system {
    host-name Mark-Test;
    root-authentication {
        encrypted-password 
    }
    login {
        class lan-tech-local {
            idle-timeout 20;
            login-alarms;
            permissions [ clear configure control firewall interface interface-control network rollback routing routing-control system system-control trace trace-control view view-configuration ];
            allow-commands "(clear system reboot)|(request system configuration rescue save)|(request system halt)";
        }
        class super-user-local {
            idle-timeout 360;
            login-alarms;
            permissions all;
        }
 
        password {
            minimum-length 8;
            maximum-length 20;
            minimum-changes 2;
        }
               
    services {
        ssh {
            root-login allow;
            protocol-version v2;
            max-sessions-per-connection 64;
        }
        netconf {
            ssh;
        }
    }
    auto-snapshot;
    domain-name x.x.local;
    time-zone cst6cdt;
    no-redirects;
    arp {
        aging-timer 5;
    }
    name-server {
      
    }
    syslog {
                       
        user * {
            any emergency;
        }
        host .8.198 {
            any any;
        }
        file cli-commands {
            interactive-commands any;
            archive size 5m files 20;
        }
        file config-changes {
            change-log info;
            archive size 5m files 20;
        }
        file default-log-messages {
            any any;
                                        
            match "(FRU Offline)|(FRU Online)|(FRU insertion)|(FRU power)|(FRU removal)|(commit complete)|(copying configuration to juniper.save)|(license add)|(license delete)|(link UP)|(package -X delete)|(package -X update)|(plugged in)|(requested 'commit synchronize' operation)|(requested 'commit' operation)|(unplugged)|Transferred|ifAdminStatus|transfer-file|transitioned| LFMD_3AH | RPD_MPLS_PATH_BFD|(Backup changed)|(Backup detected)|(Master Changed, Members Changed)|(Master Detected, Members Changed)|(Master Unchanged, Members Changed)|(Master changed)|(Master detected)|(interface vcp-)|(vc add)|(vc delete)|CFMD_CCM_DEFECT|(AIS_DATA_AVAILABLE)|BR_INFRA_DEVICE";
            structured-data;
        }
        file errors {
            any error;
            explicit-priority;
        }
        file interactive-commands {
            interactive-commands any;
        }
        file messages {
            any notice;
            authorization info;
            archive size 5m files 20;
        }
                                        
        file router-firewall {
            firewall any;
        }
    }
    ntp {
        boot-server .3.171; ## Warning: 'boot-server' is deprecated
        server .3.171 prefer;
    }
}
chassis {
    alarm {
        management-ethernet {
            link-down ignore;
        }
    }
}
interfaces {
    interface-range Trunks {
        member ge-0/0/11;
        unit 0 {
            family ethernet-switching {
                interface-mode trunk;
                vlan {
                                        
                    members [ vlan10 vlan11 vlan12 vlan13 vlan14 vlan15 ];
                }
                storm-control default;
            }
        }
    }
    interface-range Data {
        member-range ge-0/0/0 to ge-0/0/9;
        description " Network";
        unit 0 {
            family ethernet-switching {
                interface-mode access;
                vlan {
                    members vlan10;
                }
                storm-control default;
            }
        }
    }
    interface-range NDWOI {
        member ge-0/0/10;
        description VOIP;
        unit 0 {
                                        
            family ethernet-switching {
                interface-mode access;
                vlan {
                    members vlan12;
                }
                storm-control default;
            }
        }
    }
    irb {
        unit 10 {
            description "x Network";
            family inet {
                address .67.5/24;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                filter {
                    input Router-Management-IPv4;
                }
                                        
            }
        }
    }
}
snmp {
    contact "HELP";
    client-list x-snmp {
        x.47.88/32;
        x.47.87/32;
        x.47.84/32;
        x.47.89/32;
        x.47.92/32;
        .8.0/25;
        .68.0/24;
    }
    community sdxxx {
        client-list-name x-snmp;
    }
    trap-options;
    trap-group x-traps {
        version v2;
        categories {
            authentication;
                                        
            chassis;
            link;
            routing;
            startup;
            rmon-alarm;
            vrrp-events;
        }
        targets {
            x.47.83;
        }
    }
}
forwarding-options {
    storm-control-profiles default {
        all;
    }
    dhcp-relay {
        forward-snooped-clients all-interfaces;
        overrides {
            trust-option-82;
            delete-binding-on-renegotiation;
        }
        server-group {
                                        
            dhcp-dot1x {
                .7.183;
            }
        }
        active-server-group dhcp-dot1x;
        group all {
            interface ge-0/0/11.0;
            interface irb.0;
        }
    }
}
firewall {
    family inet {
        filter Router-Management-IPv4 {
            term OSPF {
                from {
                    protocol ospf;
                }
                then accept;
            }
            term ICMP {
                from {
                    protocol icmp;
                                        
                    icmp-type [ echo-request echo-reply unreachable time-exceeded source-quench ];
                }
                then accept;
            }
            term local-router {
                from {
                    source-address {
                        127.0.0.0/8;
                    }
                }
                then accept;
            }
            term management-servers {
                from {
                    source-address {
                        .3.171/32;
                    }
                }
                then accept;
            }
            term Management-Port {
                from {
                                        
                    source-address {
                        x.x.10.10/32;
                    }
                }
                then accept;
            }
            term remote-login {
                from {
                    source-address {
                        .68.0/24;
                        .8.0/25;
                    }
                    protocol tcp;
                    destination-port ssh;
                }
                then accept;
            }
            term tacacs {
                from {
                    source-address {
                        .0.0/16;
                    }
                    protocol tcp;
                                        
                    destination-port tacacs;
                }
                then accept;
            }
            term DHCP-Relay {
                from {
                    protocol udp;
                    source-port [ 68 67 ];
                    destination-port [ 67 68 ];
                }
                then accept;
            }
            term snmp {
                from {
                    source-address {
                        .68.0/24;
                        x.47.0/24;
                        .8.0/25;
                    }
                    protocol udp;
                    destination-port snmp;
                }
                then accept;
                                        
            }
            term DNS {
                from {
                    source-address {
                        206.176.52.0/24;
                        .9.9/32;
                        .9.10/32;
                    }
                    protocol udp;
                    source-port domain;
                }
                then accept;
            }
            term FTP {
                from {
                    source-address {
                        .0.0/16;
                    }
                    protocol tcp;
                    destination-port [ ftp 20 ];
                }
                then accept;
            }
                                        
            term Telnet-Established {
                from {
                    protocol tcp;
                    source-port 23;
                }
                then accept;
            }
            term TCP-Established {
                from {
                    source-address {
                        .0.0/16;
                    }
                    protocol tcp;
                    destination-port 1024-65535;
                }
                then accept;
            }
            term Deny-All-Else {
                then {
                    discard;
                }
            }
        }
                                        
    }
}
access {
    radius-server {
        .7.183 {
            dynamic-request-port 3799;
            secret "xxx"; ## SECRET-DATA
            source-address .67.5;
        }
    }
    profile CP-xxxs-Profile {
        accounting-order radius;
        authentication-order radius;
        radius {
            authentication-server .7.183;
            accounting-server .7.183;
        }
    }
}
routing-options {
    graceful-restart;
    static {
        route 0.0.0.0/0 next-hop .67.1;
                                        
    }
}
protocols {
    dot1x {
        authenticator {
            authentication-profile-name CP-xxxs-Profile;
            interface {
                Data {
                    supplicant multiple;
                    mac-radius {
                        restrict;
                        authentication-protocol {
                            pap;
                        }
                    }
                }
                NDWOI {
                    mac-radius {
                        restrict;
                        authentication-protocol {
                            pap;
                        }
                    }
                                        
                }
                all;
            }
        }
    }
    lldp {
        interface all;
    }
    lldp-med {
        interface all;
    }
    igmp-snooping {
        vlan default;
    }
    vstp {
        interface all;
        vlan all;
    }
}
switch-options {
    voip {
        interface Data {
            vlan vlan11;
                                        
            forwarding-class assured-forwarding;
        }
    }
}
poe {
    interface all;
    interface Trunks {
        disable;
    }
}
vlans {
    vlan10 {
        description "x Network";
        vlan-id 10;
        l3-interface irb.10;
    }
    vlan11 {
        description VoIP;
        vlan-id 11;
    }
    vlan12 {
        description "Non-Domain x Device Without Internet Access";
        vlan-id 12;
                                        
    }
    vlan13 {
        description "Non-Domain x Device With Internet Access";
        vlan-id 13;
    }
    vlan14 {
        description "Non-x Users Without Internet Access";
        vlan-id 14;
    }
    vlan15 {
        description "Non-x Users With Internet Access";
        vlan-id 15;
    }
}configure 
Entering configuration mode

{master:0}[edit]
root@Mark-Test# run show configuration in      interfaces 
interface-range Trunks {
    member ge-0/0/11;
    unit 0 {
        family ethernet-switching {
            interface-mode trunk;
            vlan {
                members [ vlan10 vlan11 vlan12 vlan13 vlan14 vlan15 ];
            }
            storm-control default;
        }
    }
}
interface-range Data {
    member-range ge-0/0/0 to ge-0/0/9;
    description "State Network";
    unit 0 {
        family ethernet-switching {
            interface-mode access;
            vlan {
                members vlan10;
            }
            storm-control default;
        }
---(more)---
                                        
    }
}
interface-range NDWOI {
    member ge-0/0/10;
    description VOIP;
    unit 0 {
        family ethernet-switching {
            interface-mode access;
            vlan {
                members vlan12;
            }
            storm-control default;
        }
    }
}
irb {
    unit 10 {
        description "State Network";
        family inet {
            address 164.154.67.5/24;
        }
    }
}
---(more 83%)---[abort]

{master:0}[edit]
root@Mark-Test# edit interfaces interface-range NDWOI 

{master:0}[edit interfaces interface-range NDWOI]
root@Mark-Test# show 
member ge-0/0/10;
description VOIP;
unit 0 {
    family ethernet-switching {
        interface-mode access;
        vlan {
            members vlan12;
        }
        storm-control default;
    }
}

{master:0}[edit interfaces interface-range NDWOI]
root@Mark-Test# s   e
                 ^
'e' is ambiguous.
Possible completions:
  edit                 Edit a sub-element
  exit                 Exit from this level
  extension            Extension operations
{master:0}[edit interfaces interface-range NDWOI]

root@Mark-Test# e    dit unit 0 family eh
                                   ^
syntax error.

root@Mark-Test# edit unit 0 family eh      thernet-switching 

{master:0}[edit interfaces interface-range NDWOI unit 0 family ethernet-switching]
root@Mark-Test# show 
interface-mode access;
vlan {
    members vlan12;
}
storm-control default;

{master:0}[edit interfaces interface-range NDWOI unit 0 family ethernet-switching]
root@Mark-Test# delete vlan
root@Mark-Test# delete vlan    members vlan1
root@Mark-Test# delete vlan members vlan1   2 

{master:0}[edit interfaces interface-range NDWOI unit 0 family ethernet-switching]
root@Mark-Test# 
root@Mark-Test# delete vlan members vlan12     vlan members vlan12     vlan members vlan12     vlan members vlan12     vlan members vlan12     vlan members vlan12     vlan members vlan12    s vlan members vlan12 e vlan members vlan12 t vlan members vlan12  vlan members vlan12       1 

{master:0}[edit interfaces interface-range NDWOI unit 0 family ethernet-switching]
root@Mark-Test# commit 
configuration check succeeds
commit complete

{master:0}[edit interfaces interface-range NDWOI unit 0 family ethernet-switching]
root@Mark-Test# exit 

{master:0}[edit interfaces interface-range NDWOI]
root@Mark-Test# top 

{master:0}[edit]
root@Mark-Test# exit 
Exiting configuration mode

{master:0}
root@Mark-Test> request system con
                                  ^
'con' is ambiguous.
Possible completions:
  configuration        Request operation on system configuration
  convert-json-configuration  Convert the given JSON configuration file as per Junos
{master:0}

root@Mark-Test> request system con   figuration rescue save 

{master:0}
root@Mark-Test> show d
                      ^
'd' is ambiguous.
Possible completions:
  database-replication  Show database replication information
  dhcp                 Show Dynamic Host Configuration Protocol information
  dhcp-security        Show DHCP access security information
  dhcpv6               Show Dynamic Host Configuration Protocol v6 information
  diagnostics          Show diagnostics information
  dot1x                Show 802.1X information
  dynamic-profile      Show dynamic profile information
  dynamic-tunnels      Show dynamic tunnel information
{master:0}

root@Mark-Test> show d   hsp      cp ?
Possible completions:
  active-leasequery    Show dhcp active-leasequery
  client               Show DHCP client information
  relay                Show DHCP relay information
  server               Show DHCP server information
  statistics           Show DHCP service statistics
{master:0}

root@Mark-Test> show dhcp     relay statistics 
Packets dropped:
    Total                      13
    Invalid server address     2
    Interface not configured   11

Messages received:
    BOOTREQUEST                0
    DHCPDECLINE                0
    DHCPDISCOVER               0
    DHCPINFORM                 0
    DHCPRELEASE                0
    DHCPREQUEST                0
    DHCPLEASEACTIVE            0
    DHCPLEASEUNASSIGNED        0
    DHCPLEASEUNKNOWN           0
    DHCPLEASEQUERYDONE         0
    DHCPACTIVELEASEQUERY       0

Messages sent:
    BOOTREPLY                  0
    DHCPOFFER                  0
    DHCPACK                    0
    DHCPNAK                    0
---(more)---
                                        
    DHCPFORCERENEW             0
    DHCPLEASEQUERY             0
    DHCPBULKLEASEQUERY         0
    DHCPLEASEACTIVE            0
    DHCPLEASEUNASSIGNED        0
    DHCPLEASEUNKNOWN           0
    DHCPLEASEQUERYDONE         0
    DHCPACTIVELEASEQUERY       0

{master:0}
root@Mark-Test>