1-999999> log-options level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "Firewall — Define log-level. Only applicable if rule log is enabled."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999> log-options group <0-65535>",
  "cmd": "set firewall bridge forward filter rule <1-999999> log-options group <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999> log-options group <0-65535>",
  "cmd": "set firewall bridge input filter rule <1-999999> log-options group <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999> log-options group <0-65535>",
  "cmd": "set firewall bridge output filter rule <1-999999> log-options group <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999> log-options group <0-65535>",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> log-options group <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999> log-options group <0-65535>",
  "cmd": "set firewall bridge name <name> rule <1-999999> log-options group <0-65535>",
  "desc": "Firewall — Define the log group to send messages to. Only applicable if rule log is enabled."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999> log-options snapshot-length <0-9000>",
  "cmd": "set firewall bridge forward filter rule <1-999999> log-options snapshot-length <0-9000>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999> log-options snapshot-length <0-9000>",
  "cmd": "set firewall bridge input filter rule <1-999999> log-options snapshot-length <0-9000>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999> log-options snapshot-length <0-9000>",
  "cmd": "set firewall bridge output filter rule <1-999999> log-options snapshot-length <0-9000>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999> log-options snapshot-length <0-9000>",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> log-options snapshot-length <0-9000>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999> log-options snapshot-length <0-9000>",
  "cmd": "set firewall bridge name <name> rule <1-999999> log-options snapshot-length <0-9000>",
  "desc": "Firewall — Define length of packet payload to include in netlink message. Only applicable if rule log is enabled and the log group is defined."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999> log-options queue-threshold <0-65535>",
  "cmd": "set firewall bridge forward filter rule <1-999999> log-options queue-threshold <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999> log-options queue-threshold <0-65535>",
  "cmd": "set firewall bridge input filter rule <1-999999> log-options queue-threshold <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999> log-options queue-threshold <0-65535>",
  "cmd": "set firewall bridge output filter rule <1-999999> log-options queue-threshold <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999> log-options queue-threshold <0-6553…",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> log-options queue-threshold <0-65535>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999> log-options queue-threshold <0-65535>",
  "cmd": "set firewall bridge name <name> rule <1-999999> log-options queue-threshold <0-65535>",
  "desc": "Firewall — Define the number of packets to queue inside the kernel before sending them to userspace."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> description <text>",
  "cmd": "set firewall bridge name <name> description <text>",
  "desc": "Firewall — Provide a rule-set description to a custom firewall chain."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999> description <text>",
  "cmd": "set firewall bridge forward filter rule <1-999999> description <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999> description <text>",
  "cmd": "set firewall bridge input filter rule <1-999999> description <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999> description <text>",
  "cmd": "set firewall bridge output filter rule <1-999999> description <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999> description <text>",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> description <text>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999> description <text>",
  "cmd": "set firewall bridge name <name> rule <1-999999> description <text>",
  "desc": "Firewall — Provide a description for each rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999> disable",
  "cmd": "set firewall bridge forward filter rule <1-999999> disable",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999> disable",
  "cmd": "set firewall bridge input filter rule <1-999999> disable",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999> disable",
  "cmd": "set firewall bridge output filter rule <1-999999> disable",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999> disable",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> disable",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999> disable",
  "cmd": "set firewall bridge name <name> rule <1-999999> disable",
  "desc": "Firewall — Command for disabling a rule but keep it in the configuration."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999> ethernet-type [802.1q | 802.1ad | arp…",
  "cmd": "set firewall bridge forward filter rule <1-999999> ethernet-type [802.1q | 802.1ad | arp | ipv4 | ipv6]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999> ethernet-type [802.1q | 802.1ad | arp |…",
  "cmd": "set firewall bridge input filter rule <1-999999> ethernet-type [802.1q | 802.1ad | arp | ipv4 | ipv6]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999> ethernet-type [802.1q | 802.1ad | arp |…",
  "cmd": "set firewall bridge output filter rule <1-999999> ethernet-type [802.1q | 802.1ad | arp | ipv4 | ipv6]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999> ethernet-type [802.1q | 802.1ad | a…",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> ethernet-type [802.1q | 802.1ad | arp | ipv4 | ipv6]",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999> ethernet-type [802.1q | 802.1ad | arp | i…",
  "cmd": "set firewall bridge name <name> rule <1-999999> ethernet-type [802.1q | 802.1ad | arp | ipv4 | ipv6]",
  "desc": "Firewall — Match based on the Ethernet type of the packet."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge forward filter rule <1-999999> vlan ethernet-type [802.1q | 802.1ad |…",
  "cmd": "set firewall bridge forward filter rule <1-999999> vlan ethernet-type [802.1q | 802.1ad | arp | ipv4 | ipv6]",
  "desc": "VLAN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge input filter rule <1-999999> vlan ethernet-type [802.1q | 802.1ad | a…",
  "cmd": "set firewall bridge input filter rule <1-999999> vlan ethernet-type [802.1q | 802.1ad | arp | ipv4 | ipv6]",
  "desc": "VLAN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge output filter rule <1-999999> vlan ethernet-type [802.1q | 802.1ad |…",
  "cmd": "set firewall bridge output filter rule <1-999999> vlan ethernet-type [802.1q | 802.1ad | arp | ipv4 | ipv6]",
  "desc": "VLAN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge prerouting filter rule <1-999999> vlan ethernet-type [802.1q | 802.1a…",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> vlan ethernet-type [802.1q | 802.1ad | arp | ipv4 | ipv6]",
  "desc": "VLAN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge name <name> rule <1-999999> vlan ethernet-type [802.1q | 802.1ad | ar…",
  "cmd": "set firewall bridge name <name> rule <1-999999> vlan ethernet-type [802.1q | 802.1ad | arp | ipv4 | ipv6]",
  "desc": "VLAN — Match based on the Ethernet type of the packet when it is VLAN tagged."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge forward filter rule <1-999999> vlan id <0-4096>",
  "cmd": "set firewall bridge forward filter rule <1-999999> vlan id <0-4096>",
  "desc": "VLAN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge input filter rule <1-999999> vlan id <0-4096>",
  "cmd": "set firewall bridge input filter rule <1-999999> vlan id <0-4096>",
  "desc": "VLAN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge output filter rule <1-999999> vlan id <0-4096>",
  "cmd": "set firewall bridge output filter rule <1-999999> vlan id <0-4096>",
  "desc": "VLAN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge prerouting filter rule <1-999999> vlan id <0-4096>",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> vlan id <0-4096>",
  "desc": "VLAN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge name <name> rule <1-999999> vlan id <0-4096>",
  "cmd": "set firewall bridge name <name> rule <1-999999> vlan id <0-4096>",
  "desc": "VLAN — Match based on VLAN identifier. Range is also supported."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge forward filter rule <1-999999> vlan priority <0-7>",
  "cmd": "set firewall bridge forward filter rule <1-999999> vlan priority <0-7>",
  "desc": "VLAN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge input filter rule <1-999999> vlan priority <0-7>",
  "cmd": "set firewall bridge input filter rule <1-999999> vlan priority <0-7>",
  "desc": "VLAN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge output filter rule <1-999999> vlan priority <0-7>",
  "cmd": "set firewall bridge output filter rule <1-999999> vlan priority <0-7>",
  "desc": "VLAN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge prerouting filter rule <1-999999> vlan priority <0-7>",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> vlan priority <0-7>",
  "desc": "VLAN · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge name <name> rule <1-999999> vlan priority <0-7>",
  "cmd": "set firewall bridge name <name> rule <1-999999> vlan priority <0-7>",
  "desc": "VLAN — Match based on VLAN priority (Priority Code Point - PCP). Range is also supported."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge [prerouting | forward | output] filter rule <1-999999> set dscp <0-63>",
  "cmd": "set firewall bridge [prerouting | forward | output] filter rule <1-999999> set dscp <0-63>",
  "desc": "ACL — Set a specific value of Differentiated Services Codepoint (DSCP)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge [prerouting | forward | output] filter rule <1-999999> set mark <1-21…",
  "cmd": "set firewall bridge [prerouting | forward | output] filter rule <1-999999> set mark <1-2147483647>",
  "desc": "ACL — Set a specific packet mark value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge [prerouting | forward | output] filter rule <1-999999> set tcp-mss <5…",
  "cmd": "set firewall bridge [prerouting | forward | output] filter rule <1-999999> set tcp-mss <500-1460>",
  "desc": "ACL — Set the TCP-MSS (TCP maximum segment size) for the connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge [prerouting | forward | output] filter rule <1-999999> set ttl <0-255>",
  "cmd": "set firewall bridge [prerouting | forward | output] filter rule <1-999999> set ttl <0-255>",
  "desc": "ACL — Set the TTL (Time to Live) value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge [prerouting | forward | output] filter rule <1-999999> set hop-limit…",
  "cmd": "set firewall bridge [prerouting | forward | output] filter rule <1-999999> set hop-limit <0-255>",
  "desc": "ACL — Set hop limit value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge [forward | output] filter rule <1-999999> set connection-mark <0-2147…",
  "cmd": "set firewall bridge [forward | output] filter rule <1-999999> set connection-mark <0-2147483647>",
  "desc": "ACL — Set connection mark value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options apply-to-bridged-traffic ipv4",
  "cmd": "set firewall global-options apply-to-bridged-traffic ipv4",
  "desc": "Firewall — This command enables the IPv4 firewall for bridged traffic. If this option is used, packets are also parsed by rules defined in set firewall ipv4 ..."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options apply-to-bridged-traffic ipv6",
  "cmd": "set firewall global-options apply-to-bridged-traffic ipv6",
  "desc": "Firewall — This command enables the IPv6 firewall for bridged traffic. If this option is used, packets are also parsed by rules defined in set firewall ipv6 ..."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall bridge",
  "cmd": "show firewall bridge",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show firewall bridge forward filter",
  "cmd": "show firewall bridge forward filter",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show firewall bridge forward filter rule <rule>",
  "cmd": "show firewall bridge forward filter rule <rule>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall bridge name <name>",
  "cmd": "show firewall bridge name <name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall bridge name <name> rule <rule>",
  "cmd": "show firewall bridge name <name> rule <rule>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show log firewall bridge",
  "cmd": "show log firewall bridge",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show log firewall bridge forward",
  "cmd": "show log firewall bridge forward",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show log firewall bridge forward filter",
  "cmd": "show log firewall bridge forward filter",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show log firewall bridge name <name>",
  "cmd": "show log firewall bridge name <name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show log firewall bridge forward filter rule <rule>",
  "cmd": "show log firewall bridge forward filter rule <rule>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show log firewall bridge name <name> rule <rule>",
  "cmd": "show log firewall bridge name <name> rule <rule>",
  "desc": "Firewall — Show the logs of all firewall; show all bridge firewall logs; show all logs for forward hook; show all logs for forward hook and priority filter; show all logs for particular custom chain; show logs for specific Rule-Se…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group address-group <name> address [address | address range]",
  "cmd": "set firewall group address-group <name> address [address | address range]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group ipv6-address-group <name> address <address>",
  "cmd": "set firewall group ipv6-address-group <name> address <address>",
  "desc": "Firewall — Define an IPv4 or IPv6 address group. :::{code-block} none set firewall group address-group ADR-INSIDE-v4 address 192.168.0.1 set firewall group address-group ADR-INSIDE-v4 address 10.0.0.1-10.0.0.8 set firewall group i…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group address-group <name> description <text>",
  "cmd": "set firewall group address-group <name> description <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group ipv6-address-group <name> description <text>",
  "cmd": "set firewall group ipv6-address-group <name> description <text>",
  "desc": "Firewall — Provide an IPv4 or IPv6 address group description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group remote-group <name> url <http(s) url>",
  "cmd": "set firewall group remote-group <name> url <http(s) url>",
  "desc": "Firewall — Specify a remote list of IPv4 and/or IPv6 addresses, ranges, and CIDRs to fetch."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group remote-group <name> description <text>",
  "cmd": "set firewall group remote-group <name> description <text>",
  "desc": "Firewall — Set a description for a remote group."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group network-group <name> network <CIDR>",
  "cmd": "set firewall group network-group <name> network <CIDR>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group ipv6-network-group <name> network <CIDR>",
  "cmd": "set firewall group ipv6-network-group <name> network <CIDR>",
  "desc": "Firewall — Define an IPv4 or IPv6 network group. :::{code-block} none set firewall group network-group NET-INSIDE-v4 network 192.168.0.0/24 set firewall group network-group NET-INSIDE-v4 network 192.168.1.0/24 set firewall group i…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group network-group <name> description <text>",
  "cmd": "set firewall group network-group <name> description <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group ipv6-network-group <name> description <text>",
  "cmd": "set firewall group ipv6-network-group <name> description <text>",
  "desc": "Firewall — Provide an IPv4 or IPv6 network group description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group interface-group <name> interface <text>",
  "cmd": "set firewall group interface-group <name> interface <text>",
  "desc": "Firewall — Define an interface group. Wildcard * is supported."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group interface-group <name> description <text>",
  "cmd": "set firewall group interface-group <name> description <text>",
  "desc": "Firewall — Provide an interface group description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group port-group <name> port [portname | portnumber | startport-endport]",
  "cmd": "set firewall group port-group <name> port [portname | portnumber | startport-endport]",
  "desc": "Firewall — Define a port group. A port name can be any name defined in /etc/services."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group port-group <name> description <text>",
  "cmd": "set firewall group port-group <name> description <text>",
  "desc": "Firewall — Provide a port group description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group mac-group <name> mac-address <mac-address>",
  "cmd": "set firewall group mac-group <name> mac-address <mac-address>",
  "desc": "Firewall — Define a mac group."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group mac-group <name> description <text>",
  "cmd": "set firewall group mac-group <name> description <text>",
  "desc": "Firewall — Provide a MAC group description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group domain-group <name> address <domain>",
  "cmd": "set firewall group domain-group <name> address <domain>",
  "desc": "Firewall — Define a domain group."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group domain-group <name> description <text>",
  "cmd": "set firewall group domain-group <name> description <text>",
  "desc": "Firewall — Provide a domain group description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group dynamic-group address-group <name>",
  "cmd": "set firewall group dynamic-group address-group <name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group dynamic-group ipv6-address-group <name>",
  "cmd": "set firewall group dynamic-group ipv6-address-group <name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group dynamic-group address-group <name> description <text>",
  "cmd": "set firewall group dynamic-group address-group <name> description <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group dynamic-group ipv6-address-group <name> description <text>",
  "cmd": "set firewall group dynamic-group ipv6-address-group <name> description <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 [forward | input | output] filter rule <1-999999> add-address-to-group…",
  "cmd": "set firewall ipv4 [forward | input | output] filter rule <1-999999> add-address-to-group destination-address address-group <name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> add-address-to-group destination-address ad…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> add-address-to-group destination-address address-group <name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 [forward | input | output] filter rule <1-999999> add-address-to-group…",
  "cmd": "set firewall ipv6 [forward | input | output] filter rule <1-999999> add-address-to-group destination-address address-group <name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> add-address-to-group destination-address ad…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> add-address-to-group destination-address address-group <name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 [forward | input | output] filter rule <1-999999> add-address-to-group…",
  "cmd": "set firewall ipv4 [forward | input | output] filter rule <1-999999> add-address-to-group source-address address-group <name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> add-address-to-group source-address address…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> add-address-to-group source-address address-group <name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 [forward | input | output] filter rule <1-999999> add-address-to-group…",
  "cmd": "set firewall ipv6 [forward | input | output] filter rule <1-999999> add-address-to-group source-address address-group <name>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> add-address-to-group source-address address…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> add-address-to-group source-address address-group <name>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 [forward | input | output] filter rule <1-999999> add-address-to-group…",
  "cmd": "set firewall ipv4 [forward | input | output] filter rule <1-999999> add-address-to-group [destination-address | source-address] timeout <timeout>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> add-address-to-group [destination-address |…",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> add-address-to-group [destination-address | source-address] timeout <timeout>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 [forward | input | output] filter rule <1-999999> add-address-to-group…",
  "cmd": "set firewall ipv6 [forward | input | output] filter rule <1-999999> add-address-to-group [destination-address | source-address] timeout <timeout>",
  "desc": "ACL · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> add-address-to-group [destination-address |…",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> add-address-to-group [destination-address | source-address] timeout <timeout>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall group",
  "cmd": "show firewall group",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall flowtable <flow_table_name> interface <iface>",
  "cmd": "set firewall flowtable <flow_table_name> interface <iface>",
  "desc": "Firewall — Specify interfaces to use in the flowtable."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall flowtable <flow_table_name> description <text>",
  "cmd": "set firewall flowtable <flow_table_name> description <text>",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall flowtable <flow_table_name> offload <hardware | software>",
  "cmd": "set firewall flowtable <flow_table_name> offload <hardware | software>",
  "desc": "Firewall — Specify the offload type the flowtable uses: hardware or software. The default is software offload."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall [ipv4 | ipv6] forward filter rule <1-999999> action offload",
  "cmd": "set firewall [ipv4 | ipv6] forward filter rule <1-999999> action offload",
  "desc": "ACL — Create a firewall rule in the forward chain with the action set to offload."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall [ipv4 | ipv6] forward filter rule <1-999999> offload-target <flowtable>",
  "cmd": "set firewall [ipv4 | ipv6] forward filter rule <1-999999> offload-target <flowtable>",
  "desc": "ACL — Create a firewall rule in the forward chain and specify which flowtable to use. Only applicable if the action is offload."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options all-ping [enable | disable]",
  "cmd": "set firewall global-options all-ping [enable | disable]",
  "desc": "Firewall — By default, when VyOS receives an ICMP echo request packet destined for itself, it answers with an ICMP echo reply, unless your firewall prevents it."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options apply-to-bridged-traffic [ipv4 | ipv6]",
  "cmd": "set firewall global-options apply-to-bridged-traffic [ipv4 | ipv6]",
  "desc": "Firewall — Apply IPv4 or IPv6 firewall rules to bridged traffic."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options broadcast-ping [enable | disable]",
  "cmd": "set firewall global-options broadcast-ping [enable | disable]",
  "desc": "Firewall — Enable or disable the response to ICMP broadcast messages. The system alters the following parameter: * net.ipv4.icmp_echo_ignore_broadcasts"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options ip-src-route [enable | disable]",
  "cmd": "set firewall global-options ip-src-route [enable | disable]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options ipv6-src-route [enable | disable]",
  "cmd": "set firewall global-options ipv6-src-route [enable | disable]",
  "desc": "Firewall — Set whether VyOS accepts packets with a source route option. The following sysctl parameters will be changed: * net.ipv4.conf.all.accept_source_route * net.ipv6.conf.all.accept_source_route"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options receive-redirects [enable | disable]",
  "cmd": "set firewall global-options receive-redirects [enable | disable]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options ipv6-receive-redirects [enable | disable]",
  "cmd": "set firewall global-options ipv6-receive-redirects [enable | disable]",
  "desc": "Firewall — Allow VyOS to accept ICMPv4 and ICMPv6 redirect messages. The following sysctl parameters will be changed: * net.ipv4.conf.all.accept_redirects * net.ipv6.conf.all.accept_redirects"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options send-redirects [enable | disable]",
  "cmd": "set firewall global-options send-redirects [enable | disable]",
  "desc": "Firewall — Allow VyOS to send ICMPv4 redirect messages. The following sysctl parameter will be changed: * net.ipv4.conf.all.send_redirects"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options log-martians [enable | disable]",
  "cmd": "set firewall global-options log-martians [enable | disable]",
  "desc": "Firewall — Allow VyOS to log martian IPv4 packets. The following sysctl parameter will be changed: * net.ipv4.conf.all.log_martians"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options source-validation [strict | loose | disable]",
  "cmd": "set firewall global-options source-validation [strict | loose | disable]",
  "desc": "Firewall — Set the IPv4 source validation mode. The following sysctl parameter will be changed: * net.ipv4.conf.all.rp_filter"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options syn-cookies [enable | disable]",
  "cmd": "set firewall global-options syn-cookies [enable | disable]",
  "desc": "Firewall — Allow VyOS to use IPv4 TCP SYN Cookies. The following sysctl parameter will be changed: * net.ipv4.tcp_syncookies"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options twa-hazards-protection [enable | disable]",
  "cmd": "set firewall global-options twa-hazards-protection [enable | disable]",
  "desc": "Firewall — Enable or disable VyOS 1337 conformance. The following sysctl parameter will be changed: * net.ipv4.tcp_rfc1337"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options state-policy established action [accept | drop | reject]",
  "cmd": "set firewall global-options state-policy established action [accept | drop | reject]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options state-policy established log",
  "cmd": "set firewall global-options state-policy established log",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options state-policy established log-level [emerg | alert | crit | er…",
  "cmd": "set firewall global-options state-policy established log-level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "Firewall — Set the global setting for an established connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options state-policy invalid action [accept | drop | reject]",
  "cmd": "set firewall global-options state-policy invalid action [accept | drop | reject]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options state-policy invalid log",
  "cmd": "set firewall global-options state-policy invalid log",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options state-policy invalid log-level [emerg | alert | crit | err |…",
  "cmd": "set firewall global-options state-policy invalid log-level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "Firewall — Set the global setting for invalid packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options state-policy related action [accept | drop | reject]",
  "cmd": "set firewall global-options state-policy related action [accept | drop | reject]",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options state-policy related log",
  "cmd": "set firewall global-options state-policy related log",
  "desc": "Firewall · firewall"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options state-policy related log-level [emerg | alert | crit | err |…",
  "cmd": "set firewall global-options state-policy related log-level [emerg | alert | crit | err | warn | notice | info | debug]",
  "desc": "Firewall — Set the global setting for related connections."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options timeout icmp <1-21474836>",
  "cmd": "set firewall global-options timeout icmp <1-21474836>",
  "desc": "Firewall — :defaultvalue:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options timeout other <1-21474836>",
  "cmd": "set firewall global-options timeout other <1-21474836>",
  "desc": "Firewall — :defaultvalue:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options timeout tcp close <1-21474836>",
  "cmd": "set firewall global-options timeout tcp close <1-21474836>",
  "desc": "Firewall — :defaultvalue:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options timeout tcp close-wait <1-21474836>",
  "cmd": "set firewall global-options timeout tcp close-wait <1-21474836>",
  "desc": "Firewall — :defaultvalue:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options timeout tcp established <1-21474836>",
  "cmd": "set firewall global-options timeout tcp established <1-21474836>",
  "desc": "Firewall — :defaultvalue:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options timeout tcp fin-wait <1-21474836>",
  "cmd": "set firewall global-options timeout tcp fin-wait <1-21474836>",
  "desc": "Firewall — :defaultvalue:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options timeout tcp last-ack <1-21474836>",
  "cmd": "set firewall global-options timeout tcp last-ack <1-21474836>",
  "desc": "Firewall — :defaultvalue:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options timeout tcp syn-recv <1-21474836>",
  "cmd": "set firewall global-options timeout tcp syn-recv <1-21474836>",
  "desc": "Firewall — :defaultvalue:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options timeout tcp syn-sent <1-21474836>",
  "cmd": "set firewall global-options timeout tcp syn-sent <1-21474836>",
  "desc": "Firewall — :defaultvalue:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options timeout tcp time-wait <1-21474836>",
  "cmd": "set firewall global-options timeout tcp time-wait <1-21474836>",
  "desc": "Firewall — :defaultvalue:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options timeout udp other <1-21474836>",
  "cmd": "set firewall global-options timeout udp other <1-21474836>",
  "desc": "Firewall — :defaultvalue:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options timeout udp stream <1-21474836>",
  "cmd": "set firewall global-options timeout udp stream <1-21474836>",
  "desc": "Firewall — :defaultvalue: Set the timeout in seconds for a protocol or state."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> image",
  "cmd": "set container name <name> image",
  "desc": "System — Sets the image name in the hub registry :::{code-block} none set container name mysql-server image mysql:8.0 ::: If a registry is not specified, Docker.io will be used as the container registry unless an alternative reg…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> entrypoint <entrypoint>",
  "cmd": "set container name <name> entrypoint <entrypoint>",
  "desc": "System — Override the default entrypoint from the image for a container."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> command <command>",
  "cmd": "set container name <name> command <command>",
  "desc": "System — Override the default command from the image for a container."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> arguments <arguments>",
  "cmd": "set container name <name> arguments <arguments>",
  "desc": "System — Set the command arguments for a container."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> host-name <hostname>",
  "cmd": "set container name <name> host-name <hostname>",
  "desc": "System — Set the host name for a container."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> allow-host-pid",
  "cmd": "set container name <name> allow-host-pid",
  "desc": "System — The container and the host share the same process namespace. This means that processes running on the host are visible inside the container, and processes inside the container are visible on the host."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> allow-host-networks",
  "cmd": "set container name <name> allow-host-networks",
  "desc": "System — Allow host networking in a container. The network stack of the container is not isolated from the host and will use the host IP."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> network <networkname>",
  "cmd": "set container name <name> network <networkname>",
  "desc": "System — Attaches user-defined network to a container. Only one network must be specified and must already exist."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> network <networkname> address <address>",
  "cmd": "set container name <name> network <networkname> address <address>",
  "desc": "System — Optionally set a specific static IPv4 or IPv6 address for the container. This address must be within the named network prefix."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> name-server <address>",
  "cmd": "set container name <name> name-server <address>",
  "desc": "System — Optionally set a custom name server. If a container network is used with DNS enabled, this setting will not have any effect."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> description <text>",
  "cmd": "set container name <name> description <text>",
  "desc": "System — Set a container description"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> environment <key> value <value>",
  "cmd": "set container name <name> environment <key> value <value>",
  "desc": "System — Add custom environment variables. Multiple environment variables are allowed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set container name <name> port <portname> source <portnumber>",
  "cmd": "set container name <name> port <portname> source <portnumber>",
  "desc": "Interfaces · container"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set container name <name> port <portname> destination <portnumber>",
  "cmd": "set container name <name> port <portname> destination <portnumber>",
  "desc": "Interfaces · container"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set container name <name> port <portname> protocol <tcp | udp>",
  "cmd": "set container name <name> port <portname> protocol <tcp | udp>",
  "desc": "Interfaces — Publish a port for the container. :::{code-block} none set container name zabbix-web-nginx-mysql port http source 80 set container name zabbix-web-nginx-mysql port http destination 8080 set container name zabbix-web-ngi…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> volume <volumename> source <path>",
  "cmd": "set container name <name> volume <volumename> source <path>",
  "desc": "System · container"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> volume <volumename> destination <path>",
  "cmd": "set container name <name> volume <volumename> destination <path>",
  "desc": "System — Mount a volume into the container :::{code-block} none set container name coredns volume 'corefile' source /config/coredns/Corefile set container name coredns volume 'corefile' destination /etc/Corefile :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> volume <volumename> mode <ro | rw>",
  "cmd": "set container name <name> volume <volumename> mode <ro | rw>",
  "desc": "System — Volume is either mounted as rw (read-write - default) or ro (read-only)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> tmpfs <tmpfsname> destination <path>",
  "cmd": "set container name <name> tmpfs <tmpfsname> destination <path>",
  "desc": "System — Mount a tmpfs *(ramdisk)* filesystem to the given path within the container."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> tmpfs <tmpfsname> size <MB>",
  "cmd": "set container name <name> tmpfs <tmpfsname> size <MB>",
  "desc": "System — Size in MB for tmpfs filesystem, maximum size is 64GB or 50% of the systems total available memory."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> uid <number>",
  "cmd": "set container name <name> uid <number>",
  "desc": "System · container"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> gid <number>",
  "cmd": "set container name <name> gid <number>",
  "desc": "System — Set the User ID or Group ID of the container"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> restart [no | on-failure | always]",
  "cmd": "set container name <name> restart [no | on-failure | always]",
  "desc": "System — Set the restart behavior of the container. - **no**: Do not restart containers on exit - **on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default) - **always**: Restart…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> cpu-quota <num>",
  "cmd": "set container name <name> cpu-quota <num>",
  "desc": "System — This specifies the number of CPU resources the container can use. Default is 0 for unlimited."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> memory <MB>",
  "cmd": "set container name <name> memory <MB>",
  "desc": "System — Constrain the memory available to the container. Default is 512 MB."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> device <devicename> source <path>",
  "cmd": "set container name <name> device <devicename> source <path>",
  "desc": "System · container"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> device <devicename> destination <path>",
  "cmd": "set container name <name> device <devicename> destination <path>",
  "desc": "System — Add a host device to the container."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> capability <text>",
  "cmd": "set container name <name> capability <text>",
  "desc": "System — Set container capabilities or permissions. - **net-admin**: Network operations (interface, firewall, routing tables) - **net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024) - **net-raw**:…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> sysctl parameter <parameter> value <value>",
  "cmd": "set container name <name> sysctl parameter <parameter> value <value>",
  "desc": "System — Set container sysctl values. The subset of possible parameters are: - Kernel Parameters: kernel.msgmax, kernel.msgmnb, kernel.msgmni, kernel.sem, kernel.shmall, kernel.shmmax, kernel.shmmni, kernel.shm_rmid_forced - Par…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> label <label> value <value>",
  "cmd": "set container name <name> label <label> value <value>",
  "desc": "System — Add metadata label for this container."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> disable",
  "cmd": "set container name <name> disable",
  "desc": "System — Disable a container."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> health-check",
  "cmd": "set container name <name> health-check",
  "desc": "System — Default health check is run for the container if defined by the image."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> health-check command <command>",
  "cmd": "set container name <name> health-check command <command>",
  "desc": "System — Override the default health check command from the image for a container."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> health-check interval <interval>",
  "cmd": "set container name <name> health-check interval <interval>",
  "desc": "System — Override the default health-check interval. For example: 60"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> health-check timeout <timeout>",
  "cmd": "set container name <name> health-check timeout <timeout>",
  "desc": "System — Override the default health-check timeout. For example: 10"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> health-check retries <retries>",
  "cmd": "set container name <name> health-check retries <retries>",
  "desc": "System — Number of health check retries before container is considered unhealthy. For example: 1"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container network <name>",
  "cmd": "set container network <name>",
  "desc": "System — Creates a named container network"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container network <name> description",
  "cmd": "set container network <name> description",
  "desc": "System — A brief description what this network is all about."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container network <name> prefix <ipv4|ipv6>",
  "cmd": "set container network <name> prefix <ipv4|ipv6>",
  "desc": "System — Define IPv4 and/or IPv6 prefix for a given network name. Both IPv4 and IPv6 can be used in parallel."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container network <name> mtu <number>",
  "cmd": "set container network <name> mtu <number>",
  "desc": "System — Configure MTU (Maximum Transmission Unit) for a given network. It is the size (in bytes) of the largest ethernet frame sent on this link."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container network <name> no-name-server",
  "cmd": "set container network <name> no-name-server",
  "desc": "System — Disable Domain Name System (DNS) plugin for this network."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container network <name> vrf <name>",
  "cmd": "set container network <name> vrf <name>",
  "desc": "System — Bind container network to a given VRF instance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container registry <name>",
  "cmd": "set container registry <name>",
  "desc": "System — Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, VyOS will use docker.io and quay.io as the container registry."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container registry <name> disable",
  "cmd": "set container registry <name> disable",
  "desc": "System — Disable a given container registry"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container registry <name> authentication username",
  "cmd": "set container registry <name> authentication username",
  "desc": "System · container"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container registry <name> authentication password",
  "cmd": "set container registry <name> authentication password",
  "desc": "System — Some container registries require credentials to be used. Credentials can be defined here and will only be used when adding a container image to the system."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container registry <name> insecure",
  "cmd": "set container registry <name> insecure",
  "desc": "System — Allow registry access over unencrypted HTTP or TLS connections with untrusted certificates."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container registry <name> mirror address <address>",
  "cmd": "set container registry <name> mirror address <address>",
  "desc": "System · container"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container registry <name> mirror host-name <host-name>",
  "cmd": "set container registry <name> mirror host-name <host-name>",
  "desc": "System · container"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set container registry <name> mirror port <port>",
  "cmd": "set container registry <name> mirror port <port>",
  "desc": "Interfaces · container"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container registry <name> mirror path <path>",
  "cmd": "set container registry <name> mirror path <path>",
  "desc": "System — Registry mirror, use (host-name|address)[:port][/path]. If you have mirror http://192.168.1.1:8080 for docker.io, you can use docker.io/some/repo or run podman pull docker.io/some/repo :::{code-block} none set container…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> log-driver [k8s-file | journald | none]",
  "cmd": "set container name <name> log-driver [k8s-file | journald | none]",
  "desc": "System — Set the default log driver for containers. - **k8s-file**: Log to a plain text file in Kubernetes-style format."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "add container image <containername>",
  "cmd": "add container image <containername>",
  "desc": "System — Pull a new image for container"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show container",
  "cmd": "show container",
  "desc": "Troubleshooting — Show the list of all active containers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show container image",
  "cmd": "show container image",
  "desc": "Troubleshooting — Show the local container images."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show container log <containername>",
  "cmd": "show container log <containername>",
  "desc": "Troubleshooting — Show logs from a given container"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show container network",
  "cmd": "show container network",
  "desc": "Troubleshooting — Show a list available container networks"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "restart container <containername>",
  "cmd": "restart container <containername>",
  "desc": "System — Restart a given container"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "update container image <containername>",
  "cmd": "update container image <containername>",
  "desc": "System — Update container image"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "delete container image <image id|all> [force]",
  "cmd": "delete container image <image id|all> [force]",
  "desc": "System — Delete a particular container image based on it's image ID. You can also delete all container images at once."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog marker interval <number>",
  "cmd": "set system syslog marker interval <number>",
  "desc": "Logging — **Configure the interval, in seconds, for sending syslog mark messages.** Syslog mark messages confirm the logging service is operational."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog marker disable",
  "cmd": "set system syslog marker disable",
  "desc": "Logging — Disable sending syslog mark messages."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog preserve-fqdn",
  "cmd": "set system syslog preserve-fqdn",
  "desc": "Logging — **Configure how the logging device's hostname appears in log messages sent to a remote syslog server.** If configured, the device includes its FQDN (Fully Qualified Domain Name) in log messages, even if the syslog serve…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog local <filename> facility <keyword> level <keyword>",
  "cmd": "set system syslog local <filename> facility <keyword> level <keyword>",
  "desc": "Logging — **Configure syslog to save log messages for a specific facility and severity level to \\\\/var/log/messages\\\\.** Refer to the tables below for valid facility and severity options."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog console facility <keyword> level <keyword>",
  "cmd": "set system syslog console facility <keyword> level <keyword>",
  "desc": "Logging — **Configure syslog to send log messages for a specific facility and severity level to the device's console.** Refer to the tables below for valid facility and severity options."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog remote <address> facility <keyword> level <keyword>",
  "cmd": "set system syslog remote <address> facility <keyword> level <keyword>",
  "desc": "Logging — **Configure log transmission to the remote syslog server for a specific facility and severity level.** The server’s address can be specified using either a FQDN (Fully Qualified Domain Name) or an IP address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog remote <address> protocol <udp | tcp>",
  "cmd": "set system syslog remote <address> protocol <udp | tcp>",
  "desc": "Logging — **Configure the protocol for log transmission.** The protocol can be either UDP or TCP."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog remote <address> port <port>",
  "cmd": "set system syslog remote <address> port <port>",
  "desc": "Logging — **Configure the port for log transmission.** By default, the standard port 514 is used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog remote <address> format include-timezone",
  "cmd": "set system syslog remote <address> format include-timezone",
  "desc": "Logging — **Configure log transmission in the RFC 5424 format.** The RFC 5424 format includes the timezone in the timestamp."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog remote <address> format octet-counted",
  "cmd": "set system syslog remote <address> format octet-counted",
  "desc": "Logging — **Enable octet-counted framing for log transmission.** When enabled, multi-line log messages are sent without splitting."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog remote <address> vrf <name>",
  "cmd": "set system syslog remote <address> vrf <name>",
  "desc": "Logging — Configure the VRF (Virtual Routing and Forwarding) instance for log transmission."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog remote <address> source-address <address>",
  "cmd": "set system syslog remote <address> source-address <address>",
  "desc": "Logging — Configure the source IP address (IPv4 or IPv6) for log transmission."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog remote <address> tls",
  "cmd": "set system syslog remote <address> tls",
  "desc": "Logging — Enable TLS-encrypted remote logging."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog remote <address> tls ca-certificate <ca_name>",
  "cmd": "set system syslog remote <address> tls ca-certificate <ca_name>",
  "desc": "Logging — **Configure the** CA (Certificate Authority) **certificate.** The syslog client uses the CA (Certificate Authority) certificate to verify the identity of the remote syslog server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog remote <address> tls certificate <cert_name>",
  "cmd": "set system syslog remote <address> tls certificate <cert_name>",
  "desc": "Logging — **Configure the client certificate.** The remote syslog server uses the client certificate to verify the identity of the syslog client."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog remote <address> tls auth-mode <anon | fingerprint | certvalid | name>",
  "cmd": "set system syslog remote <address> tls auth-mode <anon | fingerprint | certvalid | name>",
  "desc": "Logging — **Configure the authentication mode.** The authentication mode defines how the syslog client verifies the syslog server's identity."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog remote <address> tls permitted-peer <peer>",
  "cmd": "set system syslog remote <address> tls permitted-peer <peer>",
  "desc": "Logging — **Configure the peer certificate identifiers.** The certificate identifier format depends on the authentication mode: * fingerprint: Enter the expected certificate fingerprints (SHA-1 or SHA-256)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show log [all | authorization | cluster | conntrack-sync | ...]",
  "cmd": "show log [all | authorization | cluster | conntrack-sync | ...]",
  "desc": "Troubleshooting — **Display logs for a specific category on the console.** Use tab completion to view a list of available categories."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show log image <name> [all | authorization | directory | file <file name> | tail <lines>]",
  "cmd": "show log image <name> [all | authorization | directory | file <file name> | tail <lines>]",
  "desc": "Troubleshooting — **Display logs for a specific image on the console.** Available log categories:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system ip disable-forwarding",
  "cmd": "set system ip disable-forwarding",
  "desc": "System — Use this command to disable IPv4 forwarding on all interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system ip disable-directed-broadcast",
  "cmd": "set system ip disable-directed-broadcast",
  "desc": "System — Use this command to disable IPv4 directed broadcast forwarding on all interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system ip arp table-size <number>",
  "cmd": "set system ip arp table-size <number>",
  "desc": "System — Use this command to define the maximum number of entries to keep in the ARP cache (1024, 2048, 4096, 8192, 16384, 32768)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system ip multipath layer4-hashing",
  "cmd": "set system ip multipath layer4-hashing",
  "desc": "System — Use this command to use Layer 4 information for IPv4 ECMP hashing."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system ip import-table <table-id>",
  "cmd": "set system ip import-table <table-id>",
  "desc": "System — Use this command to immport the table, by given table id, into the main RIB."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system ip import-table <table-id> distance <distance>",
  "cmd": "set system ip import-table <table-id> distance <distance>",
  "desc": "System — Use this command to override the default distance when importing routers from the alternate table."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system ip import-table <table-id> route-map <route-map>",
  "cmd": "set system ip import-table <table-id> route-map <route-map>",
  "desc": "System — Use this command to filter routes that are imported into the main table from alternate table using route-map."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system ip protocol <protocol> route-map <route-map>",
  "cmd": "set system ip protocol <protocol> route-map <route-map>",
  "desc": "System — Apply a route-map filter to routes for the specified protocol. The following protocols can be used: any, babel, bgp, eigrp, isis, ospf, rip, static :::{note} If you choose any as the option that will cause all protocols…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system ip nht no-resolve-via-default",
  "cmd": "set system ip nht no-resolve-via-default",
  "desc": "System — Do not allow IPv4 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system host-name <hostname>",
  "cmd": "set system host-name <hostname>",
  "desc": "System — The hostname can be up to 63 characters. A hostname must start and end with a letter or digit, and have as interior characters only letters, digits, or a hyphen."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system domain-name <domain>",
  "cmd": "set system domain-name <domain>",
  "desc": "System — Configure system domain name. A domain name must start and end with a letter or digit, and have as interior characters only letters, digits, or a hyphen."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system static-host-mapping host-name <hostname> inet <address>",
  "cmd": "set system static-host-mapping host-name <hostname> inet <address>",
  "desc": "System — Create a static hostname mapping which will always resolve the name <hostname> to IP address <address>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system static-host-mapping host-name <hostname> alias <alias>",
  "cmd": "set system static-host-mapping host-name <hostname> alias <alias>",
  "desc": "System — Create named <alias> for the configured static mapping for <hostname>. Thus the address configured as set system static-host-mapping host-name <hostname> inet <address> can be reached via multiple names."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set system flow-accounting interface <interface>",
  "cmd": "set system flow-accounting interface <interface>",
  "desc": "Interfaces — Configure and enable collection of flow information for the interface identified by \\<interface\\>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system flow-accounting disable-imt",
  "cmd": "set system flow-accounting disable-imt",
  "desc": "System — If you need to sample also egress traffic, you may want to configure egress flow-accounting:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system flow-accounting enable-egress",
  "cmd": "set system flow-accounting enable-egress",
  "desc": "System — Internally, in flow-accounting processes exist a buffer for data exchanging between core process and plugins (each export target is a separated plugin)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system flow-accounting buffer-size <buffer size>",
  "cmd": "set system flow-accounting buffer-size <buffer size>",
  "desc": "System — In case, if you need to catch some logs from flow-accounting daemon, you may configure logging facility:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system flow-accounting syslog-facility <facility>",
  "cmd": "set system flow-accounting syslog-facility <facility>",
  "desc": "Logging — Set the syslog facility for flow-accounting log messages. Supported values include daemon, local0 through local7, and other standard syslog facilities."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system flow-accounting netflow version <version>",
  "cmd": "set system flow-accounting netflow version <version>",
  "desc": "System — There are multiple versions available for the NetFlow data. The \\<version\\> used in the exported flow data can be configured here."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system flow-accounting netflow server <address>",
  "cmd": "set system flow-accounting netflow server <address>",
  "desc": "System — Configure address of NetFlow collector. NetFlow server at \\<address\\> can be both listening on an IPv4 or IPv6 address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system flow-accounting netflow source-ip <address>",
  "cmd": "set system flow-accounting netflow source-ip <address>",
  "desc": "System — IPv4 or IPv6 source address of NetFlow packets"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system flow-accounting netflow engine-id <id>",
  "cmd": "set system flow-accounting netflow engine-id <id>",
  "desc": "System — NetFlow engine-id which will appear in NetFlow data. The range is 0 to 255."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system flow-accounting netflow sampling-rate <rate>",
  "cmd": "set system flow-accounting netflow sampling-rate <rate>",
  "desc": "System — Use this command to configure the sampling rate for flow accounting. The system samples one in every \\<rate\\> packets, where \\<rate\\> is the value configured for the sampling-rate option."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system flow-accounting netflow timeout expiry-interval <interval>",
  "cmd": "set system flow-accounting netflow timeout expiry-interval <interval>",
  "desc": "System — Specifies the interval at which Netflow data will be sent to a collector. As per default, Netflow data will be sent every 60 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system flow-accounting netflow max-flows <n>",
  "cmd": "set system flow-accounting netflow max-flows <n>",
  "desc": "System — If you want to change the maximum number of flows, which are tracking simultaneously, you may do this with this command (default 8192)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show flow-accounting interface <interface>",
  "cmd": "show flow-accounting interface <interface>",
  "desc": "Interfaces — Show flow accounting information for given \\<interface\\>. :::{code-block} none vyos@vyos:~$ show flow-accounting interface eth0 IN_IFACE SRC_MAC DST_MAC SRC_IP DST_IP SRC_PORT DST_PORT PROTOCOL TOS PACKETS FLOWS BYTES -…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show flow-accounting interface <interface> host <address>",
  "cmd": "show flow-accounting interface <interface> host <address>",
  "desc": "Interfaces — Show flow accounting information for given \\<interface\\> for a specific host only."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system task-scheduler task <task> interval <interval>",
  "cmd": "set system task-scheduler task <task> interval <interval>",
  "desc": "System — Specify the time interval when <task> should be executed. The interval is specified as number with one of the following suffixes: * none - Execution interval in minutes * m - Execution interval in minutes * h - Executio…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system task-scheduler task <task> crontab-spec <spec>",
  "cmd": "set system task-scheduler task <task> crontab-spec <spec>",
  "desc": "System — Set execution time in common cron time format. A cron <spec> of 30 */6 * * * would execute the <task> at minute 30 past every 6th hour."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system task-scheduler task <task> executable path <path>",
  "cmd": "set system task-scheduler task <task> executable path <path>",
  "desc": "System — Specify absolute <path> to script which will be run when <task> is executed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system task-scheduler task <task> executable arguments <args>",
  "cmd": "set system task-scheduler task <task> executable arguments <args>",
  "desc": "System — Arguments which will be passed to the executable."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system sflow agent-address <address>",
  "cmd": "set system sflow agent-address <address>",
  "desc": "System — Configure sFlow agent IPv4 or IPv6 address"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set system sflow agent-interface <interface>",
  "cmd": "set system sflow agent-interface <interface>",
  "desc": "Interfaces — Configure agent IP address associated with this interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "set system sflow drop-monitor-limit <limit>",
  "cmd": "set system sflow drop-monitor-limit <limit>",
  "desc": "Troubleshooting — Dropped packets reported on DROPMON Netlink channel by Linux kernel are exported via the standard sFlow v5 extension for reporting dropped packets"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set system sflow interface <interface>",
  "cmd": "set system sflow interface <interface>",
  "desc": "Interfaces — Configure and enable collection of flow information for the interface identified by \\<interface\\>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system sflow polling <sec>",
  "cmd": "set system sflow polling <sec>",
  "desc": "System — Configure schedule counter-polling in seconds (default: 30)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system sflow sampling-rate <rate>",
  "cmd": "set system sflow sampling-rate <rate>",
  "desc": "System — Use this command to configure the sampling rate for sFlow accounting (default: 1000)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set system sflow server <address> port <port>",
  "cmd": "set system sflow server <address> port <port>",
  "desc": "Interfaces — Configure address of sFlow collector. sFlow server at \\<address\\> can be both listening on an IPv4 or IPv6 address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system sflow enable-egress",
  "cmd": "set system sflow enable-egress",
  "desc": "System — Use this command to if you need to sample also egress traffic"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login user <name> full-name \"<string>\"",
  "cmd": "set system login user <name> full-name \"<string>\"",
  "desc": "System — **Configure the real name or description for a system user.** If the description includes spaces, enclose <string> in double quotes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login user <name> authentication plaintext-password <password>",
  "cmd": "set system login user <name> authentication plaintext-password <password>",
  "desc": "System — **Configure a password for a system user.** Enter the password in plaintext. Upon commit, VyOS hashes the password for secure storage and removes the plaintext value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login user <name> authentication encrypted-password <password>",
  "cmd": "set system login user <name> authentication encrypted-password <password>",
  "desc": "System — **Configure a pre-encrypted password for a system user.** Enter the password in its hashed format."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login user <name> authentication principal <principal>",
  "cmd": "set system login user <name> authentication principal <principal>",
  "desc": "System — **Configure an SSH certificate principal for a system user.** Enter the principal (a string included in the user's signed SSH certificate)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login user <name> disable",
  "cmd": "set system login user <name> disable",
  "desc": "System — **Disable a system user account.** VyOS locks the account, preventing the user from logging in."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login user <username> authentication public-keys <identifier> key <key>",
  "cmd": "set system login user <username> authentication public-keys <identifier> key <key>",
  "desc": "System — **Configure the SSH public key for the user account.** * <identifier>: A unique label that identifies this specific key entry."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login user <username> authentication public-keys <identifier> type <type>",
  "cmd": "set system login user <username> authentication public-keys <identifier> type <type>",
  "desc": "System — **Configure the SSH key's encryption type.** The following encryption algorithm types are available: * ecdsa-sha2-nistp256 * ecdsa-sha2-nistp384 * ecdsa-sha2-nistp521 * ssh-dss * ssh-ed25519 * ssh-rsa :::{note} To assig…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login user <username> authentication public-keys <identifier> options <options>",
  "cmd": "set system login user <username> authentication public-keys <identifier> options <options>",
  "desc": "System — **Configure specific restrictions or behaviors for an SSH public key.** <options>: A string of comma-separated values that define permissions or restrictions for this key."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login user <username> authentication otp key <key>",
  "cmd": "set system login user <username> authentication otp key <key>",
  "desc": "System — **Configure** OTP (One-time password)**-based** MFA (Multi-factor Authentication) **for a user.** <key>: A Base32-encoded secret key."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login user <username> authentication otp rate-limit <limit>",
  "cmd": "set system login user <username> authentication otp rate-limit <limit>",
  "desc": "System — **Configure the number of** OTP (One-time password) **authentication attempts allowed within a specified time period.** If this limit is exceeded, the user is temporarily blocked."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login user <username> authentication otp rate-time <seconds>",
  "cmd": "set system login user <username> authentication otp rate-time <seconds>",
  "desc": "System — **Configure the time period, in seconds, for tracking** OTP (One-time password) **authentication attempts.** The default value is 30 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login user <username> authentication otp window-size <size>",
  "cmd": "set system login user <username> authentication otp window-size <size>",
  "desc": "System — **Configure the** OTP (One-time password) **window size for a user.** The OTP (One-time password) window size defines the number of concurrently valid OTPs (One-time passwords) that the authentication server accepts."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate system login username <username> otp-key hotp-time rate-limit <1-10> rate-time <…",
  "cmd": "generate system login username <username> otp-key hotp-time rate-limit <1-10> rate-time <15-600> window-size <1-21>",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "sh system login authentication user <username> otp <full | key-b32 | qrcode | uri>",
  "cmd": "sh system login authentication user <username> otp <full | key-b32 | qrcode | uri>",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set system login radius server <address> key <secret>",
  "cmd": "set system login radius server <address> key <secret>",
  "desc": "AAA — **Configure the** RADIUS (Remote Authentication Dial-In User Service) **server's IP address and shared secret.** The shared secret is used to verify the router's identity and to encrypt user passwords during authenticat…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set system login radius server <address> port <port>",
  "cmd": "set system login radius server <address> port <port>",
  "desc": "AAA — **Configure the UDP port for communication with the** RADIUS (Remote Authentication Dial-In User Service) **server.** The default port is 1812."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set system login radius server <address> disable",
  "cmd": "set system login radius server <address> disable",
  "desc": "AAA — **Disable a** RADIUS (Remote Authentication Dial-In User Service) **server from the authentication process.** Disabling a specific RADIUS (Remote Authentication Dial-In User Service) server doesn’t remove its configurat…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set system login radius server <address> timeout <timeout>",
  "cmd": "set system login radius server <address> timeout <timeout>",
  "desc": "AAA — Configure the duration, in seconds, that the VyOS router waits for a response from the RADIUS (Remote Authentication Dial-In User Service) server after sending an authentication request."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set system login radius source-address <address>",
  "cmd": "set system login radius source-address <address>",
  "desc": "AAA — **Configure the source IP address the router uses for** RADIUS (Remote Authentication Dial-In User Service) **authentication requests.** A consistent source IP address is recommended as RADIUS servers typically accept r…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set system login radius vrf <name>",
  "cmd": "set system login radius vrf <name>",
  "desc": "AAA — **Configure the router to send all** RADIUS (Remote Authentication Dial-In User Service) **authentication requests via a specific VRF.** By default, RADIUS (Remote Authentication Dial-In User Service) authentication req…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set system login tacacs server <address> key <secret>",
  "cmd": "set system login tacacs server <address> key <secret>",
  "desc": "AAA — **Configure the** TACACS+ (Terminal Access Controller Access Control System) **server IP address and shared secret.** Unlike RADIUS (Remote Authentication Dial-In User Service), which encrypts only passwords, TACACS+ (T…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set system login tacacs server <address> port <port>",
  "cmd": "set system login tacacs server <address> port <port>",
  "desc": "AAA — **Configure the TCP port for communication with the** TACACS+ (Terminal Access Controller Access Control System) **server.** The default port is 49."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set system login tacacs server <address> disable",
  "cmd": "set system login tacacs server <address> disable",
  "desc": "AAA — **Disable a** TACACS+ (Terminal Access Controller Access Control System) **server from the authentication process.** Disabling a specific TACACS+ (Terminal Access Controller Access Control System) server doesn’t remove…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set system login tacacs server <address> timeout <timeout>",
  "cmd": "set system login tacacs server <address> timeout <timeout>",
  "desc": "AAA — Configure the duration, in seconds, that the VyOS router waits for a response from the TACACS+ (Terminal Access Controller Access Control System) server after sending an authentication request."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set system login tacacs source-address <address>",
  "cmd": "set system login tacacs source-address <address>",
  "desc": "AAA — **Configure the source IP address the router uses for** TACACS+ (Terminal Access Controller Access Control System) **authentication requests.** A consistent source IP address is recommended as TACACS+ (Terminal Access C…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set system login tacacs vrf <name>",
  "cmd": "set system login tacacs vrf <name>",
  "desc": "AAA — Configure the router to send all TACACS+ (Terminal Access Controller Access Control System) authentication requests via a specific VRF."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login banner pre-login <message>",
  "cmd": "set system login banner pre-login <message>",
  "desc": "System — Configure a message to be shown to users before the username and password prompts appear."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login banner post-login <message>",
  "cmd": "set system login banner post-login <message>",
  "desc": "System — Configure a message to be shown to users after successful authentication."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login max-login-session <number>",
  "cmd": "set system login max-login-session <number>",
  "desc": "System — **Configure the maximum number of concurrent login sessions.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login timeout <timeout>",
  "cmd": "set system login timeout <timeout>",
  "desc": "System — **Configure the login session timeout, in seconds.** Idle login sessions are terminated after this period."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system sysctl parameter <parameter> value <value>",
  "cmd": "set system sysctl parameter <parameter> value <value>",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system ipv6 disable-forwarding",
  "cmd": "set system ipv6 disable-forwarding",
  "desc": "System — Use this command to disable IPv6 forwarding on all interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set system ipv6 neighbor table-size <number>",
  "cmd": "set system ipv6 neighbor table-size <number>",
  "desc": "BGP — Use this command to define the maximum number of entries to keep in the Neighbor cache (1024, 2048, 4096, 8192, 16384, 32768)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system ipv6 strict-dad",
  "cmd": "set system ipv6 strict-dad",
  "desc": "System — Use this command to disable IPv6 operation on interface when Duplicate Address Detection fails on Link-Local address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system ipv6 multipath layer4-hashing",
  "cmd": "set system ipv6 multipath layer4-hashing",
  "desc": "System — Use this command to user Layer 4 information for ECMP hashing."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system ipv6 protocol <protocol> route-map <route-map>",
  "cmd": "set system ipv6 protocol <protocol> route-map <route-map>",
  "desc": "System — Apply a route-map filter to routes for the specified protocol. The following protocols can be used: any, babel, bgp, isis, ospfv3, ripng, static :::{note} If you choose any as the option that will cause all protocols th…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system ipv6 nht no-resolve-via-default",
  "cmd": "set system ipv6 nht no-resolve-via-default",
  "desc": "System — Do not allow IPv6 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show ipv6 neighbors",
  "cmd": "show ipv6 neighbors",
  "desc": "Troubleshooting — Use this command to show IPv6 Neighbor Discovery Protocol information."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show ipv6 groups",
  "cmd": "show ipv6 groups",
  "desc": "Troubleshooting — Use this command to show IPv6 multicast group membership."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show ipv6 forwarding",
  "cmd": "show ipv6 forwarding",
  "desc": "Troubleshooting — Use this command to show IPv6 forwarding status."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show ipv6 route",
  "cmd": "show ipv6 route",
  "desc": "Troubleshooting — Use this command to show IPv6 routes. Check the many parameters available for the show ipv6 route command: :::{code-block} none vyos@vyos:~$ show ipv6 route Possible completions: <Enter> Execute the current command <X:X…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show ipv6 prefix-list",
  "cmd": "show ipv6 prefix-list",
  "desc": "ACL — Use this command to show all IPv6 prefix lists There are different parameters for getting prefix-list information: :::{code-block} none vyos@vyos:~$ show ipv6 prefix-list Possible completions: <Enter> Execute the curren…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "show ipv6 access-list",
  "cmd": "show ipv6 access-list",
  "desc": "VLAN — Use this command to show all IPv6 access lists You can also specify which IPv6 access-list should be shown: :::{code-block} none vyos@vyos:~$ show ipv6 access-list Possible completions: <Enter> Execute the current comma…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "show ipv6 ospfv3",
  "cmd": "show ipv6 ospfv3",
  "desc": "OSPFv3 — Use this command to get information about OSPFv3. You can get more specific OSPFv3 information by using the parameters shown below: :::{code-block} none vyos@vyos:~$ show ipv6 ospfv3 Possible completions: <Enter> Execut…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "show ipv6 ripng",
  "cmd": "show ipv6 ripng",
  "desc": "RIP — Use this command to get information about the RIPNG protocol"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "show ipv6 ripng status",
  "cmd": "show ipv6 ripng status",
  "desc": "RIP — Use this command to show the status of the RIPNG protocol"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "reset bgp ipv6 <address>",
  "cmd": "reset bgp ipv6 <address>",
  "desc": "BGP — Use this command to clear Border Gateway Protocol statistics or status."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "reset ipv6 neighbors <address | interface>",
  "cmd": "reset ipv6 neighbors <address | interface>",
  "desc": "Interfaces — Use this command to reset IPv6 Neighbor Discovery Protocol cache for an address or interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "reset ipv6 route cache",
  "cmd": "reset ipv6 route cache",
  "desc": "System — Use this command to flush the kernel IPv6 route cache. An address can be added to flush it only for that route."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system lcd device <device>",
  "cmd": "set system lcd device <device>",
  "desc": "System — This is the name of the physical interface used to connect to your LCD display. Tab completion is supported and it will list you all available serial interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system lcd model <model>",
  "cmd": "set system lcd model <model>",
  "desc": "System — This is the LCD model used in your system. At the time of this writing the following displays are supported: * Crystalfontz CFA-533 * Crystalfontz CFA-631 * Crystalfontz CFA-633 * Crystalfontz CFA-635 :::{note} We can't…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option ctrl-alt-delete <ignore | reboot | poweroff>",
  "cmd": "set system option ctrl-alt-delete <ignore | reboot | poweroff>",
  "desc": "System — Action which will be run once the ctrl-alt-del keystroke is received."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option reboot-on-panic",
  "cmd": "set system option reboot-on-panic",
  "desc": "System — Automatically reboot system on kernel panic after 60 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option reboot-on-upgrade-failure <timeout>",
  "cmd": "set system option reboot-on-upgrade-failure <timeout>",
  "desc": "System — Automatically reboot after timeout minutes into the previous running image, that was used to perform the image upgrade."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option startup-beep",
  "cmd": "set system option startup-beep",
  "desc": "System — Play an audible beep to the system speaker when system is ready."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option root-partition-auto-resize",
  "cmd": "set system option root-partition-auto-resize",
  "desc": "System — Enables the root partition auto-extension and resizes to the maximum available space on system boot."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option kernel disable-mitigations",
  "cmd": "set system option kernel disable-mitigations",
  "desc": "System — Disable all optional CPU mitigations. This improves system performance, but it may also expose users to several CPU vulnerabilities."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option kernel disable-power-saving",
  "cmd": "set system option kernel disable-power-saving",
  "desc": "System — This will add the following two options to the Kernel commandline: * intel_idle.max_cstate=0 Disable intel_idle and fall back on acpi_idle * processor.max_cstate=1 Limit processor to maximum C-state 1 :::{note} Setting…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option kernel amd-pstate-driver <mode>",
  "cmd": "set system option kernel amd-pstate-driver <mode>",
  "desc": "System — Enables and configures p-state driver for modern AMD Ryzen and Epyc CPUs. The available modes are: * active This is the low-level firmware control mode based on the profile set and the system governor has no effect."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option kernel quiet",
  "cmd": "set system option kernel quiet",
  "desc": "System — Suppress most kernel messages during boot. This is useful for systems with embedded serial console interfaces to speed up the boot process."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option http-client source-address <address>",
  "cmd": "set system option http-client source-address <address>",
  "desc": "System — Several commands utilize cURL to initiate transfers. Configure the local source IPv4/IPv6 address used for all cURL operations."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set system option http-client source-interface <interface>",
  "cmd": "set system option http-client source-interface <interface>",
  "desc": "Interfaces — Several commands utilize curl to initiate transfers. Configure the local source interface used for all CURL operations."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option ssh-client source-address <address>",
  "cmd": "set system option ssh-client source-address <address>",
  "desc": "System — Use the specified address on the local machine as the source address of the connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set system option ssh-client source-interface <interface>",
  "cmd": "set system option ssh-client source-interface <interface>",
  "desc": "Interfaces — Use the address of the specified interface on the local machine as the source address of the connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option keyboard-layout <us | fr | de | fi | no | dk>",
  "cmd": "set system option keyboard-layout <us | fr | de | fi | no | dk>",
  "desc": "System — Change system keyboard layout to given language. Defaults to us."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option performance < throughput | latency >",
  "cmd": "set system option performance < throughput | latency >",
  "desc": "System — Configure one of the predefined system performance profiles. * throughput: A server profile focused on improving network throughput."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route 0.0.0.0/0 next-hop <address>",
  "cmd": "set protocols static route 0.0.0.0/0 next-hop <address>",
  "desc": "Routing — Specify static route into the routing table sending all non local traffic to the nexthop address \\<address\\>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "delete protocols static route 0.0.0.0/0",
  "cmd": "delete protocols static route 0.0.0.0/0",
  "desc": "Routing — Delete default route from the system."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show ip route 0.0.0.0",
  "cmd": "show ip route 0.0.0.0",
  "desc": "Troubleshooting — Show routing table entry for the default route. :::{code-block} none vyos@vyos:~$ show ip route 0.0.0.0 Routing entry for 0.0.0.0/0 Known via \"static\", distance 10, metric 0, best Last update 09:46:30 ago * 172.18.201.2…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system watchdog",
  "cmd": "set system watchdog",
  "desc": "System — Enable watchdog support. The watchdog is enabled only when a watchdog device is available as /dev/watchdog0."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system watchdog module <module-name>",
  "cmd": "set system watchdog module <module-name>",
  "desc": "System — Specify the kernel watchdog driver module to load for /dev/watchdog0. The configured module must be a watchdog driver module, not an arbitrary kernel module."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system watchdog timeout <seconds>",
  "cmd": "set system watchdog timeout <seconds>",
  "desc": "System — :defaultvalue: Set the watchdog timeout for normal runtime operation in seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system watchdog shutdown-timeout <seconds>",
  "cmd": "set system watchdog shutdown-timeout <seconds>",
  "desc": "System — :defaultvalue: Set the watchdog timeout during system shutdown in seconds. Valid range: 60-65535 seconds This extended timeout allows the system to complete a graceful shutdown without triggering the watchdog."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system watchdog reboot-timeout <seconds>",
  "cmd": "set system watchdog reboot-timeout <seconds>",
  "desc": "System — :defaultvalue: Set the watchdog timeout during system reboot in seconds. Valid range: 60-65535 seconds This extended timeout allows the system to complete the reboot process without triggering the watchdog during the tr…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system frr bmp",
  "cmd": "set system frr bmp",
  "desc": "System — Enable BMP (BGP Monitoring Protocol) support."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system frr descriptors <number>",
  "cmd": "set system frr descriptors <number>",
  "desc": "System — This allows the operator to control the number of open file descriptors each daemon is allowed to start with."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system frr irdp",
  "cmd": "set system frr irdp",
  "desc": "System — Enable ICMP Router Discovery Protocol support."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system frr profile <traditional | datacenter>",
  "cmd": "set system frr profile <traditional | datacenter>",
  "desc": "System — Select an FRR profile to adapt its default settings. If unset, the traditional profile is applied."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "SNMP",
  "title": "set system frr snmp <daemon>",
  "cmd": "set system frr snmp <daemon>",
  "desc": "SNMP — Enable SNMP support for an individual routing daemon. Supported daemons: - bgpd - isisd - ldpd - ospf6d - ospfd - ripd - zebra"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system console device <device>",
  "cmd": "set system console device <device>",
  "desc": "System — Defines the specified device as a system console. Available console devices can be (see completion helper): * ttySN - Serial device name * ttyAMAN- Serial device name for some arm64 systems * ttyUSBX - USB Serial device…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system console device <device> kernel",
  "cmd": "set system console device <device> kernel",
  "desc": "System — When set, the selected serial console is used as the kernel boot console. When removed, the kernel boot console falls back to tty0."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system console device <device> speed <speed>",
  "cmd": "set system console device <device> speed <speed>",
  "desc": "System — The speed (baudrate) of the console device. Supported values are: * 1200 - 1200 bps * 2400 - 2400 bps * 4800 - 4800 bps * 9600 - 9600 bps * 19200 - 19,200 bps * 38400 - 38,400 bps (default for Xen console) * 57600 - 57,…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system name-server <address>",
  "cmd": "set system name-server <address>",
  "desc": "System — Use this command to specify a DNS server for the system to be used for DNS lookups."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system domain-search <domain>",
  "cmd": "set system domain-search <domain>",
  "desc": "System — Use this command to define domains, one at a time, so that the system uses them to complete unqualified host names."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system update-check auto-check",
  "cmd": "set system update-check auto-check",
  "desc": "System — Configure auto-checking for new images"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system update-check url <url>",
  "cmd": "set system update-check url <url>",
  "desc": "System — Configure a URL that contains information about images."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system proxy url <url>",
  "cmd": "set system proxy url <url>",
  "desc": "System — Set proxy for all connections initiated by VyOS, including HTTP, HTTPS, and FTP (anonymous ftp)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set system proxy port <port>",
  "cmd": "set system proxy port <port>",
  "desc": "Interfaces — Configure proxy port if it does not listen to the default port 80."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system proxy username <username>",
  "cmd": "set system proxy username <username>",
  "desc": "System — Some proxies require/support the \"basic\" HTTP authentication scheme as per 7617, thus a username can be configured."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system proxy password <password>",
  "cmd": "set system proxy password <password>",
  "desc": "System — Some proxies require/support the \"basic\" HTTP authentication scheme as per 7617, thus a password can be configured."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system time-zone <timezone>",
  "cmd": "set system time-zone <timezone>",
  "desc": "System — Specify the systems \\<timezone\\> as the Region/Location that best defines your location."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack expect-table-size <1-50000000>",
  "cmd": "set system conntrack expect-table-size <1-50000000>",
  "desc": "System — :defaultvalue: The connection tracking expect table contains one entry for each expected connection related to an existing connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack hash-size <1-50000000>",
  "cmd": "set system conntrack hash-size <1-50000000>",
  "desc": "System — :defaultvalue: Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack modules ftp",
  "cmd": "set system conntrack modules ftp",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack modules h323",
  "cmd": "set system conntrack modules h323",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack modules nfs",
  "cmd": "set system conntrack modules nfs",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set system conntrack modules pptp",
  "cmd": "set system conntrack modules pptp",
  "desc": "VPN · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack modules sip",
  "cmd": "set system conntrack modules sip",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack modules sqlnet",
  "cmd": "set system conntrack modules sqlnet",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack modules tftp",
  "cmd": "set system conntrack modules tftp",
  "desc": "System — Configure the connection tracking protocol helper modules. All modules are enabled by default."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack tcp half-open-connections <1-21474836>",
  "cmd": "set system conntrack tcp half-open-connections <1-21474836>",
  "desc": "System — :defaultvalue: Set the maximum number of TCP half-open connections."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack tcp loose <enable | disable>",
  "cmd": "set system conntrack tcp loose <enable | disable>",
  "desc": "System — :defaultvalue: Policy to track previously established connections."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack tcp max-retrans <1-2147483647>",
  "cmd": "set system conntrack tcp max-retrans <1-2147483647>",
  "desc": "System — :defaultvalue: Set the number of TCP maximum retransmit attempts."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack timeout custom [ipv4 | ipv6] rule <1-999999>",
  "cmd": "set system conntrack timeout custom [ipv4 | ipv6] rule <1-999999>",
  "desc": "System — description <test> Set a rule description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack ignore [ipv4 | ipv6] rule <1-999999>",
  "cmd": "set system conntrack ignore [ipv4 | ipv6] rule <1-999999>",
  "desc": "System — description <text>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log event destroy",
  "cmd": "set system conntrack log event destroy",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log event new",
  "cmd": "set system conntrack log event new",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log event update",
  "cmd": "set system conntrack log event update",
  "desc": "System — Log the connection tracking events per type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log event destroy icmp",
  "cmd": "set system conntrack log event destroy icmp",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log event destroy other",
  "cmd": "set system conntrack log event destroy other",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log event destroy tcp",
  "cmd": "set system conntrack log event destroy tcp",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log event destroy udp",
  "cmd": "set system conntrack log event destroy udp",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log event new icmp",
  "cmd": "set system conntrack log event new icmp",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log event new other",
  "cmd": "set system conntrack log event new other",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log event new tcp",
  "cmd": "set system conntrack log event new tcp",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log event new udp",
  "cmd": "set system conntrack log event new udp",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log event update icmp",
  "cmd": "set system conntrack log event update icmp",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log event update other",
  "cmd": "set system conntrack log event update other",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log event update tcp",
  "cmd": "set system conntrack log event update tcp",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log event update udp",
  "cmd": "set system conntrack log event update udp",
  "desc": "System — Log the connection tracking events per protocol."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log timestamp",
  "cmd": "set system conntrack log timestamp",
  "desc": "System — Turn on flow-based timestamp extension."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system conntrack log queue-size <100-999999>",
  "cmd": "set system conntrack log queue-size <100-999999>",
  "desc": "System — Manage internal queue size, default size is 4096 events."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "set system conntrack log log-level <info | debug>",
  "cmd": "set system conntrack log log-level <info | debug>",
  "desc": "Troubleshooting — Manage log level"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show system acceleration qat",
  "cmd": "show system acceleration qat",
  "desc": "Troubleshooting — use this command to check if there is an Intel® QAT supported Processor in your system."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system acceleration qat",
  "cmd": "set system acceleration qat",
  "desc": "System — if there is a supported device, enable Intel® QAT"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show system acceleration qat status",
  "cmd": "show system acceleration qat status",
  "desc": "Troubleshooting — Check if the Intel® QAT device is up and ready to do the job. :::{code-block} none vyos@vyos:~$ show system acceleration qat status Checking status of all devices."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show system acceleration qat device <device> config",
  "cmd": "show system acceleration qat device <device> config",
  "desc": "Troubleshooting — Show the full config uploaded to the QAT device."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show system acceleration qat device <device> flows",
  "cmd": "show system acceleration qat device <device> flows",
  "desc": "Troubleshooting — Get an overview over the encryption counters."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show system acceleration qat interrupts",
  "cmd": "show system acceleration qat interrupts",
  "desc": "Troubleshooting — Show binded qat device interrupts to certain core."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "HA",
  "title": "set high-availability vrrp global-parameters startup_delay <1-600>",
  "cmd": "set high-availability vrrp global-parameters startup_delay <1-600>",
  "desc": "HA — This option specifies a delay in seconds before vrrp instances start up after keepalived starts."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "HA",
  "title": "set high-availability vrrp global-parameters garp interval",
  "cmd": "set high-availability vrrp global-parameters garp interval",
  "desc": "HA — <0.000-1000>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "HA",
  "title": "set high-availability vrrp group <name> garp interval <0.000-1000>",
  "cmd": "set high-availability vrrp group <name> garp interval <0.000-1000>",
  "desc": "HA — Set delay between gratuitous ARP messages sent on an interface. 0 if not defined."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "HA",
  "title": "set high-availability vrrp global-parameters garp master-delay <1-255>",
  "cmd": "set high-availability vrrp global-parameters garp master-delay <1-255>",
  "desc": "HA · highavailability"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "HA",
  "title": "set high-availability vrrp group <name> garp master-delay <1-255>",
  "cmd": "set high-availability vrrp group <name> garp master-delay <1-255>",
  "desc": "HA — Set delay for second set of gratuitous ARPs after transition to MASTER. 5 if not defined."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "HA",
  "title": "set high-availability vrrp global-parameters garp master-refresh",
  "cmd": "set high-availability vrrp global-parameters garp master-refresh",
  "desc": "HA — <1-600>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "HA",
  "title": "set high-availability vrrp group <name> garp master-refresh",
  "cmd": "set high-availability vrrp group <name> garp master-refresh",
  "desc": "HA — <1-600> Set minimum time interval for refreshing gratuitous ARPs while MASTER. 0 if not defined, which means no refreshing."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "HA",
  "title": "set high-availability vrrp global-parameters garp",
  "cmd": "set high-availability vrrp global-parameters garp",
  "desc": "HA — master-refresh-repeat <1-600>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "HA",
  "title": "set high-availability vrrp group <name> garp",
  "cmd": "set high-availability vrrp group <name> garp",
  "desc": "HA — master-refresh-repeat <1-600> Set number of gratuitous ARP messages to send at a time while MASTER."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "HA",
  "title": "set high-availability vrrp global-parameters garp master-repeat",
  "cmd": "set high-availability vrrp global-parameters garp master-repeat",
  "desc": "HA — <1-600>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "HA",
  "title": "set high-availability vrrp group <name> garp master-repeat",
  "cmd": "set high-availability vrrp group <name> garp master-repeat",
  "desc": "HA — <1-600> Set number of gratuitous ARP messages to send at a time after transition to MASTER."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "HA",
  "title": "set high-availability vrrp global-parameters version 2|3",
  "cmd": "set high-availability vrrp global-parameters version 2|3",
  "desc": "HA — Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vrf name <name> table <id>",
  "cmd": "set vrf name <name> table <id>",
  "desc": "System — Create a new VRF instance with <name> and <id>. The name is used when placing individual interfaces into the VRF."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vrf bind-to-all",
  "cmd": "set vrf bind-to-all",
  "desc": "System — By default the scope of the port bindings for unbound sockets is limited to the default VRF."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vrf <name> ip protocol <protocol> route-map <route-map>",
  "cmd": "set vrf <name> ip protocol <protocol> route-map <route-map>",
  "desc": "System — Apply a route-map filter to routes for the specified protocol. The following protocols can be used: any, babel, bgp, eigrp, isis, ospf, rip, static :::{note} If you choose any as the option that will cause all protocols…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vrf <name> ipv6 protocol <protocol> route-map <route-map>",
  "cmd": "set vrf <name> ipv6 protocol <protocol> route-map <route-map>",
  "desc": "System — Apply a route-map filter to routes for the specified protocol. The following protocols can be used: any, babel, bgp, isis, ospfv3, ripng, static :::{note} If you choose any as the option that will cause all protocols th…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vrf name <name> ip nht no-resolve-via-default",
  "cmd": "set vrf name <name> ip nht no-resolve-via-default",
  "desc": "System — Do not allow IPv4 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vrf name <name> ipv6 nht no-resolve-via-default",
  "cmd": "set vrf name <name> ipv6 nht no-resolve-via-default",
  "desc": "System — Do not allow IPv6 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces <dummy | ethernet | bonding | bridge | pppoe> <interface> vrf <name>",
  "cmd": "set interfaces <dummy | ethernet | bonding | bridge | pppoe> <interface> vrf <name>",
  "desc": "Interfaces — Assign interface identified by <interface> to VRF named <name>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show vrf",
  "cmd": "show vrf",
  "desc": "Troubleshooting — Lists VRFs that have been created :::{code-block} none vyos@vyos:~$ show vrf VRF name state mac address flags interfaces -------- ----- ----------- ----- ---------- blue up 00:53:12:d8:74:24 noarp,master,up,lower_up dum…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show vrf <name>",
  "cmd": "show vrf <name>",
  "desc": "Troubleshooting — :::{code-block} none vyos@vyos:~$ show vrf name blue VRF name state mac address flags interfaces -------- ----- ----------- ----- ---------- blue up 00:53:12:d8:74:24 noarp,master,up,lower_up dum200,eth0.302 :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show ip route vrf <name>",
  "cmd": "show ip route vrf <name>",
  "desc": "Troubleshooting — Display IPv4 routing table for VRF identified by <name>. :::{code-block} none vyos@vyos:~$ show ip route vrf blue Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N -…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show ipv6 route vrf <name>",
  "cmd": "show ipv6 route vrf <name>",
  "desc": "Troubleshooting — Display IPv6 routing table for VRF identified by <name>. :::{code-block} none vyos@vyos:~$ show ipv6 route vrf red Codes: K - kernel route, C - connected, S - static, R - RIPng, O - OSPFv3, I - IS-IS, B - BGP, N - NHRP,…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "ping <host> vrf <name>",
  "cmd": "ping <host> vrf <name>",
  "desc": "Troubleshooting — The ping command is used to test whether a network host is reachable or not. Ping uses ICMP protocol's mandatory ECHO_REQUEST datagram to elicit an ICMP ECHO_RESPONSE from a host or gateway."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "traceroute vrf <name> [ipv4 | ipv6] <host>",
  "cmd": "traceroute vrf <name> [ipv4 | ipv6] <host>",
  "desc": "Troubleshooting — Displays the route packets taken to a network host utilizing VRF instance identified by <name>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "force vrf <name>",
  "cmd": "force vrf <name>",
  "desc": "System — Join a given VRF. This will open a new subshell within the specified VRF."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> rd vpn expor…",
  "cmd": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> rd vpn export <asn:nn|address:nn>",
  "desc": "BGP — Specifies the route distinguisher to be added to a route exported from the current unicast VRF to VPN."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> route-target…",
  "cmd": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> route-target vpn <import|export|both> [RTLIST]",
  "desc": "BGP — Specifies the route-target list to be attached to a route (export) or the route-target list to match against (import) when exporting/importing between the current unicast VRF and VPN.The RTLIST is a space-separated list…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> label vpn ex…",
  "cmd": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> label vpn export <0-1048575|auto>",
  "desc": "BGP — Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> label vpn al…",
  "cmd": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> label vpn allocation-mode per-nexthop",
  "desc": "BGP — Select how labels are allocated in the given VRF. By default, the per-vrf mode is selected, and one label is used for all prefixes from the VRF."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> route-map vp…",
  "cmd": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> route-map vpn <import|export> [route-map <name>]",
  "desc": "BGP — Specifies an optional route-map to be applied to routes imported or exported between the current unicast VRF and VPN."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> <import|expo…",
  "cmd": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> <import|export> vpn",
  "desc": "BGP — Enables import or export of routes between the current unicast VRF and VPN."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> import vrf <…",
  "cmd": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> import vrf <name>",
  "desc": "BGP — Shortcut syntax for specifying automatic leaking from vrf VRFNAME to the current VRF using the VPN RIB as intermediary."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> route-map vr…",
  "cmd": "set vrf name <name> protocols bgp address-family <ipv4-unicast|ipv6-unicast> route-map vrf import [route-map <name>]",
  "desc": "BGP — Specifies an optional route-map to be applied to routes imported from VRFs."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set vrf name <name> protocols bgp interface <interface> mpls forwarding",
  "cmd": "set vrf name <name> protocols bgp interface <interface> mpls forwarding",
  "desc": "BGP — It is possible to permit BGP install VPN prefixes without transport labels. This configuration will install VPN prefixes originated from an e-bgp session, and with the next-hop directly connected."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp <ipv4|ipv6> vpn",
  "cmd": "show bgp <ipv4|ipv6> vpn",
  "desc": "BGP — Print active IPV4 or IPV6 routes advertised via the VPN SAFI. :::{code-block} none BGP table version is 2, local router ID is 10.0.1.1, vrf id 0 Default local pref 100, local AS 65001 Status codes: s suppressed, d dampe…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp <ipv4|ipv6> vpn summary",
  "cmd": "show bgp <ipv4|ipv6> vpn summary",
  "desc": "BGP — Print a summary of neighbor connections for the specified AFI/SAFI combination. :::{code-block} none BGP router identifier 10.0.1.1, local AS number 65001 vrf-id 0 BGP table version 0 RIB entries 9, using 1728 bytes of…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy drop-tail <policy-name> queue-limit <number-of-packets>",
  "cmd": "set qos policy drop-tail <policy-name> queue-limit <number-of-packets>",
  "desc": "QoS — Use this command to configure a drop-tail policy (PFIFO). Choose a unique name for this policy and the size of the queue by setting the number of packets it can contain (maximum 4294967295)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy fair-queue <policy-name>",
  "cmd": "set qos policy fair-queue <policy-name>",
  "desc": "QoS — Use this command to create a Fair-Queue policy and give it a name. It is based on the Stochastic Fairness Queueing and can be applied to outbound traffic."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy fair-queue <policy-name> hash-interval <seconds>",
  "cmd": "set qos policy fair-queue <policy-name> hash-interval <seconds>",
  "desc": "QoS — Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of seconds at which a new queue algorithm perturbation will occur (maximum 4294967295)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy fair-queue <policy-name> queue-limit <limit>",
  "cmd": "set qos policy fair-queue <policy-name> queue-limit <limit>",
  "desc": "QoS — Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of maximum packets allowed to wait in the queue."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy fq-codel <policy name> codel-quantum <bytes>",
  "cmd": "set qos policy fq-codel <policy name> codel-quantum <bytes>",
  "desc": "QoS — Use this command to configure an fq-codel policy, set its name and the maximum number of bytes (default: 1514) to be dequeued from a queue at once."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy fq-codel <policy name> flows <number-of-flows>",
  "cmd": "set qos policy fq-codel <policy name> flows <number-of-flows>",
  "desc": "QoS — Use this command to configure an fq-codel policy, set its name and the number of sub-queues (default: 1024) into which packets are classified."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy fq-codel <policy name> interval <milliseconds>",
  "cmd": "set qos policy fq-codel <policy name> interval <milliseconds>",
  "desc": "QoS — Use this command to configure an fq-codel policy, set its name and the time period used by the control loop of CoDel to detect when a persistent queue is developing, ensuring that the measured minimum delay does not bec…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy fq-codel <policy-name> queue-limit <number-of-packets>",
  "cmd": "set qos policy fq-codel <policy-name> queue-limit <number-of-packets>",
  "desc": "QoS — Use this command to configure an fq-codel policy, set its name, and define a hard limit on the real queue size."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy fq-codel <policy-name> target <milliseconds>",
  "cmd": "set qos policy fq-codel <policy-name> target <milliseconds>",
  "desc": "QoS — Use this command to configure an fq-codel policy, set its name, and define the acceptable minimum standing/persistent queue delay."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy limiter <policy-name> class <class ID> match <match-name> description <des…",
  "cmd": "set qos policy limiter <policy-name> class <class ID> match <match-name> description <description>",
  "desc": "QoS — Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090), a class matching rule name and its description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy limiter <policy-name> class <class-ID> bandwidth <rate>",
  "cmd": "set qos policy limiter <policy-name> class <class-ID> bandwidth <rate>",
  "desc": "QoS — Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090) and the maximum allowed bandwidth for this class."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy limiter <policy-name> class <class-ID> burst <burst-size>",
  "cmd": "set qos policy limiter <policy-name> class <class-ID> burst <burst-size>",
  "desc": "QoS — Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090) and the burst size in bytes for this class (default: 15)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy limiter <policy-name> default bandwidth <rate>",
  "cmd": "set qos policy limiter <policy-name> default bandwidth <rate>",
  "desc": "QoS — Use this command to configure an Ingress Policer, defining its name and the maximum allowed bandwidth for its default policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy limiter <policy-name> default burst <burst-size>",
  "cmd": "set qos policy limiter <policy-name> default burst <burst-size>",
  "desc": "QoS — Use this command to configure an Ingress Policer, defining its name and the burst size in bytes (default: 15) for its default policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy limiter <policy-name> class <class ID> priority <value>",
  "cmd": "set qos policy limiter <policy-name> class <class ID> priority <value>",
  "desc": "QoS — Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090), and the priority (0-20, default 20) in which the rule is evaluated (the lower the number, the higher the priority)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy network-emulator <policy-name> bandwidth <rate>",
  "cmd": "set qos policy network-emulator <policy-name> bandwidth <rate>",
  "desc": "QoS — Use this command to configure the maximum rate at which traffic will be shaped in a Network Emulator policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy network-emulator <policy-name> burst <burst-size>",
  "cmd": "set qos policy network-emulator <policy-name> burst <burst-size>",
  "desc": "QoS — Use this command to configure the burst size of the traffic in a Network Emulator policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy network-emulator <policy-name> delay <delay>",
  "cmd": "set qos policy network-emulator <policy-name> delay <delay>",
  "desc": "QoS — Use this command to configure a Network Emulator policy defining its name and the fixed amount of time you want to add to all packet going out of the interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy network-emulator <policy-name> corruption <percent>",
  "cmd": "set qos policy network-emulator <policy-name> corruption <percent>",
  "desc": "QoS — Use this command to emulate noise in a Network Emulator policy. Set the policy name and the percentage of corrupted packets you want."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy network-emulator <policy-name> loss <percent>",
  "cmd": "set qos policy network-emulator <policy-name> loss <percent>",
  "desc": "QoS — Use this command to emulate packet-loss conditions in a Network Emulator policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set traffic-policy network-emulator <policy-name> reordering <percent>",
  "cmd": "set traffic-policy network-emulator <policy-name> reordering <percent>",
  "desc": "Routing — Use this command to emulate packet-reordering conditions in a Network Emulator policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set traffic-policy network-emulator <policy-name> queue-limit <limit>",
  "cmd": "set traffic-policy network-emulator <policy-name> queue-limit <limit>",
  "desc": "Routing — Use this command to define the length of the queue of your Network Emulator policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy priority-queue <policy-name> class <class-ID> queue-limit <limit>",
  "cmd": "set qos policy priority-queue <policy-name> class <class-ID> queue-limit <limit>",
  "desc": "QoS — Use this command to configure a Priority Queue policy, set its name, set a class with a priority from 1 to 7 and define a hard limit on the real queue size."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy random-detect <policy-name> bandwidth <bandwidth>",
  "cmd": "set qos policy random-detect <policy-name> bandwidth <bandwidth>",
  "desc": "QoS — Use this command to configure a Random-Detect policy, set its name and set the available bandwidth for this policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy random-detect <policy-name> precedence <IP-precedence-value> average-packe…",
  "cmd": "set qos policy random-detect <policy-name> precedence <IP-precedence-value> average-packet <bytes>",
  "desc": "QoS — Use this command to configure a Random-Detect policy and set its name, then state the IP Precedence for the virtual queue you are configuring and what the size of its average-packet should be (in bytes, default: 1024)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy random-detect <policy-name> precedence <IP-precedence-value> mark-probabil…",
  "cmd": "set qos policy random-detect <policy-name> precedence <IP-precedence-value> mark-probability <value>",
  "desc": "QoS — Use this command to configure a Random-Detect policy and set its name, then state the IP Precedence for the virtual queue you are configuring and what its mark (drop) probability will be."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy random-detect <policy-name> precedence <IP-precedence-value> maximum-thres…",
  "cmd": "set qos policy random-detect <policy-name> precedence <IP-precedence-value> maximum-threshold <packets>",
  "desc": "QoS — Use this command to configure a Random-Detect policy and set its name, then state the IP Precedence for the virtual queue you are configuring and what its maximum threshold for random detection will be (from 0 to 4096 p…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy random-detect <policy-name> precedence <IP-precedence-value> minimum-thres…",
  "cmd": "set qos policy random-detect <policy-name> precedence <IP-precedence-value> minimum-threshold <packets>",
  "desc": "QoS — Use this command to configure a Random-Detect policy and set its name, then state the IP Precedence for the virtual queue you are configuring and what its minimum threshold for random detection will be (from 0 to 4096 p…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy random-detect <policy-name> precedence <IP-precedence-value> queue-limit <…",
  "cmd": "set qos policy random-detect <policy-name> precedence <IP-precedence-value> queue-limit <packets>",
  "desc": "QoS — Use this command to configure a Random-Detect policy and set its name, then name the IP Precedence for the virtual queue you are configuring and what the maximum size of its queue will be (from 1 to 1-4294967295 packets…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy rate-control <policy-name> bandwidth <rate>",
  "cmd": "set qos policy rate-control <policy-name> bandwidth <rate>",
  "desc": "QoS — Use this command to configure a Rate-Control policy, set its name and the rate limit you want to have."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy rate-control <policy-name> burst <burst-size>",
  "cmd": "set qos policy rate-control <policy-name> burst <burst-size>",
  "desc": "QoS — Use this command to configure a Rate-Control policy, set its name and the size of the bucket in bytes which will be available for burst."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy rate-control <policy-name> latency",
  "cmd": "set qos policy rate-control <policy-name> latency",
  "desc": "QoS — Use this command to configure a Rate-Control policy, set its name and the maximum amount of time a packet can be queued (default: 50 ms)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy round-robin <policy name> class <class-ID> quantum <packets>",
  "cmd": "set qos policy round-robin <policy name> class <class-ID> quantum <packets>",
  "desc": "QoS — Use this command to configure a Round-Robin policy, set its name, set a class ID, and the quantum for that class."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy round-robin <policy name> class <class ID> queue-limit <packets>",
  "cmd": "set qos policy round-robin <policy name> class <class ID> queue-limit <packets>",
  "desc": "QoS — Use this command to configure a Round-Robin policy, set its name, set a class ID, and the queue size in packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy shaper <policy-name> bandwidth <rate>",
  "cmd": "set qos policy shaper <policy-name> bandwidth <rate>",
  "desc": "QoS — Use this command to configure a Shaper policy, set its name and the maximum bandwidth for all combined traffic."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy shaper <policy-name> class <class-ID> bandwidth <rate>",
  "cmd": "set qos policy shaper <policy-name> class <class-ID> bandwidth <rate>",
  "desc": "QoS — Use this command to configure a Shaper policy, set its name, define a class and set the guaranteed traffic you want to allocate to that class."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy shaper <policy-name> class <class-ID> burst <bytes>",
  "cmd": "set qos policy shaper <policy-name> class <class-ID> burst <bytes>",
  "desc": "QoS — Use this command to configure a Shaper policy, set its name, define a class and set the size of the token bucket in bytes, which will be available to be sent at ceiling speed (default: 15Kb)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy shaper <policy-name> class <class-ID> ceiling <bandwidth>",
  "cmd": "set qos policy shaper <policy-name> class <class-ID> ceiling <bandwidth>",
  "desc": "QoS — Use this command to configure a Shaper policy, set its name, define a class and set the maximum speed possible for this class."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy shaper <policy-name> class <class-ID> priority <0-7>",
  "cmd": "set qos policy shaper <policy-name> class <class-ID> priority <0-7>",
  "desc": "QoS — Use this command to configure a Shaper policy, set its name, define a class and set the priority for usage of available bandwidth once guarantees have been met."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy cake <text> bandwidth <value>",
  "cmd": "set qos policy cake <text> bandwidth <value>",
  "desc": "QoS — Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy cake <text> description",
  "cmd": "set qos policy cake <text> description",
  "desc": "QoS — Set a description for the shaper."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy cake <text> flow-isolation blind",
  "cmd": "set qos policy cake <text> flow-isolation blind",
  "desc": "QoS — Disables flow isolation, all traffic passes through a single queue."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy cake <text> flow-isolation dst-host",
  "cmd": "set qos policy cake <text> flow-isolation dst-host",
  "desc": "QoS — Flows are defined only by destination address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy cake <text> flow-isolation dual-dst-host",
  "cmd": "set qos policy cake <text> flow-isolation dual-dst-host",
  "desc": "QoS — Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy cake <text> flow-isolation dual-src-host",
  "cmd": "set qos policy cake <text> flow-isolation dual-src-host",
  "desc": "QoS — Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy cake <text> flow-isolation flow",
  "cmd": "set qos policy cake <text> flow-isolation flow",
  "desc": "QoS — Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy cake <text> flow-isolation host",
  "cmd": "set qos policy cake <text> flow-isolation host",
  "desc": "QoS — Flows are defined by source-destination host pairs."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set qos policy cake <text> flow-isolation nat",
  "cmd": "set qos policy cake <text> flow-isolation nat",
  "desc": "NAT — Perform NAT lookup before applying flow-isolation rules."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy cake <text> flow-isolation src-host",
  "cmd": "set qos policy cake <text> flow-isolation src-host",
  "desc": "QoS — Flows are defined only by source address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy cake <text> flow-isolation triple-isolate",
  "cmd": "set qos policy cake <text> flow-isolation triple-isolate",
  "desc": "QoS — **(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy cake <text> rtt",
  "cmd": "set qos policy cake <text> rtt",
  "desc": "QoS — Defines the round-trip time used for active queue management (AQM) in milliseconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service broadcast-relay id <n> description <description>",
  "cmd": "set service broadcast-relay id <n> description <description>",
  "desc": "System — A description can be added for each and every unique relay ID. This is useful to distinguish between multiple different ports/applications."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service broadcast-relay id <n> interface <interface>",
  "cmd": "set service broadcast-relay id <n> interface <interface>",
  "desc": "Interfaces — The interface used to receive and relay individual broadcast packets. If you want to receive/relay packets on both eth1 and eth2 both interfaces need to be added."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service broadcast-relay id <n> address <ipv4-address>",
  "cmd": "set service broadcast-relay id <n> address <ipv4-address>",
  "desc": "System — Set the source IP of forwarded packets, otherwise original senders address is used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service broadcast-relay id <n> port <port>",
  "cmd": "set service broadcast-relay id <n> port <port>",
  "desc": "Interfaces — The UDP port number used by your application. It is mandatory for this kind of operation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service broadcast-relay id <n> disable",
  "cmd": "set service broadcast-relay id <n> disable",
  "desc": "System — Each broadcast relay instance can be individually disabled without deleting the configured node by using the following command:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service broadcast-relay disable",
  "cmd": "set service broadcast-relay disable",
  "desc": "System — In addition you can also disable the whole service without the need to remove it from the current configuration."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service console-server device <device> data-bits [7 | 8]",
  "cmd": "set service console-server device <device> data-bits [7 | 8]",
  "desc": "System — Configure either seven or eight data bits. This defaults to eight data bits if left unconfigured."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service console-server device <device> description <string>",
  "cmd": "set service console-server device <device> description <string>",
  "desc": "System — A user friendly description identifying the connected peripheral."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service console-server device <device> alias <string>",
  "cmd": "set service console-server device <device> alias <string>",
  "desc": "System — A user friendly alias for this connection. Can be used instead of the device name when connecting."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service console-server device <device> parity [even | odd | none]",
  "cmd": "set service console-server device <device> parity [even | odd | none]",
  "desc": "System — Set the parity option for the console. If unset this will default to none."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service console-server device <device> stop-bits [1 | 2]",
  "cmd": "set service console-server device <device> stop-bits [1 | 2]",
  "desc": "System — Configure either one or two stop bits. This defaults to one stop bits if left unconfigured."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service console-server device <device> speed [ 300 | 1200 | 2400 | 4800 | 9600 | 1920…",
  "cmd": "set service console-server device <device> speed [ 300 | 1200 | 2400 | 4800 | 9600 | 19200 | 38400 | 57600 | 115200 ]",
  "desc": "System — :::{note} USB to serial converters will handle most of their work in software so you should be careful with the selected baudrate as sometimes they can't cope with the expected speed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service console-server device <device> ssh port <port>",
  "cmd": "set service console-server device <device> ssh port <port>",
  "desc": "Interfaces — Accept SSH connections for the given <device> on TCP port <port>. After successful authentication the user will be directly dropped to the connected serial device."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show console-server ports",
  "cmd": "show console-server ports",
  "desc": "Troubleshooting — Show configured serial ports and their respective interface configuration. :::{code-block} none vyos@vyos:~$ show console-server ports usb0b2.4p1.0 on /dev/serial/by-bus/usb0b2.4p1.0@ at 9600n :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show console-server user",
  "cmd": "show console-server user",
  "desc": "Troubleshooting — Show currently connected users. :::{code-block} none vyos@vyos:~$ show console-server user usb0b2.4p1.0 up vyos@localhost :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "connect console <device>",
  "cmd": "connect console <device>",
  "desc": "System — Locally connect to serial port identified by <device>. :::{code-block} none vyos@vyos-r1:~$ connect console usb0b2.4p1.0 [Enter ^Ec?' for help] [-- MOTD -- VyOS Console Server] vyos-r2 login: ::: :::{hint} Multiple user…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show log console-server",
  "cmd": "show log console-server",
  "desc": "Troubleshooting — Show the console server log."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service conntrack-sync accept-protocol",
  "cmd": "set service conntrack-sync accept-protocol",
  "desc": "System — Accept only certain protocols: You may want to replicate the state of flows depending on their layer 4 protocol."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service conntrack-sync event-listen-queue-size <size>",
  "cmd": "set service conntrack-sync event-listen-queue-size <size>",
  "desc": "System — The daemon doubles the size of the netlink event socket buffer size if it detects netlink event message dropping."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service conntrack-sync expect-sync <all|ftp|h323|nfs|sip|sqlnet>",
  "cmd": "set service conntrack-sync expect-sync <all|ftp|h323|nfs|sip|sqlnet>",
  "desc": "System — Protocol for which expect entries need to be synchronized."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "HA",
  "title": "set service conntrack-sync failover-mechanism vrrp sync-group <group>",
  "cmd": "set service conntrack-sync failover-mechanism vrrp sync-group <group>",
  "desc": "HA — Failover mechanism to use for conntrack-sync. Only VRRP is supported."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service conntrack-sync ignore-address <x.x.x.x>",
  "cmd": "set service conntrack-sync ignore-address <x.x.x.x>",
  "desc": "System — IP addresses or networks for which local conntrack entries will not be synced"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service conntrack-sync interface <name>",
  "cmd": "set service conntrack-sync interface <name>",
  "desc": "Interfaces — Interface to use for syncing conntrack entries."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service conntrack-sync interface <name> port <port>",
  "cmd": "set service conntrack-sync interface <name> port <port>",
  "desc": "Interfaces — Port number used by connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service conntrack-sync listen-address <ipv4address>",
  "cmd": "set service conntrack-sync listen-address <ipv4address>",
  "desc": "System — Local IPv4 addresses for service to listen on."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service conntrack-sync mcast-group <x.x.x.x>",
  "cmd": "set service conntrack-sync mcast-group <x.x.x.x>",
  "desc": "System — Multicast group to use for syncing conntrack entries. Defaults to 225.0.0.50."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service conntrack-sync interface <name> peer <address>",
  "cmd": "set service conntrack-sync interface <name> peer <address>",
  "desc": "Interfaces — Peer to send unicast UDP conntrack sync entries to, if not using Multicast configuration from above."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service conntrack-sync sync-queue-size <size>",
  "cmd": "set service conntrack-sync sync-queue-size <size>",
  "desc": "System — Queue size for syncing conntrack entries in MB."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service conntrack-sync disable-external-cache",
  "cmd": "set service conntrack-sync disable-external-cache",
  "desc": "System — This disables the external cache and directly injects the flow-states into the in-kernel Connection Tracking System of the backup firewall."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service conntrack-sync purge-timeout <timeout>",
  "cmd": "set service conntrack-sync purge-timeout <timeout>",
  "desc": "System — Timeout (in seconds) for purging synchronized entries on handover events. On handover, conntrackd -t is invoked, which schedules a conntrack table flush after <timeout> seconds to purge stale (“zombie”) entries and redu…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set service conntrack-sync disable-syslog",
  "cmd": "set service conntrack-sync disable-syslog",
  "desc": "Logging — Disable connection logging via Syslog."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service conntrack-sync startup-resync",
  "cmd": "set service conntrack-sync startup-resync",
  "desc": "System — Order conntrackd to request a complete conntrack table resync against the other node at startup."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show conntrack table ipv4",
  "cmd": "show conntrack table ipv4",
  "desc": "Troubleshooting — Make sure conntrack is enabled by running and show connection tracking table. :::{code-block} none vyos@vyos:~$ show conntrack table ipv4 TCP state codes: SS - SYN SENT, SR - SYN RECEIVED, ES - ESTABLISHED, FW - FIN WAI…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show conntrack-sync cache external",
  "cmd": "show conntrack-sync cache external",
  "desc": "Troubleshooting — Show connection syncing external cache entries"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show conntrack-sync cache internal",
  "cmd": "show conntrack-sync cache internal",
  "desc": "Troubleshooting — Show connection syncing internal cache entries"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show conntrack-sync statistics",
  "cmd": "show conntrack-sync statistics",
  "desc": "Troubleshooting — Retrieve current statistics of connection tracking subsystem. :::{code-block} none vyos@vyos:~$ show conntrack-sync statistics Main Table Statistics: cache internal: current active connections: 19606 connections created…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show conntrack-sync status",
  "cmd": "show conntrack-sync status",
  "desc": "Troubleshooting — Retrieve current status of connection tracking subsystem. :::{code-block} none vyos@vyos:~$ show conntrack-sync status sync-interface : eth0.5 failover-mechanism : vrrp [sync-group GEFOEKOM] last state transition : no t…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set service pppoe-server access-concentrator <name>",
  "cmd": "set service pppoe-server access-concentrator <name>",
  "desc": "VLAN — Use this command to set a name for this PPPoE-server access concentrator."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication mode <local | radius>",
  "cmd": "set service pppoe-server authentication mode <local | radius>",
  "desc": "AAA — Set authentication backend. The configured authentication backend is used for all queries."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server authentication local-users username <name> password <password>",
  "cmd": "set service pppoe-server authentication local-users username <name> password <password>",
  "desc": "System — Create <user> for local authentication on this system. The users password will be set to <pass>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server client-ip-pool <POOL-NAME> range <x.x.x.x-x.x.x.x | x.x.x.x/x>",
  "cmd": "set service pppoe-server client-ip-pool <POOL-NAME> range <x.x.x.x-x.x.x.x | x.x.x.x/x>",
  "desc": "System — Use this command to define the first IP address of a pool of addresses to be given to pppoe clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server default-pool <POOL-NAME>",
  "cmd": "set service pppoe-server default-pool <POOL-NAME>",
  "desc": "System — Use this command to define default address pool name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service pppoe-server interface <interface>",
  "cmd": "set service pppoe-server interface <interface>",
  "desc": "Interfaces — Use this command to define the interface the PPPoE server will use to listen for PPPoE clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server gateway-address <address>",
  "cmd": "set service pppoe-server gateway-address <address>",
  "desc": "System — Specifies single <gateway> IP address to be used as local address of PPP interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius server <server> key <secret>",
  "cmd": "set service pppoe-server authentication radius server <server> key <secret>",
  "desc": "AAA — Configure RADIUS <server> and its required shared <secret> for communicating with the RADIUS server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius source-address <address>",
  "cmd": "set service pppoe-server authentication radius source-address <address>",
  "desc": "AAA — Source IPv4 address used in all RADIUS server queries."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius server <server> port <port>",
  "cmd": "set service pppoe-server authentication radius server <server> port <port>",
  "desc": "AAA — Configure RADIUS <server> and its required port for authentication requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius server <server> fail-time <time>",
  "cmd": "set service pppoe-server authentication radius server <server> fail-time <time>",
  "desc": "AAA — Mark RADIUS server as offline for this given <time> in seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius server <server> disable",
  "cmd": "set service pppoe-server authentication radius server <server> disable",
  "desc": "AAA — Temporary disable this RADIUS server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius acct-timeout <timeout>",
  "cmd": "set service pppoe-server authentication radius acct-timeout <timeout>",
  "desc": "AAA — Timeout to wait reply for Interim-Update packets. (default 3 seconds)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius dynamic-author server <address>",
  "cmd": "set service pppoe-server authentication radius dynamic-author server <address>",
  "desc": "AAA — Specifies IP address for Dynamic Authorization Extension server (DM/CoA). This IP must exist on any VyOS interface or it can be 0.0.0.0."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius dynamic-author port <port>",
  "cmd": "set service pppoe-server authentication radius dynamic-author port <port>",
  "desc": "AAA — UDP port for Dynamic Authorization Extension server (DM/CoA)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius dynamic-author key <secret>",
  "cmd": "set service pppoe-server authentication radius dynamic-author key <secret>",
  "desc": "AAA — Secret for Dynamic Authorization Extension server (DM/CoA)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius max-try <number>",
  "cmd": "set service pppoe-server authentication radius max-try <number>",
  "desc": "AAA — Maximum number of tries to send Access-Request/Accounting-Request queries"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius timeout <timeout>",
  "cmd": "set service pppoe-server authentication radius timeout <timeout>",
  "desc": "AAA — Timeout to wait response from server (seconds)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius nas-identifier <identifier>",
  "cmd": "set service pppoe-server authentication radius nas-identifier <identifier>",
  "desc": "AAA — Value to send to RADIUS server in NAS-Identifier attribute and to be matched in DM/CoA requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius nas-ip-address <address>",
  "cmd": "set service pppoe-server authentication radius nas-ip-address <address>",
  "desc": "AAA — Value to send to RADIUS server in NAS-IP-Address attribute and to be matched in DM/CoA requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius rate-limit attribute <attribute>",
  "cmd": "set service pppoe-server authentication radius rate-limit attribute <attribute>",
  "desc": "AAA — Specifies which RADIUS server attribute contains the rate limit information. The default attribute is Filter-Id."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius rate-limit enable",
  "cmd": "set service pppoe-server authentication radius rate-limit enable",
  "desc": "AAA — Enables bandwidth shaping via RADIUS."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius rate-limit vendor",
  "cmd": "set service pppoe-server authentication radius rate-limit vendor",
  "desc": "AAA — Specifies the vendor dictionary, dictionary needs to be in /usr/share/accel-ppp/radius."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set service pppoe-server interface <interface> vlan <id | range>",
  "cmd": "set service pppoe-server interface <interface> vlan <id | range>",
  "desc": "VLAN — VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named vlan_mon, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server authentication local-users username <user> rate-limit download <…",
  "cmd": "set service pppoe-server authentication local-users username <user> rate-limit download <bandwidth>",
  "desc": "System — Download bandwidth limit in kbit/s for <user>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server authentication local-users username <user> rate-limit upload <ba…",
  "cmd": "set service pppoe-server authentication local-users username <user> rate-limit upload <bandwidth>",
  "desc": "System — Upload bandwidth limit in kbit/s for <user>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server pado-delay <number-of-ms> sessions <number-of-sessions>",
  "cmd": "set service pppoe-server pado-delay <number-of-ms> sessions <number-of-sessions>",
  "desc": "System — Use this command to enable the delay of PADO (PPPoE Active Discovery Offer) packets, which can be used as a session balancing mechanism with other PPPoE servers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server ppp-options ipv6 <require | prefer | allow | deny>",
  "cmd": "set service pppoe-server ppp-options ipv6 <require | prefer | allow | deny>",
  "desc": "System — Specifies IPv6 negotiation preference. * **require** - Require IPv6 negotiation * **prefer** - Ask client for IPv6 negotiation, do not fail if it rejects * **allow** - Negotiate IPv6 only if client requests * **deny** -…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server client-ipv6-pool <IPv6-POOL-NAME> prefix <address> mask <number-…",
  "cmd": "set service pppoe-server client-ipv6-pool <IPv6-POOL-NAME> prefix <address> mask <number-of-bits>",
  "desc": "System — Use this command to set the IPv6 address pool from which a PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server client-ipv6-pool <IPv6-POOL-NAME> delegate <address> delegation-…",
  "cmd": "set service pppoe-server client-ipv6-pool <IPv6-POOL-NAME> delegate <address> delegation-prefix <number-of-bits>",
  "desc": "System — Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPPoE. You will have to set your IPv6 pool and the length of the delegation prefix."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server default-ipv6-pool <IPv6-POOL-NAME>",
  "cmd": "set service pppoe-server default-ipv6-pool <IPv6-POOL-NAME>",
  "desc": "System — Use this command to define default IPv6 address pool name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service pppoe-server ppp-options ipv6-accept-peer-interface-id",
  "cmd": "set service pppoe-server ppp-options ipv6-accept-peer-interface-id",
  "desc": "Interfaces — Accept peer interface identifier. By default is not defined."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service pppoe-server ppp-options ipv6-interface-id <random | x:x:x:x>",
  "cmd": "set service pppoe-server ppp-options ipv6-interface-id <random | x:x:x:x>",
  "desc": "Interfaces — Specifies fixed or random interface identifier for IPv6. By default is fixed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server extended-scripts on-change <path_to_script>",
  "cmd": "set service pppoe-server extended-scripts on-change <path_to_script>",
  "desc": "System — Script to run when session interface changed by RADIUS CoA handling"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server extended-scripts on-down <path_to_script>",
  "cmd": "set service pppoe-server extended-scripts on-down <path_to_script>",
  "desc": "System — Script to run when session interface going to terminate"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server extended-scripts on-pre-up <path_to_script>",
  "cmd": "set service pppoe-server extended-scripts on-pre-up <path_to_script>",
  "desc": "System — Script to run before session interface comes up"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server extended-scripts on-up <path_to_script>",
  "cmd": "set service pppoe-server extended-scripts on-up <path_to_script>",
  "desc": "System — Script to run when session interface is completely configured and started"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server authentication local-users username <user> disable",
  "cmd": "set service pppoe-server authentication local-users username <user> disable",
  "desc": "System — Disable <user> account."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server authentication local-users username <user> static-ip <address>",
  "cmd": "set service pppoe-server authentication local-users username <user> static-ip <address>",
  "desc": "System — Assign static IP address to <user> account."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set service pppoe-server authentication protocols <pap | chap | mschap | mschap-v2>",
  "cmd": "set service pppoe-server authentication protocols <pap | chap | mschap | mschap-v2>",
  "desc": "Routing — Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server client-ip-pool <POOL-NAME> next-pool <NEXT-POOL-NAME>",
  "cmd": "set service pppoe-server client-ip-pool <POOL-NAME> next-pool <NEXT-POOL-NAME>",
  "desc": "System — Use this command to define the next address pool name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server ppp-options disable-ccp",
  "cmd": "set service pppoe-server ppp-options disable-ccp",
  "desc": "System — Disable Compression Control Protocol (CCP). CCP is enabled by default."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service pppoe-server ppp-options interface-cache <number>",
  "cmd": "set service pppoe-server ppp-options interface-cache <number>",
  "desc": "Interfaces — Specifies number of interfaces to keep in cache. It means that don’t destroy interface after corresponding session is destroyed, instead place it to cache and use it later for new sessions repeatedly."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server ppp-options ipv4 <require | prefer | allow | deny>",
  "cmd": "set service pppoe-server ppp-options ipv4 <require | prefer | allow | deny>",
  "desc": "System — Specifies IPv4 negotiation preference. * **require** - Require IPv4 negotiation * **prefer** - Ask client for IPv4 negotiation, do not fail if it rejects * **allow** - Negotiate IPv4 only if client requests (Default val…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server ppp-options lcp-echo-failure <number>",
  "cmd": "set service pppoe-server ppp-options lcp-echo-failure <number>",
  "desc": "System — Defines the maximum <number> of unanswered echo requests. Upon reaching the value <number>, the session will be reset."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server ppp-options lcp-echo-interval <interval>",
  "cmd": "set service pppoe-server ppp-options lcp-echo-interval <interval>",
  "desc": "System — If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every <interval> seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server ppp-options lcp-echo-timeout",
  "cmd": "set service pppoe-server ppp-options lcp-echo-timeout",
  "desc": "System — Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server ppp-options min-mtu <number>",
  "cmd": "set service pppoe-server ppp-options min-mtu <number>",
  "desc": "System — Defines minimum acceptable MTU. If client will try to negotiate less then specified MTU then it will be NAKed or disconnected if rejects greater MTU."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server ppp-options mppe <require | prefer | deny>",
  "cmd": "set service pppoe-server ppp-options mppe <require | prefer | deny>",
  "desc": "System — Specifies MPPE (Microsoft Point-to-Point Encryption) negotiation preference. * **require** - ask client for mppe, if it rejects drop connection * **prefer** - ask client for mppe, if it rejects don't fail."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server ppp-options mru <number>",
  "cmd": "set service pppoe-server ppp-options mru <number>",
  "desc": "System — Defines preferred MRU. By default is not defined."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server description <description>",
  "cmd": "set service pppoe-server description <description>",
  "desc": "System — Set description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server limits burst <value>",
  "cmd": "set service pppoe-server limits burst <value>",
  "desc": "System — Burst count"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server limits connection-limit <value>",
  "cmd": "set service pppoe-server limits connection-limit <value>",
  "desc": "System — Acceptable rate of connections (e.g. 1/min, 60/sec)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server limits timeout <value>",
  "cmd": "set service pppoe-server limits timeout <value>",
  "desc": "System — Timeout in seconds"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server mtu",
  "cmd": "set service pppoe-server mtu",
  "desc": "System — Maximum Transmission Unit (MTU) (default: **1492**)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server max-concurrent-sessions",
  "cmd": "set service pppoe-server max-concurrent-sessions",
  "desc": "System — Maximum number of concurrent session start attempts"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server name-server <address>",
  "cmd": "set service pppoe-server name-server <address>",
  "desc": "System — Connected client should use <address> as their DNS server. This command accepts both IPv4 and IPv6 addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server service-name <names>",
  "cmd": "set service pppoe-server service-name <names>",
  "desc": "System — Specifies Service-Name to respond. If absent any Service-Name is acceptable and client’s Service-Name will be sent back."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server session-control",
  "cmd": "set service pppoe-server session-control",
  "desc": "System — * **disable**: Disables session control. * **deny**: Deny second session authorization."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set service pppoe-server shaper fwmark <1-2147483647>",
  "cmd": "set service pppoe-server shaper fwmark <1-2147483647>",
  "desc": "QoS — Match firewall mark value"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "SNMP",
  "title": "set service pppoe-server snmp master-agent",
  "cmd": "set service pppoe-server snmp master-agent",
  "desc": "SNMP — Enable SNMP"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server wins-server <address>",
  "cmd": "set service pppoe-server wins-server <address>",
  "desc": "System — Windows Internet Name Service (WINS) servers propagated to client"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show pppoe-server sessions",
  "cmd": "show pppoe-server sessions",
  "desc": "Troubleshooting — Use this command to locally check the active sessions in the PPPoE server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service lldp",
  "cmd": "set service lldp",
  "desc": "System — Enable LLDP service"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service lldp management-address <address>",
  "cmd": "set service lldp management-address <address>",
  "desc": "System — Define IPv4/IPv6 management address transmitted via LLDP. Multiple addresses can be defined."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service lldp interface <interface>",
  "cmd": "set service lldp interface <interface>",
  "desc": "Interfaces — Enable transmission of LLDP information on given \\<interface\\>. You can also say all here so LLDP is turned on on every interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service lldp interface <interface> mode [disable|rx-tx|rx|tx]",
  "cmd": "set service lldp interface <interface> mode [disable|rx-tx|rx|tx]",
  "desc": "Interfaces — Configure the administrative status of the given port. By default, all ports are configured to be in rx-tx mode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "SNMP",
  "title": "set service lldp snmp",
  "cmd": "set service lldp snmp",
  "desc": "SNMP — Enable SNMP queries of the LLDP database"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set service lldp legacy-protocols <cdp|edp|fdp|sonmp>",
  "cmd": "set service lldp legacy-protocols <cdp|edp|fdp|sonmp>",
  "desc": "Routing — Enable given legacy protocol on this LLDP instance. Legacy protocols include: * cdp - Listen for CDP for Cisco routers/switches * edp - Listen for EDP for Extreme routers/switches * fdp - Listen for FDP for Foundry rout…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show lldp neighbors",
  "cmd": "show lldp neighbors",
  "desc": "Troubleshooting — Displays information about all neighbors discovered via LLDP. :::{code-block} none vyos@vyos:~$ show lldp neighbors Capability Codes: R - Router, B - Bridge, W - Wlan r - Repeater, S - Station D - Docsis, T - Telephone,…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show lldp neighbors detail",
  "cmd": "show lldp neighbors detail",
  "desc": "Troubleshooting — Get detailed information about LLDP neighbors. :::{code-block} none vyos@vyos:~$ show lldp neighbors detail ------------------------------------------------------------------------------- LLDP neighbors: ---------------…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show lldp neighbors interface <interface>",
  "cmd": "show lldp neighbors interface <interface>",
  "desc": "Interfaces — Show LLDP neighbors connected via interface \\<interface\\>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show log lldp",
  "cmd": "show log lldp",
  "desc": "Troubleshooting — Used for troubleshooting."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy append-domain <domain>",
  "cmd": "set service webproxy append-domain <domain>",
  "desc": "System — Use this command to specify a domain name to be appended to domain-names within URLs that do not include a dot ."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy cache-size <size>",
  "cmd": "set service webproxy cache-size <size>",
  "desc": "System — The size of the on-disk Proxy cache is user configurable. The Proxies default cache-size is configured to 100 MB."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service webproxy default-port <port>",
  "cmd": "set service webproxy default-port <port>",
  "desc": "Interfaces — Specify the port used on which the proxy service is listening for requests. This port is the default port used for the specified listen-address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy domain-block <domain>",
  "cmd": "set service webproxy domain-block <domain>",
  "desc": "System — Used to block specific domains by the Proxy. Specifying \"vyos.net\" will block all access to vyos.net, and specifying \".xxx\" will block all access to URLs having an URL ending on .xxx."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy domain-noncache <domain>",
  "cmd": "set service webproxy domain-noncache <domain>",
  "desc": "System — Allow access to sites in a domain without retrieving them from the Proxy cache. Specifying \"vyos.net\" will allow access to vyos.net but the pages accessed will not be cached."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy listen-address <address>",
  "cmd": "set service webproxy listen-address <address>",
  "desc": "System — Specifies proxy service listening address. The listen address is the IP address on which the web proxy service listens for client requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy listen-address <address> disable-transparent",
  "cmd": "set service webproxy listen-address <address> disable-transparent",
  "desc": "System — Disables web proxy transparent mode at a listening address. In transparent proxy mode, all traffic arriving on port 80 and destined for the Internet is automatically forwarded through the proxy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service webproxy listen-address <address> port <port>",
  "cmd": "set service webproxy listen-address <address> port <port>",
  "desc": "Interfaces — Sets the listening port for a listening address. This overrides the default port of 3128 on the specific listen address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy reply-block-mime <mime>",
  "cmd": "set service webproxy reply-block-mime <mime>",
  "desc": "System — Used to block a specific mime-type. :::{code-block} none # block all PDFs set service webproxy reply-block-mime application/pdf :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy reply-body-max-size <size>",
  "cmd": "set service webproxy reply-body-max-size <size>",
  "desc": "System — Specifies the maximum size of a reply body in KB, used to limit the reply size. All reply sizes are accepted by default."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service webproxy safe-ports <port>",
  "cmd": "set service webproxy safe-ports <port>",
  "desc": "Interfaces — Add new port to Safe-ports acl. Ports included by default in Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service webproxy ssl-safe-ports <port>",
  "cmd": "set service webproxy ssl-safe-ports <port>",
  "desc": "Interfaces — Add new port to SSL-ports acl. Ports included by default in SSL-ports acl: 443"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy authentication children <number>",
  "cmd": "set service webproxy authentication children <number>",
  "desc": "System — Maximum number of authenticator processes to spawn. If you start too few Squid will have to wait for them to process a backlog of credential verifications, slowing it down."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy authentication credentials-ttl <time>",
  "cmd": "set service webproxy authentication credentials-ttl <time>",
  "desc": "System — Specifies how long squid assumes an externally validated username:password pair is valid for - in other words how often the helper program is called for that user."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy authentication method <ldap>",
  "cmd": "set service webproxy authentication method <ldap>",
  "desc": "System — Proxy authentication method, currently only LDAP is supported. :::{code-block} none set service webproxy authentication method ldap :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy authentication realm",
  "cmd": "set service webproxy authentication realm",
  "desc": "System — Specifies the protection scope (aka realm name) which is to be reported to the client for the authentication scheme."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy authentication ldap base-dn <base-dn>",
  "cmd": "set service webproxy authentication ldap base-dn <base-dn>",
  "desc": "System — Specifies the base DN under which the users are located. :::{code-block} none set service webproxy authentication ldap base-dn DC=vyos,DC=net :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy authentication ldap bind-dn <bind-dn>",
  "cmd": "set service webproxy authentication ldap bind-dn <bind-dn>",
  "desc": "System — The DN and password to bind as while performing searches. :::{code-block} none set service webproxy authentication ldap bind-dn CN=proxyuser,CN=Users,DC=vyos,DC=net :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set service webproxy authentication ldap filter-expression <expr>",
  "cmd": "set service webproxy authentication ldap filter-expression <expr>",
  "desc": "ACL — LDAP search filter to locate the user DN. Required if the users are in a hierarchy below the base DN, or if the login name is not what builds the user specific part of the users DN."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy authentication ldap password <password>",
  "cmd": "set service webproxy authentication ldap password <password>",
  "desc": "System — The DN and password to bind as while performing searches. As the password needs to be printed in plain text in your Squid configuration it is strongly recommended to use a account with minimal associated privileges."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy authentication ldap persistent-connection",
  "cmd": "set service webproxy authentication ldap persistent-connection",
  "desc": "System — Use a persistent LDAP connection. Normally the LDAP connection is only open while validating a username to preserve resources at the LDAP server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service webproxy authentication ldap port <port>",
  "cmd": "set service webproxy authentication ldap port <port>",
  "desc": "Interfaces — Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy authentication ldap server <server>",
  "cmd": "set service webproxy authentication ldap server <server>",
  "desc": "System — Specify the LDAP server to connect to. :::{code-block} none set service webproxy authentication ldap server ldap.vyos.net :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy authentication ldap use-ssl",
  "cmd": "set service webproxy authentication ldap use-ssl",
  "desc": "System — Use TLS encryption. :::{code-block} none set service webproxy authentication ldap use-ssl :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy authentication ldap username-attribute <attr>",
  "cmd": "set service webproxy authentication ldap username-attribute <attr>",
  "desc": "System — Specifies the name of the DN attribute that contains the username/login. Combined with the base DN to construct the users DN when no search filter is specified (filter-expression)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy authentication ldap version <2 | 3>",
  "cmd": "set service webproxy authentication ldap version <2 | 3>",
  "desc": "System — LDAP protocol version. Defaults to 3 if not specified."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service webproxy url-filtering disable",
  "cmd": "set service webproxy url-filtering disable",
  "desc": "System — Disables web filtering without discarding configuration. :::{code-block} none set service webproxy url-filtering disable :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "update webproxy blacklists",
  "cmd": "update webproxy blacklists",
  "desc": "System — Download/Update complete blacklist :::{code-block} none vyos@vyos:~$ update webproxy blacklists Warning: No url-filtering blacklist installed Would you like to download a default blacklist?"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "update webproxy blacklists category <category>",
  "cmd": "update webproxy blacklists category <category>",
  "desc": "System — Download/Update partial blacklist. Use tab completion to get a list of categories."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-relay interface <interface>",
  "cmd": "set service dhcp-relay interface <interface>",
  "desc": "DHCP — Interfaces that participate in the DHCP relay process. If this command is used, at least two entries of it are required: one for the interface that captures the dhcp-requests, and one for the interface to forward such r…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-relay listen-interface <interface>",
  "cmd": "set service dhcp-relay listen-interface <interface>",
  "desc": "DHCP — Interface for DHCP Relay Agent to listen for requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-relay upstream-interface <interface>",
  "cmd": "set service dhcp-relay upstream-interface <interface>",
  "desc": "DHCP — Interface for DHCP Relay Agent to forward requests out."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-relay server <server>",
  "cmd": "set service dhcp-relay server <server>",
  "desc": "DHCP — Configure IP address of the DHCP <server> which will handle the relayed packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-relay relay-options relay-agents-packets discard",
  "cmd": "set service dhcp-relay relay-options relay-agents-packets discard",
  "desc": "DHCP — The router should discard DHCP packages already containing relay agent information to ensure that only requests from DHCP clients are forwarded."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-relay disable",
  "cmd": "set service dhcp-relay disable",
  "desc": "DHCP — Disable dhcp-relay service."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-relay relay-options hop-count <count>",
  "cmd": "set service dhcp-relay relay-options hop-count <count>",
  "desc": "DHCP — Set the maximum hop <count> before packets are discarded. Range 0...255, default 10."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-relay relay-options max-size <size>",
  "cmd": "set service dhcp-relay relay-options max-size <size>",
  "desc": "DHCP — Set maximum <size> of DHCP packets including relay agent information. If a DHCP packet size surpasses this value it will be forwarded without appending relay agent information."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-relay relay-options relay-agents-packets <append | discard | forward | r…",
  "cmd": "set service dhcp-relay relay-options relay-agents-packets <append | discard | forward | replace>",
  "desc": "DHCP — Four policies for reforwarding DHCP packets exist: * **append:** The relay agent is allowed to append its own relay information to a received DHCP packet, disregarding relay information already present in the packet."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "restart dhcp relay-agent",
  "cmd": "restart dhcp relay-agent",
  "desc": "DHCP — Restart DHCP relay service"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-relay listen-interface <interface>",
  "cmd": "set service dhcpv6-relay listen-interface <interface>",
  "desc": "DHCP — Set eth1 to be the listening interface for the DHCPv6 relay. Multiple interfaces may be specified."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-relay upstream-interface <interface> address <server>",
  "cmd": "set service dhcpv6-relay upstream-interface <interface> address <server>",
  "desc": "DHCP — Specifies an upstream network <interface> from which replies from <server> and other relay agents will be accepted."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-relay disable",
  "cmd": "set service dhcpv6-relay disable",
  "desc": "DHCP — Disable dhcpv6-relay service."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-relay max-hop-count <count>",
  "cmd": "set service dhcpv6-relay max-hop-count <count>",
  "desc": "DHCP — Set maximum hop count before packets are discarded, default: 10"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-relay use-interface-id-option",
  "cmd": "set service dhcpv6-relay use-interface-id-option",
  "desc": "DHCP — If this is set the relay agent will insert the interface ID. This option is set automatically if more than one listening interfaces are in use."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "restart dhcpv6 relay-agent",
  "cmd": "restart dhcpv6 relay-agent",
  "desc": "DHCP — Restart DHCPv6 relay agent immediately."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service config-sync secondary <address|key|timeout|port>",
  "cmd": "set service config-sync secondary <address|key|timeout|port>",
  "desc": "Interfaces — Specify the address, API key, timeout and port of the secondary router. You need to enable and configure the HTTP API service on the secondary router for config sync to operate."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service config-sync section <section>",
  "cmd": "set service config-sync section <section>",
  "desc": "System — Specify the section of the configuration to synchronize. If more than one section is to be synchronized, repeat the command to add additional sections as required."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service config-sync mode <load|set>",
  "cmd": "set service config-sync mode <load|set>",
  "desc": "System — Two options are available for *mode*: either *load* and replace or *set* the configuration section."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show configuration secondary sync [commands] [running | candidate | saved] [<config-node-…",
  "cmd": "show configuration secondary sync [commands] [running | candidate | saved] [<config-node-path>]",
  "desc": "Troubleshooting — Display configuration differences between the local node and a config-sync secondary node."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server hostfile-update",
  "cmd": "set service dhcp-server hostfile-update",
  "desc": "DHCP — Create DNS record per client lease, by adding clients to /etc/hosts file. Entry will have format: <shared-network-name>_<hostname>.<domain-name>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> option domain-name <domain-name>",
  "cmd": "set service dhcp-server shared-network-name <name> option domain-name <domain-name>",
  "desc": "DHCP — The domain-name parameter should be the domain name that will be appended to the client's hostname to form a fully-qualified domain-name (FQDN) (DHCP Option 015)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> option domain-search <domain-name>",
  "cmd": "set service dhcp-server shared-network-name <name> option domain-search <domain-name>",
  "desc": "DHCP — The domain-name parameter should be the domain name used when completing DNS request where no full FQDN is passed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> option name-server <address>",
  "cmd": "set service dhcp-server shared-network-name <name> option name-server <address>",
  "desc": "DHCP — Inform client that the DNS server can be found at <address>. This is the configuration parameter for the entire shared network definition."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> option vendor-option <option-name>",
  "cmd": "set service dhcp-server shared-network-name <name> option vendor-option <option-name>",
  "desc": "DHCP — This configuration parameter lets you specify a vendor-option for the entire shared network definition."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server listen-address <address>",
  "cmd": "set service dhcp-server listen-address <address>",
  "desc": "DHCP — This configuration parameter lets the DHCP server to listen for DHCP requests sent to the specified address, it is only realistically useful for a server whose only clients are reached via unicasts, such as via DHCP rel…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server log-level <fatal | error | warn | info | debug>",
  "cmd": "set service dhcp-server log-level <fatal | error | warn | info | debug>",
  "desc": "DHCP — Set the logging verbosity of the Kea DHCP server. The default level is info."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> authoritative",
  "cmd": "set service dhcp-server shared-network-name <name> authoritative",
  "desc": "DHCP — This says that this device is the only DHCP server for this network. If other devices are trying to offer DHCP leases, this machine will send 'DHCPNAK' to any device trying to request an IP address that is not valid for…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> subnet <subnet> subnet-id <id>",
  "cmd": "set service dhcp-server shared-network-name <name> subnet <subnet> subnet-id <id>",
  "desc": "DHCP — This configuration parameter is required and must be unique to each subnet. It is required to map subnets to lease file entries."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> subnet <subnet> option default-router…",
  "cmd": "set service dhcp-server shared-network-name <name> subnet <subnet> option default-router <address>",
  "desc": "DHCP — This is a configuration parameter for the <subnet>, saying that as part of the response, tell the client that the default gateway can be reached at <address>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> subnet <subnet> option name-server <ad…",
  "cmd": "set service dhcp-server shared-network-name <name> subnet <subnet> option name-server <address>",
  "desc": "DHCP — This is a configuration parameter for the subnet, saying that as part of the response, tell the client that the DNS server can be found at <address>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> subnet <subnet> lease <time>",
  "cmd": "set service dhcp-server shared-network-name <name> subnet <subnet> lease <time>",
  "desc": "DHCP — Assign the IP address to this machine for <time> seconds. The default value is 86400 seconds which corresponds to one day."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> subnet <subnet> range <n> start <addre…",
  "cmd": "set service dhcp-server shared-network-name <name> subnet <subnet> range <n> start <address>",
  "desc": "DHCP — Create DHCP address range with a range id of <n>. DHCP leases are taken from this pool."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> subnet <subnet> range <n> stop <addres…",
  "cmd": "set service dhcp-server shared-network-name <name> subnet <subnet> range <n> stop <address>",
  "desc": "DHCP — Create DHCP address range with a range id of <n>. DHCP leases are taken from this pool."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> subnet <subnet> exclude <address>",
  "cmd": "set service dhcp-server shared-network-name <name> subnet <subnet> exclude <address>",
  "desc": "DHCP — Always exclude this address from any defined range. This address will never be assigned by the DHCP server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> subnet <subnet> option domain-name <do…",
  "cmd": "set service dhcp-server shared-network-name <name> subnet <subnet> option domain-name <domain-name>",
  "desc": "DHCP — The domain-name parameter should be the domain name that will be appended to the client's hostname to form a fully-qualified domain-name (FQDN) (DHCP Option 015)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> subnet <subnet> option domain-search <…",
  "cmd": "set service dhcp-server shared-network-name <name> subnet <subnet> option domain-search <domain-name>",
  "desc": "DHCP — The domain-name parameter should be the domain name used when completing DNS request where no full FQDN is passed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> subnet <subnet> option vendor-option <…",
  "cmd": "set service dhcp-server shared-network-name <name> subnet <subnet> option vendor-option <option-name>",
  "desc": "DHCP — This configuration parameter lets you specify a vendor-option for the subnet specified within the shared network definition."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update",
  "cmd": "set service dhcp-server dynamic-dns-update",
  "desc": "DHCP — Enables DDNS globally."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update send-updates [ enable | disable ]",
  "cmd": "set service dhcp-server dynamic-dns-update send-updates [ enable | disable ]",
  "desc": "DHCP — If set to enable on global level, updates for all scopes will be enabled, except if explicitly set to disable on the scope level."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update override-no-update [ enable | disable ]",
  "cmd": "set service dhcp-server dynamic-dns-update override-no-update [ enable | disable ]",
  "desc": "DHCP — VyOS will ignore client request not to update DNS records and send DDNS update requests regardless."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update override-client-update [ enable | disable ]",
  "cmd": "set service dhcp-server dynamic-dns-update override-client-update [ enable | disable ]",
  "desc": "DHCP — VyOS will override client DDNS request settings and always update both forward and reverse DNS records."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update update-on-renew [ enable | disable ]",
  "cmd": "set service dhcp-server dynamic-dns-update update-on-renew [ enable | disable ]",
  "desc": "DHCP — Issue DDNS update requests on DHCP lease renew. In busy networks this may generate a lot of traffic."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update conflict-resolution [ enable | disable ]",
  "cmd": "set service dhcp-server dynamic-dns-update conflict-resolution [ enable | disable ]",
  "desc": "DHCP — Use RFC-4703 conflict resolution. This algorithm helps in situation when multiple clients reserve same IP addresses or advertise identical hostnames."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update replace-client-name [ never | always | when-pr…",
  "cmd": "set service dhcp-server dynamic-dns-update replace-client-name [ never | always | when-present | when-not-present ]",
  "desc": "DHCP — * **never**: use the name sent by the client. If the client didn't provide any, do not generate one."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update generated-prefix <prefix>",
  "cmd": "set service dhcp-server dynamic-dns-update generated-prefix <prefix>",
  "desc": "DHCP — Prefix used in client name generation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update qualifying-suffix <suffix>",
  "cmd": "set service dhcp-server dynamic-dns-update qualifying-suffix <suffix>",
  "desc": "DHCP — DNS suffix used in client name generation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update ttl-percent <0-100>",
  "cmd": "set service dhcp-server dynamic-dns-update ttl-percent <0-100>",
  "desc": "DHCP — TTL of the DNS record as a percentage of the DHCP lease time."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update hostname-char-set <character string>",
  "cmd": "set service dhcp-server dynamic-dns-update hostname-char-set <character string>",
  "desc": "DHCP — Characters, that are considered invalid in the client name. They will be replaced with hostname-char-replacement string."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update hostname-char-replacement <character string>",
  "cmd": "set service dhcp-server dynamic-dns-update hostname-char-replacement <character string>",
  "desc": "DHCP — Replacement string for the invalid characters defined by hostname-char-set."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update tsig-key <key-name> algorithm <algorithm>",
  "cmd": "set service dhcp-server dynamic-dns-update tsig-key <key-name> algorithm <algorithm>",
  "desc": "DHCP — Sets the algorithm for the TSIG key. Supported algorithms are hmac-md5, hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384, hmac-sha512"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update tsig-key <key-name> secret <key-secret>",
  "cmd": "set service dhcp-server dynamic-dns-update tsig-key <key-name> secret <key-secret>",
  "desc": "DHCP — base64-encoded TSIG key secret value"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update [forward|reverse]-domain <domain-name> key-nam…",
  "cmd": "set service dhcp-server dynamic-dns-update [forward|reverse]-domain <domain-name> key-name <tsig-key-name>",
  "desc": "DHCP — TSIG key used for the domain."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update [forward|reverse]-domain <domain-name> dns-ser…",
  "cmd": "set service dhcp-server dynamic-dns-update [forward|reverse]-domain <domain-name> dns-server <number> address <ip-address>",
  "desc": "DHCP — IP address of the DNS server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update [forward|reverse]-domain <domain-name> dns-ser…",
  "cmd": "set service dhcp-server dynamic-dns-update [forward|reverse]-domain <domain-name> dns-server <number> port <port>",
  "desc": "DHCP — UDP port of the DNS server. 53 is the default."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server high-availability mode [active-active | active-passive]",
  "cmd": "set service dhcp-server high-availability mode [active-active | active-passive]",
  "desc": "DHCP — Define operation mode of High Availability feature. Default value if command is not specified is active-active"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server high-availability source-address <address>",
  "cmd": "set service dhcp-server high-availability source-address <address>",
  "desc": "DHCP — Local IP <address> used when communicating to the HA peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server high-availability remote <address>",
  "cmd": "set service dhcp-server high-availability remote <address>",
  "desc": "DHCP — Remote peer IP <address> of the second DHCP server in this HA cluster."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server high-availability name <name>",
  "cmd": "set service dhcp-server high-availability name <name>",
  "desc": "DHCP — Define the name of the peer server to establish and identify the HA (High Availability) connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server high-availability status <primary | secondary>",
  "cmd": "set service dhcp-server high-availability status <primary | secondary>",
  "desc": "DHCP — The primary and secondary statements determines whether the server is primary or secondary."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> subnet <subnet> static-mapping <descri…",
  "cmd": "set service dhcp-server shared-network-name <name> subnet <subnet> static-mapping <description> mac <address>",
  "desc": "DHCP — Create a new DHCP static mapping named <description> which is valid for the host identified by its MAC <address>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> subnet <subnet> static-mapping <descri…",
  "cmd": "set service dhcp-server shared-network-name <name> subnet <subnet> static-mapping <description> duid <identifier>",
  "desc": "DHCP — Create a new DHCP static mapping named <description> which is valid for the host identified by its DHCP unique identifier (DUID) <identifier>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> subnet <subnet> static-mapping <descri…",
  "cmd": "set service dhcp-server shared-network-name <name> subnet <subnet> static-mapping <description> ip-address <address>",
  "desc": "DHCP — Static DHCP IP address assign to host identified by <description>. IP address must be inside the <subnet> which is defined but can be outside the dynamic range created with set service dhcp-server shared-network-name <n…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server client-class <name> relay-agent-information circuit-id <value>",
  "cmd": "set service dhcp-server client-class <name> relay-agent-information circuit-id <value>",
  "desc": "DHCP — Create a new client class (if not already defined) and set it to match on the \"Circuit ID\" part of the Option 82 field in the DHCP request."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server client-class <name> relay-agent-information remote-id <value>",
  "cmd": "set service dhcp-server client-class <name> relay-agent-information remote-id <value>",
  "desc": "DHCP — Create a new client class (if not already defined) and set it to match on the \"Remote ID\" part of the Option 82 field in the DHCP request."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <subnet-name> subnet <CIDR> client-class <cla…",
  "cmd": "set service dhcp-server shared-network-name <subnet-name> subnet <CIDR> client-class <class-name>",
  "desc": "DHCP — Applies the Client Class with the name <class-name> to the subnet <subnet-name>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <subnet-name> subnet <CIDR> range <range-name…",
  "cmd": "set service dhcp-server shared-network-name <subnet-name> subnet <CIDR> range <range-name> client-class <class-name>",
  "desc": "DHCP — Applies the Client Class with the name <class-name> to the range <range-name> which belongs to subnet <subnet-name>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show log dhcp server",
  "cmd": "show log dhcp server",
  "desc": "DHCP — Show DHCP server daemon log file"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show log dhcp client",
  "cmd": "show log dhcp client",
  "desc": "DHCP — Show logs from all DHCP client processes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show log dhcp client interface <interface>",
  "cmd": "show log dhcp client interface <interface>",
  "desc": "DHCP — Show logs from specific interface DHCP client process."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "restart dhcp server",
  "cmd": "restart dhcp server",
  "desc": "DHCP — Restart the DHCP server"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show dhcp server statistics",
  "cmd": "show dhcp server statistics",
  "desc": "DHCP — Show the DHCP server statistics:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show dhcp server statistics pool <pool>",
  "cmd": "show dhcp server statistics pool <pool>",
  "desc": "DHCP — Show the DHCP server statistics for the specified pool."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show dhcp server leases",
  "cmd": "show dhcp server leases",
  "desc": "DHCP — Show statuses of all active leases:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show dhcp server leases origin [local | remote]",
  "cmd": "show dhcp server leases origin [local | remote]",
  "desc": "DHCP — Show statuses of all active leases granted by local (this server) or remote (failover server):"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show dhcp server leases pool <pool>",
  "cmd": "show dhcp server leases pool <pool>",
  "desc": "DHCP — Show only leases in the specified pool."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show dhcp server leases sort <key>",
  "cmd": "show dhcp server leases sort <key>",
  "desc": "DHCP — Sort the output by the specified key. Possible keys: ip, hardware_address, state, start, end, remaining, pool, hostname (default = ip)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show dhcp server leases state <state>",
  "cmd": "show dhcp server leases state <state>",
  "desc": "DHCP — Show only leases with the specified state. Possible states: all, active, free, expired, released, abandoned, reset, backup (default = active)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server preference <preference value>",
  "cmd": "set service dhcpv6-server preference <preference value>",
  "desc": "DHCP — Clients receiving advertise messages from multiple servers choose the server with the highest preference value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server log-level <fatal | error | warn | info | debug>",
  "cmd": "set service dhcpv6-server log-level <fatal | error | warn | info | debug>",
  "desc": "DHCP — Set the logging verbosity of the Kea DHCPv6 server. The default level is info."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server shared-network-name <name> subnet <subnet> subnet-id <id>",
  "cmd": "set service dhcpv6-server shared-network-name <name> subnet <subnet> subnet-id <id>",
  "desc": "DHCP — This configuration parameter is required and must be unique to each subnet. It is required to map subnets to lease file entries."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server shared-network-name <name> subnet <prefix> lease-time {default…",
  "cmd": "set service dhcpv6-server shared-network-name <name> subnet <prefix> lease-time {default | maximum | minimum}",
  "desc": "DHCP — The default lease time for DHCPv6 leases is 24 hours. This can be changed by supplying a default-time, maximum-time and minimum-time."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server shared-network-name <name> subnet <prefix> option nis-domain <d…",
  "cmd": "set service dhcpv6-server shared-network-name <name> subnet <prefix> option nis-domain <domain-name>",
  "desc": "DHCP — A NIS (Network Information Service) domain can be set to be used for DHCPv6 clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server shared-network-name <name> subnet <prefix> option nisplus-domai…",
  "cmd": "set service dhcpv6-server shared-network-name <name> subnet <prefix> option nisplus-domain <domain-name>",
  "desc": "DHCP — The procedure to specify a NIS+ (Network Information Service Plus) domain is similar to the NIS domain one:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server shared-network-name <name> subnet <prefix> option nis-server <a…",
  "cmd": "set service dhcpv6-server shared-network-name <name> subnet <prefix> option nis-server <address>",
  "desc": "DHCP — Specify a NIS server address for DHCPv6 clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server shared-network-name <name> subnet <prefix> option nisplus-serve…",
  "cmd": "set service dhcpv6-server shared-network-name <name> subnet <prefix> option nisplus-server <address>",
  "desc": "DHCP — Specify a NIS+ server address for DHCPv6 clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server shared-network-name <name> subnet <prefix> option sip-server <a…",
  "cmd": "set service dhcpv6-server shared-network-name <name> subnet <prefix> option sip-server <address | fqdn>",
  "desc": "DHCP — Specify a SIP (Session Initiation Protocol) server by IPv6 address of Fully Qualified Domain Name for all DHCPv6 clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server shared-network-name <name> subnet <prefix> option sntp-server-a…",
  "cmd": "set service dhcpv6-server shared-network-name <name> subnet <prefix> option sntp-server-address <address>",
  "desc": "DHCP — A SNTP server address can be specified for DHCPv6 clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server shared-network-name <name> subnet <prefix> prefix-delegation pr…",
  "cmd": "set service dhcpv6-server shared-network-name <name> subnet <prefix> prefix-delegation prefix <pd-prefix> prefix-length <length>",
  "desc": "DHCP — Delegate prefixes from <pd-prefix> to clients in subnet <prefix>. Range is defined by <length> in bits, 32 to 64."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server shared-network-name <name> subnet <prefix> prefix-delegation pr…",
  "cmd": "set service dhcpv6-server shared-network-name <name> subnet <prefix> prefix-delegation prefix <pd-prefix> delegated-length <length>",
  "desc": "DHCP — Hand out prefixes of size <length> in bits from <pd-prefix> to clients in subnet <prefix> when the request for prefix delegation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server shared-network-name <name> subnet <prefix> prefix-delegation pr…",
  "cmd": "set service dhcpv6-server shared-network-name <name> subnet <prefix> prefix-delegation prefix <pd-prefix> excluded-prefix <exclude-prefix>",
  "desc": "DHCP — Exclude <exclude-prefix> from <pd-prefix>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server shared-network-name <name> subnet <prefix> prefix-delegation pr…",
  "cmd": "set service dhcpv6-server shared-network-name <name> subnet <prefix> prefix-delegation prefix <pd-prefix> excluded-prefix-length <length>",
  "desc": "DHCP — Define length of exclude prefix in <pd-prefix>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show log dhcpv6 server",
  "cmd": "show log dhcpv6 server",
  "desc": "DHCP — Show DHCPv6 server daemon log file"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show log dhcpv6 client",
  "cmd": "show log dhcpv6 client",
  "desc": "DHCP — Show logs from all DHCPv6 client processes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show log dhcpv6 client interface <interface>",
  "cmd": "show log dhcpv6 client interface <interface>",
  "desc": "DHCP — Show logs from specific interface DHCPv6 client process."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "restart dhcpv6 server",
  "cmd": "restart dhcpv6 server",
  "desc": "DHCP — To restart the DHCPv6 server"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show dhcpv6 server leases",
  "cmd": "show dhcpv6 server leases",
  "desc": "DHCP — Shows status of all assigned leases:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show dhcpv6 server leases pool <pool>",
  "cmd": "show dhcpv6 server leases pool <pool>",
  "desc": "DHCP — Show only leases in the specified pool."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show dhcpv6 server leases sort <key>",
  "cmd": "show dhcpv6 server leases sort <key>",
  "desc": "DHCP — Sort the output by the specified key. Possible keys: expires, iaid_duid, ip, last_comm, pool, remaining, state, type (default = ip)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "show dhcpv6 server leases state <state>",
  "cmd": "show dhcpv6 server leases state <state>",
  "desc": "DHCP — Show only leases with the specified state. Possible states: abandoned, active, all, backup, expired, free, released, reset (default = active)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service ssh port <port>",
  "cmd": "set service ssh port <port>",
  "desc": "Interfaces — Enabling SSH only requires you to specify the port <port> you want SSH to listen on."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh listen-address <address>",
  "cmd": "set service ssh listen-address <address>",
  "desc": "System — Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be defined."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh cipher <cipher>",
  "cmd": "set service ssh cipher <cipher>",
  "desc": "System — Define allowed ciphers used for the SSH connection. A number of allowed ciphers can be specified, use multiple occurrences to allow multiple ciphers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh disable-password-authentication",
  "cmd": "set service ssh disable-password-authentication",
  "desc": "System — Disable password based authentication. Login via SSH keys only."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh fido pin-required",
  "cmd": "set service ssh fido pin-required",
  "desc": "System — Require FIDO2 keys to attest that a user has been verified (e.g. via a PIN)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh fido touch-required",
  "cmd": "set service ssh fido touch-required",
  "desc": "System — Require FIDO2 keys to attest that a user is physically present. VyOS supports SSH authentication using FIDO2-backed keys generated by OpenSSH."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh disable-host-validation",
  "cmd": "set service ssh disable-host-validation",
  "desc": "System — Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh mac <mac>",
  "cmd": "set service ssh mac <mac>",
  "desc": "System — Specifies the available MAC (Message Authentication Code) algorithms. The MAC algorithm is used in protocol version 2 for data integrity protection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set service ssh access-control <allow | deny> <group | user> <name>",
  "cmd": "set service ssh access-control <allow | deny> <group | user> <name>",
  "desc": "VLAN — Add access-control directive to allow or deny users and groups. Directives are processed in the following order of precedence: deny-users, allow-users, deny-groups and allow-groups."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh client-keepalive-interval <interval>",
  "cmd": "set service ssh client-keepalive-interval <interval>",
  "desc": "System — Specify timeout interval for keepalive message in seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh key-exchange <kex>",
  "cmd": "set service ssh key-exchange <kex>",
  "desc": "System — Specify allowed KEX (Key Exchange) algorithms. List of supported algorithms: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh loglevel <quiet | fatal | error | info | verbose>",
  "cmd": "set service ssh loglevel <quiet | fatal | error | info | verbose>",
  "desc": "System — Set the sshd log level. The default is info."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh vrf <name>",
  "cmd": "set service ssh vrf <name>",
  "desc": "System — Specify name of the VRF (Virtual Routing and Forwarding) instance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh pubkey-accepted-algorithm <name>",
  "cmd": "set service ssh pubkey-accepted-algorithm <name>",
  "desc": "System — Specifies the signature algorithms that will be accepted for public key authentication List of supported algorithms: ssh-ed25519, ssh-ed25519-cert-v01@openssh.com, sk-ssh-ed25519@openssh.com, sk-ssh-ed25519-cert-v01@ope…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh trusted-user-ca <name>",
  "cmd": "set service ssh trusted-user-ca <name>",
  "desc": "System — Specify the name of the OpenSSH key-pair that acts as certificate authority and will be used to verify user certificates."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh dynamic-protection",
  "cmd": "set service ssh dynamic-protection",
  "desc": "System — Allow ssh dynamic-protection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh dynamic-protection allow-from <address | prefix>",
  "cmd": "set service ssh dynamic-protection allow-from <address | prefix>",
  "desc": "System — Whitelist of addresses and networks. Always allow inbound connections from these systems."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh dynamic-protection block-time <sec>",
  "cmd": "set service ssh dynamic-protection block-time <sec>",
  "desc": "System — Block source IP in seconds. Subsequent blocks increase by a factor of 1.5 The default is 120."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh dynamic-protection detect-time <sec>",
  "cmd": "set service ssh dynamic-protection detect-time <sec>",
  "desc": "System — Remember source IP in seconds before reset their score. The default is 1800."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ssh dynamic-protection threshold <sec>",
  "cmd": "set service ssh dynamic-protection threshold <sec>",
  "desc": "System — Block source IP when their cumulative attack score exceeds threshold. The default is 30."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "restart ssh",
  "cmd": "restart ssh",
  "desc": "System — Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate ssh server-key",
  "cmd": "generate ssh server-key",
  "desc": "System — Re-generated the public/private keyportion which SSH uses to secure connections."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate ssh client-key /path/to/private_key",
  "cmd": "generate ssh client-key /path/to/private_key",
  "desc": "System — Re-generated a known pub/private keyfile which can be used to connect to other services (e.g."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate public-key-command user <username> path <location>",
  "cmd": "generate public-key-command user <username> path <location>",
  "desc": "System — > Generate the configuration mode commands to add a public key for > ssh_key_based_authentication."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show log ssh",
  "cmd": "show log ssh",
  "desc": "Troubleshooting — Show SSH server log."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "monitor log ssh",
  "cmd": "monitor log ssh",
  "desc": "Troubleshooting — Follow the SSH server log."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show log ssh dynamic-protection",
  "cmd": "show log ssh dynamic-protection",
  "desc": "Troubleshooting — Show SSH dynamic-protection log."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "monitor log ssh dynamic-protection",
  "cmd": "monitor log ssh dynamic-protection",
  "desc": "Troubleshooting — Follow the SSH dynamic-protection log."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show ssh dynamic-protection",
  "cmd": "show ssh dynamic-protection",
  "desc": "Troubleshooting — Show list of IPs currently blocked by SSH dynamic-protection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show ssh fingerprints",
  "cmd": "show ssh fingerprints",
  "desc": "Troubleshooting — Show SSH server public key fingerprints."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show ssh fingerprints ascii",
  "cmd": "show ssh fingerprints ascii",
  "desc": "Troubleshooting — Show SSH server public key fingerprints, including a visual ASCII art representation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service ipoe-server authentication interface <interface> mac <MAC>",
  "cmd": "set service ipoe-server authentication interface <interface> mac <MAC>",
  "desc": "Interfaces — Creates local IPoE user with username=\\*\\*\\<interface\\>\\*\\* and password=\\*\\*\\<MAC\\>\\*\\* (mac-address)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication mode <local | radius>",
  "cmd": "set service ipoe-server authentication mode <local | radius>",
  "desc": "AAA — Set authentication backend. The configured authentication backend is used for all queries."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server client-ip-pool <POOL-NAME> range <x.x.x.x-x.x.x.x | x.x.x.x/x>",
  "cmd": "set service ipoe-server client-ip-pool <POOL-NAME> range <x.x.x.x-x.x.x.x | x.x.x.x/x>",
  "desc": "System — Use this command to define the first IP address of a pool of addresses to be given to IPoE clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server default-pool <POOL-NAME>",
  "cmd": "set service ipoe-server default-pool <POOL-NAME>",
  "desc": "System — Use this command to define default address pool name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server gateway-address <x.x.x.x/x>",
  "cmd": "set service ipoe-server gateway-address <x.x.x.x/x>",
  "desc": "System — Specifies address to be used as server ip address if radius can assign only client address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service ipoe-server interface <interface> mode <l2 | l3>",
  "cmd": "set service ipoe-server interface <interface> mode <l2 | l3>",
  "desc": "Interfaces — > Specifies the client connectivity mode. * **l2**: It means that clients are on same network where interface is.\\*\\*(default)\\*\\* * **l3**: It means that client are behind some router."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set service ipoe-server interface <interface> network <shared | vlan>",
  "cmd": "set service ipoe-server interface <interface> network <shared | vlan>",
  "desc": "VLAN — Specify where interface is shared by multiple users or it is vlan-per-user. * **shared**: Multiple clients share the same network."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius server <server> key <secret>",
  "cmd": "set service ipoe-server authentication radius server <server> key <secret>",
  "desc": "AAA — Configure RADIUS *\\<server\\>* and its required shared *\\<secret\\>* for communicating with the RADIUS server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius source-address <address>",
  "cmd": "set service ipoe-server authentication radius source-address <address>",
  "desc": "AAA — Source IPv4 address used in all RADIUS server queries."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius server <server> port <port>",
  "cmd": "set service ipoe-server authentication radius server <server> port <port>",
  "desc": "AAA — Configure RADIUS *\\<server\\>* and its required port for authentication requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius server <server> fail-time <time>",
  "cmd": "set service ipoe-server authentication radius server <server> fail-time <time>",
  "desc": "AAA — Mark RADIUS server as offline for this given *\\<time\\>* in seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius server <server> disable",
  "cmd": "set service ipoe-server authentication radius server <server> disable",
  "desc": "AAA — Temporary disable this RADIUS server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius acct-timeout <timeout>",
  "cmd": "set service ipoe-server authentication radius acct-timeout <timeout>",
  "desc": "AAA — Timeout to wait reply for Interim-Update packets. (default 3 seconds)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius dynamic-author server <address>",
  "cmd": "set service ipoe-server authentication radius dynamic-author server <address>",
  "desc": "AAA — Specifies IP address for Dynamic Authorization Extension server (DM/CoA). This IP must exist on any VyOS interface or it can be 0.0.0.0."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius dynamic-author port <port>",
  "cmd": "set service ipoe-server authentication radius dynamic-author port <port>",
  "desc": "AAA — UDP port for Dynamic Authorization Extension server (DM/CoA)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius dynamic-author key <secret>",
  "cmd": "set service ipoe-server authentication radius dynamic-author key <secret>",
  "desc": "AAA — Secret for Dynamic Authorization Extension server (DM/CoA)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius max-try <number>",
  "cmd": "set service ipoe-server authentication radius max-try <number>",
  "desc": "AAA — Maximum number of tries to send Access-Request/Accounting-Request queries"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius timeout <timeout>",
  "cmd": "set service ipoe-server authentication radius timeout <timeout>",
  "desc": "AAA — Timeout to wait response from server (seconds)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius nas-identifier <identifier>",
  "cmd": "set service ipoe-server authentication radius nas-identifier <identifier>",
  "desc": "AAA — Value to send to RADIUS server in NAS-Identifier attribute and to be matched in DM/CoA requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius nas-ip-address <address>",
  "cmd": "set service ipoe-server authentication radius nas-ip-address <address>",
  "desc": "AAA — Value to send to RADIUS server in NAS-IP-Address attribute and to be matched in DM/CoA requests."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius rate-limit attribute <attribute>",
  "cmd": "set service ipoe-server authentication radius rate-limit attribute <attribute>",
  "desc": "AAA — Specifies which RADIUS server attribute contains the rate limit information. The default attribute is *Filter-Id*."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius rate-limit enable",
  "cmd": "set service ipoe-server authentication radius rate-limit enable",
  "desc": "AAA — Enables bandwidth shaping via RADIUS."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service ipoe-server authentication radius rate-limit vendor",
  "cmd": "set service ipoe-server authentication radius rate-limit vendor",
  "desc": "AAA — Specifies the vendor dictionary, dictionary needs to be in /usr/share/accel-ppp/radius."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server client-ipv6-pool <IPv6-POOL-NAME> prefix <address>  mask <number-…",
  "cmd": "set service ipoe-server client-ipv6-pool <IPv6-POOL-NAME> prefix <address>  mask <number-of-bits>",
  "desc": "System — Use this command to set the IPv6 address pool from which an IPoE client will get an IPv6 prefix of your defined length (mask) to terminate the IPoE endpoint at their side."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server client-ipv6-pool <IPv6-POOL-NAME> delegate <address>  delegation-…",
  "cmd": "set service ipoe-server client-ipv6-pool <IPv6-POOL-NAME> delegate <address>  delegation-prefix <number-of-bits>",
  "desc": "System — Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on IPoE. You will have to set your IPv6 pool and the length of the delegation prefix."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server default-ipv6-pool <IPv6-POOL-NAME>",
  "cmd": "set service ipoe-server default-ipv6-pool <IPv6-POOL-NAME>",
  "desc": "System — Use this command to define default IPv6 address pool name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server extended-scripts on-change <path_to_script>",
  "cmd": "set service ipoe-server extended-scripts on-change <path_to_script>",
  "desc": "System — Script to run when session interface changed by RADIUS CoA handling"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server extended-scripts on-down <path_to_script>",
  "cmd": "set service ipoe-server extended-scripts on-down <path_to_script>",
  "desc": "System — Script to run when session interface going to terminate"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server extended-scripts on-pre-up <path_to_script>",
  "cmd": "set service ipoe-server extended-scripts on-pre-up <path_to_script>",
  "desc": "System — Script to run before session interface comes up"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server extended-scripts on-up <path_to_script>",
  "cmd": "set service ipoe-server extended-scripts on-up <path_to_script>",
  "desc": "System — Script to run when session interface is completely configured and started"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set service ipoe-server authentication interface <interface> mac <MAC> vlan  <vlan-id>",
  "cmd": "set service ipoe-server authentication interface <interface> mac <MAC> vlan  <vlan-id>",
  "desc": "VLAN — VLAN monitor for automatic creation of VLAN interfaces for specific user on specific \\<interface\\>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service ipoe-server authentication interface <interface> mac <MAC> rate-limit  downlo…",
  "cmd": "set service ipoe-server authentication interface <interface> mac <MAC> rate-limit  download <bandwidth>",
  "desc": "Interfaces — Download bandwidth limit in kbit/s for user on interface *\\<interface\\>*."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service ipoe-server authentication interface <interface> mac <MAC> rate-limit  upload…",
  "cmd": "set service ipoe-server authentication interface <interface> mac <MAC> rate-limit  upload <bandwidth>",
  "desc": "Interfaces — Upload bandwidth limit in kbit/s for for user on interface *\\<interface\\>*."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server client-ip-pool <POOL-NAME> next-pool <NEXT-POOL-NAME>",
  "cmd": "set service ipoe-server client-ip-pool <POOL-NAME> next-pool <NEXT-POOL-NAME>",
  "desc": "System — Use this command to define the next address pool name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service ipoe-server interface <interface> client-subnet <x.x.x.x/x>",
  "cmd": "set service ipoe-server interface <interface> client-subnet <x.x.x.x/x>",
  "desc": "Interfaces — Specify local range of ip address to give to dhcp clients. First IP in range is router IP."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service ipoe-server interface <interface> external-dhcp dhcp-relay <x.x.x.x>",
  "cmd": "set service ipoe-server interface <interface> external-dhcp dhcp-relay <x.x.x.x>",
  "desc": "DHCP — Specify DHCPv4 relay IP address to pass requests to. If specified giaddr is also needed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service ipoe-server interface <interface> external-dhcp giaddr <x.x.x.x>",
  "cmd": "set service ipoe-server interface <interface> external-dhcp giaddr <x.x.x.x>",
  "desc": "DHCP — Specifies relay agent IP addre"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server description <description>",
  "cmd": "set service ipoe-server description <description>",
  "desc": "System — Set description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server limits burst <value>",
  "cmd": "set service ipoe-server limits burst <value>",
  "desc": "System — Burst count"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server limits connection-limit <value>",
  "cmd": "set service ipoe-server limits connection-limit <value>",
  "desc": "System — Acceptable rate of connections (e.g. 1/min, 60/sec)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server limits timeout <value>",
  "cmd": "set service ipoe-server limits timeout <value>",
  "desc": "System — Timeout in seconds"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server max-concurrent-sessions",
  "cmd": "set service ipoe-server max-concurrent-sessions",
  "desc": "System — Maximum number of concurrent session start attempts"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server name-server <address>",
  "cmd": "set service ipoe-server name-server <address>",
  "desc": "System — Connected client should use *\\<address\\>* as their DNS server. This command accepts both IPv4 and IPv6 addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set service ipoe-server shaper fwmark <1-2147483647>",
  "cmd": "set service ipoe-server shaper fwmark <1-2147483647>",
  "desc": "QoS — Match firewall mark value"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "SNMP",
  "title": "set service ipoe-server snmp master-agent",
  "cmd": "set service ipoe-server snmp master-agent",
  "desc": "SNMP — Enable SNMP"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show ipoe-server sessions",
  "cmd": "show ipoe-server sessions",
  "desc": "Troubleshooting — Use this command to locally check the active sessions in the IPoE server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service event-handler event <event-handler name>",
  "cmd": "set service event-handler event <event-handler name>",
  "desc": "System — This is an optional command because the event handler will be automatically created after any of the next commands."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set service event-handler event <event-handler name> filter pattern <regex>",
  "cmd": "set service event-handler event <event-handler name> filter pattern <regex>",
  "desc": "ACL — This is a mandatory command. Sets regular expression to match against log string message."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service event-handler event <event-handler name> script path <path to script>",
  "cmd": "set service event-handler event <event-handler name> script path <path to script>",
  "desc": "System — This is a mandatory command. Sets the full path to the script."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set service event-handler event <event-handler name> filter syslog-identifier <syslogid n…",
  "cmd": "set service event-handler event <event-handler name> filter syslog-identifier <syslogid name>",
  "desc": "ACL — This is an optional command. Filters log messages by syslog-identifier."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service event-handler event <event-handler name> script environment <env name> value…",
  "cmd": "set service event-handler event <event-handler name> script environment <env name> value <env value>",
  "desc": "System — This is an optional command. Adds environment and its value to the script."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service event-handler event <event-handler name> script arguments <arguments>",
  "cmd": "set service event-handler event <event-handler name> script arguments <arguments>",
  "desc": "System — This is an optional command. Adds arguments to the script."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https allow-client address <address>",
  "cmd": "set service https allow-client address <address>",
  "desc": "System — Only allow certain IP addresses or prefixes to access the https webserver."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https certificates ca-certificate <name>",
  "cmd": "set service https certificates ca-certificate <name>",
  "desc": "System — Use CA certificate from PKI subsystem"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https certificates certificate <name>",
  "cmd": "set service https certificates certificate <name>",
  "desc": "System — Use certificate from PKI subsystem"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https certificates dh-params <name>",
  "cmd": "set service https certificates dh-params <name>",
  "desc": "System — Use DH (Diffie–Hellman) parameters from PKI subsystem. Must be at least 2048 bits in length."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https listen-address <address>",
  "cmd": "set service https listen-address <address>",
  "desc": "System — Webserver should only listen on specified IP address"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service https port <number>",
  "cmd": "set service https port <number>",
  "desc": "Interfaces — Webserver should listen on specified port. Default: 443"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https enable-http-redirect",
  "cmd": "set service https enable-http-redirect",
  "desc": "System — Enable automatic redirect from http to https."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https tls-version <1.2 | 1.3>",
  "cmd": "set service https tls-version <1.2 | 1.3>",
  "desc": "System — Select TLS version used. This defaults to both 1.2 and 1.3."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https vrf <name>",
  "cmd": "set service https vrf <name>",
  "desc": "System — Start Webserver in given VRF."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https request-body-size-limit <size>",
  "cmd": "set service https request-body-size-limit <size>",
  "desc": "System — Set the maximum request body size in megabytes. Default is 1MB."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https api keys id <name> key <apikey>",
  "cmd": "set service https api keys id <name> key <apikey>",
  "desc": "System — Set a named api key. Every key has the same, full permissions on the system."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https api rest",
  "cmd": "set service https api rest",
  "desc": "System — Enable REST API"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "set service https api rest debug",
  "cmd": "set service https api rest debug",
  "desc": "Troubleshooting — To enable debug messages. Available via show log or monitor log"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https api rest strict",
  "cmd": "set service https api rest strict",
  "desc": "System — Enforce strict path checking."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https api graphql introspection",
  "cmd": "set service https api graphql introspection",
  "desc": "System — Enable GraphQL Schema introspection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https api graphql authentication type <key | token>",
  "cmd": "set service https api graphql authentication type <key | token>",
  "desc": "System — Set the authentication type for GraphQL, default option is key. Available options are: * key use API keys configured in service https api keys * token use JWT tokens."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https api graphql authentication expiration",
  "cmd": "set service https api graphql authentication expiration",
  "desc": "System — Set the lifetime for JWT tokens in seconds. Default is 3600 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https api graphql authentication secret-length",
  "cmd": "set service https api graphql authentication secret-length",
  "desc": "System — Set the byte length of the JWT secret. Default is 32."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service https api graphql cors allow-origin <origin>",
  "cmd": "set service https api graphql cors allow-origin <origin>",
  "desc": "System — Allow cross-origin requests from \\<origin\\>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding system",
  "cmd": "set service dns forwarding system",
  "desc": "System — Forward incoming DNS queries to the DNS servers configured under the system name-server nodes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dns forwarding dhcp <interface>",
  "cmd": "set service dns forwarding dhcp <interface>",
  "desc": "DHCP — Interfaces whose DHCP client nameservers to forward requests to."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service dns forwarding name-server <address> port <port>",
  "cmd": "set service dns forwarding name-server <address> port <port>",
  "desc": "Interfaces — Send all DNS queries to the IPv4/IPv6 DNS server specified under <address> on optional port specified under <port>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding domain <domain-name> name-server <address>",
  "cmd": "set service dns forwarding domain <domain-name> name-server <address>",
  "desc": "System — Forward received queries for a particular domain (specified via domain-name) to a given nameserver."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding domain <domain-name> addnta",
  "cmd": "set service dns forwarding domain <domain-name> addnta",
  "desc": "System — Add NTA (negative trust anchor) for this domain. This must be set if the domain does not support DNSSEC."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding domain <domain-name> recursion-desired",
  "cmd": "set service dns forwarding domain <domain-name> recursion-desired",
  "desc": "System — Set the \"recursion desired\" bit in requests to the upstream nameserver."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding allow-from <network>",
  "cmd": "set service dns forwarding allow-from <network>",
  "desc": "System — Given the fact that open DNS recursors could be used on DDoS amplification attacks, you must configure the networks which are allowed to use this recursor."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding dnssec <off | process-no-validate | process | log-fail | valid…",
  "cmd": "set service dns forwarding dnssec <off | process-no-validate | process | log-fail | validate>",
  "desc": "System — The PowerDNS recursor has 5 different levels of DNSSEC processing, which can be set with the dnssec setting."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding ignore-hosts-file",
  "cmd": "set service dns forwarding ignore-hosts-file",
  "desc": "System — Do not use the local /etc/hosts file in name resolution. VyOS DHCP server will use this file to add resolvers to assigned addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding cache-size <0-2147483647>",
  "cmd": "set service dns forwarding cache-size <0-2147483647>",
  "desc": "System — Maximum number of DNS cache entries. 1 million per CPU core will generally suffice for most installations."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding negative-ttl <0-7200>",
  "cmd": "set service dns forwarding negative-ttl <0-7200>",
  "desc": "System — A query for which there is authoritatively no answer is cached to quickly deny a record's existence later on, without putting a heavy load on the remote server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding timeout <10-60000>",
  "cmd": "set service dns forwarding timeout <10-60000>",
  "desc": "System — The number of milliseconds to wait for a remote authoritative server to respond before timing out and responding with SERVFAIL."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding listen-address <address>",
  "cmd": "set service dns forwarding listen-address <address>",
  "desc": "System — The local IPv4 or IPv6 addresses to bind the DNS forwarder to. The forwarder will listen on this address for incoming connections."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding source-address <address>",
  "cmd": "set service dns forwarding source-address <address>",
  "desc": "System — The local IPv4 or IPv6 addresses to use as a source address for sending queries."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding no-serve-rfc1918",
  "cmd": "set service dns forwarding no-serve-rfc1918",
  "desc": "System — This makes the server authoritatively not aware of: 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa, which enabling upstream DNS server(s) to be used for reverse lookups of these zones."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding authoritative-domain <domain-name> disable",
  "cmd": "set service dns forwarding authoritative-domain <domain-name> disable",
  "desc": "System — Disable hosting authoritative zone for <domain-name> without deleting from configuration."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding authoritative-domain <domain-name> records <type> <name> disab…",
  "cmd": "set service dns forwarding authoritative-domain <domain-name> records <type> <name> disable",
  "desc": "System — Disable specific record without deleting it from configuration."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding authoritative-domain <domain-name> records <type> <name> ttl <…",
  "cmd": "set service dns forwarding authoritative-domain <domain-name> records <type> <name> ttl <seconds>",
  "desc": "System — Set the TTL (Time-to-live) for the record in seconds. Default is 300 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding authoritative-domain <domain-name> records a <name> address <x…",
  "cmd": "set service dns forwarding authoritative-domain <domain-name> records a <name> address <x.x.x.x>",
  "desc": "System — Set an A (Address) record. Supports @ and any keywords."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding authoritative-domain <domain-name> records aaaa <name> address…",
  "cmd": "set service dns forwarding authoritative-domain <domain-name> records aaaa <name> address <h:h:h:h:h:h:h:h>",
  "desc": "System — Set an AAAA (IPv6 Address) record. Supports @ and any keywords."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding authoritative-domain <domain-name> records cname <name> target…",
  "cmd": "set service dns forwarding authoritative-domain <domain-name> records cname <name> target <target-domain-name>",
  "desc": "System — Set an CNAME (Canonical name) record. Supports @ keyword."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding authoritative-domain <domain-name> records naptr <name> rule <…",
  "cmd": "set service dns forwarding authoritative-domain <domain-name> records naptr <name> rule <rule-number> <option> <value>",
  "desc": "System — Set an NAPTR (Naming authority pointer) record. Supports @ keyword."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding authoritative-domain <domain-name> records ns <name> target <t…",
  "cmd": "set service dns forwarding authoritative-domain <domain-name> records ns <name> target <target-name>",
  "desc": "System — Set an NS (Nameserver) record."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding authoritative-domain <domain-name> records ptr <name> target <…",
  "cmd": "set service dns forwarding authoritative-domain <domain-name> records ptr <name> target <target-name>",
  "desc": "System — Set an PTR (Pointer record) record. Supports @ keyword."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding authoritative-domain <domain-name> records spf <name> value <v…",
  "cmd": "set service dns forwarding authoritative-domain <domain-name> records spf <name> value <value>",
  "desc": "System — Set an SPF (Sender policy framework) record. Supports @ keyword."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service dns forwarding authoritative-domain <domain-name> records srv <name> entry <e…",
  "cmd": "set service dns forwarding authoritative-domain <domain-name> records srv <name> entry <entry-number> [hostname | port | priority | weight] <value>",
  "desc": "Interfaces — Set an SRV (Service) record. Supports @ keyword."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding authoritative-domain <domain-name> records txt <name> value <v…",
  "cmd": "set service dns forwarding authoritative-domain <domain-name> records txt <name> value <value>",
  "desc": "System — Set an TXT (Text) record. Supports @ keyword."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "reset dns forwarding <all | domain>",
  "cmd": "reset dns forwarding <all | domain>",
  "desc": "System — Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "restart dns forwarding",
  "cmd": "restart dns forwarding",
  "desc": "System — Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service dns dynamic name <service-name> address interface <interface>",
  "cmd": "set service dns dynamic name <service-name> address interface <interface>",
  "desc": "Interfaces — Create new dynamic DNS update configuration which will update the IP address assigned to <interface> on the service you configured under <service-name>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns dynamic name <service-name> description <text>",
  "cmd": "set service dns dynamic name <service-name> description <text>",
  "desc": "System — Set description <text> for dynamic DNS service being configured."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns dynamic name <service-name> key <filename>",
  "cmd": "set service dns dynamic name <service-name> key <filename>",
  "desc": "System — File identified by <filename> containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns dynamic name <service-name> server <server>",
  "cmd": "set service dns dynamic name <service-name> server <server>",
  "desc": "System — Configure the DNS <server> IP/FQDN used when updating this dynamic assignment."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns dynamic name <service-name> zone <zone>",
  "cmd": "set service dns dynamic name <service-name> zone <zone>",
  "desc": "System — Configure DNS <zone> to be updated."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns dynamic name <service-name> host-name <record>",
  "cmd": "set service dns dynamic name <service-name> host-name <record>",
  "desc": "System — Configure DNS <record> which should be updated. This can be set multiple times."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns dynamic name <service-name> ttl <ttl>",
  "cmd": "set service dns dynamic name <service-name> ttl <ttl>",
  "desc": "System — Configure optional TTL value on the given resource record. This defaults to 600 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns dynamic interval <60-3600>",
  "cmd": "set service dns dynamic interval <60-3600>",
  "desc": "System — Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns dynamic name <service-name> host-name <hostname>",
  "cmd": "set service dns dynamic name <service-name> host-name <hostname>",
  "desc": "System — Setup the dynamic DNS hostname <hostname> associated with the DynDNS provider identified by <service-name>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns dynamic name <service-name> username <username>",
  "cmd": "set service dns dynamic name <service-name> username <username>",
  "desc": "System — Configure <username> used when authenticating the update request for DynDNS service identified by <service-name>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns dynamic name <service-name> password <password>",
  "cmd": "set service dns dynamic name <service-name> password <password>",
  "desc": "System — Configure <password> used when authenticating the update request for DynDNS service identified by <service-name>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns dynamic name <service-name> protocol <protocol>",
  "cmd": "set service dns dynamic name <service-name> protocol <protocol>",
  "desc": "System — When a custom DynDNS provider is used, the protocol used for communicating to the provider must be specified under <protocol>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns dynamic name <service-name> ip-version 'ipv6'",
  "cmd": "set service dns dynamic name <service-name> ip-version 'ipv6'",
  "desc": "System — Allow explicit IPv6 address for the interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns dynamic name <service-name> address web <url>",
  "cmd": "set service dns dynamic name <service-name> address web <url>",
  "desc": "System — Use configured <url> to determine your IP address. [ddclient] will load <url> and tries to extract your IP address from the response."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns dynamic name <service-name> address web skip <pattern>",
  "cmd": "set service dns dynamic name <service-name> address web skip <pattern>",
  "desc": "System — ddclient will skip any address located before the string set in <pattern>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service salt-minion hash <type>",
  "cmd": "set service salt-minion hash <type>",
  "desc": "System — The hash type used when discovering file on master server (default: sha256)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service salt-minion id <id>",
  "cmd": "set service salt-minion id <id>",
  "desc": "System — Explicitly declare ID for this minion to use (default: hostname)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service salt-minion interval <1-1440>",
  "cmd": "set service salt-minion interval <1-1440>",
  "desc": "System — Interval in minutes between updates (default: 60)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service salt-minion master <hostname | IP>",
  "cmd": "set service salt-minion master <hostname | IP>",
  "desc": "System — The hostname or IP address of the master"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service salt-minion master-key <key>",
  "cmd": "set service salt-minion master-key <key>",
  "desc": "System — URL with signature of master for auth reply verification"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service tftp-server directory <directory>",
  "cmd": "set service tftp-server directory <directory>",
  "desc": "System — Enable TFTP service by specifying the <directory> which will be used to serve files."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service tftp-server listen-address <address>",
  "cmd": "set service tftp-server listen-address <address>",
  "desc": "System — Configure the IPv4 or IPv6 listen address of the TFTP server. Multiple IPv4 and IPv6 addresses can be given."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service tftp-server listen-address <address> vrf <name>",
  "cmd": "set service tftp-server listen-address <address> vrf <name>",
  "desc": "System · services"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service tftp-server allow-upload",
  "cmd": "set service tftp-server allow-upload",
  "desc": "System — Optional, if you want to enable uploads, else TFTP server will act as a read-only server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NTP",
  "title": "set service ntp server <address>",
  "cmd": "set service ntp server <address>",
  "desc": "NTP — Configure one or more servers for synchronisation. Server name can be either an IP address or FQDN (Fully Qualified Domain Name)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NTP",
  "title": "set service ntp server <address> <noselect | nts | pool | prefer | ptp | interleave>",
  "cmd": "set service ntp server <address> <noselect | nts | pool | prefer | ptp | interleave>",
  "desc": "NTP — Configure one or more attributes to the given NTP server. * noselect marks the server as unused, except for display purposes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NTP",
  "title": "set service ntp listen-address <address>",
  "cmd": "set service ntp listen-address <address>",
  "desc": "NTP — NTP process will only listen on the specified IP address. You must specify the <address> and optionally the permitted clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NTP",
  "title": "set service ntp allow-client address <address>",
  "cmd": "set service ntp allow-client address <address>",
  "desc": "NTP — List of networks or client addresses permitted to contact this NTP server. Multiple networks/client IP addresses can be configured."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NTP",
  "title": "set service ntp vrf <name>",
  "cmd": "set service ntp vrf <name>",
  "desc": "NTP — Specify name of the VRF (Virtual Routing and Forwarding) instance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NTP",
  "title": "set service ntp leap-second [ignore|smear|system|timezone]",
  "cmd": "set service ntp leap-second [ignore|smear|system|timezone]",
  "desc": "NTP — Define how to handle leap-seconds. * ignore: No correction is applied to the clock for the leap second."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NTP",
  "title": "set service ntp timestamp interface <interface>",
  "cmd": "set service ntp timestamp interface <interface>",
  "desc": "NTP — Configures hardware timestamping on the interface \\<interface\\>. The special value all can also be specified to enable timestamping on all interfaces that support it."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NTP",
  "title": "set service ntp ptp",
  "cmd": "set service ntp ptp",
  "desc": "NTP — Enables the NTP daemon PTP transport. The NTP daemon will listen on the configured PTP port."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NTP",
  "title": "set service ntp ptp port <port>",
  "cmd": "set service ntp ptp port <port>",
  "desc": "NTP — Configures the PTP port. By default, the standard port 319 is used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service mdns repeater interface <interface>",
  "cmd": "set service mdns repeater interface <interface>",
  "desc": "Interfaces — To enable mDNS repeater you need to configure at least two interfaces so that all incoming mDNS packets from one interface configured here can be re-broadcasted to any other interface(s) configured under this section."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service mdns repeater disable",
  "cmd": "set service mdns repeater disable",
  "desc": "System — mDNS repeater can be temporarily disabled without deleting the service using"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service mdns repeater ip-version <ipv4 | ipv6 | both>",
  "cmd": "set service mdns repeater ip-version <ipv4 | ipv6 | both>",
  "desc": "System — mDNS repeater can be enabled either on IPv4 socket or on IPv6 socket or both to re-broadcast."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service mdns repeater allow-service <service>",
  "cmd": "set service mdns repeater allow-service <service>",
  "desc": "System — mDNS repeater can be configured to re-broadcast only specific services. By default, all services are re-broadcasted."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service mdns repeater browse-domain <domain>",
  "cmd": "set service mdns repeater browse-domain <domain>",
  "desc": "System — Allow listing additional custom domains to be browsed (in addition to the default local) so that they can be reflected."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service mdns repeater cache-entries <entries>",
  "cmd": "set service mdns repeater cache-entries <entries>",
  "desc": "System — Specify how many resource records are cached per interface. Bigger values allow mDNS work correctly in large LANs but also increase memory consumption."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "restart mdns repeater",
  "cmd": "restart mdns repeater",
  "desc": "System — Restart mDNS repeater service."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show log mdns repeater",
  "cmd": "show log mdns repeater",
  "desc": "Troubleshooting — Show logs for mDNS repeater service."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "monitor log mdns repeater",
  "cmd": "monitor log mdns repeater",
  "desc": "Troubleshooting — Follow the logs for mDNS repeater service."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service router-advert interface <interface> ...",
  "cmd": "set service router-advert interface <interface> ...",
  "desc": "Interfaces · services"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service router-advert interface <interface> prefix <prefix/mask>",
  "cmd": "set service router-advert interface <interface> prefix <prefix/mask>",
  "desc": "Interfaces — :::{note} You can also opt for using ::/64 as prefix for your RAs (Router Advertisements)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service router-advert interface <interface> nat64prefix <prefix/mask>",
  "cmd": "set service router-advert interface <interface> nat64prefix <prefix/mask>",
  "desc": "Interfaces — Enable PREF64 option as outlined in 8781. NAT64 prefix mask must be one of: /32, /40, /48, /56, /64 or 96."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service router-advert interface <interface> no-send-advert",
  "cmd": "set service router-advert interface <interface> no-send-advert",
  "desc": "Interfaces — If set, the router will no longer send periodic router advertisements and will not respond to router solicitations."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service router-advert interface <interface> no-send-interval",
  "cmd": "set service router-advert interface <interface> no-send-interval",
  "desc": "Interfaces — Advertisement Interval Option (specified by Mobile IPv6) is always included in Router Advertisements unless this option is set."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf azure-data-explorer authentication client-id <client-id>",
  "cmd": "set service monitoring telegraf azure-data-explorer authentication client-id <client-id>",
  "desc": "System — Authentication application client-id."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf azure-data-explorer authentication client-secret <client-…",
  "cmd": "set service monitoring telegraf azure-data-explorer authentication client-secret <client-secret>",
  "desc": "System — Authentication application client-secret."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf azure-data-explorer authentication tenant-id <tenant-id>",
  "cmd": "set service monitoring telegraf azure-data-explorer authentication tenant-id <tenant-id>",
  "desc": "System — Authentication application tenant-id"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf azure-data-explorer database <name>",
  "cmd": "set service monitoring telegraf azure-data-explorer database <name>",
  "desc": "System — Remote database name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf azure-data-explorer group-metrics <single-table | table-p…",
  "cmd": "set service monitoring telegraf azure-data-explorer group-metrics <single-table | table-per-metric>",
  "desc": "System — Type of metrics grouping when push to Azure Data Explorer. The default is table-per-metric."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf azure-data-explorer table <name>",
  "cmd": "set service monitoring telegraf azure-data-explorer table <name>",
  "desc": "System — Name of the single table Only if set group-metrics single-table."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf azure-data-explorer url <url>",
  "cmd": "set service monitoring telegraf azure-data-explorer url <url>",
  "desc": "System — Remote URL."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf prometheus-client",
  "cmd": "set service monitoring telegraf prometheus-client",
  "desc": "System — Output plugin Prometheus client"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf prometheus-client allow-from <prefix>",
  "cmd": "set service monitoring telegraf prometheus-client allow-from <prefix>",
  "desc": "System — Networks allowed to query this server"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf prometheus-client authentication username <username>",
  "cmd": "set service monitoring telegraf prometheus-client authentication username <username>",
  "desc": "System — HTTP basic authentication username"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf prometheus-client authentication password <password>",
  "cmd": "set service monitoring telegraf prometheus-client authentication password <password>",
  "desc": "System — HTTP basic authentication username"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf prometheus-client listen-address <address>",
  "cmd": "set service monitoring telegraf prometheus-client listen-address <address>",
  "desc": "System — Local IP addresses to listen on"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf prometheus-client metric-version <1 | 2>",
  "cmd": "set service monitoring telegraf prometheus-client metric-version <1 | 2>",
  "desc": "System — Metrics version, the default is 2"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service monitoring telegraf prometheus-client port <port>",
  "cmd": "set service monitoring telegraf prometheus-client port <port>",
  "desc": "Interfaces — Port number used by connection, default is 9273"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf splunk authentication insecure",
  "cmd": "set service monitoring telegraf splunk authentication insecure",
  "desc": "System — Use TLS but skip host validation"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf splunk authentication token <token>",
  "cmd": "set service monitoring telegraf splunk authentication token <token>",
  "desc": "System — Authorization token"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf splunk authentication url <url>",
  "cmd": "set service monitoring telegraf splunk authentication url <url>",
  "desc": "System — Remote URL to Splunk collector"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf influxdb authentication organization <organization>",
  "cmd": "set service monitoring telegraf influxdb authentication organization <organization>",
  "desc": "System — Authentication organization name"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf influxdb authentication token <token>",
  "cmd": "set service monitoring telegraf influxdb authentication token <token>",
  "desc": "System — Authentication token"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf bucket <bucket>",
  "cmd": "set service monitoring telegraf bucket <bucket>",
  "desc": "System — Remote InfluxDB bucket name"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service monitoring telegraf influxdb port <port>",
  "cmd": "set service monitoring telegraf influxdb port <port>",
  "desc": "Interfaces — Remote port"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf influxdb url <url>",
  "cmd": "set service monitoring telegraf influxdb url <url>",
  "desc": "System — Remote URL"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service monitoring telegraf loki port <port>",
  "cmd": "set service monitoring telegraf loki port <port>",
  "desc": "Interfaces — Remote Loki port Default is 3100"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf loki url <url>",
  "cmd": "set service monitoring telegraf loki url <url>",
  "desc": "System — Remote Loki url"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf loki authentication username <username>",
  "cmd": "set service monitoring telegraf loki authentication username <username>",
  "desc": "System · services"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf loki authentication password <password>",
  "cmd": "set service monitoring telegraf loki authentication password <password>",
  "desc": "System — HTTP basic authentication. If either is set both must be set."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring telegraf loki metric-name-label <label>",
  "cmd": "set service monitoring telegraf loki metric-name-label <label>",
  "desc": "System — Label to use for the metric name when sending metrics. If set to an empty string, the label will not be added."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring prometheus node-exporter listen-address <address>",
  "cmd": "set service monitoring prometheus node-exporter listen-address <address>",
  "desc": "System — Configure the address node_exporter is listening on."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service monitoring prometheus node-exporter port <port>",
  "cmd": "set service monitoring prometheus node-exporter port <port>",
  "desc": "Interfaces — Configure the port number node_exporter is listening on."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring prometheus node-exporter vrf <name>",
  "cmd": "set service monitoring prometheus node-exporter vrf <name>",
  "desc": "System — Configure name of the VRF (Virtual Routing and Forwarding) instance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring prometheus node-exporter collectors textfile",
  "cmd": "set service monitoring prometheus node-exporter collectors textfile",
  "desc": "System — Configure textfile collector to export custom metrics read from /run/node_exporter/collector"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring prometheus frr-exporter listen-address <address>",
  "cmd": "set service monitoring prometheus frr-exporter listen-address <address>",
  "desc": "System — Configure the address frr_exporter is listening on."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service monitoring prometheus frr-exporter port <port>",
  "cmd": "set service monitoring prometheus frr-exporter port <port>",
  "desc": "Interfaces — Configure the port number frr_exporter is listening on."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring prometheus frr-exporter vrf <name>",
  "cmd": "set service monitoring prometheus frr-exporter vrf <name>",
  "desc": "System — Configure name of the VRF (Virtual Routing and Forwarding) instance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring prometheus blackbox-exporter listen-address <address>",
  "cmd": "set service monitoring prometheus blackbox-exporter listen-address <address>",
  "desc": "System — Configure the address blackbox_exporter is listening on."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service monitoring prometheus blackbox-exporter port <port>",
  "cmd": "set service monitoring prometheus blackbox-exporter port <port>",
  "desc": "Interfaces — Configure the port number blackbox_exporter is listening on."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service monitoring prometheus blackbox-exporter vrf <name>",
  "cmd": "set service monitoring prometheus blackbox-exporter vrf <name>",
  "desc": "System — Configure name of the VRF (Virtual Routing and Forwarding) instance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service suricata address-group <text> <address | group>",
  "cmd": "set service suricata address-group <text> <address | group>",
  "desc": "System — Address groups are useful when you need to create rules that apply to specific IP addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service suricata port-group <text> <address | group>",
  "cmd": "set service suricata port-group <text> <address | group>",
  "desc": "Interfaces — Port groups are useful when you need to create rules that apply to specific ports."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service suricata interface <text>",
  "cmd": "set service suricata interface <text>",
  "desc": "Interfaces — The interface that will be monitored by the Suricata service."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service suricata log eve <filename | filetype | type>",
  "cmd": "set service suricata log eve <filename | filetype | type>",
  "desc": "System — Configuration of the logging file. * filename Log file (default: eve.json)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "update suricata",
  "cmd": "update suricata",
  "desc": "System — Checks for the existence of the Suricata configuration file, updates the service, and then restarts it."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "restart suricata",
  "cmd": "restart suricata",
  "desc": "System — Restarts the service. It checks if the Suricata service is active before attempting to restart it."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols static arp interface <interface> address <host> mac <mac>",
  "cmd": "set protocols static arp interface <interface> address <host> mac <mac>",
  "desc": "Interfaces — **Configure a static ARP entry on the specified interface.** This creates a permanent mapping between an IP address and a MAC address on the specified interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show protocols static arp interface <interface>",
  "cmd": "show protocols static arp interface <interface>",
  "desc": "Interfaces — Show all ARP table entries for the specific interface. Example for eth1: .."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis net <network-entity-title>",
  "cmd": "set protocols isis net <network-entity-title>",
  "desc": "ISIS — This command sets network entity title (NET) provided in ISO format. Here is an example NET (Network Entity Title) value: :::{code-block} none 49.0001.1921.6800.1002.00 ::: The CLNS address consists of the following par…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface>",
  "cmd": "set protocols isis interface <interface>",
  "desc": "ISIS — This command enables IS-IS on this interface, and allows for adjacency to occur."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis dynamic-hostname",
  "cmd": "set protocols isis dynamic-hostname",
  "desc": "ISIS — This command enables support for dynamic hostname TLV. Dynamic hostname mapping determined as described in 2763, Dynamic Hostname Exchange Mechanism for IS-IS."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis level <level-1|level-1-2|level-2>",
  "cmd": "set protocols isis level <level-1|level-1-2|level-2>",
  "desc": "ISIS — This command defines the IS-IS router behavior: * **level-1** - Act as a station (Level 1) router only."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis lsp-mtu <size>",
  "cmd": "set protocols isis lsp-mtu <size>",
  "desc": "ISIS — This command configures the maximum size of generated LSPs (Link State PDUs), in bytes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis metric-style <narrow|transition|wide>",
  "cmd": "set protocols isis metric-style <narrow|transition|wide>",
  "desc": "ISIS — This command sets old-style (ISO 10589) or new style packet formats: * **narrow** - Use old style of TLVs with narrow metric."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis purge-originator",
  "cmd": "set protocols isis purge-originator",
  "desc": "ISIS — This command enables 6232 purge originator identification. Enable purge originator identification (POI) by adding the type, length and value (TLV) with the Intermediate System (IS) identification to the LSPs that do not…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis set-attached-bit",
  "cmd": "set protocols isis set-attached-bit",
  "desc": "ISIS — This command sets ATT bit to 1 in Level1 LSPs. It is described in 3787."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis set-overload-bit",
  "cmd": "set protocols isis set-overload-bit",
  "desc": "ISIS — This command sets overload bit to avoid any transit traffic through this router."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis default-information originate <ipv4|ipv6> level-1",
  "cmd": "set protocols isis default-information originate <ipv4|ipv6> level-1",
  "desc": "ISIS — This command will generate a default-route in L1 database."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis default-information originate <ipv4|ipv6> level-2",
  "cmd": "set protocols isis default-information originate <ipv4|ipv6> level-2",
  "desc": "ISIS — This command will generate a default-route in L2 database."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis ldp-sync",
  "cmd": "set protocols isis ldp-sync",
  "desc": "ISIS — This command will enable IGP-LDP synchronization globally for ISIS. This requires for LDP to be functional."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis ldp-sync holddown <seconds>",
  "cmd": "set protocols isis ldp-sync holddown <seconds>",
  "desc": "ISIS — This command will change the hold down value globally for IGP-LDP synchronization during convergence/interface flap events."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> circuit-type <level-1|level-1-2|level-2-only>",
  "cmd": "set protocols isis interface <interface> circuit-type <level-1|level-1-2|level-2-only>",
  "desc": "ISIS — This command specifies circuit type for interface: * **level-1** - Level-1 only adjacencies are formed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> hello-interval <seconds>",
  "cmd": "set protocols isis interface <interface> hello-interval <seconds>",
  "desc": "ISIS — This command sets hello interval in seconds on a given interface. The range is 1 to 600."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> hello-multiplier <seconds>",
  "cmd": "set protocols isis interface <interface> hello-multiplier <seconds>",
  "desc": "ISIS — This command sets multiplier for hello holding time on a given interface. The range is 2 to 100."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> hello-padding",
  "cmd": "set protocols isis interface <interface> hello-padding",
  "desc": "ISIS — This command configures padding on hello packets to accommodate asymmetrical maximum transfer units (MTUs) from different hosts as described in 3719."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> metric <metric>",
  "cmd": "set protocols isis interface <interface> metric <metric>",
  "desc": "ISIS — This command set default metric for circuit. The metric range is 1 to 16777215 (Max value depend if metric support narrow or wide value)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> network point-to-point",
  "cmd": "set protocols isis interface <interface> network point-to-point",
  "desc": "ISIS — This command specifies network type to Point-to-Point. The default network type is broadcast."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> passive",
  "cmd": "set protocols isis interface <interface> passive",
  "desc": "ISIS — This command configures the passive mode for this interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> password plaintext-password <text>",
  "cmd": "set protocols isis interface <interface> password plaintext-password <text>",
  "desc": "ISIS — This command configures the authentication password for the interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> priority <number>",
  "cmd": "set protocols isis interface <interface> priority <number>",
  "desc": "ISIS — This command sets priority for the interface for DIS (Designated Intermediate System) election."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> psnp-interval <number>",
  "cmd": "set protocols isis interface <interface> psnp-interval <number>",
  "desc": "ISIS — This command sets PSNP interval in seconds. The interval range is 0 to 127."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> no-three-way-handshake",
  "cmd": "set protocols isis interface <interface> no-three-way-handshake",
  "desc": "ISIS — This command disables Three-Way Handshake for P2P adjacencies which described in 5303."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> ldp-sync disable",
  "cmd": "set protocols isis interface <interface> ldp-sync disable",
  "desc": "ISIS — This command disables IGP-LDP sync for this specific interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> ldp-sync holddown <seconds>",
  "cmd": "set protocols isis interface <interface> ldp-sync holddown <seconds>",
  "desc": "ISIS — This command will change the hold down value for IGP-LDP synchronization during convergence/interface flap events, but for this interface only."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> fast-reroute lfa [level-1 | level-2] enable",
  "cmd": "set protocols isis interface <interface> fast-reroute lfa [level-1 | level-2] enable",
  "desc": "ISIS — This command enables per-prefix local LFA fast reroute link protection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> fast-reroute lfa [level-1 | level-2] exclude",
  "cmd": "set protocols isis interface <interface> fast-reroute lfa [level-1 | level-2] exclude",
  "desc": "ISIS — This command excludes an interface from the local LFA backup nexthop computation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> fast-reroute remote-lfa [level-1 | level-2] tunn…",
  "cmd": "set protocols isis interface <interface> fast-reroute remote-lfa [level-1 | level-2] tunnel mpls-ldp",
  "desc": "ISIS — This command enables per-prefix Remote LFA fast reroute link protection. Note that other routers in the network need to be configured to accept LDP targeted hello messages in order for RLFA to work."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> fast-reroute remote-lfa [level-1 | level-2] maxi…",
  "cmd": "set protocols isis interface <interface> fast-reroute remote-lfa [level-1 | level-2] maximum-metric <metric>",
  "desc": "ISIS — This command limits Remote LFA PQ node selection within the specified metric. Metric value range (1-16777215)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> fast-reroute ti-lfa [level-1|level-2] [node-prot…",
  "cmd": "set protocols isis interface <interface> fast-reroute ti-lfa [level-1|level-2] [node-protection [link-fallback]]",
  "desc": "ISIS — This command enables per-prefix TI-LFA fast reroute link or node protection. When node protection is used, option link-fallback enables the computation and use of link-protecting LFAs for destinations unprotected by nod…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis redistribute ipv4 <route source> level-1",
  "cmd": "set protocols isis redistribute ipv4 <route source> level-1",
  "desc": "ISIS — This command redistributes routing information from the given route source into the ISIS database as Level-1."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis redistribute ipv4 <route source> level-2",
  "cmd": "set protocols isis redistribute ipv4 <route source> level-2",
  "desc": "ISIS — This command redistributes routing information from the given route source into the ISIS database as Level-2."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis redistribute ipv4 <route source> <level-1|level-2> metric <number>",
  "cmd": "set protocols isis redistribute ipv4 <route source> <level-1|level-2> metric <number>",
  "desc": "ISIS — This command specifies metric for redistributed routes from the given route source."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis redistribute ipv4 <route source> <level-1|level-2> route-map <name>",
  "cmd": "set protocols isis redistribute ipv4 <route source> <level-1|level-2> route-map <name>",
  "desc": "ISIS — This command allows to use route map to filter redistributed routes from the given route source."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis lsp-gen-interval <seconds>",
  "cmd": "set protocols isis lsp-gen-interval <seconds>",
  "desc": "ISIS — This command sets minimum interval in seconds between regenerating same LSP. The interval range is 1 to 120."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis lsp-refresh-interval <seconds>",
  "cmd": "set protocols isis lsp-refresh-interval <seconds>",
  "desc": "ISIS — This command sets LSP refresh interval in seconds. IS-IS generates LSPs when the state of a link changes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis max-lsp-lifetime <seconds>",
  "cmd": "set protocols isis max-lsp-lifetime <seconds>",
  "desc": "ISIS — This command sets LSP maximum LSP lifetime in seconds. The interval range is 350 to 65535."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis spf-interval <seconds>",
  "cmd": "set protocols isis spf-interval <seconds>",
  "desc": "ISIS — This command sets minimum interval between consecutive SPF calculations in seconds.The interval range is 1 to 120."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis spf-delay-ietf holddown <milliseconds>",
  "cmd": "set protocols isis spf-delay-ietf holddown <milliseconds>",
  "desc": "ISIS · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis spf-delay-ietf init-delay <milliseconds>",
  "cmd": "set protocols isis spf-delay-ietf init-delay <milliseconds>",
  "desc": "ISIS · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis spf-delay-ietf long-delay <milliseconds>",
  "cmd": "set protocols isis spf-delay-ietf long-delay <milliseconds>",
  "desc": "ISIS · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis spf-delay-ietf short-delay <milliseconds>",
  "cmd": "set protocols isis spf-delay-ietf short-delay <milliseconds>",
  "desc": "ISIS · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis spf-delay-ietf time-to-learn <milliseconds>",
  "cmd": "set protocols isis spf-delay-ietf time-to-learn <milliseconds>",
  "desc": "ISIS — This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis fast-reroute lfa remote prefix-list <name> <level-1|level-2>",
  "cmd": "set protocols isis fast-reroute lfa remote prefix-list <name> <level-1|level-2>",
  "desc": "ISIS — This command enables IP fast re-routing that is part of 5286. Specifically this is a prefix list which references a prefix in which will select eligible PQ nodes for remote LFA backups."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis fast-reroute lfa local load-sharing disable <level-1|level-2>",
  "cmd": "set protocols isis fast-reroute lfa local load-sharing disable <level-1|level-2>",
  "desc": "ISIS — This command disables the load sharing across multiple LFA backups."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis fast-reroute lfa local tiebreaker <downstream|lowest-backup-metric|nod…",
  "cmd": "set protocols isis fast-reroute lfa local tiebreaker <downstream|lowest-backup-metric|node-protecting> index <number> <level-1|level-2>",
  "desc": "ISIS — This command will configure a tie-breaker for multiple local LFA backups. The lower index numbers will be processed first."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis fast-reroute lfa local priority-limit <medium|high|critical> <level-1|…",
  "cmd": "set protocols isis fast-reroute lfa local priority-limit <medium|high|critical> <level-1|level-2>",
  "desc": "ISIS — This command will limit LFA backup computation up to the specified prefix priority."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing srv6 interface <interface>",
  "cmd": "set protocols isis segment-routing srv6 interface <interface>",
  "desc": "ISIS — The dummy interface used to install SRv6 SIDs into the Linux data plane. The interface must exist and must be present when configuring IS-IS with SRv6."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing srv6 locator <locator>",
  "cmd": "set protocols isis segment-routing srv6 locator <locator>",
  "desc": "ISIS — Specifies the SRv6 locator to use for IS-IS. IS-IS automatically allocates prefix and adjacency SIDs, creates local SID entries and advertises them into the IGP domain."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing srv6 node-msd max-end-d <0-255>",
  "cmd": "set protocols isis segment-routing srv6 node-msd max-end-d <0-255>",
  "desc": "ISIS — The Maximum End D MSD Type specifies the maximum number of SIDs present in an SRH when performing decapsulation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing srv6 node-msd max-end-pop <0-255>",
  "cmd": "set protocols isis segment-routing srv6 node-msd max-end-pop <0-255>",
  "desc": "ISIS — The Maximum End Pop MSD Type signals the maximum number of SIDs in the SRH to which the router can apply \"Penultimate Segment Pop (PSP) of the SRH\" or \"Ultimate Segment Pop (USP) of the SRH\" behavior, as defined in \"Fla…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing srv6 node-msd max-h-encaps <0-255>",
  "cmd": "set protocols isis segment-routing srv6 node-msd max-h-encaps <0-255>",
  "desc": "ISIS — The Maximum H.Encaps MSD Type signals the maximum number of SIDs that can be added to the segment list of an SRH as part of the \"H.Encaps\" behavior, as defined in 8986."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing srv6 node-msd max-segs-left <0-255>",
  "cmd": "set protocols isis segment-routing srv6 node-msd max-segs-left <0-255>",
  "desc": "ISIS — The Maximum Segments Left MSD Type signals the maximum value of the \"Segments Left\" field (8754) in the SRH of a received packet before applying the Endpoint behavior associated with a SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric net <network-entity-title>",
  "cmd": "set protocols openfabric net <network-entity-title>",
  "desc": "ISIS — This command sets network entity title (NET) provided in ISO format. Here is an example NET (Network Entity Title) value: :::{code-block} none 49.0001.1921.6800.1002.00 ::: The CLNS address consists of the following par…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain <name> interface <interface> address-family <ipv4|ipv6>",
  "cmd": "set protocols openfabric domain <name> interface <interface> address-family <ipv4|ipv6>",
  "desc": "ISIS — This command enables OpenFabric instance with \\<NAME\\> on this interface, and allows for adjacency to occur for address family (IPv4 or IPv6 or both)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain-password <plaintext-password|md5> <password>",
  "cmd": "set protocols openfabric domain-password <plaintext-password|md5> <password>",
  "desc": "ISIS — This command configures the authentication password for a routing domain, as clear text or md5 one."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain <name> purge-originator",
  "cmd": "set protocols openfabric domain <name> purge-originator",
  "desc": "ISIS — This command enables 6232 purge originator identification."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain <name> set-overload-bit",
  "cmd": "set protocols openfabric domain <name> set-overload-bit",
  "desc": "ISIS — This command sets overload bit to avoid any transit traffic through this router."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain <name> log-adjacency-changes",
  "cmd": "set protocols openfabric domain <name> log-adjacency-changes",
  "desc": "ISIS — Log changes in adjacency state."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain <name> fabric-tier <number>",
  "cmd": "set protocols openfabric domain <name> fabric-tier <number>",
  "desc": "ISIS — This command sets a static tier number to advertise as location in the fabric."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric interface <interface> hello-interval <seconds>",
  "cmd": "set protocols openfabric interface <interface> hello-interval <seconds>",
  "desc": "ISIS — This command sets hello interval in seconds on a given interface. The range is 1 to 600."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain <name> interface <interface> hello-multiplier <number>",
  "cmd": "set protocols openfabric domain <name> interface <interface> hello-multiplier <number>",
  "desc": "ISIS — This command sets multiplier for hello holding time on a given interface. The range is 2 to 100."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain <name> interface <interface> metric <metric>",
  "cmd": "set protocols openfabric domain <name> interface <interface> metric <metric>",
  "desc": "ISIS — This command sets default metric for circuit. The metric range is 1 to 16777215."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric interface <interface> passive",
  "cmd": "set protocols openfabric interface <interface> passive",
  "desc": "ISIS — This command enables the passive mode for this interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain <name> interface <interface> password plaintext-password…",
  "cmd": "set protocols openfabric domain <name> interface <interface> password plaintext-password <text>",
  "desc": "ISIS — This command sets the authentication password for the interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain <name> interface <interface> csnp-interval <seconds>",
  "cmd": "set protocols openfabric domain <name> interface <interface> csnp-interval <seconds>",
  "desc": "ISIS — This command sets Complete Sequence Number Packets (CSNP) interval in seconds. The interval range is 1 to 600."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain <name> interface <interface> psnp-interval <number>",
  "cmd": "set protocols openfabric domain <name> interface <interface> psnp-interval <number>",
  "desc": "ISIS — This command sets Partial Sequence Number Packets (PSNP) interval in seconds. The interval range is 1 to 120."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain <name> lsp-gen-interval <seconds>",
  "cmd": "set protocols openfabric domain <name> lsp-gen-interval <seconds>",
  "desc": "ISIS — This command sets minimum interval at which link-state packets (LSPs) are generated."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain <name> lsp-refresh-interval <seconds>",
  "cmd": "set protocols openfabric domain <name> lsp-refresh-interval <seconds>",
  "desc": "ISIS — This command sets LSP refresh interval in seconds. The interval range is 1 to 65235."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain <name> max-lsp-lifetime <seconds>",
  "cmd": "set protocols openfabric domain <name> max-lsp-lifetime <seconds>",
  "desc": "ISIS — This command sets LSP maximum LSP lifetime in seconds. The interval range is 360 to 65535."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain <name> spf-interval <seconds>",
  "cmd": "set protocols openfabric domain <name> spf-interval <seconds>",
  "desc": "ISIS — This command sets minimum interval between consecutive shortest path first (SPF) calculations in seconds.The interval range is 1 to 120."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route <subnet> next-hop <address>",
  "cmd": "set protocols static route <subnet> next-hop <address>",
  "desc": "Routing — Configure next-hop *\\<address\\>* for an IPv4 static route. Multiple static routes can be created."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route <subnet> next-hop <address> disable",
  "cmd": "set protocols static route <subnet> next-hop <address> disable",
  "desc": "Routing — Disable this IPv4 static route entry."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route <subnet> next-hop <address> distance <distance>",
  "cmd": "set protocols static route <subnet> next-hop <address> distance <distance>",
  "desc": "Routing — Defines next-hop distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route <subnet> interface <interface>",
  "cmd": "set protocols static route <subnet> interface <interface>",
  "desc": "Routing — Allows you to configure the next-hop interface for an interface-based IPv4 static route."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route <subnet> interface <interface> disable",
  "cmd": "set protocols static route <subnet> interface <interface> disable",
  "desc": "Routing — Disables interface-based IPv4 static route."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route <subnet> interface <interface> distance <distance>",
  "cmd": "set protocols static route <subnet> interface <interface> distance <distance>",
  "desc": "Routing — Defines next-hop distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols static route <subnet> next-hop <address> bfd",
  "cmd": "set protocols static route <subnet> next-hop <address> bfd",
  "desc": "BFD — Configure a static route for *\\<subnet\\>* using gateway *\\<address\\>* and use the gateway address as BFD peer destination address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols static route <subnet> next-hop <address> bfd profile <profile>",
  "cmd": "set protocols static route <subnet> next-hop <address> bfd profile <profile>",
  "desc": "BFD — Configure a static route for *\\<subnet\\>* using gateway *\\<address\\>* and use the gateway address as BFD peer destination address with BFD profile *\\<profile\\>*."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols static route <subnet> next-hop <address> bfd multi-hop source-address <sour…",
  "cmd": "set protocols static route <subnet> next-hop <address> bfd multi-hop source-address <source-address>",
  "desc": "BFD — Configure a static route for *\\<subnet\\>* using gateway *\\<address\\>* and use the gateway address as BFD peer destination address with source address *\\<source\\>* but initiate a multi-hop session."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set protocols static route <subnet> dhcp-interface <interface>",
  "cmd": "set protocols static route <subnet> dhcp-interface <interface>",
  "desc": "DHCP — Defines route with DHCP interface supplying next-hop IP address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocol static route <subnet> reject",
  "cmd": "set protocol static route <subnet> reject",
  "desc": "Routing — Defines route which emits an ICMP unreachable when matched."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route <subnet> reject distance <distance>",
  "cmd": "set protocols static route <subnet> reject distance <distance>",
  "desc": "Routing — Defines distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route <subnet> reject tag <tag>",
  "cmd": "set protocols static route <subnet> reject tag <tag>",
  "desc": "Routing — Sets a tag for this route."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocol static route6 <subnet> reject",
  "cmd": "set protocol static route6 <subnet> reject",
  "desc": "Routing — Defines route which emits an ICMP unreachable when matched."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route <subnet> blackhole",
  "cmd": "set protocols static route <subnet> blackhole",
  "desc": "Routing — Use this command to configure a \"black-hole\" route on the router. A black-hole route is a route for which the system silently discard packets that are matched."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route <subnet> blackhole distance <distance>",
  "cmd": "set protocols static route <subnet> blackhole distance <distance>",
  "desc": "Routing — Defines blackhole distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route <subnet> blackhole tag <tag>",
  "cmd": "set protocols static route <subnet> blackhole tag <tag>",
  "desc": "Routing — Sets a tag for this route."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route6 <subnet> next-hop <address>",
  "cmd": "set protocols static route6 <subnet> next-hop <address>",
  "desc": "Routing — Configure next-hop *\\<address\\>* for an IPv6 static route. Multiple static routes can be created."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route6 <subnet> next-hop <address> disable",
  "cmd": "set protocols static route6 <subnet> next-hop <address> disable",
  "desc": "Routing — Disable this IPv6 static route entry."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route6 <subnet> next-hop <address> distance <distance>",
  "cmd": "set protocols static route6 <subnet> next-hop <address> distance <distance>",
  "desc": "Routing — Defines next-hop distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route6 <subnet> next-hop <address> segments <segments>",
  "cmd": "set protocols static route6 <subnet> next-hop <address> segments <segments>",
  "desc": "Routing — It is possible to specify a static route for ipv6 prefixes using an SRv6 segments instruction."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols static route6 <subnet> interface <interface>",
  "cmd": "set protocols static route6 <subnet> interface <interface>",
  "desc": "Interfaces — Allows you to configure the next-hop interface for an interface-based IPv6 static route."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols static route6 <subnet> interface <interface> disable",
  "cmd": "set protocols static route6 <subnet> interface <interface> disable",
  "desc": "Interfaces — Disables interface-based IPv6 static route."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols static route6 <subnet> interface <interface> distance <distance>",
  "cmd": "set protocols static route6 <subnet> interface <interface> distance <distance>",
  "desc": "Interfaces — Defines next-hop distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols static route6 <subnet> interface <interface> segments <segments>",
  "cmd": "set protocols static route6 <subnet> interface <interface> segments <segments>",
  "desc": "Interfaces — It is possible to specify a static route for ipv6 prefixes using an SRv6 segments instruction."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols static route6 <subnet> next-hop <address> bfd",
  "cmd": "set protocols static route6 <subnet> next-hop <address> bfd",
  "desc": "BFD — Configure a static route for *\\<subnet\\>* using gateway *\\<address\\>* and use the gateway address as BFD peer destination address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols static route6 <subnet> next-hop <address> bfd profile <profile>",
  "cmd": "set protocols static route6 <subnet> next-hop <address> bfd profile <profile>",
  "desc": "BFD — Configure a static route for *\\<subnet\\>* using gateway *\\<address\\>* and use the gateway address as BFD peer destination address with BFD profile *\\<profile\\>*."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols static route6 <subnet> next-hop <address> bfd multi-hop source-address <sou…",
  "cmd": "set protocols static route6 <subnet> next-hop <address> bfd multi-hop source-address <source>",
  "desc": "BFD — Configure a static route for *\\<subnet\\>* using gateway *\\<address\\>* and use the gateway address as BFD peer destination address with source address *\\<source\\>* but initiate a multi-hop session."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route6 <subnet> reject distance <distance>",
  "cmd": "set protocols static route6 <subnet> reject distance <distance>",
  "desc": "Routing — Defines distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route6 <subnet> reject tag <tag>",
  "cmd": "set protocols static route6 <subnet> reject tag <tag>",
  "desc": "Routing — Sets a tag for this route."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route6 <subnet> blackhole",
  "cmd": "set protocols static route6 <subnet> blackhole",
  "desc": "Routing — Use this command to configure a \"black-hole\" route on the router. A black-hole route is a route for which the system silently discard packets that are matched."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route6 <subnet> blackhole distance <distance>",
  "cmd": "set protocols static route6 <subnet> blackhole distance <distance>",
  "desc": "Routing — Defines blackhole distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route6 <subnet> blackhole tag <tag>",
  "cmd": "set protocols static route6 <subnet> blackhole tag <tag>",
  "desc": "Routing — Sets a tag for this route."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols babel interface <interface>",
  "cmd": "set protocols babel interface <interface>",
  "desc": "Interfaces — **Enable Babel routing on the specified interface.** The system immediately begins sending and receiving Babel packets on this interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols babel parameters diversity",
  "cmd": "set protocols babel parameters diversity",
  "desc": "Routing — **Enable radio-frequency diversity routing for the Babel process.** Enabling this feature is highly recommended for networks with many wireless nodes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols babel parameters diversity-factor <1-256>",
  "cmd": "set protocols babel parameters diversity-factor <1-256>",
  "desc": "Routing — **Configure the multiplicative factor for diversity routing, in units of 1/256.** Lower multiplicative factors give greater weight to diversity in route selection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols babel parameters resend-delay <20-655340>",
  "cmd": "set protocols babel parameters resend-delay <20-655340>",
  "desc": "Routing — **Configure the delay in milliseconds before the system resends an important request or update.** The default value is 2000 ms."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols babel parameters smoothing-half-life <0-65534>",
  "cmd": "set protocols babel parameters smoothing-half-life <0-65534>",
  "desc": "Routing — **Configure the time constant, in seconds, for the smoothing algorithm used to implement hysteresis.** Higher values reduce route oscillation but slightly increase convergence time."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set protocols babel interface <interface> type <auto|wired|wireless>",
  "cmd": "set protocols babel interface <interface> type <auto|wired|wireless>",
  "desc": "Wireless — **Configure the network type for the Babel-enabled interface.** Choose from the following: * auto: Babel automatically detects if an interface is wired or wireless."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols babel interface <interface> split-horizon <default|disable|enable>",
  "cmd": "set protocols babel interface <interface> split-horizon <default|disable|enable>",
  "desc": "Interfaces — **Configure the split-horizon routing behavior for the specified interface.** Use one of the following options: * default: Babel automatically enables split-horizon on wired interfaces and disables it on wireless interf…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols babel interface <interface> hello-interval <20-655340>",
  "cmd": "set protocols babel interface <interface> hello-interval <20-655340>",
  "desc": "Interfaces — **Configure the interval, in milliseconds, between scheduled hello messages on the specified interface.** On wired links, Babel detects link failures within two hello intervals."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols babel interface <interface> update-interval <20-655340>",
  "cmd": "set protocols babel interface <interface> update-interval <20-655340>",
  "desc": "Interfaces — **Configure the interval, in milliseconds, between scheduled routing updates on the specified interface.** Because Babel uses triggered updates extensively, you can increase this value on reliable links with minimal pac…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols babel interface <interface> rxcost <1-65534>",
  "cmd": "set protocols babel interface <interface> rxcost <1-65534>",
  "desc": "Interfaces — **Configure the base receive cost for the specified interface.** Babel applies this value based on the configured network type: * wired: The value is the routing cost advertised to neighboring routers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols babel interface <interface> rtt-decay <1-256>",
  "cmd": "set protocols babel interface <interface> rtt-decay <1-256>",
  "desc": "Interfaces — **Configure the decay factor for the exponential moving average of RTT samples, in units of 1/256.** Higher values discard older samples faster."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols babel interface <interface> rtt-min <1-65535>",
  "cmd": "set protocols babel interface <interface> rtt-min <1-65535>",
  "desc": "Interfaces — **Configure the minimum RTT, in milliseconds, at which the cost to a neighbor begins to increase.** The additional cost is linear in (rtt - rtt-min)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols babel interface <interface> rtt-max <1-65535>",
  "cmd": "set protocols babel interface <interface> rtt-max <1-65535>",
  "desc": "Interfaces — **Configure the maximum RTT, in milliseconds, above which the cost to a neighbor stops increasing.** The default value is 120 ms."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols babel interface <interface> max-rtt-penalty <0-65535>",
  "cmd": "set protocols babel interface <interface> max-rtt-penalty <0-65535>",
  "desc": "Interfaces — **Configure the maximum cost added to a neighbor when RTT meets or exceeds rtt-max.** Setting this value to 0 disables RTT-based costs."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols babel interface <interface> enable-timestamps",
  "cmd": "set protocols babel interface <interface> enable-timestamps",
  "desc": "Interfaces — **Configure adding timestamps to each Hello and IHU message to calculate RTT values.** Enabling timestamps is recommended for tunnel interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols babel interface <interface> channel <1-254|interfering|noninterfering>",
  "cmd": "set protocols babel interface <interface> channel <1-254|interfering|noninterfering>",
  "desc": "Interfaces — **Configure the channel identifier that diversity routing uses for the specified interface.** Interfaces interfere with each other based on the assigned channel identifier: * 1–254: The interface interferes with interfa…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols babel redistribute <ipv4|ipv6> <route source>",
  "cmd": "set protocols babel redistribute <ipv4|ipv6> <route source>",
  "desc": "Routing — **Configure the redistribution of routing information from the specified route source into the Babel process.** The following route sources are available: * **ipv4:** bgp, connected, eigrp, isis, kernel, nhrp, ospf, rip…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set protocols babel distribute-list <ipv4|ipv6> access-list <in|out> <number>",
  "cmd": "set protocols babel distribute-list <ipv4|ipv6> access-list <in|out> <number>",
  "desc": "VLAN — **Configure global Babel route filtering using an access list.** Specify the direction in which the access list is applied: * in: Filters incoming routes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set protocols babel distribute-list <ipv4|ipv6> interface <interface> access-list <in|out…",
  "cmd": "set protocols babel distribute-list <ipv4|ipv6> interface <interface> access-list <in|out> <number>",
  "desc": "VLAN — **Configure Babel route filtering on the specified interface using an access list.** Specify the direction in which the access list is applied: * in: Filters incoming routes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set protocols babel distribute-list <ipv4|ipv6> prefix-list <in|out> <name>",
  "cmd": "set protocols babel distribute-list <ipv4|ipv6> prefix-list <in|out> <name>",
  "desc": "ACL — **Configure global Babel route filtering using a prefix list.** Specify the direction in which the prefix list is applied: * in: Filters incoming routes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set protocols babel distribute-list <ipv4|ipv6> interface <interface> prefix-list <in|out…",
  "cmd": "set protocols babel distribute-list <ipv4|ipv6> interface <interface> prefix-list <in|out> <name>",
  "desc": "ACL — **Configure Babel route filtering on the specified interface using a prefix list.** Specify the direction in which the prefix list is applied: * in: Filters incoming routes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols rpki polling-period <1-86400>",
  "cmd": "set protocols rpki polling-period <1-86400>",
  "desc": "Routing — Define the time interval to update the local cache The default value is 300 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols rpki expire-interval <600-172800>",
  "cmd": "set protocols rpki expire-interval <600-172800>",
  "desc": "Routing — Set the number of seconds the router waits until the router expires the cache. The default value is 7200 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols rpki retry-interval <1-7200>",
  "cmd": "set protocols rpki retry-interval <1-7200>",
  "desc": "Routing — Set the number of seconds the router waits until retrying to connect to the cache server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols rpki cache <address> port <port>",
  "cmd": "set protocols rpki cache <address> port <port>",
  "desc": "Interfaces — Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols rpki cache <address> preference <preference>",
  "cmd": "set protocols rpki cache <address> preference <preference>",
  "desc": "Routing — Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols rpki cache <address> ssh username <user>",
  "cmd": "set protocols rpki cache <address> ssh username <user>",
  "desc": "Routing — SSH username to establish an SSH connection to the cache server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols rpki cache <address> ssh private-key-file <filepath>",
  "cmd": "set protocols rpki cache <address> ssh private-key-file <filepath>",
  "desc": "Routing — Local path that includes the private key file of the router."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols rpki cache <address> ssh public-key-file <filepath>",
  "cmd": "set protocols rpki cache <address> ssh public-key-file <filepath>",
  "desc": "Routing — Local path that includes the public key file of the router."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim ecmp",
  "cmd": "set protocols pim ecmp",
  "desc": "Multicast — If PIM has the a choice of ECMP nexthops for a particular RPF (Reverse Path Forwarding), PIM will cause S,G flows to be spread out amongst the nexthops."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim ecmp rebalance",
  "cmd": "set protocols pim ecmp rebalance",
  "desc": "Multicast — If PIM is using ECMP and an interface goes down, cause PIM to rebalance all S,G flows across the remaining nexthops."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim join-prune-interval <n>",
  "cmd": "set protocols pim join-prune-interval <n>",
  "desc": "Multicast — Modify the join/prune interval that PIM uses to the new value. Time is specified in seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim keep-alive-timer <n>",
  "cmd": "set protocols pim keep-alive-timer <n>",
  "desc": "Multicast — Modify the time out value for a S,G flow from 1-65535 seconds. If choosing a value below 31 seconds be aware that some hardware platforms cannot see data flowing in better than 30 second chunks."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim packets <n>",
  "cmd": "set protocols pim packets <n>",
  "desc": "Multicast — When processing packets from a neighbor process the number of packets incoming at one time before moving on to the next task."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim register-accept-list <prefix-list>",
  "cmd": "set protocols pim register-accept-list <prefix-list>",
  "desc": "Multicast — When PIM receives a register packet the source of the packet will be compared to the prefix-list specified, and if a permit is received normal processing continues."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim register-suppress-time <n>",
  "cmd": "set protocols pim register-suppress-time <n>",
  "desc": "Multicast — Modify the time that pim will register suppress a FHR will send register notifications to the kernel."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim rp <address> group <group>",
  "cmd": "set protocols pim rp <address> group <group>",
  "desc": "Multicast — In order to use PIM, it is necessary to configure a RP (Rendezvous Point) for join messages to be sent to."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim rp keep-alive-timer <n>",
  "cmd": "set protocols pim rp keep-alive-timer <n>",
  "desc": "Multicast — Modify the time out value for a S,G flow from 1-65535 seconds at RP (Rendezvous Point)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim no-v6-secondary",
  "cmd": "set protocols pim no-v6-secondary",
  "desc": "Multicast — When sending PIM hello packets tell PIM to not send any v6 secondary addresses on the interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim spt-switchover infinity-and-beyond [prefix-list <list>]",
  "cmd": "set protocols pim spt-switchover infinity-and-beyond [prefix-list <list>]",
  "desc": "Multicast — On the last hop router if it is desired to not switch over to the SPT tree configure this command."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim ssm prefix-list <list>",
  "cmd": "set protocols pim ssm prefix-list <list>",
  "desc": "Multicast — Specify a range of group addresses via a prefix-list that forces PIM to never do SSM (Source-Specific Multicast) over."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim interface <interface> bfd [profile <name>]",
  "cmd": "set protocols pim interface <interface> bfd [profile <name>]",
  "desc": "Multicast — Automatically create BFD session for each RIP peer discovered in this interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim interface <interface> dr-priority <n>",
  "cmd": "set protocols pim interface <interface> dr-priority <n>",
  "desc": "Multicast — Set the DR (Designated Router) Priority for the interface. This command is useful to allow the user to influence what node becomes the DR for a LAN segment."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim interface <interface> hello <n>",
  "cmd": "set protocols pim interface <interface> hello <n>",
  "desc": "Multicast — Set the PIM hello and hold interval for a interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim interface <interface> no-bsm",
  "cmd": "set protocols pim interface <interface> no-bsm",
  "desc": "Multicast — Tell PIM that we would not like to use this interface to process bootstrap messages."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim interface <interface> no-unicast-bsm",
  "cmd": "set protocols pim interface <interface> no-unicast-bsm",
  "desc": "Multicast — Tell PIM that we would not like to use this interface to process unicast bootstrap messages."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim interface <interface> passive",
  "cmd": "set protocols pim interface <interface> passive",
  "desc": "Multicast — Disable sending and receiving PIM control packets on the interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim interface <interface> source-address <ip-address>",
  "cmd": "set protocols pim interface <interface> source-address <ip-address>",
  "desc": "Multicast — If you have multiple addresses configured on a particular interface and would like PIM to use a specific source address associated with that interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim igmp watermark-warning <n>",
  "cmd": "set protocols pim igmp watermark-warning <n>",
  "desc": "Multicast — Configure watermark warning generation for an IGMP group limit. Generates warning once the configured group limit is reached while adding new groups."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim interface <interface> igmp join <multicast-address> source-address <IP-…",
  "cmd": "set protocols pim interface <interface> igmp join <multicast-address> source-address <IP-address>",
  "desc": "Multicast — Use this command to allow the selected interface to join a multicast group defining the multicast address you want to join and the source IP address too."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim interface <interface> igmp query-interval <seconds>",
  "cmd": "set protocols pim interface <interface> igmp query-interval <seconds>",
  "desc": "Multicast — Use this command to configure in the selected interface the IGMP host query interval (1-1800) in seconds that PIM will use."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim interface <interface> igmp query-max-response-time <n>",
  "cmd": "set protocols pim interface <interface> igmp query-max-response-time <n>",
  "desc": "Multicast — Use this command to configure in the selected interface the IGMP query response timeout value (10-250) in deciseconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim interface <interface> igmp version <version-number>",
  "cmd": "set protocols pim interface <interface> igmp version <version-number>",
  "desc": "Multicast — Use this command to define in the selected interface whether you choose IGMP version 2 or 3."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols static mroute <subnet> next-hop <address>",
  "cmd": "set protocols static mroute <subnet> next-hop <address>",
  "desc": "Multicast — **Configure the next-hop IP address for the specified source subnet.** When multicast traffic originates from this subnet, the router expects it to arrive from the upstream neighbor at the specified IP address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols static mroute <subnet> next-hop <address> distance <1-255>",
  "cmd": "set protocols static mroute <subnet> next-hop <address> distance <1-255>",
  "desc": "Multicast — **Configure the administrative distance for the mroute via the specified next-hop IP address.** Mroutes with a lower administrative distance are prioritized over mroutes with a higher distance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols static mroute <subnet> next-hop <address> disable",
  "cmd": "set protocols static mroute <subnet> next-hop <address> disable",
  "desc": "Multicast — **Disable the mroute via the specified next-hop IP address.** This command temporarily deactivates the mroute while preserving the configured subnet, next-hop, and distance parameters."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols static mroute <subnet> interface <interface>",
  "cmd": "set protocols static mroute <subnet> interface <interface>",
  "desc": "Multicast — **Configure the valid interface for the specified source subnet.** When multicast traffic originates from this subnet, the router expects it to arrive on the specified interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols static mroute <subnet> interface <interface> distance <1-255>",
  "cmd": "set protocols static mroute <subnet> interface <interface> distance <1-255>",
  "desc": "Multicast — **Configure the administrative distance for the mroute via the specified interface.** Mroutes with a lower administrative distance are prioritized over mroutes with a higher distance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols static mroute <subnet> interface <interface> disable",
  "cmd": "set protocols static mroute <subnet> interface <interface> disable",
  "desc": "Multicast — **Disable the mroute via the specified interface.** This command temporarily deactivates the mroute while preserving the configured subnet, interface, and distance parameters."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address>",
  "cmd": "set protocols bfd peer <address>",
  "desc": "BFD — **Configure the IPv4 or IPv6 address of the BFD peer.** You can configure multiple BFD peers by specifying a different IP address for each neighbor you want to monitor."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address> echo-mode",
  "cmd": "set protocols bfd peer <address> echo-mode",
  "desc": "BFD — **Enable BFD echo transmission mode for the peer at the specified IP address.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address> multihop",
  "cmd": "set protocols bfd peer <address> multihop",
  "desc": "BFD — **Configure the peer at the specified IP address as a multi-hop neighbor.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address> source address <address>",
  "cmd": "set protocols bfd peer <address> source address <address>",
  "desc": "BFD — **Configure the source IP address for the BFD session with the peer at the specified IP address.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address> source interface <interface>",
  "cmd": "set protocols bfd peer <address> source interface <interface>",
  "desc": "BFD — **Configure the source interface for the BFD session with the peer at the specified IP address.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address> interval echo-interval <10-60000>",
  "cmd": "set protocols bfd peer <address> interval echo-interval <10-60000>",
  "desc": "BFD — **Configure the minimum interval, in milliseconds, at which the local system can receive echo packets from the peer at the specified IP address.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address> interval multiplier <2-255>",
  "cmd": "set protocols bfd peer <address> interval multiplier <2-255>",
  "desc": "BFD — **Configure the detection multiplier for the peer at the specified IP address.** BFD multiplies the negotiated interval by this value to calculate the detection time — the period after which it declares the session down…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address> interval receive <10-60000>",
  "cmd": "set protocols bfd peer <address> interval receive <10-60000>",
  "desc": "BFD — **Configure the interval, in milliseconds, at which the local system can receive BFD control packets from the peer at the specified IP address.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address> interval transmit <10-60000>",
  "cmd": "set protocols bfd peer <address> interval transmit <10-60000>",
  "desc": "BFD — **Configure the interval, in milliseconds, at which you want the local system to transmit BFD control packets to the peer at the specified IP address.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address> shutdown",
  "cmd": "set protocols bfd peer <address> shutdown",
  "desc": "BFD — **Disable the BFD session with the peer at the specified IP address.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address> minimum-ttl <1-254>",
  "cmd": "set protocols bfd peer <address> minimum-ttl <1-254>",
  "desc": "BFD — **Configure the minimum TTL (Time to Live) value that incoming BFD control packets must have to be accepted from the peer at the specified IP address.** BFD discards any packet whose TTL is below this threshold."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address> passive",
  "cmd": "set protocols bfd peer <address> passive",
  "desc": "BFD — **Configure the BFD session with the peer at the specified IP address to operate in passive mode.** In passive mode, the local system does not initiate the BFD session."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address> profile <profile>",
  "cmd": "set protocols bfd peer <address> profile <profile>",
  "desc": "BFD — **Apply settings from a designated BFD profile to the peer at the specified IP address.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address> vrf <vrf>",
  "cmd": "set protocols bfd peer <address> vrf <vrf>",
  "desc": "BFD — **Bind the BFD session with the peer at the specified IP address to a specific VRF (Virtual Routing and Forwarding) instance.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <neighbor> bfd",
  "cmd": "set protocols bgp neighbor <neighbor> bfd",
  "desc": "BGP — **Enable BFD failure detection for the BGP session with the neighbor at the specified IP address.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp peer-group <neighbor> bfd",
  "cmd": "set protocols bgp peer-group <neighbor> bfd",
  "desc": "BGP — **Enable BFD failure detection for all neighbors in the specified BGP peer group.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> bfd",
  "cmd": "set protocols ospf interface <interface> bfd",
  "desc": "OSPF — **Enable BFD failure detection for OSPF neighbors discovered on the specified interface.** When OSPF forms an adjacency with a neighbor on this interface, it requests BFD to establish a session with that neighbor."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 interface <interface> bfd",
  "cmd": "set protocols ospfv3 interface <interface> bfd",
  "desc": "OSPFv3 — **Enable BFD failure detection for OSPFv3 neighbors discovered on the specified interface.** When OSPFv3 forms an adjacency with a neighbor on this interface, it requests BFD to establish a session with that neighbor."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> bfd",
  "cmd": "set protocols isis interface <interface> bfd",
  "desc": "ISIS — **Enable BFD failure detection for IS-IS neighbors discovered on the specified interface.** When IS-IS forms an adjacency with a neighbor on this interface, it requests BFD to establish a session with that neighbor."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "show bfd peers",
  "cmd": "show bfd peers",
  "desc": "BFD — **Show all BFD peers.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols static route <subnet> next-hop <address> bfd multi-hop source-address <addr…",
  "cmd": "set protocols static route <subnet> next-hop <address> bfd multi-hop source-address <address>",
  "desc": "BFD — **Configure BFD failure detection for a multi-hop static route.** BFD uses the next-hop IP address as the BFD peer IP address and the multi-hop source IP address as the local source IP for outgoing BFD packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols static route6 <subnet> next-hop <address> bfd multi-hop source-address <add…",
  "cmd": "set protocols static route6 <subnet> next-hop <address> bfd multi-hop source-address <address>",
  "desc": "BFD — **Configure BFD failure detection for a multi-hop IPv6 static route.** BFD uses the next-hop IPv6 address as the BFD peer IPv6 address and the multi-hop source IPv6 address as the local source IPv6 address for outgoing…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> network <A.B.C.D/M>",
  "cmd": "set protocols ospf area <number> network <A.B.C.D/M>",
  "desc": "OSPF — This command specifies the OSPF enabled interface(s). If the interface has an address from defined range then the command enables OSPF on this interface so router can provide network information to the other ospf router…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf auto-cost reference-bandwidth <number>",
  "cmd": "set protocols ospf auto-cost reference-bandwidth <number>",
  "desc": "OSPF — This command sets the reference bandwidth for cost calculations, where bandwidth can be in range from 1 to 4294967, specified in Mbits/s."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf parameters router-id <rid>",
  "cmd": "set protocols ospf parameters router-id <rid>",
  "desc": "OSPF — This command sets the router-ID of the OSPF process. The router-ID may be an IP address of the router, but need not be – it can be any arbitrary 32bit number."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf default-information originate [always] [metric <number>] [metric-type…",
  "cmd": "set protocols ospf default-information originate [always] [metric <number>] [metric-type <1|2>] [route-map <name>]",
  "desc": "OSPF — Originate an AS-External (type-5) LSA describing a default route into all external-routing capable areas, of the specified metric and metric type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf distance global <distance>",
  "cmd": "set protocols ospf distance global <distance>",
  "desc": "OSPF — This command change distance value of OSPF globally. The distance range is 1 to 255."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf distance ospf <external|inter-area|intra-area> <distance>",
  "cmd": "set protocols ospf distance ospf <external|inter-area|intra-area> <distance>",
  "desc": "OSPF — This command change distance value of OSPF. The arguments are the distance values for external routes, inter-area routes and intra-area routes respectively."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf log-adjacency-changes [detail]",
  "cmd": "set protocols ospf log-adjacency-changes [detail]",
  "desc": "OSPF — This command allows to log changes in adjacency. With the optional detail argument, all changes in adjacency status are shown."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf max-metric router-lsa <administrative|on-shutdown <seconds>|on-startup…",
  "cmd": "set protocols ospf max-metric router-lsa <administrative|on-shutdown <seconds>|on-startup <seconds>>",
  "desc": "OSPF — This enables 3137 support, where the OSPF process describes its transit links in its router-LSA as having infinite distance so that other routers will avoid calculating transit paths through the router while still being…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf parameters abr-type <cisco|ibm|shortcut|standard>",
  "cmd": "set protocols ospf parameters abr-type <cisco|ibm|shortcut|standard>",
  "desc": "OSPF — This command selects ABR model. OSPF router supports four ABR models: **cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas one of which is a backbone area."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf parameters rfc1583-compatibility",
  "cmd": "set protocols ospf parameters rfc1583-compatibility",
  "desc": "OSPF — 2328, the successor to 1583, suggests according to section G.2 (changes) in section 16.4.1 a change to the path preference algorithm that prevents possible routing loops that were possible in the old version of OSPFv2."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> passive [disable]",
  "cmd": "set protocols ospf interface <interface> passive [disable]",
  "desc": "OSPF — This command specifies interface as passive. Passive interface advertises its address, but does not run the OSPF protocol (adjacencies are not formed and hello packets are not generated)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf passive-interface default",
  "cmd": "set protocols ospf passive-interface default",
  "desc": "OSPF — This command specifies all interfaces as passive by default. Because this command changes the configuration logic to a default passive; therefore, interfaces where router adjacencies are expected need to be configured w…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf maximum-paths <1-64>",
  "cmd": "set protocols ospf maximum-paths <1-64>",
  "desc": "OSPF — Use this command to control the maximum number of equal cost paths to reach a specific destination."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf refresh timers <seconds>",
  "cmd": "set protocols ospf refresh timers <seconds>",
  "desc": "OSPF — The router automatically updates link-state information with its neighbors. Only an obsolete information is updated which age has exceeded a specific threshold."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf timers throttle spf <delay|initial-holdtime|max-holdtime> <seconds>",
  "cmd": "set protocols ospf timers throttle spf <delay|initial-holdtime|max-holdtime> <seconds>",
  "desc": "OSPF — This command sets the initial delay, the initial-holdtime and the maximum-holdtime between when SPF is calculated and the event which triggered the calculation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf ldp-sync",
  "cmd": "set protocols ospf ldp-sync",
  "desc": "OSPF — This command will enable IGP-LDP synchronization globally for OSPF. This requires for LDP to be functional."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf ldp-sync holddown <seconds>",
  "cmd": "set protocols ospf ldp-sync holddown <seconds>",
  "desc": "OSPF — This command will change the hold down value globally for IGP-LDP synchronization during convergence/interface flap events."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf capability opaque",
  "cmd": "set protocols ospf capability opaque",
  "desc": "OSPF — ospfd supports Opaque LSA 2370 as partial support for MPLS Traffic Engineering LSAs."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> area-type stub",
  "cmd": "set protocols ospf area <number> area-type stub",
  "desc": "OSPF — This command specifies the area to be a Stub Area. That is, an area where no router originates routes external to OSPF and hence an area where all external routes are via the ABR(s)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> area-type stub no-summary",
  "cmd": "set protocols ospf area <number> area-type stub no-summary",
  "desc": "OSPF — This command specifies the area to be a Totally Stub Area. In addition to stub area limitations this area type prevents an ABR from injecting Network-Summary (type-3) LSAs into the specified stub area."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> area-type stub default-cost <number>",
  "cmd": "set protocols ospf area <number> area-type stub default-cost <number>",
  "desc": "OSPF — This command sets the cost of default-summary LSAs announced to stubby areas. The cost range is 0 to 16777215."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> area-type nssa",
  "cmd": "set protocols ospf area <number> area-type nssa",
  "desc": "OSPF — This command specifies the area to be a Not So Stubby Area. External routing information is imported into an NSSA in Type-7 LSAs."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> area-type nssa no-summary",
  "cmd": "set protocols ospf area <number> area-type nssa no-summary",
  "desc": "OSPF — This command specifies the area to be a NSSA Totally Stub Area. ABRs for such an area do not need to pass Network-Summary (type-3) LSAs (except the default summary route), ASBR-Summary LSAs (type-4) and AS-External LSAs…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> area-type nssa default-cost <number>",
  "cmd": "set protocols ospf area <number> area-type nssa default-cost <number>",
  "desc": "OSPF — This command sets the default cost of LSAs announced to NSSA areas. The cost range is 0 to 16777215."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> area-type nssa translate <always|candidate|never>",
  "cmd": "set protocols ospf area <number> area-type nssa translate <always|candidate|never>",
  "desc": "OSPF — Specifies whether this NSSA border router will unconditionally translate Type-7 LSAs into Type-5 LSAs."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> authentication plaintext-password",
  "cmd": "set protocols ospf area <number> authentication plaintext-password",
  "desc": "OSPF — This command specifies that simple password authentication should be used for the given area."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> authentication md5",
  "cmd": "set protocols ospf area <number> authentication md5",
  "desc": "OSPF — This command specify that OSPF packets must be authenticated with MD5 HMACs within the given area."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> range <A.B.C.D/M> [cost <number>]",
  "cmd": "set protocols ospf area <number> range <A.B.C.D/M> [cost <number>]",
  "desc": "OSPF — This command summarizes intra area paths from specified area into one summary-LSA (Type-3) announced to other areas."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> range <A.B.C.D/M> not-advertise",
  "cmd": "set protocols ospf area <number> range <A.B.C.D/M> not-advertise",
  "desc": "OSPF — This command instead of summarizing intra area paths filter them - i.e. intra area paths from this range are not advertised into other areas."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> export-list <acl_number>",
  "cmd": "set protocols ospf area <number> export-list <acl_number>",
  "desc": "OSPF — Filter Type-3 summary-LSAs announced to other areas originated from intra- area paths from specified area."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> import-list <acl_number>",
  "cmd": "set protocols ospf area <number> import-list <acl_number>",
  "desc": "OSPF — Same as export-list, but it applies to paths announced into specified area as Type-3 summary-LSAs."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> range <A.B.C.D/M> substitute <E.F.G.H/M>",
  "cmd": "set protocols ospf area <number> range <A.B.C.D/M> substitute <E.F.G.H/M>",
  "desc": "OSPF — One Type-3 summary-LSA with routing info <E.F.G.H/M> is announced into backbone area if defined area contains at least one intra-area network (i.e."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> shortcut <default|disable|enable>",
  "cmd": "set protocols ospf area <number> shortcut <default|disable|enable>",
  "desc": "OSPF — This parameter allows to \"shortcut\" routes (non-backbone) for inter-area routes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> virtual-link <A.B.C.D>",
  "cmd": "set protocols ospf area <number> virtual-link <A.B.C.D>",
  "desc": "OSPF — Provides a backbone area coherence by virtual link establishment. In general, OSPF protocol requires a backbone area (area 0) to be coherent and fully connected."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> area <x.x.x.x | x>",
  "cmd": "set protocols ospf interface <interface> area <x.x.x.x | x>",
  "desc": "OSPF — Enable ospf on an interface and set associated area. If you have a lot of interfaces, and/or a lot of subnets, then enabling OSPF via this command may result in a slight performance improvement."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> authentication plaintext-password <text>",
  "cmd": "set protocols ospf interface <interface> authentication plaintext-password <text>",
  "desc": "OSPF — This command sets OSPF authentication key to a simple password. After setting, all OSPF packets are authenticated."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> authentication md5 key-id <id> md5-key <text>",
  "cmd": "set protocols ospf interface <interface> authentication md5 key-id <id> md5-key <text>",
  "desc": "OSPF — This command specifys that MD5 HMAC authentication must be used on this interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> bandwidth <number>",
  "cmd": "set protocols ospf interface <interface> bandwidth <number>",
  "desc": "OSPF — This command sets the interface bandwidth for cost calculations, where bandwidth can be in range from 1 to 100000, specified in Mbits/s."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> cost <number>",
  "cmd": "set protocols ospf interface <interface> cost <number>",
  "desc": "OSPF — This command sets link cost for the specified interface. The cost value is set to router-LSA’s metric field and used for SPF calculation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> dead-interval <number>",
  "cmd": "set protocols ospf interface <interface> dead-interval <number>",
  "desc": "OSPF — Set number of seconds for router Dead Interval timer value used for Wait Timer and Inactivity Timer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> hello-multiplier <number>",
  "cmd": "set protocols ospf interface <interface> hello-multiplier <number>",
  "desc": "OSPF — The hello-multiplier specifies how many Hellos to send per second, from 1 (every second) to 10 (every 100ms)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> hello-interval <number>",
  "cmd": "set protocols ospf interface <interface> hello-interval <number>",
  "desc": "OSPF — Set number of seconds for Hello Interval timer value. Setting this value, Hello packet will be sent every timer value seconds on the specified interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> mtu-ignore",
  "cmd": "set protocols ospf interface <interface> mtu-ignore",
  "desc": "OSPF — This command disables check of the MTU value in the OSPF DBD packets. Thus, use of this command allows the OSPF adjacency to reach the FULL state even though there is an interface MTU mismatch between two OSPF routers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> network <type>",
  "cmd": "set protocols ospf interface <interface> network <type>",
  "desc": "OSPF — This command allows to specify the distribution type for the network connected to this interface: **broadcast** – broadcast IP addresses distribution."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> priority <number>",
  "cmd": "set protocols ospf interface <interface> priority <number>",
  "desc": "OSPF — This command sets Router Priority integer value. The router with the highest priority will be more eligible to become Designated Router."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> retransmit-interval <number>",
  "cmd": "set protocols ospf interface <interface> retransmit-interval <number>",
  "desc": "OSPF — This command sets number of seconds for RxmtInterval timer value. This value is used when retransmitting Database Description and Link State Request packets if acknowledge was not received."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> transmit-delay <number>",
  "cmd": "set protocols ospf interface <interface> transmit-delay <number>",
  "desc": "OSPF — This command sets number of seconds for InfTransDelay value. It allows to set and adjust for each interface the delay interval before starting the synchronizing process of the router's database with all neighbors."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> ldp-sync disable",
  "cmd": "set protocols ospf interface <interface> ldp-sync disable",
  "desc": "OSPF — This command disables IGP-LDP sync for this specific interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> ldp-sync holddown <seconds>",
  "cmd": "set protocols ospf interface <interface> ldp-sync holddown <seconds>",
  "desc": "OSPF — This command will change the hold down value for IGP-LDP synchronization during convergence/interface flap events, but for this interface only."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf aggregation timer <seconds>",
  "cmd": "set protocols ospf aggregation timer <seconds>",
  "desc": "OSPF — Configure aggregation delay timer interval. Summarisation starts only after this delay timer expiry."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf summary-address x.x.x.x/y [tag (1-4294967295)]",
  "cmd": "set protocols ospf summary-address x.x.x.x/y [tag (1-4294967295)]",
  "desc": "OSPF — This command enable/disables summarisation for the configured address range. Tag is the optional parameter."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf summary-address x.x.x.x/y no-advertise",
  "cmd": "set protocols ospf summary-address x.x.x.x/y no-advertise",
  "desc": "OSPF — This command to ensure not advertise the summary lsa for the matched external LSAs."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf graceful-restart [grace-period (1-1800)]",
  "cmd": "set protocols ospf graceful-restart [grace-period (1-1800)]",
  "desc": "OSPF — Configure Graceful Restart 3623 restarting support. When enabled, the default grace period is 120 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf graceful-restart helper enable [router-id A.B.C.D]",
  "cmd": "set protocols ospf graceful-restart helper enable [router-id A.B.C.D]",
  "desc": "OSPF — Configure Graceful Restart 3623 helper support. By default, helper support is disabled for all neighbours."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf graceful-restart helper no-strict-lsa-checking",
  "cmd": "set protocols ospf graceful-restart helper no-strict-lsa-checking",
  "desc": "OSPF — By default strict-lsa-checking is configured then the helper will abort the Graceful Restart when a LSA change occurs which affects the restarting router."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf graceful-restart helper supported-grace-time",
  "cmd": "set protocols ospf graceful-restart helper supported-grace-time",
  "desc": "OSPF — Supports as HELPER for configured grace period."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf graceful-restart helper planned-only",
  "cmd": "set protocols ospf graceful-restart helper planned-only",
  "desc": "OSPF — It helps to support as HELPER only for planned restarts. By default, it supports both planned and unplanned outages."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols ospf neighbor <A.B.C.D>",
  "cmd": "set protocols ospf neighbor <A.B.C.D>",
  "desc": "BGP — This command specifies the IP address of the neighboring device."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols ospf neighbor <A.B.C.D> poll-interval <seconds>",
  "cmd": "set protocols ospf neighbor <A.B.C.D> poll-interval <seconds>",
  "desc": "BGP — This command specifies the length of time, in seconds, before the routing device sends hello packets out of the interface before it establishes adjacency with a neighbor."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols ospf neighbor <A.B.C.D> priority <number>",
  "cmd": "set protocols ospf neighbor <A.B.C.D> priority <number>",
  "desc": "BGP — This command specifies the router priority value of the nonbroadcast neighbor associated with the IP address specified."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf redistribute <route source>",
  "cmd": "set protocols ospf redistribute <route source>",
  "desc": "OSPF — This command redistributes routing information from the given route source to the OSPF process."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf default-metric <number>",
  "cmd": "set protocols ospf default-metric <number>",
  "desc": "OSPF — This command specifies the default metric value of redistributed routes. The metric range is 0 to 16777214."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf redistribute <route source> metric <number>",
  "cmd": "set protocols ospf redistribute <route source> metric <number>",
  "desc": "OSPF — This command specifies metric for redistributed routes from the given route source."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf redistribute <route source> metric-type <1|2>",
  "cmd": "set protocols ospf redistribute <route source> metric-type <1|2>",
  "desc": "OSPF — This command specifies metric type for redistributed routes. Difference between two metric types that metric type 1 is a metric which is \"commensurable\" with inner OSPF links."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf redistribute <route source> route-map <name>",
  "cmd": "set protocols ospf redistribute <route source> route-map <name>",
  "desc": "OSPF — This command allows to use route map to filter redistributed routes from the given route source."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show ip ospf neighbor",
  "cmd": "show ip ospf neighbor",
  "desc": "BGP — This command displays the neighbors status."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show ip ospf neighbor detail",
  "cmd": "show ip ospf neighbor detail",
  "desc": "BGP — This command displays the neighbors information in a detailed form, not just a summary table."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show ip ospf neighbor <A.B.C.D>",
  "cmd": "show ip ospf neighbor <A.B.C.D>",
  "desc": "BGP — This command displays the neighbors information in a detailed form for a neighbor whose IP address is specified."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show ip ospf neighbor <interface>",
  "cmd": "show ip ospf neighbor <interface>",
  "desc": "BGP — This command displays the neighbors status for a neighbor on the specified interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "show ip ospf interface [<interface>]",
  "cmd": "show ip ospf interface [<interface>]",
  "desc": "OSPF — This command displays state and configuration of OSPF for the specified interface, or all interfaces if no interface is given."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "show ip ospf route [detail]",
  "cmd": "show ip ospf route [detail]",
  "desc": "OSPF — This command displays the OSPF routing table, as determined by the most recent SPF calculation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "show ip ospf border-routers",
  "cmd": "show ip ospf border-routers",
  "desc": "OSPF — This command displays a table of paths to area boundary and autonomous system boundary routers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "show ip ospf database",
  "cmd": "show ip ospf database",
  "desc": "OSPF — This command displays a summary table with a database contents (LSA)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "show ip ospf database <type> [A.B.C.D] [adv-router <A.B.C.D>|self-originate]",
  "cmd": "show ip ospf database <type> [A.B.C.D] [adv-router <A.B.C.D>|self-originate]",
  "desc": "OSPF — This command displays a database contents for a specific link advertisement type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "show ip ospf database max-age",
  "cmd": "show ip ospf database max-age",
  "desc": "OSPF — This command displays LSAs in MaxAge list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 interface <interface> area <number>",
  "cmd": "set protocols ospfv3 interface <interface> area <number>",
  "desc": "OSPFv3 — This command specifies the OSPFv3 enabled interface. This command is also used to enable the OSPF process."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 parameters router-id <rid>",
  "cmd": "set protocols ospfv3 parameters router-id <rid>",
  "desc": "OSPFv3 — This command sets the router-ID of the OSPFv3 process. The router-ID may be an IP address of the router, but need not be – it can be any arbitrary 32bit number."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 distance global <distance>",
  "cmd": "set protocols ospfv3 distance global <distance>",
  "desc": "OSPFv3 — This command change distance value of OSPFv3 globally. The distance range is 1 to 255."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 distance ospfv3 <external|inter-area|intra-area> <distance>",
  "cmd": "set protocols ospfv3 distance ospfv3 <external|inter-area|intra-area> <distance>",
  "desc": "OSPFv3 — This command change distance value of OSPFv3. The arguments are the distance values for external routes, inter-area routes and intra-area routes respectively."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 area <number> range <prefix>",
  "cmd": "set protocols ospfv3 area <number> range <prefix>",
  "desc": "OSPFv3 — This command summarizes intra area paths from specified area into one Type-3 Inter-Area Prefix LSA announced to other areas."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 area <number> range <prefix> not-advertise",
  "cmd": "set protocols ospfv3 area <number> range <prefix> not-advertise",
  "desc": "OSPFv3 — This command instead of summarizing intra area paths filter them - i.e. intra area paths from this range are not advertised into other areas."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 interface <interface> ipv6 cost <number>",
  "cmd": "set protocols ospfv3 interface <interface> ipv6 cost <number>",
  "desc": "OSPFv3 — This command sets link cost for the specified interface. The cost value is set to router-LSA’s metric field and used for SPF calculation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 interface <interface> dead-interval <number>",
  "cmd": "set protocols ospfv3 interface <interface> dead-interval <number>",
  "desc": "OSPFv3 — Set number of seconds for router Dead Interval timer value used for Wait Timer and Inactivity Timer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 interface <interface> hello-interval <number>",
  "cmd": "set protocols ospfv3 interface <interface> hello-interval <number>",
  "desc": "OSPFv3 — Set number of seconds for Hello Interval timer value. Setting this value, Hello packet will be sent every timer value seconds on the specified interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 interface <interface> mtu-ignore",
  "cmd": "set protocols ospfv3 interface <interface> mtu-ignore",
  "desc": "OSPFv3 — This command disables check of the MTU value in the OSPF DBD packets. Thus, use of this command allows the OSPF adjacency to reach the FULL state even though there is an interface MTU mismatch between two OSPF routers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 interface <interface> network <type>",
  "cmd": "set protocols ospfv3 interface <interface> network <type>",
  "desc": "OSPFv3 — This command allows to specify the distribution type for the network connected to this interface: **broadcast** – broadcast IP addresses distribution."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 interface <interface> priority <number>",
  "cmd": "set protocols ospfv3 interface <interface> priority <number>",
  "desc": "OSPFv3 — This command sets Router Priority integer value. The router with the highest priority will be more eligible to become Designated Router."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 interface <interface> passive",
  "cmd": "set protocols ospfv3 interface <interface> passive",
  "desc": "OSPFv3 — This command specifies interface as passive. Passive interface advertises its address, but does not run the OSPF protocol (adjacencies are not formed and hello packets are not generated)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 interface <interface> retransmit-interval <number>",
  "cmd": "set protocols ospfv3 interface <interface> retransmit-interval <number>",
  "desc": "OSPFv3 — This command sets number of seconds for RxmtInterval timer value. This value is used when retransmitting Database Description and Link State Request packets if acknowledge was not received."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 interface <interface> transmit-delay <number>",
  "cmd": "set protocols ospfv3 interface <interface> transmit-delay <number>",
  "desc": "OSPFv3 — This command sets number of seconds for InfTransDelay value. It allows to set and adjust for each interface the delay interval before starting the synchronizing process of the router's database with all neighbors."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 graceful-restart [grace-period (1-1800)]",
  "cmd": "set protocols ospfv3 graceful-restart [grace-period (1-1800)]",
  "desc": "OSPFv3 — Configure Graceful Restart 3623 restarting support. When enabled, the default grace period is 120 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 graceful-restart helper enable [router-id A.B.C.D]",
  "cmd": "set protocols ospfv3 graceful-restart helper enable [router-id A.B.C.D]",
  "desc": "OSPFv3 — Configure Graceful Restart 3623 helper support. By default, helper support is disabled for all neighbours."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 graceful-restart helper lsa-check-disable",
  "cmd": "set protocols ospfv3 graceful-restart helper lsa-check-disable",
  "desc": "OSPFv3 — By default strict-lsa-checking is configured then the helper will abort the Graceful Restart when a LSA change occurs which affects the restarting router."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 graceful-restart helper supported-grace-time",
  "cmd": "set protocols ospfv3 graceful-restart helper supported-grace-time",
  "desc": "OSPFv3 — Supports as HELPER for configured grace period."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 graceful-restart helper planned-only",
  "cmd": "set protocols ospfv3 graceful-restart helper planned-only",
  "desc": "OSPFv3 — It helps to support as HELPER only for planned restarts. By default, it supports both planned and unplanned outages."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 redistribute <route source>",
  "cmd": "set protocols ospfv3 redistribute <route source>",
  "desc": "OSPFv3 — This command redistributes routing information from the given route source to the OSPFv3 process."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show ipv6 ospfv3 neighbor",
  "cmd": "show ipv6 ospfv3 neighbor",
  "desc": "BGP — This command displays the neighbors status."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show ipv6 ospfv3 neighbor detail",
  "cmd": "show ipv6 ospfv3 neighbor detail",
  "desc": "BGP — This command displays the neighbors information in a detailed form, not just a summary table."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show ipv6 ospfv3 neighbor drchoice",
  "cmd": "show ipv6 ospfv3 neighbor drchoice",
  "desc": "BGP — This command displays the neighbor DR choice information."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "show ipv6 ospfv3 interface [prefix]|[<interface> [prefix]]",
  "cmd": "show ipv6 ospfv3 interface [prefix]|[<interface> [prefix]]",
  "desc": "OSPFv3 — This command displays state and configuration of OSPF for the specified interface, or all interfaces if no interface is given."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "show ipv6 ospfv3 route",
  "cmd": "show ipv6 ospfv3 route",
  "desc": "OSPFv3 — This command displays the OSPF routing table, as determined by the most recent SPF calculation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "show ipv6 ospfv3 border-routers",
  "cmd": "show ipv6 ospfv3 border-routers",
  "desc": "OSPFv3 — This command displays a table of paths to area boundary and autonomous system boundary routers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "show ipv6 ospfv3 database",
  "cmd": "show ipv6 ospfv3 database",
  "desc": "OSPFv3 — This command displays a summary table with a database contents (LSA)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "show ipv6 ospfv3 database <type> [A.B.C.D] [adv-router <A.B.C.D>|self-originate]",
  "cmd": "show ipv6 ospfv3 database <type> [A.B.C.D] [adv-router <A.B.C.D>|self-originate]",
  "desc": "OSPFv3 — This command displays a database contents for a specific link advertisement type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "show ipv6 ospfv3 redistribute",
  "cmd": "show ipv6 ospfv3 redistribute",
  "desc": "OSPFv3 — This command displays external information redistributed into OSPFv3"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols pim6 interface <interface-name>",
  "cmd": "set protocols pim6 interface <interface-name>",
  "desc": "Interfaces — **Enable PIMv6 on the specified PIMv6 interface.** This command also enables MLD, allowing the router to process MLD queries and reports from IPv6 multicast receivers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim6 interface <interface-name> mld disable",
  "cmd": "set protocols pim6 interface <interface-name> mld disable",
  "desc": "Multicast — **Disable MLD on the specified PIMv6 interface.** This command turns off MLD processing on the interface while keeping PIMv6 enabled."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim6 interface <interface-name> mld interval <1-65535>",
  "cmd": "set protocols pim6 interface <interface-name> mld interval <1-65535>",
  "desc": "Multicast — **Configure the MLD Query Interval, in seconds, on the specified interface.** This setting determines how often the router sends MLD queries to discover which IPv6 multicast groups have active listeners on the attached…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim6 interface <interface-name> mld join <multicast-address>",
  "cmd": "set protocols pim6 interface <interface-name> mld join <multicast-address>",
  "desc": "Multicast — **Configure the interface to join a specific IPv6 multicast group.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim6 interface <interface-name> mld join <multicast-address> source <source…",
  "cmd": "set protocols pim6 interface <interface-name> mld join <multicast-address> source <source-address>",
  "desc": "Multicast — **Configure the interface to join a specific (S,G) channel.** A channel is identified by the combination of a source IPv6 address (S) and a multicast IPv6 address (G)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim6 interface <interface-name> mld last-member-query-count <1-255>",
  "cmd": "set protocols pim6 interface <interface-name> mld last-member-query-count <1-255>",
  "desc": "Multicast — **Configure the number of MLD Last Listener Queries the router sends on the specified interface after a listener leaves a multicast group.** The default value is 2."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim6 interface <interface-name> mld last-member-query-interval <100-6553500>",
  "cmd": "set protocols pim6 interface <interface-name> mld last-member-query-interval <100-6553500>",
  "desc": "Multicast — **Configure the MLD Last Listener Query Interval, in milliseconds, on the specified interface.** This setting determines how long the router waits between Last Listener Queries."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim6 interface <interface-name> mld max-response-time <100-6553500>",
  "cmd": "set protocols pim6 interface <interface-name> mld max-response-time <100-6553500>",
  "desc": "Multicast — **Configure the MLD maximum response delay, in milliseconds, on the specified interface.** This value is inserted in MLD queries and specifies the maximum time hosts have to respond with a membership report."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim6 interface <interface-name> mld version <1-2>",
  "cmd": "set protocols pim6 interface <interface-name> mld version <1-2>",
  "desc": "Multicast — **Configure the MLD version on the specified interface.** The default version is 2."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing global-block high-label-value <label-value>",
  "cmd": "set protocols isis segment-routing global-block high-label-value <label-value>",
  "desc": "ISIS — Set the Segment Routing Global Block i.e. the label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing global-block low-label-value <label-value>",
  "cmd": "set protocols isis segment-routing global-block low-label-value <label-value>",
  "desc": "ISIS — Set the Segment Routing Global Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing local-block high-label-value <label-value>",
  "cmd": "set protocols isis segment-routing local-block high-label-value <label-value>",
  "desc": "ISIS — Set the Segment Routing Local Block i.e. the label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing local-block <low-label-value <label-value>",
  "cmd": "set protocols isis segment-routing local-block <low-label-value <label-value>",
  "desc": "ISIS — Set the Segment Routing Local Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing maximum-label-depth <1-16>",
  "cmd": "set protocols isis segment-routing maximum-label-depth <1-16>",
  "desc": "ISIS — Set the Maximum Stack Depth supported by the router. The value depend of the MPLS dataplane."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing prefix <address> index value <0-65535>",
  "cmd": "set protocols isis segment-routing prefix <address> index value <0-65535>",
  "desc": "ISIS — A segment ID that contains an IP address prefix calculated by an IGP in the service provider core network."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing prefix <address> index <no-php-flag | explicit-null| n…",
  "cmd": "set protocols isis segment-routing prefix <address> index <no-php-flag | explicit-null| n-flag-clear>",
  "desc": "ISIS — this option allows to configure prefix-sid on SR. The ‘no-php-flag’ means NO Penultimate Hop Popping that allows SR node to request to its neighbor to not pop the label."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "show isis segment-routing node",
  "cmd": "show isis segment-routing node",
  "desc": "ISIS — Show detailed information about all learned Segment Routing Nodes"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "show isis route prefix-sid",
  "cmd": "show isis route prefix-sid",
  "desc": "ISIS — Show detailed information about prefix-sid and label learned"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf parameters opaque-lsa",
  "cmd": "set protocols ospf parameters opaque-lsa",
  "desc": "OSPF — Enable the Opaque-LSA capability (rfc2370), necessary to transport label on IGP"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf segment-routing global-block high-label-value <label-value>",
  "cmd": "set protocols ospf segment-routing global-block high-label-value <label-value>",
  "desc": "OSPF — Set the Segment Routing Global Block i.e. the label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf segment-routing global-block low-label-value <label-value>",
  "cmd": "set protocols ospf segment-routing global-block low-label-value <label-value>",
  "desc": "OSPF — Set the Segment Routing Global Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf segment-routing local-block high-label-value <label-value>",
  "cmd": "set protocols ospf segment-routing local-block high-label-value <label-value>",
  "desc": "OSPF — Set the Segment Routing Local Block i.e. the label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf segment-routing local-block <low-label-value <label-value>",
  "cmd": "set protocols ospf segment-routing local-block <low-label-value <label-value>",
  "desc": "OSPF — Set the Segment Routing Local Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf segment-routing maximum-label-depth <1-16>",
  "cmd": "set protocols ospf segment-routing maximum-label-depth <1-16>",
  "desc": "OSPF — Set the Maximum Stack Depth supported by the router. The value depend of the MPLS dataplane."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf segment-routing prefix <address> index value <0-65535>",
  "cmd": "set protocols ospf segment-routing prefix <address> index value <0-65535>",
  "desc": "OSPF — A segment ID that contains an IP address prefix calculated by an IGP in the service provider core network."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf segment-routing prefix <address> index <no-php-flag | explicit-null| n…",
  "cmd": "set protocols ospf segment-routing prefix <address> index <no-php-flag | explicit-null| n-flag-clear>",
  "desc": "OSPF — this option allows to configure prefix-sid on SR. The ‘no-php-flag’ means NO Penultimate Hop Popping that allows SR node to request to its neighbor to not pop the label."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols traffic-engineering admin-group <admin-group-name> bit-position <bit-positi…",
  "cmd": "set protocols traffic-engineering admin-group <admin-group-name> bit-position <bit-position-value>",
  "desc": "Routing — Create Administrative group and associate bit position with it. These groups can be used in the following commands."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols traffic-engineering interface <ifname> admin-group <admin-group-name>",
  "cmd": "set protocols traffic-engineering interface <ifname> admin-group <admin-group-name>",
  "desc": "Interfaces — Set administrative group for interface \\<ifname\\>. Multiple values can be provided."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols traffic-engineering interface <ifname> max-bandwidth <max-bandwidth-value-m…",
  "cmd": "set protocols traffic-engineering interface <ifname> max-bandwidth <max-bandwidth-value-mbps>",
  "desc": "Interfaces — Set maximum bandwidth for interface \\<ifname\\>. Value given in Mbits per second."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols traffic-engineering interface <ifname> max-reservable-bandwidth <max-reserv…",
  "cmd": "set protocols traffic-engineering interface <ifname> max-reservable-bandwidth <max-reservable-bandwidth-value-mbps>",
  "desc": "Interfaces — Set maximum reservable bandwidth for interface \\<ifname\\>. Value given in Mbits per second."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis traffic-engineering enable",
  "cmd": "set protocols isis traffic-engineering enable",
  "desc": "ISIS — Enable Traffic Engineering for IS-IS."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis traffic-engineering export",
  "cmd": "set protocols isis traffic-engineering export",
  "desc": "ISIS — Export Traffic Engineering data to neighbors."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis traffic-engineering address <ipv4-address>",
  "cmd": "set protocols isis traffic-engineering address <ipv4-address>",
  "desc": "ISIS — Configure IPv4 address for MPLS-TE."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols igmp-proxy interface <interface> role <upstream | downstream>",
  "cmd": "set protocols igmp-proxy interface <interface> role <upstream | downstream>",
  "desc": "Multicast — **Configure the operational role for the specified IGMP proxy interface.** - upstream: Communicates with upstream multicast sources to retrieve the multicast traffic."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols igmp-proxy interface <interface> alt-subnet <network>",
  "cmd": "set protocols igmp-proxy interface <interface> alt-subnet <network>",
  "desc": "Multicast — **Configure an allowed remote subnet for incoming multicast traffic on the specified IGMP proxy interface** By default, the IGMP proxy accepts multicast traffic only from directly connected subnets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols igmp-proxy interface <interface> whitelist <network>",
  "cmd": "set protocols igmp-proxy interface <interface> whitelist <network>",
  "desc": "Multicast — **Configure a permitted destination network for multicast traffic requests on the specified IGMP proxy interface.** By default, the IGMP proxy accepts requests for all multicast destination networks."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols igmp-proxy interface <interface> threshold <1-255>",
  "cmd": "set protocols igmp-proxy interface <interface> threshold <1-255>",
  "desc": "Multicast — **Configure the Time-to-Live (TTL) threshold for the specified IGMP proxy interface.** The IGMP proxy drops any multicast packet with a TTL value lower than the configured threshold."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols igmp-proxy disable-quickleave",
  "cmd": "set protocols igmp-proxy disable-quickleave",
  "desc": "Multicast — **Disable quickleave mode for the IGMP proxy.** If disabled, the IGMP proxy does not send an upstream Leave message upon receiving a downstream Leave message, preventing the immediate termination of upstream multicast t…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols igmp-proxy disable",
  "cmd": "set protocols igmp-proxy disable",
  "desc": "Multicast — **Disable the IGMP proxy on the router.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "restart igmp-proxy",
  "cmd": "restart igmp-proxy",
  "desc": "Multicast — Restart the IGMP proxy process."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set protocols rip network <A.B.C.D/M>",
  "cmd": "set protocols rip network <A.B.C.D/M>",
  "desc": "RIP — This command enables RIP and sets the RIP enable interface by NETWORK. The interfaces which have addresses matching with NETWORK are enabled."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set protocols rip interface <interface>",
  "cmd": "set protocols rip interface <interface>",
  "desc": "RIP — This command specifies a RIP enabled interface by interface name. Both the sending and receiving of RIP packets will be enabled on the port specified in this command."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols rip neighbor <A.B.C.D>",
  "cmd": "set protocols rip neighbor <A.B.C.D>",
  "desc": "BGP — This command specifies a RIP neighbor. When a neighbor doesn’t understand multicast, this command is used to specify neighbors."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set protocols rip passive-interface interface <interface>",
  "cmd": "set protocols rip passive-interface interface <interface>",
  "desc": "RIP — This command sets the specified interface to passive mode. On passive mode interface, all receiving packets are processed as normal and VyOS does not send either multicast or unicast RIP packets except to RIP neighbors…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set protocols rip passive-interface interface default",
  "cmd": "set protocols rip passive-interface interface default",
  "desc": "RIP — This command specifies all interfaces to passive mode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set protocols rip default-distance <distance>",
  "cmd": "set protocols rip default-distance <distance>",
  "desc": "RIP — This command change the distance value of RIP. The distance range is 1 to 255."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set protocols rip network-distance <A.B.C.D/M> distance <distance>",
  "cmd": "set protocols rip network-distance <A.B.C.D/M> distance <distance>",
  "desc": "RIP — This command sets default RIP distance to a specified value when the routes source IP address matches the specified prefix."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set protocols rip network-distance <A.B.C.D/M> access-list <name>",
  "cmd": "set protocols rip network-distance <A.B.C.D/M> access-list <name>",
  "desc": "VLAN — This command can be used with previous command to sets default RIP distance to specified value when the route source IP address matches the specified prefix and the specified access-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set protocols rip default-information originate",
  "cmd": "set protocols rip default-information originate",
  "desc": "RIP — This command generate a default route into the RIP."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set protocols rip distribute-list access-list <in|out> <number>",
  "cmd": "set protocols rip distribute-list access-list <in|out> <number>",
  "desc": "VLAN — This command can be used to filter the RIP path using access lists. in and out this is the direction in which the access lists are applied."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set protocols rip distribute-list interface <interface> access-list <in|out> <number>",
  "cmd": "set protocols rip distribute-list interface <interface> access-list <in|out> <number>",
  "desc": "VLAN — This command allows you apply access lists to a chosen interface to filter the RIP path."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set protocols rip distribute-list prefix-list <in|out> <name>",
  "cmd": "set protocols rip distribute-list prefix-list <in|out> <name>",
  "desc": "ACL — This command can be used to filter the RIP path using prefix lists. in and out this is the direction in which the prefix lists are applied."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set protocols rip distribute-list interface <interface> prefix-list <in|out> <name>",
  "cmd": "set protocols rip distribute-list interface <interface> prefix-list <in|out> <name>",
  "desc": "ACL — This command allows you apply prefix lists to a chosen interface to filter the RIP path."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set protocols rip route <A.B.C.D/M>",
  "cmd": "set protocols rip route <A.B.C.D/M>",
  "desc": "RIP — This command is specific to FRR and VyOS. The route command makes a static route only inside RIP."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set protocols rip timers update <seconds>",
  "cmd": "set protocols rip timers update <seconds>",
  "desc": "RIP — This command specifies the update timer. Every update timer seconds, the RIP process is awakened to send an unsolicited response message containing the complete routing table to all neighboring RIP routers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set protocols rip timers timeout <seconds>",
  "cmd": "set protocols rip timers timeout <seconds>",
  "desc": "RIP — This command specifies the timeout timer. Upon expiration of the timeout, the route is no longer valid; however, it is retained in the routing table for a short time so that neighbors can be notified that the route has…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set protocols rip timers garbage-collection <seconds>",
  "cmd": "set protocols rip timers garbage-collection <seconds>",
  "desc": "RIP — This command specifies the garbage-collection timer. Upon expiration of the garbage-collection timer, the route is finally removed from the routing table."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set protocols rip redistribute <route source>",
  "cmd": "set protocols rip redistribute <route source>",
  "desc": "RIP — This command redistributes routing information from the given route source into the RIP tables."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set protocols rip redistribute <route source> metric <metric>",
  "cmd": "set protocols rip redistribute <route source> metric <metric>",
  "desc": "RIP — This command specifies metric for redistributed routes from the given route source."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set protocols rip redistribute <route source> route-map <name>",
  "cmd": "set protocols rip redistribute <route source> route-map <name>",
  "desc": "RIP — This command allows to use route map to filter redistributed routes from the given route source."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set protocols rip default-metric <metric>",
  "cmd": "set protocols rip default-metric <metric>",
  "desc": "RIP — This command modifies the default metric (hop count) value for redistributed routes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set interfaces <inttype> <intname> ip rip authentication plaintext-password <text>",
  "cmd": "set interfaces <inttype> <intname> ip rip authentication plaintext-password <text>",
  "desc": "RIP — This command sets the interface with RIP simple password authentication. This command also sets authentication string."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set interfaces <inttype> <intname> ip rip authentication md5 <id> password <text>",
  "cmd": "set interfaces <inttype> <intname> ip rip authentication md5 <id> password <text>",
  "desc": "RIP — This command sets the interface with RIP MD5 authentication. This command also sets MD5 Key."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set interfaces <inttype> <intname> ip rip split-horizon disable",
  "cmd": "set interfaces <inttype> <intname> ip rip split-horizon disable",
  "desc": "RIP — This command disables split-horizon on the interface. By default, VyOS does not advertise RIP routes out the interface over which they were learned (split horizon).3"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "set interfaces <inttype> <intname> ip rip split-horizon poison-reverse",
  "cmd": "set interfaces <inttype> <intname> ip rip split-horizon poison-reverse",
  "desc": "RIP — This command enables poison-reverse on the interface. If both poison reverse and split horizon are enabled, then VyOS advertises the learned routes as unreachable over the interface on which the route was learned."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "show ip rip",
  "cmd": "show ip rip",
  "desc": "RIP — This command displays RIP routes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "RIP",
  "title": "show ip rip status",
  "cmd": "show ip rip status",
  "desc": "RIP — The command displays current RIP status. It includes RIP timer, filtering, version, RIP enabled interface and RIP peer information."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols failover route <subnet> next-hop <address> check target <target-address>",
  "cmd": "set protocols failover route <subnet> next-hop <address> check target <target-address>",
  "desc": "Routing — **Configure the health check target IP address.** This is typically a highly available host, either within the destination subnet or on the public internet."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols failover route <subnet> next-hop <address> check timeout <timeout>",
  "cmd": "set protocols failover route <subnet> next-hop <address> check timeout <timeout>",
  "desc": "Routing — **Configure the timeout interval, in seconds, between target health checks.** The valid range is 1 to 300 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols failover route <subnet> next-hop <address> check type <protocol>",
  "cmd": "set protocols failover route <subnet> next-hop <address> check type <protocol>",
  "desc": "Routing — **Configure the protocol to use for health checks.** The following protocols are available: * icmp: VyOS sends two ICMP echo request packets with a 1-second response timeout."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols failover route <subnet> next-hop <address> check port <port>",
  "cmd": "set protocols failover route <subnet> next-hop <address> check port <port>",
  "desc": "Interfaces — **Configure the destination TCP port on the health check target.** This parameter applies only when the check type is configured as tcp."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols failover route <subnet> next-hop <address> check policy <policy>",
  "cmd": "set protocols failover route <subnet> next-hop <address> check policy <policy>",
  "desc": "Routing — **Configure the health check success policy for multiple targets.** The following policies are available: * any-available: The health check succeeds if at least one of the configured targets responds successfully."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols failover route <subnet> next-hop <address> interface <interface>",
  "cmd": "set protocols failover route <subnet> next-hop <address> interface <interface>",
  "desc": "Interfaces — **Configure the local interface used to reach the next-hop address.** This parameter is mandatory."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols failover route <subnet> next-hop <address> metric <1-255>",
  "cmd": "set protocols failover route <subnet> next-hop <address> metric <1-255>",
  "desc": "Routing — **Configure the metric (cost) for the failover route.** The metric defines the route priority."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols failover route <subnet> next-hop <address> onlink",
  "cmd": "set protocols failover route <subnet> next-hop <address> onlink",
  "desc": "Routing — Configure the next-hop to be reachable via the assigned interface, even when <address> is outside any subnet configured on that interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp system-as <asn>",
  "cmd": "set protocols bgp system-as <asn>",
  "desc": "BGP — Set local ASN (Autonomous System Number) that this router represents. This is a a mandatory option!"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> remote-as <asn>",
  "cmd": "set protocols bgp neighbor <address|interface> remote-as <asn>",
  "desc": "BGP — This command creates a new neighbor whose remote-as is \\<asn\\>. The neighbor address can be an IPv4 address or an IPv6 address or an interface to use for the connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> remote-as internal",
  "cmd": "set protocols bgp neighbor <address|interface> remote-as internal",
  "desc": "BGP — Create a peer as you would when you specify an ASN, except that if the peers ASN is different than mine as specified under the protocols bgp <asn> command the connection will be denied."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> remote-as external",
  "cmd": "set protocols bgp neighbor <address|interface> remote-as external",
  "desc": "BGP — Create a peer as you would when you specify an ASN, except that if the peers ASN is the same as mine as specified under the protocols bgp <asn> command the connection will be denied."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> remote-as auto",
  "cmd": "set protocols bgp neighbor <address|interface> remote-as auto",
  "desc": "BGP — Create a peer as you would when you specify an ASN, except that the peers remote ASN is detected automatically from the OPEN message."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> local-role <role> [strict]",
  "cmd": "set protocols bgp neighbor <address|interface> local-role <role> [strict]",
  "desc": "BGP — BGP roles are defined in RFC 9234 and provide an easy way to add route leak prevention, detection and mitigation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> shutdown",
  "cmd": "set protocols bgp neighbor <address|interface> shutdown",
  "desc": "BGP — This command disables the peer or peer group. To re-enable the peer, use the delete form of this command."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> description <text>",
  "cmd": "set protocols bgp neighbor <address|interface> description <text>",
  "desc": "BGP — Set description of the peer or peer group."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> update-source <address|interface>",
  "cmd": "set protocols bgp neighbor <address|interface> update-source <address|interface>",
  "desc": "BGP — Specify the IPv4 source address to use for the BGP session to this neighbor, may be specified as either an IPv4 address directly or as an interface name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> capability dynamic",
  "cmd": "set protocols bgp neighbor <address|interface> capability dynamic",
  "desc": "BGP — This command would allow the dynamic update of capabilities over an established BGP session."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> capability extended-nexthop",
  "cmd": "set protocols bgp neighbor <address|interface> capability extended-nexthop",
  "desc": "BGP — Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> disable-capability-negotiation",
  "cmd": "set protocols bgp neighbor <address|interface> disable-capability-negotiation",
  "desc": "BGP — Suppress sending Capability Negotiation as OPEN message optional parameter to the peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> override-capability",
  "cmd": "set protocols bgp neighbor <address|interface> override-capability",
  "desc": "BGP — This command allow override the result of Capability Negotiation with local configuration."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> strict-capability-match",
  "cmd": "set protocols bgp neighbor <address|interface> strict-capability-match",
  "desc": "BGP — This command forces strictly compare remote capabilities and local capabilities."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast>…",
  "cmd": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> allowas-in number <number>",
  "desc": "BGP — This command accept incoming routes with AS path containing AS number with the same value as the current system AS."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast>…",
  "cmd": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> as-override",
  "desc": "BGP — This command override AS number of the originating router with the local AS number."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast>…",
  "cmd": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> attribute-unchanged <as-path|med|next-hop>",
  "desc": "BGP — This command specifies attributes to be left unchanged for advertisements sent to a peer or peer group."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast>…",
  "cmd": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> maximum-prefix <number>",
  "desc": "BGP — This command specifies a maximum number of prefixes we can receive from a given peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast>…",
  "cmd": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> nexthop-self",
  "desc": "BGP — This command forces the BGP speaker to report itself as the next hop for an advertised route it advertised to a neighbor."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast>…",
  "cmd": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> remove-private-as",
  "desc": "BGP — This command removes the private ASN of routes that are advertised to the configured peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast>…",
  "cmd": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> soft-reconfiguration inbound",
  "desc": "BGP — Changes in BGP policies require the BGP session to be cleared. Clearing has a large negative impact on network operations."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast>…",
  "cmd": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> weight <number>",
  "desc": "BGP — This command specifies a default weight value for the neighbor’s routes. The number range is 1 to 65535."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> advertisement-interval <seconds>",
  "cmd": "set protocols bgp neighbor <address|interface> advertisement-interval <seconds>",
  "desc": "BGP — This command specifies the minimum route advertisement interval for the peer. The interval value is 0 to 600 seconds, with the default advertisement interval being 0."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> disable-connected-check",
  "cmd": "set protocols bgp neighbor <address|interface> disable-connected-check",
  "desc": "BGP — This command allows peerings between directly connected eBGP peers using loopback addresses without adjusting the default TTL of 1."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> disable-send-community <extended|standard>",
  "cmd": "set protocols bgp neighbor <address|interface> disable-send-community <extended|standard>",
  "desc": "BGP — This command specifies that the community attribute should not be sent in route updates to a peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> ebgp-multihop <number>",
  "cmd": "set protocols bgp neighbor <address|interface> ebgp-multihop <number>",
  "desc": "BGP — This command allows sessions to be established with eBGP neighbors when they are multiple hops away."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> local-as <asn> [no-prepend] [replace-as]",
  "cmd": "set protocols bgp neighbor <address|interface> local-as <asn> [no-prepend] [replace-as]",
  "desc": "BGP — Specify an alternate AS for this BGP process when interacting with the specified peer or peer group."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> passive",
  "cmd": "set protocols bgp neighbor <address|interface> passive",
  "desc": "BGP — Configures the BGP speaker so that it only accepts inbound connections from, but does not initiate outbound connections to the peer or peer group."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> password <text>",
  "cmd": "set protocols bgp neighbor <address|interface> password <text>",
  "desc": "BGP — This command specifies a MD5 password to be used with the tcp socket that is being used to connect to the remote peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> ttl-security hops <number>",
  "cmd": "set protocols bgp neighbor <address|interface> ttl-security hops <number>",
  "desc": "BGP — This command enforces Generalized TTL Security Mechanism (GTSM), as specified in 5082."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp peer-group <name>",
  "cmd": "set protocols bgp peer-group <name>",
  "desc": "BGP — This command defines a new peer group. You can specify to the group the same parameters that you can specify for specific neighbors."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> peer-group <name>",
  "cmd": "set protocols bgp neighbor <address|interface> peer-group <name>",
  "desc": "BGP — This command bind specific peer to peer group with a given name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> network <prefix>",
  "cmd": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> network <prefix>",
  "desc": "BGP — This command is used for advertising IPv4 or IPv6 networks. :::{note} By default, the BGP prefix is advertised even if it's not present in the routing table."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters network-import-check",
  "cmd": "set protocols bgp parameters network-import-check",
  "desc": "BGP — This configuration modifies the behavior of the network statement. If you have this configured the underlying network must exist in the routing table."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast>…",
  "cmd": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> default-originate [route-map <name>]",
  "desc": "BGP — By default, VyOS does not advertise a default route (0.0.0.0/0) even if it is in routing table."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> aggregate-address <prefix>",
  "cmd": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> aggregate-address <prefix>",
  "desc": "BGP — This command specifies an aggregate address. The router will also announce longer-prefixes inside of the aggregate address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> aggregate-address <prefix> a…",
  "cmd": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> aggregate-address <prefix> as-set",
  "desc": "BGP — This command specifies an aggregate address with a mathematical set of autonomous systems."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> aggregate-address <prefix> s…",
  "cmd": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> aggregate-address <prefix> summary-only",
  "desc": "BGP — This command specifies an aggregate address and provides that longer-prefixes inside of the aggregate address are suppressed before sending BGP updates out to peers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast>…",
  "cmd": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> unsuppress-map <name>",
  "desc": "BGP — This command applies route-map to selectively unsuppress prefixes suppressed by summarisation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> redistribute <route source>",
  "cmd": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> redistribute <route source>",
  "desc": "BGP — This command redistributes routing information from the given route source to the BGP process."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> redistribute <route source>…",
  "cmd": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> redistribute <route source> metric <number>",
  "desc": "BGP — This command specifies metric (MED) for redistributed routes. The metric range is 0 to 4294967295."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> redistribute <route source>…",
  "cmd": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> redistribute <route source> route-map <name>",
  "desc": "BGP — This command allows to use route map to filter redistributed routes. There are six modes available for route source: connected, kernel, ospf, rip, static, table."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters allow-martian-nexthop",
  "cmd": "set protocols bgp parameters allow-martian-nexthop",
  "desc": "BGP — When a peer receives a martian nexthop as part of the NLRI for a route permit the nexthop to be used as such, instead of rejecting and resetting the connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters router-id <id>",
  "cmd": "set protocols bgp parameters router-id <id>",
  "desc": "BGP — This command specifies the router-ID. If router ID is not specified it will use the highest interface IP address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> maximum-paths <ebgp|ibgp> <n…",
  "cmd": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast> maximum-paths <ebgp|ibgp> <number>",
  "desc": "BGP — This command defines the maximum number of parallel routes that the BGP can support."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters no-hard-administrative-reset",
  "cmd": "set protocols bgp parameters no-hard-administrative-reset",
  "desc": "BGP — Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be re…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters log-neighbor-changes",
  "cmd": "set protocols bgp parameters log-neighbor-changes",
  "desc": "BGP — This command enable logging neighbor up/down changes and reset reason."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters no-client-to-client-reflection",
  "cmd": "set protocols bgp parameters no-client-to-client-reflection",
  "desc": "BGP — This command disables route reflection between route reflector clients. By default, the clients of a route reflector are not required to be fully meshed and the routes from a client are reflected to other clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters no-fast-external-failover",
  "cmd": "set protocols bgp parameters no-fast-external-failover",
  "desc": "BGP — Disable immediate session reset if peer's connected link goes down."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters no-ipv6-auto-ra",
  "cmd": "set protocols bgp parameters no-ipv6-auto-ra",
  "desc": "BGP — By default, FRR sends router advertisement packets when Extended Next Hop is on or when a connection is established directly using the device name (Unnumbered BGP)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp listen range <prefix> peer-group <name>",
  "cmd": "set protocols bgp listen range <prefix> peer-group <name>",
  "desc": "BGP — This command is useful if one desires to loosen the requirement for BGP to have strictly defined neighbors."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp listen limit <number>",
  "cmd": "set protocols bgp listen limit <number>",
  "desc": "BGP — This command goes hand in hand with the listen range command to limit the amount of BGP neighbors that are allowed to connect to the local router."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters ebgp-requires-policy",
  "cmd": "set protocols bgp parameters ebgp-requires-policy",
  "desc": "BGP — This command changes the eBGP behavior of FRR. By default FRR enables 8212 functionality which affects how eBGP routes are advertised, namely no routes are advertised across eBGP sessions without some sort of egress rou…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters labeled-unicast <explicit-null | ipv4-explicit-null | ipv6-e…",
  "cmd": "set protocols bgp parameters labeled-unicast <explicit-null | ipv4-explicit-null | ipv6-explicit-null>",
  "desc": "BGP — By default, locally advertised prefixes use the implicit-null label to encode in the outgoing NLRI."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters distance global <external|internal|local> <distance>",
  "cmd": "set protocols bgp parameters distance global <external|internal|local> <distance>",
  "desc": "BGP — This command change distance value of BGP. The arguments are the distance values for external routes, internal routes and local routes respectively."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters distance prefix <subnet> distance <distance>",
  "cmd": "set protocols bgp parameters distance prefix <subnet> distance <distance>",
  "desc": "BGP — This command sets the administrative distance for a particular route. The distance range is 1 to 255."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp timers holdtime <seconds>",
  "cmd": "set protocols bgp timers holdtime <seconds>",
  "desc": "BGP — This command specifies hold-time in seconds. The timer range is 4 to 65535."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp timers keepalive <seconds>",
  "cmd": "set protocols bgp timers keepalive <seconds>",
  "desc": "BGP — This command specifies keep-alive time in seconds. The timer can range from 4 to 65535."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters update-delay max-delay <seconds>",
  "cmd": "set protocols bgp parameters update-delay max-delay <seconds>",
  "desc": "BGP · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters update-delay establish-wait <seconds>",
  "cmd": "set protocols bgp parameters update-delay establish-wait <seconds>",
  "desc": "BGP · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters dampening half-life <minutes>",
  "cmd": "set protocols bgp parameters dampening half-life <minutes>",
  "desc": "BGP — This command defines the amount of time in minutes after which a penalty is reduced by half."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters dampening re-use <seconds>",
  "cmd": "set protocols bgp parameters dampening re-use <seconds>",
  "desc": "BGP — This command defines the accumulated penalty amount at which the route is re-advertised."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters dampening start-suppress-time <seconds>",
  "cmd": "set protocols bgp parameters dampening start-suppress-time <seconds>",
  "desc": "BGP — This command defines the accumulated penalty amount at which the route is suppressed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters dampening max-suppress-time <seconds>",
  "cmd": "set protocols bgp parameters dampening max-suppress-time <seconds>",
  "desc": "BGP — This command defines the maximum time in minutes that a route is suppressed. The timer range is 1 to 255 minutes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters always-compare-med",
  "cmd": "set protocols bgp parameters always-compare-med",
  "desc": "BGP — This command provides to compare the MED on routes, even when they were received from different neighbouring ASes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters bestpath as-path confed",
  "cmd": "set protocols bgp parameters bestpath as-path confed",
  "desc": "BGP — This command specifies that the length of confederation path sets and sequences should be taken into account during the BGP best path decision process."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters bestpath as-path multipath-relax",
  "cmd": "set protocols bgp parameters bestpath as-path multipath-relax",
  "desc": "BGP — This command specifies that BGP decision process should consider paths of equal AS_PATH length candidates for multipath computation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters bestpath as-path ignore",
  "cmd": "set protocols bgp parameters bestpath as-path ignore",
  "desc": "BGP — Ignore AS_PATH length when selecting a route"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters bestpath compare-routerid",
  "cmd": "set protocols bgp parameters bestpath compare-routerid",
  "desc": "BGP — Ensure that when comparing routes where both are equal on most metrics, including local-pref, AS_PATH length, IGP cost, MED, that the tie is broken based on router-ID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters bestpath med confed",
  "cmd": "set protocols bgp parameters bestpath med confed",
  "desc": "BGP — This command specifies that BGP considers the MED when comparing routes originated from different sub-ASs within the confederation to which this BGP speaker belongs."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters bestpath med missing-as-worst",
  "cmd": "set protocols bgp parameters bestpath med missing-as-worst",
  "desc": "BGP — This command specifies that a route with a MED is always considered to be better than a route without a MED by causing the missing MED attribute to have a value of infinity."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters default local-pref <local-pref value>",
  "cmd": "set protocols bgp parameters default local-pref <local-pref value>",
  "desc": "BGP — This command specifies the default local preference value. The local preference range is 0 to 4294967295."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters deterministic-med",
  "cmd": "set protocols bgp parameters deterministic-med",
  "desc": "BGP — This command provides to compare different MED values that advertised by neighbours in the same AS for routes selection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp address-family ipv4-unicast network <prefix> backdoor",
  "cmd": "set protocols bgp address-family ipv4-unicast network <prefix> backdoor",
  "desc": "BGP — This command allows the router to prefer route to specified prefix learned via IGP through backdoor link instead of a route to the same prefix learned via EBGP."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast>…",
  "cmd": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> distribute-list <export|import> <number>",
  "desc": "BGP — This command applies the access list filters named in \\<number\\> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast>…",
  "cmd": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> prefix-list <export|import> <name>",
  "desc": "BGP — This command applies the prfefix list filters named in \\<name\\> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast>…",
  "cmd": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> route-map <export|import> <name>",
  "desc": "BGP — This command applies the route map named in \\<name\\> to the specified BGP neighbor to control and modify routing information that is exchanged between peers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast>…",
  "cmd": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> filter-list <export|import> <name>",
  "desc": "BGP — This command applies the AS path access list filters named in \\<name\\> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast>…",
  "cmd": "set protocols bgp neighbor <address|interface> address-family <ipv4-unicast|ipv6-unicast> capability orf <receive|send>",
  "desc": "BGP — This command enables the ORF capability (described in 5291) on the local router, and enables ORF capability advertisement to the specified BGP peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> solo",
  "cmd": "set protocols bgp neighbor <address|interface> solo",
  "desc": "BGP — This command prevents from sending back prefixes learned from the neighbor."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address> address-family <ipv4-unicast|ipv6-unicast> route-ref…",
  "cmd": "set protocols bgp neighbor <address> address-family <ipv4-unicast|ipv6-unicast> route-reflector-client",
  "desc": "BGP — This command specifies the given neighbor as route reflector client."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters cluster-id <id>",
  "cmd": "set protocols bgp parameters cluster-id <id>",
  "desc": "BGP — This command specifies cluster ID which identifies a collection of route reflectors and their clients, and is used by route reflectors to avoid looping."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters confederation identifier <asn>",
  "cmd": "set protocols bgp parameters confederation identifier <asn>",
  "desc": "BGP — This command specifies a BGP confederation identifier. \\<asn\\> is the number of the autonomous system that internally includes multiple sub-autonomous systems (a confederation)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters confederation peers <nsubasn>",
  "cmd": "set protocols bgp parameters confederation peers <nsubasn>",
  "desc": "BGP — This command sets other confederations \\<nsubasn\\> as members of autonomous system specified by confederation identifier <asn>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp <ipv4|ipv6>",
  "cmd": "show bgp <ipv4|ipv6>",
  "desc": "BGP — This command displays all entries in BGP routing table."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp <ipv4|ipv6> <address|prefix>",
  "cmd": "show bgp <ipv4|ipv6> <address|prefix>",
  "desc": "BGP — This command displays information about the particular entry in the BGP routing table."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp cidr-only",
  "cmd": "show bgp cidr-only",
  "desc": "BGP — This command displays routes with classless interdomain routing (CIDR)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp <ipv4|ipv6> community <value>",
  "cmd": "show bgp <ipv4|ipv6> community <value>",
  "desc": "BGP — This command displays routes that belong to specified BGP communities. Valid value is a community number in the range from 1 to 4294967200, or AA:NN (autonomous system-community number/2-byte number), no-export, local-a…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp <ipv4|ipv6> community-list <name>",
  "cmd": "show bgp <ipv4|ipv6> community-list <name>",
  "desc": "BGP — This command displays routes that are permitted by the BGP community list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp <ipv4|ipv6> dampening dampened-paths",
  "cmd": "show bgp <ipv4|ipv6> dampening dampened-paths",
  "desc": "BGP — This command displays BGP dampened routes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp <ipv4|ipv6> dampening flap-statistics",
  "cmd": "show bgp <ipv4|ipv6> dampening flap-statistics",
  "desc": "BGP — This command displays information about flapping BGP routes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp <ipv4|ipv6> filter-list <name>",
  "cmd": "show bgp <ipv4|ipv6> filter-list <name>",
  "desc": "BGP — This command displays BGP routes allowed by the specified AS Path access list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp <ipv4|ipv6> neighbors <address> advertised-routes",
  "cmd": "show bgp <ipv4|ipv6> neighbors <address> advertised-routes",
  "desc": "BGP — This command displays BGP routes advertised to a neighbor."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp <ipv4|ipv6> neighbors <address> received-routes",
  "cmd": "show bgp <ipv4|ipv6> neighbors <address> received-routes",
  "desc": "BGP — This command displays BGP routes originating from the specified BGP neighbor before inbound policy is applied."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp <ipv4|ipv6> neighbors <address> routes",
  "cmd": "show bgp <ipv4|ipv6> neighbors <address> routes",
  "desc": "BGP — This command displays BGP received-routes that are accepted after filtering."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp <ipv4|ipv6> neighbors <address> dampened-routes",
  "cmd": "show bgp <ipv4|ipv6> neighbors <address> dampened-routes",
  "desc": "BGP — This command displays dampened routes received from BGP neighbor."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp <ipv4|ipv6> regexp <text>",
  "cmd": "show bgp <ipv4|ipv6> regexp <text>",
  "desc": "BGP — This command displays information about BGP routes whose AS path matches the specified regular expression."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show bgp <ipv4|ipv6> summary",
  "cmd": "show bgp <ipv4|ipv6> summary",
  "desc": "BGP — This command displays the status of all BGP connections."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "reset bgp <ipv4|ipv6> <address> [soft [in|out]]",
  "cmd": "reset bgp <ipv4|ipv6> <address> [soft [in|out]]",
  "desc": "BGP — This command resets BGP connections to the specified neighbor IP address. With argument soft this command initiates a soft reset."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "reset bgp all",
  "cmd": "reset bgp all",
  "desc": "BGP — This command resets all BGP connections of given router."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "reset bgp <ipv4|ipv6> external",
  "cmd": "reset bgp <ipv4|ipv6> external",
  "desc": "BGP — This command resets all external BGP peers of given router."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "reset bgp <ipv4|ipv6> peer-group <name> [soft [in|out]]",
  "cmd": "reset bgp <ipv4|ipv6> peer-group <name> [soft [in|out]]",
  "desc": "BGP — This command resets BGP connections to the specified peer group. With argument soft this command initiates a soft reset."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls interface <interface>",
  "cmd": "set protocols mpls interface <interface>",
  "desc": "MPLS — Use this command to enable MPLS processing on the interface you define."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp interface <interface>",
  "cmd": "set protocols mpls ldp interface <interface>",
  "desc": "MPLS — Use this command to enable LDP on the interface you define."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp router-id <address>",
  "cmd": "set protocols mpls ldp router-id <address>",
  "desc": "MPLS — Use this command to configure the IP address used as the LDP router-id of the local device."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp discovery transport-ipv4-address <address>",
  "cmd": "set protocols mpls ldp discovery transport-ipv4-address <address>",
  "desc": "MPLS · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp discovery transport-ipv6-address <address>",
  "cmd": "set protocols mpls ldp discovery transport-ipv6-address <address>",
  "desc": "MPLS — Use this command to set the IPv4 or IPv6 transport-address used by LDP."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp neighbor <address> password <password>",
  "cmd": "set protocols mpls ldp neighbor <address> password <password>",
  "desc": "BGP — Use this command to configure authentication for LDP peers. Set the IP address of the LDP peer and a password that should be shared in order to become neighbors."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp neighbor <address> session-holdtime <seconds>",
  "cmd": "set protocols mpls ldp neighbor <address> session-holdtime <seconds>",
  "desc": "BGP — Use this command to configure a specific session hold time for LDP peers. Set the IP address of the LDP peer and a session hold time that should be configured for it."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp neighbor <address> ttl-security <disable | hop count>",
  "cmd": "set protocols mpls ldp neighbor <address> ttl-security <disable | hop count>",
  "desc": "BGP — Use this command to enable, disable, or specify hop count for TTL security for LDP peers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp discovery hello-ipv4-interval <seconds>",
  "cmd": "set protocols mpls ldp discovery hello-ipv4-interval <seconds>",
  "desc": "MPLS · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp discovery hello-ipv4-holdtime <seconds>",
  "cmd": "set protocols mpls ldp discovery hello-ipv4-holdtime <seconds>",
  "desc": "MPLS · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp discovery hello-ipv6-interval <seconds>",
  "cmd": "set protocols mpls ldp discovery hello-ipv6-interval <seconds>",
  "desc": "MPLS · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp discovery hello-ipv6-holdtime <seconds>",
  "cmd": "set protocols mpls ldp discovery hello-ipv6-holdtime <seconds>",
  "desc": "MPLS — Use these commands if you would like to set the discovery hello and hold time parameters."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp discovery session-ipv4-holdtime <seconds>",
  "cmd": "set protocols mpls ldp discovery session-ipv4-holdtime <seconds>",
  "desc": "MPLS · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp discovery session-ipv6-holdtime <seconds>",
  "cmd": "set protocols mpls ldp discovery session-ipv6-holdtime <seconds>",
  "desc": "MPLS — Use this command if you would like to set the TCP session hold time intervals."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp import ipv4 import-filter filter-access-list",
  "cmd": "set protocols mpls ldp import ipv4 import-filter filter-access-list",
  "desc": "MPLS — <access list number>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp import ipv6 import-filter filter-access-list6",
  "cmd": "set protocols mpls ldp import ipv6 import-filter filter-access-list6",
  "desc": "MPLS — <access list number> Use these commands to control the importing of forwarding equivalence classes (FECs) for LDP from neighbors."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp export ipv4 export-filter filter-access-list",
  "cmd": "set protocols mpls ldp export ipv4 export-filter filter-access-list",
  "desc": "MPLS — <access list number>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp export ipv6 export-filter filter-access-list6",
  "cmd": "set protocols mpls ldp export ipv6 export-filter filter-access-list6",
  "desc": "MPLS — <access list number> Use these commands to control the exporting of forwarding equivalence classes (FECs) for LDP to neighbors."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp export ipv4 explicit-null",
  "cmd": "set protocols mpls ldp export ipv4 explicit-null",
  "desc": "MPLS · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp export ipv6 explicit-null",
  "cmd": "set protocols mpls ldp export ipv6 explicit-null",
  "desc": "MPLS — Use this command if you would like for the router to advertise FECs with a label of 0 for explicit null operations."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp allocation ipv4 access-list <access list number>",
  "cmd": "set protocols mpls ldp allocation ipv4 access-list <access list number>",
  "desc": "MPLS · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp allocation ipv6 access-list6 <access list number>",
  "cmd": "set protocols mpls ldp allocation ipv6 access-list6 <access list number>",
  "desc": "MPLS — Use this command if you would like to control the local FEC allocations for LDP."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp parameters cisco-interop-tlv",
  "cmd": "set protocols mpls ldp parameters cisco-interop-tlv",
  "desc": "MPLS — Use this command to use a Cisco non-compliant format to send and interpret the Dual-Stack capability TLV for IPv6 LDP communications."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp parameters ordered-control",
  "cmd": "set protocols mpls ldp parameters ordered-control",
  "desc": "MPLS — Use this command to use ordered label distribution control mode. FRR by default uses independent label distribution control mode for label distribution."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp parameters transport-prefer-ipv4",
  "cmd": "set protocols mpls ldp parameters transport-prefer-ipv4",
  "desc": "MPLS — Use this command to prefer IPv4 for TCP peer transport connection for LDP when both an IPv4 and IPv6 LDP address are configured on the same interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp targeted-neighbor ipv4 enable",
  "cmd": "set protocols mpls ldp targeted-neighbor ipv4 enable",
  "desc": "BGP · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp targeted-neighbor ipv6 enable",
  "cmd": "set protocols mpls ldp targeted-neighbor ipv6 enable",
  "desc": "BGP — Use this command to enable targeted LDP sessions to the local router. The router will then respond to any sessions that are trying to connect to it that are not a link local type of TCP connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp targeted-neighbor ipv4 address <address>",
  "cmd": "set protocols mpls ldp targeted-neighbor ipv4 address <address>",
  "desc": "BGP · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp targeted-neighbor ipv6 address <address>",
  "cmd": "set protocols mpls ldp targeted-neighbor ipv6 address <address>",
  "desc": "BGP — Use this command to enable the local router to try and connect with a targeted LDP session to another router."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp targeted-neighbor ipv4 hello-holdtime <seconds>",
  "cmd": "set protocols mpls ldp targeted-neighbor ipv4 hello-holdtime <seconds>",
  "desc": "BGP · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp targeted-neighbor ipv4 hello-interval <seconds>",
  "cmd": "set protocols mpls ldp targeted-neighbor ipv4 hello-interval <seconds>",
  "desc": "BGP · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp targeted-neighbor ipv6 hello-holdtime <seconds>",
  "cmd": "set protocols mpls ldp targeted-neighbor ipv6 hello-holdtime <seconds>",
  "desc": "BGP · protocols"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp targeted-neighbor ipv6 hello-interval <seconds>",
  "cmd": "set protocols mpls ldp targeted-neighbor ipv6 hello-interval <seconds>",
  "desc": "BGP — Use these commands if you would like to set the discovery hello and hold time parameters for the targeted LDP neighbors."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "show mpls ldp binding",
  "cmd": "show mpls ldp binding",
  "desc": "MPLS — Use this command to see the Label Information Base."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "show mpls ldp discovery",
  "cmd": "show mpls ldp discovery",
  "desc": "MPLS — Use this command to see discovery hello information"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "show mpls ldp interface",
  "cmd": "show mpls ldp interface",
  "desc": "MPLS — Use this command to see LDP interface information"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show mpls ldp neighbor",
  "cmd": "show mpls ldp neighbor",
  "desc": "BGP — Use this command to see LDP neighbor information"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "show mpls ldp neighbor detail",
  "cmd": "show mpls ldp neighbor detail",
  "desc": "BGP — Use this command to see detailed LDP neighbor information"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "reset mpls ldp neighbor <IPv4 or IPv6 address>",
  "cmd": "reset mpls ldp neighbor <IPv4 or IPv6 address>",
  "desc": "BGP — Use this command to reset an LDP neighbor/TCP session that is established"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy local-route rule <1-32765> set table <1-200|main>",
  "cmd": "set policy local-route rule <1-32765> set table <1-200|main>",
  "desc": "Routing — Set the routing table to use for forwarding matching packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy local-route rule <1-32765> set vrf <vrf|default>",
  "cmd": "set policy local-route rule <1-32765> set vrf <vrf|default>",
  "desc": "Routing — Set the VRF to use for forwarding matching packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy local-route rule <1-32765> protocol <protocol>",
  "cmd": "set policy local-route rule <1-32765> protocol <protocol>",
  "desc": "Routing — Match specified protocol (name or number)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy local-route rule <1-32765> fwmark <1-2147483647>",
  "cmd": "set policy local-route rule <1-32765> fwmark <1-2147483647>",
  "desc": "Routing — Match specified firewall mark (fwmark)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy local-route rule <1-32765> source address <x.x.x.x|x.x.x.x/x>",
  "cmd": "set policy local-route rule <1-32765> source address <x.x.x.x|x.x.x.x/x>",
  "desc": "Routing — Match specified source address or prefix."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set policy local-route rule <1-32765> source port <1-65535>",
  "cmd": "set policy local-route rule <1-32765> source port <1-65535>",
  "desc": "Interfaces — Match specified source port."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy local-route rule <1-32765> destination address <x.x.x.x|x.x.x.x/x>",
  "cmd": "set policy local-route rule <1-32765> destination address <x.x.x.x|x.x.x.x/x>",
  "desc": "Routing — Match specified destination address or prefix."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set policy local-route rule <1-32765> destination port <1-65535>",
  "cmd": "set policy local-route rule <1-32765> destination port <1-65535>",
  "desc": "Interfaces — Match specified destination port."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set policy local-route rule <1-32765> inbound-interface <interface>",
  "cmd": "set policy local-route rule <1-32765> inbound-interface <interface>",
  "desc": "Interfaces — Match specified inbound interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy local-route6 rule <1-32765> set table <1-200|main>",
  "cmd": "set policy local-route6 rule <1-32765> set table <1-200|main>",
  "desc": "Routing — Set the routing table to use for forwarding matching packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy local-route6 rule <1-32765> set vrf <vrf|default>",
  "cmd": "set policy local-route6 rule <1-32765> set vrf <vrf|default>",
  "desc": "Routing — Set the VRF to use for forwarding matching packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy local-route6 rule <1-32765> protocol <protocol>",
  "cmd": "set policy local-route6 rule <1-32765> protocol <protocol>",
  "desc": "Routing — Match specified protocol (name or number)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy local-route6 rule <1-32765> fwmark <1-2147483647>",
  "cmd": "set policy local-route6 rule <1-32765> fwmark <1-2147483647>",
  "desc": "Routing — Match specified firewall mark (fwmark)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy local-route6 rule <1-32765> source address <h:h:h:h:h:h:h:h|h:h:h:h:h:h:h:h/x>",
  "cmd": "set policy local-route6 rule <1-32765> source address <h:h:h:h:h:h:h:h|h:h:h:h:h:h:h:h/x>",
  "desc": "Routing — Match specified source address or prefix."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set policy local-route6 rule <1-32765> source port <1-65535>",
  "cmd": "set policy local-route6 rule <1-32765> source port <1-65535>",
  "desc": "Interfaces — Match specified source port."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy local-route6 rule <1-32765> destination address <h:h:h:h:h:h:h:h|h:h:h:h:h:h:h…",
  "cmd": "set policy local-route6 rule <1-32765> destination address <h:h:h:h:h:h:h:h|h:h:h:h:h:h:h:h/x>",
  "desc": "Routing — Match specified destination address or prefix."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set policy local-route6 rule <1-32765> destination port <1-65535>",
  "cmd": "set policy local-route6 rule <1-32765> destination port <1-65535>",
  "desc": "Interfaces — Match specified destination port."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set policy local-route6 rule <1-32765> inbound-interface <interface>",
  "cmd": "set policy local-route6 rule <1-32765> inbound-interface <interface>",
  "desc": "Interfaces — Match specified inbound interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy large-community-list <text>",
  "cmd": "set policy large-community-list <text>",
  "desc": "ACL — Create large-community-list policy identified by name <text>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy large-community-list <text> description <text>",
  "cmd": "set policy large-community-list <text> description <text>",
  "desc": "ACL — Set description for large-community-list policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy large-community-list <text> rule <1-65535> action <permit|deny>",
  "cmd": "set policy large-community-list <text> rule <1-65535> action <permit|deny>",
  "desc": "ACL — Set action to take on entries matching this rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy large-community-list <text> rule <1-65535> description <text>",
  "cmd": "set policy large-community-list <text> rule <1-65535> description <text>",
  "desc": "ACL — Set description for rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy large-community-list <text> rule <1-65535> regex <aa:nn:nn>",
  "cmd": "set policy large-community-list <text> rule <1-65535> regex <aa:nn:nn>",
  "desc": "ACL — Regular expression to match against a large community list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy extcommunity-list <text>",
  "cmd": "set policy extcommunity-list <text>",
  "desc": "Routing — Creat extcommunity-list policy identified by name \\<text\\>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy extcommunity-list <text> description <text>",
  "cmd": "set policy extcommunity-list <text> description <text>",
  "desc": "Routing — Set description for extcommunity-list policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy extcommunity-list <text> rule <1-65535> action <permit|deny>",
  "cmd": "set policy extcommunity-list <text> rule <1-65535> action <permit|deny>",
  "desc": "Routing — Set action to take on entries matching this rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy extcommunity-list <text> rule <1-65535> description <text>",
  "cmd": "set policy extcommunity-list <text> rule <1-65535> description <text>",
  "desc": "Routing — Set description for rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy extcommunity-list <text> rule <1-65535> regex <text>",
  "cmd": "set policy extcommunity-list <text> rule <1-65535> regex <text>",
  "desc": "Routing — Regular expression to match against an extended community list, where text could be: * \\<aa:nn:nn\\>: Extended community list regular expression."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list <text>",
  "cmd": "set policy prefix-list <text>",
  "desc": "ACL — This command creates the new prefix-list policy, identified by <text>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list <text> description <text>",
  "cmd": "set policy prefix-list <text> description <text>",
  "desc": "ACL — Set description for the prefix-list policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list <text> rule <1-65535> action <permit|deny>",
  "cmd": "set policy prefix-list <text> rule <1-65535> action <permit|deny>",
  "desc": "ACL — This command creates a new rule in the prefix-list and defines an action."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list <text> rule <1-65535> description <text>",
  "cmd": "set policy prefix-list <text> rule <1-65535> description <text>",
  "desc": "ACL — Set description for rule in the prefix-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list <text> rule <1-65535> prefix <x.x.x.x/x>",
  "cmd": "set policy prefix-list <text> rule <1-65535> prefix <x.x.x.x/x>",
  "desc": "ACL — Prefix to match against."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list <text> rule <1-65535> ge <0-32>",
  "cmd": "set policy prefix-list <text> rule <1-65535> ge <0-32>",
  "desc": "ACL — Netmask greater than length."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list <text> rule <1-65535> le <0-32>",
  "cmd": "set policy prefix-list <text> rule <1-65535> le <0-32>",
  "desc": "ACL — Netmask less than length"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list PL4-EXAMPLE-NAME rule 10 action 'permit'",
  "cmd": "set policy prefix-list PL4-EXAMPLE-NAME rule 10 action 'permit'",
  "desc": "ACL · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list PL4-EXAMPLE-NAME rule 10 le '32'",
  "cmd": "set policy prefix-list PL4-EXAMPLE-NAME rule 10 le '32'",
  "desc": "ACL · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list PL4-EXAMPLE-NAME rule 10 prefix '192.0.2.0/24'",
  "cmd": "set policy prefix-list PL4-EXAMPLE-NAME rule 10 prefix '192.0.2.0/24'",
  "desc": "ACL · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list PL4-EXAMPLE-NAME rule 20 action 'permit'",
  "cmd": "set policy prefix-list PL4-EXAMPLE-NAME rule 20 action 'permit'",
  "desc": "ACL · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list PL4-EXAMPLE-NAME rule 20 le '32'",
  "cmd": "set policy prefix-list PL4-EXAMPLE-NAME rule 20 le '32'",
  "desc": "ACL · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list PL4-EXAMPLE-NAME rule 20 prefix '198.51.100.0/24'",
  "cmd": "set policy prefix-list PL4-EXAMPLE-NAME rule 20 prefix '198.51.100.0/24'",
  "desc": "ACL · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list PL4-EXAMPLE-NAME rule 30 action 'permit'",
  "cmd": "set policy prefix-list PL4-EXAMPLE-NAME rule 30 action 'permit'",
  "desc": "ACL · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list PL4-EXAMPLE-NAME rule 30 le '32'",
  "cmd": "set policy prefix-list PL4-EXAMPLE-NAME rule 30 le '32'",
  "desc": "ACL · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy prefix-list PL4-EXAMPLE-NAME rule 30 prefix '203.0.113.0/24'",
  "cmd": "set policy prefix-list PL4-EXAMPLE-NAME rule 30 prefix '203.0.113.0/24'",
  "desc": "ACL · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 <text>",
  "cmd": "set policy prefix-list6 <text>",
  "desc": "Routing — This command creates the new IPv6 prefix-list policy, identified by <text>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 <text> description <text>",
  "cmd": "set policy prefix-list6 <text> description <text>",
  "desc": "Routing — Set description for the IPv6 prefix-list policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 <text> rule <1-65535> action <permit|deny>",
  "cmd": "set policy prefix-list6 <text> rule <1-65535> action <permit|deny>",
  "desc": "Routing — This command creates a new rule in the IPv6 prefix-list and defines an action."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 <text> rule <1-65535> description <text>",
  "cmd": "set policy prefix-list6 <text> rule <1-65535> description <text>",
  "desc": "Routing — Set description for rule in IPv6 prefix-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 <text> rule <1-65535> prefix <h:h:h:h:h:h:h:h/x>",
  "cmd": "set policy prefix-list6 <text> rule <1-65535> prefix <h:h:h:h:h:h:h:h/x>",
  "desc": "Routing — IPv6 prefix."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 <text> rule <1-65535> ge <0-128>",
  "cmd": "set policy prefix-list6 <text> rule <1-65535> ge <0-128>",
  "desc": "Routing — Netmask greater than length."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 <text> rule <1-65535> le <0-128>",
  "cmd": "set policy prefix-list6 <text> rule <1-65535> le <0-128>",
  "desc": "Routing — Netmask less than length"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 10 action 'permit'",
  "cmd": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 10 action 'permit'",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 10 le '128'",
  "cmd": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 10 le '128'",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 10 prefix '2001:db8:0:0::/64'",
  "cmd": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 10 prefix '2001:db8:0:0::/64'",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 20 action 'permit'",
  "cmd": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 20 action 'permit'",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 20 le '128'",
  "cmd": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 20 le '128'",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 20 prefix '2001:db8:0:1::/64'",
  "cmd": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 20 prefix '2001:db8:0:1::/64'",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 30 action 'permit'",
  "cmd": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 30 action 'permit'",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 30 le '128'",
  "cmd": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 30 le '128'",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 30 prefix '2001:db8:0:2::/64'",
  "cmd": "set policy prefix-list6 PL6-EXAMPLE-NAME rule 30 prefix '2001:db8:0:2::/64'",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set policy access-list <acl_number>",
  "cmd": "set policy access-list <acl_number>",
  "desc": "VLAN — This command creates the new access list policy, where <acl_number> must be a number from 1 to 2699."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set policy access-list <acl_number> description <text>",
  "cmd": "set policy access-list <acl_number> description <text>",
  "desc": "VLAN — Set description for the access list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set policy access-list <acl_number> rule <1-65535> action <permit|deny>",
  "cmd": "set policy access-list <acl_number> rule <1-65535> action <permit|deny>",
  "desc": "VLAN — This command creates a new rule in the access list and defines an action."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set policy access-list <acl_number> rule <1-65535> <destination|source> <any|host|inverse…",
  "cmd": "set policy access-list <acl_number> rule <1-65535> <destination|source> <any|host|inverse-mask|network>",
  "desc": "VLAN — This command defines matching parameters for access list rule. Matching criteria could be applied to destination or source parameters: * any: any IP address to match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set policy access-list6 <text>",
  "cmd": "set policy access-list6 <text>",
  "desc": "VLAN — This command creates the new IPv6 access list, identified by <text>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set policy access-list6 <text> description <text>",
  "cmd": "set policy access-list6 <text> description <text>",
  "desc": "VLAN — Set description for the IPv6 access list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set policy access-list6 <text> rule <1-65535> action <permit|deny>",
  "cmd": "set policy access-list6 <text> rule <1-65535> action <permit|deny>",
  "desc": "VLAN — This command creates a new rule in the IPv6 access list and defines an action."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set policy access-list6 <text> rule <1-65535> source <any|exact-match|network>",
  "cmd": "set policy access-list6 <text> rule <1-65535> source <any|exact-match|network>",
  "desc": "VLAN — This command defines matching parameters for IPv6 access list rule. Matching criteria could be applied to source parameters: * any: any IPv6 address to match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy community-list <text>",
  "cmd": "set policy community-list <text>",
  "desc": "ACL — Creat community-list policy identified by name <text>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy community-list <text> description <text>",
  "cmd": "set policy community-list <text> description <text>",
  "desc": "ACL — Set description for community-list policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy community-list <text> rule <1-65535> action <permit|deny>",
  "cmd": "set policy community-list <text> rule <1-65535> action <permit|deny>",
  "desc": "ACL — Set action to take on entries matching this rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy community-list <text> rule <1-65535> description <text>",
  "cmd": "set policy community-list <text> rule <1-65535> description <text>",
  "desc": "ACL — Set description for rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy community-list <text> rule <1-65535> regex <aa:nn|local-AS|no-advertise|no-exp…",
  "cmd": "set policy community-list <text> rule <1-65535> regex <aa:nn|local-AS|no-advertise|no-export|additive>",
  "desc": "ACL — Regular expression to match against a community-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text>",
  "cmd": "set policy route-map <text>",
  "desc": "Routing — This command creates a new route-map policy, identified by \\<text\\>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> description <text>",
  "cmd": "set policy route-map <text> description <text>",
  "desc": "Routing — Set description for the route-map policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> action <permit|deny>",
  "cmd": "set policy route-map <text> rule <1-65535> action <permit|deny>",
  "desc": "Routing — Set action for the route-map policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> call <text>",
  "cmd": "set policy route-map <text> rule <1-65535> call <text>",
  "desc": "Routing — Call another route-map policy on match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> continue <1-65535>",
  "cmd": "set policy route-map <text> rule <1-65535> continue <1-65535>",
  "desc": "Routing — Jump to a different rule in this route-map on a match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> description <text>",
  "cmd": "set policy route-map <text> rule <1-65535> description <text>",
  "desc": "Routing — Set description for the rule in the route-map policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match as-path <text>",
  "cmd": "set policy route-map <text> rule <1-65535> match as-path <text>",
  "desc": "Routing — BGP as-path list to match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy route-map <text> rule <1-65535> match community community-list <text>",
  "cmd": "set policy route-map <text> rule <1-65535> match community community-list <text>",
  "desc": "ACL — BGP community-list to match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match community exact-match",
  "cmd": "set policy route-map <text> rule <1-65535> match community exact-match",
  "desc": "Routing — Set BGP community-list to exactly match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match extcommunity <text>",
  "cmd": "set policy route-map <text> rule <1-65535> match extcommunity <text>",
  "desc": "Routing — BGP extended community to match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set policy route-map <text> rule <1-65535> match interface <text>",
  "cmd": "set policy route-map <text> rule <1-65535> match interface <text>",
  "desc": "Interfaces — First hop interface of a route to match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set policy route-map <text> rule <1-65535> match ip address access-list <1-2699>",
  "cmd": "set policy route-map <text> rule <1-65535> match ip address access-list <1-2699>",
  "desc": "VLAN — IP address of route to match, based on access-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy route-map <text> rule <1-65535> match ip address prefix-list <text>",
  "cmd": "set policy route-map <text> rule <1-65535> match ip address prefix-list <text>",
  "desc": "ACL — IP address of route to match, based on prefix-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match ip address prefix-len <0-32>",
  "cmd": "set policy route-map <text> rule <1-65535> match ip address prefix-len <0-32>",
  "desc": "Routing — IP address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set policy route-map <text> rule <1-65535> match ip nexthop access-list <1-2699>",
  "cmd": "set policy route-map <text> rule <1-65535> match ip nexthop access-list <1-2699>",
  "desc": "VLAN — IP next-hop of route to match, based on access-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match ip nexthop address <x.x.x.x>",
  "cmd": "set policy route-map <text> rule <1-65535> match ip nexthop address <x.x.x.x>",
  "desc": "Routing — IP next-hop of route to match, based on ip address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match ip nexthop prefix-len <0-32>",
  "cmd": "set policy route-map <text> rule <1-65535> match ip nexthop prefix-len <0-32>",
  "desc": "Routing — IP next-hop of route to match, based on prefix length."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy route-map <text> rule <1-65535> match ip nexthop prefix-list <text>",
  "cmd": "set policy route-map <text> rule <1-65535> match ip nexthop prefix-list <text>",
  "desc": "ACL — IP next-hop of route to match, based on prefix-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match ip nexthop type <blackhole>",
  "cmd": "set policy route-map <text> rule <1-65535> match ip nexthop type <blackhole>",
  "desc": "Routing — IP next-hop of route to match, based on type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set policy route-map <text> rule <1-65535> match ip route-source access-list <1-2699>",
  "cmd": "set policy route-map <text> rule <1-65535> match ip route-source access-list <1-2699>",
  "desc": "VLAN — IP route source of route to match, based on access-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy route-map <text> rule <1-65535> match ip route-source prefix-list <text>",
  "cmd": "set policy route-map <text> rule <1-65535> match ip route-source prefix-list <text>",
  "desc": "ACL — IP route source of route to match, based on prefix-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set policy route-map <text> rule <1-65535> match ipv6 address access-list <text>",
  "cmd": "set policy route-map <text> rule <1-65535> match ipv6 address access-list <text>",
  "desc": "VLAN — IPv6 address of route to match, based on IPv6 access-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy route-map <text> rule <1-65535> match ipv6 address prefix-list <text>",
  "cmd": "set policy route-map <text> rule <1-65535> match ipv6 address prefix-list <text>",
  "desc": "ACL — IPv6 address of route to match, based on IPv6 prefix-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match ipv6 address prefix-len <0-128>",
  "cmd": "set policy route-map <text> rule <1-65535> match ipv6 address prefix-len <0-128>",
  "desc": "Routing — IPv6 address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match ipv6 nexthop <h:h:h:h:h:h:h:h>",
  "cmd": "set policy route-map <text> rule <1-65535> match ipv6 nexthop <h:h:h:h:h:h:h:h>",
  "desc": "Routing — Nexthop IPv6 address to match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy route-map <text> rule <1-65535> match large-community large-community-list <te…",
  "cmd": "set policy route-map <text> rule <1-65535> match large-community large-community-list <text>",
  "desc": "ACL — Match BGP large communities."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match local-preference <0-4294967295>",
  "cmd": "set policy route-map <text> rule <1-65535> match local-preference <0-4294967295>",
  "desc": "Routing — Match local preference."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match metric <1-65535>",
  "cmd": "set policy route-map <text> rule <1-65535> match metric <1-65535>",
  "desc": "Routing — Match route metric."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match origin <egp|igp|incomplete>",
  "cmd": "set policy route-map <text> rule <1-65535> match origin <egp|igp|incomplete>",
  "desc": "Routing — Boarder Gateway Protocol (BGP) origin code to match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match peer <x.x.x.x>",
  "cmd": "set policy route-map <text> rule <1-65535> match peer <x.x.x.x>",
  "desc": "Routing — Peer IP address to match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match protocol <protocol>",
  "cmd": "set policy route-map <text> rule <1-65535> match protocol <protocol>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match rpki <invalid|notfound|valid>",
  "cmd": "set policy route-map <text> rule <1-65535> match rpki <invalid|notfound|valid>",
  "desc": "Routing — Match RPKI validation result."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match source-vrf <text>",
  "cmd": "set policy route-map <text> rule <1-65535> match source-vrf <text>",
  "desc": "Routing — Source VRF to match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match tag <1-65535>",
  "cmd": "set policy route-map <text> rule <1-65535> match tag <1-65535>",
  "desc": "Routing — Route tag to match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> on-match goto <1-65535>",
  "cmd": "set policy route-map <text> rule <1-65535> on-match goto <1-65535>",
  "desc": "Routing — Exit policy on match: go to rule <1-65535>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> on-match next",
  "cmd": "set policy route-map <text> rule <1-65535> on-match next",
  "desc": "Routing — Exit policy on match: go to next sequence number."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set aggregator <as|ip> <1-4294967295|x.x.x.x>",
  "cmd": "set policy route-map <text> rule <1-65535> set aggregator <as|ip> <1-4294967295|x.x.x.x>",
  "desc": "Routing — BGP aggregator attribute: AS number or IP address of an aggregation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set as-path exclude <1-4294967295 | all>",
  "cmd": "set policy route-map <text> rule <1-65535> set as-path exclude <1-4294967295 | all>",
  "desc": "Routing — Drop AS-NUMBER from the BGP AS path. If all is specified, remove all AS numbers from the AS_PATH of the BGP path's NLRI."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set as-path prepend <1-4294967295>",
  "cmd": "set policy route-map <text> rule <1-65535> set as-path prepend <1-4294967295>",
  "desc": "Routing — Prepend the given string of AS numbers to the AS_PATH of the BGP path's NLRI."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set as-path prepend-last-as <n>",
  "cmd": "set policy route-map <text> rule <1-65535> set as-path prepend-last-as <n>",
  "desc": "Routing — Prepend the existing last AS number (the leftmost ASN) to the AS_PATH."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set atomic-aggregate",
  "cmd": "set policy route-map <text> rule <1-65535> set atomic-aggregate",
  "desc": "Routing — BGP atomic aggregate attribute."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set community <add|replace> <community>",
  "cmd": "set policy route-map <text> rule <1-65535> set community <add|replace> <community>",
  "desc": "Routing — Add or replace BGP community attribute in format <0-65535:0-65535> or from well-known community list"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set community none",
  "cmd": "set policy route-map <text> rule <1-65535> set community none",
  "desc": "Routing — Delete all BGP communities"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set community delete <text>",
  "cmd": "set policy route-map <text> rule <1-65535> set community delete <text>",
  "desc": "Routing — Delete BGP communities matching the community-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set large-community <add|replace> <GA:LDP1:LDP…",
  "cmd": "set policy route-map <text> rule <1-65535> set large-community <add|replace> <GA:LDP1:LDP2>",
  "desc": "Routing — Add or replace BGP large-community attribute in format <0-4294967295:0-4294967295:0-4294967295>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set large-community none",
  "cmd": "set policy route-map <text> rule <1-65535> set large-community none",
  "desc": "Routing — Delete all BGP large-communities"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set large-community delete <text>",
  "cmd": "set policy route-map <text> rule <1-65535> set large-community delete <text>",
  "desc": "Routing — Delete BGP communities matching the large-community-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set extcommunity bandwidth <1-25600|cumulative…",
  "cmd": "set policy route-map <text> rule <1-65535> set extcommunity bandwidth <1-25600|cumulative|num-multipaths>",
  "desc": "Routing — Set extcommunity bandwidth"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set extcommunity bandwidth-non-transitive",
  "cmd": "set policy route-map <text> rule <1-65535> set extcommunity bandwidth-non-transitive",
  "desc": "Routing — The link bandwidth extended community is encoded as non-transitive"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set extcommunity rt <text>",
  "cmd": "set policy route-map <text> rule <1-65535> set extcommunity rt <text>",
  "desc": "Routing — Set route target value in format <0-65535:0-4294967295> or <IP:0-65535>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set extcommunity soo <text>",
  "cmd": "set policy route-map <text> rule <1-65535> set extcommunity soo <text>",
  "desc": "Routing — Set site of origin value in format <0-65535:0-4294967295> or <IP:0-65535>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set extcommunity none",
  "cmd": "set policy route-map <text> rule <1-65535> set extcommunity none",
  "desc": "Routing — Clear all BGP extcommunities."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set distance <0-255>",
  "cmd": "set policy route-map <text> rule <1-65535> set distance <0-255>",
  "desc": "Routing — Locally significant administrative distance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set ip-next-hop <x.x.x.x>",
  "cmd": "set policy route-map <text> rule <1-65535> set ip-next-hop <x.x.x.x>",
  "desc": "Routing — Nexthop IP address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set ip-next-hop unchanged",
  "cmd": "set policy route-map <text> rule <1-65535> set ip-next-hop unchanged",
  "desc": "Routing — Set the next-hop as unchanged. Pass through the route-map without changing its value"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set ip-next-hop peer-address",
  "cmd": "set policy route-map <text> rule <1-65535> set ip-next-hop peer-address",
  "desc": "Routing — Set the BGP nexthop address to the address of the peer. For an incoming route-map this means the ip address of our peer is used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set ipv6-next-hop <global|local> <h:h:h:h:h:h:…",
  "cmd": "set policy route-map <text> rule <1-65535> set ipv6-next-hop <global|local> <h:h:h:h:h:h:h:h>",
  "desc": "Routing — Nexthop IPv6 address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set ipv6-next-hop peer-address",
  "cmd": "set policy route-map <text> rule <1-65535> set ipv6-next-hop peer-address",
  "desc": "Routing — Set the BGP nexthop address to the address of the peer. For an incoming route-map this means the ip address of our peer is used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set ipv6-next-hop prefer-global",
  "cmd": "set policy route-map <text> rule <1-65535> set ipv6-next-hop prefer-global",
  "desc": "Routing — For Incoming and Import Route-maps if we receive a v6 global and v6 LL address for the route, then prefer to use the global address as the nexthop."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set local-preference <0-4294967295>",
  "cmd": "set policy route-map <text> rule <1-65535> set local-preference <0-4294967295>",
  "desc": "Routing — Set BGP local preference attribute."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set metric <+/-metric|0-4294967295|rtt|+rtt|-r…",
  "cmd": "set policy route-map <text> rule <1-65535> set metric <+/-metric|0-4294967295|rtt|+rtt|-rtt>",
  "desc": "Routing — Set the route metric. When used with BGP, set the BGP attribute MED to a specific value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set metric-type <type-1|type-2>",
  "cmd": "set policy route-map <text> rule <1-65535> set metric-type <type-1|type-2>",
  "desc": "Routing — Set OSPF external metric-type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set origin <igp|egp|incomplete>",
  "cmd": "set policy route-map <text> rule <1-65535> set origin <igp|egp|incomplete>",
  "desc": "Routing — Set BGP origin code."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set originator-id <x.x.x.x>",
  "cmd": "set policy route-map <text> rule <1-65535> set originator-id <x.x.x.x>",
  "desc": "Routing — Set BGP originator ID attribute."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set src <x.x.x.x|h:h:h:h:h:h:h:h>",
  "cmd": "set policy route-map <text> rule <1-65535> set src <x.x.x.x|h:h:h:h:h:h:h:h>",
  "desc": "Routing — Set source IP/IPv6 address for route."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set table <1-200>",
  "cmd": "set policy route-map <text> rule <1-65535> set table <1-200>",
  "desc": "Routing — Set prefixes to table."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set tag <1-65535>",
  "cmd": "set policy route-map <text> rule <1-65535> set tag <1-65535>",
  "desc": "Routing — Set tag value for routing protocol."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set weight <0-4294967295>",
  "cmd": "set policy route-map <text> rule <1-65535> set weight <0-4294967295>",
  "desc": "Routing — Set BGP weight attribute"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy as-path-list <text>",
  "cmd": "set policy as-path-list <text>",
  "desc": "Routing — Create as-path-policy identified by name <text>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy as-path-list <text> description <text>",
  "cmd": "set policy as-path-list <text> description <text>",
  "desc": "Routing — Set description for as-path-list policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy as-path-list <text> rule <1-65535> action <permit|deny>",
  "cmd": "set policy as-path-list <text> rule <1-65535> action <permit|deny>",
  "desc": "Routing — Set action to take on entries matching this rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy as-path-list <text> rule <1-65535> description <text>",
  "cmd": "set policy as-path-list <text> rule <1-65535> description <text>",
  "desc": "Routing — Set description for rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy as-path-list <text> rule <1-65535> regex <text>",
  "cmd": "set policy as-path-list <text> rule <1-65535> regex <text>",
  "desc": "Routing — Regular expression to match against an AS path. For example \"64501 64502\"."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> description <text>",
  "cmd": "set policy route <name> description <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> description <text>",
  "cmd": "set policy route6 <name> description <text>",
  "desc": "Routing — Provide a rule-set description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> default-log",
  "cmd": "set policy route <name> default-log",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> default-log",
  "cmd": "set policy route6 <name> default-log",
  "desc": "Routing — Option to log packets hitting default-action."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set policy route <name> interface <interface>",
  "cmd": "set policy route <name> interface <interface>",
  "desc": "Interfaces · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set policy route6 <name> interface <interface>",
  "cmd": "set policy route6 <name> interface <interface>",
  "desc": "Interfaces — Apply routing policy to interface"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> description <text>",
  "cmd": "set policy route <name> rule <n> description <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> description <text>",
  "cmd": "set policy route6 <name> rule <n> description <text>",
  "desc": "Routing — Provide a description for each rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> log <enable|disable>",
  "cmd": "set policy route <name> rule <n> log <enable|disable>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> log <enable|disable>",
  "cmd": "set policy route6 <name> rule <n> log <enable|disable>",
  "desc": "Routing — Option to enable or disable log matching rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> connection-mark <1-2147483647>",
  "cmd": "set policy route <name> rule <n> connection-mark <1-2147483647>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> connection-mark <1-2147483647>",
  "cmd": "set policy route6 <name> rule <n> connection-mark <1-2147483647>",
  "desc": "Routing — Set match criteria based on connection mark."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> mark <match_criteria>",
  "cmd": "set policy route <name> rule <n> mark <match_criteria>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> mark <match_criteria>",
  "cmd": "set policy route6 <name> rule <n> mark <match_criteria>",
  "desc": "Routing — Match based on the firewall mark (fwmark), where \\<match_criteria\\> can be: * \\<0-2147483647\\> a single fwmark * !\\<0-2147483647\\> everything except a single fwmark * &lt;start-end&gt; a range of marks * !&lt;start-end&…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> source address <match_criteria>",
  "cmd": "set policy route <name> rule <n> source address <match_criteria>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> destination address <match_criteria>",
  "cmd": "set policy route <name> rule <n> destination address <match_criteria>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> source address <match_criteria>",
  "cmd": "set policy route6 <name> rule <n> source address <match_criteria>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> destination address <match_criteria>",
  "cmd": "set policy route6 <name> rule <n> destination address <match_criteria>",
  "desc": "Routing — Set match criteria based on source or destination ipv4|ipv6 address, where &lt;match_criteria&gt; could be:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set policy route <name> rule <n> source group <address-group|domain-group|mac-group|netwo…",
  "cmd": "set policy route <name> rule <n> source group <address-group|domain-group|mac-group|network-group|port-group> <text>",
  "desc": "Interfaces · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set policy route <name> rule <n> destination group <address-group|domain-group|mac-group|…",
  "cmd": "set policy route <name> rule <n> destination group <address-group|domain-group|mac-group|network-group|port-group> <text>",
  "desc": "Interfaces · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set policy route6 <name> rule <n> source group <address-group|domain-group|mac-group|netw…",
  "cmd": "set policy route6 <name> rule <n> source group <address-group|domain-group|mac-group|network-group|port-group> <text>",
  "desc": "Interfaces · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set policy route6 <name> rule <n> destination group <address-group|domain-group|mac-group…",
  "cmd": "set policy route6 <name> rule <n> destination group <address-group|domain-group|mac-group|network-group|port-group> <text>",
  "desc": "Interfaces — Set match criteria based on source or destination groups, where &lt;text&gt; would be the group name/identifier."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set policy route <name> rule <n> destination port <match_criteria>",
  "cmd": "set policy route <name> rule <n> destination port <match_criteria>",
  "desc": "Interfaces · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set policy route6 <name> rule <n> destination port <match_criteria>",
  "cmd": "set policy route6 <name> rule <n> destination port <match_criteria>",
  "desc": "Interfaces — Set match criteria based on destination port, where \\<match_criteria\\> could be: * &lt;port name&gt;: Named port (any name in /etc/services, e.g., http)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> disable",
  "cmd": "set policy route <name> rule <n> disable",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> disable",
  "cmd": "set policy route6 <name> rule <n> disable",
  "desc": "Routing — Option to disable rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> dscp <text>",
  "cmd": "set policy route <name> rule <n> dscp <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> dscp <text>",
  "cmd": "set policy route6 <name> rule <n> dscp <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> dscp-exclude <text>",
  "cmd": "set policy route <name> rule <n> dscp-exclude <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> dscp-exclude <text>",
  "cmd": "set policy route6 <name> rule <n> dscp-exclude <text>",
  "desc": "Routing — Match based on dscp value criteria. Multiple values from 0 to 63 and ranges are supported."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> fragment <match-grag|match-non-frag>",
  "cmd": "set policy route <name> rule <n> fragment <match-grag|match-non-frag>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> fragment <match-grag|match-non-frag>",
  "cmd": "set policy route6 <name> rule <n> fragment <match-grag|match-non-frag>",
  "desc": "Routing — Set IP fragment match, where: * match-frag: Second and further fragments of fragmented packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> icmp <code | type>",
  "cmd": "set policy route <name> rule <n> icmp <code | type>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> icmpv6 <code | type>",
  "cmd": "set policy route6 <name> rule <n> icmpv6 <code | type>",
  "desc": "Routing — Match based on icmp|icmpv6 code and type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> icmp type-name <text>",
  "cmd": "set policy route <name> rule <n> icmp type-name <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> icmpv6 type-name <text>",
  "cmd": "set policy route6 <name> rule <n> icmpv6 type-name <text>",
  "desc": "Routing — Match based on icmp|icmpv6 type-name criteria. Use tab for information about what type-name criteria are supported."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set policy route <name> rule <n> ipsec <match-ipsec|match-none>",
  "cmd": "set policy route <name> rule <n> ipsec <match-ipsec|match-none>",
  "desc": "VPN · vpn"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set policy route6 <name> rule <n> ipsec <match-ipsec|match-none>",
  "cmd": "set policy route6 <name> rule <n> ipsec <match-ipsec|match-none>",
  "desc": "VPN — Set IPSec inbound match criteria, where: * match-ipsec: match inbound IPsec packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> limit burst <0-4294967295>",
  "cmd": "set policy route <name> rule <n> limit burst <0-4294967295>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> limit burst <0-4294967295>",
  "cmd": "set policy route6 <name> rule <n> limit burst <0-4294967295>",
  "desc": "Routing — Set maximum number of packets to allow in excess of rate."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> limit rate <text>",
  "cmd": "set policy route <name> rule <n> limit rate <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> limit rate <text>",
  "cmd": "set policy route6 <name> rule <n> limit rate <text>",
  "desc": "Routing — Set maximum average matching rate. Format for rate: integer/time_unit, where time_unit could be any one of second, minute, hour or day.For example 1/second implies rule to be matched at an average of once per second."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> protocol <text | 0-255 | tcp_udp | all >",
  "cmd": "set policy route <name> rule <n> protocol <text | 0-255 | tcp_udp | all >",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> protocol <text | 0-255 | tcp_udp | all >",
  "cmd": "set policy route6 <name> rule <n> protocol <text | 0-255 | tcp_udp | all >",
  "desc": "Routing — Match a protocol criteria. A protocol number or a name which is defined in: /etc/protocols."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> packet-length <text>",
  "cmd": "set policy route <name> rule <n> packet-length <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> packet-length <text>",
  "cmd": "set policy route6 <name> rule <n> packet-length <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> packet-length-exclude <text>",
  "cmd": "set policy route <name> rule <n> packet-length-exclude <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> packet-length-exclude <text>",
  "cmd": "set policy route6 <name> rule <n> packet-length-exclude <text>",
  "desc": "Routing — Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set policy route <name> rule <n> packet-type \\[broadcast | host | multicast | other\\]",
  "cmd": "set policy route <name> rule <n> packet-type \\[broadcast | host | multicast | other\\]",
  "desc": "Multicast · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set policy route6 <name> rule <n> packet-type \\[broadcast | host | multicast | other\\]",
  "cmd": "set policy route6 <name> rule <n> packet-type \\[broadcast | host | multicast | other\\]",
  "desc": "Multicast — Match based on packet type criteria."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> recent count <1-255>",
  "cmd": "set policy route <name> rule <n> recent count <1-255>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> recent count <1-255>",
  "cmd": "set policy route6 <name> rule <n> recent count <1-255>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> recent time <1-4294967295>",
  "cmd": "set policy route <name> rule <n> recent time <1-4294967295>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> recent time <1-4294967295>",
  "cmd": "set policy route6 <name> rule <n> recent time <1-4294967295>",
  "desc": "Routing — Set parameters for matching recently seen sources. This match could be used by setting count (source address seen more than <1-255> times) and/or time (source address seen in the last <0-4294967295> seconds)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> state <established | invalid | new | related>",
  "cmd": "set policy route <name> rule <n> state <established | invalid | new | related>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> state <established | invalid | new | related>",
  "cmd": "set policy route6 <name> rule <n> state <established | invalid | new | related>",
  "desc": "Routing — Set match criteria based on session state."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> tcp flags <text>",
  "cmd": "set policy route <name> rule <n> tcp flags <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> tcp flags <text>",
  "cmd": "set policy route6 <name> rule <n> tcp flags <text>",
  "desc": "Routing — Set match criteria based on tcp flags. Allowed values for TCP flags: SYN ACK FIN RST URG PSH ALL."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> time monthdays <text>",
  "cmd": "set policy route <name> rule <n> time monthdays <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> time monthdays <text>",
  "cmd": "set policy route6 <name> rule <n> time monthdays <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> time startdate <text>",
  "cmd": "set policy route <name> rule <n> time startdate <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> time startdate <text>",
  "cmd": "set policy route6 <name> rule <n> time startdate <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> time starttime <text>",
  "cmd": "set policy route <name> rule <n> time starttime <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> time starttime <text>",
  "cmd": "set policy route6 <name> rule <n> time starttime <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> time stopdate <text>",
  "cmd": "set policy route <name> rule <n> time stopdate <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> time stopdate <text>",
  "cmd": "set policy route6 <name> rule <n> time stopdate <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> time stoptime <text>",
  "cmd": "set policy route <name> rule <n> time stoptime <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> time stoptime <text>",
  "cmd": "set policy route6 <name> rule <n> time stoptime <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> time weekdays <text>",
  "cmd": "set policy route <name> rule <n> time weekdays <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> time weekdays <text>",
  "cmd": "set policy route6 <name> rule <n> time weekdays <text>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> time utc",
  "cmd": "set policy route <name> rule <n> time utc",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> time utc",
  "cmd": "set policy route6 <name> rule <n> time utc",
  "desc": "Routing — Time to match the defined rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route rule <n> ttl <eq | gt | lt> <0-255>",
  "cmd": "set policy route rule <n> ttl <eq | gt | lt> <0-255>",
  "desc": "Routing — Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 rule <n> hop-limit <eq | gt | lt> <0-255>",
  "cmd": "set policy route6 rule <n> hop-limit <eq | gt | lt> <0-255>",
  "desc": "Routing — Match hop-limit parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> action drop",
  "cmd": "set policy route <name> rule <n> action drop",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> action drop",
  "cmd": "set policy route6 <name> rule <n> action drop",
  "desc": "Routing — Set rule action to drop."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> set connection-mark <1-2147483647>",
  "cmd": "set policy route <name> rule <n> set connection-mark <1-2147483647>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> set connection-mark <1-2147483647>",
  "cmd": "set policy route6 <name> rule <n> set connection-mark <1-2147483647>",
  "desc": "Routing — Set a specific connection mark."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> set dscp <0-63>",
  "cmd": "set policy route <name> rule <n> set dscp <0-63>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> set dscp <0-63>",
  "cmd": "set policy route6 <name> rule <n> set dscp <0-63>",
  "desc": "Routing — Set packet modifications: Packet Differentiated Services Codepoint (DSCP)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> set mark <1-2147483647>",
  "cmd": "set policy route <name> rule <n> set mark <1-2147483647>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> set mark <1-2147483647>",
  "cmd": "set policy route6 <name> rule <n> set mark <1-2147483647>",
  "desc": "Routing — Set a specific packet mark."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> set table <main | 1-200>",
  "cmd": "set policy route <name> rule <n> set table <main | 1-200>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> set table <main | 1-200>",
  "cmd": "set policy route6 <name> rule <n> set table <main | 1-200>",
  "desc": "Routing — Set the routing table to forward packet with. :::{note} When using the set table or set vrf commands matching against the mark is not possible, because it gets overwritten with a table-specific mark that is 0x7FFFFFFF -…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> set tcp-mss <500-1460>",
  "cmd": "set policy route <name> rule <n> set tcp-mss <500-1460>",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> set tcp-mss <500-1460>",
  "cmd": "set policy route6 <name> rule <n> set tcp-mss <500-1460>",
  "desc": "Routing — Set packet modifications: Explicitly set TCP Maximum segment size value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> set vrf <default | text >",
  "cmd": "set policy route <name> rule <n> set vrf <default | text >",
  "desc": "Routing · policy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> set vrf <default | text >",
  "cmd": "set policy route6 <name> rule <n> set vrf <default | text >",
  "desc": "Routing — Set the VRF to forward packet with. :::{note} When using the set table or set vrf commands matching against the mark is not possible, because it gets overwritten with a table-specific mark that is 0x7FFFFFFF - the id of…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces l2tpv3 <interface> encapsulation <udp | ip>",
  "cmd": "set interfaces l2tpv3 <interface> encapsulation <udp | ip>",
  "desc": "Interfaces — **Configure the encapsulation type for the L2TPv3 tunnel.** Valid values are udp and ip."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces l2tpv3 <interface> source-address <address>",
  "cmd": "set interfaces l2tpv3 <interface> source-address <address>",
  "desc": "Interfaces — **Configure the L2TPv3 tunnel source IP address.** The specified address must be a local interface IP address and can be either IPv4 or IPv6."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces l2tpv3 <interface> remote <address>",
  "cmd": "set interfaces l2tpv3 <interface> remote <address>",
  "desc": "Interfaces — **Configure the L2TPv3 tunnel destination IP address.** The specified address must be a remote peer’s interface IP address and can be either IPv4 or IPv6."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces l2tpv3 <interface> session-id <id>",
  "cmd": "set interfaces l2tpv3 <interface> session-id <id>",
  "desc": "Interfaces — **Configure the local session ID within the L2TPv3 tunnel.** The session-id is a 32-bit value that identifies an incoming tunnel session on the local peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces l2tpv3 <interface> peer-session-id <id>",
  "cmd": "set interfaces l2tpv3 <interface> peer-session-id <id>",
  "desc": "Interfaces — **Configure the peer session ID within the L2TPv3 tunnel.** The peer-session-id is a 32-bit value that identifies an outgoing tunnel session from the local peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces l2tpv3 <interface> tunnel-id <id>",
  "cmd": "set interfaces l2tpv3 <interface> tunnel-id <id>",
  "desc": "Interfaces — **Configure the local identifier for the L2TPv3 tunnel.** The tunnel-id is a 32-bit value that identifies the L2TPv3 tunnel on the local peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces l2tpv3 <interface> peer-tunnel-id <id>",
  "cmd": "set interfaces l2tpv3 <interface> peer-tunnel-id <id>",
  "desc": "Interfaces — **Configure the peer identifier for the L2TPv3 tunnel.** The peer-tunnel-id is a 32-bit value that identifies the L2TPv3 tunnel on the remote peer and must correspond to the tunnel-id configured for that tunnel on that…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pseudo-ethernet <interface> source-interface <ethX>",
  "cmd": "set interfaces pseudo-ethernet <interface> source-interface <ethX>",
  "desc": "Interfaces — Assign a physical Ethernet interface to the specified pseudo-Ethernet interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vxlan <interface> vni <number>",
  "cmd": "set interfaces vxlan <interface> vni <number>",
  "desc": "BGP — **Configure a** VNI (VXLAN Network Identifier) **for the VXLAN interface.** Each VXLAN segment is identified by this 24-bit VNI, allowing up to 16 million segments to coexist within the same administrative domain."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vxlan <interface> port <port>",
  "cmd": "set interfaces vxlan <interface> port <port>",
  "desc": "BGP — Configure the UDP port of the remote VXLAN endpoint. :::{note} Although the IANA-assigned VXLAN port is **4789**, VyOS uses the Linux default UDP port **8472** for VXLAN interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vxlan <interface> source-address <address>",
  "cmd": "set interfaces vxlan <interface> source-address <address>",
  "desc": "BGP — Configure the source IP address for the VXLAN underlay. :::{warning} This setting is mandatory when deploying VXLAN via L2VPN/EVPN."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vxlan <interface> gpe",
  "cmd": "set interfaces vxlan <interface> gpe",
  "desc": "BGP — **Enable the** GPE (Generic Protocol Extension) **for the VXLAN interface.** To use this feature, you must configure the interface with the external parameter."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vxlan <interface> parameters external",
  "cmd": "set interfaces vxlan <interface> parameters external",
  "desc": "BGP — **Configure the VXLAN interface to use an external control plane, such as BGP L2VPN/EVPN, for remote endpoint discovery.** If not configured, the internal FDB (Forwarding Database) is used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vxlan <interface> parameters neighbor-suppress",
  "cmd": "set interfaces vxlan <interface> parameters neighbor-suppress",
  "desc": "BGP — **Enable ARP and ND suppression on the VXLAN interface.** This reduces ARP and ND message flooding across the VXLAN network."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vxlan <interface> parameters nolearning",
  "cmd": "set interfaces vxlan <interface> parameters nolearning",
  "desc": "BGP — Disable SLLA (Source Link-Layer Address) and IP address learning on the VXLAN interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vxlan <interface> parameters vni-filter",
  "cmd": "set interfaces vxlan <interface> parameters vni-filter",
  "desc": "BGP — **Enable** VNI (VXLAN Network Identifier) **filtering on the VXLAN interface.** When enabled, the interface only receives packets with VNIs configured in its VNI filtering table."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vxlan <interface> remote <address>",
  "cmd": "set interfaces vxlan <interface> remote <address>",
  "desc": "BGP — **Configure the IPv4 or IPv6 address of the remote VTEP.** Unlike multicast setups, this command allows you to directly configure the remote IPv4 or IPv6 address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vxlan <interface> source-interface <interface>",
  "cmd": "set interfaces vxlan <interface> source-interface <interface>",
  "desc": "BGP — **Configure the source interface for the VXLAN underlay.** All VXLAN traffic is sent and received through the specified interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vxlan <interface> group <address>",
  "cmd": "set interfaces vxlan <interface> group <address>",
  "desc": "BGP — **Configure the IPv4 or IPv6 multicast group address for the VXLAN interface.** VXLAN tunnels can be built using either multicast group or unicast IP addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vxlan <interface> vlan-to-vni <vlan> vni <vni>",
  "cmd": "set interfaces vxlan <interface> vlan-to-vni <vlan> vni <vni>",
  "desc": "BGP — **Map a VLAN ID to a VNI on the specified VXLAN interface.** The VXLAN interface can be added to a bridge."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces wwan <interface> apn <apn>",
  "cmd": "set interfaces wwan <interface> apn <apn>",
  "desc": "Interfaces — **Configure the** APN (Access Point Name) **for the WWAN connection.** Every WWAN connection requires an APN (Access Point Name) to connect to the cellular network."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces wwan <interface>",
  "cmd": "show interfaces wwan <interface>",
  "desc": "Interfaces — Show the operational status and traffic statistics for the specified WWAN interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces wwan <interface> summary",
  "cmd": "show interfaces wwan <interface> summary",
  "desc": "Interfaces — Show WWAN module hardware characteristics and connection information. :::{code-block} none vyos@vyos:~$ show interfaces wwan wwan0 summary -------------------------------- General | dbus path: /org/freedesktop/ModemMana…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces wwan <interface> capabilities",
  "cmd": "show interfaces wwan <interface> capabilities",
  "desc": "Interfaces — Show WWAN module radio capabilities. :::{code-block} none vyos@vyos:~$ show interfaces wwan wwan0 capabilities Max TX channel rate: '50000000' Max RX channel rate: '100000000' Data Service: 'simultaneous-cs-ps' SIM: 'su…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces wwan <interface> firmware",
  "cmd": "show interfaces wwan <interface> firmware",
  "desc": "Interfaces — Show WWAN module firmware information. :::{code-block} none vyos@vyos:~$ show interfaces wwan wwan0 firmware Model: MC7710 Boot version: SWI9200X_03.05.29.03bt r6485 CNSHZ-ED-XP0031 2014/12/02 17:33:08 AMSS version: SWI…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces wwan <interface> imei",
  "cmd": "show interfaces wwan <interface> imei",
  "desc": "Interfaces — Show WWAN module IMEI. :::{code-block} none vyos@vyos:~$ show interfaces wwan wwan0 imei ESN: '0' IMEI: '358xxxxxxxxxxxx' MEID: 'unknown' :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces wwan <interface> imsi",
  "cmd": "show interfaces wwan <interface> imsi",
  "desc": "Interfaces — Show the IMSI of the associated SIM card. :::{code-block} none vyos@vyos:~$ show interfaces wwan wwan0 imsi IMSI: '262xxxxxxxxxxxx' :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces wwan <interface> model",
  "cmd": "show interfaces wwan <interface> model",
  "desc": "Interfaces — Show WWAN module model. :::{code-block} none vyos@vyos:~$ show interfaces wwan wwan0 model Model: 'MC7710' :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces wwan <interface> msisdn",
  "cmd": "show interfaces wwan <interface> msisdn",
  "desc": "Interfaces — Show the MSISDN of the associated SIM card. :::{code-block} none vyos@vyos:~$ show interfaces wwan wwan0 msisdn MSISDN: '4917xxxxxxxx' :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces wwan <interface> revision",
  "cmd": "show interfaces wwan <interface> revision",
  "desc": "Interfaces — Show WWAN module hardware revision. :::{code-block} none vyos@vyos:~$ show interfaces wwan wwan0 revision Revision: 'SWI9200X_03.05.29.03ap r6485 CNSHZ-ED-XP0031 2014/12/02 17:53:15' :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces wwan <interface> signal",
  "cmd": "show interfaces wwan <interface> signal",
  "desc": "Interfaces — Show signal information for the cellular connection. :::{code-block} none vyos@vyos:~$ show interfaces wwan wwan0 signal LTE: RSSI: '-74 dBm' RSRQ: '-7 dB' RSRP: '-100 dBm' SNR: '13.0 dB' Radio Interface: 'lte' Active B…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces wwan <interface> sim",
  "cmd": "show interfaces wwan <interface> sim",
  "desc": "Interfaces — Show WWAN module SIM card information. :::{code-block} none vyos@vyos:~$ show interfaces wwan wwan0 sim Provisioning applications: Primary GW: slot '1', application '1' Primary 1X: session doesn't exist Secondary GW: se…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> switchdev",
  "cmd": "set interfaces ethernet <interface> switchdev",
  "desc": "Interfaces — **Enable** switchdev **mode for the interface.** In switchdev mode, the interface offloads traffic switching between ports to the hardware, bypassing the host CPU."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> duplex <auto | full | half>",
  "cmd": "set interfaces ethernet <interface> duplex <auto | full | half>",
  "desc": "Interfaces — **Configure duplex mode for the interface.** The following duplex modes are available: * auto: The interface negotiates the duplex mode with the connected device."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> speed <auto | 10 | 100 | 1000 | 2500 | 5000 | 10000 |…",
  "cmd": "set interfaces ethernet <interface> speed <auto | 10 | 100 | 1000 | 2500 | 5000 | 10000 | 25000 | 40000 | 50000 | 100000>",
  "desc": "Interfaces — **Configure the interface's speed, in Mbit/s.** The following options are available: * auto: The interface negotiates the speed with the connected device."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> ring-buffer rx <value>",
  "cmd": "set interfaces ethernet <interface> ring-buffer rx <value>",
  "desc": "Interfaces — **Configure the receive (RX) ring buffer size for the interface.** The RX ring buffer size defines the number of incoming packets the interface can queue in hardware before the CPU processes them."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> ring-buffer tx <value>",
  "cmd": "set interfaces ethernet <interface> ring-buffer tx <value>",
  "desc": "Interfaces — **Configure the transmit (TX) ring buffer size.** The TX ring buffer size defines the number of outgoing packets the interface can queue in hardware before they are transmitted onto the network."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing adaptive-rx",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing adaptive-rx",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing adaptive-tx",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing adaptive-tx",
  "desc": "Interfaces — Enable adaptive interrupt coalescing. The NIC automatically tunes RX/TX interrupt pacing based on traffic patterns to reduce CPU utilization during high throughput while preserving latency at low packet rates."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing rx-usecs <0-16384>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing rx-usecs <0-16384>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing tx-usecs <0-16384>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing tx-usecs <0-16384>",
  "desc": "Interfaces — Set the delay in microseconds before generating an RX/TX interrupt after receiving or transmitting a packet."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing rx-frames <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing rx-frames <number>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing tx-frames <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing tx-frames <number>",
  "desc": "Interfaces — Generate an RX/TX interrupt only after the specified number of packets have been received or transmitted."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing rx-usecs-irq <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing rx-usecs-irq <number>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing rx-frames-irq <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing rx-frames-irq <number>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing tx-usecs-irq <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing tx-usecs-irq <number>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing tx-frames-irq <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing tx-frames-irq <number>",
  "desc": "Interfaces — Control interrupt coalescing parameters while the driver is already servicing an interrupt (IRQ context)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing pkt-rate-low <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing pkt-rate-low <number>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing pkt-rate-high <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing pkt-rate-high <number>",
  "desc": "Interfaces — Define packet-rate thresholds (packets per second) used by adaptive coalescing to switch between low-rate and high-rate interrupt coalescing profiles."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing rx-usecs-low <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing rx-usecs-low <number>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing rx-frame-low <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing rx-frame-low <number>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing tx-usecs-low <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing tx-usecs-low <number>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing tx-frame-low <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing tx-frame-low <number>",
  "desc": "Interfaces — Interrupt coalescing parameters applied when the packet rate is below pkt-rate-low."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing rx-usecs-high <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing rx-usecs-high <number>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing rx-frame-high <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing rx-frame-high <number>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing tx-usecs-high <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing tx-usecs-high <number>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing tx-frame-high <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing tx-frame-high <number>",
  "desc": "Interfaces — Interrupt coalescing parameters applied when the packet rate exceeds pkt-rate-high."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing stats-block-usecs <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing stats-block-usecs <number>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing sample-interval <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing sample-interval <number>",
  "desc": "Interfaces — Control how frequently coalescing statistics are updated and how often the NIC samples traffic rates for adaptive coalescing decisions."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing cqe-mode-rx",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing cqe-mode-rx",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing cqe-mode-tx",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing cqe-mode-tx",
  "desc": "Interfaces — Enable RX/TX Completion Queue Entry (CQE) mode, if supported by the driver. CQE mode can improve performance on high-speed NICs by optimizing completion handling."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing tx-aggr-max-bytes <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing tx-aggr-max-bytes <number>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing tx-aggr-max-frames <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing tx-aggr-max-frames <number>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> interrupt-coalescing tx-aggr-time-usecs <number>",
  "cmd": "set interfaces ethernet <interface> interrupt-coalescing tx-aggr-time-usecs <number>",
  "desc": "Interfaces — Control transmit packet aggregation. Packets may be buffered and sent together until one of the configured limits (bytes, frames, or time) is reached, reducing interrupt and DMA overhead."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> offload <lro | tso | gso | gro | rps | sg>",
  "cmd": "set interfaces ethernet <interface> offload <lro | tso | gso | gro | rps | sg>",
  "desc": "Interfaces — **Configure the offloading features for the interface.** The interface offloading features define whether specific packet-processing tasks are performed by hardware (the NIC) or by software (the kernel)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show interfaces ethernet",
  "cmd": "show interfaces ethernet",
  "desc": "Troubleshooting — Show brief interface information. :::{code-block} none vyos@vyos:~$ show interfaces ethernet Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down Interface IP Address S/L Description --------- ---------- --- ---…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces ethernet <interface>",
  "cmd": "show interfaces ethernet <interface>",
  "desc": "Interfaces — Show detailed interface information. :::{code-block} none vyos@vyos:~$ show interfaces ethernet eth0 eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether 00:50:44…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces ethernet <interface> physical",
  "cmd": "show interfaces ethernet <interface> physical",
  "desc": "Interfaces — Show interface hardware-level and driver details. :::{code-block} none vyos@vyos:~$ show interfaces ethernet eth0 physical Settings for eth0: Supported ports: [ TP ] Supported link modes: 1000baseT/Full 10000baseT/Full…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces ethernet <interface> physical offload",
  "cmd": "show interfaces ethernet <interface> physical offload",
  "desc": "Interfaces — Show the status of the interface offloading features. :::{code-block} none vyos@vyos:~$ show interfaces ethernet eth0 physical offload rx-checksumming on tx-checksumming on tx-checksum-ip-generic on scatter-gather off t…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces ethernet <interface> transceiver",
  "cmd": "show interfaces ethernet <interface> transceiver",
  "desc": "Interfaces — Show information about the transceiver module plugged into the interface (e.g., SFP+, QSFP)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show interfaces dummy",
  "cmd": "show interfaces dummy",
  "desc": "Troubleshooting — Show brief interface information. :::{code-block} none vyos@vyos:~$ show interfaces dummy Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down Interface IP Address S/L Description --------- ---------- --- ------…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces dummy <interface>",
  "cmd": "show interfaces dummy <interface>",
  "desc": "Interfaces — Show detailed interface information. :::{code-block} none vyos@vyos:~$ show interfaces dummy dum0 dum0: <BROADCAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN group default qlen 1000 link/ether 26:7c:8e:bc:f…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces macsec <interface> security cipher <gcm-aes-128|gcm-aes-256>",
  "cmd": "set interfaces macsec <interface> security cipher <gcm-aes-128|gcm-aes-256>",
  "desc": "Interfaces — **Configure the cipher suite for the MACsec interface.** This configuration parameter is mandatory."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces macsec <interface> security encrypt",
  "cmd": "set interfaces macsec <interface> security encrypt",
  "desc": "Interfaces — **Enable encryption on the MACsec interface.** By default, MACsec interfaces only provide authentication; encryption is optional."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces macsec <interface> source-interface <physical-source>",
  "cmd": "set interfaces macsec <interface> source-interface <physical-source>",
  "desc": "Interfaces — **Configure a physical source interface for the MACsec interface.** Traffic transmitted through this interface is authenticated and, if configured, encrypted."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces macsec <interface> security static key <key>",
  "cmd": "set interfaces macsec <interface> security static key <key>",
  "desc": "Interfaces — **Configure the Transmit (TX) SAK for the MACsec interface.** The key must be a 16-byte (GCM-AES-128) or 64-byte (GCM-AES-256) hexadecimal string."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces macsec <interface> security static peer <peer> mac <mac address>",
  "cmd": "set interfaces macsec <interface> security static peer <peer> mac <mac address>",
  "desc": "Interfaces — **Configure the MAC address associated with the MACsec peer.**"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces macsec <interface> security static peer <peer> key <key>",
  "cmd": "set interfaces macsec <interface> security static peer <peer> key <key>",
  "desc": "Interfaces — **Configure the RX SAK for traffic from the MACsec peer.** The key must be a 16-byte (GCM-AES-128) or 64-byte (GCM-AES-256) hexadecimal string."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces macsec <interface> security static peer <peer> disable",
  "cmd": "set interfaces macsec <interface> security static peer <peer> disable",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces macsec <interface> security mka cak <key>",
  "cmd": "set interfaces macsec <interface> security mka cak <key>",
  "desc": "Interfaces — **Configure the** CAK (MACsec Connectivity Association Key) **for the MACsec interface.** The CAK (MACsec Connectivity Association Key) and its CKN (MACsec Connectivity Association Key Name) form the pre-shared master k…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces macsec <interface> security mka ckn <key>",
  "cmd": "set interfaces macsec <interface> security mka ckn <key>",
  "desc": "Interfaces — Configure the CKN (MACsec Connectivity Association Key Name) for the MACsec interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces macsec <interface> security mka priority <priority>",
  "cmd": "set interfaces macsec <interface> security mka priority <priority>",
  "desc": "Interfaces — Configure the MKA key server priority for the MACsec interface. The peer with the lowest priority is elected as the key server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces macsec <interface> security replay-window <window>",
  "cmd": "set interfaces macsec <interface> security replay-window <window>",
  "desc": "Interfaces — The replay protection window defines how many out-of-order frames can be received before they are dropped as a potential replay attack."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "run generate macsec mka cak <gcm-aes-128|gcm-aes-256>",
  "cmd": "run generate macsec mka cak <gcm-aes-128|gcm-aes-256>",
  "desc": "Interfaces — Generate a 128-bit (GCM-AES-128) or 256-bit (GCM-AES-256) MKA (MACsec Key Agreement protocol) CAK (MACsec Connectivity Association Key)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "run generate macsec mka ckn",
  "cmd": "run generate macsec mka ckn",
  "desc": "Interfaces — Generate an MKA (MACsec Key Agreement protocol) CAK (MACsec Connectivity Association Key)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show interfaces macsec",
  "cmd": "show interfaces macsec",
  "desc": "Troubleshooting — Show all MACsec interfaces. :::{code-block} none vyos@vyos:~$ show interfaces macsec 17: macsec1: protect on validate strict sc off sa off encrypt on send_sci on end_station off scb off replay off cipher suite: GCM-AES-…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces macsec <interface>",
  "cmd": "show interfaces macsec <interface>",
  "desc": "Interfaces — Show information for a specific MACsec interface. :::{code-block} none vyos@vyos:~$ show interfaces macsec macsec1 17: macsec1: protect on validate strict sc off sa off encrypt on send_sci on end_station off scb off rep…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set system wireless country-code <cc>",
  "cmd": "set system wireless country-code <cc>",
  "desc": "Wireless — Country code (ISO/IEC 3166-1). Used to set regulatory domain."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> channel <number>",
  "cmd": "set interfaces wireless <interface> channel <number>",
  "desc": "Wireless — Configure the IEEE 802.11 wireless radio channel for the interface. Channel allocation depends on the frequency band: * **2.4 GHz** (802.11b/g/n/ax): Channels range from 1 to 14."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> disable-broadcast-ssid",
  "cmd": "set interfaces wireless <interface> disable-broadcast-ssid",
  "desc": "Wireless — Send empty SSID in beacons and ignore probe request frames that do not specify full SSID, i.e., require stations to know the SSID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> expunge-failing-stations",
  "cmd": "set interfaces wireless <interface> expunge-failing-stations",
  "desc": "Wireless — Disassociate stations based on excessive transmission failures or other indications of connection loss."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> isolate-stations",
  "cmd": "set interfaces wireless <interface> isolate-stations",
  "desc": "Wireless — Client isolation can be used to prevent low-level bridging of frames between associated stations in the BSS."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> max-stations <count>",
  "cmd": "set interfaces wireless <interface> max-stations <count>",
  "desc": "Wireless — Maximum number of stations allowed in station table. New stations will be rejected after the station table is full."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> mgmt-frame-protection",
  "cmd": "set interfaces wireless <interface> mgmt-frame-protection",
  "desc": "Wireless — Management Frame Protection (MFP) according to IEEE 802.11w :::{note} MFP (Management Frame Protection) is required for WPA3."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> enable-bf-protection",
  "cmd": "set interfaces wireless <interface> enable-bf-protection",
  "desc": "Wireless — Beacon Protection: management frame protection for Beacon frames. :::{note} This option requires MFP (Management Frame Protection) to be enabled."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> mode <a | b | g | n | ac | ax>",
  "cmd": "set interfaces wireless <interface> mode <a | b | g | n | ac | ax>",
  "desc": "Wireless — Operation mode of wireless radio. * a - 802.11a - 54 Mbits/sec * b - 802.11b - 11 Mbits/sec * g - 802.11g - 54 Mbits/sec (default) * n - 802.11n - 600 Mbits/sec * ac - 802.11ac - 1300 Mbits/sec * ax - 802.11ax - exceeds…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> physical-device <device>",
  "cmd": "set interfaces wireless <interface> physical-device <device>",
  "desc": "Wireless — Wireless hardware device used as underlay radio. This defaults to phy0."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> reduce-transmit-power <number>",
  "cmd": "set interfaces wireless <interface> reduce-transmit-power <number>",
  "desc": "Wireless — Adds the Power Constraint information element to Beacon and Probe Response frames."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> ssid <ssid>",
  "cmd": "set interfaces wireless <interface> ssid <ssid>",
  "desc": "Wireless — SSID to be used in IEEE 802.11 management frames"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces wireless <interface> type <access-point | station | monitor>",
  "cmd": "set interfaces wireless <interface> type <access-point | station | monitor>",
  "desc": "VLAN — Wireless device type for this interface * access-point: Forwards packets between other nodes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities require-ht",
  "cmd": "set interfaces wireless <interface> capabilities require-ht",
  "desc": "Wireless · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities require-vht",
  "cmd": "set interfaces wireless <interface> capabilities require-vht",
  "desc": "Wireless · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities require-he",
  "cmd": "set interfaces wireless <interface> capabilities require-he",
  "desc": "Wireless · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities ht 40mhz-incapable",
  "cmd": "set interfaces wireless <interface> capabilities ht 40mhz-incapable",
  "desc": "Wireless — Device is incapable of 40 MHz, do not advertise. This sets [40-INTOLERANT]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities ht auto-powersave",
  "cmd": "set interfaces wireless <interface> capabilities ht auto-powersave",
  "desc": "Wireless — WMM-PS Unscheduled Automatic Power Save Delivery [U-APSD]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities ht channel-set-width <ht20 | ht40+ | ht4…",
  "cmd": "set interfaces wireless <interface> capabilities ht channel-set-width <ht20 | ht40+ | ht40->",
  "desc": "Wireless — Supported channel width set. * ht20 - 20 MHz channel width * ht40- - Both 20 MHz and 40 MHz with secondary channel below the primary channel * ht40+ - Both 20 MHz and 40 MHz with secondary channel above the primary chan…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities ht delayed-block-ack",
  "cmd": "set interfaces wireless <interface> capabilities ht delayed-block-ack",
  "desc": "Wireless — Enable HT-delayed Block Ack [DELAYED-BA]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities ht dsss-cck-40",
  "cmd": "set interfaces wireless <interface> capabilities ht dsss-cck-40",
  "desc": "Wireless — DSSS/CCK Mode in 40 MHz, this sets [DSSS_CCK-40]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities ht greenfield",
  "cmd": "set interfaces wireless <interface> capabilities ht greenfield",
  "desc": "Wireless — This enables the greenfield option which sets the [GF] option"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities ht ldpc",
  "cmd": "set interfaces wireless <interface> capabilities ht ldpc",
  "desc": "Wireless — Enable LDPC coding capability"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities ht lsig-protection",
  "cmd": "set interfaces wireless <interface> capabilities ht lsig-protection",
  "desc": "Wireless — Enable L-SIG TXOP protection capability"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities ht max-amsdu <3839 | 7935>",
  "cmd": "set interfaces wireless <interface> capabilities ht max-amsdu <3839 | 7935>",
  "desc": "Wireless — Maximum A-MSDU length 3839 (default) or 7935 octets"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities ht short-gi <20 | 40>",
  "cmd": "set interfaces wireless <interface> capabilities ht short-gi <20 | 40>",
  "desc": "Wireless — Short GI capabilities for 20 and 40 MHz"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities ht smps <static | dynamic>",
  "cmd": "set interfaces wireless <interface> capabilities ht smps <static | dynamic>",
  "desc": "Wireless — Spatial Multiplexing Power Save (SMPS) settings"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities ht stbc rx <num>",
  "cmd": "set interfaces wireless <interface> capabilities ht stbc rx <num>",
  "desc": "Wireless — Enable receiving PPDU using STBC (Space Time Block Coding)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities ht stbc tx",
  "cmd": "set interfaces wireless <interface> capabilities ht stbc tx",
  "desc": "Wireless — Enable sending PPDU using STBC (Space Time Block Coding)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht antenna-count <count>",
  "cmd": "set interfaces wireless <interface> capabilities vht antenna-count <count>",
  "desc": "Wireless · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht antenna-pattern-fixed",
  "cmd": "set interfaces wireless <interface> capabilities vht antenna-pattern-fixed",
  "desc": "Wireless — Set if antenna pattern does not change during the lifetime of an association"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht beamform <single-user-beamformer | s…",
  "cmd": "set interfaces wireless <interface> capabilities vht beamform <single-user-beamformer | single-user-beamformee | multi-user-beamformer | multi-user-beamformee>",
  "desc": "Wireless — Beamforming capabilities: * single-user-beamformer - Support for operation as single user beamformer * single-user-beamformee - Support for operation as single user beamformee * multi-user-beamformer - Support for opera…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht center-channel-freq <freq-1 | freq-2…",
  "cmd": "set interfaces wireless <interface> capabilities vht center-channel-freq <freq-1 | freq-2> <number>",
  "desc": "Wireless — VHT operating channel center frequency - center freq 1 (for use with 80, 80+80 and 160 modes) VHT operating channel center frequency - center freq 2 (for use with the 80+80 mode) \\<number\\> must be from 34 - 173."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht channel-set-width <0 | 1 | 2 | 3>",
  "cmd": "set interfaces wireless <interface> capabilities vht channel-set-width <0 | 1 | 2 | 3>",
  "desc": "Wireless — * 0 - 20 or 40 MHz channel width (default) * 1 - 80 MHz channel width * 2 - 160 MHz channel width * 3 - 80+80 MHz channel width"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht ldpc",
  "cmd": "set interfaces wireless <interface> capabilities vht ldpc",
  "desc": "Wireless — Enable LDPC (Low Density Parity Check) coding capability"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht link-adaptation",
  "cmd": "set interfaces wireless <interface> capabilities vht link-adaptation",
  "desc": "Wireless — VHT link adaptation capabilities"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht max-mpdu <value>",
  "cmd": "set interfaces wireless <interface> capabilities vht max-mpdu <value>",
  "desc": "Wireless — Increase Maximum MPDU length to 7991 or 11454 octets (default 3895 octets)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht max-mpdu-exp <value>",
  "cmd": "set interfaces wireless <interface> capabilities vht max-mpdu-exp <value>",
  "desc": "Wireless — Set the maximum length of A-MPDU pre-EOF padding that the station can receive"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht short-gi <80 | 160>",
  "cmd": "set interfaces wireless <interface> capabilities vht short-gi <80 | 160>",
  "desc": "Wireless — Short GI capabilities"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht stbc rx <num>",
  "cmd": "set interfaces wireless <interface> capabilities vht stbc rx <num>",
  "desc": "Wireless — Enable receiving PPDU using STBC (Space Time Block Coding)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht stbc tx",
  "cmd": "set interfaces wireless <interface> capabilities vht stbc tx",
  "desc": "Wireless — Enable sending PPDU using STBC (Space Time Block Coding)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht tx-powersave",
  "cmd": "set interfaces wireless <interface> capabilities vht tx-powersave",
  "desc": "Wireless — Enable VHT TXOP Power Save Mode"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht vht-cf",
  "cmd": "set interfaces wireless <interface> capabilities vht vht-cf",
  "desc": "Wireless — Station supports receiving VHT variant HT Control field"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities he antenna-pattern-fixed",
  "cmd": "set interfaces wireless <interface> capabilities he antenna-pattern-fixed",
  "desc": "Wireless — Tell the AP that antenna positions are fixed and will not change during the lifetime of an association."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities he beamform <single-user-beamformer | si…",
  "cmd": "set interfaces wireless <interface> capabilities he beamform <single-user-beamformer | single-user-beamformee | multi-user-beamformer>",
  "desc": "Wireless — Beamforming capabilities: * single-user-beamformer - Support for operation as single user beamformer * single-user-beamformee - Support for operation as single user beamformee * multi-user-beamformer - Support for opera…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities he bss-color <number>",
  "cmd": "set interfaces wireless <interface> capabilities he bss-color <number>",
  "desc": "Wireless — BSS coloring helps to prevent channel jamming when multiple APs use the same channels."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities he center-channel-freq <freq-1 | freq-2>…",
  "cmd": "set interfaces wireless <interface> capabilities he center-channel-freq <freq-1 | freq-2> <number>",
  "desc": "Wireless — HE operating channel center frequency - center freq 1 (for use with 80, 80+80 and 160 modes) HE operating channel center frequency - center freq 2 (for use with the 80+80 mode) \\<number\\> must be within 1..233."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities he channel-set-width <number>",
  "cmd": "set interfaces wireless <interface> capabilities he channel-set-width <number>",
  "desc": "Wireless — \\<number\\> must be one of: * 81 - 20 MHz channel width (2.4GHz) * 83 - 40 MHz channel width, secondary 20MHz channel above primary channel (2.4GHz) * 84 - 40 MHz channel width, secondary 20MHz channel below primary chan…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities he coding-scheme <number>",
  "cmd": "set interfaces wireless <interface> capabilities he coding-scheme <number>",
  "desc": "Wireless — This setting configures Spatial Stream and Modulation Coding Scheme settings for HE mode (HE-MCS)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "show interfaces wireless info",
  "cmd": "show interfaces wireless info",
  "desc": "Wireless · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "show interfaces wireless detail",
  "cmd": "show interfaces wireless detail",
  "desc": "Wireless · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "show interfaces wireless <wlanX>",
  "cmd": "show interfaces wireless <wlanX>",
  "desc": "Wireless · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "show interfaces wireless <wlanX> brief",
  "cmd": "show interfaces wireless <wlanX> brief",
  "desc": "Wireless · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "show interfaces wireless <wlanX> queue",
  "cmd": "show interfaces wireless <wlanX> queue",
  "desc": "Wireless · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "show interfaces wireless <wlanX> scan",
  "cmd": "show interfaces wireless <wlanX> scan",
  "desc": "Wireless · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces sstpc <interface> no-default-route",
  "cmd": "set interfaces sstpc <interface> no-default-route",
  "desc": "Interfaces — Request an IP address from the SSTP server without installing a default route. Example: :::{code-block} none set interfaces sstpc sstpc0 no-default-route ::: :::{note} Introduced in VyOS 1.4, this command inverts the lo…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces sstpc <interface> default-route-distance <distance>",
  "cmd": "set interfaces sstpc <interface> default-route-distance <distance>",
  "desc": "Interfaces — Configure the distance for the default gateway provided by the SSTP server. Example: :::{code-block} none set interfaces sstpc sstpc0 default-route-distance 220 :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces sstpc <interface> no-peer-dns",
  "cmd": "set interfaces sstpc <interface> no-peer-dns",
  "desc": "Interfaces — Disable the installation of advertised DNS nameservers on the local system."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces sstpc <interface> server <address>",
  "cmd": "set interfaces sstpc <interface> server <address>",
  "desc": "Interfaces — **Configure the remote SSTP server address for the client connection.** The address can be either an IP address or a FQDN (Fully Qualified Domain Name)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces sstpc <interface> ip adjust-mss <mss | clamp-mss-to-pmtu>",
  "cmd": "set interfaces sstpc <interface> ip adjust-mss <mss | clamp-mss-to-pmtu>",
  "desc": "Interfaces — **Configure the** MSS (Maximum Segment Size) **advertised in outgoing TCP SYN packets on the specified interface.** By clamping the MSS value in TCP SYN packets, you instruct the remote side not to send packets larger t…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces sstpc <interface> ip disable-forwarding",
  "cmd": "set interfaces sstpc <interface> ip disable-forwarding",
  "desc": "Interfaces — **Configure the interface for host or router behavior.** If configured, the interface switches to host mode, and IPv4 forwarding is disabled on it."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces sstpc <interface> ip source-validation <strict | loose | disable>",
  "cmd": "set interfaces sstpc <interface> ip source-validation <strict | loose | disable>",
  "desc": "Interfaces — **Configure source IP address validation using** RPF (Reverse Path Forwarding) **on this interface, as specified in** 3704."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces sstpc <interface>",
  "cmd": "show interfaces sstpc <interface>",
  "desc": "Interfaces — Show detailed information about the specified interface. :::{code-block} none vyos@vyos:~$ show interfaces sstpc sstpc10 sstpc10: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN group d…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "disconnect interface <interface>",
  "cmd": "disconnect interface <interface>",
  "desc": "Interfaces — Disconnect the specified interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "connect interface <interface>",
  "cmd": "connect interface <interface>",
  "desc": "Interfaces — Initiate a session on the specified interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces pppoe <interface> access-concentrator <name>",
  "cmd": "set interfaces pppoe <interface> access-concentrator <name>",
  "desc": "VLAN — **Configure the name of the target access concentrator for the PPPoE session.** During the PPPoE discovery process, the client sends a PPPoE initiation packet."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> authentication username <username>",
  "cmd": "set interfaces pppoe <interface> authentication username <username>",
  "desc": "Interfaces — **Configure the username for PPPoE session authentication.** Although authentication is optional in the interface configuration, most ISPs require it to establish a connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> authentication password <password>",
  "cmd": "set interfaces pppoe <interface> authentication password <password>",
  "desc": "Interfaces — **Configure the password for PPPoE session authentication.** Although authentication is optional in the interface configuration, most ISPs require it to establish a connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> connect-on-demand",
  "cmd": "set interfaces pppoe <interface> connect-on-demand",
  "desc": "Interfaces — **Enable dial-on-demand on the PPPoE interface.** When enabled, the system establishes a PPPoE connection only when traffic passes through the interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> no-default-route",
  "cmd": "set interfaces pppoe <interface> no-default-route",
  "desc": "Interfaces — Request an IP address from the PPPoE server without installing a default route. Example: :::{code-block} none set interfaces pppoe pppoe0 no-default-route ::: :::{note} Introduced in VyOS 1.4, this command inverts the l…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> default-route-distance <distance>",
  "cmd": "set interfaces pppoe <interface> default-route-distance <distance>",
  "desc": "Interfaces — Configure the distance for the default gateway provided by the PPPoE server. Example: :::{code-block} none set interfaces pppoe pppoe0 default-route-distance 220 :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> mru <mru>",
  "cmd": "set interfaces pppoe <interface> mru <mru>",
  "desc": "Interfaces — **Configure the** MRU (Maximum Receive Unit) **for the PPPoE interface.** This setting instructs the pppd daemon to restrict the remote peer from sending packets larger than the configured MRU."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> idle-timeout <time>",
  "cmd": "set interfaces pppoe <interface> idle-timeout <time>",
  "desc": "Interfaces — **Configure the idle timeout for on-demand PPPoE sessions.** This setting defines how long the connection remains active without any traffic before being disconnected."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> holdoff <time>",
  "cmd": "set interfaces pppoe <interface> holdoff <time>",
  "desc": "Interfaces — **Configure the redial delay for persistent PPPoE sessions.** If a persistent session (with connect-on-demand disabled) is terminated by the remote peer or drops unexpectedly, the router waits the specified interval bef…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> local-address <address>",
  "cmd": "set interfaces pppoe <interface> local-address <address>",
  "desc": "Interfaces — **Configure the local endpoint IP address for PPPoE sessions.** By default, this IP address is negotiated."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> no-peer-dns",
  "cmd": "set interfaces pppoe <interface> no-peer-dns",
  "desc": "Interfaces — Disable the installation of advertised DNS nameservers on the local system."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> remote-address <address>",
  "cmd": "set interfaces pppoe <interface> remote-address <address>",
  "desc": "Interfaces — **Configure the remote endpoint IP address for PPPoE sessions.** By default, this IP address is negotiated."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> service-name <name>",
  "cmd": "set interfaces pppoe <interface> service-name <name>",
  "desc": "Interfaces — **Configure the service name of the target access concentrator for the PPPoE session.** By default, the PPPoE interface connects to any available access concentrator."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> source-interface <source-interface>",
  "cmd": "set interfaces pppoe <interface> source-interface <source-interface>",
  "desc": "Interfaces — **Configure the underlying interface for the PPPoE connection.** Each PPPoE connection is established over an underlying interface, which can be an Ethernet interface, a VIF, or a bonding interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> ip adjust-mss <mss | clamp-mss-to-pmtu>",
  "cmd": "set interfaces pppoe <interface> ip adjust-mss <mss | clamp-mss-to-pmtu>",
  "desc": "Interfaces — **Configure the** MSS (Maximum Segment Size) **advertised in outgoing TCP SYN packets on the specified interface.** By clamping the MSS value in TCP SYN packets, you instruct the remote side not to send packets larger t…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> ip disable-forwarding",
  "cmd": "set interfaces pppoe <interface> ip disable-forwarding",
  "desc": "Interfaces — **Configure the interface for host or router behavior.** If configured, the interface switches to host mode, and IPv4 forwarding is disabled on it."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> ip source-validation <strict | loose | disable>",
  "cmd": "set interfaces pppoe <interface> ip source-validation <strict | loose | disable>",
  "desc": "Interfaces — **Configure source IP address validation using** RPF (Reverse Path Forwarding) **on this interface, as specified in** 3704."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> ipv6 address autoconf",
  "cmd": "set interfaces pppoe <interface> ipv6 address autoconf",
  "desc": "Interfaces — Enable IPv6 address assignment via SLAAC (Stateless Address Auto-Configuration) on this interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> ipv6 adjust-mss <mss | clamp-mss-to-pmtu>",
  "cmd": "set interfaces pppoe <interface> ipv6 adjust-mss <mss | clamp-mss-to-pmtu>",
  "desc": "Interfaces — **Configure the** MSS (Maximum Segment Size) **advertised in outgoing TCP SYN packets on the specified interface.** By clamping the MSS value in TCP SYN packets, you instruct the remote side not to send packets larger t…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces pppoe <interface> ipv6 disable-forwarding",
  "cmd": "set interfaces pppoe <interface> ipv6 disable-forwarding",
  "desc": "Interfaces — **Configure the interface for host or router behavior.** If configured, the interface switches to host mode, and IPv6 forwarding is disabled on it."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces pppoe <interface>",
  "cmd": "show interfaces pppoe <interface>",
  "desc": "Interfaces — Show detailed information about a specific PPPoE interface. :::{code-block} none vyos@vyos:~$ show interfaces pppoe pppoe0 pppoe0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc pfifo_fast state UNKNOWN group…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces pppoe <interface> queue",
  "cmd": "show interfaces pppoe <interface> queue",
  "desc": "Interfaces — Show queue information for a specific PPPoE interface. :::{code-block} none vyos@vyos:~$ show interfaces pppoe pppoe0 queue qdisc pfifo_fast 0: root refcnt 2 bands 3 priomap 1 2 2 2 1 2 0 0 1 1 1 1 1 1 1 1 Sent 53462535…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "generate pki wireguard key-pair",
  "cmd": "generate pki wireguard key-pair",
  "desc": "VPN — Generate a keypair: a public and a private key. :::{note} This command only outputs the keys to your console."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "generate pki wireguard key-pair install interface <interface>",
  "cmd": "generate pki wireguard key-pair install interface <interface>",
  "desc": "VPN — Generate a keypair and output the private key assignment command for the specified interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show interfaces wireguard <interface> public-key",
  "cmd": "show interfaces wireguard <interface> public-key",
  "desc": "VPN — Show the public key assigned to the interface. :::{code-block} none vyos@vyos:~$ show interfaces wireguard wg01 public-key EKY0dxRrSD98QHjfHOK13mZ5PJ7hnddRZt5woB3szyw= :::"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "generate pki wireguard preshared-key",
  "cmd": "generate pki wireguard preshared-key",
  "desc": "VPN — Generate a pre-shared key. The pre-shared key is optional."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "generate pki wireguard preshared-key install interface <interface> peer <peer>",
  "cmd": "generate pki wireguard preshared-key install interface <interface> peer <peer>",
  "desc": "VPN — Generate a pre-shared key and output the key assignment command for the specified peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces wireguard <interface> private-key <private-key>",
  "cmd": "set interfaces wireguard <interface> private-key <private-key>",
  "desc": "VPN — Assign a private key to the specified WireGuard interface. Example: :::{code-block} none set interfaces wireguard wg01 private-key 'iJJyEARGK52Ls1GYRCcFvPuTj7WyWYDo//BknoDU0XY=' ::: To generate a private key, use the fo…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show interfaces wireguard wg01 summary",
  "cmd": "show interfaces wireguard wg01 summary",
  "desc": "VPN — Show information about the WireGuard service, including the latest handshake. :::{code-block} none vyos@vyos:~$ show interfaces wireguard wg01 summary interface: wg01 public key: private key: (hidden) listening port: 51…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show interfaces wireguard",
  "cmd": "show interfaces wireguard",
  "desc": "VPN — Show a list of all WireGuard interfaces. :::{code-block} none Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down Interface IP Address S/L Description --------- ---------- --- ----------- wg01 10.0.0.1/24 u/u :…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show interfaces wireguard <interface>",
  "cmd": "show interfaces wireguard <interface>",
  "desc": "VPN — Show general information about a specific WireGuard interface. :::{code-block} none vyos@vyos:~$ show interfaces wireguard wg01 interface: wg01 address: 10.0.0.1/24 public key: h1HkYlSuHdJN6Qv4Hz4bBzjGg5WUty+U1L7DJsZy1i…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "generate wireguard client-config <name> interface <interface> server <ip|fqdn> address <c…",
  "cmd": "generate wireguard client-config <name> interface <interface> server <ip|fqdn> address <client-ip>",
  "desc": "VPN — **Generate a client configuration file that establishes a connection to the specified interface.** The public key from the specified interface is automatically included in the configuration file."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces loopback",
  "cmd": "show interfaces loopback",
  "desc": "Interfaces — Show brief interface information. :::{code-block} none vyos@vyos:~$ show interfaces loopback Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down Interface IP Address S/L Description --------- ---------- --- ---…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces loopback lo",
  "cmd": "show interfaces loopback lo",
  "desc": "Interfaces — Show detailed interface information. :::{code-block} none vyos@vyos:~$ show interfaces loopback lo lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show interfaces virtual-ethernet",
  "cmd": "show interfaces virtual-ethernet",
  "desc": "Troubleshooting — Show brief interface information. :::{code-block} none vyos@vyos:~$ show interfaces virtual-ethernet Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down Interface IP Address S/L Description --------- ----------…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces virtual-ethernet <interface>",
  "cmd": "show interfaces virtual-ethernet <interface>",
  "desc": "Interfaces — Show detailed interface information. :::{code-block} none vyos@vyos:~$ show interfaces virtual-ethernet veth11 10: veth11@veth10: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master red state UP group defaul…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bridge <interface> member interface <member>",
  "cmd": "set interfaces bridge <interface> member interface <member>",
  "desc": "Interfaces — **Configure an interface as a bridge member.** Valid interface types are: ethernet-interface, bond-interface, l2tpv3-interface, openvpn, vxlan-interface, wireless-interface, tunnel-interface, and geneve-interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bridge <interface> member interface <member> priority <priority>",
  "cmd": "set interfaces bridge <interface> member interface <member> priority <priority>",
  "desc": "Interfaces — **Configure the** STP (Spanning Tree Protocol) **port priority for a specific member interface within a bridge.** Within the STP (Spanning Tree Protocol) topology, each member interface in a bridge operates as a port wi…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bridge <interface> member interface <member> cost <cost>",
  "cmd": "set interfaces bridge <interface> member interface <member> cost <cost>",
  "desc": "Interfaces — **Configure the** STP (Spanning Tree Protocol) **path cost for a specific member interface within the bridge.** Path cost is the primary metric STP (Spanning Tree Protocol) uses to determine the path to the root bridge."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bridge <interface> member interface <member> disable-learning",
  "cmd": "set interfaces bridge <interface> member interface <member> disable-learning",
  "desc": "Interfaces — **Disable MAC address learning for a specific member interface within a bridge.** When learning is disabled, the bridge will not add source MAC addresses observed on this port to its forwarding database (FDB)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bridge <interface> aging <time>",
  "cmd": "set interfaces bridge <interface> aging <time>",
  "desc": "Interfaces — **Configure the MAC address aging time for the bridge.** The duration in seconds that a MAC address remains in the bridge’s FDB (Forwarding Database) before removal if no traffic is received from that address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bridge <interface> max-age <time>",
  "cmd": "set interfaces bridge <interface> max-age <time>",
  "desc": "Interfaces — **Configure the** STP (Spanning Tree Protocol) **max age timer for the bridge.** The duration in seconds that the bridge waits for a BPDU (Bridge Protocol Data Unit) from the root bridge."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set interfaces bridge <interface> igmp querier",
  "cmd": "set interfaces bridge <interface> igmp querier",
  "desc": "Multicast — **Configure the bridge interface to act as the** IGMP (Internet Group Management Protocol)/MLD (Multicast Listener Discovery) **Querier.** **When configured:** The bridge interface sends IGMP (Internet Group Management…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set interfaces bridge <interface> igmp snooping",
  "cmd": "set interfaces bridge <interface> igmp snooping",
  "desc": "Multicast — **Configure the bridge interface to perform** IGMP (Internet Group Management Protocol)/MLD (Multicast Listener Discovery) **snooping.** **When configured:** The bridge interface monitors IGMP (Internet Group Management…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Spanning-Tree",
  "title": "set interfaces bridge <interface> stp",
  "cmd": "set interfaces bridge <interface> stp",
  "desc": "Spanning-Tree — Enable STP (Spanning Tree Protocol) on the bridge interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bridge <interface> forwarding-delay <delay>",
  "cmd": "set interfaces bridge <interface> forwarding-delay <delay>",
  "desc": "Interfaces — **Configure the** STP (Spanning Tree Protocol) **delay, in seconds, for the bridge interface.** This parameter defines how long the bridge interface remains in the listening and learning states before forwarding traffic."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bridge <interface> hello-time <interval>",
  "cmd": "set interfaces bridge <interface> hello-time <interval>",
  "desc": "Interfaces — **Configure the** STP (Spanning Tree Protocol) **Hello advertisement interval, in seconds.** This parameter sets the frequency at which the bridge interface transmits Hello packets (BPDUs (Bridge Protocol Data Units))."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces bridge <interface> enable-vlan",
  "cmd": "set interfaces bridge <interface> enable-vlan",
  "desc": "VLAN — **Enable VLAN filtering (also known as VLAN awareness) on the bridge interface.** When enabled, the bridge strictly segregates traffic among VLANs configured on its member interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bridge <interface> protocol <802.1ad | 802.1q>",
  "cmd": "set interfaces bridge <interface> protocol <802.1ad | 802.1q>",
  "desc": "Interfaces — **Configure the VLAN protocol (EtherType) for the bridge interface.** The following options are available: * 802.1q (default): Sets the EtherType to 0x8100."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces bridge <interface> member interface <member> native-vlan <vlan-id>",
  "cmd": "set interfaces bridge <interface> member interface <member> native-vlan <vlan-id>",
  "desc": "VLAN — **Configure the native VLAN ID for a specific member interface within a VLAN-aware bridge.** This assigns the specified <vlan-id> to untagged traffic entering the member interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces bridge <interface> member interface <member> allowed-vlan <vlan-id>",
  "cmd": "set interfaces bridge <interface> member interface <member> allowed-vlan <vlan-id>",
  "desc": "VLAN — **Configure allowed VLAN IDs for a specific member interface within a VLAN-aware bridge.** Enter a single VLAN ID or a range of VLAN IDs separated by a hyphen."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show bridge",
  "cmd": "show bridge",
  "desc": "Troubleshooting — Show the status of member interfaces for all configured bridges. :::{code-block} none vyos@vyos:~$ show bridge 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 master br0 state forwarding priority 32 cost 100 4: eth2…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show bridge <name> fdb",
  "cmd": "show bridge <name> fdb",
  "desc": "Troubleshooting — Show the FDB (Forwarding Database) for the specified bridge. :::{code-block} none vyos@vyos:~$ show bridge br0 fdb 50:00:00:08:00:01 dev eth1 vlan 20 master br0 permanent 50:00:00:08:00:01 dev eth1 vlan 10 master br0 pe…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show bridge <name> mdb",
  "cmd": "show bridge <name> mdb",
  "desc": "Troubleshooting — Show the MDB (Multicast group Database) for the specified bridge. The MDB (Multicast group Database) is populated by IGMP (Internet Group Management Protocol)/MLD (Multicast Listener Discovery) snooping and lists the mu…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show bridge <name> macs",
  "cmd": "show bridge <name> macs",
  "desc": "Troubleshooting — Show the learned MAC (Media Access Control) address table for the specified bridge."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> authentication password <text>",
  "cmd": "set interfaces openvpn <interface> authentication password <text>",
  "desc": "VPN — **Configure the password for the** auth-user-pass **authentication method.** This option applies only to OpenVPN clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> authentication username <text>",
  "cmd": "set interfaces openvpn <interface> authentication username <text>",
  "desc": "VPN — **Configure the username for the** auth-user-pass **authentication method.** This option applies only to OpenVPN clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> description <description>",
  "cmd": "set interfaces openvpn <interface> description <description>",
  "desc": "VPN — Configure the description for the OpenVPN interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> device-type <tap | tun>",
  "cmd": "set interfaces openvpn <interface> device-type <tap | tun>",
  "desc": "VPN — **Configure the virtual network device type for the OpenVPN interface:** * tun **(default)**: Operates at Layer 3, encapsulating IPv4 or IPv6 packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> disable",
  "cmd": "set interfaces openvpn <interface> disable",
  "desc": "VPN — Disable the specific OpenVPN interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> encryption cipher < 3des | aes128 | aes128gcm | aes192…",
  "cmd": "set interfaces openvpn <interface> encryption cipher < 3des | aes128 | aes128gcm | aes192 | aes192gcm | aes256 | aes256gcm | none >",
  "desc": "VPN — **Configure the static encryption cipher for the OpenVPN tunnel.** The cipher option maps to OpenVPN’s --cipher directive and specifies the symmetric encryption algorithm for both control and data channels."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> encryption data-ciphers < 3des | aes128 | aes128gcm |…",
  "cmd": "set interfaces openvpn <interface> encryption data-ciphers < 3des | aes128 | aes128gcm | aes192 | aes192gcm | aes256 | aes256gcm | none >",
  "desc": "VPN — **Configure a prioritized list of negotiated ciphers for OpenVPN in** client **or** server **mode.** The data-ciphers option represents a list of supported encryption algorithms."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> encryption data-ciphers-fallback < 3des | aes128 | aes…",
  "cmd": "set interfaces openvpn <interface> encryption data-ciphers-fallback < 3des | aes128 | aes128gcm | aes192 | aes192gcm | aes256 | aes256gcm | none >",
  "desc": "VPN — **Configure the fallback cipher for** site-to-site **mode.** The data-ciphers-fallback option maps to OpenVPN’s --data-ciphers- fallback directive."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> hash <md5 | sha1 | sha256 | ...>",
  "cmd": "set interfaces openvpn <interface> hash <md5 | sha1 | sha256 | ...>",
  "desc": "VPN — Configure the hashing algorithm for the OpenVPN interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> keep-alive failure-count <value>",
  "cmd": "set interfaces openvpn <interface> keep-alive failure-count <value>",
  "desc": "VPN — **Configure the number of tolerated keepalive packet failures.** Default: 60 consecutive failures."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> keep-alive interval <value>",
  "cmd": "set interfaces openvpn <interface> keep-alive interval <value>",
  "desc": "VPN — **Configure the frequency, in seconds, at which keepalive packets are sent.** Default: 10 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> local-address <address>",
  "cmd": "set interfaces openvpn <interface> local-address <address>",
  "desc": "VPN — Configure the local tunnel IP address for site-to-site mode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> local-host <address>",
  "cmd": "set interfaces openvpn <interface> local-host <address>",
  "desc": "VPN — **Configure the local IP address to accept connections.** If configured, OpenVPN binds to this IP address only."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> local-port <port>",
  "cmd": "set interfaces openvpn <interface> local-port <port>",
  "desc": "VPN — Configure the local port to accept connections."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> mirror egress <monitor-interface>",
  "cmd": "set interfaces openvpn <interface> mirror egress <monitor-interface>",
  "desc": "VPN — Configure mirroring of outgoing traffic from this OpenVPN interface to the designated monitor interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> mirror ingress <monitor-interface>",
  "cmd": "set interfaces openvpn <interface> mirror ingress <monitor-interface>",
  "desc": "VPN — Configure mirroring of incoming traffic from this OpenVPN interface to the designated monitor interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> mode <site-to-site | server | client>",
  "cmd": "set interfaces openvpn <interface> mode <site-to-site | server | client>",
  "desc": "VPN — **Configure OpenVPN operation mode:** * site-to-site: Establishes a site-to-site VPN connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> offload dco",
  "cmd": "set interfaces openvpn <interface> offload dco",
  "desc": "VPN — **Enable** DCO (Data Channel Offload) **for the specified OpenVPN interface.** Example: :::{code-block} none set interfaces openvpn vtun0 offload dco ::: This command enables DCO (Data Channel Offload) and loads the req…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> openvpn-option <text>",
  "cmd": "set interfaces openvpn <interface> openvpn-option <text>",
  "desc": "VPN — **Add raw OpenVPN configuration options to the openvpn.conf file.** OpenVPN provides many configuration options, but not all are available in the VyOS CLI."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> persistent-tunnel",
  "cmd": "set interfaces openvpn <interface> persistent-tunnel",
  "desc": "VPN — **Enable always-active mode for the TUN/TAP device.** When enabled, the TUN/TAP device remains active upon connection resets or daemon reloads."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> protocol <udp | tcp-passive | tcp-active >",
  "cmd": "set interfaces openvpn <interface> protocol <udp | tcp-passive | tcp-active >",
  "desc": "VPN — **Configure the protocol for OpenVPN communication with a remote host:** * udp **(default)**: Uses the UDP protocol."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> redirect <interface>",
  "cmd": "set interfaces openvpn <interface> redirect <interface>",
  "desc": "VPN — Enable redirection of incoming packets to the specified interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> remote-address <address>",
  "cmd": "set interfaces openvpn <interface> remote-address <address>",
  "desc": "VPN — Configure the remote tunnel IP address for site-to-site mode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> remote-host <address | host>",
  "cmd": "set interfaces openvpn <interface> remote-host <address | host>",
  "desc": "VPN — **Configure the IPv4/IPv6 address or hostname for a server device if OpenVPN runs in client mode.** This setting is not used in server mode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> remote-port <port>",
  "cmd": "set interfaces openvpn <interface> remote-port <port>",
  "desc": "VPN — Configure the remote port to connect to the server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> replace-default-route",
  "cmd": "set interfaces openvpn <interface> replace-default-route",
  "desc": "VPN — Configure the OpenVPN tunnel as the default route."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server bridge disable",
  "cmd": "set interfaces openvpn <interface> server bridge disable",
  "desc": "VPN — Disable the given instance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server bridge gateway <ipv4 address>",
  "cmd": "set interfaces openvpn <interface> server bridge gateway <ipv4 address>",
  "desc": "VPN — Configure the gateway IP address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server bridge start <ipv4 address>",
  "cmd": "set interfaces openvpn <interface> server bridge start <ipv4 address>",
  "desc": "VPN — Configure the first IP address in the pool to allocate to connecting clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server bridge stop <ipv4 address>",
  "cmd": "set interfaces openvpn <interface> server bridge stop <ipv4 address>",
  "desc": "VPN — Configure the last IP address in the pool to allocate to connecting clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server bridge subnet-mask <ipv4 subnet mask>",
  "cmd": "set interfaces openvpn <interface> server bridge subnet-mask <ipv4 subnet mask>",
  "desc": "VPN — Configure the subnet mask pushed to dynamic clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server client <name>",
  "cmd": "set interfaces openvpn <interface> server client <name>",
  "desc": "VPN — Configure the Common Name (CN) specified in the client certificate."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server client <name> disable",
  "cmd": "set interfaces openvpn <interface> server client <name> disable",
  "desc": "VPN — Disable the client connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server client <name> ip <address>",
  "cmd": "set interfaces openvpn <interface> server client <name> ip <address>",
  "desc": "VPN — Configure the IPv4/IPv6 address for the client."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server client <name> push-route <subnet>",
  "cmd": "set interfaces openvpn <interface> server client <name> push-route <subnet>",
  "desc": "VPN — Configure a route to be pushed to the specific client."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server client <name> subnet <subnet>",
  "cmd": "set interfaces openvpn <interface> server client <name> subnet <subnet>",
  "desc": "VPN — **Configure a fixed subnet to be routed from the server to the specified client.** Used as OpenVPN’s iroute directive."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server client-ip-pool start <address>",
  "cmd": "set interfaces openvpn <interface> server client-ip-pool start <address>",
  "desc": "VPN — Configure the first IP address in the subnet's IPv4 pool to be dynamically allocated to connecting clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server client-ip-pool stop <address>",
  "cmd": "set interfaces openvpn <interface> server client-ip-pool stop <address>",
  "desc": "VPN — Configure the last IP address in the subnet's IPv4 pool to be dynamically allocated to connecting clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server client-ip-pool subnet <netmask>",
  "cmd": "set interfaces openvpn <interface> server client-ip-pool subnet <netmask>",
  "desc": "VPN — **Configure the subnet mask pushed to dynamic clients.** Use this command only for the TAP device type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server client-ipv6-pool base <ipv6addr/bits>",
  "cmd": "set interfaces openvpn <interface> server client-ipv6-pool base <ipv6addr/bits>",
  "desc": "VPN — Configure the IPv6 address pool for dynamic assignment to clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server domain-name <name>",
  "cmd": "set interfaces openvpn <interface> server domain-name <name>",
  "desc": "VPN — Configure the DNS suffix to be pushed to all clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server max-connections <1-4096>",
  "cmd": "set interfaces openvpn <interface> server max-connections <1-4096>",
  "desc": "VPN — Configure the maximum number of client connections."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server mfa totp challenge <enable | disable>",
  "cmd": "set interfaces openvpn <interface> server mfa totp challenge <enable | disable>",
  "desc": "VPN — If enabled, openvpn-otp expects a password as a result of the challenge/ response protocol."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server mfa totp digits <1-65535>",
  "cmd": "set interfaces openvpn <interface> server mfa totp digits <1-65535>",
  "desc": "VPN — **Configure the number of digits to use for the** TOTP (Time-based One-Time Password) **hash.** Default: 6."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server mfa totp drift <1-65535>",
  "cmd": "set interfaces openvpn <interface> server mfa totp drift <1-65535>",
  "desc": "VPN — **Configure the time drift in seconds.** Default: 0."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server mfa totp slop <1-65535>",
  "cmd": "set interfaces openvpn <interface> server mfa totp slop <1-65535>",
  "desc": "VPN — **Configure the allowed clock slop in seconds.** Default: 180."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server mfa totp step <1-65535>",
  "cmd": "set interfaces openvpn <interface> server mfa totp step <1-65535>",
  "desc": "VPN — **Configure the step value for** TOTP (Time-based One-Time Password) **in seconds.** Default: 30."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server name-server <address>",
  "cmd": "set interfaces openvpn <interface> server name-server <address>",
  "desc": "VPN — Define the client DNS configuration to be used with the connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server push-route <subnet>",
  "cmd": "set interfaces openvpn <interface> server push-route <subnet>",
  "desc": "VPN — Configure the route to be pushed to all clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server reject-unconfigured-client",
  "cmd": "set interfaces openvpn <interface> server reject-unconfigured-client",
  "desc": "VPN — Reject connections from clients that are not explicitly configured."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server subnet <subnet>",
  "cmd": "set interfaces openvpn <interface> server subnet <subnet>",
  "desc": "VPN — **Configure the IPv4 or IPv6 network.** This parameter is mandatory when operating in server mode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> server topology < net30 | point-to-point | subnet>",
  "cmd": "set interfaces openvpn <interface> server topology < net30 | point-to-point | subnet>",
  "desc": "VPN — **Configure the virtual addressing topology for** tun **mode.** This command does not affect tap mode, which always uses the subnet topology."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> shared-secret-key <key>",
  "cmd": "set interfaces openvpn <interface> shared-secret-key <key>",
  "desc": "VPN — Configure the static secret key for a site-to-site OpenVPN connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> tls auth-key <key>",
  "cmd": "set interfaces openvpn <interface> tls auth-key <key>",
  "desc": "VPN — **Configure the TLS secret key for tls-auth.** This adds an HMAC signature to all SSL/TLS handshake packets to verify integrity."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> tls ca-certificate <name>",
  "cmd": "set interfaces openvpn <interface> tls ca-certificate <name>",
  "desc": "VPN — Configure the Certificate Authority chain in the PKI configuration."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> tls certificate <name>",
  "cmd": "set interfaces openvpn <interface> tls certificate <name>",
  "desc": "VPN — Configure the certificate name in the PKI configuration."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> tls crypt-key",
  "cmd": "set interfaces openvpn <interface> tls crypt-key",
  "desc": "VPN — Configure a shared secret key to provide an additional level of security, a variant similar to tls-auth."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> tls dh-params",
  "cmd": "set interfaces openvpn <interface> tls dh-params",
  "desc": "VPN — Configure Diffie-Hellman parameters for server mode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> tls peer-fingerprint <text>",
  "cmd": "set interfaces openvpn <interface> tls peer-fingerprint <text>",
  "desc": "VPN — Configure the peer certificate SHA256 fingerprint for site-to-site mode."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> tls role <active | passive>",
  "cmd": "set interfaces openvpn <interface> tls role <active | passive>",
  "desc": "VPN — **Configure the TLS negotiation role, preferably used in site-to-site mode:** * active: Initiates TLS negotiation actively."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> tls tls-version-min <1.0 | 1.1 | 1.2 | 1.3 >",
  "cmd": "set interfaces openvpn <interface> tls tls-version-min <1.0 | 1.1 | 1.2 | 1.3 >",
  "desc": "VPN — Configure the minimum TLS version to be accepted from the peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> use-lzo-compression",
  "cmd": "set interfaces openvpn <interface> use-lzo-compression",
  "desc": "VPN — Configure fast LZO compression on this TUN/TAP interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set interfaces openvpn <interface> vrf <name>",
  "cmd": "set interfaces openvpn <interface> vrf <name>",
  "desc": "VPN — Assign the interface to a specific VRF instance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show openvpn site-to-site",
  "cmd": "show openvpn site-to-site",
  "desc": "VPN — Show tunnel status for OpenVPN site-to-site interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show openvpn server",
  "cmd": "show openvpn server",
  "desc": "VPN — Show tunnel status for OpenVPN server interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show openvpn client",
  "cmd": "show openvpn client",
  "desc": "VPN — Show tunnel status for OpenVPN client interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show log openvpn",
  "cmd": "show log openvpn",
  "desc": "VPN — Show logs for all OpenVPN interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "show log openvpn interface <interface>",
  "cmd": "show log openvpn interface <interface>",
  "desc": "VPN — Show logs for the specific OpenVPN interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "reset openvpn client <text>",
  "cmd": "reset openvpn client <text>",
  "desc": "VPN — Reset the specified OpenVPN client."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "reset openvpn interface <interface>",
  "cmd": "reset openvpn interface <interface>",
  "desc": "VPN — Reset the OpenVPN process on the specified interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "generate openvpn client-config interface <interface> ca <name> certificate <name>",
  "cmd": "generate openvpn client-config interface <interface> ca <name> certificate <name>",
  "desc": "VPN — Generate an OpenVPN client configuration file in the .ovpn format for client machines."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vti <interface> mirror egress <monitor-interface>",
  "cmd": "set interfaces vti <interface> mirror egress <monitor-interface>",
  "desc": "Interfaces — Configure mirroring of outgoing traffic from the specified VTI to the designated monitor interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vti <interface> mirror ingress <monitor-interface>",
  "cmd": "set interfaces vti <interface> mirror ingress <monitor-interface>",
  "desc": "Interfaces — Configure mirroring of incoming traffic from the specified VTI to the designated monitor interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vti <interface> redirect <interface>",
  "cmd": "set interfaces vti <interface> redirect <interface>",
  "desc": "Interfaces — Enable redirection of incoming packets to the specified interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show interfaces vti <vtiX>",
  "cmd": "show interfaces vti <vtiX>",
  "desc": "Troubleshooting — Show the operational status and traffic statistics for the specified VTI."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show interfaces vti <vtiX> brief",
  "cmd": "show interfaces vti <vtiX> brief",
  "desc": "Troubleshooting — Show a brief operational status summary for the specified VTI."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bonding <interface> member interface <member>",
  "cmd": "set interfaces bonding <interface> member interface <member>",
  "desc": "Interfaces — **Add an interface to the bonding group.** **Example:** To configure eth0 and eth1 as members of the bonding interface bond0, execute the following commands:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bonding <interface> mode <802.3ad | active-backup | broadcast | round-robi…",
  "cmd": "set interfaces bonding <interface> mode <802.3ad | active-backup | broadcast | round-robin | transmit-load-balance | adaptive-load-balance | xor-hash>",
  "desc": "Interfaces · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bonding <interface> min-links <0-16>",
  "cmd": "set interfaces bonding <interface> min-links <0-16>",
  "desc": "Interfaces — **Configure how many member interfaces must be active (in the link-up state) to mark the bonding interface UP (carrier asserted).** This command applies only when the bonding interface is configured in 802.3ad mode and…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "EtherChannel",
  "title": "set interfaces bonding <interface> lacp-rate <slow|fast>",
  "cmd": "set interfaces bonding <interface> lacp-rate <slow|fast>",
  "desc": "EtherChannel — **Configure the rate at which the bonding interface requests its link partner to send** LACPDUs (Link Aggregation Control Protocol Data Units) **in 802.3ad mode.** This command applies only when the bonding interface is…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bonding <interface> system-mac <mac address>",
  "cmd": "set interfaces bonding <interface> system-mac <mac address>",
  "desc": "Interfaces — **Configure a specific MAC address for the bonding interface.** This sets the 802.3ad system MAC address, which is used for LACPDU (Link Aggregation Control Protocol Data Unit) exchanges with the link partner."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bonding <interface> hash-policy <policy>",
  "cmd": "set interfaces bonding <interface> hash-policy <policy>",
  "desc": "Interfaces — **Configure which transmit hash policy to use for distributing traffic across member interfaces.** The following policies are available: * layer2 **Description:** Routes all traffic destined for a specific network peer…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bonding <interface> primary <interface>",
  "cmd": "set interfaces bonding <interface> primary <interface>",
  "desc": "Interfaces — **Configure the primary member interface in the bond.** The primary member interface remains active as long as it is operational; alternative member interfaces are used only if it fails."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bonding <interface> arp-monitor interval <time>",
  "cmd": "set interfaces bonding <interface> arp-monitor interval <time>",
  "desc": "Interfaces — **Configure the ARP monitoring interval, in seconds, for the bonding interface.** ARP monitoring periodically assesses the health of each member interface by checking whether it has recently sent or received traffic (th…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bonding <interface> arp-monitor target <address>",
  "cmd": "set interfaces bonding <interface> arp-monitor target <address>",
  "desc": "Interfaces — **Configure the IP addresses for ARP monitoring requests.** The bonding driver sends ARP requests to these IP addresses to check the state of member interfaces."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces bonding <interface> evpn es-id <1-16777215|10-byte ID>",
  "cmd": "set interfaces bonding <interface> evpn es-id <1-16777215|10-byte ID>",
  "desc": "BGP · vpn"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces bonding <interface> evpn es-sys-mac <xx:xx:xx:xx:xx:xx>",
  "cmd": "set interfaces bonding <interface> evpn es-sys-mac <xx:xx:xx:xx:xx:xx>",
  "desc": "BGP — Alternatively, assign an ESINAME directly as a 10-byte Type-0 ESI using the following format: 00:AA:BB:CC:DD:EE:FF:GG:HH:II."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces bonding <interface> evpn es-df-pref <1-65535>",
  "cmd": "set interfaces bonding <interface> evpn es-df-pref <1-65535>",
  "desc": "BGP — **Configure the** DF (Designated Forwarder) **preference (1-65535) for the interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show interfaces bonding",
  "cmd": "show interfaces bonding",
  "desc": "Troubleshooting — Show brief interface information. :::{code-block} none vyos@vyos:~$ show interfaces bonding Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down Interface IP Address S/L Description --------- ---------- --- ----…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces bonding <interface>",
  "cmd": "show interfaces bonding <interface>",
  "desc": "Interfaces — Show detailed interface information. :::{code-block} none vyos@vyos:~$ show interfaces bonding bond5 bond5: <NO-CARRIER,BROADCAST,MULTICAST,MASTER,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000 link/ether…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "show interfaces bonding <interface> detail",
  "cmd": "show interfaces bonding <interface> detail",
  "desc": "Interfaces — Show detailed information about the underlying physical links on the given bonding interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces geneve gnv0 remote <address>",
  "cmd": "set interfaces geneve gnv0 remote <address>",
  "desc": "Interfaces — Configure the remote endpoint IP address for the Geneve tunnel."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces geneve gnv0 vni <vni>",
  "cmd": "set interfaces geneve gnv0 vni <vni>",
  "desc": "Interfaces — **Configure** VNI (Virtual Network Identifier) **for the Geneve interface.** The VNI is a virtual network identifier."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces gnv0 <interface> port <port>",
  "cmd": "set interfaces gnv0 <interface> port <port>",
  "desc": "Interfaces — **Configure the destination UDP port for the remote Geneve tunnel endpoint.** Ensure the remote peer is configured to listen on this specific port."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate pki ca",
  "cmd": "generate pki ca",
  "desc": "System — Create a new CA (Certificate Authority) and output the CAs public and private key on the console."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate pki ca install <name>",
  "cmd": "generate pki ca install <name>",
  "desc": "System — Create a new CA (Certificate Authority) and output the CAs public and private key on the console."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate pki ca sign <ca-name>",
  "cmd": "generate pki ca sign <ca-name>",
  "desc": "System — Create a new subordinate CA (Certificate Authority) and sign it using the private key referenced by ca-name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate pki ca sign <ca-name> install <name>",
  "cmd": "generate pki ca sign <ca-name> install <name>",
  "desc": "System — Create a new subordinate CA (Certificate Authority) and sign it using the private key referenced by name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate pki certificate",
  "cmd": "generate pki certificate",
  "desc": "System — Create a new public/private keypair and output the certificate on the console."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate pki certificate install <name>",
  "cmd": "generate pki certificate install <name>",
  "desc": "System — Create a new public/private keypair and output the certificate on the console. :::{note} In addition to the command above, the output is in a format which can be used to directly import the key into the VyOS CLI by simp…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate pki certificate self-signed",
  "cmd": "generate pki certificate self-signed",
  "desc": "System — Create a new self-signed certificate. The public/private is then shown on the console."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate pki certificate self-signed install <name>",
  "cmd": "generate pki certificate self-signed install <name>",
  "desc": "System — Create a new self-signed certificate. The public/private is then shown on the console."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate pki certificate sign <ca-name>",
  "cmd": "generate pki certificate sign <ca-name>",
  "desc": "System — Create a new public/private keypair which is signed by the CA referenced by ca-name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate pki certificate sign <ca-name> install <name>",
  "cmd": "generate pki certificate sign <ca-name> install <name>",
  "desc": "System — Create a new public/private keypair which is signed by the CA referenced by ca-name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate pki dh",
  "cmd": "generate pki dh",
  "desc": "System — Generate a new set of DH (Diffie-Hellman) parameters. The key size is requested by the CLI and defaults to 2048 bit."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate pki dh install <name>",
  "cmd": "generate pki dh install <name>",
  "desc": "System — Generate a new set of DH (Diffie-Hellman) parameters. The key size is requested by the CLI and defaults to 2048 bit."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "generate pki openvpn shared-secret",
  "cmd": "generate pki openvpn shared-secret",
  "desc": "VPN — Generate a new OpenVPN shared secret. The generated secret is the output to the console."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "generate pki openvpn shared-secret install <name>",
  "cmd": "generate pki openvpn shared-secret install <name>",
  "desc": "VPN — Generate a new OpenVPN shared secret. The generated secret is the output to the console."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "generate pki wireguard key-pair install <interface>",
  "cmd": "generate pki wireguard key-pair install <interface>",
  "desc": "VPN — Generate a new WireGuard public/private key portion and output the result to the console."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "generate pki wireguard preshared-key install <peer>",
  "cmd": "generate pki wireguard preshared-key install <peer>",
  "desc": "VPN — Generate a WireGuard pre-shared secret used for peers to communicate. :::{note} In addition to the command above, the output is in a format which can be used to directly import the key into the VyOS CLI by simply copy-p…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set pki ca <name> certificate",
  "cmd": "set pki ca <name> certificate",
  "desc": "System — Add the public CA certificate for the CA named name to the VyOS CLI. :::{note} When loading the certificate you need to manually strip the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- tags."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set pki ca <name> crl",
  "cmd": "set pki ca <name> crl",
  "desc": "System — Certificate revocation list in PEM format."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set pki ca <name> description",
  "cmd": "set pki ca <name> description",
  "desc": "System — A human readable description what this CA is about."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set pki ca <name> private key",
  "cmd": "set pki ca <name> private key",
  "desc": "System — Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set pki ca <name> private password-protected",
  "cmd": "set pki ca <name> private password-protected",
  "desc": "System — Mark the CAs private key as password protected. User is asked for the password when the key is referenced."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set pki certificate <name> certificate",
  "cmd": "set pki certificate <name> certificate",
  "desc": "System — Add public key portion for the certificate named name to the VyOS CLI. :::{note} When loading the certificate you need to manually strip the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- tags."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set pki certificate <name> description",
  "cmd": "set pki certificate <name> description",
  "desc": "System — A human readable description what this certificate is about."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set pki certificate <name> private key",
  "cmd": "set pki certificate <name> private key",
  "desc": "System — Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set pki certificate <name> private password-protected",
  "cmd": "set pki certificate <name> private password-protected",
  "desc": "System — Mark the private key as password protected. User is asked for the password when the key is referenced."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set pki certificate <name> revoke",
  "cmd": "set pki certificate <name> revoke",
  "desc": "System — If CA is present, this certificate will be included in generated CRLs"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "import pki ca <name> file <Path to CA certificate file>",
  "cmd": "import pki ca <name> file <Path to CA certificate file>",
  "desc": "System — Import the public CA certificate from the defined file to VyOS CLI."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "import pki ca <name> key-file <Path to private key file>",
  "cmd": "import pki ca <name> key-file <Path to private key file>",
  "desc": "System — Import the CAs private key portion to the CLI. This should never leave the system as it is used to decrypt the data."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "import pki certificate <name> file <path to certificate>",
  "cmd": "import pki certificate <name> file <path to certificate>",
  "desc": "System — Import the certificate from the file to VyOS CLI."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "import pki certificate <name> key-file <path to private key>",
  "cmd": "import pki certificate <name> key-file <path to private key>",
  "desc": "System — Import the private key of the certificate to the VyOS CLI. This should never leave the system as it is used to decrypt the data."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "import pki openvpn shared-secret <name> file <path to OpenVPN secret key>",
  "cmd": "import pki openvpn shared-secret <name> file <path to OpenVPN secret key>",
  "desc": "VPN — Import the OpenVPN shared secret stored in file to the VyOS CLI."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set pki certificate <name> acme domain-name <name>",
  "cmd": "set pki certificate <name> acme domain-name <name>",
  "desc": "System — Domain names to apply, multiple domain-names can be specified. This is a mandatory option"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set pki certificate <name> acme email <address>",
  "cmd": "set pki certificate <name> acme email <address>",
  "desc": "System — Email used for registration and recovery contact. This is a mandatory option"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set pki certificate <name> acme listen-address <address>",
  "cmd": "set pki certificate <name> acme listen-address <address>",
  "desc": "System — The address the server listens to during http-01 challenge"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set pki certificate <name> acme rsa-key-size <2048 | 3072 | 4096>",
  "cmd": "set pki certificate <name> acme rsa-key-size <2048 | 3072 | 4096>",
  "desc": "System — Size of the RSA key. This options defaults to 2048"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set pki certificate <name> acme url <url>",
  "cmd": "set pki certificate <name> acme url <url>",
  "desc": "System — ACME Directory Resource URI. This defaults to https://acme-v02.api.letsencrypt.org/directory :::{note} During initial deployment we recommend using the staging API of LetsEncrypt to prevent and blacklisting of your syst…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show pki ca",
  "cmd": "show pki ca",
  "desc": "Troubleshooting — Show a list of installed CA (Certificate Authority) certificates. :::{code-block} none vyos@vyos:~$ show pki ca Certificate Authorities: Name Subject Issuer CN Issued Expiry Private Key Parent -------------- -----------…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show pki ca <name>",
  "cmd": "show pki ca <name>",
  "desc": "Troubleshooting — Show only information for specified Certificate Authority."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show pki certificate",
  "cmd": "show pki certificate",
  "desc": "Troubleshooting — Show a list of installed certificates :::{code-block} none vyos@vyos:~$ show pki certificate Certificates: Name Type Subject CN Issuer CN Issued Expiry Revoked Private Key CA Present --------- ------ -------------------…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show pki certificate <name>",
  "cmd": "show pki certificate <name>",
  "desc": "Troubleshooting — Show only information for specified certificate."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show pki crl",
  "cmd": "show pki crl",
  "desc": "Troubleshooting — Show a list of installed CRLs (Certificate Revocation List)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "renew certbot",
  "cmd": "renew certbot",
  "desc": "System — Manually trigger certificate renewal. This will be done twice a day."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "exit [discard]",
  "cmd": "exit [discard]",
  "desc": "System — Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the exit discard command must be used."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "compare <saved | N> <M>",
  "cmd": "compare <saved | N> <M>",
  "desc": "System — Use this command to spot what the differences are between different configurations."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication local-users username <user> password",
  "cmd": "set vpn sstp authentication local-users username <user> password",
  "desc": "VPN — <pass> Create <user> for local authentication on this system. The users password will be set to <pass>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp client-ipv6-pool <IPv6-POOL-NAME> prefix <address>",
  "cmd": "set vpn sstp client-ipv6-pool <IPv6-POOL-NAME> prefix <address>",
  "desc": "VPN — mask <number-of-bits> Use this comand to set the IPv6 address pool from which an SSTP client will get an IPv6 prefix of your defined length (mask) to terminate the SSTP endpoint at their side."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp client-ipv6-pool <IPv6-POOL-NAME> delegate <address>",
  "cmd": "set vpn sstp client-ipv6-pool <IPv6-POOL-NAME> delegate <address>",
  "desc": "VPN — delegation-prefix <number-of-bits> Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on SSTP."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication local-users username <user> static-ip",
  "cmd": "set vpn sstp authentication local-users username <user> static-ip",
  "desc": "VPN — <address> Assign a static IP address to <user> account."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication local-users username <user> rate-limit",
  "cmd": "set vpn sstp authentication local-users username <user> rate-limit",
  "desc": "VPN — download <bandwidth> Rate limit the download bandwidth for <user> to <bandwidth> kbit/s."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn sstp authentication protocols",
  "cmd": "set vpn sstp authentication protocols",
  "desc": "VPN — <pap | chap | mschap | mschap-v2> Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set protocols nhrp tunnel <tunnel> map tunnel-ip <tunnel-ip>",
  "cmd": "set protocols nhrp tunnel <tunnel> map tunnel-ip <tunnel-ip>",
  "desc": "VPN — nbma <nbma-ip> * **tunnel-ip** - Tunnel ip address in format **x.x.x.x**. * **nbma-ip** - NBMA ip address in format **x.x.x.x** or **local** Map an IP address of a station to the station’s NBMA address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication local-users username <user> password",
  "cmd": "set vpn l2tp remote-access authentication local-users username <user> password",
  "desc": "VLAN — <pass> Create <user> for local authentication on this system. The users password will be set to <pass>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access client-ipv6-pool <IPv6-POOL-NAME> prefix <address>",
  "cmd": "set vpn l2tp remote-access client-ipv6-pool <IPv6-POOL-NAME> prefix <address>",
  "desc": "VLAN — mask <number-of-bits> Use this comand to set the IPv6 address pool from which an l2tp client will get an IPv6 prefix of your defined length (mask) to terminate the l2tp endpoint at their side."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access client-ipv6-pool <IPv6-POOL-NAME> delegate <address>",
  "cmd": "set vpn l2tp remote-access client-ipv6-pool <IPv6-POOL-NAME> delegate <address>",
  "desc": "VLAN — delegation-prefix <number-of-bits> Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on l2tp."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication local-users username <user> static-ip",
  "cmd": "set vpn l2tp remote-access authentication local-users username <user> static-ip",
  "desc": "VLAN — <address> Assign a static IP address to <user> account."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication local-users username <user> rate-limit",
  "cmd": "set vpn l2tp remote-access authentication local-users username <user> rate-limit",
  "desc": "VLAN — download <bandwidth> Rate limit the download bandwidth for <user> to <bandwidth> kbit/s."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn l2tp remote-access authentication protocols",
  "cmd": "set vpn l2tp remote-access authentication protocols",
  "desc": "VLAN — <pap | chap | mschap | mschap-v2> Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication local-users username <user> password",
  "cmd": "set vpn pptp remote-access authentication local-users username <user> password",
  "desc": "VLAN — <pass> Create <user> for local authentication on this system. The users password will be set to <pass>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access client-ipv6-pool <IPv6-POOL-NAME> prefix <address>",
  "cmd": "set vpn pptp remote-access client-ipv6-pool <IPv6-POOL-NAME> prefix <address>",
  "desc": "VLAN — mask <number-of-bits> Use this comand to set the IPv6 address pool from which an PPTP client will get an IPv6 prefix of your defined length (mask) to terminate the PPTP endpoint at their side."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access client-ipv6-pool <IPv6-POOL-NAME> delegate <address>",
  "cmd": "set vpn pptp remote-access client-ipv6-pool <IPv6-POOL-NAME> delegate <address>",
  "desc": "VLAN — delegation-prefix <number-of-bits> Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPTP."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication local-users username <user> static-ip",
  "cmd": "set vpn pptp remote-access authentication local-users username <user> static-ip",
  "desc": "VLAN — <address> Assign static IP address to <user> account."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication local-users username <user> rate-limit",
  "cmd": "set vpn pptp remote-access authentication local-users username <user> rate-limit",
  "desc": "VLAN — download <bandwidth> Download bandwidth limit in kbit/s for <user>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set vpn pptp remote-access authentication protocols",
  "cmd": "set vpn pptp remote-access authentication protocols",
  "desc": "VLAN — <pap | chap | mschap | mschap-v2> Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set nat [source | destination] rule <rule> load-balance hash",
  "cmd": "set nat [source | destination] rule <rule> load-balance hash",
  "desc": "NAT — [source-address | destination-address | source-port | destination-port | random]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set nat [source | destination] rule <rule> load-balance backend",
  "cmd": "set nat [source | destination] rule <rule> load-balance backend",
  "desc": "NAT — <x.x.x.x> weight <1-100>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> listen-address",
  "cmd": "set load-balancing haproxy service <name> listen-address",
  "desc": "System — <address> Set the IP address for the service to bind to. By default, the service listens on all IPv4 and IPv6 addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set load-balancing haproxy service <name> port",
  "cmd": "set load-balancing haproxy service <name> port",
  "desc": "Interfaces — <port> Create service <name> to listen on <port>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> mode",
  "cmd": "set load-balancing haproxy service <name> mode",
  "desc": "System — <tcp|http> Configure service <name> mode TCP or HTTP"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> backend",
  "cmd": "set load-balancing haproxy service <name> backend",
  "desc": "System — <name> Configure service <name> to use the backend <name>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> ssl",
  "cmd": "set load-balancing haproxy service <name> ssl",
  "desc": "System — certificate <name> Set the SSL certificate <name> for service <name>. You can define multiple certificates."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name>",
  "cmd": "set load-balancing haproxy service <name>",
  "desc": "System — http-response-headers <header-name> value <header-value> Set custom HTTP headers to include in all responses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set load-balancing haproxy service <name> logging facility",
  "cmd": "set load-balancing haproxy service <name> logging facility",
  "desc": "Logging — <facility> level <level> Specify facility and level for logging. For an explanation on syslog_facilities and syslog_severity_level, see tables in the syslog configuration section."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> timeout client",
  "cmd": "set load-balancing haproxy service <name> timeout client",
  "desc": "System — <seconds> Set the maximum inactivity time on the client side for this service. Value range 1-3600 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> http-compression algorithm",
  "cmd": "set load-balancing haproxy service <name> http-compression algorithm",
  "desc": "System — <gzip | deflate | identity | raw-deflate> Set the compression algorithm to be used when compressing HTTP responses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> http-compression mime-type",
  "cmd": "set load-balancing haproxy service <name> http-compression mime-type",
  "desc": "System — <mime-type> Set the list of HTTP response MIME types which haproxy will attempt to compress, if received uncompressed from backend server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy service <name> rule <rule>",
  "cmd": "set load-balancing haproxy service <name> rule <rule>",
  "desc": "System — domain-name <name> Match domain name"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> balance",
  "cmd": "set load-balancing haproxy backend <name> balance",
  "desc": "System — <balance> Specify the load balancing algorithm for distributing requests among available servers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> mode",
  "cmd": "set load-balancing haproxy backend <name> mode",
  "desc": "System — <mode> Configure backend <name> mode TCP or HTTP."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> server",
  "cmd": "set load-balancing haproxy backend <name> server",
  "desc": "System — <name> address <x.x.x.x> Set the address of the backend server that receives incoming traffic."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> ssl",
  "cmd": "set load-balancing haproxy backend <name> ssl",
  "desc": "System — ca-certificate <ca-certificate> Use SSL encryption for backend requests and authenticate the backend against <ca-certificate>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name>",
  "cmd": "set load-balancing haproxy backend <name>",
  "desc": "System — http-response-headers <header-name> value <header-value> Set custom HTTP headers to include in all responses from the backend."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set load-balancing haproxy backend <name> logging facility",
  "cmd": "set load-balancing haproxy backend <name> logging facility",
  "desc": "Logging — <facility> level <level> Specify facility and level for logging. For an explanation on syslog_facilities and syslog_severity_level, see tables in the syslog configuration section."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> timeout check",
  "cmd": "set load-balancing haproxy backend <name> timeout check",
  "desc": "System — <seconds> Set the timeout in seconds for established connections. Value range 1-3600 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> timeout connect",
  "cmd": "set load-balancing haproxy backend <name> timeout connect",
  "desc": "System — <seconds> Set the maximum time to wait for a connection attempt to a server to succeed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy backend <name> timeout server",
  "cmd": "set load-balancing haproxy backend <name> timeout server",
  "desc": "System — <seconds> Set the maximum inactivity time on the server side. Value range 1-3600 seconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy global-parameters max-connections",
  "cmd": "set load-balancing haproxy global-parameters max-connections",
  "desc": "System — <num> Limit maximum number of connections"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy global-parameters ssl-bind-ciphers",
  "cmd": "set load-balancing haproxy global-parameters ssl-bind-ciphers",
  "desc": "System — <ciphers> Limit the cipher algorithms allowed during SSL/TLS handshake."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set load-balancing haproxy global-parameters tls-version-min",
  "cmd": "set load-balancing haproxy global-parameters tls-version-min",
  "desc": "System — <version> Specify the minimum required TLS version 1.2 or 1.3"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set load-balancing haproxy global-parameters logging",
  "cmd": "set load-balancing haproxy global-parameters logging",
  "desc": "Logging — facility <facility> level <level> Specify facility and level for logging. For an explanation on syslog_facilities and syslog_severity_level see tables in syslog configuration section."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group address-group <name> address [address |",
  "cmd": "set firewall group address-group <name> address [address |",
  "desc": "Firewall — address range]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall group port-group <name> port",
  "cmd": "set firewall group port-group <name> port",
  "desc": "Firewall — [portname | portnumber | startport-endport] Define a port group. A port name can be any name defined in /etc/services."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 [forward | input | output] filter rule",
  "cmd": "set firewall ipv4 [forward | input | output] filter rule",
  "desc": "ACL — <1-999999> add-address-to-group destination-address address-group <name>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> add-address-to-group",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> add-address-to-group",
  "desc": "Firewall — destination-address address-group <name>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 [forward | input | output] filter rule",
  "cmd": "set firewall ipv6 [forward | input | output] filter rule",
  "desc": "ACL — <1-999999> add-address-to-group destination-address address-group <name>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> add-address-to-group",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> add-address-to-group",
  "desc": "Firewall — destination-address address-group <name>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options ipv6-receive-redirects",
  "cmd": "set firewall global-options ipv6-receive-redirects",
  "desc": "Firewall — [enable | disable] Allow VyOS to accept ICMPv4 and ICMPv6 redirect messages. The following sysctl parameters will be changed: * net.ipv4.conf.all.accept_redirects * net.ipv6.conf.all.accept_redirects"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options source-validation",
  "cmd": "set firewall global-options source-validation",
  "desc": "Firewall — [strict | loose | disable] Set the IPv4 source validation mode. The following sysctl parameter will be changed: * net.ipv4.conf.all.rp_filter"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options twa-hazards-protection",
  "cmd": "set firewall global-options twa-hazards-protection",
  "desc": "Firewall — [enable | disable] Enable or disable VyOS 1337 conformance. The following sysctl parameter will be changed: * net.ipv4.tcp_rfc1337"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options state-policy established action",
  "cmd": "set firewall global-options state-policy established action",
  "desc": "Firewall — [accept | drop | reject]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options state-policy established log-level",
  "cmd": "set firewall global-options state-policy established log-level",
  "desc": "Firewall — [emerg | alert | crit | err | warn | notice | info | debug] Set the global setting for an established connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options state-policy invalid action",
  "cmd": "set firewall global-options state-policy invalid action",
  "desc": "Firewall — [accept | drop | reject]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options state-policy invalid log-level",
  "cmd": "set firewall global-options state-policy invalid log-level",
  "desc": "Firewall — [emerg | alert | crit | err | warn | notice | info | debug] Set the global setting for invalid packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options state-policy related action",
  "cmd": "set firewall global-options state-policy related action",
  "desc": "Firewall — [accept | drop | reject]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall global-options state-policy related log-level",
  "cmd": "set firewall global-options state-policy related log-level",
  "desc": "Firewall — [emerg | alert | crit | err | warn | notice | info | debug] Set the global setting for related connections."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall flowtable <flow_table_name> offload",
  "cmd": "set firewall flowtable <flow_table_name> offload",
  "desc": "Firewall — <hardware | software> Specify the offload type the flowtable uses: hardware or software."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall [ipv4 | ipv6] forward filter rule <1-999999>",
  "cmd": "set firewall [ipv4 | ipv6] forward filter rule <1-999999>",
  "desc": "ACL — action offload Create a firewall rule in the forward chain with the action set to offload."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall zone <Destination Zone> from <Source Zone>",
  "cmd": "set firewall zone <Destination Zone> from <Source Zone>",
  "desc": "Firewall — firewall name <ipv4-rule-set-name>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall zone <Destination Zone> default-firewall name",
  "cmd": "set firewall zone <Destination Zone> default-firewall name",
  "desc": "Firewall — <ipv4-rule-set-name>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall zone <Destination Zone> default-firewall ipv6-name",
  "cmd": "set firewall zone <Destination Zone> default-firewall ipv6-name",
  "desc": "Firewall — <ipv6-rule-set-name>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999> action",
  "cmd": "set firewall ipv4 forward filter rule <1-999999> action",
  "desc": "ACL — [accept | continue | drop | jump | queue | reject | return | synproxy]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999> action",
  "cmd": "set firewall ipv4 input filter rule <1-999999> action",
  "desc": "ACL — [accept | continue | drop | jump | queue | reject | return | synproxy]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999> action",
  "cmd": "set firewall ipv4 output filter rule <1-999999> action",
  "desc": "ACL — [accept | continue | drop | jump | queue | reject | return]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999> action",
  "cmd": "set firewall ipv4 name <name> rule <1-999999> action",
  "desc": "Firewall — [accept | continue | drop | jump | queue | reject | return] This required setting defines the action of the current rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter rule <1-999999>",
  "cmd": "set firewall ipv4 forward filter rule <1-999999>",
  "desc": "ACL — jump-target <text>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter rule <1-999999>",
  "cmd": "set firewall ipv4 input filter rule <1-999999>",
  "desc": "ACL — jump-target <text>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter rule <1-999999>",
  "cmd": "set firewall ipv4 output filter rule <1-999999>",
  "desc": "ACL — jump-target <text>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> rule <1-999999>",
  "cmd": "set firewall ipv4 name <name> rule <1-999999>",
  "desc": "Firewall — jump-target <text> Use this command only when the action is set to jump. Specify the jump target."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 forward filter default-action",
  "cmd": "set firewall ipv4 forward filter default-action",
  "desc": "ACL — [accept | drop]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 input filter default-action",
  "cmd": "set firewall ipv4 input filter default-action",
  "desc": "ACL — [accept | drop]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output filter default-action",
  "cmd": "set firewall ipv4 output filter default-action",
  "desc": "ACL — [accept | drop]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 name <name> default-action",
  "cmd": "set firewall ipv4 name <name> default-action",
  "desc": "Firewall — [accept | drop | jump | queue | reject | return] This command sets the default action of the rule-set if a packet does not match the criteria of any rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv4 prerouting raw rule <1-999999>",
  "cmd": "set firewall ipv4 prerouting raw rule <1-999999>",
  "desc": "Firewall — set dscp <0-63>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 output [filter | raw] rule <1-999999>",
  "cmd": "set firewall ipv4 output [filter | raw] rule <1-999999>",
  "desc": "ACL — set dscp <0-63> Set a specific value of Differentiated Services Codepoint (DSCP)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv4 [input | forward] filter rule <1-999999>",
  "cmd": "set firewall ipv4 [input | forward] filter rule <1-999999>",
  "desc": "ACL — action synproxy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall ipv4 [forward | input | output]",
  "cmd": "show firewall ipv4 [forward | input | output]",
  "desc": "Firewall — filter rule <1-999999>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999> action",
  "cmd": "set firewall ipv6 forward filter rule <1-999999> action",
  "desc": "ACL — [accept | continue | drop | jump | queue | reject | return | synproxy]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999> action",
  "cmd": "set firewall ipv6 input filter rule <1-999999> action",
  "desc": "ACL — [accept | continue | drop | jump | queue | reject | return | synproxy]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999> action",
  "cmd": "set firewall ipv6 output filter rule <1-999999> action",
  "desc": "ACL — [accept | continue | drop | jump | queue | reject | return]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999> action",
  "cmd": "set firewall ipv6 name <name> rule <1-999999> action",
  "desc": "Firewall — [accept | continue | drop | jump | queue | reject | return] This required setting defines the action of the current rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter rule <1-999999>",
  "cmd": "set firewall ipv6 forward filter rule <1-999999>",
  "desc": "ACL — jump-target <text>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter rule <1-999999>",
  "cmd": "set firewall ipv6 input filter rule <1-999999>",
  "desc": "ACL — jump-target <text>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter rule <1-999999>",
  "cmd": "set firewall ipv6 output filter rule <1-999999>",
  "desc": "ACL — jump-target <text>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> rule <1-999999>",
  "cmd": "set firewall ipv6 name <name> rule <1-999999>",
  "desc": "Firewall — jump-target <text> Use this command only when action is set to jump. Specify the jump target."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 forward filter default-action",
  "cmd": "set firewall ipv6 forward filter default-action",
  "desc": "ACL — [accept | drop]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 input filter default-action",
  "cmd": "set firewall ipv6 input filter default-action",
  "desc": "ACL — [accept | drop]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output filter default-action",
  "cmd": "set firewall ipv6 output filter default-action",
  "desc": "ACL — [accept | drop]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 name <name> default-action",
  "cmd": "set firewall ipv6 name <name> default-action",
  "desc": "Firewall — [accept | drop | jump | queue | reject | return] Set the default action of the rule-set if a packet does not match any rule criteria."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall ipv6 prerouting raw rule <1-999999>",
  "cmd": "set firewall ipv6 prerouting raw rule <1-999999>",
  "desc": "Firewall — set dscp <0-63>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 output [filter | raw] rule <1-999999>",
  "cmd": "set firewall ipv6 output [filter | raw] rule <1-999999>",
  "desc": "ACL — set dscp <0-63> Set a specific value of Differentiated Services Codepoint (DSCP)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall ipv6 [input | forward] filter rule <1-999999>",
  "cmd": "set firewall ipv6 [input | forward] filter rule <1-999999>",
  "desc": "ACL — action synproxy"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "show firewall ipv6 [forward | input | output]",
  "cmd": "show firewall ipv6 [forward | input | output]",
  "desc": "Firewall — filter rule <1-999999>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999> action",
  "cmd": "set firewall bridge forward filter rule <1-999999> action",
  "desc": "ACL — [accept | continue | drop | jump | queue | return]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999> action",
  "cmd": "set firewall bridge input filter rule <1-999999> action",
  "desc": "ACL — [accept | continue | drop | jump | queue | return]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999> action",
  "cmd": "set firewall bridge output filter rule <1-999999> action",
  "desc": "ACL — [accept | continue | drop | jump | queue | return]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999> action",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> action",
  "desc": "ACL — [accept | continue | drop | jump | notrack | queue | return]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999> action",
  "cmd": "set firewall bridge name <name> rule <1-999999> action",
  "desc": "Firewall — [accept | continue | drop | jump | queue | return] This required setting defines the action of the current rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999>",
  "cmd": "set firewall bridge forward filter rule <1-999999>",
  "desc": "ACL — jump-target <text>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999>",
  "cmd": "set firewall bridge input filter rule <1-999999>",
  "desc": "ACL — jump-target <text>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999>",
  "cmd": "set firewall bridge output filter rule <1-999999>",
  "desc": "ACL — jump-target <text>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999>",
  "cmd": "set firewall bridge prerouting filter rule <1-999999>",
  "desc": "ACL — jump-target <text>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999>",
  "cmd": "set firewall bridge name <name> rule <1-999999>",
  "desc": "Firewall — jump-target <text> If action is set to queue, use next command to specify the queue target."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter default-action",
  "cmd": "set firewall bridge forward filter default-action",
  "desc": "ACL — [accept | drop]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter default-action",
  "cmd": "set firewall bridge input filter default-action",
  "desc": "ACL — [accept | drop]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter default-action",
  "cmd": "set firewall bridge output filter default-action",
  "desc": "ACL — [accept | drop]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter default-action",
  "cmd": "set firewall bridge prerouting filter default-action",
  "desc": "ACL — [accept | drop]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> default-action",
  "cmd": "set firewall bridge name <name> default-action",
  "desc": "Firewall — [accept | continue | drop | jump | reject | return] This sets the default action of the rule-set if a packet does not match any of the rules in that chain."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge forward filter rule <1-999999> ethernet-type",
  "cmd": "set firewall bridge forward filter rule <1-999999> ethernet-type",
  "desc": "ACL — [802.1q | 802.1ad | arp | ipv4 | ipv6]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge input filter rule <1-999999> ethernet-type",
  "cmd": "set firewall bridge input filter rule <1-999999> ethernet-type",
  "desc": "ACL — [802.1q | 802.1ad | arp | ipv4 | ipv6]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge output filter rule <1-999999> ethernet-type",
  "cmd": "set firewall bridge output filter rule <1-999999> ethernet-type",
  "desc": "ACL — [802.1q | 802.1ad | arp | ipv4 | ipv6]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge prerouting filter rule <1-999999> ethernet-type",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> ethernet-type",
  "desc": "ACL — [802.1q | 802.1ad | arp | ipv4 | ipv6]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Firewall",
  "title": "set firewall bridge name <name> rule <1-999999> ethernet-type",
  "cmd": "set firewall bridge name <name> rule <1-999999> ethernet-type",
  "desc": "Firewall — [802.1q | 802.1ad | arp | ipv4 | ipv6] Match based on the Ethernet type of the packet."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge forward filter rule <1-999999> vlan",
  "cmd": "set firewall bridge forward filter rule <1-999999> vlan",
  "desc": "VLAN — ethernet-type [802.1q | 802.1ad | arp | ipv4 | ipv6]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge input filter rule <1-999999> vlan",
  "cmd": "set firewall bridge input filter rule <1-999999> vlan",
  "desc": "VLAN — ethernet-type [802.1q | 802.1ad | arp | ipv4 | ipv6]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge output filter rule <1-999999> vlan",
  "cmd": "set firewall bridge output filter rule <1-999999> vlan",
  "desc": "VLAN — ethernet-type [802.1q | 802.1ad | arp | ipv4 | ipv6]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge prerouting filter rule <1-999999> vlan",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> vlan",
  "desc": "VLAN — ethernet-type [802.1q | 802.1ad | arp | ipv4 | ipv6]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge name <name> rule <1-999999> vlan",
  "cmd": "set firewall bridge name <name> rule <1-999999> vlan",
  "desc": "VLAN — ethernet-type [802.1q | 802.1ad | arp | ipv4 | ipv6] Match based on the Ethernet type of the packet when it is VLAN tagged."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge forward filter rule <1-999999> vlan id",
  "cmd": "set firewall bridge forward filter rule <1-999999> vlan id",
  "desc": "VLAN — <0-4096>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge input filter rule <1-999999> vlan id",
  "cmd": "set firewall bridge input filter rule <1-999999> vlan id",
  "desc": "VLAN — <0-4096>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge output filter rule <1-999999> vlan id",
  "cmd": "set firewall bridge output filter rule <1-999999> vlan id",
  "desc": "VLAN — <0-4096>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge prerouting filter rule <1-999999> vlan id",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> vlan id",
  "desc": "VLAN — <0-4096>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge name <name> rule <1-999999> vlan id",
  "cmd": "set firewall bridge name <name> rule <1-999999> vlan id",
  "desc": "VLAN — <0-4096> Match based on VLAN identifier. Range is also supported."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge forward filter rule <1-999999> vlan priority",
  "cmd": "set firewall bridge forward filter rule <1-999999> vlan priority",
  "desc": "VLAN — <0-7>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge input filter rule <1-999999> vlan priority",
  "cmd": "set firewall bridge input filter rule <1-999999> vlan priority",
  "desc": "VLAN — <0-7>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge output filter rule <1-999999> vlan priority",
  "cmd": "set firewall bridge output filter rule <1-999999> vlan priority",
  "desc": "VLAN — <0-7>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge prerouting filter rule <1-999999> vlan priority",
  "cmd": "set firewall bridge prerouting filter rule <1-999999> vlan priority",
  "desc": "VLAN — <0-7>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set firewall bridge name <name> rule <1-999999> vlan priority",
  "cmd": "set firewall bridge name <name> rule <1-999999> vlan priority",
  "desc": "VLAN — <0-7> Match based on VLAN priority (Priority Code Point - PCP). Range is also supported."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge [prerouting | forward | output] filter",
  "cmd": "set firewall bridge [prerouting | forward | output] filter",
  "desc": "ACL — rule <1-999999> set dscp <0-63> Set a specific value of Differentiated Services Codepoint (DSCP)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set firewall bridge [forward | output] filter",
  "cmd": "set firewall bridge [forward | output] filter",
  "desc": "ACL — rule <1-999999> set connection-mark <0-2147483647> Set connection mark value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> health check interval <interval>",
  "cmd": "set container name <name> health check interval <interval>",
  "desc": "System — Override the default health-check interval. For example: 60"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> health check timeout <timeout>",
  "cmd": "set container name <name> health check timeout <timeout>",
  "desc": "System — Override the default health-check timeout. For example: 10"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container name <name> health check retries <retries>",
  "cmd": "set container name <name> health check retries <retries>",
  "desc": "System — Number of health check retries before container is considered unhealthy. For example: 1"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set container network <name> vrf <nme>",
  "cmd": "set container network <name> vrf <nme>",
  "desc": "System — Bind container network to a given VRF instance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set system syslog remote <address> tls auth-mode <anon | fingerprint",
  "cmd": "set system syslog remote <address> tls auth-mode <anon | fingerprint",
  "desc": "Logging — | certvalid | name> **Configure the authentication mode.** The authentication mode defines how the syslog client verifies the syslog server's identity."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show log image <name>",
  "cmd": "show log image <name>",
  "desc": "Troubleshooting — [all | authorization | directory | file <file name> | tail <lines>] **Display logs for a specific image on the console.** Available log categories: .."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system flow-accounting netflow timeout expiry-interval",
  "cmd": "set system flow-accounting netflow timeout expiry-interval",
  "desc": "System — <interval> Specifies the interval at which Netflow data will be sent to a collector."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login user <name> authentication plaintext-password",
  "cmd": "set system login user <name> authentication plaintext-password",
  "desc": "System — <password> **Configure a password for a system user.** Enter the password in plaintext."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login user <name> authentication encrypted-password",
  "cmd": "set system login user <name> authentication encrypted-password",
  "desc": "System — <password> **Configure a pre-encrypted password for a system user.** Enter the password in its hashed format."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system login user <username> authentication public-keys",
  "cmd": "set system login user <username> authentication public-keys",
  "desc": "System — <identifier> key <key> **Configure the SSH public key for the user account.** * <identifier>: A unique label that identifies this specific key entry."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate system login username <username> otp-key hotp-time",
  "cmd": "generate system login username <username> otp-key hotp-time",
  "desc": "System — rate-limit <1-10> rate-time <15-600> window-size <1-21>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "sh system login authentication user <username> otp",
  "cmd": "sh system login authentication user <username> otp",
  "desc": "System — <full | key-b32 | qrcode | uri>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system frr descriptors <numer>",
  "cmd": "set system frr descriptors <numer>",
  "desc": "System — This allows the operator to control the number of open file descriptors each daemon is allowed to start with."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces <dummy | ethernet | bonding | bridge | pppoe>",
  "cmd": "set interfaces <dummy | ethernet | bonding | bridge | pppoe>",
  "desc": "Interfaces — <interface> vrf <name> Assign interface identified by <interface> to VRF named <name>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set vrf name <name> protocols bgp address-family",
  "cmd": "set vrf name <name> protocols bgp address-family",
  "desc": "BGP — <ipv4-unicast|ipv6-unicast> rd vpn export <asn:nn|address:nn> Specifies the route distinguisher to be added to a route exported from the current unicast VRF to VPN."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set vrf name <name> protocols bgp interface <interface> mpls",
  "cmd": "set vrf name <name> protocols bgp interface <interface> mpls",
  "desc": "BGP — forwarding It is possible to permit BGP install VPN prefixes without transport labels."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy drop-tail <policy-name> queue-limit",
  "cmd": "set qos policy drop-tail <policy-name> queue-limit",
  "desc": "QoS — <number-of-packets> Use this command to configure a drop-tail policy (PFIFO). Choose a unique name for this policy and the size of the queue by setting the number of packets it can contain (maximum 4294967295)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy fq-codel <policy-name> queue-limit",
  "cmd": "set qos policy fq-codel <policy-name> queue-limit",
  "desc": "QoS — <number-of-packets> Use this command to configure an fq-codel policy, set its name, and define a hard limit on the real queue size."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy limiter <policy-name> class <class ID> match",
  "cmd": "set qos policy limiter <policy-name> class <class ID> match",
  "desc": "QoS — <match-name> description <description> Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090), a class matching rule name and its description."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy limiter <policy-name> class <class-ID> bandwidth",
  "cmd": "set qos policy limiter <policy-name> class <class-ID> bandwidth",
  "desc": "QoS — <rate> Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090) and the maximum allowed bandwidth for this class."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy limiter <policy-name> class <class-ID> burst",
  "cmd": "set qos policy limiter <policy-name> class <class-ID> burst",
  "desc": "QoS — <burst-size> Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090) and the burst size in bytes for this class (default: 15)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy limiter <policy-name> class <class ID> priority",
  "cmd": "set qos policy limiter <policy-name> class <class ID> priority",
  "desc": "QoS — <value> Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090), and the priority (0-20, default 20) in which the rule is evaluated (the lower the number, the higher the priority…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy network-emulator <policy-name> delay",
  "cmd": "set qos policy network-emulator <policy-name> delay",
  "desc": "QoS — <delay> Use this command to configure a Network Emulator policy defining its name and the fixed amount of time you want to add to all packet going out of the interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy network-emulator <policy-name> corruption",
  "cmd": "set qos policy network-emulator <policy-name> corruption",
  "desc": "QoS — <percent> Use this command to emulate noise in a Network Emulator policy. Set the policy name and the percentage of corrupted packets you want."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy network-emulator <policy-name> loss",
  "cmd": "set qos policy network-emulator <policy-name> loss",
  "desc": "QoS — <percent> Use this command to emulate packet-loss conditions in a Network Emulator policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set traffic-policy network-emulator <policy-name> reordering",
  "cmd": "set traffic-policy network-emulator <policy-name> reordering",
  "desc": "Routing — <percent> Use this command to emulate packet-reordering conditions in a Network Emulator policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set traffic-policy network-emulator <policy-name> queue-limit",
  "cmd": "set traffic-policy network-emulator <policy-name> queue-limit",
  "desc": "Routing — <limit> Use this command to define the length of the queue of your Network Emulator policy."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy priority-queue <policy-name> class <class-ID>",
  "cmd": "set qos policy priority-queue <policy-name> class <class-ID>",
  "desc": "QoS — queue-limit <limit> Use this command to configure a Priority Queue policy, set its name, set a class with a priority from 1 to 7 and define a hard limit on the real queue size."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy random-detect <policy-name> precedence",
  "cmd": "set qos policy random-detect <policy-name> precedence",
  "desc": "QoS — <IP-precedence-value> average-packet <bytes> Use this command to configure a Random-Detect policy and set its name, then state the IP Precedence for the virtual queue you are configuring and what the size of its average…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy round-robin <policy name> class",
  "cmd": "set qos policy round-robin <policy name> class",
  "desc": "QoS — <class-ID> quantum <packets> Use this command to configure a Round-Robin policy, set its name, set a class ID, and the quantum for that class."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy shaper <policy-name> class <class-ID> bandwidth",
  "cmd": "set qos policy shaper <policy-name> class <class-ID> bandwidth",
  "desc": "QoS — <rate> Use this command to configure a Shaper policy, set its name, define a class and set the guaranteed traffic you want to allocate to that class."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy shaper <policy-name> class <class-ID> burst",
  "cmd": "set qos policy shaper <policy-name> class <class-ID> burst",
  "desc": "QoS — <bytes> Use this command to configure a Shaper policy, set its name, define a class and set the size of the tocken bucket_ in bytes, which will be available to be sent at ceiling speed (default: 15Kb)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy shaper <policy-name> class <class-ID> ceiling",
  "cmd": "set qos policy shaper <policy-name> class <class-ID> ceiling",
  "desc": "QoS — <bandwidth> Use this command to configure a Shaper policy, set its name, define a class and set the maximum speed possible for this class."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "QoS",
  "title": "set qos policy shaper <policy-name> class <class-ID> priority",
  "cmd": "set qos policy shaper <policy-name> class <class-ID> priority",
  "desc": "QoS — <0-7> Use this command to configure a Shaper policy, set its name, define a class and set the priority for usage of available bandwidth once guarantees have been met."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server authentication local-users username",
  "cmd": "set service pppoe-server authentication local-users username",
  "desc": "System — <name> password <password> Create <user> for local authentication on this system."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server client-ip-pool <POOL-NAME>",
  "cmd": "set service pppoe-server client-ip-pool <POOL-NAME>",
  "desc": "System — range <x.x.x.x-x.x.x.x | x.x.x.x/x> Use this command to define the first IP address of a pool of addresses to be given to pppoe clients."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius",
  "cmd": "set service pppoe-server authentication radius",
  "desc": "AAA — server <server> key <secret> Configure RADIUS <server> and its required shared <secret> for communicating with the RADIUS server."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "AAA",
  "title": "set service pppoe-server authentication radius dynamic-author",
  "cmd": "set service pppoe-server authentication radius dynamic-author",
  "desc": "AAA — key <secret> Secret for Dynamic Authorization Extension server (DM/CoA)"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server pado-delay <number-of-ms>",
  "cmd": "set service pppoe-server pado-delay <number-of-ms>",
  "desc": "System — sessions <number-of-sessions> Use this command to enable the delay of PADO (PPPoE Active Discovery Offer) packets, which can be used as a session balancing mechanism with other PPPoE servers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server ppp-options",
  "cmd": "set service pppoe-server ppp-options",
  "desc": "System — ipv6 <require | prefer | allow | deny> Specifies IPv6 negotiation preference. * **require** - Require IPv6 negotiation * **prefer** - Ask client for IPv6 negotiation, do not fail if it rejects * **allow** - Negotiate IP…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server client-ipv6-pool <IPv6-POOL-NAME>",
  "cmd": "set service pppoe-server client-ipv6-pool <IPv6-POOL-NAME>",
  "desc": "System — prefix <address> mask <number-of-bits> Use this comand to set the IPv6 address pool from which an PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service pppoe-server ppp-options ipv6-interface-id",
  "cmd": "set service pppoe-server ppp-options ipv6-interface-id",
  "desc": "Interfaces — <random | x:x:x:x> Specifies fixed or random interface identifier for IPv6. By default is fixed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server authentication local-users",
  "cmd": "set service pppoe-server authentication local-users",
  "desc": "System — username <user> disable Disable <user> account."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set service pppoe-server authentication protocols",
  "cmd": "set service pppoe-server authentication protocols",
  "desc": "Routing — <pap | chap | mschap | mschap-v2> Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service pppoe-server ppp-options ipv4",
  "cmd": "set service pppoe-server ppp-options ipv4",
  "desc": "System — <require | prefer | allow | deny> Specifies IPv4 negotiation preference. * **require** - Require IPv4 negotiation * **prefer** - Ask client for IPv4 negotiation, do not fail if it rejects * **allow** - Negotiate IPv4 on…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service config-sync secondary",
  "cmd": "set service config-sync secondary",
  "desc": "System — <address|key|timeout|port> Specify the address, API key, timeout and port of the secondary router."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding dnssec",
  "cmd": "set service dns forwarding dnssec",
  "desc": "System — <off | process-no-validate | process | log-fail | validate> The PowerDNS recursor has 5 different levels of DNSSEC processing, which can be set with the dnssec setting."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding authoritative-domain <domain-name> records <type>",
  "cmd": "set service dns forwarding authoritative-domain <domain-name> records <type>",
  "desc": "System — <name> disable Disable specific record without deleting it from configuration."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service dns forwarding authoritative-domain <domain-name> records",
  "cmd": "set service dns forwarding authoritative-domain <domain-name> records",
  "desc": "System — a <name> address <x.x.x.x> Set an A (Address) record. Supports @ and any keywords."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> option",
  "cmd": "set service dhcp-server shared-network-name <name> option",
  "desc": "DHCP — vendor-option <option-name> This configuration parameter lets you specify a vendor-option for the entire shared network definition."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> subnet <subnet>",
  "cmd": "set service dhcp-server shared-network-name <name> subnet <subnet>",
  "desc": "DHCP — subnet-id <id> This configuration parameter is required and must be unique to each subnet."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update send-updates [ enable",
  "cmd": "set service dhcp-server dynamic-dns-update send-updates [ enable",
  "desc": "DHCP — | disable ] If set to enable on global level, updates for all scopes will be enabled, except if explicitly set to disable on the scope level."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update override-no-update [ enable",
  "cmd": "set service dhcp-server dynamic-dns-update override-no-update [ enable",
  "desc": "DHCP — | disable ] VyOS will ignore client request not to update DNS records and send DDNS update requests regardless."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update override-client-update [ enable",
  "cmd": "set service dhcp-server dynamic-dns-update override-client-update [ enable",
  "desc": "DHCP — | disable ] VyOS will override client DDNS request settings and always update both forward and reverse DNS records."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update update-on-renew [ enable",
  "cmd": "set service dhcp-server dynamic-dns-update update-on-renew [ enable",
  "desc": "DHCP — | disable ] Issue DDNS update requests on DHCP lease renew. In busy networks this may generate a lot of traffic."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update conflict-resolution [ enable",
  "cmd": "set service dhcp-server dynamic-dns-update conflict-resolution [ enable",
  "desc": "DHCP — | disable ] Use RFC-4703 conflict resolution. This algorithm helps in situation when multiple clients reserve same IP addresses or advertise identical hostnames."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update replace-client-name [ never",
  "cmd": "set service dhcp-server dynamic-dns-update replace-client-name [ never",
  "desc": "DHCP — | always | when-present | when-not-present ] * **never**: use the name sent by the client."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update hostname-char-set",
  "cmd": "set service dhcp-server dynamic-dns-update hostname-char-set",
  "desc": "DHCP — <character string> Characters, that are considered invalid in the client name. They will be replaced with hostname-char-replacement string."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update hostname-char-replacement",
  "cmd": "set service dhcp-server dynamic-dns-update hostname-char-replacement",
  "desc": "DHCP — <character string> Replacement string for the invalid characters defined by hostname-char-set."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update tsig-key <key-name>",
  "cmd": "set service dhcp-server dynamic-dns-update tsig-key <key-name>",
  "desc": "DHCP — algorithm <algorithm> Sets the algorithm for the TSIG key. Supported algorithms are hmac-md5, hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384, hmac-sha512"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server dynamic-dns-update [forward|reverse]-domain",
  "cmd": "set service dhcp-server dynamic-dns-update [forward|reverse]-domain",
  "desc": "DHCP — <domain-name> key-name <tsig-key-name> TSIG key used for the domain."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server high-availability mode [active-active",
  "cmd": "set service dhcp-server high-availability mode [active-active",
  "desc": "DHCP — | active-passive] Define operation mode of High Availability feature. Default value if command is not specified is active-active"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server high-availability status <primary",
  "cmd": "set service dhcp-server high-availability status <primary",
  "desc": "DHCP — | secondary> The primary and secondary statements determines whether the server is primary or secondary."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <name> subnet",
  "cmd": "set service dhcp-server shared-network-name <name> subnet",
  "desc": "DHCP — <subnet> static-mapping <description> mac <address> Create a new DHCP static mapping named <description> which is valid for the host identified by its MAC <address>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server client-class <name> relay-agent-information circuit-id",
  "cmd": "set service dhcp-server client-class <name> relay-agent-information circuit-id",
  "desc": "DHCP — <value> Create a new client class (if not already defined) and set it to match on the \"Circuit ID\" part of the Option 82 field in the DHCP request."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server client-class <name> relay-agent-information remote-id",
  "cmd": "set service dhcp-server client-class <name> relay-agent-information remote-id",
  "desc": "DHCP — <value> Create a new client class (if not already defined) and set it to match on the \"Remote ID\" part of the Option 82 field in the DHCP request."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-server shared-network-name <subnet-name> subnet",
  "cmd": "set service dhcp-server shared-network-name <subnet-name> subnet",
  "desc": "DHCP — <CIDR> client-class <class-name> Applies the Client Class with the name <class-name> to the subnet <subnet-name>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server shared-network-name <name> subnet <subnet>",
  "cmd": "set service dhcpv6-server shared-network-name <name> subnet <subnet>",
  "desc": "DHCP — subnet-id <id> This configuration parameter is required and must be unique to each subnet."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-server shared-network-name <name> subnet",
  "cmd": "set service dhcpv6-server shared-network-name <name> subnet",
  "desc": "DHCP — <prefix> lease-time {default | maximum | minimum} The default lease time for DHCPv6 leases is 24 hours."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service console-server device <device> speed",
  "cmd": "set service console-server device <device> speed",
  "desc": "System — [ 300 | 1200 | 2400 | 4800 | 9600 | 19200 | 38400 | 57600 | 115200 ] .. note:: USB to serial converters will handle most of their work in software so you should be carefull with the selected baudrate as some times they…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcp-relay relay-options relay-agents-packets",
  "cmd": "set service dhcp-relay relay-options relay-agents-packets",
  "desc": "DHCP — <append | discard | forward | replace> Four policies for reforwarding DHCP packets exist: * **append:** The relay agent is allowed to append its own relay information to a received DHCP packet, disregarding relay inform…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "DHCP",
  "title": "set service dhcpv6-relay upstream-interface <interface>",
  "cmd": "set service dhcpv6-relay upstream-interface <interface>",
  "desc": "DHCP — address <server> Specifies an upstream network <interface> from which replies from <server> and other relay agents will be accepted."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server client-ipv6-pool <IPv6-POOL-NAME> prefix <address>",
  "cmd": "set service ipoe-server client-ipv6-pool <IPv6-POOL-NAME> prefix <address>",
  "desc": "System — mask <number-of-bits> Use this comand to set the IPv6 address pool from which an IPoE client will get an IPv6 prefix of your defined length (mask) to terminate the IPoE endpoint at their side."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set service ipoe-server client-ipv6-pool <IPv6-POOL-NAME> delegate <address>",
  "cmd": "set service ipoe-server client-ipv6-pool <IPv6-POOL-NAME> delegate <address>",
  "desc": "System — delegation-prefix <number-of-bits> Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on IPoE."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set service ipoe-server authentication interface <interface> mac <MAC> vlan",
  "cmd": "set service ipoe-server authentication interface <interface> mac <MAC> vlan",
  "desc": "VLAN — <vlan-id> VLAN monitor for automatic creation of VLAN interfaces for specific user on specific <interface>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set service ipoe-server authentication interface <interface> mac <MAC> rate-limit",
  "cmd": "set service ipoe-server authentication interface <interface> mac <MAC> rate-limit",
  "desc": "Interfaces — download <bandwidth> Download bandwidth limit in kbit/s for user on interface <interface>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp neighbor <address> ttl-security",
  "cmd": "set protocols mpls ldp neighbor <address> ttl-security",
  "desc": "BGP — <disable | hop count> Use this command to enable, disable, or specify hop count for TTL security for LDP peers."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp allocation ipv4 access-list",
  "cmd": "set protocols mpls ldp allocation ipv4 access-list",
  "desc": "MPLS — <access list number>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "MPLS",
  "title": "set protocols mpls ldp allocation ipv6 access-list6",
  "cmd": "set protocols mpls ldp allocation ipv6 access-list6",
  "desc": "MPLS — <access list number> Use this command if you would like to control the local FEC allocations for LDP."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp targeted-neighbor ipv4 hello-holdtime",
  "cmd": "set protocols mpls ldp targeted-neighbor ipv4 hello-holdtime",
  "desc": "BGP — <seconds>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp targeted-neighbor ipv4 hello-interval",
  "cmd": "set protocols mpls ldp targeted-neighbor ipv4 hello-interval",
  "desc": "BGP — <seconds>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp targeted-neighbor ipv6 hello-holdtime",
  "cmd": "set protocols mpls ldp targeted-neighbor ipv6 hello-holdtime",
  "desc": "BGP — <seconds>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols mpls ldp targeted-neighbor ipv6 hello-interval",
  "cmd": "set protocols mpls ldp targeted-neighbor ipv6 hello-interval",
  "desc": "BGP — <seconds> Use these commands if you would like to set the discovery hello and hold time parameters for the targeted LDP neighbors."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim interface <interface> igmp",
  "cmd": "set protocols pim interface <interface> igmp",
  "desc": "Multicast — join <multicast-address> source-address <IP-address> Use this command to allow the selected interface to join a multicast group defining the multicast address you want to join and the source IP address too."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis default-information originate <ipv4|ipv6>",
  "cmd": "set protocols isis default-information originate <ipv4|ipv6>",
  "desc": "ISIS — level-1 This command will generate a default-route in L1 database."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> circuit-type",
  "cmd": "set protocols isis interface <interface> circuit-type",
  "desc": "ISIS — <level-1|level-1-2|level-2-only> This command specifies circuit type for interface: * **level-1** - Level-1 only adjacencies are formed."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> hello-interval",
  "cmd": "set protocols isis interface <interface> hello-interval",
  "desc": "ISIS — <seconds> This command sets hello interval in seconds on a given interface. The range is 1 to 600."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> hello-multiplier",
  "cmd": "set protocols isis interface <interface> hello-multiplier",
  "desc": "ISIS — <seconds> This command sets multiplier for hello holding time on a given interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> network",
  "cmd": "set protocols isis interface <interface> network",
  "desc": "ISIS — point-to-point This command specifies network type to Point-to-Point. The default network type is broadcast."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> password",
  "cmd": "set protocols isis interface <interface> password",
  "desc": "ISIS — plaintext-password <text> This command configures the authentication password for the interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> psnp-interval",
  "cmd": "set protocols isis interface <interface> psnp-interval",
  "desc": "ISIS — <number> This command sets PSNP interval in seconds. The interval range is 0 to 127."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis interface <interface> ldp-sync holddown",
  "cmd": "set protocols isis interface <interface> ldp-sync holddown",
  "desc": "ISIS — <seconds> This command will change the hold down value for IGP-LDP synchronization during convergence/interface flap events, but for this interface only."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis redistribute ipv4 <route source>",
  "cmd": "set protocols isis redistribute ipv4 <route source>",
  "desc": "ISIS — <level-1|level-2> metric <number> This command specifies metric for redistributed routes from the given route source."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis spf-delay-ietf init-delay",
  "cmd": "set protocols isis spf-delay-ietf init-delay",
  "desc": "ISIS — <milliseconds>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis spf-delay-ietf long-delay",
  "cmd": "set protocols isis spf-delay-ietf long-delay",
  "desc": "ISIS — <milliseconds>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis spf-delay-ietf short-delay",
  "cmd": "set protocols isis spf-delay-ietf short-delay",
  "desc": "ISIS — <milliseconds>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis spf-delay-ietf time-to-learn",
  "cmd": "set protocols isis spf-delay-ietf time-to-learn",
  "desc": "ISIS — <milliseconds> This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis fast-reroute lfa remote prefix-list <name>",
  "cmd": "set protocols isis fast-reroute lfa remote prefix-list <name>",
  "desc": "ISIS — <level-1|level-2> This command enables IP fast re-routing that is part of 5286. Specifically this is a prefix list which references a prefix in which will select eligible PQ nodes for remote LFA backups."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis fast-reroute lfa local load-sharing disable",
  "cmd": "set protocols isis fast-reroute lfa local load-sharing disable",
  "desc": "ISIS — <level-1|level-2> This command disables the load sharing across multiple LFA backups."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis fast-reroute lfa local tiebreaker",
  "cmd": "set protocols isis fast-reroute lfa local tiebreaker",
  "desc": "ISIS — <downstream|lowest-backup-metric|node-protecting> index <number> <level-1|level-2> This command will configure a tie-breaker for multiple local LFA backups."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis fast-reroute lfa local priority-limit",
  "cmd": "set protocols isis fast-reroute lfa local priority-limit",
  "desc": "ISIS — <medium|high|critical> <level-1|level-2> This command will limit LFA backup computation up to the specified prefix priority."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain <name> interface <interface>",
  "cmd": "set protocols openfabric domain <name> interface <interface>",
  "desc": "ISIS — address-family <ipv4|ipv6> This command enables OpenFabric instance with <NAME> on this interface, and allows for adjacency to occur for address family (IPv4 or IPv6 or both)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric domain-password <plaintext-password|md5>",
  "cmd": "set protocols openfabric domain-password <plaintext-password|md5>",
  "desc": "ISIS — <password> This command configures the authentication password for a routing domain, as clear text or md5 one."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols openfabric interface <interface> hello-interval",
  "cmd": "set protocols openfabric interface <interface> hello-interval",
  "desc": "ISIS — <seconds> This command sets hello interval in seconds on a given interface. The range is 1 to 600."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf default-information originate [always]",
  "cmd": "set protocols ospf default-information originate [always]",
  "desc": "OSPF — [metric <number>] [metric-type <1|2>] [route-map <name>] Originate an AS-External (type-5) LSA describing a default route into all external-routing capable areas, of the specified metric and metric type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf distance ospf <external|inter-area|intra-area>",
  "cmd": "set protocols ospf distance ospf <external|inter-area|intra-area>",
  "desc": "OSPF — <distance> This command change distance value of OSPF. The arguments are the distance values for external routes, inter-area routes and intra-area routes respectively."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf max-metric router-lsa",
  "cmd": "set protocols ospf max-metric router-lsa",
  "desc": "OSPF — <administrative|on-shutdown <seconds>|on-startup <seconds>> This enables 3137 support, where the OSPF process describes its transit links in its router-LSA as having infinite distance so that other routers will avoid ca…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf parameters abr-type",
  "cmd": "set protocols ospf parameters abr-type",
  "desc": "OSPF — <cisco|ibm|shortcut|standard> This command selects ABR model. OSPF router supports four ABR models: **cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas on…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf timers throttle spf",
  "cmd": "set protocols ospf timers throttle spf",
  "desc": "OSPF — <delay|initial-holdtime|max-holdtime> <seconds> This command sets the initial delay, the initial-holdtime and the maximum-holdtime between when SPF is calculated and the event which triggered the calculation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> area-type stub default-cost",
  "cmd": "set protocols ospf area <number> area-type stub default-cost",
  "desc": "OSPF — <number> This command sets the cost of default-summary LSAs announced to stubby areas."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> area-type nssa default-cost",
  "cmd": "set protocols ospf area <number> area-type nssa default-cost",
  "desc": "OSPF — <number> This command sets the default cost of LSAs announced to NSSA areas. The cost range is 0 to 16777215."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> area-type nssa translate",
  "cmd": "set protocols ospf area <number> area-type nssa translate",
  "desc": "OSPF — <always|candidate|never> Specifies whether this NSSA border router will unconditionally translate Type-7 LSAs into Type-5 LSAs."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf area <number> range <A.B.C.D/M> substitute",
  "cmd": "set protocols ospf area <number> range <A.B.C.D/M> substitute",
  "desc": "OSPF — <E.F.G.H/M> One Type-3 summary-LSA with routing info <E.F.G.H/M> is announced into backbone area if defined area contains at least one intra-area network (i.e."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> authentication",
  "cmd": "set protocols ospf interface <interface> authentication",
  "desc": "OSPF — plaintext-password <text> This command sets OSPF authentication key to a simple password."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> authentication md5",
  "cmd": "set protocols ospf interface <interface> authentication md5",
  "desc": "OSPF — key-id <id> md5-key <text> This command specifys that MD5 HMAC authentication must be used on this interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> retransmit-interval",
  "cmd": "set protocols ospf interface <interface> retransmit-interval",
  "desc": "OSPF — <number> This command sets number of seconds for RxmtInterval timer value. This value is used when retransmitting Database Description and Link State Request packets if acknowledge was not received."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf interface <interface> ldp-sync holddown",
  "cmd": "set protocols ospf interface <interface> ldp-sync holddown",
  "desc": "OSPF — <seconds> This command will change the hold down value for IGP-LDP synchronization during convergence/interface flap events, but for this interface only."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "show ip ospf database <type> [A.B.C.D]",
  "cmd": "show ip ospf database <type> [A.B.C.D]",
  "desc": "OSPF — [adv-router <A.B.C.D>|self-originate] This command displays a database contents for a specific link advertisement type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 distance ospfv3",
  "cmd": "set protocols ospfv3 distance ospfv3",
  "desc": "OSPFv3 — <external|inter-area|intra-area> <distance> This command change distance value of OSPFv3."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 interface <interface> hello-interval",
  "cmd": "set protocols ospfv3 interface <interface> hello-interval",
  "desc": "OSPFv3 — <number> Set number of seconds for Hello Interval timer value. Setting this value, Hello packet will be sent every timer value seconds on the specified interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 interface <interface> retransmit-interval",
  "cmd": "set protocols ospfv3 interface <interface> retransmit-interval",
  "desc": "OSPFv3 — <number> This command sets number of seconds for RxmtInterval timer value. This value is used when retransmitting Database Description and Link State Request packets if acknowledge was not received."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "set protocols ospfv3 interface <interface> transmit-delay",
  "cmd": "set protocols ospfv3 interface <interface> transmit-delay",
  "desc": "OSPFv3 — <number> This command sets number of seconds for InfTransDelay value. It allows to set and adjust for each interface the delay interval before starting the synchronizing process of the router's database with all neighbo…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPFv3",
  "title": "show ipv6 ospfv3 database <type> [A.B.C.D]",
  "cmd": "show ipv6 ospfv3 database <type> [A.B.C.D]",
  "desc": "OSPFv3 — [adv-router <A.B.C.D>|self-originate] This command displays a database contents for a specific link advertisement type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address> source",
  "cmd": "set protocols bfd peer <address> source",
  "desc": "BFD — [address <address> | interface <interface>] Bind listener to specific interface/address, mandatory for IPv6"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols bfd peer <address> interval",
  "cmd": "set protocols bfd peer <address> interval",
  "desc": "BFD — [receive | transmit] <10-60000> Interval in milliseconds"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis <name> interface <interface> bfd",
  "cmd": "set protocols isis <name> interface <interface> bfd",
  "desc": "ISIS — Enable BFD for ISIS on an interface"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "show bfd static routes",
  "cmd": "show bfd static routes",
  "desc": "BFD — Showing BFD monitored static routes .. code-block:: none Showing BFD monitored static routes: Next hops: VRF default IPv4 Unicast: 10.10.13.3/32 peer 192.168.2.3 (status: installed) 172.16.10.3/32 peer 192.168.10.1 (sta…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols igmp-proxy interface <interface> role",
  "cmd": "set protocols igmp-proxy interface <interface> role",
  "desc": "Multicast — <upstream | downstream> * **upstream:** The upstream network interface is the outgoing interface which is responsible for communicating to available multicast data sources."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim6 interface <interface-name> mld interval <seconds>",
  "cmd": "set protocols pim6 interface <interface-name> mld interval <seconds>",
  "desc": "Multicast — Use this command to configure in the selected interface the MLD host query interval (1-65535) in seconds that PIM will use."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim6 interface <interface-name> mld last-member-query-count <count>",
  "cmd": "set protocols pim6 interface <interface-name> mld last-member-query-count <count>",
  "desc": "Multicast — Set the MLD last member query count. The default value is 2."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim6 interface <interface-name> mld last-member-query-interval <millisecond…",
  "cmd": "set protocols pim6 interface <interface-name> mld last-member-query-interval <milliseconds>",
  "desc": "Multicast — Set the MLD last member query interval in milliseconds (100-6553500). The default value is 1000 milliseconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim6 interface <interface-name> mld max-response-time <milliseconds>",
  "cmd": "set protocols pim6 interface <interface-name> mld max-response-time <milliseconds>",
  "desc": "Multicast — Set the MLD query response timeout in milliseconds (100-6553500). The default value is 10000 milliseconds."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Multicast",
  "title": "set protocols pim6 interface <interface-name> mld version <version-number>",
  "cmd": "set protocols pim6 interface <interface-name> mld version <version-number>",
  "desc": "Multicast — Set the MLD version used on this interface. The default value is 2."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> remote-as",
  "cmd": "set protocols bgp neighbor <address|interface> remote-as",
  "desc": "BGP — <asn> This command creates a new neighbor whose remote-as is <asn>. The neighbor address can be an IPv4 address or an IPv6 address or an interface to use for the connection."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> local-role",
  "cmd": "set protocols bgp neighbor <address|interface> local-role",
  "desc": "BGP — <role> [strict] BGP roles are defined in RFC 9234 and provide an easy way to add route leak prevention, detection and mitigation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> description",
  "cmd": "set protocols bgp neighbor <address|interface> description",
  "desc": "BGP — <text> Set description of the peer or peer group."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> update-source",
  "cmd": "set protocols bgp neighbor <address|interface> update-source",
  "desc": "BGP — <address|interface> Specify the IPv4 source address to use for the BGP session to this neighbor, may be specified as either an IPv4 address directly or as an interface name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> capability",
  "cmd": "set protocols bgp neighbor <address|interface> capability",
  "desc": "BGP — dynamic This command would allow the dynamic update of capabilities over an established BGP session."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface>",
  "cmd": "set protocols bgp neighbor <address|interface>",
  "desc": "BGP — disable-capability-negotiation Suppress sending Capability Negotiation as OPEN message optional parameter to the peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> address-family",
  "cmd": "set protocols bgp neighbor <address|interface> address-family",
  "desc": "BGP — <ipv4-unicast|ipv6-unicast> allowas-in number <number> This command accept incoming routes with AS path containing AS number with the same value as the current system AS."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> ebgp-multihop",
  "cmd": "set protocols bgp neighbor <address|interface> ebgp-multihop",
  "desc": "BGP — <number> This command allows sessions to be established with eBGP neighbors when they are multiple hops away."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> local-as <asn>",
  "cmd": "set protocols bgp neighbor <address|interface> local-as <asn>",
  "desc": "BGP — [no-prepend] [replace-as] Specify an alternate AS for this BGP process when interacting with the specified peer or peer group."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> password",
  "cmd": "set protocols bgp neighbor <address|interface> password",
  "desc": "BGP — <text> This command specifies a MD5 password to be used with the tcp socket that is being used to connect to the remote peer."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> ttl-security",
  "cmd": "set protocols bgp neighbor <address|interface> ttl-security",
  "desc": "BGP — hops <number> This command enforces Generalized TTL Security Mechanism (GTSM), as specified in 5082."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address|interface> peer-group",
  "cmd": "set protocols bgp neighbor <address|interface> peer-group",
  "desc": "BGP — <name> This command bind specific peer to peer group with a given name."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast>",
  "cmd": "set protocols bgp address-family <ipv4-unicast|ipv6-unicast>",
  "desc": "BGP — network <prefix> This command is used for advertising IPv4 or IPv6 networks. .."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters labeled-unicast <explicit-null |",
  "cmd": "set protocols bgp parameters labeled-unicast <explicit-null |",
  "desc": "BGP — ipv4-explicit-null | ipv6-explicit-null> By default, locally advertised prefixes use the implicit-null label to encode in the outgoing NLRI."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters distance global",
  "cmd": "set protocols bgp parameters distance global",
  "desc": "BGP — <external|internal|local> <distance> This command change distance value of BGP. The arguments are the distance values for external routes, internal routes and local routes respectively."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters distance prefix <subnet>",
  "cmd": "set protocols bgp parameters distance prefix <subnet>",
  "desc": "BGP — distance <distance> This command sets the administrative distance for a particular route."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters dampening",
  "cmd": "set protocols bgp parameters dampening",
  "desc": "BGP — half-life <minutes> This command defines the amount of time in minutes after which a penalty is reduced by half."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters default local-pref",
  "cmd": "set protocols bgp parameters default local-pref",
  "desc": "BGP — <local-pref value> This command specifies the default local preference value. The local preference range is 0 to 4294967295."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp address-family ipv4-unicast network",
  "cmd": "set protocols bgp address-family ipv4-unicast network",
  "desc": "BGP — <prefix> backdoor This command allows the router to prefer route to specified prefix learned via IGP through backdoor link instead of a route to the same prefix learned via EBGP."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp neighbor <address> address-family",
  "cmd": "set protocols bgp neighbor <address> address-family",
  "desc": "BGP — <ipv4-unicast|ipv6-unicast> route-reflector-client This command specifies the given neighbor as route reflector client."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set protocols bgp parameters confederation identifier",
  "cmd": "set protocols bgp parameters confederation identifier",
  "desc": "BGP — <asn> This command specifies a BGP confederation identifier. <asn> is the number of the autonomous system that internally includes multiple sub-autonomous systems (a confederation)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set protocols static route <subnet> interface",
  "cmd": "set protocols static route <subnet> interface",
  "desc": "Routing — <interface> Allows you to configure the next-hop interface for an interface-based IPv4 static route."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols static route <subnet> next-hop <address> bfd multi-hop",
  "cmd": "set protocols static route <subnet> next-hop <address> bfd multi-hop",
  "desc": "BFD — source-address <source-address> Configure a static route for <subnet> using gateway <address> and use the gateway address as BFD peer destination address with source address <source> but initiate a multi-hop session."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set protocols static route6 <subnet> interface",
  "cmd": "set protocols static route6 <subnet> interface",
  "desc": "Interfaces — <interface> Allows you to configure the next-hop interface for an interface-based IPv6 static route."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BFD",
  "title": "set protocols static route6 <subnet> next-hop <address> bfd multi-hop",
  "cmd": "set protocols static route6 <subnet> next-hop <address> bfd multi-hop",
  "desc": "BFD — source-address <source>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing global-block high-label-value",
  "cmd": "set protocols isis segment-routing global-block high-label-value",
  "desc": "ISIS — <label-value> Set the Segment Routing Global Block i.e. the label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing global-block low-label-value",
  "cmd": "set protocols isis segment-routing global-block low-label-value",
  "desc": "ISIS — <label-value> Set the Segment Routing Global Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing local-block high-label-value",
  "cmd": "set protocols isis segment-routing local-block high-label-value",
  "desc": "ISIS — <label-value> Set the Segment Routing Local Block i.e. the label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing local-block <low-label-value",
  "cmd": "set protocols isis segment-routing local-block <low-label-value",
  "desc": "ISIS — <label-value> Set the Segment Routing Local Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing prefix <address> index value",
  "cmd": "set protocols isis segment-routing prefix <address> index value",
  "desc": "ISIS — <0-65535> A segment ID that contains an IP address prefix calculated by an IGP in the service provider core network."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ISIS",
  "title": "set protocols isis segment-routing prefix <address> index",
  "cmd": "set protocols isis segment-routing prefix <address> index",
  "desc": "ISIS — <no-php-flag | explicit-null| n-flag-clear> this option allows to configure prefix-sid on SR."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf segment-routing global-block high-label-value",
  "cmd": "set protocols ospf segment-routing global-block high-label-value",
  "desc": "OSPF — <label-value> Set the Segment Routing Global Block i.e. the label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf segment-routing global-block low-label-value",
  "cmd": "set protocols ospf segment-routing global-block low-label-value",
  "desc": "OSPF — <label-value> Set the Segment Routing Global Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf segment-routing local-block high-label-value",
  "cmd": "set protocols ospf segment-routing local-block high-label-value",
  "desc": "OSPF — <label-value> Set the Segment Routing Local Block i.e. the label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf segment-routing local-block <low-label-value",
  "cmd": "set protocols ospf segment-routing local-block <low-label-value",
  "desc": "OSPF — <label-value> Set the Segment Routing Local Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf segment-routing prefix <address> index value",
  "cmd": "set protocols ospf segment-routing prefix <address> index value",
  "desc": "OSPF — <0-65535> A segment ID that contains an IP address prefix calculated by an IGP in the service provider core network."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "OSPF",
  "title": "set protocols ospf segment-routing prefix <address> index",
  "cmd": "set protocols ospf segment-routing prefix <address> index",
  "desc": "OSPF — <no-php-flag | explicit-null| n-flag-clear> this option allows to configure prefix-sid on SR."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> source address",
  "cmd": "set policy route <name> rule <n> source address",
  "desc": "Routing — <match_criteria>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> destination address",
  "cmd": "set policy route <name> rule <n> destination address",
  "desc": "Routing — <match_criteria>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> source address",
  "cmd": "set policy route6 <name> rule <n> source address",
  "desc": "Routing — <match_criteria>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> destination address",
  "cmd": "set policy route6 <name> rule <n> destination address",
  "desc": "Routing — <match_criteria> Set match criteria based on source or destination ipv4|ipv6 address, where <match_criteria> could be:"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> source group",
  "cmd": "set policy route <name> rule <n> source group",
  "desc": "Routing — <address-group|domain-group|mac-group|network-group|port-group> <text>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> destination group",
  "cmd": "set policy route <name> rule <n> destination group",
  "desc": "Routing — <address-group|domain-group|mac-group|network-group|port-group> <text>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> source group",
  "cmd": "set policy route6 <name> rule <n> source group",
  "desc": "Routing — <address-group|domain-group|mac-group|network-group|port-group> <text>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> destination group",
  "cmd": "set policy route6 <name> rule <n> destination group",
  "desc": "Routing — <address-group|domain-group|mac-group|network-group|port-group> <text> Set match criteria based on source or destination groups, where <text> would be the group name/identifier."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> fragment",
  "cmd": "set policy route <name> rule <n> fragment",
  "desc": "Routing — <match-grag|match-non-frag>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> fragment",
  "cmd": "set policy route6 <name> rule <n> fragment",
  "desc": "Routing — <match-grag|match-non-frag> Set IP fragment match, where: * match-frag: Second and further fragments of fragmented packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set policy route <name> rule <n> ipsec",
  "cmd": "set policy route <name> rule <n> ipsec",
  "desc": "VPN — <match-ipsec|match-none>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set policy route6 <name> rule <n> ipsec",
  "cmd": "set policy route6 <name> rule <n> ipsec",
  "desc": "VPN — <match-ipsec|match-none> Set IPSec inbound match criterias, where: * match-ipsec: match inbound IPsec packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> protocol",
  "cmd": "set policy route <name> rule <n> protocol",
  "desc": "Routing — <text | 0-255 | tcp_udp | all >"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> protocol",
  "cmd": "set policy route6 <name> rule <n> protocol",
  "desc": "Routing — <text | 0-255 | tcp_udp | all > Match a protocol criteria. A protocol number or a name which is defined in: /etc/protocols."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> packet-type [broadcast | host",
  "cmd": "set policy route <name> rule <n> packet-type [broadcast | host",
  "desc": "Routing — | multicast | other]"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> packet-type [broadcast | host",
  "cmd": "set policy route6 <name> rule <n> packet-type [broadcast | host",
  "desc": "Routing — | multicast | other] Match based on packet type criteria."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> state",
  "cmd": "set policy route <name> rule <n> state",
  "desc": "Routing — <established | invalid | new | related>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> state",
  "cmd": "set policy route6 <name> rule <n> state",
  "desc": "Routing — <established | invalid | new | related> Set match criteria based on session state."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route <name> rule <n> set connection-mark",
  "cmd": "set policy route <name> rule <n> set connection-mark",
  "desc": "Routing — <1-2147483647>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route6 <name> rule <n> set connection-mark",
  "cmd": "set policy route6 <name> rule <n> set connection-mark",
  "desc": "Routing — <1-2147483647> Set a specific connection mark."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy community-list <text> rule <1-65535> action",
  "cmd": "set policy community-list <text> rule <1-65535> action",
  "desc": "ACL — <permit|deny> Set action to take on entries matching this rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy community-list <text> rule <1-65535> regex",
  "cmd": "set policy community-list <text> rule <1-65535> regex",
  "desc": "ACL — <aa:nn|local-AS|no-advertise|no-export|additive> Regular expression to match against a community-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy prefix-list6 <text> rule <1-65535> prefix",
  "cmd": "set policy prefix-list6 <text> rule <1-65535> prefix",
  "desc": "Routing — <h:h:h:h:h:h:h:h/x> IPv6 prefix."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy extcommunity-list <text> rule <1-65535> action",
  "cmd": "set policy extcommunity-list <text> rule <1-65535> action",
  "desc": "Routing — <permit|deny> Set action to take on entries matching this rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy extcommunity-list <text> rule <1-65535> description",
  "cmd": "set policy extcommunity-list <text> rule <1-65535> description",
  "desc": "Routing — <text> Set description for rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match community",
  "cmd": "set policy route-map <text> rule <1-65535> match community",
  "desc": "Routing — community-list <text> BGP community-list to match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match extcommunity",
  "cmd": "set policy route-map <text> rule <1-65535> match extcommunity",
  "desc": "Routing — <text> BGP extended community to match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match ip address",
  "cmd": "set policy route-map <text> rule <1-65535> match ip address",
  "desc": "Routing — access-list <1-2699> IP address of route to match, based on access-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match ip nexthop",
  "cmd": "set policy route-map <text> rule <1-65535> match ip nexthop",
  "desc": "Routing — access-list <1-2699> IP next-hop of route to match, based on access-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match ip route-source",
  "cmd": "set policy route-map <text> rule <1-65535> match ip route-source",
  "desc": "Routing — access-list <1-2699> IP route source of route to match, based on access-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match ipv6 address",
  "cmd": "set policy route-map <text> rule <1-65535> match ipv6 address",
  "desc": "Routing — access-list <text> IPv6 address of route to match, based on IPv6 access-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match ipv6 nexthop",
  "cmd": "set policy route-map <text> rule <1-65535> match ipv6 nexthop",
  "desc": "Routing — <h:h:h:h:h:h:h:h> Nexthop IPv6 address to match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match large-community",
  "cmd": "set policy route-map <text> rule <1-65535> match large-community",
  "desc": "Routing — large-community-list <text> Match BGP large communities."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match local-preference",
  "cmd": "set policy route-map <text> rule <1-65535> match local-preference",
  "desc": "Routing — <0-4294967295> Match local preference."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match origin",
  "cmd": "set policy route-map <text> rule <1-65535> match origin",
  "desc": "Routing — <egp|igp|incomplete> Boarder Gateway Protocol (BGP) origin code to match."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> match rpki",
  "cmd": "set policy route-map <text> rule <1-65535> match rpki",
  "desc": "Routing — <invalid|notfound|valid> Match RPKI validation result."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set aggregator <as|ip>",
  "cmd": "set policy route-map <text> rule <1-65535> set aggregator <as|ip>",
  "desc": "Routing — <1-4294967295|x.x.x.x> BGP aggregator attribute: AS number or IP address of an aggregation."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set as-path exclude",
  "cmd": "set policy route-map <text> rule <1-65535> set as-path exclude",
  "desc": "Routing — <1-4294967295 | all> Drop AS-NUMBER from the BGP AS path. If all is specified, remove all AS numbers from the AS_PATH of the BGP path's NLRI."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set as-path prepend",
  "cmd": "set policy route-map <text> rule <1-65535> set as-path prepend",
  "desc": "Routing — <1-4294967295> Prepend the given string of AS numbers to the AS_PATH of the BGP path's NLRI."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set as-path",
  "cmd": "set policy route-map <text> rule <1-65535> set as-path",
  "desc": "Routing — prepend-last-as <n> Prepend the existing last AS number (the leftmost ASN) to the AS_PATH."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set community",
  "cmd": "set policy route-map <text> rule <1-65535> set community",
  "desc": "Routing — <add|replace> <community> Add or replace BGP community attribute in format <0-65535:0-65535> or from well-known community list"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set community delete",
  "cmd": "set policy route-map <text> rule <1-65535> set community delete",
  "desc": "Routing — <text> Delete BGP communities matching the community-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set large-community",
  "cmd": "set policy route-map <text> rule <1-65535> set large-community",
  "desc": "Routing — <add|replace> <GA:LDP1:LDP2> Add or replace BGP large-community attribute in format <0-4294967295:0-4294967295:0-4294967295>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set large-community delete",
  "cmd": "set policy route-map <text> rule <1-65535> set large-community delete",
  "desc": "Routing — <text> Delete BGP communities matching the large-community-list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set extcommunity bandwidth",
  "cmd": "set policy route-map <text> rule <1-65535> set extcommunity bandwidth",
  "desc": "Routing — <1-25600|cumulative|num-multipaths> Set extcommunity bandwidth"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set extcommunity rt",
  "cmd": "set policy route-map <text> rule <1-65535> set extcommunity rt",
  "desc": "Routing — <text> Set route target value in format <0-65535:0-4294967295> or <IP:0-65535>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set extcommunity soo",
  "cmd": "set policy route-map <text> rule <1-65535> set extcommunity soo",
  "desc": "Routing — <text> Set site of origin value in format <0-65535:0-4294967295> or <IP:0-65535>."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set ip-next-hop",
  "cmd": "set policy route-map <text> rule <1-65535> set ip-next-hop",
  "desc": "Routing — <x.x.x.x> Nexthop IP address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set ipv6-next-hop",
  "cmd": "set policy route-map <text> rule <1-65535> set ipv6-next-hop",
  "desc": "Routing — <global|local> <h:h:h:h:h:h:h:h> Nexthop IPv6 address."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set local-preference",
  "cmd": "set policy route-map <text> rule <1-65535> set local-preference",
  "desc": "Routing — <0-4294967295> Set BGP local preference attribute."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set metric",
  "cmd": "set policy route-map <text> rule <1-65535> set metric",
  "desc": "Routing — <+/-metric|0-4294967295|rtt|+rtt|-rtt> Set the route metric. When used with BGP, set the BGP attribute MED to a specific value."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set metric-type",
  "cmd": "set policy route-map <text> rule <1-65535> set metric-type",
  "desc": "Routing — <type-1|type-2> Set OSPF external metric-type."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set origin",
  "cmd": "set policy route-map <text> rule <1-65535> set origin",
  "desc": "Routing — <igp|egp|incomplete> Set BGP origin code."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set originator-id",
  "cmd": "set policy route-map <text> rule <1-65535> set originator-id",
  "desc": "Routing — <x.x.x.x> Set BGP originator ID attribute."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set src",
  "cmd": "set policy route-map <text> rule <1-65535> set src",
  "desc": "Routing — <x.x.x.x|h:h:h:h:h:h:h:h> Set source IP/IPv6 address for route."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Routing",
  "title": "set policy route-map <text> rule <1-65535> set weight",
  "cmd": "set policy route-map <text> rule <1-65535> set weight",
  "desc": "Routing — <0-4294967295> Set BGP weight attribute"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set policy access-list <acl_number> rule <1-65535> action",
  "cmd": "set policy access-list <acl_number> rule <1-65535> action",
  "desc": "VLAN — <permit|deny> This command creates a new rule in the access list and defines an action."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set policy access-list <acl_number> rule <1-65535>",
  "cmd": "set policy access-list <acl_number> rule <1-65535>",
  "desc": "VLAN — <destination|source> <any|host|inverse-mask|network> This command defines matching parameters for access list rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set policy access-list6 <text> rule <1-65535> source",
  "cmd": "set policy access-list6 <text> rule <1-65535> source",
  "desc": "VLAN — <any|exact-match|network> This command defines matching parameters for IPv6 access list rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy large-community-list <text> rule <1-65535> action",
  "cmd": "set policy large-community-list <text> rule <1-65535> action",
  "desc": "ACL — <permit|deny> Set action to take on entries matching this rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy large-community-list <text> rule <1-65535> description",
  "cmd": "set policy large-community-list <text> rule <1-65535> description",
  "desc": "ACL — <text> Set description for rule."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "set policy large-community-list <text> rule <1-65535> regex",
  "cmd": "set policy large-community-list <text> rule <1-65535> regex",
  "desc": "ACL — <aa:nn:nn> Regular expression to match against a large community list."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "generate wireguard client-config <name> interface <interface> server",
  "cmd": "generate wireguard client-config <name> interface <interface> server",
  "desc": "VPN — <ip|fqdn> address <client-ip> **Generate a client configuration file that establishes a connection to the specified interface.** The public key from the specified interface is automatically included in the configuration…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> speed <auto | 10 | 100 | 1000 |",
  "cmd": "set interfaces ethernet <interface> speed <auto | 10 | 100 | 1000 |",
  "desc": "Interfaces — 2500 | 5000 | 10000 | 25000 | 40000 | 50000 | 100000> **Configure the interface's speed, in Mbit/s.** The following options are available: * auto: The interface negotiates the speed with the connected device."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces ethernet <interface> offload <lro | tso | gso |",
  "cmd": "set interfaces ethernet <interface> offload <lro | tso | gso |",
  "desc": "Interfaces — gro | rps | sg > **Configure the offloading features for the interface.** The interface offloading features define whether specific packet-processing tasks are performed by hardware (the NIC) or by software (the kernel)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces bonding <interface> mode <802.3ad | active-backup |",
  "cmd": "set interfaces bonding <interface> mode <802.3ad | active-backup |",
  "desc": "Interfaces — broadcast | round-robin | transmit-load-balance | adaptive-load-balance | xor-hash> **Configure the bonding mode on the interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> type",
  "cmd": "set interfaces wireless <interface> type",
  "desc": "Wireless — <access-point | station | monitor> Wireless device type for this interface * access-point: Forwards packets between other nodes."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities ht",
  "cmd": "set interfaces wireless <interface> capabilities ht",
  "desc": "Wireless — channel-set-width <ht20 | ht40+ | ht40-> Supported channel width set. * ht20 - 20 MHz channel width * ht40- - Both 20 MHz and 40 MHz with secondary channel below the primary channel * ht40+ - Both 20 MHz and 40 MHz with…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities ht max-amsdu",
  "cmd": "set interfaces wireless <interface> capabilities ht max-amsdu",
  "desc": "Wireless — <3839 | 7935> Maximum A-MSDU length 3839 (default) or 7935 octets"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht",
  "cmd": "set interfaces wireless <interface> capabilities vht",
  "desc": "Wireless — antenna-pattern-fixed Set if antenna pattern does not change during the lifetime of an association"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities vht beamform",
  "cmd": "set interfaces wireless <interface> capabilities vht beamform",
  "desc": "Wireless — <single-user-beamformer | single-user-beamformee | multi-user-beamformer | multi-user-beamformee> Beamforming capabilities: * single-user-beamformer - Support for operation as single user beamformer * single-user-beamfo…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface>",
  "cmd": "set interfaces wireless <interface>",
  "desc": "Wireless — capabilities vht link-adaptation VHT link adaptation capabilities"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities he beamform",
  "cmd": "set interfaces wireless <interface> capabilities he beamform",
  "desc": "Wireless — <single-user-beamformer | single-user-beamformee | multi-user-beamformer> Beamforming capabilities: * single-user-beamformer - Support for operation as single user beamformer * single-user-beamformee - Support for opera…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Wireless",
  "title": "set interfaces wireless <interface> capabilities he",
  "cmd": "set interfaces wireless <interface> capabilities he",
  "desc": "Wireless — center-channel-freq <freq-1 | freq-2> <number> HE operating channel center frequency - center freq 1 (for use with 80, 80+80 and 160 modes) HE operating channel center frequency - center freq 2 (for use with the 80+80 m…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "show system image",
  "cmd": "show system image",
  "desc": "Troubleshooting — List all available system images which can be booted on the current system. .."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "delete system image [image-name]",
  "cmd": "delete system image [image-name]",
  "desc": "System — Delete unused images from the system. You can specify an optional image name to delete."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system image default-boot [image-name]",
  "cmd": "set system image default-boot [image-name]",
  "desc": "System — Select the default boot image which will be started on the next boot of the system."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "add system image <url | path> | [latest] [vrf name]",
  "cmd": "add system image <url | path> | [latest] [vrf name]",
  "desc": "System — [username user [password pass]] Use this command to install a new system image. You can retrieve the image from the web (http://, https://) or from your local system."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "ping <destination>",
  "cmd": "ping <destination>",
  "desc": "Troubleshooting — Send ICMP echo requests to destination host. There are multiple options to ping, including VRF support."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "traceroute <destination>",
  "cmd": "traceroute <destination>",
  "desc": "Troubleshooting — Trace path to target. .."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "monitor traceroute <destination>",
  "cmd": "monitor traceroute <destination>",
  "desc": "Troubleshooting — However, another helper is available which combines ping and traceroute into a single tool."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "force ipv6-rd interface <interface> [address <ipv6-address>]",
  "cmd": "force ipv6-rd interface <interface> [address <ipv6-address>]",
  "desc": "Interfaces — Discover routers via eth0. Example: .."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "force ipv6-nd interface <interface> address <ipv6-address>",
  "cmd": "force ipv6-nd interface <interface> address <ipv6-address>",
  "desc": "Interfaces — Example: .. code-block:: none vyos@vyos:~$ force ipv6-nd interface eth0 address fc00:470:f1cd:101::1 Soliciting fc00:470:f1cd:101::1 (fc00:470:f1cd:101::1) on eth0..."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings allow-unsupported-nics",
  "cmd": "set vpp settings allow-unsupported-nics",
  "desc": "System · vpp"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpn ipsec site-to-site peer <peer-name> force-udp-encapsulation",
  "cmd": "set vpn ipsec site-to-site peer <peer-name> force-udp-encapsulation",
  "desc": "VPN · vpn"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show vpp acl",
  "cmd": "show vpp acl",
  "desc": "ACL · general"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show vpp acl ip",
  "cmd": "show vpp acl ip",
  "desc": "ACL · general"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show vpp acl ip interface",
  "cmd": "show vpp acl ip interface",
  "desc": "ACL — show vpp acl ip interface"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show vpp acl ip tag-name <tag-name>",
  "cmd": "show vpp acl ip tag-name <tag-name>",
  "desc": "ACL · general"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show vpp acl mac",
  "cmd": "show vpp acl mac",
  "desc": "ACL · general"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show vpp acl mac interface",
  "cmd": "show vpp acl mac interface",
  "desc": "ACL · general"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "ACL",
  "title": "show vpp acl mac tag-name <tag-name>",
  "cmd": "show vpp acl mac tag-name <tag-name>",
  "desc": "ACL · general"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 timeout icmp <seconds>",
  "cmd": "set vpp nat nat44 timeout icmp <seconds>",
  "desc": "NAT — Set the timeout for ICMP sessions (Default: 60 seconds)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 timeout tcp-established <seconds>",
  "cmd": "set vpp nat nat44 timeout tcp-established <seconds>",
  "desc": "NAT — Set the timeout for established TCP connections (Default: 7440 seconds or 2 hours 4 minutes)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 timeout tcp-transitory <seconds>",
  "cmd": "set vpp nat nat44 timeout tcp-transitory <seconds>",
  "desc": "NAT — Set the timeout for transitory TCP connections (setup/teardown) (Default: 240 seconds or 4 minutes)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 timeout udp <seconds>",
  "cmd": "set vpp nat nat44 timeout udp <seconds>",
  "desc": "NAT — Set the timeout for UDP sessions (Default: 300 seconds or 5 minutes)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 session-limit <number>",
  "cmd": "set vpp nat nat44 session-limit <number>",
  "desc": "NAT — Set the maximum number of NAT sessions per worker thread (Default: 64512)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "show vpp nat nat44 addresses",
  "cmd": "show vpp nat nat44 addresses",
  "desc": "NAT — Display configured NAT44 address pools."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "show vpp nat nat44 interfaces",
  "cmd": "show vpp nat nat44 interfaces",
  "desc": "NAT — Show which interfaces are configured as inside or outside for NAT44."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "show vpp nat nat44 sessions",
  "cmd": "show vpp nat nat44 sessions",
  "desc": "NAT — Display active NAT44 translation sessions."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "show vpp nat nat44 static",
  "cmd": "show vpp nat nat44 static",
  "desc": "NAT — Show all configured static NAT mappings."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "show vpp nat nat44 summary",
  "cmd": "show vpp nat nat44 summary",
  "desc": "NAT — Display a summary of NAT44 and statistics."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Logging",
  "title": "set vpp settings logging default-level <level>",
  "cmd": "set vpp settings logging default-level <level>",
  "desc": "Logging · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings poll-sleep-usec <delay>",
  "cmd": "set vpp settings poll-sleep-usec <delay>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings resource-allocation memory main-heap-page-size",
  "cmd": "set vpp settings resource-allocation memory main-heap-page-size",
  "desc": "System — <size>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings resource-allocation memory main-heap-size <size>",
  "cmd": "set vpp settings resource-allocation memory main-heap-size <size>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings resource-allocation memory physmem-max-size <size>",
  "cmd": "set vpp settings resource-allocation memory physmem-max-size <size>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings resource-allocation memory stats page-size <size>",
  "cmd": "set vpp settings resource-allocation memory stats page-size <size>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings resource-allocation memory stats size <size>",
  "cmd": "set vpp settings resource-allocation memory stats size <size>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings resource-allocation mac-limit <value>",
  "cmd": "set vpp settings resource-allocation mac-limit <value>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings resource-allocation cpu-cores <core-number>",
  "cmd": "set vpp settings resource-allocation cpu-cores <core-number>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option kernel memory hugepage-size <size> hugepage-count",
  "cmd": "set system option kernel memory hugepage-size <size> hugepage-count",
  "desc": "System — '<count>'"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option resource-limits max-map-count <value>",
  "cmd": "set system option resource-limits max-map-count <value>",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option resource-limits shmmax <value>",
  "cmd": "set system option resource-limits shmmax <value>",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option kernel cpu disable-nmi-watchdog",
  "cmd": "set system option kernel cpu disable-nmi-watchdog",
  "desc": "System — Disables the NMI watchdog for detecting hard CPU lockups. This prevents unnecessary interrupts on VPP worker cores."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option kernel cpu isolate-cpus <cpu-range>",
  "cmd": "set system option kernel cpu isolate-cpus <cpu-range>",
  "desc": "System — Isolates specified CPUs from the kernel scheduler. Isolated cores will not run regular system processes and are dedicated to applications like VPP."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option kernel cpu nohz-full <cpu-range>",
  "cmd": "set system option kernel cpu nohz-full <cpu-range>",
  "desc": "System — Enables adaptive-tick mode (NO_HZ_FULL) for specified CPUs. This causes the kernel to avoid sending scheduling-clock interrupts to CPUs that have only one runnable task, significantly reducing interrupt overhead for ded…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option kernel cpu rcu-no-cbs <cpu-range>",
  "cmd": "set system option kernel cpu rcu-no-cbs <cpu-range>",
  "desc": "System — Offloads Read-Copy-Update (RCU) callback processing from specified CPUs. This ensures that RCU callbacks do not prevent the specified CPUs from entering dyntick-idle or adaptive-tick mode, which is essential for nohz-fu…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option kernel disable-hpet",
  "cmd": "set system option kernel disable-hpet",
  "desc": "System — Disables the High Precision Event Timer (HPET). HPET can cause additional interrupts and overhead that may impact VPP performance."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option kernel disable-mce",
  "cmd": "set system option kernel disable-mce",
  "desc": "System — Disables Machine Check Exception (MCE) reporting and handling. While MCE provides hardware error detection, it can introduce latency in high-performance scenarios."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option kernel disable-softlockup",
  "cmd": "set system option kernel disable-softlockup",
  "desc": "System — Disables the soft lockup detector for kernel threads. This prevents false positives when VPP worker threads are busy processing packets."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings ignore-kernel-routes",
  "cmd": "set vpp settings ignore-kernel-routes",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings resource-allocation ipv6 hash-buckets <value>",
  "cmd": "set vpp settings resource-allocation ipv6 hash-buckets <value>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings resource-allocation ipv6 heap-size <value>",
  "cmd": "set vpp settings resource-allocation ipv6 heap-size <value>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set vpp settings interface <interface-name>",
  "cmd": "set vpp settings interface <interface-name>",
  "desc": "Interfaces · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set vpp settings interface <interface-name> num-rx-queues <value>",
  "cmd": "set vpp settings interface <interface-name> num-rx-queues <value>",
  "desc": "Interfaces · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set vpp settings interface <interface-name> num-tx-queues <value>",
  "cmd": "set vpp settings interface <interface-name> num-tx-queues <value>",
  "desc": "Interfaces · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set vpp settings interface <interface-name> num-rx-desc <value>",
  "cmd": "set vpp settings interface <interface-name> num-rx-desc <value>",
  "desc": "Interfaces · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set vpp settings interface <interface-name> num-tx-desc <value>",
  "cmd": "set vpp settings interface <interface-name> num-tx-desc <value>",
  "desc": "Interfaces · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set vpp settings interface-rx-mode <mode>",
  "cmd": "set vpp settings interface-rx-mode <mode>",
  "desc": "Interfaces · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VPN",
  "title": "set vpp settings ipsec-acceleration",
  "cmd": "set vpp settings ipsec-acceleration",
  "desc": "VPN · vpn"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings lcp netlink batch-delay-ms <milliseconds>",
  "cmd": "set vpp settings lcp netlink batch-delay-ms <milliseconds>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings lcp netlink batch-size <number>",
  "cmd": "set vpp settings lcp netlink batch-size <number>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings lcp netlink rx-buffer-size <number>",
  "cmd": "set vpp settings lcp netlink rx-buffer-size <number>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings resource-allocation buffers buffers-per-numa",
  "cmd": "set vpp settings resource-allocation buffers buffers-per-numa",
  "desc": "System — <value>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings resource-allocation buffers data-size <value>",
  "cmd": "set vpp settings resource-allocation buffers data-size <value>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings resource-allocation buffers page-size <value>",
  "cmd": "set vpp settings resource-allocation buffers page-size <value>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp loopback <vpploN>",
  "cmd": "set interfaces vpp loopback <vpploN>",
  "desc": "Interfaces — Create a loopback interface where <vpploN> follows the naming convention vpplo1, vpplo2, etc."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp loopback <vpploN> description <description>",
  "cmd": "set interfaces vpp loopback <vpploN> description <description>",
  "desc": "Interfaces — Set a descriptive name for the loopback interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp loopback <vpploN> disable",
  "cmd": "set interfaces vpp loopback <vpploN> disable",
  "desc": "Interfaces — Administratively disable the loopback interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp loopback <vpploN> address <ip-address/prefix>",
  "cmd": "set interfaces vpp loopback <vpploN> address <ip-address/prefix>",
  "desc": "Interfaces — Configure IPv4 or IPv6 addresses on the kernel interface. Multiple addresses can be assigned."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp loopback <vpploN> mtu <size>",
  "cmd": "set interfaces vpp loopback <vpploN> mtu <size>",
  "desc": "Interfaces — Set the Maximum Transmission Unit (MTU) for the kernel interface. The MTU must be compatible with the connected VPP interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces vpp loopback <vpploN> vif <vlan-id>",
  "cmd": "set interfaces vpp loopback <vpploN> vif <vlan-id>",
  "desc": "VLAN — Create a VLAN sub-interface with the specified VLAN ID (0-4094)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces vpp loopback <vpploN> vif <vlan-id> address",
  "cmd": "set interfaces vpp loopback <vpploN> vif <vlan-id> address",
  "desc": "VLAN — <ip-address/prefix>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces vpp loopback <vpploN> vif <vlan-id> description",
  "cmd": "set interfaces vpp loopback <vpploN> vif <vlan-id> description",
  "desc": "VLAN — <description>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces vpp loopback <vpploN> vif <vlan-id> disable",
  "cmd": "set interfaces vpp loopback <vpploN> vif <vlan-id> disable",
  "desc": "VLAN · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces vpp loopback <vpploN> vif <vlan-id> mtu <size>",
  "cmd": "set interfaces vpp loopback <vpploN> vif <vlan-id> mtu <size>",
  "desc": "VLAN · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp bonding <vppbondN>",
  "cmd": "set interfaces vpp bonding <vppbondN>",
  "desc": "Interfaces — Create a bonding interface where <vppbondN> follows the naming convention vppbond0, vppbond1, and so on."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp bonding <vppbondN> description <description>",
  "cmd": "set interfaces vpp bonding <vppbondN> description <description>",
  "desc": "Interfaces — Set a descriptive name for the bonding interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp bonding <vppbondN> disable",
  "cmd": "set interfaces vpp bonding <vppbondN> disable",
  "desc": "Interfaces — Administratively disable the bonding interface. By default, interfaces are enabled."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp bonding <vppbondN> member interface",
  "cmd": "set interfaces vpp bonding <vppbondN> member interface",
  "desc": "Interfaces — <interface-name> Add physical interfaces as members of the bond. You can add multiple interfaces to the same bond."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp bonding <vppbondN> mode <mode>",
  "cmd": "set interfaces vpp bonding <vppbondN> mode <mode>",
  "desc": "Interfaces — Configure the bonding mode. Available modes: * **802.3ad**: IEEE 802.3ad Dynamic Link Aggregation (LACP) - Default * **active-backup**: Fault tolerant, only one slave interface active * **broadcast**: Transmits everythi…"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp bonding <vppbondN> hash-policy <policy>",
  "cmd": "set interfaces vpp bonding <vppbondN> hash-policy <policy>",
  "desc": "Interfaces — Set the transmit hash policy: * **layer2**: Use MAC addresses to generate hash (default) * **layer2+3**: Combine MAC addresses and IP addresses * **layer3+4**: Combine IP addresses and port numbers"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp bonding <vppbondN> mac <mac-address>",
  "cmd": "set interfaces vpp bonding <vppbondN> mac <mac-address>",
  "desc": "Interfaces — Set a specific MAC address for the bonding interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp bonding <vppbondN> address <ip-address/prefix>",
  "cmd": "set interfaces vpp bonding <vppbondN> address <ip-address/prefix>",
  "desc": "Interfaces — Configure IPv4 or IPv6 addresses on the kernel interface. You can assign multiple addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp bonding <vppbondN> mtu <size>",
  "cmd": "set interfaces vpp bonding <vppbondN> mtu <size>",
  "desc": "Interfaces — Set the Maximum Transmission Unit (MTU) for the kernel interface. The MTU must be compatible with the connected VPP interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces vpp bonding <vppbondN> vif <vlan-id>",
  "cmd": "set interfaces vpp bonding <vppbondN> vif <vlan-id>",
  "desc": "VLAN — Create a VLAN sub-interface with the specified VLAN ID (0-4094)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces vpp bonding <vppbondN> vif <vlan-id> address",
  "cmd": "set interfaces vpp bonding <vppbondN> vif <vlan-id> address",
  "desc": "VLAN — <ip-address/prefix>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces vpp bonding <vppbondN> vif <vlan-id> description",
  "cmd": "set interfaces vpp bonding <vppbondN> vif <vlan-id> description",
  "desc": "VLAN — <description>"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces vpp bonding <vppbondN> vif <vlan-id> disable",
  "cmd": "set interfaces vpp bonding <vppbondN> vif <vlan-id> disable",
  "desc": "VLAN · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces vpp bonding <vppbondN> vif <vlan-id> mtu <size>",
  "cmd": "set interfaces vpp bonding <vppbondN> vif <vlan-id> mtu <size>",
  "desc": "VLAN · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp xconnect <vppxconN>",
  "cmd": "set interfaces vpp xconnect <vppxconN>",
  "desc": "Interfaces — Create an XConnect interface where <vppxconN> follows the naming convention vppxcon1, vppxcon2, etc."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp xconnect <vppxconN> member interface",
  "cmd": "set interfaces vpp xconnect <vppxconN> member interface",
  "desc": "Interfaces — <interface-name> Add an interface as a member of the XConnect. Exactly two member interfaces must be configured to create bidirectional forwarding."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp xconnect <vppxconN> description <description>",
  "cmd": "set interfaces vpp xconnect <vppxconN> description <description>",
  "desc": "Interfaces — Set a descriptive name for the XConnect interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp gre <vppgreN>",
  "cmd": "set interfaces vpp gre <vppgreN>",
  "desc": "Interfaces — Create a GRE interface where <vppgreN> follows the naming convention vppgre1, vppgre2, etc."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp gre <vppgreN> remote <address>",
  "cmd": "set interfaces vpp gre <vppgreN> remote <address>",
  "desc": "Interfaces — Set the tunnel remote endpoint address. Supports both IPv4 and IPv6 addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp gre <vppgreN> source-address <address>",
  "cmd": "set interfaces vpp gre <vppgreN> source-address <address>",
  "desc": "Interfaces — Set the tunnel source address. Must match an address configured on the local system."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp gre <vppgreN> description <description>",
  "cmd": "set interfaces vpp gre <vppgreN> description <description>",
  "desc": "Interfaces — Set a descriptive name for the GRE interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp gre <vppgreN> disable",
  "cmd": "set interfaces vpp gre <vppgreN> disable",
  "desc": "Interfaces — Administratively disable the GRE interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp gre <vppgreN> tunnel-type <type>",
  "cmd": "set interfaces vpp gre <vppgreN> tunnel-type <type>",
  "desc": "Interfaces — Set the GRE tunnel encapsulation type: * l3 - Generic Routing Encapsulation for network layer traffic (default)."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp gre <vppgreN> address <ip-address/prefix>",
  "cmd": "set interfaces vpp gre <vppgreN> address <ip-address/prefix>",
  "desc": "Interfaces — Configure IPv4 or IPv6 addresses on the kernel interface. Multiple addresses can be assigned."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp gre <vppgreN> mtu <size>",
  "cmd": "set interfaces vpp gre <vppgreN> mtu <size>",
  "desc": "Interfaces — Set the Maximum Transmission Unit (MTU) for the kernel interface. The MTU must be compatible with the connected VPP interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vpp vxlan <vppvxlanN>",
  "cmd": "set interfaces vpp vxlan <vppvxlanN>",
  "desc": "BGP — Create a VXLAN interface where <vppvxlanN> follows the naming convention vppvxlan1, vppvxlan2, etc."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vpp vxlan <vppvxlanN> vni <vni>",
  "cmd": "set interfaces vpp vxlan <vppvxlanN> vni <vni>",
  "desc": "BGP — Set the Virtual Network Identifier (VNI) for the VXLAN tunnel. Valid range is 0-16777214."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vpp vxlan <vppvxlanN> remote <address>",
  "cmd": "set interfaces vpp vxlan <vppvxlanN> remote <address>",
  "desc": "BGP — Set the tunnel remote endpoint address. Supports both IPv4 and IPv6 addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vpp vxlan <vppvxlanN> source-address <address>",
  "cmd": "set interfaces vpp vxlan <vppvxlanN> source-address <address>",
  "desc": "BGP — Set the tunnel source address. Must match an address configured on the local system."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vpp vxlan <vppvxlanN> description <description>",
  "cmd": "set interfaces vpp vxlan <vppvxlanN> description <description>",
  "desc": "BGP — Set a descriptive name for the VXLAN interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vpp vxlan <vppvxlanN> disable",
  "cmd": "set interfaces vpp vxlan <vppvxlanN> disable",
  "desc": "BGP — Administratively disable the VXLAN interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vpp vxlan <vppvxlanN> address <ip-address/prefix>",
  "cmd": "set interfaces vpp vxlan <vppvxlanN> address <ip-address/prefix>",
  "desc": "BGP — Configure IPv4 or IPv6 addresses on the kernel interface. Multiple addresses can be assigned."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "BGP",
  "title": "set interfaces vpp vxlan <vppvxlanN> mtu <size>",
  "cmd": "set interfaces vpp vxlan <vppvxlanN> mtu <size>",
  "desc": "BGP — Set the Maximum Transmission Unit (MTU) for the kernel interface. The MTU must be compatible with the connected VPP interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp bridge <vppbrN>",
  "cmd": "set interfaces vpp bridge <vppbrN>",
  "desc": "Interfaces — Create a bridge interface where <vppbrN> follows the naming convention vppbr1, vppbr2, etc."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp bridge <vppbrN> description <description>",
  "cmd": "set interfaces vpp bridge <vppbrN> description <description>",
  "desc": "Interfaces — Set a descriptive name for the bridge interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp bridge <vppbrN> member interface",
  "cmd": "set interfaces vpp bridge <vppbrN> member interface",
  "desc": "Interfaces — <interface-name> Add an interface as a member of the bridge."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp ipip <vppipipN>",
  "cmd": "set interfaces vpp ipip <vppipipN>",
  "desc": "Interfaces — Create an IPIP interface where <vppipipN> follows the naming convention vppipip1, vppipip2, etc."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp ipip <vppipipN> remote <address>",
  "cmd": "set interfaces vpp ipip <vppipipN> remote <address>",
  "desc": "Interfaces — Set the tunnel remote endpoint address. Supports both IPv4 and IPv6 addresses."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp ipip <vppipipN> source-address <address>",
  "cmd": "set interfaces vpp ipip <vppipipN> source-address <address>",
  "desc": "Interfaces — Set the tunnel source address. The source address must match an address configured on the local system."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp ipip <vppipipN> description <description>",
  "cmd": "set interfaces vpp ipip <vppipipN> description <description>",
  "desc": "Interfaces — Set a descriptive name for the IPIP interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp ipip <vppipipN> disable",
  "cmd": "set interfaces vpp ipip <vppipipN> disable",
  "desc": "Interfaces — Administratively disable the IPIP interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp ipip <vppipipN> address <ip-address/prefix>",
  "cmd": "set interfaces vpp ipip <vppipipN> address <ip-address/prefix>",
  "desc": "Interfaces — Configure IPv4 or IPv6 addresses on the kernel interface. Multiple addresses can be assigned."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp ipip <vppipipN> mtu <size>",
  "cmd": "set interfaces vpp ipip <vppipipN> mtu <size>",
  "desc": "Interfaces — Set the Maximum Transmission Unit (MTU) for the kernel interface. The MTU must be compatible with the connected VPP interface."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "add system image <url | path> | [latest] [vrf name] [username user [password pass]]",
  "cmd": "add system image <url | path> | [latest] [vrf name] [username user [password pass]]",
  "desc": "System — Use this command to install a new system image. You can retrieve the image from the web (http://, https://) or from your local system."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "ping tcp <host> port <port> [count <n>] [interface <ifname>] [vrf <name>] [source-address…",
  "cmd": "ping tcp <host> port <port> [count <n>] [interface <ifname>] [vrf <name>] [source-address <address>]",
  "desc": "Interfaces — Test TCP connectivity to a destination host and port. This is useful when ICMP is blocked or when you need to verify that a specific TCP service is reachable."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "sudo vppctl pcap trace [rx] [tx] [drop] [max <n>] [intfc <interface-name|any>] [file <nam…",
  "cmd": "sudo vppctl pcap trace [rx] [tx] [drop] [max <n>] [intfc <interface-name|any>] [file <name>] [max-bytes-per-pkt <n>]",
  "desc": "Interfaces · vpp"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "sudo vppctl pcap trace status",
  "cmd": "sudo vppctl pcap trace status",
  "desc": "System · vpp"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "sudo vppctl pcap trace off",
  "cmd": "sudo vppctl pcap trace off",
  "desc": "System · vpp"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "sudo vppctl trace add <input-graph-node> <pkts> [verbose]",
  "cmd": "sudo vppctl trace add <input-graph-node> <pkts> [verbose]",
  "desc": "System · vpp"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Troubleshooting",
  "title": "sudo vppctl show trace [max COUNT]",
  "cmd": "sudo vppctl show trace [max COUNT]",
  "desc": "Troubleshooting · vpp"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "sudo vppctl clear trace",
  "cmd": "sudo vppctl clear trace",
  "desc": "System · vpp"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "sudo chmod +x /config/scripts/vpp-collect-diagnostics",
  "cmd": "sudo chmod +x /config/scripts/vpp-collect-diagnostics",
  "desc": "System · vpp"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "/config/scripts/vpp-collect-diagnostics",
  "cmd": "/config/scripts/vpp-collect-diagnostics",
  "desc": "System · vpp"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "generate tech-support archive",
  "cmd": "generate tech-support archive",
  "desc": "System · vpp"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set vpp sflow interface <interface-name>",
  "cmd": "set vpp sflow interface <interface-name>",
  "desc": "Interfaces · general"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp sflow header-bytes <bytes>",
  "cmd": "set vpp sflow header-bytes <bytes>",
  "desc": "System · general"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system sflow vpp",
  "cmd": "set system sflow vpp",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 interface inside <inside-interface>",
  "cmd": "set vpp nat nat44 interface inside <inside-interface>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 interface outside <outside-interface>",
  "cmd": "set vpp nat nat44 interface outside <outside-interface>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 address-pool translation address <ip-address | ip-address-range>",
  "cmd": "set vpp nat nat44 address-pool translation address <ip-address | ip-address-range>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 address-pool translation interface <interface-name>",
  "cmd": "set vpp nat nat44 address-pool translation interface <interface-name>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 address-pool twice-nat address <ip-address | ip-address-range>",
  "cmd": "set vpp nat nat44 address-pool twice-nat address <ip-address | ip-address-range>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 address-pool twice-nat interface <interface-name>",
  "cmd": "set vpp nat nat44 address-pool twice-nat interface <interface-name>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 static rule <rule-number> local address <internal-ip>",
  "cmd": "set vpp nat nat44 static rule <rule-number> local address <internal-ip>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 static rule <rule-number> external address <external-ip>",
  "cmd": "set vpp nat nat44 static rule <rule-number> external address <external-ip>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 static rule <rule-number> local port <internal-port>",
  "cmd": "set vpp nat nat44 static rule <rule-number> local port <internal-port>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 static rule <rule-number> external port <external-port>",
  "cmd": "set vpp nat nat44 static rule <rule-number> external port <external-port>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 static rule <rule-number> protocol <protocol>",
  "cmd": "set vpp nat nat44 static rule <rule-number> protocol <protocol>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 static rule <rule-number> options twice-nat",
  "cmd": "set vpp nat nat44 static rule <rule-number> options twice-nat",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 static rule <rule-number> options self-twice-nat",
  "cmd": "set vpp nat nat44 static rule <rule-number> options self-twice-nat",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 static rule <rule-number> options out-to-in-only",
  "cmd": "set vpp nat nat44 static rule <rule-number> options out-to-in-only",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 static rule <rule-number> options twice-nat-address <ip-address>",
  "cmd": "set vpp nat nat44 static rule <rule-number> options twice-nat-address <ip-address>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 static rule <rule-number> description <description>",
  "cmd": "set vpp nat nat44 static rule <rule-number> description <description>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 exclude rule <rule-number> local-address <internal-ip>",
  "cmd": "set vpp nat nat44 exclude rule <rule-number> local-address <internal-ip>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 exclude rule <rule-number> external-interface <interface-name>",
  "cmd": "set vpp nat nat44 exclude rule <rule-number> external-interface <interface-name>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 exclude rule <rule-number> local-port <port-number>",
  "cmd": "set vpp nat nat44 exclude rule <rule-number> local-port <port-number>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 exclude rule <rule-number> protocol <protocol>",
  "cmd": "set vpp nat nat44 exclude rule <rule-number> protocol <protocol>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat nat44 exclude rule <rule-number> description <description>",
  "cmd": "set vpp nat nat44 exclude rule <rule-number> description <description>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat cgnat interface inside <inside-interface>",
  "cmd": "set vpp nat cgnat interface inside <inside-interface>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat cgnat interface outside <outside-interface>",
  "cmd": "set vpp nat cgnat interface outside <outside-interface>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat cgnat rule <rule-number> description <description>",
  "cmd": "set vpp nat cgnat rule <rule-number> description <description>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat cgnat rule <rule-number> inside-prefix <inside-prefix>",
  "cmd": "set vpp nat cgnat rule <rule-number> inside-prefix <inside-prefix>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat cgnat rule <rule-number> outside-prefix <outside-prefix>",
  "cmd": "set vpp nat cgnat rule <rule-number> outside-prefix <outside-prefix>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat cgnat exclude rule <rule-number> description <description>",
  "cmd": "set vpp nat cgnat exclude rule <rule-number> description <description>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat cgnat exclude rule <rule-number> local-address <local-address>",
  "cmd": "set vpp nat cgnat exclude rule <rule-number> local-address <local-address>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat cgnat exclude rule <rule-number> protocol <tcp|udp|icmp|all>",
  "cmd": "set vpp nat cgnat exclude rule <rule-number> protocol <tcp|udp|icmp|all>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "set vpp nat cgnat exclude rule <rule-number> local-port <1-65535>",
  "cmd": "set vpp nat cgnat exclude rule <rule-number> local-port <1-65535>",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "show vpp nat cgnat interfaces",
  "cmd": "show vpp nat cgnat interfaces",
  "desc": "NAT · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "show vpp nat cgnat sessions",
  "cmd": "show vpp nat cgnat sessions",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "show vpp nat cgnat mappings",
  "cmd": "show vpp nat cgnat mappings",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "NAT",
  "title": "show vpp nat cgnat exclude-rules",
  "cmd": "show vpp nat cgnat exclude-rules",
  "desc": "NAT · nat"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings resource-allocation buffers buffers-per-numa <value>",
  "cmd": "set vpp settings resource-allocation buffers buffers-per-numa <value>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set vpp settings resource-allocation memory main-heap-page-size <size>",
  "cmd": "set vpp settings resource-allocation memory main-heap-page-size <size>",
  "desc": "System · dataplane"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "System",
  "title": "set system option kernel memory hugepage-size <size> hugepage-count '<count>'",
  "cmd": "set system option kernel memory hugepage-size <size> hugepage-count '<count>'",
  "desc": "System · system"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp xconnect <vppxconN> member interface <interface-name>",
  "cmd": "set interfaces vpp xconnect <vppxconN> member interface <interface-name>",
  "desc": "Interfaces — Add an interface as a member of the XConnect. Exactly two member interfaces must be configured to create bidirectional forwarding."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces vpp loopback <vpploN> vif <vlan-id> address <ip-address/prefix>",
  "cmd": "set interfaces vpp loopback <vpploN> vif <vlan-id> address <ip-address/prefix>",
  "desc": "VLAN · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces vpp loopback <vpploN> vif <vlan-id> description <description>",
  "cmd": "set interfaces vpp loopback <vpploN> vif <vlan-id> description <description>",
  "desc": "VLAN · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp bridge <vppbrN> member interface <interface-name>",
  "cmd": "set interfaces vpp bridge <vppbrN> member interface <interface-name>",
  "desc": "Interfaces — Add an interface as a member of the bridge."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp bridge <vppbrN> member interface <loopback-interface> bvi",
  "cmd": "set interfaces vpp bridge <vppbrN> member interface <loopback-interface> bvi",
  "desc": "Interfaces — Designate a loopback interface as the Bridge Virtual Interface for the bridge domain."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "Interfaces",
  "title": "set interfaces vpp bonding <vppbondN> member interface <interface-name>",
  "cmd": "set interfaces vpp bonding <vppbondN> member interface <interface-name>",
  "desc": "Interfaces — Add physical interfaces as members of the bond. You can add multiple interfaces to the same bond."
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces vpp bonding <vppbondN> vif <vlan-id> address <ip-address/prefix>",
  "cmd": "set interfaces vpp bonding <vppbondN> vif <vlan-id> address <ip-address/prefix>",
  "desc": "VLAN · interfaces"
 },
 {
  "os": "vyos",
  "role": "router",
  "vendor": "VyOS",
  "cat": "VLAN",
  "title": "set interfaces vpp bonding <vppbondN> vif <vlan-id> description <description>",
  "cmd": "set interfaces vpp bonding <vppbondN> vif <vlan-id> description <description>",
  "desc": "VLAN · interfaces"
 }
]