roles.yaml | Homer Public

Type: object
No Additional Properties

All property whose name matches the following regular expression must respect the following conditions

Property name regular expression: ^.+$
Type: object
No Additional Properties

Type: array

List of addr/netmask for mgmt interfaces; if specified, one per RE.

Type: array

List of FPC indices on which to enable jflow sampling.

Type: object

BGP peer IP

Each additional property must conform to the following schema

Type: object
No Additional Properties

Type: string

one of common.yaml transit_providers

Type: boolean

Generate the policy based on the peer ASN.

Type: boolean

Generate the policy based on the peer ASN.

Type: object

Extra firewall filters to apply to interfaces.

No Additional Properties

All property whose name matches the following regular expression must respect the following conditions

Property name regular expression: ^.+$
Type: string

Type: boolean

In a LACP bundle, configure VRRP to failover on the loss of one link.

Type: integer

Override priority for every VRRP, useful for forced failover/maintenance. Highest number wins; default when unspecified is 100. Remove any vrrpmasterpinning config on both devices before using as it takes precedence.

Type: array

Pin (sub)interfaces to a given device (sets its VRRP priority to 110)

Type: object
No Additional Properties

Type: string

Type: string

Type: array

Enable interface flap damping.

Type: boolean

Set if the IXP terminating on that router should be prioritized.

Type: boolean

Legacy Junos syntax

Type: boolean

Clamps outbound tcp-mss to 1436. Usually applied per site.

Type: boolean

Prepends our AS# 3x to our peering and transits. Usually applied per site.

Type: string

Type: array

Don't send LLDP frames on those interfaces as SRXs show L2 errors when receiving them.

Type: object

Add flowspec rule to the routers

No Additional Properties

All property whose name matches the following regular expression must respect the following conditions

Property name regular expression: ^.+$
Type: object
No Additional Properties

Type: string

Type: enum (of string)

Must be one of:

  • "tcp"
  • "udp"
  • "ip"
  • "ah"
  • "egp"
  • "esp"
  • "gre"
  • "icmp"
  • "icmp6"
  • "igmp"
  • "ipip"
  • "ospf"
  • "pim"
  • "rsvp"
  • "sctp"
  • "[tcp udp]"

Type: string

Type: string

Type: array

Type: object

GRE tunnels source/destination

No Additional Properties

All property whose name matches the following regular expression must respect the following conditions

Property name regular expression: ^.+$
Type: object
No Additional Properties

Type: string

Type: string

Type: object

Configure Juniper's security logs

No Additional Properties

Type: string

Local source IP.

Type: object
No Additional Properties

All property whose name matches the following regular expression must respect the following conditions

Property name regular expression: ^.+$
Type: string

Unique name and destination IP.

Type: object
No Additional Properties

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Type: integer

Primary ASN of the device.

Type: integer

Type: string

Type: array

Type: object
No Additional Properties

Type: string

Type: object

Each additional property must conform to the following schema

Type: string

Type: object

Each additional property must conform to the following schema

Type: string

Type: object

Each additional property must conform to the following schema

Type: string

Type: object

Each additional property must conform to the following schema

Type: string

Type: object

Each additional property must conform to the following schema

Type: object

The following properties are required:

  • 4
  • 6

Type: string

Type: string

Type: string

Type: object
No Additional Properties

Type: array

Type: array

List of Capirca policy files to apply

Type: object

Each additional property must conform to the following schema

Type: string

Type: array

[Secret] some features require a license key.

Type: boolean

Adds class-of-service config to allocate most of switch shared-buffer to best effort #T284592

Type: array

Type: boolean

Configure interfaces using Netbox as the source of truth.

Type: boolean

Don't try to enable the VCP stats (for Junos versions not compatible).

Type: boolean

The switch also does L3 routing.

Type: string

[Secret]

Type: string

[Secret]

Type: string

[Secret]

Type: array

Network prefixes to ban, v4 and v6 with subnet

Type: array

Whitelisted networks with less restrictions

Type: array

Whitelisted networks with less restrictions

Same definition as trusted_space4

Type: array

Force router to accept a RPKI invalid prefix.