How to search junos configuration option within cli help apropos
How to search junos configuration option within cli [help apropos]To quickly find a JUNOS configuration option always use "help apropos" operational command. It can be used even if the full junos syntax is not known.
"help apropos" will return a list of configuration mode commands containing the keyword argument.
Here is how to search how to change tcp MSS for all tcp sessions globally in Juniper SRX:Code:
user@srx-junos> help apropos mss
help topic bgp tcp-mss
Maximum segment size for TCP connections to neighbors
help topic system tcp-mss
Maximum segment size for TCP packets
help reference security tcp-mss
Configure TCP maximum segment size
help reference security mss
Specify maximum segment size in TCP header
help reference security ipsec-vpn-flow
TCP MSS for TCP packets bound for VPN tunnel
help reference security gre-in
TCP MSS for GRE packets from VPN tunnel
help reference security gre-out
TCP MSS for GRE packets to VPN tunnel
help reference services tcp-mss
Maximum TCP segment size for service set
help reference services mss
TCP delayed binding MSS value
help reference system tcp-mss
Maximum segment size for TCP packets
help reference bgp tcp-mss
Maximum segment size for TCP connections to neighbors
user@srx-junos> help apropos mss | match flow
help reference security ipsec-vpn-flow
user@srx-junos> help reference security ipsec-vpn-flow
ipsec-vpn (Security Flow)
Syntax
ipsec-vpn {
mss value;
}
Hierarchy Level
[edit security flow tcp-mss]
Release Information
Statement introduced in Release 8.5 of Junos OS.
Description
Specify the TCP maximum segment size (TCP MSS) for the TCP packets that
are about to go into an IPsec VPN tunnel. This value overrides the value
specified in the all-tcp-mss statement.
Options
mss value-TCP MSS value for TCP packets entering an IPsec VPN tunnel.
Value is optional.
Range: 64 through 65,535 bytes
Default: 1320 bytes
Required Privilege Level
security-To view this statement in the configuration.
security-control-To add this statement to the configuration.
Related-Topics
* IPsec VPNs for Security Devices