Cisco-IOS-XE-crypto

YANG Data Model Tree Structure

View YANG Source on GitHub →

📚 API Documentation & Navigation

📄 Swagger API Spec 📂 Browse Native Config APIs 🌳 All Trees

📋 Module Metadata

Namespace: http://cisco.com/ns/yang/Cisco-IOS-XE-crypto

Prefix: crypto

Related Modules:
Cisco-IOS-XE-crypto-oper
Cisco-IOS-XE-crypto-pki-oper
Cisco-IOS-XE-crypto-actions-rpc
Cisco-IOS-XE-crypto-events
Cisco-IOS-XE-crypto-pki-events

💡 Example Usage

# GET module data
curl -X GET \
  -H "Accept: application/yang-data+json" \
  -u admin:password \
  --insecure \
  https://device-ip/restconf/data/Cisco-IOS-XE-crypto

📚 External Documentation

💻 YANG Source📖 YANG Catalog🌐 DevNet Guide
module: Cisco-IOS-XE-crypto

  augment /ios:native/ios:key:
    +--rw chain* [name]
    |  +--rw name           string
    |  +--rw description?   string
    |  +--rw macsec?        empty
    |  +--rw tcp?           empty
    |  +--rw key* [id]
    |     +--rw id                                string
    |     +--rw cryptographic-algorithm-choice
    |     |  +--rw tcp?       enumeration
    |     |  +--rw default?   enumeration
    |     |  +--rw macsec?    enumeration
    |     x--rw cryptographic-algorithm?          enumeration
    |     +--rw key-string
    |     |  +--rw encryption?   enumeration
    |     |  +--rw key?          string
    |     +--rw accept-lifetime
    |     |  +--rw lifetime-group-v1
    |     |     +--rw local?                empty
    |     |     +--rw start-hh-mm-ss?       ios-types:hhmmss-type
    |     |     +--rw start-month?          ios-types:month-type
    |     |     +--rw start-day?            uint8
    |     |     +--rw start-year?           uint16
    |     |     +--rw (lifetime-end-choice)?
    |     |        +--:(duration)
    |     |        |  +--rw duration?       uint32
    |     |        +--:(infinite)
    |     |        |  +--rw infinite?       empty
    |     |        +--:(time-date)
    |     |           +--rw end-hh-mm-ss?   ios-types:hhmmss-type
    |     |           +--rw end-month?      ios-types:month-type
    |     |           +--rw end-day?        uint8
    |     |           +--rw end-year?       uint16
    |     +--rw send-lifetime
    |     |  +--rw lifetime-group-v1
    |     |     +--rw local?                empty
    |     |     +--rw start-hh-mm-ss?       ios-types:hhmmss-type
    |     |     +--rw start-month?          ios-types:month-type
    |     |     +--rw start-day?            uint8
    |     |     +--rw start-year?           uint16
    |     |     +--rw (lifetime-end-choice)?
    |     |        +--:(duration)
    |     |        |  +--rw duration?       uint32
    |     |        +--:(infinite)
    |     |        |  +--rw infinite?       empty
    |     |        +--:(time-date)
    |     |           +--rw end-hh-mm-ss?   ios-types:hhmmss-type
    |     |           +--rw end-month?      ios-types:month-type
    |     |           +--rw end-day?        uint8
    |     |           +--rw end-year?       uint16
    |     o--rw (lifetime-choice)?
    |     |  o--:(lifetime-only)
    |     |  |  o--rw lifetime
    |     |  |     o--rw lifetime-group
    |     |  |        o--rw hh-mm-ss?       ios-types:hhmmss-type
    |     |  |        o--rw (date-month)?
    |     |  |        |  o--:(date1)
    |     |  |        |  |  o--rw date1?    uint8
    |     |  |        |  o--:(month1)
    |     |  |        |     o--rw month1?   string
    |     |  |        o--rw (month-date)?
    |     |  |        |  o--:(date2)
    |     |  |        |  |  o--rw date2?    uint8
    |     |  |        |  o--:(month2)
    |     |  |        |     o--rw month2?   string
    |     |  |        o--rw year?           uint16
    |     |  |        o--rw duration?       uint32
    |     |  |        o--rw hh-mm-ss1?      ios-types:hhmmss-type
    |     |  |        o--rw (date-month1)?
    |     |  |        |  o--:(date3)
    |     |  |        |  |  o--rw date3?    uint8
    |     |  |        |  o--:(month3)
    |     |  |        |     o--rw month3?   string
    |     |  |        o--rw (month-date1)?
    |     |  |        |  o--:(date4)
    |     |  |        |  |  o--rw date4?    uint8
    |     |  |        |  o--:(month4)
    |     |  |        |     o--rw month4?   string
    |     |  |        o--rw year1?          uint16
    |     |  |        o--rw infinite?       empty
    |     |  o--:(lifetime-local)
    |     |     o--rw lifetime-local
    |     |        o--rw local
    |     |           o--rw lifetime-group
    |     |              o--rw hh-mm-ss?       ios-types:hhmmss-type
    |     |              o--rw (date-month)?
    |     |              |  o--:(date1)
    |     |              |  |  o--rw date1?    uint8
    |     |              |  o--:(month1)
    |     |              |     o--rw month1?   string
    |     |              o--rw (month-date)?
    |     |              |  o--:(date2)
    |     |              |  |  o--rw date2?    uint8
    |     |              |  o--:(month2)
    |     |              |     o--rw month2?   string
    |     |              o--rw year?           uint16
    |     |              o--rw duration?       uint32
    |     |              o--rw hh-mm-ss1?      ios-types:hhmmss-type
    |     |              o--rw (date-month1)?
    |     |              |  o--:(date3)
    |     |              |  |  o--rw date3?    uint8
    |     |              |  o--:(month3)
    |     |              |     o--rw month3?   string
    |     |              o--rw (month-date1)?
    |     |              |  o--:(date4)
    |     |              |  |  o--rw date4?    uint8
    |     |              |  o--:(month4)
    |     |              |     o--rw month4?   string
    |     |              o--rw year1?          uint16
    |     |              o--rw infinite?       empty
    |     +--rw macsec-lifetime
    |     |  +--rw lifetime
    |     |     +--rw lifetime-group-v1
    |     |        +--rw local?                empty
    |     |        +--rw start-hh-mm-ss?       ios-types:hhmmss-type
    |     |        +--rw start-month?          ios-types:month-type
    |     |        +--rw start-day?            uint8
    |     |        +--rw start-year?           uint16
    |     |        +--rw (lifetime-end-choice)?
    |     |           +--:(duration)
    |     |           |  +--rw duration?       uint32
    |     |           +--:(infinite)
    |     |           |  +--rw infinite?       empty
    |     |           +--:(time-date)
    |     |              +--rw end-hh-mm-ss?   ios-types:hhmmss-type
    |     |              +--rw end-month?      ios-types:month-type
    |     |              +--rw end-day?        uint8
    |     |              +--rw end-year?       uint16
    |     +--rw send-id?                          uint8
    |     +--rw recv-id?                          uint8
    |     +--rw include-tcp-options?              boolean
    |     +--rw accept-ao-mismatch?               boolean
    o--rw config-key
       o--rw newpass?   string
       o--rw oldpass?   string
  augment /ios:native/ios:crypto:
    +--rw call
    |  +--rw admission
    |     +--rw limit
    |        +--rw all
    |        |  +--rw in-negotiation-sa?   uint32
    |        +--rw ike
    |        |  +--rw in-negotiation-sa?   uint32
    |        |  +--rw sa?                  uint32
    |        +--rw ipsec
    |           +--rw sa?   uint32
    +--rw dynamic-map* [name sequence]
    |  +--rw name             string
    |  +--rw sequence         uint16
    |  +--rw default
    |  |  +--rw description?     empty
    |  |  +--rw dialer
    |  |  |  +--rw pre-classify?   empty
    |  |  +--rw disable?         empty
    |  |  +--rw match
    |  |  |  +--rw address?   empty
    |  |  +--rw qos
    |  |  |  +--rw pre-classify?   empty
    |  |  +--rw reverse-route!
    |  |  +--rw set
    |  |     +--rw group?                  empty
    |  |     +--rw identity?               empty
    |  |     +--rw ikev2-profile?          string
    |  |     +--rw ip
    |  |     |  +--rw access-group?   ios-types:exp-acl-type
    |  |     |  +--rw direction?      enumeration
    |  |     +--rw isakmp-profile?         string
    |  |     +--rw nat
    |  |     |  +--rw demux?   empty
    |  |     +--rw peer-container
    |  |     |  +--rw peer?      inet:host
    |  |     |  +--rw default?   empty
    |  |     +--rw pfs!
    |  |     +--rw reverse-route!
    |  |     +--rw security-association
    |  |     |  +--rw dfbit?                 empty
    |  |     |  +--rw dummy!
    |  |     |  +--rw ecn?                   empty
    |  |     |  +--rw idle-time-container
    |  |     |  |  +--rw idle-time?   empty
    |  |     |  |  +--rw default?     empty
    |  |     |  +--rw lifetime
    |  |     |  |  +--rw days?        empty
    |  |     |  |  +--rw kilobytes?   empty
    |  |     |  |  +--rw seconds?     empty
    |  |     |  +--rw replay
    |  |     |     +--rw disable?       empty
    |  |     |     +--rw window-size?   empty
    |  |     +--rw transform-set?          empty
    |  +--rw description?     string
    |  +--rw dialer
    |  |  +--rw pre-classify?   empty
    |  +--rw match
    |  |  +--rw address?   ios-types:ext-acl-type
    |  +--rw qos
    |  |  +--rw pre-classify?   empty
    |  +--rw reverse-route!
    |  |  +--rw (remote-peer-static)?
    |  |     +--:(remote-peer-case)
    |  |     |  +--rw remote-peer-conatiner
    |  |     |     +--rw remote-peer?   inet:ip-address
    |  |     |     +--rw gateway?       empty
    |  |     |     +--rw static?        empty
    |  |     +--:(static-case)
    |  |        +--rw static?                  empty
    |  +--rw set
    |     +--rw group?                  string
    |     +--rw identity?               string
    |     +--rw (isakmp_profile-ikev2_profile)?
    |     |  +--:(ikev2-profile-case)
    |     |  |  +--rw ikev2-profile?    string
    |     |  +--:(isakmp-profile-case)
    |     |     +--rw isakmp-profile?   string
    |     +--rw peer
    |     |  +--rw addresses*   union
    |     |  x--rw address?     union
    |     |  +--rw default?     empty
    |     |  +--rw dynamic?     empty
    |     +--rw pfs!
    |     |  +--rw group?   enumeration
    |     +--rw reverse-route
    |     |  +--rw distance?   uint8
    |     |  +--rw tag?        uint64
    |     |  +--rw gateway?    union
    |     +--rw transform-set*          string
    |     +--rw ip
    |     |  +--rw access-group?   ios-types:exp-acl-type
    |     |  +--rw direction?      enumeration
    |     o--rw ip-in
    |     |  o--rw ip
    |     |     o--rw access-group?   ios-types:exp-acl-type
    |     |     o--rw in?             empty
    |     o--rw ip-out
    |     |  o--rw ip
    |     |     o--rw access-group?   ios-types:exp-acl-type
    |     |     o--rw out?            empty
    |     +--rw nat
    |     |  +--rw demux?   empty
    |     o--rw peer-container
    |     |  o--rw peer?      inet:host
    |     |  o--rw default?   empty
    |     +--rw security-association
    |        +--rw dfbit?                 enumeration
    |        +--rw dummy
    |        |  +--rw pps?       uint8
    |        |  +--rw seconds?   uint16
    |        +--rw ecn?                   enumeration
    |        +--rw idle-time-container
    |        |  +--rw idle-time?   uint32
    |        |  +--rw default?     empty
    |        +--rw lifetime
    |        |  +--rw (days-seconds)?
    |        |  |  +--:(days)
    |        |  |  |  +--rw days-case?      uint8
    |        |  |  +--:(seconds)
    |        |  |     +--rw seconds-case?   uint64
    |        |  x--rw days?                 uint8
    |        |  +--rw kilobytes?            union
    |        |  x--rw seconds?              uint64
    |        +--rw replay
    |           +--rw disable?       empty
    |           +--rw window-size?   enumeration
    +--rw engine
    |  +--rw software?     enumeration
    |  +--rw compliance
    |     +--rw shield
    |        +--rw disable?   empty
    +--rw gdoi
    |  +--rw group* [name]
    |     +--rw name        string
    |     +--rw ipv6?       empty
    |     +--rw client
    |     |  +--rw bypass-policy-new?       boolean
    |     |  x--rw bypass-policy?           empty
    |     |  +--rw pfs?                     empty
    |     |  +--rw fail-close
    |     |  |  +--rw revert?   empty
    |     |  +--rw protocol
    |     |  |  +--rw gdoi?     empty
    |     |  |  +--rw gikev2?   string
    |     |  +--rw recovery-check
    |     |  |  +--rw interval?   uint16
    |     |  +--rw registration
    |     |  |  +--rw interface?   string
    |     |  +--rw rekey
    |     |  |  +--rw encryption
    |     |  |  |  +--rw rekey-3des-cbc?   empty
    |     |  |  |  +--rw aes-128?          empty
    |     |  |  |  +--rw aes-192?          empty
    |     |  |  |  +--rw aes-256?          empty
    |     |  |  |  +--rw des-cbc?          empty
    |     |  |  +--rw hash
    |     |  |     +--rw sha?      empty
    |     |  |     +--rw sha256?   empty
    |     |  |     +--rw sha384?   empty
    |     |  |     +--rw sha512?   empty
    |     |  +--rw status
    |     |  |  +--rw active-sa
    |     |  |     +--rw track?   uint16
    |     |  +--rw transform-sets*          string
    |     |  +--rw transport-encrypt-key?   enumeration
    |     +--rw identity
    |     |  +--rw address
    |     |  |  +--rw ipv4?   inet:ipv4-address
    |     |  +--rw number?    uint64
    |     +--rw passive?    empty
    |     +--rw server
    |     |  +--rw address
    |     |  |  +--rw ipv4*   inet:ipv4-address
    |     |  |  +--rw ipv6*   inet:ipv6-address
    |     |  +--rw hostname
    |     |  |  +--rw ipv4?   string
    |     |  |  +--rw ipv6?   string
    |     |  +--rw local!
    |     |     +--rw address
    |     |     |  +--rw ipv4?   inet:ipv4-address
    |     |     +--rw pfs?             empty
    |     |     +--rw authorization
    |     |     |  +--rw address
    |     |     |  |  +--rw ipv4?   union
    |     |     |  +--rw identity?   string
    |     |     +--rw gdoi?            empty
    |     |     +--rw gikev2?          string
    |     |     +--rw group
    |     |     |  +--rw size
    |     |     |     +--rw large?    empty
    |     |     |     +--rw medium?   empty
    |     |     |     +--rw small?    enumeration
    |     |     +--rw identifier
    |     |     |  +--rw default
    |     |     |  |  +--rw range
    |     |     |  |  |  +--rw lowest?    uint8
    |     |     |  |  |  +--rw hyphen?    empty
    |     |     |  |  |  +--rw highest?   uint8
    |     |     |  |  +--rw value-id*   uint8
    |     |     |  |  x--rw value?      uint8
    |     |     |  +--rw range
    |     |     |  |  +--rw lowest?    uint8
    |     |     |  |  +--rw hyphen?    empty
    |     |     |  |  +--rw highest?   uint8
    |     |     |  +--rw value-id*   uint8
    |     |     |  x--rw value?      uint8
    |     |     +--rw redundancy!
    |     |     |  +--rw default
    |     |     |  |  +--rw local!
    |     |     |  |  |  +--rw priority?   uint8
    |     |     |  |  +--rw peer
    |     |     |  |  |  +--rw address
    |     |     |  |  |     +--rw ipv4-addr*   inet:ipv4-address
    |     |     |  |  |     x--rw ipv4?        inet:ipv4-address
    |     |     |  |  +--rw protocol!
    |     |     |  |     +--rw pdu?       uint32
    |     |     |  |     +--rw version?   enumeration
    |     |     |  +--rw local!
    |     |     |  |  +--rw priority?   uint8
    |     |     |  +--rw peer
    |     |     |  |  +--rw address
    |     |     |  |     +--rw ipv4-addr*   inet:ipv4-address
    |     |     |  |     x--rw ipv4?        inet:ipv4-address
    |     |     |  +--rw protocol!
    |     |     |     +--rw pdu?       uint32
    |     |     |     +--rw version?   enumeration
    |     |     +--rw registration
    |     |     |  +--rw interface?   string
    |     |     |  +--rw periodic
    |     |     |     +--rw crl
    |     |     |        +--rw trustpoint?   string
    |     |     +--rw rekey
    |     |     |  +--rw acknowledgement?   enumeration
    |     |     |  +--rw address
    |     |     |  |  +--rw ipv4?   ios-types:ext-acl-type
    |     |     |  +--rw algorithm
    |     |     |  |  +--rw a3des-cbc?   empty
    |     |     |  |  +--rw aes?         enumeration
    |     |     |  |  x--rw aes-128?     empty
    |     |     |  |  x--rw aes-192?     empty
    |     |     |  |  x--rw aes-256?     empty
    |     |     |  |  +--rw des-cbc?     empty
    |     |     |  +--rw authentication
    |     |     |  |  +--rw mypubkey
    |     |     |  |     +--rw rsa?   string
    |     |     |  +--rw lifetime
    |     |     |  |  +--rw days?      uint8
    |     |     |  |  +--rw seconds?   uint64
    |     |     |  +--rw retransmit
    |     |     |  |  +--rw seconds?          uint8
    |     |     |  |  +--rw (number-periodic)?
    |     |     |  |     +--:(number-case)
    |     |     |  |     |  +--rw number?     uint8
    |     |     |  |     +--:(periodic-case)
    |     |     |  |        +--rw periodic?   empty
    |     |     |  +--rw sig-hash
    |     |     |  |  +--rw algorithm?   enumeration
    |     |     |  +--rw transport
    |     |     |     +--rw unicast?   empty
    |     |     +--rw sa
    |     |     |  +--rw d3p
    |     |     |  |  +--rw window
    |     |     |  |     +--rw msec?   uint32
    |     |     |  |     +--rw sec?    uint8
    |     |     |  +--rw ipsec* [sequence]
    |     |     |  |  +--rw sequence    uint16
    |     |     |  |  +--rw default
    |     |     |  |  |  +--rw match
    |     |     |  |  |  |  +--rw address!
    |     |     |  |  |  +--rw profile?   empty
    |     |     |  |  |  +--rw replay!
    |     |     |  |  |  +--rw tag!
    |     |     |  |  +--rw match
    |     |     |  |  |  +--rw address
    |     |     |  |  |     +--rw ipv4?   ios-types:ext-acl-type
    |     |     |  |  |     +--rw ipv6?   string
    |     |     |  |  +--rw profile?    string
    |     |     |  |  +--rw replay
    |     |     |  |  |  +--rw counter!
    |     |     |  |  |  |  +--rw window-size?   enumeration
    |     |     |  |  |  +--rw time!
    |     |     |  |  |     +--rw window-size?   uint8
    |     |     |  |  +--rw tag
    |     |     |  |     +--rw cts
    |     |     |  |        +--rw sgt?   empty
    |     |     |  +--rw pair-wise-keying
    |     |     |  |  +--rw safety-limit?   uint8
    |     |     |  +--rw receive-only?       empty
    |     |     +--rw default
    |     |        +--rw address!
    |     |        +--rw authorization
    |     |        |  +--rw address
    |     |        |  |  +--rw ipv4?   empty
    |     |        |  +--rw identity?   empty
    |     |        +--rw gdoi?            empty
    |     |        +--rw gikev2?          empty
    |     |        +--rw group
    |     |        |  +--rw size!
    |     |        +--rw identifier!
    |     |        +--rw redundancy!
    |     |        +--rw registration
    |     |        |  +--rw interface?   string
    |     |        |  +--rw periodic
    |     |        |     +--rw crl
    |     |        |        +--rw trustpoint?   empty
    |     |        +--rw rekey
    |     |        |  +--rw acknowledgement?   empty
    |     |        |  +--rw address!
    |     |        |  +--rw algorithm!
    |     |        |  +--rw authentication!
    |     |        |  +--rw lifetime
    |     |        |  |  +--rw days?      empty
    |     |        |  |  +--rw seconds?   empty
    |     |        |  +--rw retransmit!
    |     |        |  +--rw sig-hash
    |     |        |  |  +--rw algorithm?   empty
    |     |        |  +--rw transport
    |     |        |     +--rw unicast?   empty
    |     |        +--rw sa
    |     |           +--rw d3p!
    |     |           +--rw ipsec* [sequence]
    |     |           |  +--rw sequence    uint16
    |     |           +--rw pair-wise-keying!
    |     |           +--rw receive-only?       empty
    |     +--rw default
    |        +--rw client
    |        |  +--rw bypass-policy-new?       boolean
    |        |  x--rw bypass-policy?           empty
    |        |  +--rw pfs?                     empty
    |        |  +--rw protocol!
    |        |  +--rw recovery-check!
    |        |  +--rw registration
    |        |  |  +--rw interface?   empty
    |        |  +--rw rekey
    |        |  |  +--rw encryption!
    |        |  |  +--rw hash!
    |        |  +--rw status
    |        |  |  +--rw active-sa!
    |        |  +--rw transform-sets?          empty
    |        |  +--rw transport-encrypt-key?   enumeration
    |        +--rw identity!
    |        +--rw passive?    empty
    |        +--rw server
    |           +--rw address
    |           |  +--rw ipv4?   inet:ipv4-address
    |           +--rw hostname
    |           |  +--rw ipv4?   string
    |           +--rw local?      empty
    +--rw ikev2
    |  +--rw authorization
    |  |  +--rw policy* [policy-name]
    |  |     +--rw policy-name                     string
    |  |     +--rw banner?                         string
    |  |     +--rw configuration
    |  |     |  +--rw url?       string
    |  |     |  +--rw version?   uint32
    |  |     +--rw include-local-lan?              empty
    |  |     +--rw ipsec
    |  |     |  +--rw flow-limit?   uint32
    |  |     +--rw mobileopt-serv
    |  |     |  +--rw A.B.C.D?       inet:ipv4-address
    |  |     |  +--rw port-number?   uint32
    |  |     +--rw netmask?                        inet:ipv4-address
    |  |     +--rw pfs?                            empty
    |  |     +--rw route
    |  |     |  +--rw set
    |  |     |  |  +--rw interface
    |  |     |  |  |  +--rw interface-default?     empty
    |  |     |  |  |  +--rw interface-name-list
    |  |     |  |  |  |  +--rw (interface-choice)?
    |  |     |  |  |  |     +--:(AppNav-Compress)
    |  |     |  |  |  |     |  +--rw AppNav-Compress?             uint16
    |  |     |  |  |  |     +--:(AppNav-UnCompress)
    |  |     |  |  |  |     |  +--rw AppNav-UnCompress?           uint16
    |  |     |  |  |  |     +--:(ATM)
    |  |     |  |  |  |     |  +--rw ATM?                         string
    |  |     |  |  |  |     +--:(ATM-subinterface)
    |  |     |  |  |  |     |  +--rw ATM-subinterface
    |  |     |  |  |  |     |     +--rw ATM?   string
    |  |     |  |  |  |     +--:(ATM-ACR)
    |  |     |  |  |  |     |  +--rw ATM-ACR?                     string
    |  |     |  |  |  |     +--:(ATM-ACRsubinterface)
    |  |     |  |  |  |     |  +--rw ATM-ACRsubinterface
    |  |     |  |  |  |     |     +--rw ATM-ACR?   string
    |  |     |  |  |  |     +--:(BDI)
    |  |     |  |  |  |     |  +--rw BDI?                         string
    |  |     |  |  |  |     +--:(CEM)
    |  |     |  |  |  |     |  +--rw CEM?                         string
    |  |     |  |  |  |     +--:(CEM-ACR)
    |  |     |  |  |  |     |  +--rw CEM-ACR?                     uint8
    |  |     |  |  |  |     +--:(Embedded-Service-Engine)
    |  |     |  |  |  |     |  +--rw Embedded-Service-Engine?     string
    |  |     |  |  |  |     +--:(Ethernet)
    |  |     |  |  |  |     |  +--rw Ethernet?                    string
    |  |     |  |  |  |     +--:(FastEthernet)
    |  |     |  |  |  |     |  +--rw FastEthernet?                string
    |  |     |  |  |  |     +--:(GigabitEthernet)
    |  |     |  |  |  |     |  +--rw GigabitEthernet?             string
    |  |     |  |  |  |     +--:(FiveGigabitEthernet)
    |  |     |  |  |  |     |  +--rw FiveGigabitEthernet?         string
    |  |     |  |  |  |     +--:(AppGigabitEthernet)
    |  |     |  |  |  |     |  +--rw AppGigabitEthernet?          string
    |  |     |  |  |  |     o--:(TwentyFiveGigabitEthernet)
    |  |     |  |  |  |     |  o--rw TwentyFiveGigabitEthernet?   string
    |  |     |  |  |  |     +--:(TwentyFiveGigE)
    |  |     |  |  |  |     |  +--rw TwentyFiveGigE?              string
    |  |     |  |  |  |     +--:(TwoGigabitEthernet)
    |  |     |  |  |  |     |  +--rw TwoGigabitEthernet?          string
    |  |     |  |  |  |     +--:(FortyGigabitEthernet)
    |  |     |  |  |  |     |  +--rw FortyGigabitEthernet?        string
    |  |     |  |  |  |     +--:(FiftyGigabitEthernet)
    |  |     |  |  |  |     |  +--rw FiftyGigabitEthernet?        string
    |  |     |  |  |  |     +--:(HundredGigE)
    |  |     |  |  |  |     |  +--rw HundredGigE?                 string
    |  |     |  |  |  |     +--:(L2LISP)
    |  |     |  |  |  |     |  +--rw L2LISP?                      string
    |  |     |  |  |  |     +--:(L2LISP-subinterface)
    |  |     |  |  |  |     |  +--rw L2LISP-subinterface
    |  |     |  |  |  |     |     +--rw L2LISP?   string
    |  |     |  |  |  |     +--:(LISP)
    |  |     |  |  |  |     |  +--rw LISP?                        string
    |  |     |  |  |  |     +--:(LISP-subinterface)
    |  |     |  |  |  |     |  +--rw LISP-subinterface
    |  |     |  |  |  |     |     +--rw LISP?   string
    |  |     |  |  |  |     +--:(Loopback)
    |  |     |  |  |  |     |  +--rw Loopback?                    uint32
    |  |     |  |  |  |     +--:(Multilink)
    |  |     |  |  |  |     |  +--rw Multilink?                   uint16
    |  |     |  |  |  |     +--:(nve)
    |  |     |  |  |  |     |  +--rw nve?                         uint16
    |  |     |  |  |  |     +--:(overlay)
    |  |     |  |  |  |     |  +--rw overlay?                     uint16
    |  |     |  |  |  |     +--:(Port-channel)
    |  |     |  |  |  |     |  +--rw Port-channel?                uint32
    |  |     |  |  |  |     +--:(Port-channel-subinterface)
    |  |     |  |  |  |     |  +--rw Port-channel-subinterface
    |  |     |  |  |  |     |     +--rw Port-channel?   string
    |  |     |  |  |  |     +--:(pseudowire)
    |  |     |  |  |  |     |  +--rw pseudowire?                  uint32
    |  |     |  |  |  |     +--:(SM)
    |  |     |  |  |  |     |  +--rw SM?                          string
    |  |     |  |  |  |     +--:(Cellular)
    |  |     |  |  |  |     |  +--rw Cellular?                    string
    |  |     |  |  |  |     +--:(Dialer)
    |  |     |  |  |  |     |  +--rw Dialer?                      string
    |  |     |  |  |  |     +--:(Serial)
    |  |     |  |  |  |     |  +--rw Serial?                      string
    |  |     |  |  |  |     +--:(Async)
    |  |     |  |  |  |     |  +--rw Async?                       string
    |  |     |  |  |  |     +--:(TenGigabitEthernet)
    |  |     |  |  |  |     |  +--rw TenGigabitEthernet?          string
    |  |     |  |  |  |     +--:(Tunnel)
    |  |     |  |  |  |     |  +--rw Tunnel?                      uint32
    |  |     |  |  |  |     +--:(Virtual-Template)
    |  |     |  |  |  |     |  +--rw Virtual-Template?            uint16
    |  |     |  |  |  |     +--:(Vlan)
    |  |     |  |  |  |     |  +--rw Vlan?                        uint16
    |  |     |  |  |  |     +--:(VirtualPortGroup)
    |  |     |  |  |  |     |  +--rw VirtualPortGroup?            uint16
    |  |     |  |  |  |     +--:(vasileft)
    |  |     |  |  |  |     |  +--rw vasileft?                    uint16
    |  |     |  |  |  |     +--:(vasiright)
    |  |     |  |  |  |     |  +--rw vasiright?                   uint16
    |  |     |  |  |  |     +--:(BD-VIF)
    |  |     |  |  |  |     |  +--rw BD-VIF?                      string
    |  |     |  |  |  |     +--:(MFR)
    |  |     |  |  |  |     |  +--rw MFR?                         uint32
    |  |     |  |  |  |     +--:(Serial-subinterface)
    |  |     |  |  |  |     |  +--rw Serial-subinterface
    |  |     |  |  |  |     |     +--rw Serial?   string
    |  |     |  |  |  |     +--:(Bundle)
    |  |     |  |  |  |        +--rw Bundle?                      uint32 {ios-features:cable-config}?
    |  |     |  |  |  o--rw interface-list* [interface-name]
    |  |     |  |  |     o--rw interface-name    string
    |  |     |  |  +--rw access-list
    |  |     |  |  |  +--rw access-list-range?   union
    |  |     |  |  |  +--rw ipv6
    |  |     |  |  |     +--rw name?   string
    |  |     |  |  +--rw remote
    |  |     |  |  |  +--rw ipv4* [prefix]
    |  |     |  |  |  |  +--rw prefix       inet:ipv4-address
    |  |     |  |  |  |  +--rw ipv4-mask?   inet:ipv4-address
    |  |     |  |  |  +--rw ipv6* [prefix]
    |  |     |  |  |     +--rw prefix    ios-types:ipv6-prefix
    |  |     |  |  +--rw local
    |  |     |  |     +--rw ipv4* [prefix]
    |  |     |  |     |  +--rw prefix       inet:ipv4-address
    |  |     |  |     |  +--rw ipv4-mask?   inet:ipv4-address
    |  |     |  |     |  +--rw next-hop?    union
    |  |     |  |     |  +--rw vrf?         string
    |  |     |  |     |  +--rw tag?         uint32
    |  |     |  |     |  +--rw distance?    uint16
    |  |     |  |     +--rw ipv6* [prefix]
    |  |     |  |        +--rw prefix      ios-types:ipv6-prefix
    |  |     |  |        +--rw next-hop?   union
    |  |     |  |        +--rw vrf?        string
    |  |     |  |        +--rw tag?        uint32
    |  |     |  |        +--rw distance?   uint16
    |  |     |  +--rw accept
    |  |     |     +--rw any-option!
    |  |     |     |  +--rw tag?        uint64
    |  |     |     |  +--rw distance?   uint16
    |  |     |     o--rw any
    |  |     |     |  o--rw (distance-tag)?
    |  |     |     |     o--:(distance)
    |  |     |     |     |  o--rw distance?   uint16
    |  |     |     |     o--:(tag)
    |  |     |     |        o--rw tag?        uint64
    |  |     |     +--rw route-map?    string
    |  |     +--rw ipv6
    |  |     |  +--rw dns
    |  |     |  |  +--rw primary?     inet:ipv6-address
    |  |     |  |  +--rw secondary?   inet:ipv6-address
    |  |     |  +--rw pool
    |  |     |  |  +--rw pool-name?   string
    |  |     |  +--rw prefix?   uint8
    |  |     +--rw pool
    |  |     |  +--rw pool-name?   string
    |  |     +--rw aaa
    |  |     |  +--rw attribute
    |  |     |     +--rw list?                 string
    |  |     |     o--rw aaa-attribute-list?   string
    |  |     +--rw split-dns* [name]
    |  |     |  +--rw name    string
    |  |     +--rw backup-gateway?                 union
    |  |     +--rw def-domain?                     string
    |  |     +--rw dns
    |  |     |  +--rw primary?     inet:ipv4-address
    |  |     |  +--rw secondary?   inet:ipv4-address
    |  |     +--rw dhcp
    |  |     |  +--rw giaddr?    inet:ip-address
    |  |     |  +--rw server?    union
    |  |     |  +--rw timeout?   uint8
    |  |     +--rw session-lifetime?               uint64
    |  |     +--rw smartcard-removal-disconnect?   empty
    |  |     +--rw wins
    |  |        +--rw primary?     inet:ipv4-address
    |  |        +--rw secondary?   inet:ipv4-address
    |  +--rw certificate-cache?          uint16
    |  +--rw client
    |  |  +--rw flexvpn* [flexvpn-name]
    |  |     +--rw flexvpn-name    string
    |  |     +--rw peer
    |  |     |  +--rw peer-id-list* [peer-id]
    |  |     |  |  +--rw peer-id                     uint8
    |  |     |  |  +--rw peer-id-container-option
    |  |     |  |  |  +--rw (address-fqdn)?
    |  |     |  |  |     +--:(peer-address)
    |  |     |  |  |     |  +--rw peer-address?   inet:ip-address
    |  |     |  |  |     |  +--rw track?          uint16
    |  |     |  |  |     |  +--rw up-down?        enumeration
    |  |     |  |  |     +--:(fqdn)
    |  |     |  |  |        +--rw fqdn
    |  |     |  |  |           +--rw fqdn?      string
    |  |     |  |  |           +--rw dynamic?   empty
    |  |     |  |  |           +--rw ipv6?      empty
    |  |     |  |  |           +--rw track?     uint16
    |  |     |  |  |           +--rw up-down?   enumeration
    |  |     |  |  o--rw peer-id-container
    |  |     |  |     o--rw peer-address?   inet:ip-address
    |  |     |  |     o--rw track?          uint16
    |  |     |  |     o--rw up-down?        enumeration
    |  |     |  +--rw reactivate?     empty
    |  |     +--rw connect
    |  |     |  +--rw auto?      empty
    |  |     |  +--rw manual?    empty
    |  |     |  +--rw track?     uint16
    |  |     |  +--rw up-down?   enumeration
    |  |     +--rw source* [source-id]
    |  |     |  +--rw source-id              uint8
    |  |     |  +--rw interface-name
    |  |     |  |  +--rw (interface-choice)?
    |  |     |  |  |  +--:(AppNav-Compress)
    |  |     |  |  |  |  +--rw AppNav-Compress?             uint16
    |  |     |  |  |  +--:(AppNav-UnCompress)
    |  |     |  |  |  |  +--rw AppNav-UnCompress?           uint16
    |  |     |  |  |  +--:(ATM)
    |  |     |  |  |  |  +--rw ATM?                         string
    |  |     |  |  |  +--:(ATM-subinterface)
    |  |     |  |  |  |  +--rw ATM-subinterface
    |  |     |  |  |  |     +--rw ATM?   string
    |  |     |  |  |  +--:(ATM-ACR)
    |  |     |  |  |  |  +--rw ATM-ACR?                     string
    |  |     |  |  |  +--:(ATM-ACRsubinterface)
    |  |     |  |  |  |  +--rw ATM-ACRsubinterface
    |  |     |  |  |  |     +--rw ATM-ACR?   string
    |  |     |  |  |  +--:(BDI)
    |  |     |  |  |  |  +--rw BDI?                         string
    |  |     |  |  |  +--:(CEM)
    |  |     |  |  |  |  +--rw CEM?                         string
    |  |     |  |  |  +--:(CEM-ACR)
    |  |     |  |  |  |  +--rw CEM-ACR?                     uint8
    |  |     |  |  |  +--:(Embedded-Service-Engine)
    |  |     |  |  |  |  +--rw Embedded-Service-Engine?     string
    |  |     |  |  |  +--:(Ethernet)
    |  |     |  |  |  |  +--rw Ethernet?                    string
    |  |     |  |  |  +--:(FastEthernet)
    |  |     |  |  |  |  +--rw FastEthernet?                string
    |  |     |  |  |  +--:(GigabitEthernet)
    |  |     |  |  |  |  +--rw GigabitEthernet?             string
    |  |     |  |  |  +--:(FiveGigabitEthernet)
    |  |     |  |  |  |  +--rw FiveGigabitEthernet?         string
    |  |     |  |  |  +--:(AppGigabitEthernet)
    |  |     |  |  |  |  +--rw AppGigabitEthernet?          string
    |  |     |  |  |  o--:(TwentyFiveGigabitEthernet)
    |  |     |  |  |  |  o--rw TwentyFiveGigabitEthernet?   string
    |  |     |  |  |  +--:(TwentyFiveGigE)
    |  |     |  |  |  |  +--rw TwentyFiveGigE?              string
    |  |     |  |  |  +--:(TwoGigabitEthernet)
    |  |     |  |  |  |  +--rw TwoGigabitEthernet?          string
    |  |     |  |  |  +--:(FortyGigabitEthernet)
    |  |     |  |  |  |  +--rw FortyGigabitEthernet?        string
    |  |     |  |  |  +--:(FiftyGigabitEthernet)
    |  |     |  |  |  |  +--rw FiftyGigabitEthernet?        string
    |  |     |  |  |  +--:(HundredGigE)
    |  |     |  |  |  |  +--rw HundredGigE?                 string
    |  |     |  |  |  +--:(L2LISP)
    |  |     |  |  |  |  +--rw L2LISP?                      string
    |  |     |  |  |  +--:(L2LISP-subinterface)
    |  |     |  |  |  |  +--rw L2LISP-subinterface
    |  |     |  |  |  |     +--rw L2LISP?   string
    |  |     |  |  |  +--:(LISP)
    |  |     |  |  |  |  +--rw LISP?                        string
    |  |     |  |  |  +--:(LISP-subinterface)
    |  |     |  |  |  |  +--rw LISP-subinterface
    |  |     |  |  |  |     +--rw LISP?   string
    |  |     |  |  |  +--:(Loopback)
    |  |     |  |  |  |  +--rw Loopback?                    uint32
    |  |     |  |  |  +--:(Multilink)
    |  |     |  |  |  |  +--rw Multilink?                   uint16
    |  |     |  |  |  +--:(nve)
    |  |     |  |  |  |  +--rw nve?                         uint16
    |  |     |  |  |  +--:(overlay)
    |  |     |  |  |  |  +--rw overlay?                     uint16
    |  |     |  |  |  +--:(Port-channel)
    |  |     |  |  |  |  +--rw Port-channel?                uint32
    |  |     |  |  |  +--:(Port-channel-subinterface)
    |  |     |  |  |  |  +--rw Port-channel-subinterface
    |  |     |  |  |  |     +--rw Port-channel?   string
    |  |     |  |  |  +--:(pseudowire)
    |  |     |  |  |  |  +--rw pseudowire?                  uint32
    |  |     |  |  |  +--:(SM)
    |  |     |  |  |  |  +--rw SM?                          string
    |  |     |  |  |  +--:(Cellular)
    |  |     |  |  |  |  +--rw Cellular?                    string
    |  |     |  |  |  +--:(Dialer)
    |  |     |  |  |  |  +--rw Dialer?                      string
    |  |     |  |  |  +--:(Serial)
    |  |     |  |  |  |  +--rw Serial?                      string
    |  |     |  |  |  +--:(Async)
    |  |     |  |  |  |  +--rw Async?                       string
    |  |     |  |  |  +--:(TenGigabitEthernet)
    |  |     |  |  |  |  +--rw TenGigabitEthernet?          string
    |  |     |  |  |  +--:(Tunnel)
    |  |     |  |  |  |  +--rw Tunnel?                      uint32
    |  |     |  |  |  +--:(Virtual-Template)
    |  |     |  |  |  |  +--rw Virtual-Template?            uint16
    |  |     |  |  |  +--:(Vlan)
    |  |     |  |  |  |  +--rw Vlan?                        uint16
    |  |     |  |  |  +--:(VirtualPortGroup)
    |  |     |  |  |  |  +--rw VirtualPortGroup?            uint16
    |  |     |  |  |  +--:(vasileft)
    |  |     |  |  |  |  +--rw vasileft?                    uint16
    |  |     |  |  |  +--:(vasiright)
    |  |     |  |  |  |  +--rw vasiright?                   uint16
    |  |     |  |  |  +--:(BD-VIF)
    |  |     |  |  |  |  +--rw BD-VIF?                      string
    |  |     |  |  |  +--:(MFR)
    |  |     |  |  |  |  +--rw MFR?                         uint32
    |  |     |  |  |  +--:(Serial-subinterface)
    |  |     |  |  |  |  +--rw Serial-subinterface
    |  |     |  |  |  |     +--rw Serial?   string
    |  |     |  |  |  +--:(Bundle)
    |  |     |  |  |     +--rw Bundle?                      uint32 {ios-features:cable-config}?
    |  |     |  |  +--rw track?                             uint16
    |  |     |  o--rw source-id-container
    |  |     |     o--rw interface-name?   string
    |  |     |     o--rw track?            uint16
    |  |     +--rw client
    |  |     |  +--rw connect
    |  |     |  |  +--rw Tunnel?   uint32
    |  |     |  +--rw inside
    |  |     |     +--rw (interface-choice)?
    |  |     |        +--:(AppNav-Compress)
    |  |     |        |  +--rw AppNav-Compress?             uint16
    |  |     |        +--:(AppNav-UnCompress)
    |  |     |        |  +--rw AppNav-UnCompress?           uint16
    |  |     |        +--:(ATM)
    |  |     |        |  +--rw ATM?                         string
    |  |     |        +--:(ATM-subinterface)
    |  |     |        |  +--rw ATM-subinterface
    |  |     |        |     +--rw ATM?   string
    |  |     |        +--:(ATM-ACR)
    |  |     |        |  +--rw ATM-ACR?                     string
    |  |     |        +--:(ATM-ACRsubinterface)
    |  |     |        |  +--rw ATM-ACRsubinterface
    |  |     |        |     +--rw ATM-ACR?   string
    |  |     |        +--:(BDI)
    |  |     |        |  +--rw BDI?                         string
    |  |     |        +--:(CEM)
    |  |     |        |  +--rw CEM?                         string
    |  |     |        +--:(CEM-ACR)
    |  |     |        |  +--rw CEM-ACR?                     uint8
    |  |     |        +--:(Embedded-Service-Engine)
    |  |     |        |  +--rw Embedded-Service-Engine?     string
    |  |     |        +--:(Ethernet)
    |  |     |        |  +--rw Ethernet?                    string
    |  |     |        +--:(FastEthernet)
    |  |     |        |  +--rw FastEthernet?                string
    |  |     |        +--:(GigabitEthernet)
    |  |     |        |  +--rw GigabitEthernet?             string
    |  |     |        +--:(FiveGigabitEthernet)
    |  |     |        |  +--rw FiveGigabitEthernet?         string
    |  |     |        +--:(AppGigabitEthernet)
    |  |     |        |  +--rw AppGigabitEthernet?          string
    |  |     |        o--:(TwentyFiveGigabitEthernet)
    |  |     |        |  o--rw TwentyFiveGigabitEthernet?   string
    |  |     |        +--:(TwentyFiveGigE)
    |  |     |        |  +--rw TwentyFiveGigE?              string
    |  |     |        +--:(TwoGigabitEthernet)
    |  |     |        |  +--rw TwoGigabitEthernet?          string
    |  |     |        +--:(FortyGigabitEthernet)
    |  |     |        |  +--rw FortyGigabitEthernet?        string
    |  |     |        +--:(FiftyGigabitEthernet)
    |  |     |        |  +--rw FiftyGigabitEthernet?        string
    |  |     |        +--:(HundredGigE)
    |  |     |        |  +--rw HundredGigE?                 string
    |  |     |        +--:(L2LISP)
    |  |     |        |  +--rw L2LISP?                      string
    |  |     |        +--:(L2LISP-subinterface)
    |  |     |        |  +--rw L2LISP-subinterface
    |  |     |        |     +--rw L2LISP?   string
    |  |     |        +--:(LISP)
    |  |     |        |  +--rw LISP?                        string
    |  |     |        +--:(LISP-subinterface)
    |  |     |        |  +--rw LISP-subinterface
    |  |     |        |     +--rw LISP?   string
    |  |     |        +--:(Loopback)
    |  |     |        |  +--rw Loopback?                    uint32
    |  |     |        +--:(Multilink)
    |  |     |        |  +--rw Multilink?                   uint16
    |  |     |        +--:(nve)
    |  |     |        |  +--rw nve?                         uint16
    |  |     |        +--:(overlay)
    |  |     |        |  +--rw overlay?                     uint16
    |  |     |        +--:(Port-channel)
    |  |     |        |  +--rw Port-channel?                uint32
    |  |     |        +--:(Port-channel-subinterface)
    |  |     |        |  +--rw Port-channel-subinterface
    |  |     |        |     +--rw Port-channel?   string
    |  |     |        +--:(pseudowire)
    |  |     |        |  +--rw pseudowire?                  uint32
    |  |     |        +--:(SM)
    |  |     |        |  +--rw SM?                          string
    |  |     |        +--:(Cellular)
    |  |     |        |  +--rw Cellular?                    string
    |  |     |        +--:(Dialer)
    |  |     |        |  +--rw Dialer?                      string
    |  |     |        +--:(Serial)
    |  |     |        |  +--rw Serial?                      string
    |  |     |        +--:(Async)
    |  |     |        |  +--rw Async?                       string
    |  |     |        +--:(TenGigabitEthernet)
    |  |     |        |  +--rw TenGigabitEthernet?          string
    |  |     |        +--:(Tunnel)
    |  |     |        |  +--rw Tunnel?                      uint32
    |  |     |        +--:(Virtual-Template)
    |  |     |        |  +--rw Virtual-Template?            uint16
    |  |     |        +--:(Vlan)
    |  |     |        |  +--rw Vlan?                        uint16
    |  |     |        +--:(VirtualPortGroup)
    |  |     |        |  +--rw VirtualPortGroup?            uint16
    |  |     |        +--:(vasileft)
    |  |     |        |  +--rw vasileft?                    uint16
    |  |     |        +--:(vasiright)
    |  |     |        |  +--rw vasiright?                   uint16
    |  |     |        +--:(BD-VIF)
    |  |     |        |  +--rw BD-VIF?                      string
    |  |     |        +--:(MFR)
    |  |     |        |  +--rw MFR?                         uint32
    |  |     |        +--:(Serial-subinterface)
    |  |     |        |  +--rw Serial-subinterface
    |  |     |        |     +--rw Serial?   string
    |  |     |        +--:(Bundle)
    |  |     |           +--rw Bundle?                      uint32 {ios-features:cable-config}?
    |  |     +--rw backup
    |  |        +--rw group
    |  |           +--rw (group-number-default)?
    |  |              +--:(group-number-case)
    |  |              |  +--rw group-number?   uint16
    |  |              +--:(default-case)
    |  |                 +--rw default?        boolean
    |  +--rw cluster-options!
    |  |  +--rw fqdn?               string
    |  |  +--rw holdtime?           uint32
    |  |  +--rw primary
    |  |  |  +--rw overload-limit?   uint8
    |  |  |  +--rw weight
    |  |  |     +--rw crypto-load?   uint8
    |  |  |     +--rw system-load?   uint8
    |  |  +--rw master
    |  |  |  +--rw overload-limit?   uint8
    |  |  |  +--rw weight
    |  |  |     +--rw crypto-load?   uint8
    |  |  |     +--rw system-load?   uint8
    |  |  +--rw port?               uint32
    |  |  +--rw secondary
    |  |  |  +--rw hello?                uint32
    |  |  |  +--rw max-session?          uint32
    |  |  |  +--rw priority?             uint16
    |  |  |  +--rw load-normalization?   uint16
    |  |  |  +--rw update?               uint32
    |  |  +--rw slave
    |  |  |  +--rw hello?         uint32
    |  |  |  +--rw max-session?   uint32
    |  |  |  +--rw priority?      uint16
    |  |  |  +--rw update?        uint32
    |  |  +--rw standby-group
    |  |  |  +--rw name?   string
    |  |  +--rw shutdown-cluster?   boolean
    |  |  o--rw shutdown?           empty
    |  o--rw cluster
    |  |  o--rw slave
    |  |  |  o--rw hello?         uint32
    |  |  |  o--rw max-session?   uint32
    |  |  |  o--rw priority?      uint16
    |  |  |  o--rw update?        uint32
    |  |  o--rw standby-group
    |  |     o--rw name?   string
    |  +--rw cookie-challenge?           uint16
    |  +--rw cts
    |  |  +--rw sgt?   empty
    |  +--rw diagnose
    |  |  +--rw error?   uint16
    |  +--rw disconnect-revoked-peers?   empty
    |  +--rw dpd-container
    |  |  +--rw dpd?              uint16
    |  |  +--rw retry-interval?   uint8
    |  |  +--rw dpd-query?        enumeration
    |  +--rw fragmentation!
    |  |  +--rw mtu?   uint16
    |  +--rw http-url
    |  |  +--rw cert-leaf?   boolean
    |  |  x--rw cert?        empty
    |  |  +--rw bundle?      empty
    |  +--rw keyring* [name]
    |  |  +--rw name    string
    |  |  +--rw peer* [name]
    |  |     +--rw name              string
    |  |     +--rw address
    |  |     |  +--rw (ipv4-ipv6)?
    |  |     |     +--:(ipv4-case)
    |  |     |     |  +--rw ipv4
    |  |     |     |     +--rw ipv4-address?   inet:ipv4-address
    |  |     |     |     +--rw ipv4-mask?      inet:ipv4-address
    |  |     |     +--:(ipv6-case)
    |  |     |        +--rw ipv6-prefix?   ios-types:ipv6-prefix
    |  |     +--rw description?      string
    |  |     +--rw hostname?         string
    |  |     +--rw identity
    |  |     |  +--rw (identity)?
    |  |     |  |  +--:(address)
    |  |     |  |  |  +--rw address-type?    union
    |  |     |  |  +--:(email)
    |  |     |  |  |  +--rw email-option
    |  |     |  |  |     +--rw (name-domain)?
    |  |     |  |  |        +--:(name)
    |  |     |  |  |        |  +--rw name?     string
    |  |     |  |  |        +--:(domain)
    |  |     |  |  |           +--rw domain?   string
    |  |     |  |  +--:(fqdn)
    |  |     |  |  |  +--rw fqdn-option
    |  |     |  |  |     +--rw (name-domain)?
    |  |     |  |  |        +--:(name)
    |  |     |  |  |        |  +--rw name?     string
    |  |     |  |  |        +--:(domain)
    |  |     |  |  |           +--rw domain?   string
    |  |     |  |  +--:(key-id)
    |  |     |  |     +--rw key-id-number?   string
    |  |     |  o--rw address?               union
    |  |     |  o--rw email
    |  |     |  |  o--rw name?     string
    |  |     |  |  o--rw domain?   string
    |  |     |  o--rw fqdn
    |  |     |  |  o--rw name?     string
    |  |     |  |  o--rw domain?   string
    |  |     |  o--rw key-id?                string
    |  |     +--rw pre-shared-key
    |  |        +--rw local-option
    |  |        |  +--rw (encryption-hex)?
    |  |        |     +--:(encryption-case)
    |  |        |     |  +--rw encryption?   enumeration
    |  |        |     |  +--rw key?          string
    |  |        |     +--:(hex-case)
    |  |        |        +--rw hex?          string
    |  |        o--rw local?              empty
    |  |        +--rw remote-option
    |  |        |  +--rw (encryption-hex)?
    |  |        |     +--:(encryption-case)
    |  |        |     |  +--rw encryption?   enumeration
    |  |        |     |  +--rw key?          string
    |  |        |     +--:(hex-case)
    |  |        |        +--rw hex?          string
    |  |        o--rw remote?             empty
    |  |        +--rw (encryption-hex)?
    |  |           +--:(encryption-case)
    |  |           |  +--rw encryption?   enumeration
    |  |           |  +--rw key?          string
    |  |           +--:(hex-case)
    |  |              +--rw hex?          string
    |  +--rw limit
    |  |  +--rw max-neg-sa
    |  |  |  +--rw max-in-negotation-sa?   uint32
    |  |  |  +--rw direction?              enumeration
    |  |  +--rw max-sa?       uint32
    |  |  +--rw queue
    |  |     +--rw sa-init?   uint32
    |  +--rw name-mangler* [name]
    |  |  +--rw name     string
    |  |  +--rw dn?      enumeration
    |  |  +--rw eap
    |  |  |  +--rw (eap-options)?
    |  |  |     +--:(dn)
    |  |  |     |  +--rw dn?       enumeration
    |  |  |     +--:(all)
    |  |  |     |  +--rw all?      empty
    |  |  |     +--:(prefix)
    |  |  |     |  +--rw prefix
    |  |  |     |     +--rw delimiter
    |  |  |     |        +--rw (delimeter-choice)?
    |  |  |     |           +--:(dot)
    |  |  |     |           |  +--rw dot?          empty
    |  |  |     |           +--:(at-sign)
    |  |  |     |           |  +--rw at-sign?      empty
    |  |  |     |           +--:(slash-sign)
    |  |  |     |              +--rw slash-sign?   empty
    |  |  |     +--:(suffix)
    |  |  |        +--rw suffix
    |  |  |           +--rw delimiter
    |  |  |              +--rw (delimeter-choice)?
    |  |  |                 +--:(dot)
    |  |  |                 |  +--rw dot?          empty
    |  |  |                 +--:(at-sign)
    |  |  |                 |  +--rw at-sign?      empty
    |  |  |                 +--:(slash-sign)
    |  |  |                    +--rw slash-sign?   empty
    |  |  +--rw email?   enumeration
    |  |  +--rw fqdn?    enumeration
    |  +--rw nat
    |  |  +--rw keepalive?   uint16
    |  +--rw policy* [name]
    |  |  +--rw name        string
    |  |  +--rw match
    |  |  |  +--rw inbound-only?   empty
    |  |  |  +--rw address
    |  |  |  |  +--rw local-ip*   inet:ip-address
    |  |  |  |  o--rw local?      inet:ip-address
    |  |  |  +--rw fvrf
    |  |  |     +--rw name?   string
    |  |  |     +--rw any?    empty
    |  |  +--rw proposal* [proposals]
    |  |     +--rw proposals    string
    |  +--rw profile* [name]
    |  |  +--rw name                string
    |  |  +--rw aaa
    |  |  |  +--rw accounting
    |  |  |  |  +--rw anyconnect-eap?   string
    |  |  |  |  +--rw cert?             string
    |  |  |  |  +--rw eap?              string
    |  |  |  |  +--rw psk?              string
    |  |  |  |  +--rw list?             -> /ios:native/aaa/ios-aaa:accounting/network/id
    |  |  |  +--rw authentication
    |  |  |  |  +--rw anyconnect-eap?   string
    |  |  |  |  +--rw eap?              string
    |  |  |  |  +--rw list?             -> /ios:native/aaa/ios-aaa:authorization/network/id
    |  |  |  +--rw authorization
    |  |  |     +--rw group
    |  |  |     |  +--rw override-container
    |  |  |     |  |  +--rw anyconnect-eap
    |  |  |     |  |  |  +--rw list-v2
    |  |  |     |  |  |  |  +--rw name?         string
    |  |  |     |  |  |  |  +--rw aaa-config
    |  |  |     |  |  |  |     +--rw (user-config)?
    |  |  |     |  |  |  |        +--:(username-config)
    |  |  |     |  |  |  |        |  +--rw username
    |  |  |     |  |  |  |        |     +--rw username?         string
    |  |  |     |  |  |  |        |     +--rw (user-type)?
    |  |  |     |  |  |  |        |        +--:(local-type)
    |  |  |     |  |  |  |        |        |  +--rw local?      empty
    |  |  |     |  |  |  |        |        +--:(password-type)
    |  |  |     |  |  |  |        |           +--rw password
    |  |  |     |  |  |  |        |              +--rw password
    |  |  |     |  |  |  |        |                 +--rw encryption?   enumeration
    |  |  |     |  |  |  |        |                 +--rw key?          string
    |  |  |     |  |  |  |        +--:(name-mangler-config)
    |  |  |     |  |  |  |        |  +--rw name-mangler
    |  |  |     |  |  |  |        |     +--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |  |  |        |     +--rw password
    |  |  |     |  |  |  |        |        +--rw encryption?   enumeration
    |  |  |     |  |  |  |        |        +--rw key?          string
    |  |  |     |  |  |  |        +--:(password-config)
    |  |  |     |  |  |  |           +--rw password
    |  |  |     |  |  |  |              +--rw encryption?   enumeration
    |  |  |     |  |  |  |              +--rw key?          string
    |  |  |     |  |  |  o--rw list* [name]
    |  |  |     |  |  |     +--rw name            string
    |  |  |     |  |  |     o--rw password
    |  |  |     |  |  |     |  o--rw encryption?   enumeration
    |  |  |     |  |  |     |  o--rw key?          string
    |  |  |     |  |  |     o--rw username?       string
    |  |  |     |  |  |     o--rw local?          empty
    |  |  |     |  |  |     o--rw name-mangler
    |  |  |     |  |  |        o--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |  |        o--rw password
    |  |  |     |  |  |           o--rw encryption?   enumeration
    |  |  |     |  |  |           o--rw key?          string
    |  |  |     |  |  +--rw cert
    |  |  |     |  |  |  +--rw list-v2
    |  |  |     |  |  |  |  +--rw name?         string
    |  |  |     |  |  |  |  +--rw aaa-config
    |  |  |     |  |  |  |     +--rw (user-config)?
    |  |  |     |  |  |  |        +--:(username-config)
    |  |  |     |  |  |  |        |  +--rw username
    |  |  |     |  |  |  |        |     +--rw username?         string
    |  |  |     |  |  |  |        |     +--rw (user-type)?
    |  |  |     |  |  |  |        |        +--:(local-type)
    |  |  |     |  |  |  |        |        |  +--rw local?      empty
    |  |  |     |  |  |  |        |        +--:(password-type)
    |  |  |     |  |  |  |        |           +--rw password
    |  |  |     |  |  |  |        |              +--rw password
    |  |  |     |  |  |  |        |                 +--rw encryption?   enumeration
    |  |  |     |  |  |  |        |                 +--rw key?          string
    |  |  |     |  |  |  |        +--:(name-mangler-config)
    |  |  |     |  |  |  |        |  +--rw name-mangler
    |  |  |     |  |  |  |        |     +--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |  |  |        |     +--rw password
    |  |  |     |  |  |  |        |        +--rw encryption?   enumeration
    |  |  |     |  |  |  |        |        +--rw key?          string
    |  |  |     |  |  |  |        +--:(password-config)
    |  |  |     |  |  |  |           +--rw password
    |  |  |     |  |  |  |              +--rw encryption?   enumeration
    |  |  |     |  |  |  |              +--rw key?          string
    |  |  |     |  |  |  o--rw list* [name]
    |  |  |     |  |  |     +--rw name            string
    |  |  |     |  |  |     o--rw password
    |  |  |     |  |  |     |  o--rw encryption?   enumeration
    |  |  |     |  |  |     |  o--rw key?          string
    |  |  |     |  |  |     o--rw username?       string
    |  |  |     |  |  |     o--rw local?          empty
    |  |  |     |  |  |     o--rw name-mangler
    |  |  |     |  |  |        o--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |  |        o--rw password
    |  |  |     |  |  |           o--rw encryption?   enumeration
    |  |  |     |  |  |           o--rw key?          string
    |  |  |     |  |  +--rw eap
    |  |  |     |  |  |  +--rw list-v2
    |  |  |     |  |  |  |  +--rw name?         string
    |  |  |     |  |  |  |  +--rw aaa-config
    |  |  |     |  |  |  |     +--rw (user-config)?
    |  |  |     |  |  |  |        +--:(username-config)
    |  |  |     |  |  |  |        |  +--rw username
    |  |  |     |  |  |  |        |     +--rw username?         string
    |  |  |     |  |  |  |        |     +--rw (user-type)?
    |  |  |     |  |  |  |        |        +--:(local-type)
    |  |  |     |  |  |  |        |        |  +--rw local?      empty
    |  |  |     |  |  |  |        |        +--:(password-type)
    |  |  |     |  |  |  |        |           +--rw password
    |  |  |     |  |  |  |        |              +--rw password
    |  |  |     |  |  |  |        |                 +--rw encryption?   enumeration
    |  |  |     |  |  |  |        |                 +--rw key?          string
    |  |  |     |  |  |  |        +--:(name-mangler-config)
    |  |  |     |  |  |  |        |  +--rw name-mangler
    |  |  |     |  |  |  |        |     +--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |  |  |        |     +--rw password
    |  |  |     |  |  |  |        |        +--rw encryption?   enumeration
    |  |  |     |  |  |  |        |        +--rw key?          string
    |  |  |     |  |  |  |        +--:(password-config)
    |  |  |     |  |  |  |           +--rw password
    |  |  |     |  |  |  |              +--rw encryption?   enumeration
    |  |  |     |  |  |  |              +--rw key?          string
    |  |  |     |  |  |  o--rw list* [name]
    |  |  |     |  |  |     +--rw name            string
    |  |  |     |  |  |     o--rw password
    |  |  |     |  |  |     |  o--rw encryption?   enumeration
    |  |  |     |  |  |     |  o--rw key?          string
    |  |  |     |  |  |     o--rw username?       string
    |  |  |     |  |  |     o--rw local?          empty
    |  |  |     |  |  |     o--rw name-mangler
    |  |  |     |  |  |        o--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |  |        o--rw password
    |  |  |     |  |  |           o--rw encryption?   enumeration
    |  |  |     |  |  |           o--rw key?          string
    |  |  |     |  |  +--rw psk
    |  |  |     |  |  |  +--rw list-v2
    |  |  |     |  |  |  |  +--rw name?         string
    |  |  |     |  |  |  |  +--rw aaa-config
    |  |  |     |  |  |  |     +--rw (user-config)?
    |  |  |     |  |  |  |        +--:(username-config)
    |  |  |     |  |  |  |        |  +--rw username
    |  |  |     |  |  |  |        |     +--rw username?         string
    |  |  |     |  |  |  |        |     +--rw (user-type)?
    |  |  |     |  |  |  |        |        +--:(local-type)
    |  |  |     |  |  |  |        |        |  +--rw local?      empty
    |  |  |     |  |  |  |        |        +--:(password-type)
    |  |  |     |  |  |  |        |           +--rw password
    |  |  |     |  |  |  |        |              +--rw password
    |  |  |     |  |  |  |        |                 +--rw encryption?   enumeration
    |  |  |     |  |  |  |        |                 +--rw key?          string
    |  |  |     |  |  |  |        +--:(name-mangler-config)
    |  |  |     |  |  |  |        |  +--rw name-mangler
    |  |  |     |  |  |  |        |     +--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |  |  |        |     +--rw password
    |  |  |     |  |  |  |        |        +--rw encryption?   enumeration
    |  |  |     |  |  |  |        |        +--rw key?          string
    |  |  |     |  |  |  |        +--:(password-config)
    |  |  |     |  |  |  |           +--rw password
    |  |  |     |  |  |  |              +--rw encryption?   enumeration
    |  |  |     |  |  |  |              +--rw key?          string
    |  |  |     |  |  |  o--rw list* [name]
    |  |  |     |  |  |     +--rw name            string
    |  |  |     |  |  |     o--rw password
    |  |  |     |  |  |     |  o--rw encryption?   enumeration
    |  |  |     |  |  |     |  o--rw key?          string
    |  |  |     |  |  |     o--rw username?       string
    |  |  |     |  |  |     o--rw local?          empty
    |  |  |     |  |  |     o--rw name-mangler
    |  |  |     |  |  |        o--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |  |        o--rw password
    |  |  |     |  |  |           o--rw encryption?   enumeration
    |  |  |     |  |  |           o--rw key?          string
    |  |  |     |  |  +--rw any
    |  |  |     |  |     +--rw list-v2
    |  |  |     |  |     |  +--rw name?         string
    |  |  |     |  |     |  +--rw aaa-config
    |  |  |     |  |     |     +--rw (user-config)?
    |  |  |     |  |     |        +--:(username-config)
    |  |  |     |  |     |        |  +--rw username
    |  |  |     |  |     |        |     +--rw username?         string
    |  |  |     |  |     |        |     +--rw (user-type)?
    |  |  |     |  |     |        |        +--:(local-type)
    |  |  |     |  |     |        |        |  +--rw local?      empty
    |  |  |     |  |     |        |        +--:(password-type)
    |  |  |     |  |     |        |           +--rw password
    |  |  |     |  |     |        |              +--rw password
    |  |  |     |  |     |        |                 +--rw encryption?   enumeration
    |  |  |     |  |     |        |                 +--rw key?          string
    |  |  |     |  |     |        +--:(name-mangler-config)
    |  |  |     |  |     |        |  +--rw name-mangler
    |  |  |     |  |     |        |     +--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |     |        |     +--rw password
    |  |  |     |  |     |        |        +--rw encryption?   enumeration
    |  |  |     |  |     |        |        +--rw key?          string
    |  |  |     |  |     |        +--:(password-config)
    |  |  |     |  |     |           +--rw password
    |  |  |     |  |     |              +--rw encryption?   enumeration
    |  |  |     |  |     |              +--rw key?          string
    |  |  |     |  |     o--rw list* [name]
    |  |  |     |  |        +--rw name            string
    |  |  |     |  |        o--rw password
    |  |  |     |  |        |  o--rw encryption?   enumeration
    |  |  |     |  |        |  o--rw key?          string
    |  |  |     |  |        o--rw username?       string
    |  |  |     |  |        o--rw local?          empty
    |  |  |     |  |        o--rw name-mangler
    |  |  |     |  |           o--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |           o--rw password
    |  |  |     |  |              o--rw encryption?   enumeration
    |  |  |     |  |              o--rw key?          string
    |  |  |     |  o--rw override?             empty
    |  |  |     |  +--rw anyconnect-eap
    |  |  |     |  |  +--rw list-v2
    |  |  |     |  |  |  +--rw name?         string
    |  |  |     |  |  |  +--rw aaa-config
    |  |  |     |  |  |     +--rw (user-config)?
    |  |  |     |  |  |        +--:(username-config)
    |  |  |     |  |  |        |  +--rw username
    |  |  |     |  |  |        |     +--rw username?         string
    |  |  |     |  |  |        |     +--rw (user-type)?
    |  |  |     |  |  |        |        +--:(local-type)
    |  |  |     |  |  |        |        |  +--rw local?      empty
    |  |  |     |  |  |        |        +--:(password-type)
    |  |  |     |  |  |        |           +--rw password
    |  |  |     |  |  |        |              +--rw password
    |  |  |     |  |  |        |                 +--rw encryption?   enumeration
    |  |  |     |  |  |        |                 +--rw key?          string
    |  |  |     |  |  |        +--:(name-mangler-config)
    |  |  |     |  |  |        |  +--rw name-mangler
    |  |  |     |  |  |        |     +--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |  |        |     +--rw password
    |  |  |     |  |  |        |        +--rw encryption?   enumeration
    |  |  |     |  |  |        |        +--rw key?          string
    |  |  |     |  |  |        +--:(password-config)
    |  |  |     |  |  |           +--rw password
    |  |  |     |  |  |              +--rw encryption?   enumeration
    |  |  |     |  |  |              +--rw key?          string
    |  |  |     |  |  o--rw list* [name]
    |  |  |     |  |     +--rw name            string
    |  |  |     |  |     o--rw password
    |  |  |     |  |     |  o--rw encryption?   enumeration
    |  |  |     |  |     |  o--rw key?          string
    |  |  |     |  |     o--rw username?       string
    |  |  |     |  |     o--rw local?          empty
    |  |  |     |  |     o--rw name-mangler
    |  |  |     |  |        o--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |        o--rw password
    |  |  |     |  |           o--rw encryption?   enumeration
    |  |  |     |  |           o--rw key?          string
    |  |  |     |  +--rw cert
    |  |  |     |  |  +--rw list-v2
    |  |  |     |  |  |  +--rw name?         string
    |  |  |     |  |  |  +--rw aaa-config
    |  |  |     |  |  |     +--rw (user-config)?
    |  |  |     |  |  |        +--:(username-config)
    |  |  |     |  |  |        |  +--rw username
    |  |  |     |  |  |        |     +--rw username?         string
    |  |  |     |  |  |        |     +--rw (user-type)?
    |  |  |     |  |  |        |        +--:(local-type)
    |  |  |     |  |  |        |        |  +--rw local?      empty
    |  |  |     |  |  |        |        +--:(password-type)
    |  |  |     |  |  |        |           +--rw password
    |  |  |     |  |  |        |              +--rw password
    |  |  |     |  |  |        |                 +--rw encryption?   enumeration
    |  |  |     |  |  |        |                 +--rw key?          string
    |  |  |     |  |  |        +--:(name-mangler-config)
    |  |  |     |  |  |        |  +--rw name-mangler
    |  |  |     |  |  |        |     +--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |  |        |     +--rw password
    |  |  |     |  |  |        |        +--rw encryption?   enumeration
    |  |  |     |  |  |        |        +--rw key?          string
    |  |  |     |  |  |        +--:(password-config)
    |  |  |     |  |  |           +--rw password
    |  |  |     |  |  |              +--rw encryption?   enumeration
    |  |  |     |  |  |              +--rw key?          string
    |  |  |     |  |  o--rw list* [name]
    |  |  |     |  |     +--rw name            string
    |  |  |     |  |     o--rw password
    |  |  |     |  |     |  o--rw encryption?   enumeration
    |  |  |     |  |     |  o--rw key?          string
    |  |  |     |  |     o--rw username?       string
    |  |  |     |  |     o--rw local?          empty
    |  |  |     |  |     o--rw name-mangler
    |  |  |     |  |        o--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |        o--rw password
    |  |  |     |  |           o--rw encryption?   enumeration
    |  |  |     |  |           o--rw key?          string
    |  |  |     |  +--rw eap
    |  |  |     |  |  +--rw list-v2
    |  |  |     |  |  |  +--rw name?         string
    |  |  |     |  |  |  +--rw aaa-config
    |  |  |     |  |  |     +--rw (user-config)?
    |  |  |     |  |  |        +--:(username-config)
    |  |  |     |  |  |        |  +--rw username
    |  |  |     |  |  |        |     +--rw username?         string
    |  |  |     |  |  |        |     +--rw (user-type)?
    |  |  |     |  |  |        |        +--:(local-type)
    |  |  |     |  |  |        |        |  +--rw local?      empty
    |  |  |     |  |  |        |        +--:(password-type)
    |  |  |     |  |  |        |           +--rw password
    |  |  |     |  |  |        |              +--rw password
    |  |  |     |  |  |        |                 +--rw encryption?   enumeration
    |  |  |     |  |  |        |                 +--rw key?          string
    |  |  |     |  |  |        +--:(name-mangler-config)
    |  |  |     |  |  |        |  +--rw name-mangler
    |  |  |     |  |  |        |     +--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |  |        |     +--rw password
    |  |  |     |  |  |        |        +--rw encryption?   enumeration
    |  |  |     |  |  |        |        +--rw key?          string
    |  |  |     |  |  |        +--:(password-config)
    |  |  |     |  |  |           +--rw password
    |  |  |     |  |  |              +--rw encryption?   enumeration
    |  |  |     |  |  |              +--rw key?          string
    |  |  |     |  |  o--rw list* [name]
    |  |  |     |  |     +--rw name            string
    |  |  |     |  |     o--rw password
    |  |  |     |  |     |  o--rw encryption?   enumeration
    |  |  |     |  |     |  o--rw key?          string
    |  |  |     |  |     o--rw username?       string
    |  |  |     |  |     o--rw local?          empty
    |  |  |     |  |     o--rw name-mangler
    |  |  |     |  |        o--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |        o--rw password
    |  |  |     |  |           o--rw encryption?   enumeration
    |  |  |     |  |           o--rw key?          string
    |  |  |     |  +--rw psk
    |  |  |     |  |  +--rw list-v2
    |  |  |     |  |  |  +--rw name?         string
    |  |  |     |  |  |  +--rw aaa-config
    |  |  |     |  |  |     +--rw (user-config)?
    |  |  |     |  |  |        +--:(username-config)
    |  |  |     |  |  |        |  +--rw username
    |  |  |     |  |  |        |     +--rw username?         string
    |  |  |     |  |  |        |     +--rw (user-type)?
    |  |  |     |  |  |        |        +--:(local-type)
    |  |  |     |  |  |        |        |  +--rw local?      empty
    |  |  |     |  |  |        |        +--:(password-type)
    |  |  |     |  |  |        |           +--rw password
    |  |  |     |  |  |        |              +--rw password
    |  |  |     |  |  |        |                 +--rw encryption?   enumeration
    |  |  |     |  |  |        |                 +--rw key?          string
    |  |  |     |  |  |        +--:(name-mangler-config)
    |  |  |     |  |  |        |  +--rw name-mangler
    |  |  |     |  |  |        |     +--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |  |        |     +--rw password
    |  |  |     |  |  |        |        +--rw encryption?   enumeration
    |  |  |     |  |  |        |        +--rw key?          string
    |  |  |     |  |  |        +--:(password-config)
    |  |  |     |  |  |           +--rw password
    |  |  |     |  |  |              +--rw encryption?   enumeration
    |  |  |     |  |  |              +--rw key?          string
    |  |  |     |  |  o--rw list* [name]
    |  |  |     |  |     +--rw name            string
    |  |  |     |  |     o--rw password
    |  |  |     |  |     |  o--rw encryption?   enumeration
    |  |  |     |  |     |  o--rw key?          string
    |  |  |     |  |     o--rw username?       string
    |  |  |     |  |     o--rw local?          empty
    |  |  |     |  |     o--rw name-mangler
    |  |  |     |  |        o--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |  |        o--rw password
    |  |  |     |  |           o--rw encryption?   enumeration
    |  |  |     |  |           o--rw key?          string
    |  |  |     |  +--rw any
    |  |  |     |     +--rw list-v2
    |  |  |     |     |  +--rw name?         string
    |  |  |     |     |  +--rw aaa-config
    |  |  |     |     |     +--rw (user-config)?
    |  |  |     |     |        +--:(username-config)
    |  |  |     |     |        |  +--rw username
    |  |  |     |     |        |     +--rw username?         string
    |  |  |     |     |        |     +--rw (user-type)?
    |  |  |     |     |        |        +--:(local-type)
    |  |  |     |     |        |        |  +--rw local?      empty
    |  |  |     |     |        |        +--:(password-type)
    |  |  |     |     |        |           +--rw password
    |  |  |     |     |        |              +--rw password
    |  |  |     |     |        |                 +--rw encryption?   enumeration
    |  |  |     |     |        |                 +--rw key?          string
    |  |  |     |     |        +--:(name-mangler-config)
    |  |  |     |     |        |  +--rw name-mangler
    |  |  |     |     |        |     +--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |     |        |     +--rw password
    |  |  |     |     |        |        +--rw encryption?   enumeration
    |  |  |     |     |        |        +--rw key?          string
    |  |  |     |     |        +--:(password-config)
    |  |  |     |     |           +--rw password
    |  |  |     |     |              +--rw encryption?   enumeration
    |  |  |     |     |              +--rw key?          string
    |  |  |     |     o--rw list* [name]
    |  |  |     |        +--rw name            string
    |  |  |     |        o--rw password
    |  |  |     |        |  o--rw encryption?   enumeration
    |  |  |     |        |  o--rw key?          string
    |  |  |     |        o--rw username?       string
    |  |  |     |        o--rw local?          empty
    |  |  |     |        o--rw name-mangler
    |  |  |     |           o--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |     |           o--rw password
    |  |  |     |              o--rw encryption?   enumeration
    |  |  |     |              o--rw key?          string
    |  |  |     +--rw user
    |  |  |        +--rw anyconnect-eap
    |  |  |        |  +--rw cached?    empty
    |  |  |        |  +--rw list-v2
    |  |  |        |  |  +--rw name?         string
    |  |  |        |  |  +--rw aaa-config
    |  |  |        |  |     +--rw (user-config)?
    |  |  |        |  |        +--:(username-config)
    |  |  |        |  |        |  +--rw username
    |  |  |        |  |        |     +--rw username?         string
    |  |  |        |  |        |     +--rw (user-type)?
    |  |  |        |  |        |        +--:(local-type)
    |  |  |        |  |        |        |  +--rw local?      empty
    |  |  |        |  |        |        +--:(password-type)
    |  |  |        |  |        |           +--rw password
    |  |  |        |  |        |              +--rw password
    |  |  |        |  |        |                 +--rw encryption?   enumeration
    |  |  |        |  |        |                 +--rw key?          string
    |  |  |        |  |        +--:(name-mangler-config)
    |  |  |        |  |        |  +--rw name-mangler
    |  |  |        |  |        |     +--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |        |  |        |     +--rw password
    |  |  |        |  |        |        +--rw encryption?   enumeration
    |  |  |        |  |        |        +--rw key?          string
    |  |  |        |  |        +--:(password-config)
    |  |  |        |  |           +--rw password
    |  |  |        |  |              +--rw encryption?   enumeration
    |  |  |        |  |              +--rw key?          string
    |  |  |        |  o--rw list* [name]
    |  |  |        |     +--rw name            string
    |  |  |        |     o--rw password
    |  |  |        |     |  o--rw encryption?   enumeration
    |  |  |        |     |  o--rw key?          string
    |  |  |        |     o--rw username?       string
    |  |  |        |     o--rw local?          empty
    |  |  |        |     o--rw name-mangler
    |  |  |        |        o--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |        |        o--rw password
    |  |  |        |           o--rw encryption?   enumeration
    |  |  |        |           o--rw key?          string
    |  |  |        +--rw cert
    |  |  |        |  +--rw list-v2
    |  |  |        |  |  +--rw name?         string
    |  |  |        |  |  +--rw aaa-config
    |  |  |        |  |     +--rw (user-config)?
    |  |  |        |  |        +--:(username-config)
    |  |  |        |  |        |  +--rw username
    |  |  |        |  |        |     +--rw username?         string
    |  |  |        |  |        |     +--rw (user-type)?
    |  |  |        |  |        |        +--:(local-type)
    |  |  |        |  |        |        |  +--rw local?      empty
    |  |  |        |  |        |        +--:(password-type)
    |  |  |        |  |        |           +--rw password
    |  |  |        |  |        |              +--rw password
    |  |  |        |  |        |                 +--rw encryption?   enumeration
    |  |  |        |  |        |                 +--rw key?          string
    |  |  |        |  |        +--:(name-mangler-config)
    |  |  |        |  |        |  +--rw name-mangler
    |  |  |        |  |        |     +--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |        |  |        |     +--rw password
    |  |  |        |  |        |        +--rw encryption?   enumeration
    |  |  |        |  |        |        +--rw key?          string
    |  |  |        |  |        +--:(password-config)
    |  |  |        |  |           +--rw password
    |  |  |        |  |              +--rw encryption?   enumeration
    |  |  |        |  |              +--rw key?          string
    |  |  |        |  o--rw list* [name]
    |  |  |        |     +--rw name            string
    |  |  |        |     o--rw password
    |  |  |        |     |  o--rw encryption?   enumeration
    |  |  |        |     |  o--rw key?          string
    |  |  |        |     o--rw username?       string
    |  |  |        |     o--rw local?          empty
    |  |  |        |     o--rw name-mangler
    |  |  |        |        o--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |        |        o--rw password
    |  |  |        |           o--rw encryption?   enumeration
    |  |  |        |           o--rw key?          string
    |  |  |        +--rw eap
    |  |  |        |  +--rw cached?    empty
    |  |  |        |  +--rw list-v2
    |  |  |        |  |  +--rw name?         string
    |  |  |        |  |  +--rw aaa-config
    |  |  |        |  |     +--rw (user-config)?
    |  |  |        |  |        +--:(username-config)
    |  |  |        |  |        |  +--rw username
    |  |  |        |  |        |     +--rw username?         string
    |  |  |        |  |        |     +--rw (user-type)?
    |  |  |        |  |        |        +--:(local-type)
    |  |  |        |  |        |        |  +--rw local?      empty
    |  |  |        |  |        |        +--:(password-type)
    |  |  |        |  |        |           +--rw password
    |  |  |        |  |        |              +--rw password
    |  |  |        |  |        |                 +--rw encryption?   enumeration
    |  |  |        |  |        |                 +--rw key?          string
    |  |  |        |  |        +--:(name-mangler-config)
    |  |  |        |  |        |  +--rw name-mangler
    |  |  |        |  |        |     +--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |        |  |        |     +--rw password
    |  |  |        |  |        |        +--rw encryption?   enumeration
    |  |  |        |  |        |        +--rw key?          string
    |  |  |        |  |        +--:(password-config)
    |  |  |        |  |           +--rw password
    |  |  |        |  |              +--rw encryption?   enumeration
    |  |  |        |  |              +--rw key?          string
    |  |  |        |  o--rw list* [name]
    |  |  |        |     +--rw name            string
    |  |  |        |     o--rw password
    |  |  |        |     |  o--rw encryption?   enumeration
    |  |  |        |     |  o--rw key?          string
    |  |  |        |     o--rw username?       string
    |  |  |        |     o--rw local?          empty
    |  |  |        |     o--rw name-mangler
    |  |  |        |        o--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |        |        o--rw password
    |  |  |        |           o--rw encryption?   enumeration
    |  |  |        |           o--rw key?          string
    |  |  |        +--rw psk
    |  |  |        |  +--rw cached?    empty
    |  |  |        |  +--rw list-v2
    |  |  |        |  |  +--rw name?         string
    |  |  |        |  |  +--rw aaa-config
    |  |  |        |  |     +--rw (user-config)?
    |  |  |        |  |        +--:(username-config)
    |  |  |        |  |        |  +--rw username
    |  |  |        |  |        |     +--rw username?         string
    |  |  |        |  |        |     +--rw (user-type)?
    |  |  |        |  |        |        +--:(local-type)
    |  |  |        |  |        |        |  +--rw local?      empty
    |  |  |        |  |        |        +--:(password-type)
    |  |  |        |  |        |           +--rw password
    |  |  |        |  |        |              +--rw password
    |  |  |        |  |        |                 +--rw encryption?   enumeration
    |  |  |        |  |        |                 +--rw key?          string
    |  |  |        |  |        +--:(name-mangler-config)
    |  |  |        |  |        |  +--rw name-mangler
    |  |  |        |  |        |     +--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |        |  |        |     +--rw password
    |  |  |        |  |        |        +--rw encryption?   enumeration
    |  |  |        |  |        |        +--rw key?          string
    |  |  |        |  |        +--:(password-config)
    |  |  |        |  |           +--rw password
    |  |  |        |  |              +--rw encryption?   enumeration
    |  |  |        |  |              +--rw key?          string
    |  |  |        |  o--rw list* [name]
    |  |  |        |     +--rw name            string
    |  |  |        |     o--rw password
    |  |  |        |     |  o--rw encryption?   enumeration
    |  |  |        |     |  o--rw key?          string
    |  |  |        |     o--rw username?       string
    |  |  |        |     o--rw local?          empty
    |  |  |        |     o--rw name-mangler
    |  |  |        |        o--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |        |        o--rw password
    |  |  |        |           o--rw encryption?   enumeration
    |  |  |        |           o--rw key?          string
    |  |  |        +--rw any
    |  |  |           +--rw cached?    empty
    |  |  |           +--rw list-v2
    |  |  |           |  +--rw name?         string
    |  |  |           |  +--rw aaa-config
    |  |  |           |     +--rw (user-config)?
    |  |  |           |        +--:(username-config)
    |  |  |           |        |  +--rw username
    |  |  |           |        |     +--rw username?         string
    |  |  |           |        |     +--rw (user-type)?
    |  |  |           |        |        +--:(local-type)
    |  |  |           |        |        |  +--rw local?      empty
    |  |  |           |        |        +--:(password-type)
    |  |  |           |        |           +--rw password
    |  |  |           |        |              +--rw password
    |  |  |           |        |                 +--rw encryption?   enumeration
    |  |  |           |        |                 +--rw key?          string
    |  |  |           |        +--:(name-mangler-config)
    |  |  |           |        |  +--rw name-mangler
    |  |  |           |        |     +--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |           |        |     +--rw password
    |  |  |           |        |        +--rw encryption?   enumeration
    |  |  |           |        |        +--rw key?          string
    |  |  |           |        +--:(password-config)
    |  |  |           |           +--rw password
    |  |  |           |              +--rw encryption?   enumeration
    |  |  |           |              +--rw key?          string
    |  |  |           o--rw list* [name]
    |  |  |              +--rw name            string
    |  |  |              o--rw password
    |  |  |              |  o--rw encryption?   enumeration
    |  |  |              |  o--rw key?          string
    |  |  |              o--rw username?       string
    |  |  |              o--rw local?          empty
    |  |  |              o--rw name-mangler
    |  |  |                 o--rw name?       -> /ios:native/crypto/ios-crypto:ikev2/name-mangler/name
    |  |  |                 o--rw password
    |  |  |                    o--rw encryption?   enumeration
    |  |  |                    o--rw key?          string
    |  |  +--rw anyconnect
    |  |  |  +--rw profile?   string
    |  |  +--rw authentication
    |  |  |  +--rw local
    |  |  |  |  +--rw dynamic?     empty
    |  |  |  |  +--rw eap!
    |  |  |  |  |  +--rw gtc
    |  |  |  |  |  |  +--rw username?   string
    |  |  |  |  |  |  +--rw password
    |  |  |  |  |  |     +--rw encryption?   enumeration
    |  |  |  |  |  |     +--rw key?          string
    |  |  |  |  |  +--rw md5
    |  |  |  |  |  |  +--rw username?   string
    |  |  |  |  |  |  +--rw password
    |  |  |  |  |  |     +--rw encryption?   enumeration
    |  |  |  |  |  |     +--rw key?          string
    |  |  |  |  |  +--rw mschapv2
    |  |  |  |  |     +--rw username?   string
    |  |  |  |  |     +--rw password
    |  |  |  |  |        +--rw encryption?   enumeration
    |  |  |  |  |        +--rw key?          string
    |  |  |  |  +--rw ecdsa-sig?   empty
    |  |  |  |  +--rw pre-share!
    |  |  |  |  |  +--rw key
    |  |  |  |  |     +--rw encryption?   enumeration
    |  |  |  |  |     +--rw key?          string
    |  |  |  |  +--rw rsa-sig?     empty
    |  |  |  +--rw remote
    |  |  |     +--rw anyconnect-eap
    |  |  |     |  +--rw aggregate!
    |  |  |     |     +--rw cert-request?   empty
    |  |  |     +--rw eap!
    |  |  |     |  +--rw query-identity?   empty
    |  |  |     |  +--rw timeout?          uint8
    |  |  |     +--rw ecdsa-sig?        empty
    |  |  |     +--rw pre-share!
    |  |  |     |  +--rw key
    |  |  |     |     +--rw encryption?   enumeration
    |  |  |     |     +--rw key?          string
    |  |  |     +--rw rsa-sig?          empty
    |  |  +--rw config-exchange
    |  |  |  +--rw request-1?   boolean
    |  |  |  o--rw request?     empty
    |  |  |  +--rw set?         enumeration
    |  |  +--rw description?        string
    |  |  +--rw dpd
    |  |  |  +--rw interval?   uint16
    |  |  |  +--rw retry?      uint8
    |  |  |  +--rw query?      enumeration
    |  |  +--rw dynamic?            empty
    |  |  +--rw identity
    |  |  |  +--rw local
    |  |  |     +--rw (identity)?
    |  |  |        +--:(address-case)
    |  |  |        |  +--rw address?   inet:ip-address
    |  |  |        +--:(dn-case)
    |  |  |        |  +--rw dn?        empty
    |  |  |        +--:(email-case)
    |  |  |        |  +--rw email?     string
    |  |  |        +--:(fqdn-case)
    |  |  |        |  +--rw fqdn?      string
    |  |  |        +--:(key-id-case)
    |  |  |           +--rw key-id?    string
    |  |  +--rw initial-contact
    |  |  |  +--rw force?   empty
    |  |  +--rw ivrf?               string
    |  |  +--rw keyring
    |  |  |  +--rw aaa* [name]
    |  |  |  |  +--rw name            string
    |  |  |  |  +--rw name-mangler?   string
    |  |  |  |  +--rw password
    |  |  |  |     +--rw encryption?   enumeration
    |  |  |  |     +--rw key?          string
    |  |  |  +--rw local
    |  |  |     +--rw name?   -> /ios:native/crypto/ios-crypto:ikev2/keyring/name
    |  |  +--rw lifetime
    |  |  |  +--rw seconds?               uint32
    |  |  |  +--rw certificate-profile?   boolean
    |  |  |  x--rw certificate?           empty
    |  |  +--rw match
    |  |  |  +--rw inbound-only?      empty
    |  |  |  +--rw address
    |  |  |  |  +--rw local
    |  |  |  |     +--rw ip-address*                inet:ip-address
    |  |  |  |     x--rw ip?                        inet:ip-address
    |  |  |  |     +--rw interface-options-local
    |  |  |  |     |  +--rw AppNav-Compress* [AppNav-Compress]
    |  |  |  |     |  |  +--rw AppNav-Compress    uint16
    |  |  |  |     |  +--rw AppNav-UnCompress* [AppNav-UnCompress]
    |  |  |  |     |  |  +--rw AppNav-UnCompress    uint16
    |  |  |  |     |  +--rw ATM* [ATM]
    |  |  |  |     |  |  +--rw ATM    string
    |  |  |  |     |  +--rw ATM-subinterface
    |  |  |  |     |  |  +--rw ATM* [ATM]
    |  |  |  |     |  |     +--rw ATM    string
    |  |  |  |     |  +--rw ATM-ACR* [ATM-ACR]
    |  |  |  |     |  |  +--rw ATM-ACR    string
    |  |  |  |     |  +--rw ATM-ACRsubinterface
    |  |  |  |     |  |  +--rw ATM-ACR* [ATM-ACR]
    |  |  |  |     |  |     +--rw ATM-ACR    string
    |  |  |  |     |  +--rw BDI* [BDI]
    |  |  |  |     |  |  +--rw BDI    string
    |  |  |  |     |  +--rw CEM* [CEM]
    |  |  |  |     |  |  +--rw CEM    string
    |  |  |  |     |  +--rw CEM-ACR* [CEM-ACR]
    |  |  |  |     |  |  +--rw CEM-ACR    uint8
    |  |  |  |     |  +--rw Embedded-Service-Engine* [Embedded-Service-Engine]
    |  |  |  |     |  |  +--rw Embedded-Service-Engine    string
    |  |  |  |     |  +--rw Ethernet* [Ethernet]
    |  |  |  |     |  |  +--rw Ethernet    string
    |  |  |  |     |  +--rw FastEthernet* [FastEthernet]
    |  |  |  |     |  |  +--rw FastEthernet    string
    |  |  |  |     |  +--rw GigabitEthernet* [GigabitEthernet]
    |  |  |  |     |  |  +--rw GigabitEthernet    string
    |  |  |  |     |  +--rw FiveGigabitEthernet* [FiveGigabitEthernet]
    |  |  |  |     |  |  +--rw FiveGigabitEthernet    string
    |  |  |  |     |  +--rw AppGigabitEthernet* [AppGigabitEthernet]
    |  |  |  |     |  |  +--rw AppGigabitEthernet    string
    |  |  |  |     |  +--rw TwentyFiveGigE* [TwentyFiveGigE]
    |  |  |  |     |  |  +--rw TwentyFiveGigE    string
    |  |  |  |     |  +--rw TwoGigabitEthernet* [TwoGigabitEthernet]
    |  |  |  |     |  |  +--rw TwoGigabitEthernet    string
    |  |  |  |     |  +--rw FortyGigabitEthernet* [FortyGigabitEthernet]
    |  |  |  |     |  |  +--rw FortyGigabitEthernet    string
    |  |  |  |     |  +--rw FiftyGigabitEthernet* [FiftyGigabitEthernet]
    |  |  |  |     |  |  +--rw FiftyGigabitEthernet    string
    |  |  |  |     |  +--rw HundredGigE* [HundredGigE]
    |  |  |  |     |  |  +--rw HundredGigE    string
    |  |  |  |     |  +--rw L2LISP* [L2LISP]
    |  |  |  |     |  |  +--rw L2LISP    string
    |  |  |  |     |  +--rw L2LISP-subinterface
    |  |  |  |     |  |  +--rw L2LISP* [L2LISP]
    |  |  |  |     |  |     +--rw L2LISP    string
    |  |  |  |     |  +--rw LISP* [LISP]
    |  |  |  |     |  |  +--rw LISP    string
    |  |  |  |     |  +--rw LISP-subinterface
    |  |  |  |     |  |  +--rw LISP* [LISP]
    |  |  |  |     |  |     +--rw LISP    string
    |  |  |  |     |  +--rw Loopback* [Loopback]
    |  |  |  |     |  |  +--rw Loopback    uint32
    |  |  |  |     |  +--rw Multilink* [Multilink]
    |  |  |  |     |  |  +--rw Multilink    uint16
    |  |  |  |     |  +--rw nve* [nve]
    |  |  |  |     |  |  +--rw nve    uint16
    |  |  |  |     |  +--rw overlay* [overlay]
    |  |  |  |     |  |  +--rw overlay    uint16
    |  |  |  |     |  +--rw Port-channel* [Port-channel]
    |  |  |  |     |  |  +--rw Port-channel    uint32
    |  |  |  |     |  +--rw Port-channel-subinterface
    |  |  |  |     |  |  +--rw Port-channel* [Port-channel]
    |  |  |  |     |  |     +--rw Port-channel    string
    |  |  |  |     |  +--rw pseudowire* [pseudowire]
    |  |  |  |     |  |  +--rw pseudowire    uint32
    |  |  |  |     |  +--rw SM* [SM]
    |  |  |  |     |  |  +--rw SM    string
    |  |  |  |     |  +--rw Cellular* [Cellular]
    |  |  |  |     |  |  +--rw Cellular    string
    |  |  |  |     |  +--rw Dialer* [Dialer]
    |  |  |  |     |  |  +--rw Dialer    string
    |  |  |  |     |  +--rw Serial* [Serial]
    |  |  |  |     |  |  +--rw Serial    string
    |  |  |  |     |  +--rw Async* [Async]
    |  |  |  |     |  |  +--rw Async    string
    |  |  |  |     |  +--rw TenGigabitEthernet* [TenGigabitEthernet]
    |  |  |  |     |  |  +--rw TenGigabitEthernet    string
    |  |  |  |     |  +--rw Tunnel* [Tunnel]
    |  |  |  |     |  |  +--rw Tunnel    uint32
    |  |  |  |     |  +--rw Virtual-Template* [Virtual-Template]
    |  |  |  |     |  |  +--rw Virtual-Template    uint16
    |  |  |  |     |  +--rw Vlan* [Vlan]
    |  |  |  |     |  |  +--rw Vlan    uint16
    |  |  |  |     |  +--rw VirtualPortGroup* [VirtualPortGroup]
    |  |  |  |     |  |  +--rw VirtualPortGroup    uint16
    |  |  |  |     |  +--rw vasileft* [vasileft]
    |  |  |  |     |  |  +--rw vasileft    uint16
    |  |  |  |     |  +--rw vasiright* [vasiright]
    |  |  |  |     |  |  +--rw vasiright    uint16
    |  |  |  |     |  +--rw BD-VIF* [BD-VIF]
    |  |  |  |     |  |  +--rw BD-VIF    string
    |  |  |  |     |  +--rw MFR* [MFR]
    |  |  |  |     |  |  +--rw MFR    uint32
    |  |  |  |     |  +--rw Serial-subinterface
    |  |  |  |     |  |  +--rw Serial* [Serial]
    |  |  |  |     |  |     +--rw Serial    string
    |  |  |  |     |  +--rw Bundle* [Bundle] {ios-features:cable-config}?
    |  |  |  |     |     +--rw Bundle    uint32
    |  |  |  |     x--rw interface-options
    |  |  |  |     |  +--rw (interface-choice)?
    |  |  |  |     |     x--:(AppNav-Compress)
    |  |  |  |     |     |  x--rw AppNav-Compress?             uint16
    |  |  |  |     |     x--:(AppNav-UnCompress)
    |  |  |  |     |     |  x--rw AppNav-UnCompress?           uint16
    |  |  |  |     |     x--:(ATM)
    |  |  |  |     |     |  x--rw ATM?                         string
    |  |  |  |     |     x--:(ATM-subinterface)
    |  |  |  |     |     |  x--rw ATM-subinterface
    |  |  |  |     |     |     x--rw ATM?   string
    |  |  |  |     |     x--:(ATM-ACR)
    |  |  |  |     |     |  x--rw ATM-ACR?                     string
    |  |  |  |     |     x--:(ATM-ACRsubinterface)
    |  |  |  |     |     |  x--rw ATM-ACRsubinterface
    |  |  |  |     |     |     x--rw ATM-ACR?   string
    |  |  |  |     |     x--:(BDI)
    |  |  |  |     |     |  x--rw BDI?                         string
    |  |  |  |     |     x--:(CEM)
    |  |  |  |     |     |  x--rw CEM?                         string
    |  |  |  |     |     x--:(CEM-ACR)
    |  |  |  |     |     |  x--rw CEM-ACR?                     uint8
    |  |  |  |     |     x--:(Embedded-Service-Engine)
    |  |  |  |     |     |  x--rw Embedded-Service-Engine?     string
    |  |  |  |     |     x--:(Ethernet)
    |  |  |  |     |     |  x--rw Ethernet?                    string
    |  |  |  |     |     x--:(FastEthernet)
    |  |  |  |     |     |  x--rw FastEthernet?                string
    |  |  |  |     |     x--:(GigabitEthernet)
    |  |  |  |     |     |  x--rw GigabitEthernet?             string
    |  |  |  |     |     x--:(FiveGigabitEthernet)
    |  |  |  |     |     |  x--rw FiveGigabitEthernet?         string
    |  |  |  |     |     x--:(AppGigabitEthernet)
    |  |  |  |     |     |  x--rw AppGigabitEthernet?          string
    |  |  |  |     |     x--:(TwentyFiveGigE)
    |  |  |  |     |     |  x--rw TwentyFiveGigE?              string
    |  |  |  |     |     x--:(TwoGigabitEthernet)
    |  |  |  |     |     |  x--rw TwoGigabitEthernet?          string
    |  |  |  |     |     x--:(FortyGigabitEthernet)
    |  |  |  |     |     |  x--rw FortyGigabitEthernet?        string
    |  |  |  |     |     x--:(FiftyGigabitEthernet)
    |  |  |  |     |     |  x--rw FiftyGigabitEthernet?        string
    |  |  |  |     |     x--:(HundredGigE)
    |  |  |  |     |     |  x--rw HundredGigE?                 string
    |  |  |  |     |     x--:(L2LISP)
    |  |  |  |     |     |  x--rw L2LISP?                      string
    |  |  |  |     |     +--:(L2LISP-subinterface)
    |  |  |  |     |     |  +--rw L2LISP-subinterface
    |  |  |  |     |     |     x--rw L2LISP?   string
    |  |  |  |     |     x--:(LISP)
    |  |  |  |     |     |  x--rw LISP?                        string
    |  |  |  |     |     x--:(LISP-subinterface)
    |  |  |  |     |     |  x--rw LISP-subinterface
    |  |  |  |     |     |     x--rw LISP?   string
    |  |  |  |     |     x--:(Loopback)
    |  |  |  |     |     |  x--rw Loopback?                    uint32
    |  |  |  |     |     x--:(Multilink)
    |  |  |  |     |     |  x--rw Multilink?                   uint16
    |  |  |  |     |     x--:(nve)
    |  |  |  |     |     |  x--rw nve?                         uint16
    |  |  |  |     |     x--:(overlay)
    |  |  |  |     |     |  x--rw overlay?                     uint16
    |  |  |  |     |     x--:(Port-channel)
    |  |  |  |     |     |  x--rw Port-channel?                uint32
    |  |  |  |     |     x--:(Port-channel-subinterface)
    |  |  |  |     |     |  x--rw Port-channel-subinterface
    |  |  |  |     |     |     x--rw Port-channel?   string
    |  |  |  |     |     x--:(pseudowire)
    |  |  |  |     |     |  x--rw pseudowire?                  uint32
    |  |  |  |     |     x--:(SM)
    |  |  |  |     |     |  x--rw SM?                          string
    |  |  |  |     |     x--:(Cellular)
    |  |  |  |     |     |  x--rw Cellular?                    string
    |  |  |  |     |     x--:(Dialer)
    |  |  |  |     |     |  x--rw Dialer?                      string
    |  |  |  |     |     x--:(Serial)
    |  |  |  |     |     |  x--rw Serial?                      string
    |  |  |  |     |     x--:(Async)
    |  |  |  |     |     |  x--rw Async?                       string
    |  |  |  |     |     x--:(TenGigabitEthernet)
    |  |  |  |     |     |  x--rw TenGigabitEthernet?          string
    |  |  |  |     |     x--:(Tunnel)
    |  |  |  |     |     |  x--rw Tunnel?                      uint32
    |  |  |  |     |     x--:(Virtual-Template)
    |  |  |  |     |     |  x--rw Virtual-Template?            uint16
    |  |  |  |     |     x--:(Vlan)
    |  |  |  |     |     |  x--rw Vlan?                        uint16
    |  |  |  |     |     x--:(VirtualPortGroup)
    |  |  |  |     |     |  x--rw VirtualPortGroup?            uint16
    |  |  |  |     |     x--:(vasileft)
    |  |  |  |     |     |  x--rw vasileft?                    uint16
    |  |  |  |     |     x--:(vasiright)
    |  |  |  |     |     |  x--rw vasiright?                   uint16
    |  |  |  |     |     x--:(BD-VIF)
    |  |  |  |     |     |  x--rw BD-VIF?                      string
    |  |  |  |     |     o--:(TwentyFiveGigabitEthernet)
    |  |  |  |     |     |  o--rw TwentyFiveGigabitEthernet?   string
    |  |  |  |     |     x--:(MFR)
    |  |  |  |     |     |  x--rw MFR?                         uint32
    |  |  |  |     |     x--:(Serial-subinterface)
    |  |  |  |     |     |  x--rw Serial-subinterface
    |  |  |  |     |     |     x--rw Serial?   string
    |  |  |  |     |     x--:(Bundle)
    |  |  |  |     |        x--rw Bundle?                      uint32 {ios-features:cable-config}?
    |  |  |  |     o--rw interface?                 string
    |  |  |  +--rw certificate-map*   string
    |  |  |  o--rw certificate?       string
    |  |  |  +--rw fvrf
    |  |  |  |  +--rw name?   string
    |  |  |  |  +--rw any?    empty
    |  |  |  +--rw identity
    |  |  |     +--rw remote
    |  |  |        +--rw address
    |  |  |        |  +--rw ipv4* [ipv4-address]
    |  |  |        |  |  +--rw ipv4-address    inet:ipv4-address
    |  |  |        |  |  +--rw ipv4-mask?      inet:ipv4-address
    |  |  |        |  +--rw ipv6-prefix*   ios-types:ipv6-prefix
    |  |  |        +--rw any?       empty
    |  |  |        +--rw email
    |  |  |        |  +--rw names*     string
    |  |  |        |  o--rw name?      string
    |  |  |        |  +--rw domains*   string
    |  |  |        |  o--rw domain?    string
    |  |  |        +--rw fqdn
    |  |  |        |  o--rw name?        string
    |  |  |        |  +--rw fqdn-name*   string
    |  |  |        |  +--rw domains*     string
    |  |  |        |  o--rw domain?      string
    |  |  |        +--rw key-ids*   string
    |  |  |        o--rw key-id?    string
    |  |  +--rw nat
    |  |  |  +--rw force-encap?   empty
    |  |  |  +--rw keepalive?     uint16
    |  |  +--rw pki
    |  |  |  +--rw trust-points* [name]
    |  |  |  |  +--rw name    string
    |  |  |  |  +--rw uses?   enumeration
    |  |  |  o--rw trustpoint?     string
    |  |  |  o--rw use?            enumeration
    |  |  +--rw reconnect!
    |  |  |  +--rw timeout?   uint32
    |  |  +--rw redirect
    |  |  |  +--rw gateway
    |  |  |     +--rw auth?   empty
    |  |  +--rw shutdown?           empty
    |  |  +--rw virtual-template
    |  |     +--rw number?   uint16
    |  |     +--rw mode?     enumeration
    |  +--rw proposal* [name]
    |  |  +--rw name          string
    |  |  +--rw encryption
    |  |  |  +--rw en-3des?       empty
    |  |  |  +--rw aes-cbc-128?   empty
    |  |  |  +--rw aes-cbc-192?   empty
    |  |  |  +--rw aes-cbc-256?   empty
    |  |  |  +--rw aes-gcm-128?   empty
    |  |  |  +--rw aes-gcm-256?   empty
    |  |  |  +--rw des?           empty
    |  |  +--rw group
    |  |  |  +--rw one?           empty
    |  |  |  +--rw fourteen?      empty
    |  |  |  +--rw fifteen?       empty
    |  |  |  +--rw sixteen?       empty
    |  |  |  +--rw nineteen?      empty
    |  |  |  +--rw two?           empty
    |  |  |  +--rw twenty?        empty
    |  |  |  +--rw twenty-one?    empty
    |  |  |  +--rw twenty-four?   empty
    |  |  |  +--rw five?          empty
    |  |  +--rw integrity
    |  |  |  +--rw md5?      empty
    |  |  |  +--rw sha1?     empty
    |  |  |  +--rw sha256?   empty
    |  |  |  +--rw sha384?   empty
    |  |  |  +--rw sha512?   empty
    |  |  +--rw prf
    |  |     +--rw md5?      empty
    |  |     +--rw sha1?     empty
    |  |     +--rw sha256?   empty
    |  |     +--rw sha384?   empty
    |  |     +--rw sha512?   empty
    |  +--rw reconnect
    |  |  +--rw key* [key-index]
    |  |     +--rw key-index    uint8
    |  |     +--rw active?      empty
    |  |     +--rw key-value?   string
    |  +--rw redirect
    |  |  +--rw client!
    |  |  |  +--rw max-redirects?   uint8
    |  |  +--rw gateway?   enumeration
    |  +--rw window?                     uint8
    +--rw gkm
    |  +--rw group* [name]
    |     +--rw name        string
    |     +--rw ipv6?       empty
    |     +--rw client
    |     |  +--rw bypass-policy-new?       boolean
    |     |  x--rw bypass-policy?           empty
    |     |  +--rw pfs?                     empty
    |     |  +--rw fail-close
    |     |  |  +--rw revert?   empty
    |     |  +--rw protocol
    |     |  |  +--rw gdoi?     empty
    |     |  |  +--rw gikev2?   string
    |     |  +--rw recovery-check
    |     |  |  +--rw interval?   uint16
    |     |  +--rw registration
    |     |  |  +--rw interface?   string
    |     |  +--rw rekey
    |     |  |  +--rw encryption
    |     |  |  |  +--rw rekey-3des-cbc?   empty
    |     |  |  |  +--rw aes-128?          empty
    |     |  |  |  +--rw aes-192?          empty
    |     |  |  |  +--rw aes-256?          empty
    |     |  |  |  +--rw des-cbc?          empty
    |     |  |  +--rw hash
    |     |  |     +--rw sha?      empty
    |     |  |     +--rw sha256?   empty
    |     |  |     +--rw sha384?   empty
    |     |  |     +--rw sha512?   empty
    |     |  +--rw status
    |     |  |  +--rw active-sa
    |     |  |     +--rw track?   uint16
    |     |  +--rw transform-sets*          string
    |     |  +--rw transport-encrypt-key?   enumeration
    |     +--rw identity
    |     |  +--rw address
    |     |  |  +--rw ipv4?   inet:ipv4-address
    |     |  +--rw number?    uint64
    |     +--rw passive?    empty
    |     +--rw server
    |     |  +--rw address
    |     |  |  +--rw ipv4*   inet:ipv4-address
    |     |  |  +--rw ipv6*   inet:ipv6-address
    |     |  +--rw hostname
    |     |  |  +--rw ipv4?   string
    |     |  |  +--rw ipv6?   string
    |     |  +--rw local!
    |     |     +--rw address
    |     |     |  +--rw ipv4?   inet:ipv4-address
    |     |     +--rw pfs?             empty
    |     |     +--rw authorization
    |     |     |  +--rw address
    |     |     |  |  +--rw ipv4?   union
    |     |     |  +--rw identity?   string
    |     |     +--rw gdoi?            empty
    |     |     +--rw gikev2?          string
    |     |     +--rw group
    |     |     |  +--rw size
    |     |     |     +--rw large?    empty
    |     |     |     +--rw medium?   empty
    |     |     |     +--rw small?    enumeration
    |     |     +--rw identifier
    |     |     |  +--rw default
    |     |     |  |  +--rw range
    |     |     |  |  |  +--rw lowest?    uint8
    |     |     |  |  |  +--rw hyphen?    empty
    |     |     |  |  |  +--rw highest?   uint8
    |     |     |  |  +--rw value-id*   uint8
    |     |     |  |  x--rw value?      uint8
    |     |     |  +--rw range
    |     |     |  |  +--rw lowest?    uint8
    |     |     |  |  +--rw hyphen?    empty
    |     |     |  |  +--rw highest?   uint8
    |     |     |  +--rw value-id*   uint8
    |     |     |  x--rw value?      uint8
    |     |     +--rw redundancy!
    |     |     |  +--rw default
    |     |     |  |  +--rw local!
    |     |     |  |  |  +--rw priority?   uint8
    |     |     |  |  +--rw peer
    |     |     |  |  |  +--rw address
    |     |     |  |  |     +--rw ipv4-addr*   inet:ipv4-address
    |     |     |  |  |     x--rw ipv4?        inet:ipv4-address
    |     |     |  |  +--rw protocol!
    |     |     |  |     +--rw pdu?       uint32
    |     |     |  |     +--rw version?   enumeration
    |     |     |  +--rw local!
    |     |     |  |  +--rw priority?   uint8
    |     |     |  +--rw peer
    |     |     |  |  +--rw address
    |     |     |  |     +--rw ipv4-addr*   inet:ipv4-address
    |     |     |  |     x--rw ipv4?        inet:ipv4-address
    |     |     |  +--rw protocol!
    |     |     |     +--rw pdu?       uint32
    |     |     |     +--rw version?   enumeration
    |     |     +--rw registration
    |     |     |  +--rw interface?   string
    |     |     |  +--rw periodic
    |     |     |     +--rw crl
    |     |     |        +--rw trustpoint?   string
    |     |     +--rw rekey
    |     |     |  +--rw acknowledgement?   enumeration
    |     |     |  +--rw address
    |     |     |  |  +--rw ipv4?   ios-types:ext-acl-type
    |     |     |  +--rw algorithm
    |     |     |  |  +--rw a3des-cbc?   empty
    |     |     |  |  +--rw aes?         enumeration
    |     |     |  |  x--rw aes-128?     empty
    |     |     |  |  x--rw aes-192?     empty
    |     |     |  |  x--rw aes-256?     empty
    |     |     |  |  +--rw des-cbc?     empty
    |     |     |  +--rw authentication
    |     |     |  |  +--rw mypubkey
    |     |     |  |     +--rw rsa?   string
    |     |     |  +--rw lifetime
    |     |     |  |  +--rw days?      uint8
    |     |     |  |  +--rw seconds?   uint64
    |     |     |  +--rw retransmit
    |     |     |  |  +--rw seconds?          uint8
    |     |     |  |  +--rw (number-periodic)?
    |     |     |  |     +--:(number-case)
    |     |     |  |     |  +--rw number?     uint8
    |     |     |  |     +--:(periodic-case)
    |     |     |  |        +--rw periodic?   empty
    |     |     |  +--rw sig-hash
    |     |     |  |  +--rw algorithm?   enumeration
    |     |     |  +--rw transport
    |     |     |     +--rw unicast?   empty
    |     |     +--rw sa
    |     |     |  +--rw d3p
    |     |     |  |  +--rw window
    |     |     |  |     +--rw msec?   uint32
    |     |     |  |     +--rw sec?    uint8
    |     |     |  +--rw ipsec* [sequence]
    |     |     |  |  +--rw sequence    uint16
    |     |     |  |  +--rw default
    |     |     |  |  |  +--rw match
    |     |     |  |  |  |  +--rw address!
    |     |     |  |  |  +--rw profile?   empty
    |     |     |  |  |  +--rw replay!
    |     |     |  |  |  +--rw tag!
    |     |     |  |  +--rw match
    |     |     |  |  |  +--rw address
    |     |     |  |  |     +--rw ipv4?   ios-types:ext-acl-type
    |     |     |  |  |     +--rw ipv6?   string
    |     |     |  |  +--rw profile?    string
    |     |     |  |  +--rw replay
    |     |     |  |  |  +--rw counter!
    |     |     |  |  |  |  +--rw window-size?   enumeration
    |     |     |  |  |  +--rw time!
    |     |     |  |  |     +--rw window-size?   uint8
    |     |     |  |  +--rw tag
    |     |     |  |     +--rw cts
    |     |     |  |        +--rw sgt?   empty
    |     |     |  +--rw pair-wise-keying
    |     |     |  |  +--rw safety-limit?   uint8
    |     |     |  +--rw receive-only?       empty
    |     |     +--rw default
    |     |        +--rw address!
    |     |        +--rw authorization
    |     |        |  +--rw address
    |     |        |  |  +--rw ipv4?   empty
    |     |        |  +--rw identity?   empty
    |     |        +--rw gdoi?            empty
    |     |        +--rw gikev2?          empty
    |     |        +--rw group
    |     |        |  +--rw size!
    |     |        +--rw identifier!
    |     |        +--rw redundancy!
    |     |        +--rw registration
    |     |        |  +--rw interface?   string
    |     |        |  +--rw periodic
    |     |        |     +--rw crl
    |     |        |        +--rw trustpoint?   empty
    |     |        +--rw rekey
    |     |        |  +--rw acknowledgement?   empty
    |     |        |  +--rw address!
    |     |        |  +--rw algorithm!
    |     |        |  +--rw authentication!
    |     |        |  +--rw lifetime
    |     |        |  |  +--rw days?      empty
    |     |        |  |  +--rw seconds?   empty
    |     |        |  +--rw retransmit!
    |     |        |  +--rw sig-hash
    |     |        |  |  +--rw algorithm?   empty
    |     |        |  +--rw transport
    |     |        |     +--rw unicast?   empty
    |     |        +--rw sa
    |     |           +--rw d3p!
    |     |           +--rw ipsec* [sequence]
    |     |           |  +--rw sequence    uint16
    |     |           +--rw pair-wise-keying!
    |     |           +--rw receive-only?       empty
    |     +--rw default
    |        +--rw client
    |        |  +--rw bypass-policy-new?       boolean
    |        |  x--rw bypass-policy?           empty
    |        |  +--rw pfs?                     empty
    |        |  +--rw protocol!
    |        |  +--rw recovery-check!
    |        |  +--rw registration
    |        |  |  +--rw interface?   empty
    |        |  +--rw rekey
    |        |  |  +--rw encryption!
    |        |  |  +--rw hash!
    |        |  +--rw status
    |        |  |  +--rw active-sa!
    |        |  +--rw transform-sets?          empty
    |        |  +--rw transport-encrypt-key?   enumeration
    |        +--rw identity!
    |        +--rw passive?    empty
    |        +--rw server
    |           +--rw address
    |           |  +--rw ipv4?   inet:ipv4-address
    |           +--rw hostname
    |           |  +--rw ipv4?   string
    |           +--rw local?      empty
    +--rw identity* [name]
    |  +--rw name           string
    |  +--rw default
    |  |  +--rw description?   empty
    |  |  +--rw dn?            string
    |  |  +--rw fqdn?          string
    |  +--rw description?   string
    |  +--rw dn?            string
    |  +--rw fqdn?          string
    +--rw ipsec
    |  +--rw df-bit?                 enumeration
    |  +--rw exclude
    |  |  +--rw peer-list
    |  |     +--rw ipv4* [address]
    |  |     |  +--rw address    inet:ipv4-address
    |  |     +--rw ipv6* [address]
    |  |        +--rw address    inet:ipv6-address
    |  +--rw fragmentation?          enumeration
    |  +--rw ipv4-deny?              enumeration
    |  +--rw nat-transparency?       enumeration
    |  +--rw optional!
    |  |  +--rw retry?   uint32
    |  +--rw transform-set* [tag]
    |  |  +--rw tag         string
    |  |  +--rw ah-hmac?    enumeration
    |  |  +--rw comp-lzs?   empty
    |  |  +--rw esp?        enumeration
    |  |  +--rw key-bit?    enumeration
    |  |  +--rw esp-hmac?   enumeration
    |  |  o--rw default
    |  |  |  o--rw mode?   empty
    |  |  +--rw esn?        empty
    |  |  +--rw mode
    |  |     +--rw (mode-type)?
    |  |     |  +--:(transport-case)
    |  |     |  |  +--rw transport-choice!
    |  |     |  |     +--rw require?   empty
    |  |     |  +--:(tunnel-case)
    |  |     |     +--rw tunnel-choice?      empty
    |  |     o--rw transport!
    |  |     |  o--rw require?   empty
    |  |     o--rw tunnel?                   empty
    |  +--rw profile* [name]
    |  |  +--rw name                string
    |  |  +--rw default
    |  |  |  +--rw description?      empty
    |  |  |  +--rw dialer
    |  |  |  |  +--rw pre-classify?   empty
    |  |  |  +--rw redundancy?       empty
    |  |  |  +--rw responder-only?   empty
    |  |  |  +--rw set
    |  |  |     o--rw group?                  empty
    |  |  |     +--rw identity?               empty
    |  |  |     +--rw ikev2-profile?          string
    |  |  |     +--rw isakmp-profile?         empty
    |  |  |     +--rw mixed-mode?             empty
    |  |  |     +--rw pfs!
    |  |  |     +--rw reverse-route!
    |  |  |     +--rw security-association
    |  |  |     |  +--rw dfbit?                 empty
    |  |  |     |  +--rw dummy!
    |  |  |     |  +--rw ecn?                   empty
    |  |  |     |  +--rw idle-time-container
    |  |  |     |  |  +--rw idle-time?   empty
    |  |  |     |  |  +--rw default?     empty
    |  |  |     |  +--rw level?                 enumeration
    |  |  |     |  +--rw lifetime
    |  |  |     |  |  +--rw days?        empty
    |  |  |     |  |  +--rw kilobytes?   empty
    |  |  |     |  |  +--rw seconds?     empty
    |  |  |     |  +--rw replay
    |  |  |     |     +--rw disable?       empty
    |  |  |     |     +--rw window-size?   empty
    |  |  |     +--rw security-policy
    |  |  |     |  +--rw limit?   uint32
    |  |  |     +--rw transform-set*          string
    |  |  +--rw description?        string
    |  |  +--rw dialer
    |  |  |  +--rw pre-classify?   empty
    |  |  +--rw redundancy
    |  |  |  +--rw name?       string
    |  |  |  +--rw stateful?   empty
    |  |  +--rw responder-only?     empty
    |  |  +--rw reverse-route!
    |  |  |  +--rw (remote-peer-static)?
    |  |  |     +--:(remote-peer-case)
    |  |  |     |  +--rw remote-peer-conatiner
    |  |  |     |     +--rw remote-peer?   inet:ip-address
    |  |  |     |     +--rw gateway?       empty
    |  |  |     |     +--rw static?        empty
    |  |  |     +--:(static-case)
    |  |  |        +--rw static?                  empty
    |  |  +--rw rri-dvti-disable?   empty
    |  |  +--rw set
    |  |     o--rw group?                  string
    |  |     +--rw identity?               string
    |  |     +--rw (isakmp_profile-ikev2_profile)?
    |  |     |  +--:(ikev2-profile-case)
    |  |     |  |  +--rw ikev2-profile?    string
    |  |     |  +--:(isakmp-profile-case)
    |  |     |     +--rw isakmp-profile?   string
    |  |     o--rw peer
    |  |     |  o--rw address?   union
    |  |     |  o--rw default?   empty
    |  |     |  o--rw dynamic?   empty
    |  |     +--rw pfs!
    |  |     |  +--rw group?   enumeration
    |  |     +--rw reverse-route
    |  |     |  +--rw distance?   uint8
    |  |     |  +--rw tag?        uint64
    |  |     |  +--rw gateway?    union
    |  |     +--rw transform-set*          string
    |  |     +--rw mixed-mode?             empty
    |  |     +--rw security-association
    |  |     |  +--rw dfbit?                 enumeration
    |  |     |  +--rw dummy
    |  |     |  |  +--rw pps?       uint8
    |  |     |  |  +--rw seconds?   uint16
    |  |     |  +--rw ecn?                   enumeration
    |  |     |  +--rw idle-time-container
    |  |     |  |  +--rw idle-time?   uint32
    |  |     |  |  +--rw default?     empty
    |  |     |  +--rw lifetime
    |  |     |  |  +--rw (days-seconds)?
    |  |     |  |  |  +--:(days)
    |  |     |  |  |  |  +--rw days-case?      uint8
    |  |     |  |  |  +--:(seconds)
    |  |     |  |  |     +--rw seconds-case?   uint64
    |  |     |  |  x--rw days?                 uint8
    |  |     |  |  +--rw kilobytes?            union
    |  |     |  |  x--rw seconds?              uint64
    |  |     |  +--rw replay
    |  |     |  |  +--rw disable?       empty
    |  |     |  |  +--rw window-size?   enumeration
    |  |     |  +--rw level?                 enumeration
    |  |     +--rw security-policy
    |  |        +--rw limit?   uint32
    |  +--rw security-association
    |  |  +--rw dummy
    |  |  |  +--rw pps?       uint8
    |  |  |  +--rw seconds?   uint16
    |  |  +--rw ecn?         enumeration
    |  |  +--rw idle-time?   uint32
    |  |  +--rw lifetime
    |  |  |  +--rw days?        uint8
    |  |  |  +--rw kilobytes?   union
    |  |  |  +--rw seconds?     uint64
    |  |  +--rw multi-sn?    empty
    |  |  +--rw replay
    |  |     +--rw disable?       empty
    |  |     +--rw window-size?   enumeration
    |  +--rw session-key
    |  |  +--rw dummy
    |  |  |  +--rw pps?       uint8
    |  |  |  +--rw seconds?   uint16
    |  |  +--rw ecn?         enumeration
    |  |  +--rw idle-time?   uint32
    |  |  +--rw lifetime
    |  |  |  +--rw days?        uint8
    |  |  |  +--rw kilobytes?   union
    |  |  |  +--rw seconds?     uint32
    |  |  +--rw multi-sn?    empty
    |  |  +--rw replay
    |  |     +--rw disable?       empty
    |  |     +--rw window-size?   enumeration
    |  +--rw ike
    |     +--rw sa-strength-enforcement?   empty
    +--rw key
    |  +--rw decrypt
    |  |  +--rw ec!
    |  |  |  +--rw name?         string
    |  |  |  +--rw passphrase?   string
    |  |  +--rw rsa!
    |  |  |  +--rw name?         string
    |  |  |  +--rw passphrase?   string
    |  |  +--rw write
    |  |     +--rw ec!
    |  |     |  +--rw name?         string
    |  |     |  +--rw passphrase?   string
    |  |     +--rw rsa!
    |  |        +--rw name?         string
    |  |        +--rw passphrase?   string
    |  +--rw encrypt
    |  |  +--rw ec!
    |  |  |  +--rw name?         string
    |  |  |  +--rw passphrase?   string
    |  |  +--rw rsa!
    |  |  |  +--rw name?         string
    |  |  |  +--rw passphrase?   string
    |  |  +--rw write
    |  |     +--rw ec!
    |  |     |  +--rw name?         string
    |  |     |  +--rw passphrase?   string
    |  |     +--rw rsa!
    |  |        +--rw name?         string
    |  |        +--rw passphrase?   string
    |  o--rw export
    |  |  +--rw ec* [label]
    |  |  |  +--rw label    string
    |  |  |  +--rw pem
    |  |  |     +--rw (terminal-url)?
    |  |  |        +--:(terminal-case)
    |  |  |        |  +--rw terminal
    |  |  |        |     +--rw (des-3des)?
    |  |  |        |        +--:(pk-3des-case)
    |  |  |        |        |  +--rw pk-3des?   string
    |  |  |        |        +--:(des-case)
    |  |  |        |           +--rw des?       string
    |  |  |        +--:(url-case)
    |  |  |           +--rw url
    |  |  |              +--rw file?             string
    |  |  |              +--rw (des-3des)?
    |  |  |                 +--:(url-3des-case)
    |  |  |                 |  +--rw url-3des?   string
    |  |  |                 +--:(des-case)
    |  |  |                    +--rw des?        string
    |  |  +--rw rsa* [label]
    |  |     +--rw label    string
    |  |     +--rw pem
    |  |        +--rw (terminal-url)?
    |  |           +--:(terminal-case)
    |  |           |  +--rw terminal
    |  |           |     +--rw (des-3des)?
    |  |           |        +--:(pk-3des-case)
    |  |           |        |  +--rw pk-3des?   string
    |  |           |        +--:(des-case)
    |  |           |           +--rw des?       string
    |  |           +--:(url-case)
    |  |              +--rw url
    |  |                 +--rw file?             string
    |  |                 +--rw (des-3des)?
    |  |                    +--:(url-3des-case)
    |  |                    |  +--rw url-3des?   string
    |  |                    +--:(des-case)
    |  |                       +--rw des?        string
    |  o--rw generate
    |  |  +--rw ec
    |  |  |  +--rw keysize?      enumeration
    |  |  |  +--rw exportable?   empty
    |  |  |  +--rw label?        string
    |  |  +--rw rsa!
    |  |     +--rw encryption?     empty
    |  |     +--rw exportable?     empty
    |  |     +--rw general-keys?   empty
    |  |     +--rw label?          string
    |  |     +--rw modulus?        uint16
    |  |     +--rw on?             string
    |  |     +--rw redundancy?     empty
    |  |     +--rw signature?      empty
    |  |     +--rw storage?        string
    |  |     +--rw usage-keys?     empty
    |  o--rw import
    |  |  +--rw ec* [name]
    |  |  |  +--rw name              string
    |  |  |  +--rw exportable?       empty
    |  |  |  +--rw (terminal-url)?
    |  |  |     +--:(terminal-case)
    |  |  |     |  +--rw terminal?   string
    |  |  |     +--:(url-case)
    |  |  |        +--rw url
    |  |  |           +--rw file?   string
    |  |  |           +--rw key?    string
    |  |  +--rw rsa* [label]
    |  |     +--rw label              string
    |  |     +--rw encryption?        empty
    |  |     +--rw exportable?        empty
    |  |     +--rw general-purpose?   empty
    |  |     +--rw on?                string
    |  |     +--rw pem?               empty
    |  |     +--rw redundancy?        empty
    |  |     +--rw signature?         empty
    |  |     +--rw storage?           string
    |  |     +--rw usage-keys?        empty
    |  |     +--rw (terminal-url)?
    |  |        +--:(terminal-case)
    |  |        |  +--rw terminal?    string
    |  |        +--:(url-case)
    |  |           +--rw url
    |  |              +--rw file?   string
    |  |              +--rw key?    string
    |  o--rw move
    |  |  +--rw rsa
    |  |     +--rw label?            string
    |  |     +--rw non-exportable?   empty
    |  |     +--rw on?               string
    |  |     +--rw redundancy?       empty
    |  |     +--rw storage?          string
    |  +--rw pubkey-chain
    |  |  +--rw rsa
    |  |     +--rw addressed-key* [ip]
    |  |     |  +--rw ip               inet:ipv4-address
    |  |     |  +--rw use?             enumeration
    |  |     |  +--rw address?         inet:ipv4-address
    |  |     |  +--rw key-string
    |  |     |  |  +--rw hex-data?   string
    |  |     |  |  +--rw quit?       empty
    |  |     |  +--rw serial-number?   string
    |  |     |  +--rw default
    |  |     |     +--rw address?         empty
    |  |     |     +--rw key-string!
    |  |     |     +--rw serial-number?   empty
    |  |     +--rw named-key* [name]
    |  |     |  +--rw name             string
    |  |     |  +--rw use?             enumeration
    |  |     |  +--rw address?         inet:ipv4-address
    |  |     |  +--rw key-string
    |  |     |  |  +--rw hex-data?   string
    |  |     |  |  +--rw quit?       empty
    |  |     |  +--rw serial-number?   string
    |  |     |  +--rw default
    |  |     |     +--rw address?         empty
    |  |     |     +--rw key-string!
    |  |     |     +--rw serial-number?   empty
    |  |     +--rw default
    |  |        +--rw addressed-key* [ip]
    |  |        |  +--rw ip     inet:ipv4-address
    |  |        |  +--rw use?   enumeration
    |  |        +--rw named-key* [name]
    |  |           +--rw name    string
    |  |           +--rw use?    enumeration
    |  +--rw storage?        string
    |  o--rw zeroize
    |     +--rw ec!
    |     |  +--rw label?   string
    |     +--rw pubkey-chain!
    |     |  +--rw index?   uint16
    |     +--rw rsa!
    |        +--rw label?   string
    +--rw keyring* [name]
    |  +--rw name              string
    |  +--rw vrf?              string
    |  +--rw default
    |  |  +--rw description?      string
    |  |  +--rw local-address
    |  |  |  +--rw bind-ip-address
    |  |  |  |  +--rw ip-address?   inet:ip-address
    |  |  |  |  +--rw vrf?          string
    |  |  |  +--rw (interface-choice)?
    |  |  |     +--:(AppNav-Compress)
    |  |  |     |  +--rw AppNav-Compress?             uint16
    |  |  |     +--:(AppNav-UnCompress)
    |  |  |     |  +--rw AppNav-UnCompress?           uint16
    |  |  |     +--:(ATM)
    |  |  |     |  +--rw ATM?                         string
    |  |  |     +--:(ATM-subinterface)
    |  |  |     |  +--rw ATM-subinterface
    |  |  |     |     +--rw ATM?   string
    |  |  |     +--:(ATM-ACR)
    |  |  |     |  +--rw ATM-ACR?                     string
    |  |  |     +--:(ATM-ACRsubinterface)
    |  |  |     |  +--rw ATM-ACRsubinterface
    |  |  |     |     +--rw ATM-ACR?   string
    |  |  |     +--:(BDI)
    |  |  |     |  +--rw BDI?                         string
    |  |  |     +--:(CEM)
    |  |  |     |  +--rw CEM?                         string
    |  |  |     +--:(CEM-ACR)
    |  |  |     |  +--rw CEM-ACR?                     uint8
    |  |  |     +--:(Embedded-Service-Engine)
    |  |  |     |  +--rw Embedded-Service-Engine?     string
    |  |  |     +--:(Ethernet)
    |  |  |     |  +--rw Ethernet?                    string
    |  |  |     +--:(FastEthernet)
    |  |  |     |  +--rw FastEthernet?                string
    |  |  |     +--:(GigabitEthernet)
    |  |  |     |  +--rw GigabitEthernet?             string
    |  |  |     +--:(FiveGigabitEthernet)
    |  |  |     |  +--rw FiveGigabitEthernet?         string
    |  |  |     +--:(AppGigabitEthernet)
    |  |  |     |  +--rw AppGigabitEthernet?          string
    |  |  |     o--:(TwentyFiveGigabitEthernet)
    |  |  |     |  o--rw TwentyFiveGigabitEthernet?   string
    |  |  |     +--:(TwentyFiveGigE)
    |  |  |     |  +--rw TwentyFiveGigE?              string
    |  |  |     +--:(TwoGigabitEthernet)
    |  |  |     |  +--rw TwoGigabitEthernet?          string
    |  |  |     +--:(FortyGigabitEthernet)
    |  |  |     |  +--rw FortyGigabitEthernet?        string
    |  |  |     +--:(FiftyGigabitEthernet)
    |  |  |     |  +--rw FiftyGigabitEthernet?        string
    |  |  |     +--:(HundredGigE)
    |  |  |     |  +--rw HundredGigE?                 string
    |  |  |     +--:(L2LISP)
    |  |  |     |  +--rw L2LISP?                      string
    |  |  |     +--:(L2LISP-subinterface)
    |  |  |     |  +--rw L2LISP-subinterface
    |  |  |     |     +--rw L2LISP?   string
    |  |  |     +--:(LISP)
    |  |  |     |  +--rw LISP?                        string
    |  |  |     +--:(LISP-subinterface)
    |  |  |     |  +--rw LISP-subinterface
    |  |  |     |     +--rw LISP?   string
    |  |  |     +--:(Loopback)
    |  |  |     |  +--rw Loopback?                    uint32
    |  |  |     +--:(Multilink)
    |  |  |     |  +--rw Multilink?                   uint16
    |  |  |     +--:(nve)
    |  |  |     |  +--rw nve?                         uint16
    |  |  |     +--:(overlay)
    |  |  |     |  +--rw overlay?                     uint16
    |  |  |     +--:(Port-channel)
    |  |  |     |  +--rw Port-channel?                uint32
    |  |  |     +--:(Port-channel-subinterface)
    |  |  |     |  +--rw Port-channel-subinterface
    |  |  |     |     +--rw Port-channel?   string
    |  |  |     +--:(pseudowire)
    |  |  |     |  +--rw pseudowire?                  uint32
    |  |  |     +--:(SM)
    |  |  |     |  +--rw SM?                          string
    |  |  |     +--:(Cellular)
    |  |  |     |  +--rw Cellular?                    string
    |  |  |     +--:(Dialer)
    |  |  |     |  +--rw Dialer?                      string
    |  |  |     +--:(Serial)
    |  |  |     |  +--rw Serial?                      string
    |  |  |     +--:(Async)
    |  |  |     |  +--rw Async?                       string
    |  |  |     +--:(TenGigabitEthernet)
    |  |  |     |  +--rw TenGigabitEthernet?          string
    |  |  |     +--:(Tunnel)
    |  |  |     |  +--rw Tunnel?                      uint32
    |  |  |     +--:(Virtual-Template)
    |  |  |     |  +--rw Virtual-Template?            uint16
    |  |  |     +--:(Vlan)
    |  |  |     |  +--rw Vlan?                        uint16
    |  |  |     +--:(VirtualPortGroup)
    |  |  |     |  +--rw VirtualPortGroup?            uint16
    |  |  |     +--:(vasileft)
    |  |  |     |  +--rw vasileft?                    uint16
    |  |  |     +--:(vasiright)
    |  |  |     |  +--rw vasiright?                   uint16
    |  |  |     +--:(BD-VIF)
    |  |  |     |  +--rw BD-VIF?                      string
    |  |  |     +--:(MFR)
    |  |  |     |  +--rw MFR?                         uint32
    |  |  |     +--:(Serial-subinterface)
    |  |  |     |  +--rw Serial-subinterface
    |  |  |     |     +--rw Serial?   string
    |  |  |     +--:(Bundle)
    |  |  |        +--rw Bundle?                      uint32 {ios-features:cable-config}?
    |  |  +--rw pre-shared-key
    |  |  |  +--rw address-v2
    |  |  |  |  +--rw ipv4* [ipv4-addr]
    |  |  |  |  |  +--rw ipv4-addr       inet:ipv4-address
    |  |  |  |  |  +--rw mask?           inet:ipv4-address
    |  |  |  |  |  +--rw key?            empty
    |  |  |  |  |  +--rw encryption?     enumeration
    |  |  |  |  |  +--rw unencryt-key?   string
    |  |  |  |  +--rw ipv6* [ipv6-addr]
    |  |  |  |     +--rw ipv6-addr       ios-types:ipv6-prefix
    |  |  |  |     +--rw key?            empty
    |  |  |  |     +--rw encryption?     enumeration
    |  |  |  |     +--rw unencryt-key?   string
    |  |  |  x--rw address
    |  |  |  |  +--rw (ipv4-ipv6)?
    |  |  |  |     +--:(ipv4)
    |  |  |  |     |  x--rw ipv4* [ipv4-addr]
    |  |  |  |     |     x--rw ipv4-addr       inet:ipv4-address
    |  |  |  |     |     x--rw mask?           inet:ipv4-address
    |  |  |  |     |     x--rw key?            empty
    |  |  |  |     |     x--rw encryption?     enumeration
    |  |  |  |     |     x--rw unencryt-key?   string
    |  |  |  |     +--:(ipv6)
    |  |  |  |        x--rw ipv6* [ipv6-addr]
    |  |  |  |           x--rw ipv6-addr       ios-types:ipv6-prefix
    |  |  |  |           x--rw key?            empty
    |  |  |  |           x--rw encryption?     enumeration
    |  |  |  |           x--rw unencryt-key?   string
    |  |  |  +--rw hostname* [name]
    |  |  |     +--rw name            string
    |  |  |     +--rw key?            empty
    |  |  |     +--rw encryption?     enumeration
    |  |  |     +--rw unencryt-key?   string
    |  |  +--rw rsa-pubkey
    |  |     +--rw address* [addr]
    |  |     |  +--rw addr             inet:ipv4-address
    |  |     |  +--rw way?             enumeration
    |  |     |  +--rw address* [ip]
    |  |     |  |  +--rw ip    inet:ipv4-address
    |  |     |  +--rw key-string
    |  |     |  |  +--rw hex-data?   string
    |  |     |  |  +--rw quit?       empty
    |  |     |  +--rw serial-number?   string
    |  |     o--rw addr
    |  |     |  o--rw address?   inet:ipv4-address
    |  |     |  o--rw way?       enumeration
    |  |     +--rw name* [hostname]
    |  |     |  +--rw hostname         string
    |  |     |  +--rw way?             enumeration
    |  |     |  +--rw address* [ip]
    |  |     |  |  +--rw ip    inet:ipv4-address
    |  |     |  +--rw key-string
    |  |     |  |  +--rw hex-data?   string
    |  |     |  |  +--rw quit?       empty
    |  |     |  +--rw serial-number?   string
    |  |     o--rw hostname
    |  |        o--rw name?   string
    |  |        o--rw way?    enumeration
    |  +--rw description?      string
    |  +--rw local-address
    |  |  +--rw bind-ip-address
    |  |  |  +--rw ip-address?   inet:ip-address
    |  |  |  +--rw vrf?          string
    |  |  +--rw (interface-choice)?
    |  |     +--:(AppNav-Compress)
    |  |     |  +--rw AppNav-Compress?             uint16
    |  |     +--:(AppNav-UnCompress)
    |  |     |  +--rw AppNav-UnCompress?           uint16
    |  |     +--:(ATM)
    |  |     |  +--rw ATM?                         string
    |  |     +--:(ATM-subinterface)
    |  |     |  +--rw ATM-subinterface
    |  |     |     +--rw ATM?   string
    |  |     +--:(ATM-ACR)
    |  |     |  +--rw ATM-ACR?                     string
    |  |     +--:(ATM-ACRsubinterface)
    |  |     |  +--rw ATM-ACRsubinterface
    |  |     |     +--rw ATM-ACR?   string
    |  |     +--:(BDI)
    |  |     |  +--rw BDI?                         string
    |  |     +--:(CEM)
    |  |     |  +--rw CEM?                         string
    |  |     +--:(CEM-ACR)
    |  |     |  +--rw CEM-ACR?                     uint8
    |  |     +--:(Embedded-Service-Engine)
    |  |     |  +--rw Embedded-Service-Engine?     string
    |  |     +--:(Ethernet)
    |  |     |  +--rw Ethernet?                    string
    |  |     +--:(FastEthernet)
    |  |     |  +--rw FastEthernet?                string
    |  |     +--:(GigabitEthernet)
    |  |     |  +--rw GigabitEthernet?             string
    |  |     +--:(FiveGigabitEthernet)
    |  |     |  +--rw FiveGigabitEthernet?         string
    |  |     +--:(AppGigabitEthernet)
    |  |     |  +--rw AppGigabitEthernet?          string
    |  |     o--:(TwentyFiveGigabitEthernet)
    |  |     |  o--rw TwentyFiveGigabitEthernet?   string
    |  |     +--:(TwentyFiveGigE)
    |  |     |  +--rw TwentyFiveGigE?              string
    |  |     +--:(TwoGigabitEthernet)
    |  |     |  +--rw TwoGigabitEthernet?          string
    |  |     +--:(FortyGigabitEthernet)
    |  |     |  +--rw FortyGigabitEthernet?        string
    |  |     +--:(FiftyGigabitEthernet)
    |  |     |  +--rw FiftyGigabitEthernet?        string
    |  |     +--:(HundredGigE)
    |  |     |  +--rw HundredGigE?                 string
    |  |     +--:(L2LISP)
    |  |     |  +--rw L2LISP?                      string
    |  |     +--:(L2LISP-subinterface)
    |  |     |  +--rw L2LISP-subinterface
    |  |     |     +--rw L2LISP?   string
    |  |     +--:(LISP)
    |  |     |  +--rw LISP?                        string
    |  |     +--:(LISP-subinterface)
    |  |     |  +--rw LISP-subinterface
    |  |     |     +--rw LISP?   string
    |  |     +--:(Loopback)
    |  |     |  +--rw Loopback?                    uint32
    |  |     +--:(Multilink)
    |  |     |  +--rw Multilink?                   uint16
    |  |     +--:(nve)
    |  |     |  +--rw nve?                         uint16
    |  |     +--:(overlay)
    |  |     |  +--rw overlay?                     uint16
    |  |     +--:(Port-channel)
    |  |     |  +--rw Port-channel?                uint32
    |  |     +--:(Port-channel-subinterface)
    |  |     |  +--rw Port-channel-subinterface
    |  |     |     +--rw Port-channel?   string
    |  |     +--:(pseudowire)
    |  |     |  +--rw pseudowire?                  uint32
    |  |     +--:(SM)
    |  |     |  +--rw SM?                          string
    |  |     +--:(Cellular)
    |  |     |  +--rw Cellular?                    string
    |  |     +--:(Dialer)
    |  |     |  +--rw Dialer?                      string
    |  |     +--:(Serial)
    |  |     |  +--rw Serial?                      string
    |  |     +--:(Async)
    |  |     |  +--rw Async?                       string
    |  |     +--:(TenGigabitEthernet)
    |  |     |  +--rw TenGigabitEthernet?          string
    |  |     +--:(Tunnel)
    |  |     |  +--rw Tunnel?                      uint32
    |  |     +--:(Virtual-Template)
    |  |     |  +--rw Virtual-Template?            uint16
    |  |     +--:(Vlan)
    |  |     |  +--rw Vlan?                        uint16
    |  |     +--:(VirtualPortGroup)
    |  |     |  +--rw VirtualPortGroup?            uint16
    |  |     +--:(vasileft)
    |  |     |  +--rw vasileft?                    uint16
    |  |     +--:(vasiright)
    |  |     |  +--rw vasiright?                   uint16
    |  |     +--:(BD-VIF)
    |  |     |  +--rw BD-VIF?                      string
    |  |     +--:(MFR)
    |  |     |  +--rw MFR?                         uint32
    |  |     +--:(Serial-subinterface)
    |  |     |  +--rw Serial-subinterface
    |  |     |     +--rw Serial?   string
    |  |     +--:(Bundle)
    |  |        +--rw Bundle?                      uint32 {ios-features:cable-config}?
    |  +--rw pre-shared-key
    |  |  +--rw address-v2
    |  |  |  +--rw ipv4* [ipv4-addr]
    |  |  |  |  +--rw ipv4-addr       inet:ipv4-address
    |  |  |  |  +--rw mask?           inet:ipv4-address
    |  |  |  |  +--rw key?            empty
    |  |  |  |  +--rw encryption?     enumeration
    |  |  |  |  +--rw unencryt-key?   string
    |  |  |  +--rw ipv6* [ipv6-addr]
    |  |  |     +--rw ipv6-addr       ios-types:ipv6-prefix
    |  |  |     +--rw key?            empty
    |  |  |     +--rw encryption?     enumeration
    |  |  |     +--rw unencryt-key?   string
    |  |  x--rw address
    |  |  |  +--rw (ipv4-ipv6)?
    |  |  |     +--:(ipv4)
    |  |  |     |  x--rw ipv4* [ipv4-addr]
    |  |  |     |     x--rw ipv4-addr       inet:ipv4-address
    |  |  |     |     x--rw mask?           inet:ipv4-address
    |  |  |     |     x--rw key?            empty
    |  |  |     |     x--rw encryption?     enumeration
    |  |  |     |     x--rw unencryt-key?   string
    |  |  |     +--:(ipv6)
    |  |  |        x--rw ipv6* [ipv6-addr]
    |  |  |           x--rw ipv6-addr       ios-types:ipv6-prefix
    |  |  |           x--rw key?            empty
    |  |  |           x--rw encryption?     enumeration
    |  |  |           x--rw unencryt-key?   string
    |  |  +--rw hostname* [name]
    |  |     +--rw name            string
    |  |     +--rw key?            empty
    |  |     +--rw encryption?     enumeration
    |  |     +--rw unencryt-key?   string
    |  +--rw rsa-pubkey
    |     +--rw address* [addr]
    |     |  +--rw addr             inet:ipv4-address
    |     |  +--rw way?             enumeration
    |     |  +--rw address* [ip]
    |     |  |  +--rw ip    inet:ipv4-address
    |     |  +--rw key-string
    |     |  |  +--rw hex-data?   string
    |     |  |  +--rw quit?       empty
    |     |  +--rw serial-number?   string
    |     o--rw addr
    |     |  o--rw address?   inet:ipv4-address
    |     |  o--rw way?       enumeration
    |     +--rw name* [hostname]
    |     |  +--rw hostname         string
    |     |  +--rw way?             enumeration
    |     |  +--rw address* [ip]
    |     |  |  +--rw ip    inet:ipv4-address
    |     |  +--rw key-string
    |     |  |  +--rw hex-data?   string
    |     |  |  +--rw quit?       empty
    |     |  +--rw serial-number?   string
    |     o--rw hostname
    |        o--rw name?   string
    |        o--rw way?    enumeration
    +--rw isakmp
    |  +--rw aggressive-mode?            enumeration
    |  +--rw client
    |  |  +--rw configuration
    |  |  |  +--rw address-pool
    |  |  |  |  +--rw local?   string
    |  |  |  +--rw browser-proxy-option* [name]
    |  |  |  |  +--rw name     string
    |  |  |  |  +--rw proxy
    |  |  |  |     +--rw (proxy-settings-choice)?
    |  |  |  |        +--:(auto-detect-case)
    |  |  |  |        |  +--rw auto-detect?      empty
    |  |  |  |        +--:(bypass-local-case)
    |  |  |  |        |  +--rw bypass-local?     empty
    |  |  |  |        +--:(none-case)
    |  |  |  |        |  +--rw none?             empty
    |  |  |  |        +--:(server-case)
    |  |  |  |           +--rw server?           string
    |  |  |  |           +--rw exception-list?   string
    |  |  |  o--rw browser-proxy?          string
    |  |  |  +--rw group* [name]
    |  |  |     +--rw name                            string
    |  |  |     +--rw access-restrict-option
    |  |  |     |  +--rw (interface-choice)?
    |  |  |     |     +--:(AppNav-Compress)
    |  |  |     |     |  +--rw AppNav-Compress?             uint16
    |  |  |     |     +--:(AppNav-UnCompress)
    |  |  |     |     |  +--rw AppNav-UnCompress?           uint16
    |  |  |     |     +--:(ATM)
    |  |  |     |     |  +--rw ATM?                         string
    |  |  |     |     +--:(ATM-subinterface)
    |  |  |     |     |  +--rw ATM-subinterface
    |  |  |     |     |     +--rw ATM?   string
    |  |  |     |     +--:(ATM-ACR)
    |  |  |     |     |  +--rw ATM-ACR?                     string
    |  |  |     |     +--:(ATM-ACRsubinterface)
    |  |  |     |     |  +--rw ATM-ACRsubinterface
    |  |  |     |     |     +--rw ATM-ACR?   string
    |  |  |     |     +--:(BDI)
    |  |  |     |     |  +--rw BDI?                         string
    |  |  |     |     +--:(CEM)
    |  |  |     |     |  +--rw CEM?                         string
    |  |  |     |     +--:(CEM-ACR)
    |  |  |     |     |  +--rw CEM-ACR?                     uint8
    |  |  |     |     +--:(Embedded-Service-Engine)
    |  |  |     |     |  +--rw Embedded-Service-Engine?     string
    |  |  |     |     +--:(Ethernet)
    |  |  |     |     |  +--rw Ethernet?                    string
    |  |  |     |     +--:(FastEthernet)
    |  |  |     |     |  +--rw FastEthernet?                string
    |  |  |     |     +--:(GigabitEthernet)
    |  |  |     |     |  +--rw GigabitEthernet?             string
    |  |  |     |     +--:(FiveGigabitEthernet)
    |  |  |     |     |  +--rw FiveGigabitEthernet?         string
    |  |  |     |     +--:(AppGigabitEthernet)
    |  |  |     |     |  +--rw AppGigabitEthernet?          string
    |  |  |     |     o--:(TwentyFiveGigabitEthernet)
    |  |  |     |     |  o--rw TwentyFiveGigabitEthernet?   string
    |  |  |     |     +--:(TwentyFiveGigE)
    |  |  |     |     |  +--rw TwentyFiveGigE?              string
    |  |  |     |     +--:(TwoGigabitEthernet)
    |  |  |     |     |  +--rw TwoGigabitEthernet?          string
    |  |  |     |     +--:(FortyGigabitEthernet)
    |  |  |     |     |  +--rw FortyGigabitEthernet?        string
    |  |  |     |     +--:(FiftyGigabitEthernet)
    |  |  |     |     |  +--rw FiftyGigabitEthernet?        string
    |  |  |     |     +--:(HundredGigE)
    |  |  |     |     |  +--rw HundredGigE?                 string
    |  |  |     |     +--:(L2LISP)
    |  |  |     |     |  +--rw L2LISP?                      string
    |  |  |     |     +--:(L2LISP-subinterface)
    |  |  |     |     |  +--rw L2LISP-subinterface
    |  |  |     |     |     +--rw L2LISP?   string
    |  |  |     |     +--:(LISP)
    |  |  |     |     |  +--rw LISP?                        string
    |  |  |     |     +--:(LISP-subinterface)
    |  |  |     |     |  +--rw LISP-subinterface
    |  |  |     |     |     +--rw LISP?   string
    |  |  |     |     +--:(Loopback)
    |  |  |     |     |  +--rw Loopback?                    uint32
    |  |  |     |     +--:(Multilink)
    |  |  |     |     |  +--rw Multilink?                   uint16
    |  |  |     |     +--:(nve)
    |  |  |     |     |  +--rw nve?                         uint16
    |  |  |     |     +--:(overlay)
    |  |  |     |     |  +--rw overlay?                     uint16
    |  |  |     |     +--:(Port-channel)
    |  |  |     |     |  +--rw Port-channel?                uint32
    |  |  |     |     +--:(Port-channel-subinterface)
    |  |  |     |     |  +--rw Port-channel-subinterface
    |  |  |     |     |     +--rw Port-channel?   string
    |  |  |     |     +--:(pseudowire)
    |  |  |     |     |  +--rw pseudowire?                  uint32
    |  |  |     |     +--:(SM)
    |  |  |     |     |  +--rw SM?                          string
    |  |  |     |     +--:(Cellular)
    |  |  |     |     |  +--rw Cellular?                    string
    |  |  |     |     +--:(Dialer)
    |  |  |     |     |  +--rw Dialer?                      string
    |  |  |     |     +--:(Serial)
    |  |  |     |     |  +--rw Serial?                      string
    |  |  |     |     +--:(Async)
    |  |  |     |     |  +--rw Async?                       string
    |  |  |     |     +--:(TenGigabitEthernet)
    |  |  |     |     |  +--rw TenGigabitEthernet?          string
    |  |  |     |     +--:(Tunnel)
    |  |  |     |     |  +--rw Tunnel?                      uint32
    |  |  |     |     +--:(Virtual-Template)
    |  |  |     |     |  +--rw Virtual-Template?            uint16
    |  |  |     |     +--:(Vlan)
    |  |  |     |     |  +--rw Vlan?                        uint16
    |  |  |     |     +--:(VirtualPortGroup)
    |  |  |     |     |  +--rw VirtualPortGroup?            uint16
    |  |  |     |     +--:(vasileft)
    |  |  |     |     |  +--rw vasileft?                    uint16
    |  |  |     |     +--:(vasiright)
    |  |  |     |     |  +--rw vasiright?                   uint16
    |  |  |     |     +--:(BD-VIF)
    |  |  |     |     |  +--rw BD-VIF?                      string
    |  |  |     |     +--:(MFR)
    |  |  |     |     |  +--rw MFR?                         uint32
    |  |  |     |     +--:(Serial-subinterface)
    |  |  |     |     |  +--rw Serial-subinterface
    |  |  |     |     |     +--rw Serial?   string
    |  |  |     |     +--:(Bundle)
    |  |  |     |        +--rw Bundle?                      uint32 {ios-features:cable-config}?
    |  |  |     o--rw access-restrict?                string
    |  |  |     +--rw acl?                            union
    |  |  |     +--rw auto-update
    |  |  |     |  +--rw client?   string
    |  |  |     |  +--rw url?      string
    |  |  |     |  +--rw rev?      string
    |  |  |     +--rw backup-gateway?                 string
    |  |  |     +--rw browser-proxy?                  string
    |  |  |     +--rw configuration
    |  |  |     |  +--rw url?       string
    |  |  |     |  +--rw version?   uint32
    |  |  |     +--rw crypto
    |  |  |     |  +--rw aaa
    |  |  |     |     +--rw attribute
    |  |  |     |        +--rw list?   string
    |  |  |     +--rw dhcp
    |  |  |     |  +--rw giaddr?          inet:ipv4-address
    |  |  |     |  +--rw server-option* [dhcp-server]
    |  |  |     |  |  +--rw dhcp-server    union
    |  |  |     |  o--rw server?          union
    |  |  |     |  +--rw timeout?         uint8
    |  |  |     +--rw dns
    |  |  |     |  +--rw primary?     inet:ipv4-address
    |  |  |     |  +--rw secondary?   inet:ipv4-address
    |  |  |     +--rw domain?                         string
    |  |  |     +--rw firewall
    |  |  |     |  +--rw are-u-there?   empty
    |  |  |     |  +--rw policy?        string
    |  |  |     +--rw group-lock?                     empty
    |  |  |     +--rw include-local-lan?              empty
    |  |  |     +--rw key
    |  |  |     |  +--rw encryption?   enumeration
    |  |  |     |  +--rw key?          string
    |  |  |     +--rw max-logins?                     uint8
    |  |  |     +--rw max-users?                      uint32
    |  |  |     +--rw netmask?                        inet:ipv4-address
    |  |  |     +--rw pfs?                            empty
    |  |  |     +--rw pool?                           string
    |  |  |     +--rw route-metric?                   uint8
    |  |  |     +--rw save-password?                  empty
    |  |  |     +--rw smartcard-removal-disconnect?   empty
    |  |  |     +--rw split-dns?                      string
    |  |  |     +--rw wins
    |  |  |        +--rw primary?             inet:ipv4-address
    |  |  |        +--rw secondary-address?   inet:ipv4-address
    |  |  |        o--rw secondary?           inet:ipv4-address
    |  |  +--rw firewall* [policy-name]
    |  |     +--rw policy-name    string
    |  |     +--rw optional?      enumeration
    |  |     +--rw required?      enumeration
    |  |     +--rw policy
    |  |        +--rw central-policy-push
    |  |        |  +--rw access-list
    |  |        |     +--rw direction?   enumeration
    |  |        |     +--rw acl?         union
    |  |        +--rw check-presence?        empty
    |  +--rw default
    |  |  +--rw policy?   empty
    |  +--rw diagnose
    |  |  +--rw error?   uint16
    |  +--rw disconnect-revoked-peers?   empty
    |  +--rw enable?                     empty
    |  +--rw fragmentation?              empty
    |  +--rw identity?                   enumeration
    |  +--rw invalid-spi-recovery?       empty
    |  +--rw keepalive
    |  |  +--rw number?         uint16
    |  |  +--rw retry-number?   uint8
    |  |  +--rw send?           enumeration
    |  +--rw key
    |  |  +--rw key-address-host* [key]
    |  |  |  +--rw key           string
    |  |  |  +--rw encryption?   enumeration
    |  |  |  +--rw address
    |  |  |  |  +--rw address-v4* [address]
    |  |  |  |  |  +--rw address     inet:ipv4-address
    |  |  |  |  |  +--rw mask?       inet:ipv4-address
    |  |  |  |  |  +--rw no-xauth?   empty
    |  |  |  |  +--rw address-v6* [ipv6]
    |  |  |  |     +--rw ipv6        ios-types:ipv6-prefix
    |  |  |  |     +--rw no-xauth?   empty
    |  |  |  +--rw hostname* [name]
    |  |  |     +--rw name        string
    |  |  |     +--rw no-xauth?   empty
    |  |  x--rw key-address
    |  |  |  x--rw encryption?              enumeration
    |  |  |  x--rw key?                     string
    |  |  |  x--rw (ipv4-ipv6)?
    |  |  |     x--:(ipv4)
    |  |  |     |  x--rw addr4-container
    |  |  |     |     x--rw address?    inet:ipv4-address
    |  |  |     |     x--rw mask?       inet:ipv4-address
    |  |  |     |     x--rw no-xauth?   empty
    |  |  |     x--:(ipv6)
    |  |  |        x--rw addr6-container
    |  |  |           x--rw address
    |  |  |              x--rw ipv6?       ios-types:ipv6-prefix
    |  |  |              x--rw no-xauth?   empty
    |  |  x--rw key-host
    |  |     x--rw encryption?       enumeration
    |  |     x--rw key?              string
    |  |     x--rw host-container
    |  |        x--rw hostname?   string
    |  |        x--rw no-xauth?   empty
    |  +--rw nat
    |  |  +--rw keepalive?   uint16
    |  +--rw peer
    |  |  +--rw ipv4-addr
    |  |  |  +--rw address* [ipv4]
    |  |  |     +--rw ipv4           inet:ipv4-address
    |  |  |     +--rw vrf?           string
    |  |  |     +--rw description?   string
    |  |  |     +--rw set
    |  |  |        +--rw aggressive-mode
    |  |  |           +--rw client-endpoint
    |  |  |           |  +--rw fqdn?           string
    |  |  |           |  +--rw ipv4-address?   inet:ipv4-address
    |  |  |           |  +--rw ipv6-address?   inet:ipv6-address
    |  |  |           |  +--rw user-fqdn?      string
    |  |  |           +--rw password
    |  |  |              +--rw encryption?   enumeration
    |  |  |              +--rw key?          string
    |  |  +--rw ipv6-addr
    |  |  |  +--rw address* [ipv6]
    |  |  |     +--rw ipv6           inet:ipv6-address
    |  |  |     +--rw vrf?           string
    |  |  |     +--rw description?   string
    |  |  |     +--rw set
    |  |  |        +--rw aggressive-mode
    |  |  |           +--rw client-endpoint
    |  |  |           |  +--rw fqdn?           string
    |  |  |           |  +--rw ipv4-address?   inet:ipv4-address
    |  |  |           |  +--rw ipv6-address?   inet:ipv6-address
    |  |  |           |  +--rw user-fqdn?      string
    |  |  |           +--rw password
    |  |  |              +--rw encryption?   enumeration
    |  |  |              +--rw key?          string
    |  |  +--rw hostname* [name]
    |  |     +--rw name           string
    |  |     +--rw vrf?           string
    |  |     +--rw description?   string
    |  |     +--rw set
    |  |        +--rw aggressive-mode
    |  |           +--rw client-endpoint
    |  |           |  +--rw fqdn?           string
    |  |           |  +--rw ipv4-address?   inet:ipv4-address
    |  |           |  +--rw ipv6-address?   inet:ipv6-address
    |  |           |  +--rw user-fqdn?      string
    |  |           +--rw password
    |  |              +--rw encryption?   enumeration
    |  |              +--rw key?          string
    |  +--rw performance?                empty
    |  +--rw policy* [number]
    |  |  +--rw number            uint32
    |  |  +--rw default
    |  |  |  +--rw authentication?   enumeration
    |  |  |  +--rw encryption
    |  |  |  |  +--rw aes-192?            empty
    |  |  |  |  +--rw aes-256?            empty
    |  |  |  |  +--rw a3des?              empty
    |  |  |  |  +--rw (encryption-type)?
    |  |  |  |  |  +--:(aes-case)
    |  |  |  |  |  |  +--rw aes-choice!
    |  |  |  |  |  |     +--rw key-type?   enumeration
    |  |  |  |  |  +--:(des-case)
    |  |  |  |  |     +--rw des-choice?   empty
    |  |  |  |  o--rw aes!
    |  |  |  |  |  o--rw key?   enumeration
    |  |  |  |  o--rw des?                empty
    |  |  |  +--rw group?            enumeration
    |  |  |  +--rw hash?             enumeration
    |  |  |  +--rw lifetime?         empty
    |  |  +--rw authentication?   enumeration
    |  |  +--rw encryption
    |  |  |  +--rw aes-192?            empty
    |  |  |  +--rw aes-256?            empty
    |  |  |  +--rw a3des?              empty
    |  |  |  +--rw (encryption-type)?
    |  |  |  |  +--:(aes-case)
    |  |  |  |  |  +--rw aes-choice!
    |  |  |  |  |     +--rw key-type?   enumeration
    |  |  |  |  +--:(des-case)
    |  |  |  |     +--rw des-choice?   empty
    |  |  |  o--rw aes!
    |  |  |  |  o--rw key?   enumeration
    |  |  |  o--rw des?                empty
    |  |  +--rw group?            enumeration
    |  |  +--rw hash?             enumeration
    |  |  +--rw lifetime?         uint32
    |  +--rw profile* [name]
    |  |  +--rw name                       string
    |  |  +--rw default
    |  |  |  +--rw accounting?         empty
    |  |  |  +--rw ca
    |  |  |  |  +--rw trust-point-ca*   string
    |  |  |  |  x--rw trust-point?      string
    |  |  |  +--rw client
    |  |  |  |  +--rw authentication
    |  |  |  |  |  +--rw list?   empty
    |  |  |  |  +--rw configuration
    |  |  |  |  |  +--rw address?   enumeration
    |  |  |  |  |  +--rw group?     string
    |  |  |  |  +--rw pki
    |  |  |  |     +--rw authorization!
    |  |  |  +--rw description?        string
    |  |  |  +--rw initiate
    |  |  |  |  +--rw mode!
    |  |  |  +--rw isakmp
    |  |  |  |  +--rw authorization
    |  |  |  |     +--rw list?   empty
    |  |  |  +--rw keepalive!
    |  |  |  +--rw keyring* [keys]
    |  |  |  |  +--rw keys    union
    |  |  |  +--rw local-address?      empty
    |  |  |  +--rw match
    |  |  |  |  +--rw certificate?   string
    |  |  |  |  +--rw identity
    |  |  |  |     +--rw ipv4-address
    |  |  |  |     |  +--rw address?   inet:ipv4-address
    |  |  |  |     |  +--rw mask?      inet:ipv4-address
    |  |  |  |     |  +--rw vrf?       string
    |  |  |  |     +--rw address
    |  |  |  |     |  +--rw ipv6?   ios-types:ipv6-prefix
    |  |  |  |     |  +--rw vrf?    string
    |  |  |  |     +--rw group?          string
    |  |  |  |     +--rw host
    |  |  |  |     |  +--rw domain-name
    |  |  |  |     |  |  +--rw name?   string
    |  |  |  |     |  |  +--rw vrf?    string
    |  |  |  |     |  +--rw domain-match
    |  |  |  |     |     +--rw domain?   string
    |  |  |  |     |     +--rw vrf?      string
    |  |  |  |     +--rw user-fqdn
    |  |  |  |        +--rw domain-name
    |  |  |  |        |  +--rw name?   string
    |  |  |  |        |  +--rw vrf?    string
    |  |  |  |        +--rw domain-match
    |  |  |  |           +--rw domain?   string
    |  |  |  |           +--rw vrf?      string
    |  |  |  +--rw qos-group?          empty
    |  |  |  +--rw self-identity!
    |  |  |  +--rw virtual-template?   empty
    |  |  |  +--rw vrf?                empty
    |  |  +--rw accounting?                string
    |  |  +--rw ca
    |  |  |  +--rw trust-point-ca*   string
    |  |  |  x--rw trust-point?      string
    |  |  +--rw client
    |  |  |  +--rw authentication
    |  |  |  |  +--rw list?       string
    |  |  |  |  +--rw password?   string
    |  |  |  |  +--rw username?   string
    |  |  |  +--rw configuration
    |  |  |  |  +--rw address?   enumeration
    |  |  |  |  +--rw group?     string
    |  |  |  +--rw pki
    |  |  |     +--rw authorization
    |  |  |        +--rw list?       string
    |  |  |        +--rw password
    |  |  |           +--rw encryption?      enumeration
    |  |  |           +--rw user-password?   string
    |  |  +--rw description?               string
    |  |  +--rw initiate
    |  |  |  +--rw mode!
    |  |  |     +--rw mode-name?    enumeration
    |  |  |     o--rw aggressive?   empty
    |  |  +--rw isakmp
    |  |  |  +--rw authorization
    |  |  |     +--rw list?       string
    |  |  |     +--rw password
    |  |  |        +--rw encryption?      enumeration
    |  |  |        +--rw user-password?   string
    |  |  +--rw keepalive
    |  |  |  +--rw number?   uint16
    |  |  |  +--rw retry?    uint8
    |  |  +--rw keyring* [name]
    |  |  |  +--rw name    union
    |  |  +--rw local-address
    |  |  |  +--rw bind-ip-address
    |  |  |  |  +--rw ip-address?   inet:ip-address
    |  |  |  |  +--rw vrf?          string
    |  |  |  +--rw (interface-choice)?
    |  |  |     +--:(AppNav-Compress)
    |  |  |     |  +--rw AppNav-Compress?             uint16
    |  |  |     +--:(AppNav-UnCompress)
    |  |  |     |  +--rw AppNav-UnCompress?           uint16
    |  |  |     +--:(ATM)
    |  |  |     |  +--rw ATM?                         string
    |  |  |     +--:(ATM-subinterface)
    |  |  |     |  +--rw ATM-subinterface
    |  |  |     |     +--rw ATM?   string
    |  |  |     +--:(ATM-ACR)
    |  |  |     |  +--rw ATM-ACR?                     string
    |  |  |     +--:(ATM-ACRsubinterface)
    |  |  |     |  +--rw ATM-ACRsubinterface
    |  |  |     |     +--rw ATM-ACR?   string
    |  |  |     +--:(BDI)
    |  |  |     |  +--rw BDI?                         string
    |  |  |     +--:(CEM)
    |  |  |     |  +--rw CEM?                         string
    |  |  |     +--:(CEM-ACR)
    |  |  |     |  +--rw CEM-ACR?                     uint8
    |  |  |     +--:(Embedded-Service-Engine)
    |  |  |     |  +--rw Embedded-Service-Engine?     string
    |  |  |     +--:(Ethernet)
    |  |  |     |  +--rw Ethernet?                    string
    |  |  |     +--:(FastEthernet)
    |  |  |     |  +--rw FastEthernet?                string
    |  |  |     +--:(GigabitEthernet)
    |  |  |     |  +--rw GigabitEthernet?             string
    |  |  |     +--:(FiveGigabitEthernet)
    |  |  |     |  +--rw FiveGigabitEthernet?         string
    |  |  |     +--:(AppGigabitEthernet)
    |  |  |     |  +--rw AppGigabitEthernet?          string
    |  |  |     o--:(TwentyFiveGigabitEthernet)
    |  |  |     |  o--rw TwentyFiveGigabitEthernet?   string
    |  |  |     +--:(TwentyFiveGigE)
    |  |  |     |  +--rw TwentyFiveGigE?              string
    |  |  |     +--:(TwoGigabitEthernet)
    |  |  |     |  +--rw TwoGigabitEthernet?          string
    |  |  |     +--:(FortyGigabitEthernet)
    |  |  |     |  +--rw FortyGigabitEthernet?        string
    |  |  |     +--:(FiftyGigabitEthernet)
    |  |  |     |  +--rw FiftyGigabitEthernet?        string
    |  |  |     +--:(HundredGigE)
    |  |  |     |  +--rw HundredGigE?                 string
    |  |  |     +--:(L2LISP)
    |  |  |     |  +--rw L2LISP?                      string
    |  |  |     +--:(L2LISP-subinterface)
    |  |  |     |  +--rw L2LISP-subinterface
    |  |  |     |     +--rw L2LISP?   string
    |  |  |     +--:(LISP)
    |  |  |     |  +--rw LISP?                        string
    |  |  |     +--:(LISP-subinterface)
    |  |  |     |  +--rw LISP-subinterface
    |  |  |     |     +--rw LISP?   string
    |  |  |     +--:(Loopback)
    |  |  |     |  +--rw Loopback?                    uint32
    |  |  |     +--:(Multilink)
    |  |  |     |  +--rw Multilink?                   uint16
    |  |  |     +--:(nve)
    |  |  |     |  +--rw nve?                         uint16
    |  |  |     +--:(overlay)
    |  |  |     |  +--rw overlay?                     uint16
    |  |  |     +--:(Port-channel)
    |  |  |     |  +--rw Port-channel?                uint32
    |  |  |     +--:(Port-channel-subinterface)
    |  |  |     |  +--rw Port-channel-subinterface
    |  |  |     |     +--rw Port-channel?   string
    |  |  |     +--:(pseudowire)
    |  |  |     |  +--rw pseudowire?                  uint32
    |  |  |     +--:(SM)
    |  |  |     |  +--rw SM?                          string
    |  |  |     +--:(Cellular)
    |  |  |     |  +--rw Cellular?                    string
    |  |  |     +--:(Dialer)
    |  |  |     |  +--rw Dialer?                      string
    |  |  |     +--:(Serial)
    |  |  |     |  +--rw Serial?                      string
    |  |  |     +--:(Async)
    |  |  |     |  +--rw Async?                       string
    |  |  |     +--:(TenGigabitEthernet)
    |  |  |     |  +--rw TenGigabitEthernet?          string
    |  |  |     +--:(Tunnel)
    |  |  |     |  +--rw Tunnel?                      uint32
    |  |  |     +--:(Virtual-Template)
    |  |  |     |  +--rw Virtual-Template?            uint16
    |  |  |     +--:(Vlan)
    |  |  |     |  +--rw Vlan?                        uint16
    |  |  |     +--:(VirtualPortGroup)
    |  |  |     |  +--rw VirtualPortGroup?            uint16
    |  |  |     +--:(vasileft)
    |  |  |     |  +--rw vasileft?                    uint16
    |  |  |     +--:(vasiright)
    |  |  |     |  +--rw vasiright?                   uint16
    |  |  |     +--:(BD-VIF)
    |  |  |     |  +--rw BD-VIF?                      string
    |  |  |     +--:(MFR)
    |  |  |     |  +--rw MFR?                         uint32
    |  |  |     +--:(Serial-subinterface)
    |  |  |     |  +--rw Serial-subinterface
    |  |  |     |     +--rw Serial?   string
    |  |  |     +--:(Bundle)
    |  |  |        +--rw Bundle?                      uint32 {ios-features:cable-config}?
    |  |  +--rw match
    |  |  |  +--rw certificate-map*   string
    |  |  |  x--rw certificate?       string
    |  |  |  +--rw identity
    |  |  |     +--rw address* [ip mask]
    |  |  |     |  +--rw ip      inet:ipv4-address
    |  |  |     |  +--rw mask    inet:ipv4-address
    |  |  |     |  +--rw vrf?    string
    |  |  |     +--rw peer-address
    |  |  |     |  +--rw address* [ipv6]
    |  |  |     |     +--rw ipv6    ios-types:ipv6-prefix
    |  |  |     |     +--rw vrf?    string
    |  |  |     x--rw ipv6-address* [ipv6]
    |  |  |     |  x--rw ipv6    ios-types:ipv6-prefix
    |  |  |     |  x--rw vrf?    string
    |  |  |     +--rw groups*         string
    |  |  |     x--rw group?          string
    |  |  |     +--rw host
    |  |  |     |  +--rw domain-name-1* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  |  +--rw vrf* [vrf]
    |  |  |     |  |     +--rw vrf    string
    |  |  |     |  +--rw domain* [domain-list]
    |  |  |     |  |  +--rw domain-list    string
    |  |  |     |  |  +--rw vrf* [vrf]
    |  |  |     |  |     +--rw vrf    string
    |  |  |     |  o--rw domain-name
    |  |  |     |  |  o--rw name?   string
    |  |  |     |  |  o--rw vrf?    string
    |  |  |     |  o--rw domain-match
    |  |  |     |     o--rw domain?   string
    |  |  |     |     o--rw vrf?      string
    |  |  |     +--rw user-fqdn
    |  |  |        +--rw domain-name
    |  |  |        |  +--rw name?   string
    |  |  |        |  +--rw vrf?    string
    |  |  |        +--rw domain-match
    |  |  |           +--rw domain?   string
    |  |  |           +--rw vrf?      string
    |  |  +--rw qos-group?                 uint16
    |  |  +--rw rekey?                     empty
    |  |  +--rw self-identity
    |  |  |  +--rw address!
    |  |  |  |  +--rw ipv6?   empty
    |  |  |  +--rw fqdn!
    |  |  |  |  +--rw id?   string
    |  |  |  +--rw user-fqdn?   string
    |  |  +--rw virtual-template-option
    |  |  |  +--rw virtual-template-number?   uint16
    |  |  |  +--rw per-user?                  empty
    |  |  x--rw virtual-template?          empty
    |  |  +--rw vrf?                       string
    |  +--rw xauth
    |     +--rw timeout?   uint8
    +--rw logging
    |  +--rw ezvpn!
    |  |  +--rw group?   string
    |  +--rw ikev2?     empty
    |  +--rw session?   empty
    +--rw session
    |  +--rw stats
    |     +--rw history?   uint16
    +--rw map
    |  +--rw (name-ipv6)?
    |     +--:(name-case)
    |     |  +--rw map-seq
    |     |  |  +--rw map* [name seq]
    |     |  |     +--rw name                  string
    |     |  |     +--rw seq                   uint32
    |     |  |     +--rw (ipsec-isakmp-gdoi-ipsec-manual)?
    |     |  |     |  +--:(ipsec-isakmp-case)
    |     |  |     |  |  +--rw ipsec-isakmp!
    |     |  |     |  |     +--rw (dynamic-profile)?
    |     |  |     |  |        +--:(dynamic-case)
    |     |  |     |  |        |  +--rw dynamic
    |     |  |     |  |        |     +--rw mode?       string
    |     |  |     |  |        |     +--rw discover?   empty
    |     |  |     |  |        +--:(profile-case)
    |     |  |     |  |           +--rw profile?   string
    |     |  |     |  +--:(gdoi)
    |     |  |     |  |  +--rw gdoi?           empty
    |     |  |     |  +--:(ipsec-manual)
    |     |  |     |     +--rw ipsec-manual?   empty
    |     |  |     +--rw description?          string
    |     |  |     +--rw dialer
    |     |  |     |  +--rw pre-classify?   empty
    |     |  |     +--rw match
    |     |  |     |  +--rw address?   ios-types:ext-acl-type
    |     |  |     +--rw qos
    |     |  |     |  +--rw pre-classify?   empty
    |     |  |     +--rw reverse-route!
    |     |  |     |  +--rw (remote-peer-static)?
    |     |  |     |     +--:(remote-peer-case)
    |     |  |     |     |  +--rw remote-peer-conatiner
    |     |  |     |     |     +--rw remote-peer?   inet:ip-address
    |     |  |     |     |     +--rw gateway?       empty
    |     |  |     |     |     +--rw static?        empty
    |     |  |     |     +--:(static-case)
    |     |  |     |        +--rw static?                  empty
    |     |  |     +--rw set
    |     |  |        +--rw group?                  string
    |     |  |        +--rw identity?               string
    |     |  |        +--rw (isakmp_profile-ikev2_profile)?
    |     |  |        |  +--:(ikev2-profile-case)
    |     |  |        |  |  +--rw ikev2-profile?    string
    |     |  |        |  +--:(isakmp-profile-case)
    |     |  |        |     +--rw isakmp-profile?   string
    |     |  |        +--rw peer
    |     |  |        |  +--rw addresses*   union
    |     |  |        |  x--rw address?     union
    |     |  |        |  +--rw default?     empty
    |     |  |        |  +--rw dynamic?     empty
    |     |  |        +--rw pfs!
    |     |  |        |  +--rw group?   enumeration
    |     |  |        +--rw reverse-route
    |     |  |        |  +--rw distance?   uint8
    |     |  |        |  +--rw tag?        uint64
    |     |  |        |  +--rw gateway?    union
    |     |  |        +--rw transform-set*          string
    |     |  |        +--rw security-association
    |     |  |           +--rw dfbit?                 enumeration
    |     |  |           +--rw dummy
    |     |  |           |  +--rw pps?       uint8
    |     |  |           |  +--rw seconds?   uint16
    |     |  |           +--rw ecn?                   enumeration
    |     |  |           +--rw idle-time-container
    |     |  |           |  +--rw idle-time?   uint32
    |     |  |           |  +--rw default?     empty
    |     |  |           +--rw lifetime
    |     |  |           |  +--rw (days-seconds)?
    |     |  |           |  |  +--:(days)
    |     |  |           |  |  |  +--rw days-case?      uint8
    |     |  |           |  |  +--:(seconds)
    |     |  |           |  |     +--rw seconds-case?   uint64
    |     |  |           |  x--rw days?                 uint8
    |     |  |           |  +--rw kilobytes?            union
    |     |  |           |  x--rw seconds?              uint64
    |     |  |           +--rw replay
    |     |  |           |  +--rw disable?       empty
    |     |  |           |  +--rw window-size?   enumeration
    |     |  |           +--rw level?                 enumeration
    |     |  +--rw map-client
    |     |  |  +--rw accounting* [name]
    |     |  |  |  +--rw name          string
    |     |  |  |  +--rw client        empty
    |     |  |  |  +--rw accounting    empty
    |     |  |  |  +--rw list?         string
    |     |  |  +--rw authentication-list* [name]
    |     |  |  |  +--rw name              string
    |     |  |  |  +--rw client            empty
    |     |  |  |  +--rw authentication    empty
    |     |  |  |  +--rw list?             string
    |     |  |  +--rw authentication-password* [name]
    |     |  |  |  +--rw name              string
    |     |  |  |  +--rw client            empty
    |     |  |  |  +--rw authentication    empty
    |     |  |  |  +--rw password?         string
    |     |  |  +--rw authentication-username* [name]
    |     |  |  |  +--rw name              string
    |     |  |  |  +--rw client            empty
    |     |  |  |  +--rw authentication    empty
    |     |  |  |  +--rw username?         string
    |     |  |  o--rw autorization* [name]
    |     |  |  |  o--rw name            string
    |     |  |  |  o--rw client?         empty
    |     |  |  |  o--rw autorization    empty
    |     |  |  |  o--rw list?           string
    |     |  |  +--rw configuration-intiate* [name]
    |     |  |  |  +--rw name             string
    |     |  |  |  +--rw client?          empty
    |     |  |  |  +--rw configuration    empty
    |     |  |  |  +--rw address          empty
    |     |  |  |  +--rw initiate?        empty
    |     |  |  o--rw configuration-respond* [name]
    |     |  |     o--rw name             string
    |     |  |     o--rw client?          empty
    |     |  |     o--rw configuration    empty
    |     |  |     o--rw address          empty
    |     |  |     o--rw respond?         empty
    |     |  +--rw map-gdoi
    |     |  |  +--rw map* [name]
    |     |  |     +--rw name          string
    |     |  |     +--rw gdoi?         empty
    |     |  |     +--rw fail-close?   empty
    |     |  |     +--rw activate?     empty
    |     |  |     +--rw match
    |     |  |        +--rw address?   ios-types:access-list-standard-id-type
    |     |  +--rw map-isakmp
    |     |  |  +--rw map* [name]
    |     |  |     +--rw name              string
    |     |  |     +--rw isakmp-profile?   string
    |     |  +--rw map-local
    |     |  |  +--rw map* [name]
    |     |  |     +--rw name             string
    |     |  |     +--rw local-address
    |     |  |        +--rw (interface-choice)?
    |     |  |           +--:(AppNav-Compress)
    |     |  |           |  +--rw AppNav-Compress?             uint16
    |     |  |           +--:(AppNav-UnCompress)
    |     |  |           |  +--rw AppNav-UnCompress?           uint16
    |     |  |           +--:(ATM)
    |     |  |           |  +--rw ATM?                         string
    |     |  |           +--:(ATM-subinterface)
    |     |  |           |  +--rw ATM-subinterface
    |     |  |           |     +--rw ATM?   string
    |     |  |           +--:(ATM-ACR)
    |     |  |           |  +--rw ATM-ACR?                     string
    |     |  |           +--:(ATM-ACRsubinterface)
    |     |  |           |  +--rw ATM-ACRsubinterface
    |     |  |           |     +--rw ATM-ACR?   string
    |     |  |           +--:(BDI)
    |     |  |           |  +--rw BDI?                         string
    |     |  |           +--:(CEM)
    |     |  |           |  +--rw CEM?                         string
    |     |  |           +--:(CEM-ACR)
    |     |  |           |  +--rw CEM-ACR?                     uint8
    |     |  |           +--:(Embedded-Service-Engine)
    |     |  |           |  +--rw Embedded-Service-Engine?     string
    |     |  |           +--:(Ethernet)
    |     |  |           |  +--rw Ethernet?                    string
    |     |  |           +--:(FastEthernet)
    |     |  |           |  +--rw FastEthernet?                string
    |     |  |           +--:(GigabitEthernet)
    |     |  |           |  +--rw GigabitEthernet?             string
    |     |  |           +--:(FiveGigabitEthernet)
    |     |  |           |  +--rw FiveGigabitEthernet?         string
    |     |  |           +--:(AppGigabitEthernet)
    |     |  |           |  +--rw AppGigabitEthernet?          string
    |     |  |           o--:(TwentyFiveGigabitEthernet)
    |     |  |           |  o--rw TwentyFiveGigabitEthernet?   string
    |     |  |           +--:(TwentyFiveGigE)
    |     |  |           |  +--rw TwentyFiveGigE?              string
    |     |  |           +--:(TwoGigabitEthernet)
    |     |  |           |  +--rw TwoGigabitEthernet?          string
    |     |  |           +--:(FortyGigabitEthernet)
    |     |  |           |  +--rw FortyGigabitEthernet?        string
    |     |  |           +--:(FiftyGigabitEthernet)
    |     |  |           |  +--rw FiftyGigabitEthernet?        string
    |     |  |           +--:(HundredGigE)
    |     |  |           |  +--rw HundredGigE?                 string
    |     |  |           +--:(L2LISP)
    |     |  |           |  +--rw L2LISP?                      string
    |     |  |           +--:(L2LISP-subinterface)
    |     |  |           |  +--rw L2LISP-subinterface
    |     |  |           |     +--rw L2LISP?   string
    |     |  |           +--:(LISP)
    |     |  |           |  +--rw LISP?                        string
    |     |  |           +--:(LISP-subinterface)
    |     |  |           |  +--rw LISP-subinterface
    |     |  |           |     +--rw LISP?   string
    |     |  |           +--:(Loopback)
    |     |  |           |  +--rw Loopback?                    uint32
    |     |  |           +--:(Multilink)
    |     |  |           |  +--rw Multilink?                   uint16
    |     |  |           +--:(nve)
    |     |  |           |  +--rw nve?                         uint16
    |     |  |           +--:(overlay)
    |     |  |           |  +--rw overlay?                     uint16
    |     |  |           +--:(Port-channel)
    |     |  |           |  +--rw Port-channel?                uint32
    |     |  |           +--:(Port-channel-subinterface)
    |     |  |           |  +--rw Port-channel-subinterface
    |     |  |           |     +--rw Port-channel?   string
    |     |  |           +--:(pseudowire)
    |     |  |           |  +--rw pseudowire?                  uint32
    |     |  |           +--:(SM)
    |     |  |           |  +--rw SM?                          string
    |     |  |           +--:(Cellular)
    |     |  |           |  +--rw Cellular?                    string
    |     |  |           +--:(Dialer)
    |     |  |           |  +--rw Dialer?                      string
    |     |  |           +--:(Serial)
    |     |  |           |  +--rw Serial?                      string
    |     |  |           +--:(Async)
    |     |  |           |  +--rw Async?                       string
    |     |  |           +--:(TenGigabitEthernet)
    |     |  |           |  +--rw TenGigabitEthernet?          string
    |     |  |           +--:(Tunnel)
    |     |  |           |  +--rw Tunnel?                      uint32
    |     |  |           +--:(Virtual-Template)
    |     |  |           |  +--rw Virtual-Template?            uint16
    |     |  |           +--:(Vlan)
    |     |  |           |  +--rw Vlan?                        uint16
    |     |  |           +--:(VirtualPortGroup)
    |     |  |           |  +--rw VirtualPortGroup?            uint16
    |     |  |           +--:(vasileft)
    |     |  |           |  +--rw vasileft?                    uint16
    |     |  |           +--:(vasiright)
    |     |  |           |  +--rw vasiright?                   uint16
    |     |  |           +--:(BD-VIF)
    |     |  |           |  +--rw BD-VIF?                      string
    |     |  |           +--:(MFR)
    |     |  |           |  +--rw MFR?                         uint32
    |     |  |           +--:(Serial-subinterface)
    |     |  |           |  +--rw Serial-subinterface
    |     |  |           |     +--rw Serial?   string
    |     |  |           +--:(Bundle)
    |     |  |              +--rw Bundle?                      uint32 {ios-features:cable-config}?
    |     |  +--rw map-redundancy
    |     |  |  +--rw map* [name]
    |     |  |     +--rw name          string
    |     |  |     +--rw redundancy
    |     |  |        +--rw replay-interval
    |     |  |           +--rw inbound?    uint32
    |     |  |           +--rw outbound?   uint32
    |     |  +--rw ipv6-map
    |     |     +--rw map-seq
    |     |     |  +--rw map* [name seq]
    |     |     |     +--rw name                  string
    |     |     |     +--rw seq                   uint32
    |     |     |     +--rw (ipsec-isakmp-gdoi-ipsec-manual)?
    |     |     |     |  +--:(ipsec-isakmp-case)
    |     |     |     |  |  +--rw ipsec-isakmp!
    |     |     |     |  |     +--rw (dynamic-profile)?
    |     |     |     |  |        +--:(dynamic-case)
    |     |     |     |  |        |  +--rw dynamic
    |     |     |     |  |        |     +--rw mode?       string
    |     |     |     |  |        |     +--rw discover?   empty
    |     |     |     |  |        +--:(profile-case)
    |     |     |     |  |           +--rw profile?   string
    |     |     |     |  +--:(gdoi)
    |     |     |     |  |  +--rw gdoi?           empty
    |     |     |     |  +--:(ipsec-manual)
    |     |     |     |     +--rw ipsec-manual?   empty
    |     |     |     +--rw description?          string
    |     |     |     +--rw dialer
    |     |     |     |  +--rw pre-classify?   empty
    |     |     |     +--rw match
    |     |     |     |  +--rw address?   ios-types:ext-acl-type
    |     |     |     +--rw qos
    |     |     |     |  +--rw pre-classify?   empty
    |     |     |     +--rw reverse-route!
    |     |     |     |  +--rw (remote-peer-static)?
    |     |     |     |     +--:(remote-peer-case)
    |     |     |     |     |  +--rw remote-peer-conatiner
    |     |     |     |     |     +--rw remote-peer?   inet:ip-address
    |     |     |     |     |     +--rw gateway?       empty
    |     |     |     |     |     +--rw static?        empty
    |     |     |     |     +--:(static-case)
    |     |     |     |        +--rw static?                  empty
    |     |     |     +--rw set
    |     |     |        +--rw group?                  string
    |     |     |        +--rw identity?               string
    |     |     |        +--rw (isakmp_profile-ikev2_profile)?
    |     |     |        |  +--:(ikev2-profile-case)
    |     |     |        |  |  +--rw ikev2-profile?    string
    |     |     |        |  +--:(isakmp-profile-case)
    |     |     |        |     +--rw isakmp-profile?   string
    |     |     |        +--rw peer
    |     |     |        |  +--rw addresses*   union
    |     |     |        |  x--rw address?     union
    |     |     |        |  +--rw default?     empty
    |     |     |        |  +--rw dynamic?     empty
    |     |     |        +--rw pfs!
    |     |     |        |  +--rw group?   enumeration
    |     |     |        +--rw reverse-route
    |     |     |        |  +--rw distance?   uint8
    |     |     |        |  +--rw tag?        uint64
    |     |     |        |  +--rw gateway?    union
    |     |     |        +--rw transform-set*          string
    |     |     |        +--rw security-association
    |     |     |           +--rw dfbit?                 enumeration
    |     |     |           +--rw dummy
    |     |     |           |  +--rw pps?       uint8
    |     |     |           |  +--rw seconds?   uint16
    |     |     |           +--rw ecn?                   enumeration
    |     |     |           +--rw idle-time-container
    |     |     |           |  +--rw idle-time?   uint32
    |     |     |           |  +--rw default?     empty
    |     |     |           +--rw lifetime
    |     |     |           |  +--rw (days-seconds)?
    |     |     |           |  |  +--:(days)
    |     |     |           |  |  |  +--rw days-case?      uint8
    |     |     |           |  |  +--:(seconds)
    |     |     |           |  |     +--rw seconds-case?   uint64
    |     |     |           |  x--rw days?                 uint8
    |     |     |           |  +--rw kilobytes?            union
    |     |     |           |  x--rw seconds?              uint64
    |     |     |           +--rw replay
    |     |     |           |  +--rw disable?       empty
    |     |     |           |  +--rw window-size?   enumeration
    |     |     |           +--rw level?                 enumeration
    |     |     +--rw map-client
    |     |     |  +--rw accounting* [name]
    |     |     |  |  +--rw name          string
    |     |     |  |  +--rw client        empty
    |     |     |  |  +--rw accounting    empty
    |     |     |  |  +--rw list?         string
    |     |     |  +--rw authentication-list* [name]
    |     |     |  |  +--rw name              string
    |     |     |  |  +--rw client            empty
    |     |     |  |  +--rw authentication    empty
    |     |     |  |  +--rw list?             string
    |     |     |  +--rw authentication-password* [name]
    |     |     |  |  +--rw name              string
    |     |     |  |  +--rw client            empty
    |     |     |  |  +--rw authentication    empty
    |     |     |  |  +--rw password?         string
    |     |     |  +--rw authentication-username* [name]
    |     |     |     +--rw name              string
    |     |     |     +--rw client            empty
    |     |     |     +--rw authentication    empty
    |     |     |     +--rw username?         string
    |     |     +--rw map-gdoi
    |     |     |  +--rw map* [name]
    |     |     |     +--rw name          string
    |     |     |     +--rw gdoi?         empty
    |     |     |     +--rw fail-close?   empty
    |     |     |     +--rw activate?     empty
    |     |     |     +--rw match
    |     |     |        +--rw address?   ios-types:access-list-standard-id-type
    |     |     +--rw map-local
    |     |        +--rw map* [name]
    |     |           +--rw name             string
    |     |           +--rw local-address
    |     |              +--rw (interface-choice)?
    |     |                 +--:(AppNav-Compress)
    |     |                 |  +--rw AppNav-Compress?             uint16
    |     |                 +--:(AppNav-UnCompress)
    |     |                 |  +--rw AppNav-UnCompress?           uint16
    |     |                 +--:(ATM)
    |     |                 |  +--rw ATM?                         string
    |     |                 +--:(ATM-subinterface)
    |     |                 |  +--rw ATM-subinterface
    |     |                 |     +--rw ATM?   string
    |     |                 +--:(ATM-ACR)
    |     |                 |  +--rw ATM-ACR?                     string
    |     |                 +--:(ATM-ACRsubinterface)
    |     |                 |  +--rw ATM-ACRsubinterface
    |     |                 |     +--rw ATM-ACR?   string
    |     |                 +--:(BDI)
    |     |                 |  +--rw BDI?                         string
    |     |                 +--:(CEM)
    |     |                 |  +--rw CEM?                         string
    |     |                 +--:(CEM-ACR)
    |     |                 |  +--rw CEM-ACR?                     uint8
    |     |                 +--:(Embedded-Service-Engine)
    |     |                 |  +--rw Embedded-Service-Engine?     string
    |     |                 +--:(Ethernet)
    |     |                 |  +--rw Ethernet?                    string
    |     |                 +--:(FastEthernet)
    |     |                 |  +--rw FastEthernet?                string
    |     |                 +--:(GigabitEthernet)
    |     |                 |  +--rw GigabitEthernet?             string
    |     |                 +--:(FiveGigabitEthernet)
    |     |                 |  +--rw FiveGigabitEthernet?         string
    |     |                 +--:(AppGigabitEthernet)
    |     |                 |  +--rw AppGigabitEthernet?          string
    |     |                 o--:(TwentyFiveGigabitEthernet)
    |     |                 |  o--rw TwentyFiveGigabitEthernet?   string
    |     |                 +--:(TwentyFiveGigE)
    |     |                 |  +--rw TwentyFiveGigE?              string
    |     |                 +--:(TwoGigabitEthernet)
    |     |                 |  +--rw TwoGigabitEthernet?          string
    |     |                 +--:(FortyGigabitEthernet)
    |     |                 |  +--rw FortyGigabitEthernet?        string
    |     |                 +--:(FiftyGigabitEthernet)
    |     |                 |  +--rw FiftyGigabitEthernet?        string
    |     |                 +--:(HundredGigE)
    |     |                 |  +--rw HundredGigE?                 string
    |     |                 +--:(L2LISP)
    |     |                 |  +--rw L2LISP?                      string
    |     |                 +--:(L2LISP-subinterface)
    |     |                 |  +--rw L2LISP-subinterface
    |     |                 |     +--rw L2LISP?   string
    |     |                 +--:(LISP)
    |     |                 |  +--rw LISP?                        string
    |     |                 +--:(LISP-subinterface)
    |     |                 |  +--rw LISP-subinterface
    |     |                 |     +--rw LISP?   string
    |     |                 +--:(Loopback)
    |     |                 |  +--rw Loopback?                    uint32
    |     |                 +--:(Multilink)
    |     |                 |  +--rw Multilink?                   uint16
    |     |                 +--:(nve)
    |     |                 |  +--rw nve?                         uint16
    |     |                 +--:(overlay)
    |     |                 |  +--rw overlay?                     uint16
    |     |                 +--:(Port-channel)
    |     |                 |  +--rw Port-channel?                uint32
    |     |                 +--:(Port-channel-subinterface)
    |     |                 |  +--rw Port-channel-subinterface
    |     |                 |     +--rw Port-channel?   string
    |     |                 +--:(pseudowire)
    |     |                 |  +--rw pseudowire?                  uint32
    |     |                 +--:(SM)
    |     |                 |  +--rw SM?                          string
    |     |                 +--:(Cellular)
    |     |                 |  +--rw Cellular?                    string
    |     |                 +--:(Dialer)
    |     |                 |  +--rw Dialer?                      string
    |     |                 +--:(Serial)
    |     |                 |  +--rw Serial?                      string
    |     |                 +--:(Async)
    |     |                 |  +--rw Async?                       string
    |     |                 +--:(TenGigabitEthernet)
    |     |                 |  +--rw TenGigabitEthernet?          string
    |     |                 +--:(Tunnel)
    |     |                 |  +--rw Tunnel?                      uint32
    |     |                 +--:(Virtual-Template)
    |     |                 |  +--rw Virtual-Template?            uint16
    |     |                 +--:(Vlan)
    |     |                 |  +--rw Vlan?                        uint16
    |     |                 +--:(VirtualPortGroup)
    |     |                 |  +--rw VirtualPortGroup?            uint16
    |     |                 +--:(vasileft)
    |     |                 |  +--rw vasileft?                    uint16
    |     |                 +--:(vasiright)
    |     |                 |  +--rw vasiright?                   uint16
    |     |                 +--:(BD-VIF)
    |     |                 |  +--rw BD-VIF?                      string
    |     |                 +--:(MFR)
    |     |                 |  +--rw MFR?                         uint32
    |     |                 +--:(Serial-subinterface)
    |     |                 |  +--rw Serial-subinterface
    |     |                 |     +--rw Serial?   string
    |     |                 +--:(Bundle)
    |     |                    +--rw Bundle?                      uint32 {ios-features:cable-config}?
    |     +--:(ipv6-case)
    |        +--rw ipv6
    |           +--rw map-seq
    |           |  +--rw map* [name seq]
    |           |     +--rw name                  string
    |           |     +--rw seq                   uint32
    |           |     +--rw (ipsec-isakmp-gdoi-ipsec-manual)?
    |           |     |  +--:(ipsec-isakmp-case)
    |           |     |  |  +--rw ipsec-isakmp!
    |           |     |  |     +--rw (dynamic-profile)?
    |           |     |  |        +--:(dynamic-case)
    |           |     |  |        |  +--rw dynamic
    |           |     |  |        |     +--rw mode?       string
    |           |     |  |        |     +--rw discover?   empty
    |           |     |  |        +--:(profile-case)
    |           |     |  |           +--rw profile?   string
    |           |     |  +--:(gdoi)
    |           |     |  |  +--rw gdoi?           empty
    |           |     |  +--:(ipsec-manual)
    |           |     |     +--rw ipsec-manual?   empty
    |           |     +--rw description?          string
    |           |     +--rw dialer
    |           |     |  +--rw pre-classify?   empty
    |           |     +--rw match
    |           |     |  +--rw address?   ios-types:ext-acl-type
    |           |     +--rw qos
    |           |     |  +--rw pre-classify?   empty
    |           |     +--rw reverse-route!
    |           |     |  +--rw (remote-peer-static)?
    |           |     |     +--:(remote-peer-case)
    |           |     |     |  +--rw remote-peer-conatiner
    |           |     |     |     +--rw remote-peer?   inet:ip-address
    |           |     |     |     +--rw gateway?       empty
    |           |     |     |     +--rw static?        empty
    |           |     |     +--:(static-case)
    |           |     |        +--rw static?                  empty
    |           |     +--rw set
    |           |        +--rw group?                  string
    |           |        +--rw identity?               string
    |           |        +--rw (isakmp_profile-ikev2_profile)?
    |           |        |  +--:(ikev2-profile-case)
    |           |        |  |  +--rw ikev2-profile?    string
    |           |        |  +--:(isakmp-profile-case)
    |           |        |     +--rw isakmp-profile?   string
    |           |        +--rw peer
    |           |        |  +--rw addresses*   union
    |           |        |  x--rw address?     union
    |           |        |  +--rw default?     empty
    |           |        |  +--rw dynamic?     empty
    |           |        +--rw pfs!
    |           |        |  +--rw group?   enumeration
    |           |        +--rw reverse-route
    |           |        |  +--rw distance?   uint8
    |           |        |  +--rw tag?        uint64
    |           |        |  +--rw gateway?    union
    |           |        +--rw transform-set*          string
    |           |        +--rw security-association
    |           |           +--rw dfbit?                 enumeration
    |           |           +--rw dummy
    |           |           |  +--rw pps?       uint8
    |           |           |  +--rw seconds?   uint16
    |           |           +--rw ecn?                   enumeration
    |           |           +--rw idle-time-container
    |           |           |  +--rw idle-time?   uint32
    |           |           |  +--rw default?     empty
    |           |           +--rw lifetime
    |           |           |  +--rw (days-seconds)?
    |           |           |  |  +--:(days)
    |           |           |  |  |  +--rw days-case?      uint8
    |           |           |  |  +--:(seconds)
    |           |           |  |     +--rw seconds-case?   uint64
    |           |           |  x--rw days?                 uint8
    |           |           |  +--rw kilobytes?            union
    |           |           |  x--rw seconds?              uint64
    |           |           +--rw replay
    |           |           |  +--rw disable?       empty
    |           |           |  +--rw window-size?   enumeration
    |           |           +--rw level?                 enumeration
    |           +--rw map-client
    |           |  +--rw accounting* [name]
    |           |  |  +--rw name          string
    |           |  |  +--rw client        empty
    |           |  |  +--rw accounting    empty
    |           |  |  +--rw list?         string
    |           |  +--rw authentication-list* [name]
    |           |  |  +--rw name              string
    |           |  |  +--rw client            empty
    |           |  |  +--rw authentication    empty
    |           |  |  +--rw list?             string
    |           |  +--rw authentication-password* [name]
    |           |  |  +--rw name              string
    |           |  |  +--rw client            empty
    |           |  |  +--rw authentication    empty
    |           |  |  +--rw password?         string
    |           |  +--rw authentication-username* [name]
    |           |     +--rw name              string
    |           |     +--rw client            empty
    |           |     +--rw authentication    empty
    |           |     +--rw username?         string
    |           +--rw map-gdoi
    |           |  +--rw map* [name]
    |           |     +--rw name          string
    |           |     +--rw gdoi?         empty
    |           |     +--rw fail-close?   empty
    |           |     +--rw activate?     empty
    |           |     +--rw match
    |           |        +--rw address?   ios-types:access-list-standard-id-type
    |           +--rw map-local
    |              +--rw map* [name]
    |                 +--rw name             string
    |                 +--rw local-address
    |                    +--rw (interface-choice)?
    |                       +--:(AppNav-Compress)
    |                       |  +--rw AppNav-Compress?             uint16
    |                       +--:(AppNav-UnCompress)
    |                       |  +--rw AppNav-UnCompress?           uint16
    |                       +--:(ATM)
    |                       |  +--rw ATM?                         string
    |                       +--:(ATM-subinterface)
    |                       |  +--rw ATM-subinterface
    |                       |     +--rw ATM?   string
    |                       +--:(ATM-ACR)
    |                       |  +--rw ATM-ACR?                     string
    |                       +--:(ATM-ACRsubinterface)
    |                       |  +--rw ATM-ACRsubinterface
    |                       |     +--rw ATM-ACR?   string
    |                       +--:(BDI)
    |                       |  +--rw BDI?                         string
    |                       +--:(CEM)
    |                       |  +--rw CEM?                         string
    |                       +--:(CEM-ACR)
    |                       |  +--rw CEM-ACR?                     uint8
    |                       +--:(Embedded-Service-Engine)
    |                       |  +--rw Embedded-Service-Engine?     string
    |                       +--:(Ethernet)
    |                       |  +--rw Ethernet?                    string
    |                       +--:(FastEthernet)
    |                       |  +--rw FastEthernet?                string
    |                       +--:(GigabitEthernet)
    |                       |  +--rw GigabitEthernet?             string
    |                       +--:(FiveGigabitEthernet)
    |                       |  +--rw FiveGigabitEthernet?         string
    |                       +--:(AppGigabitEthernet)
    |                       |  +--rw AppGigabitEthernet?          string
    |                       o--:(TwentyFiveGigabitEthernet)
    |                       |  o--rw TwentyFiveGigabitEthernet?   string
    |                       +--:(TwentyFiveGigE)
    |                       |  +--rw TwentyFiveGigE?              string
    |                       +--:(TwoGigabitEthernet)
    |                       |  +--rw TwoGigabitEthernet?          string
    |                       +--:(FortyGigabitEthernet)
    |                       |  +--rw FortyGigabitEthernet?        string
    |                       +--:(FiftyGigabitEthernet)
    |                       |  +--rw FiftyGigabitEthernet?        string
    |                       +--:(HundredGigE)
    |                       |  +--rw HundredGigE?                 string
    |                       +--:(L2LISP)
    |                       |  +--rw L2LISP?                      string
    |                       +--:(L2LISP-subinterface)
    |                       |  +--rw L2LISP-subinterface
    |                       |     +--rw L2LISP?   string
    |                       +--:(LISP)
    |                       |  +--rw LISP?                        string
    |                       +--:(LISP-subinterface)
    |                       |  +--rw LISP-subinterface
    |                       |     +--rw LISP?   string
    |                       +--:(Loopback)
    |                       |  +--rw Loopback?                    uint32
    |                       +--:(Multilink)
    |                       |  +--rw Multilink?                   uint16
    |                       +--:(nve)
    |                       |  +--rw nve?                         uint16
    |                       +--:(overlay)
    |                       |  +--rw overlay?                     uint16
    |                       +--:(Port-channel)
    |                       |  +--rw Port-channel?                uint32
    |                       +--:(Port-channel-subinterface)
    |                       |  +--rw Port-channel-subinterface
    |                       |     +--rw Port-channel?   string
    |                       +--:(pseudowire)
    |                       |  +--rw pseudowire?                  uint32
    |                       +--:(SM)
    |                       |  +--rw SM?                          string
    |                       +--:(Cellular)
    |                       |  +--rw Cellular?                    string
    |                       +--:(Dialer)
    |                       |  +--rw Dialer?                      string
    |                       +--:(Serial)
    |                       |  +--rw Serial?                      string
    |                       +--:(Async)
    |                       |  +--rw Async?                       string
    |                       +--:(TenGigabitEthernet)
    |                       |  +--rw TenGigabitEthernet?          string
    |                       +--:(Tunnel)
    |                       |  +--rw Tunnel?                      uint32
    |                       +--:(Virtual-Template)
    |                       |  +--rw Virtual-Template?            uint16
    |                       +--:(Vlan)
    |                       |  +--rw Vlan?                        uint16
    |                       +--:(VirtualPortGroup)
    |                       |  +--rw VirtualPortGroup?            uint16
    |                       +--:(vasileft)
    |                       |  +--rw vasileft?                    uint16
    |                       +--:(vasiright)
    |                       |  +--rw vasiright?                   uint16
    |                       +--:(BD-VIF)
    |                       |  +--rw BD-VIF?                      string
    |                       +--:(MFR)
    |                       |  +--rw MFR?                         uint32
    |                       +--:(Serial-subinterface)
    |                       |  +--rw Serial-subinterface
    |                       |     +--rw Serial?   string
    |                       +--:(Bundle)
    |                          +--rw Bundle?                      uint32 {ios-features:cable-config}?
    o--rw crypto-map
    |  o--rw map* [name sequence-number]
    |     o--rw name               string
    |     o--rw sequence-number    uint16
    |     o--rw ipv6?              empty
    |     o--rw keying?            enumeration
    |     o--rw (dynamic-profile)?
    |     |  o--:(dynamic-case)
    |     |  |  o--rw dynamic?     string
    |     |  o--:(profile-case)
    |     |     o--rw profile?     string
    |     o--rw default
    |     |  o--rw description?     empty
    |     |  o--rw dialer
    |     |  |  o--rw pre-classify?   empty
    |     |  o--rw match
    |     |  |  o--rw address?   empty
    |     |  o--rw qos
    |     |  |  o--rw pre-classify?   empty
    |     |  o--rw reverse-route!
    |     |  o--rw set
    |     |     o--rw group?                  empty
    |     |     o--rw identity?               empty
    |     |     o--rw ikev2-profile?          string
    |     |     o--rw isakmp-profile?         empty
    |     |     o--rw pfs!
    |     |     o--rw reverse-route!
    |     |     o--rw security-association
    |     |     |  o--rw dfbit?                 empty
    |     |     |  o--rw dummy!
    |     |     |  o--rw ecn?                   empty
    |     |     |  o--rw idle-time-container
    |     |     |  |  o--rw idle-time?   empty
    |     |     |  |  o--rw default?     empty
    |     |     |  o--rw level?                 enumeration
    |     |     |  o--rw lifetime
    |     |     |  |  o--rw days?        empty
    |     |     |  |  o--rw kilobytes?   empty
    |     |     |  |  o--rw seconds?     empty
    |     |     |  o--rw replay
    |     |     |     o--rw disable?       empty
    |     |     |     o--rw window-size?   empty
    |     |     o--rw transform-set?          empty
    |     o--rw description?       string
    |     o--rw dialer
    |     |  o--rw pre-classify?   empty
    |     o--rw match
    |     |  o--rw address?   ios-types:ext-acl-type
    |     o--rw qos
    |     |  o--rw pre-classify?   empty
    |     o--rw reverse-route!
    |     |  o--rw (remote-peer-static)?
    |     |     o--:(remote-peer-case)
    |     |     |  o--rw remote-peer-conatiner
    |     |     |     o--rw remote-peer?   inet:ip-address
    |     |     |     o--rw gateway?       empty
    |     |     |     o--rw static?        empty
    |     |     o--:(static-case)
    |     |        o--rw static?                  empty
    |     o--rw set
    |        o--rw group?                  string
    |        o--rw identity?               string
    |        o--rw (isakmp_profile-ikev2_profile)?
    |        |  o--:(ikev2-profile-case)
    |        |  |  o--rw ikev2-profile?    string
    |        |  o--:(isakmp-profile-case)
    |        |     o--rw isakmp-profile?   string
    |        o--rw peer
    |        |  o--rw address?   union
    |        |  o--rw default?   empty
    |        |  o--rw dynamic?   empty
    |        o--rw pfs!
    |        |  o--rw group?   enumeration
    |        o--rw reverse-route
    |        |  o--rw distance?   uint8
    |        |  o--rw tag?        uint64
    |        |  o--rw gateway?    union
    |        o--rw transform-set*          string
    |        o--rw security-association
    |           o--rw dfbit?                 enumeration
    |           o--rw dummy
    |           |  o--rw pps?       uint8
    |           |  o--rw seconds?   uint16
    |           o--rw ecn?                   enumeration
    |           o--rw idle-time-container
    |           |  o--rw idle-time?   uint32
    |           |  o--rw default?     empty
    |           o--rw lifetime
    |           |  o--rw days?        uint8
    |           |  o--rw kilobytes?   union
    |           |  o--rw seconds?     uint64
    |           o--rw replay
    |           |  o--rw disable?       empty
    |           |  o--rw window-size?   enumeration
    |           o--rw level?                 enumeration
    o--rw map-ipv6-gdoi
    |  o--rw map* [name]
    |     o--rw name        string
    |     o--rw ipv6?       empty
    |     o--rw gdoi?       enumeration
    |     o--rw default
    |     |  o--rw activate?   empty
    |     |  o--rw match
    |     |     o--rw address?   empty
    |     o--rw activate?   empty
    |     o--rw match
    |        o--rw address?   ios-types:ext-acl-type
    o--rw map-client
    |  o--rw map* [name]
    |     o--rw name              string
    |     o--rw ipv6?             empty
    |     o--rw client
    |     |  o--rw accounting
    |     |  |  o--rw list?   string
    |     |  o--rw authentication
    |     |  |  o--rw list?   string
    |     |  o--rw configuration
    |     |     o--rw address
    |     |        o--rw initiate?   empty
    |     |        o--rw respond?    empty
    |     o--rw isakmp
    |     |  o--rw authorization?   empty
    |     |  o--rw list?            string
    |     o--rw isakmp-profile?   string
    |     o--rw local-address?    string
    |     o--rw redundancy
    |        o--rw replay-interval
    |           o--rw inbound?    uint32
    |           o--rw outbound?   uint32
    +--rw mib
    |  +--rw ipsec
    |     +--rw flowmib
    |        +--rw history
    |           +--rw failure
    |           |  +--rw size?   uint8
    |           +--rw tunnel
    |              +--rw size?   uint8
    +--rw pki
    |  +--rw authenticate?            string
    |  +--rw certificate
    |  |  o--rw chain* [name]
    |  |  |  o--rw name           string
    |  |  |  o--rw default
    |  |  |  |  o--rw certificate* [serial]
    |  |  |  |  |  o--rw serial      string
    |  |  |  |  |  o--rw certtype?   enumeration
    |  |  |  |  o--rw crl
    |  |  |  |     o--rw cdp-hexdata?   string
    |  |  |  o--rw certificate* [serial]
    |  |  |  |  o--rw serial      string
    |  |  |  |  o--rw certtype?   enumeration
    |  |  |  o--rw crl
    |  |  |     o--rw cdp-hexdata?   string
    |  |  +--rw pki-map
    |  |  |  +--rw map* [tag sequence]
    |  |  |     +--rw tag                          string
    |  |  |     +--rw sequence                     uint16
    |  |  |     +--rw alt-subject-name
    |  |  |     |  +--rw co* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  +--rw eq* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  +--rw nc* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  +--rw ne* [name]
    |  |  |     |     +--rw name    string
    |  |  |     +--rw expires-on
    |  |  |     |  +--rw eq
    |  |  |     |  |  +--rw time-string* [datetime]
    |  |  |     |  |     +--rw datetime    string
    |  |  |     |  +--rw ge
    |  |  |     |  |  +--rw time-string* [datetime]
    |  |  |     |  |     +--rw datetime    string
    |  |  |     |  +--rw lt
    |  |  |     |  |  +--rw time-string* [datetime]
    |  |  |     |  |     +--rw datetime    string
    |  |  |     |  +--rw ne
    |  |  |     |     +--rw time-string* [datetime]
    |  |  |     |        +--rw datetime    string
    |  |  |     +--rw issuer-name
    |  |  |     |  +--rw co* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  +--rw eq* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  +--rw nc* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  +--rw ne* [name]
    |  |  |     |     +--rw name    string
    |  |  |     +--rw name
    |  |  |     |  +--rw co* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  +--rw eq* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  +--rw nc* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  +--rw ne* [name]
    |  |  |     |     +--rw name    string
    |  |  |     +--rw serial-number
    |  |  |     |  +--rw co* [hex-data]
    |  |  |     |  |  +--rw hex-data    string
    |  |  |     |  +--rw eq* [hex-data]
    |  |  |     |  |  +--rw hex-data    string
    |  |  |     |  +--rw nc* [hex-data]
    |  |  |     |  |  +--rw hex-data    string
    |  |  |     |  +--rw ne* [hex-data]
    |  |  |     |     +--rw hex-data    string
    |  |  |     +--rw subject-name
    |  |  |     |  +--rw co* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  +--rw eq* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  +--rw nc* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  +--rw ne* [name]
    |  |  |     |     +--rw name    string
    |  |  |     +--rw unstructured-subject-name
    |  |  |     |  +--rw co* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  +--rw eq* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  +--rw nc* [name]
    |  |  |     |  |  +--rw name    string
    |  |  |     |  +--rw ne* [name]
    |  |  |     |     +--rw name    string
    |  |  |     +--rw valid-start
    |  |  |        +--rw eq
    |  |  |        |  +--rw time-string* [datetime]
    |  |  |        |     +--rw datetime    string
    |  |  |        +--rw ge
    |  |  |        |  +--rw time-string* [datetime]
    |  |  |        |     +--rw datetime    string
    |  |  |        +--rw lt
    |  |  |        |  +--rw time-string* [datetime]
    |  |  |        |     +--rw datetime    string
    |  |  |        +--rw ne
    |  |  |           +--rw time-string* [datetime]
    |  |  |              +--rw datetime    string
    |  |  x--rw map* [tag]
    |  |  |  x--rw tag                          string
    |  |  |  x--rw sequence?                    uint16
    |  |  |  o--rw default
    |  |  |  |  o--rw alt-subject-name
    |  |  |  |  |  o--rw co?   string
    |  |  |  |  |  o--rw eq?   string
    |  |  |  |  |  o--rw nc?   string
    |  |  |  |  |  o--rw ne?   string
    |  |  |  |  o--rw expires-on
    |  |  |  |  |  o--rw eq
    |  |  |  |  |  |  o--rw time
    |  |  |  |  |  |     o--rw (date-month)?
    |  |  |  |  |  |     |  o--:(date1)
    |  |  |  |  |  |     |  |  o--rw date1?    uint8
    |  |  |  |  |  |     |  o--:(month1)
    |  |  |  |  |  |     |     o--rw month1?   string
    |  |  |  |  |  |     o--rw (month-date)?
    |  |  |  |  |  |     |  o--:(date2)
    |  |  |  |  |  |     |  |  o--rw date2?    uint8
    |  |  |  |  |  |     |  o--:(month2)
    |  |  |  |  |  |     |     o--rw month2?   string
    |  |  |  |  |  |     o--rw year?           uint16
    |  |  |  |  |  |     o--rw clock?          string
    |  |  |  |  |  |     o--rw utc?            empty
    |  |  |  |  |  o--rw ge
    |  |  |  |  |  |  o--rw time
    |  |  |  |  |  |     o--rw (date-month)?
    |  |  |  |  |  |     |  o--:(date1)
    |  |  |  |  |  |     |  |  o--rw date1?    uint8
    |  |  |  |  |  |     |  o--:(month1)
    |  |  |  |  |  |     |     o--rw month1?   string
    |  |  |  |  |  |     o--rw (month-date)?
    |  |  |  |  |  |     |  o--:(date2)
    |  |  |  |  |  |     |  |  o--rw date2?    uint8
    |  |  |  |  |  |     |  o--:(month2)
    |  |  |  |  |  |     |     o--rw month2?   string
    |  |  |  |  |  |     o--rw year?           uint16
    |  |  |  |  |  |     o--rw clock?          string
    |  |  |  |  |  |     o--rw utc?            empty
    |  |  |  |  |  o--rw lt
    |  |  |  |  |  |  o--rw time
    |  |  |  |  |  |     o--rw (date-month)?
    |  |  |  |  |  |     |  o--:(date1)
    |  |  |  |  |  |     |  |  o--rw date1?    uint8
    |  |  |  |  |  |     |  o--:(month1)
    |  |  |  |  |  |     |     o--rw month1?   string
    |  |  |  |  |  |     o--rw (month-date)?
    |  |  |  |  |  |     |  o--:(date2)
    |  |  |  |  |  |     |  |  o--rw date2?    uint8
    |  |  |  |  |  |     |  o--:(month2)
    |  |  |  |  |  |     |     o--rw month2?   string
    |  |  |  |  |  |     o--rw year?           uint16
    |  |  |  |  |  |     o--rw clock?          string
    |  |  |  |  |  |     o--rw utc?            empty
    |  |  |  |  |  o--rw ne
    |  |  |  |  |     o--rw time
    |  |  |  |  |        o--rw (date-month)?
    |  |  |  |  |        |  o--:(date1)
    |  |  |  |  |        |  |  o--rw date1?    uint8
    |  |  |  |  |        |  o--:(month1)
    |  |  |  |  |        |     o--rw month1?   string
    |  |  |  |  |        o--rw (month-date)?
    |  |  |  |  |        |  o--:(date2)
    |  |  |  |  |        |  |  o--rw date2?    uint8
    |  |  |  |  |        |  o--:(month2)
    |  |  |  |  |        |     o--rw month2?   string
    |  |  |  |  |        o--rw year?           uint16
    |  |  |  |  |        o--rw clock?          string
    |  |  |  |  |        o--rw utc?            empty
    |  |  |  |  o--rw issuer-name
    |  |  |  |  |  o--rw co?   string
    |  |  |  |  |  o--rw eq?   string
    |  |  |  |  |  o--rw nc?   string
    |  |  |  |  |  o--rw ne?   string
    |  |  |  |  o--rw name
    |  |  |  |  |  o--rw co?   string
    |  |  |  |  |  o--rw eq?   string
    |  |  |  |  |  o--rw nc?   string
    |  |  |  |  |  o--rw ne?   string
    |  |  |  |  o--rw serial-number
    |  |  |  |  |  o--rw co?   string
    |  |  |  |  |  o--rw eq?   string
    |  |  |  |  |  o--rw nc?   string
    |  |  |  |  |  o--rw ne?   string
    |  |  |  |  o--rw subject-name
    |  |  |  |  |  o--rw co?   string
    |  |  |  |  |  o--rw eq?   string
    |  |  |  |  |  o--rw nc?   string
    |  |  |  |  |  o--rw ne?   string
    |  |  |  |  o--rw unstructured-subject-name
    |  |  |  |  |  o--rw co?   string
    |  |  |  |  |  o--rw eq?   string
    |  |  |  |  |  o--rw nc?   string
    |  |  |  |  |  o--rw ne?   string
    |  |  |  |  o--rw valid-start
    |  |  |  |     o--rw eq
    |  |  |  |     |  o--rw time
    |  |  |  |     |     o--rw (date-month)?
    |  |  |  |     |     |  o--:(date1)
    |  |  |  |     |     |  |  o--rw date1?    uint8
    |  |  |  |     |     |  o--:(month1)
    |  |  |  |     |     |     o--rw month1?   string
    |  |  |  |     |     o--rw (month-date)?
    |  |  |  |     |     |  o--:(date2)
    |  |  |  |     |     |  |  o--rw date2?    uint8
    |  |  |  |     |     |  o--:(month2)
    |  |  |  |     |     |     o--rw month2?   string
    |  |  |  |     |     o--rw year?           uint16
    |  |  |  |     |     o--rw clock?          string
    |  |  |  |     |     o--rw utc?            empty
    |  |  |  |     o--rw ge
    |  |  |  |     |  o--rw time
    |  |  |  |     |     o--rw (date-month)?
    |  |  |  |     |     |  o--:(date1)
    |  |  |  |     |     |  |  o--rw date1?    uint8
    |  |  |  |     |     |  o--:(month1)
    |  |  |  |     |     |     o--rw month1?   string
    |  |  |  |     |     o--rw (month-date)?
    |  |  |  |     |     |  o--:(date2)
    |  |  |  |     |     |  |  o--rw date2?    uint8
    |  |  |  |     |     |  o--:(month2)
    |  |  |  |     |     |     o--rw month2?   string
    |  |  |  |     |     o--rw year?           uint16
    |  |  |  |     |     o--rw clock?          string
    |  |  |  |     |     o--rw utc?            empty
    |  |  |  |     o--rw lt
    |  |  |  |     |  o--rw time
    |  |  |  |     |     o--rw (date-month)?
    |  |  |  |     |     |  o--:(date1)
    |  |  |  |     |     |  |  o--rw date1?    uint8
    |  |  |  |     |     |  o--:(month1)
    |  |  |  |     |     |     o--rw month1?   string
    |  |  |  |     |     o--rw (month-date)?
    |  |  |  |     |     |  o--:(date2)
    |  |  |  |     |     |  |  o--rw date2?    uint8
    |  |  |  |     |     |  o--:(month2)
    |  |  |  |     |     |     o--rw month2?   string
    |  |  |  |     |     o--rw year?           uint16
    |  |  |  |     |     o--rw clock?          string
    |  |  |  |     |     o--rw utc?            empty
    |  |  |  |     o--rw ne
    |  |  |  |        o--rw time
    |  |  |  |           o--rw (date-month)?
    |  |  |  |           |  o--:(date1)
    |  |  |  |           |  |  o--rw date1?    uint8
    |  |  |  |           |  o--:(month1)
    |  |  |  |           |     o--rw month1?   string
    |  |  |  |           o--rw (month-date)?
    |  |  |  |           |  o--:(date2)
    |  |  |  |           |  |  o--rw date2?    uint8
    |  |  |  |           |  o--:(month2)
    |  |  |  |           |     o--rw month2?   string
    |  |  |  |           o--rw year?           uint16
    |  |  |  |           o--rw clock?          string
    |  |  |  |           o--rw utc?            empty
    |  |  |  x--rw alt-subject-name
    |  |  |  |  x--rw co?   string
    |  |  |  |  x--rw eq?   string
    |  |  |  |  x--rw nc?   string
    |  |  |  |  x--rw ne?   string
    |  |  |  o--rw expires-on
    |  |  |  |  o--rw eq
    |  |  |  |  |  o--rw time
    |  |  |  |  |     o--rw (date-month)?
    |  |  |  |  |     |  o--:(date1)
    |  |  |  |  |     |  |  o--rw date1?    uint8
    |  |  |  |  |     |  o--:(month1)
    |  |  |  |  |     |     o--rw month1?   string
    |  |  |  |  |     o--rw (month-date)?
    |  |  |  |  |     |  o--:(date2)
    |  |  |  |  |     |  |  o--rw date2?    uint8
    |  |  |  |  |     |  o--:(month2)
    |  |  |  |  |     |     o--rw month2?   string
    |  |  |  |  |     o--rw year?           uint16
    |  |  |  |  |     o--rw clock?          string
    |  |  |  |  |     o--rw utc?            empty
    |  |  |  |  o--rw ge
    |  |  |  |  |  o--rw time
    |  |  |  |  |     o--rw (date-month)?
    |  |  |  |  |     |  o--:(date1)
    |  |  |  |  |     |  |  o--rw date1?    uint8
    |  |  |  |  |     |  o--:(month1)
    |  |  |  |  |     |     o--rw month1?   string
    |  |  |  |  |     o--rw (month-date)?
    |  |  |  |  |     |  o--:(date2)
    |  |  |  |  |     |  |  o--rw date2?    uint8
    |  |  |  |  |     |  o--:(month2)
    |  |  |  |  |     |     o--rw month2?   string
    |  |  |  |  |     o--rw year?           uint16
    |  |  |  |  |     o--rw clock?          string
    |  |  |  |  |     o--rw utc?            empty
    |  |  |  |  o--rw lt
    |  |  |  |  |  o--rw time
    |  |  |  |  |     o--rw (date-month)?
    |  |  |  |  |     |  o--:(date1)
    |  |  |  |  |     |  |  o--rw date1?    uint8
    |  |  |  |  |     |  o--:(month1)
    |  |  |  |  |     |     o--rw month1?   string
    |  |  |  |  |     o--rw (month-date)?
    |  |  |  |  |     |  o--:(date2)
    |  |  |  |  |     |  |  o--rw date2?    uint8
    |  |  |  |  |     |  o--:(month2)
    |  |  |  |  |     |     o--rw month2?   string
    |  |  |  |  |     o--rw year?           uint16
    |  |  |  |  |     o--rw clock?          string
    |  |  |  |  |     o--rw utc?            empty
    |  |  |  |  o--rw ne
    |  |  |  |     o--rw time
    |  |  |  |        o--rw (date-month)?
    |  |  |  |        |  o--:(date1)
    |  |  |  |        |  |  o--rw date1?    uint8
    |  |  |  |        |  o--:(month1)
    |  |  |  |        |     o--rw month1?   string
    |  |  |  |        o--rw (month-date)?
    |  |  |  |        |  o--:(date2)
    |  |  |  |        |  |  o--rw date2?    uint8
    |  |  |  |        |  o--:(month2)
    |  |  |  |        |     o--rw month2?   string
    |  |  |  |        o--rw year?           uint16
    |  |  |  |        o--rw clock?          string
    |  |  |  |        o--rw utc?            empty
    |  |  |  x--rw issuer-name
    |  |  |  |  x--rw co?   string
    |  |  |  |  x--rw eq?   string
    |  |  |  |  x--rw nc?   string
    |  |  |  |  x--rw ne?   string
    |  |  |  x--rw name
    |  |  |  |  x--rw co?   string
    |  |  |  |  x--rw eq?   string
    |  |  |  |  x--rw nc?   string
    |  |  |  |  x--rw ne?   string
    |  |  |  x--rw serial-number
    |  |  |  |  x--rw co?   string
    |  |  |  |  x--rw eq?   string
    |  |  |  |  x--rw nc?   string
    |  |  |  |  x--rw ne?   string
    |  |  |  x--rw subject-name
    |  |  |  |  x--rw co?   string
    |  |  |  |  x--rw eq?   string
    |  |  |  |  x--rw nc?   string
    |  |  |  |  x--rw ne?   string
    |  |  |  x--rw unstructured-subject-name
    |  |  |  |  x--rw co?   string
    |  |  |  |  x--rw eq?   string
    |  |  |  |  x--rw nc?   string
    |  |  |  |  x--rw ne?   string
    |  |  |  o--rw valid-start
    |  |  |     o--rw eq
    |  |  |     |  o--rw time
    |  |  |     |     o--rw (date-month)?
    |  |  |     |     |  o--:(date1)
    |  |  |     |     |  |  o--rw date1?    uint8
    |  |  |     |     |  o--:(month1)
    |  |  |     |     |     o--rw month1?   string
    |  |  |     |     o--rw (month-date)?
    |  |  |     |     |  o--:(date2)
    |  |  |     |     |  |  o--rw date2?    uint8
    |  |  |     |     |  o--:(month2)
    |  |  |     |     |     o--rw month2?   string
    |  |  |     |     o--rw year?           uint16
    |  |  |     |     o--rw clock?          string
    |  |  |     |     o--rw utc?            empty
    |  |  |     o--rw ge
    |  |  |     |  o--rw time
    |  |  |     |     o--rw (date-month)?
    |  |  |     |     |  o--:(date1)
    |  |  |     |     |  |  o--rw date1?    uint8
    |  |  |     |     |  o--:(month1)
    |  |  |     |     |     o--rw month1?   string
    |  |  |     |     o--rw (month-date)?
    |  |  |     |     |  o--:(date2)
    |  |  |     |     |  |  o--rw date2?    uint8
    |  |  |     |     |  o--:(month2)
    |  |  |     |     |     o--rw month2?   string
    |  |  |     |     o--rw year?           uint16
    |  |  |     |     o--rw clock?          string
    |  |  |     |     o--rw utc?            empty
    |  |  |     o--rw lt
    |  |  |     |  o--rw time
    |  |  |     |     o--rw (date-month)?
    |  |  |     |     |  o--:(date1)
    |  |  |     |     |  |  o--rw date1?    uint8
    |  |  |     |     |  o--:(month1)
    |  |  |     |     |     o--rw month1?   string
    |  |  |     |     o--rw (month-date)?
    |  |  |     |     |  o--:(date2)
    |  |  |     |     |  |  o--rw date2?    uint8
    |  |  |     |     |  o--:(month2)
    |  |  |     |     |     o--rw month2?   string
    |  |  |     |     o--rw year?           uint16
    |  |  |     |     o--rw clock?          string
    |  |  |     |     o--rw utc?            empty
    |  |  |     o--rw ne
    |  |  |        o--rw time
    |  |  |           o--rw (date-month)?
    |  |  |           |  o--:(date1)
    |  |  |           |  |  o--rw date1?    uint8
    |  |  |           |  o--:(month1)
    |  |  |           |     o--rw month1?   string
    |  |  |           o--rw (month-date)?
    |  |  |           |  o--:(date2)
    |  |  |           |  |  o--rw date2?    uint8
    |  |  |           |  o--:(month2)
    |  |  |           |     o--rw month2?   string
    |  |  |           o--rw year?           uint16
    |  |  |           o--rw clock?          string
    |  |  |           o--rw utc?            empty
    |  |  +--rw pool!
    |  |  |  +--rw cabundle?   string
    |  |  +--rw query?         empty
    |  |  +--rw self-signed
    |  |  |  +--rw hash?   enumeration
    |  |  +--rw storage
    |  |  |  +--rw with-keypair?   empty
    |  |  |  +--rw on?             empty
    |  |  |  +--rw path?           union
    |  |  +--rw validate?      string
    |  +--rw crl
    |  |  +--rw cache
    |  |  |  +--rw size?   uint32
    |  |  +--rw download
    |  |  |  +--rw schedule
    |  |  |  |  +--rw prepublish?   uint16
    |  |  |  |  +--rw retries
    |  |  |  |  |  +--rw number?     uint8
    |  |  |  |  |  +--rw interval?   uint16
    |  |  |  |  +--rw time
    |  |  |  |     +--rw date?    enumeration
    |  |  |  |     +--rw clock?   string
    |  |  |  +--rw trustpoint?   string
    |  |  |  +--rw url
    |  |  |     +--rw name?               string
    |  |  |     +--rw source-interface?   string
    |  |  |     +--rw vrf?                string
    |  |  +--rw request?    string
    |  +--rw enroll?                  string
    |  +--rw export* [name]
    |  |  +--rw name      string
    |  |  +--rw pem
    |  |  |  +--rw terminal!
    |  |  |  |  +--rw pem-3des
    |  |  |  |  |  +--rw password?   string
    |  |  |  |  +--rw des
    |  |  |  |  |  +--rw password?   string
    |  |  |  |  +--rw rollover?   empty
    |  |  |  +--rw url
    |  |  |     +--rw file?       string
    |  |  |     +--rw encrypt?    enumeration
    |  |  |     +--rw password?   string
    |  |  +--rw pkcs12
    |  |     +--rw file?       string
    |  |     +--rw password?   string
    |  +--rw import* [name]
    |  |  +--rw name           string
    |  |  +--rw certificate?   empty
    |  |  +--rw pem
    |  |  |  +--rw check?        empty
    |  |  |  +--rw exportable?   empty
    |  |  |  +--rw terminal
    |  |  |  |  +--rw password?   string
    |  |  |  +--rw url
    |  |  |  |  +--rw file?       string
    |  |  |  |  +--rw password?   string
    |  |  |  +--rw usage-keys?   empty
    |  |  +--rw pkcs12
    |  |     +--rw check?      empty
    |  |     +--rw file?       string
    |  |     +--rw password?   string
    |  +--rw profile
    |  |  +--rw enrollment* [tag]
    |  |     +--rw tag                 string
    |  |     +--rw authentication
    |  |     |  +--rw command?    string
    |  |     |  +--rw terminal?   empty
    |  |     |  +--rw url
    |  |     |     +--rw name?   string
    |  |     |     +--rw vrf?    string
    |  |     +--rw enrollment
    |  |     |  +--rw command?      string
    |  |     |  +--rw terminal?     empty
    |  |     |  +--rw url
    |  |     |  |  +--rw name?   string
    |  |     |  |  +--rw vrf?    string
    |  |     |  +--rw credential?   string
    |  |     |  +--rw http
    |  |     |     +--rw username?   string
    |  |     |     +--rw password
    |  |     |        +--rw encryption?   enumeration
    |  |     |        +--rw key?          string
    |  |     +--rw method-est?         empty
    |  |     +--rw parameter* [number]
    |  |     |  +--rw number          uint8
    |  |     |  +--rw (prompt-value)?
    |  |     |     +--:(prompt-case)
    |  |     |     |  +--rw prompt?   string
    |  |     |     +--:(value-case)
    |  |     |        +--rw value?    string
    |  |     +--rw reenrollment
    |  |     |  +--rw command?    string
    |  |     |  +--rw terminal?   empty
    |  |     |  +--rw url
    |  |     |     +--rw name?   string
    |  |     |     +--rw vrf?    string
    |  |     +--rw source-interface?   string
    |  |     o--rw default
    |  |        o--rw authentication
    |  |        |  o--rw command?    string
    |  |        |  o--rw terminal?   empty
    |  |        |  o--rw url
    |  |        |     o--rw name?   string
    |  |        |     o--rw vrf?    string
    |  |        o--rw enrollment
    |  |        |  o--rw command?      string
    |  |        |  o--rw terminal?     empty
    |  |        |  o--rw url
    |  |        |  |  o--rw name?   string
    |  |        |  |  o--rw vrf?    string
    |  |        |  +--rw credential?   string
    |  |        o--rw method-est?         empty
    |  |        o--rw parameter* [number]
    |  |        |  o--rw number          uint8
    |  |        |  o--rw (prompt-value)?
    |  |        |     o--:(prompt-case)
    |  |        |     |  o--rw prompt?   string
    |  |        |     o--:(value-case)
    |  |        |        o--rw value?    string
    |  |        o--rw reenrollment
    |  |        |  o--rw command?    string
    |  |        |  o--rw terminal?   empty
    |  |        |  o--rw url
    |  |        |     o--rw name?   string
    |  |        |     o--rw vrf?    string
    |  |        o--rw source-interface?   string
    |  +--rw server* [name]
    |  |  +--rw name               string
    |  |  o--rw default
    |  |  |  o--rw auto-rollover
    |  |  |  |  o--rw days?      uint16
    |  |  |  |  o--rw hours?     uint8
    |  |  |  |  o--rw minutes?   uint8
    |  |  |  o--rw cdp-url?           string
    |  |  |  o--rw database
    |  |  |  |  o--rw level?      enumeration
    |  |  |  |  o--rw username
    |  |  |  |  |  o--rw username-value?   string
    |  |  |  |  |  o--rw password-ext
    |  |  |  |  |     o--rw password
    |  |  |  |  |        o--rw encryption-type?   uint8
    |  |  |  |  |        o--rw passphrase?        string
    |  |  |  |  o--rw url
    |  |  |  |  |  o--rw url-only?                  string
    |  |  |  |  |  o--rw file-type?                 enumeration
    |  |  |  |  |  o--rw publish?                   empty
    |  |  |  |  |  o--rw (url-combination)?
    |  |  |  |  |     o--:(location-alone)
    |  |  |  |  |     |  o--rw location?            string
    |  |  |  |  |     o--:(url-with-username)
    |  |  |  |  |        o--rw url-with-username
    |  |  |  |  |           o--rw location?   string
    |  |  |  |  |           o--rw username
    |  |  |  |  |              o--rw username-value?   string
    |  |  |  |  |              o--rw password-ext
    |  |  |  |  |                 o--rw password
    |  |  |  |  |                    o--rw encryption-type?   uint8
    |  |  |  |  |                    o--rw passphrase?        string
    |  |  |  |  o--rw archive
    |  |  |  |     +--rw (format)?
    |  |  |  |        o--:(pem)
    |  |  |  |        |  o--rw pem!
    |  |  |  |        |     o--rw password
    |  |  |  |        |        o--rw encryption-type?   uint8
    |  |  |  |        |        o--rw passphrase?        string
    |  |  |  |        o--:(pkcs12)
    |  |  |  |           o--rw pkcs12!
    |  |  |  |              o--rw password
    |  |  |  |                 o--rw encryption-type?   uint8
    |  |  |  |                 o--rw passphrase?        string
    |  |  |  o--rw serial-number?     string
    |  |  |  o--rw revoke?            string
    |  |  |  o--rw mode
    |  |  |  |  o--rw (ra-or-subcs)?
    |  |  |  |     o--:(ra)
    |  |  |  |     |  o--rw ra?            empty
    |  |  |  |     |  o--rw transparent?   empty
    |  |  |  |     o--:(subca)
    |  |  |  |        o--rw sub-cs?        empty
    |  |  |  o--rw lifetime
    |  |  |  |  o--rw certificate?   enumeration
    |  |  |  |  o--rw days?          uint16
    |  |  |  |  o--rw hours?         uint8
    |  |  |  |  o--rw minutes?       uint16
    |  |  |  o--rw hash?              enumeration
    |  |  |  o--rw eku
    |  |  |  |  o--rw client-auth?        empty
    |  |  |  |  o--rw code-signing?       empty
    |  |  |  |  o--rw email-protection?   empty
    |  |  |  |  o--rw ipsec-end-system?   empty
    |  |  |  |  o--rw ipsec-tunnel?       empty
    |  |  |  |  o--rw ipsec-user?         empty
    |  |  |  |  o--rw ocsp-signing?       empty
    |  |  |  |  o--rw server-auth?        empty
    |  |  |  |  o--rw ssh-client?         empty
    |  |  |  |  o--rw ssh-server?         empty
    |  |  |  |  o--rw time-stamping?      empty
    |  |  |  o--rw issuer-name?       string
    |  |  |  o--rw grant
    |  |  |  |  o--rw type?   enumeration
    |  |  |  |  o--rw auto
    |  |  |  |     o--rw auto-alone?   empty
    |  |  |  |     o--rw trustpoint?   string
    |  |  |  |     o--rw tp-list?      string
    |  |  |  |     o--rw rollover?     enumeration
    |  |  |  o--rw shutdown-config?   boolean
    |  |  |  o--rw shutdown?          empty
    |  |  +--rw auto-rollover
    |  |  |  +--rw days?      uint16
    |  |  |  +--rw hours?     uint8
    |  |  |  +--rw minutes?   uint8
    |  |  +--rw cdp-url?           string
    |  |  +--rw database
    |  |  |  +--rw level?      enumeration
    |  |  |  +--rw username
    |  |  |  |  +--rw username-value?   string
    |  |  |  |  +--rw password-ext
    |  |  |  |     +--rw password
    |  |  |  |        +--rw encryption-type?   uint8
    |  |  |  |        +--rw passphrase?        string
    |  |  |  +--rw url
    |  |  |  |  +--rw url-only?                  string
    |  |  |  |  +--rw file-type?                 enumeration
    |  |  |  |  +--rw publish?                   empty
    |  |  |  |  +--rw (url-combination)?
    |  |  |  |     +--:(location-alone)
    |  |  |  |     |  +--rw location?            string
    |  |  |  |     +--:(url-with-username)
    |  |  |  |        +--rw url-with-username
    |  |  |  |           +--rw location?   string
    |  |  |  |           +--rw username
    |  |  |  |              +--rw username-value?   string
    |  |  |  |              +--rw password-ext
    |  |  |  |                 +--rw password
    |  |  |  |                    +--rw encryption-type?   uint8
    |  |  |  |                    +--rw passphrase?        string
    |  |  |  +--rw archive
    |  |  |     +--rw (format)?
    |  |  |        +--:(pem)
    |  |  |        |  +--rw pem!
    |  |  |        |     +--rw password
    |  |  |        |        +--rw encryption-type?   uint8
    |  |  |        |        +--rw passphrase?        string
    |  |  |        +--:(pkcs12)
    |  |  |           +--rw pkcs12!
    |  |  |              +--rw password
    |  |  |                 +--rw encryption-type?   uint8
    |  |  |                 +--rw passphrase?        string
    |  |  +--rw serial-number?     string
    |  |  +--rw revoke?            string
    |  |  +--rw mode
    |  |  |  +--rw (ra-or-subcs)?
    |  |  |     +--:(ra)
    |  |  |     |  +--rw ra?            empty
    |  |  |     |  +--rw transparent?   empty
    |  |  |     +--:(subca)
    |  |  |        +--rw sub-cs?        empty
    |  |  +--rw lifetime
    |  |  |  +--rw certificate?   enumeration
    |  |  |  +--rw days?          uint16
    |  |  |  +--rw hours?         uint8
    |  |  |  +--rw minutes?       uint16
    |  |  +--rw hash?              enumeration
    |  |  +--rw eku
    |  |  |  +--rw client-auth?        empty
    |  |  |  +--rw code-signing?       empty
    |  |  |  +--rw email-protection?   empty
    |  |  |  +--rw ipsec-end-system?   empty
    |  |  |  +--rw ipsec-tunnel?       empty
    |  |  |  +--rw ipsec-user?         empty
    |  |  |  +--rw ocsp-signing?       empty
    |  |  |  +--rw server-auth?        empty
    |  |  |  +--rw ssh-client?         empty
    |  |  |  +--rw ssh-server?         empty
    |  |  |  +--rw time-stamping?      empty
    |  |  +--rw issuer-name?       string
    |  |  +--rw grant
    |  |  |  +--rw type?   enumeration
    |  |  |  +--rw auto
    |  |  |     +--rw auto-alone?   empty
    |  |  |     +--rw trustpoint?   string
    |  |  |     +--rw tp-list?      string
    |  |  |     +--rw rollover?     enumeration
    |  |  +--rw shutdown-config?   boolean
    |  |  o--rw shutdown?          empty
    |  +--rw pki-server-no-submode
    |  |  +--rw server
    |  |     +--rw name?       string
    |  |     +--rw rollover?   empty
    |  |     +--rw cancel?     empty
    |  +--rw trustpoint* [id]
    |  |  +--rw id                  string
    |  |  o--rw default
    |  |  |  o--rw authorization
    |  |  |  |  o--rw list?       string
    |  |  |  |  o--rw password?   string
    |  |  |  |  o--rw username
    |  |  |  |     o--rw alt-subjectname
    |  |  |  |     |  o--rw userprinciplename?        empty
    |  |  |  |     |  o--rw userprinciplename-conf
    |  |  |  |     |     o--rw userprinciplename
    |  |  |  |     |        o--rw secondary?   empty
    |  |  |  |     o--rw subjectname
    |  |  |  |        o--rw all?                       empty
    |  |  |  |        o--rw all-conf
    |  |  |  |        |  o--rw all
    |  |  |  |        |     o--rw secondary?   empty
    |  |  |  |        o--rw commonname?                empty
    |  |  |  |        o--rw commonname-conf
    |  |  |  |        |  o--rw commonname
    |  |  |  |        |     o--rw secondary?   empty
    |  |  |  |        o--rw country?                   empty
    |  |  |  |        o--rw country-conf
    |  |  |  |        |  o--rw country
    |  |  |  |        |     o--rw secondary?   empty
    |  |  |  |        o--rw email?                     empty
    |  |  |  |        o--rw email-conf
    |  |  |  |        |  o--rw email
    |  |  |  |        |     o--rw secondary?   empty
    |  |  |  |        o--rw ipaddress?                 empty
    |  |  |  |        o--rw ipaddress-conf
    |  |  |  |        |  o--rw ipaddress
    |  |  |  |        |     o--rw secondary?   empty
    |  |  |  |        o--rw locality?                  empty
    |  |  |  |        o--rw locality-conf
    |  |  |  |        |  o--rw locality
    |  |  |  |        |     o--rw secondary?   empty
    |  |  |  |        o--rw organization?              empty
    |  |  |  |        o--rw organization-conf
    |  |  |  |        |  +--rw organization
    |  |  |  |        |     o--rw secondary?   empty
    |  |  |  |        o--rw organizationalunit?        empty
    |  |  |  |        o--rw organizationalunit-conf
    |  |  |  |        |  o--rw organizationalunit
    |  |  |  |        |     o--rw secondary?   empty
    |  |  |  |        o--rw postalcode?                empty
    |  |  |  |        o--rw postalcode-conf
    |  |  |  |        |  o--rw postalcode
    |  |  |  |        |     o--rw secondary?   empty
    |  |  |  |        o--rw serialnumber?              empty
    |  |  |  |        o--rw serialnumber-conf
    |  |  |  |        |  o--rw serialnumber
    |  |  |  |        |     o--rw secondary?   empty
    |  |  |  |        o--rw state?                     empty
    |  |  |  |        o--rw state-conf
    |  |  |  |        |  o--rw state
    |  |  |  |        |     o--rw secondary?   empty
    |  |  |  |        o--rw streetaddress?             empty
    |  |  |  |        o--rw streetaddress-conf
    |  |  |  |        |  o--rw streetaddress
    |  |  |  |        |     o--rw secondary?   empty
    |  |  |  |        o--rw title?                     empty
    |  |  |  |        o--rw title-conf
    |  |  |  |        |  o--rw title
    |  |  |  |        |     o--rw secondary?   empty
    |  |  |  |        o--rw unstructuredname?          empty
    |  |  |  |        o--rw unstructuredname-conf
    |  |  |  |           o--rw unstructuredname
    |  |  |  |              o--rw secondary?   empty
    |  |  |  o--rw certificate
    |  |  |  |  o--rw chain?   string
    |  |  |  o--rw chain-validation
    |  |  |  |  o--rw stop?       empty
    |  |  |  |  o--rw continue?   string
    |  |  |  o--rw crl
    |  |  |  |  o--rw query?   string
    |  |  |  |  o--rw cache
    |  |  |  |     o--rw (cache-choice)?
    |  |  |  |        o--:(none)
    |  |  |  |        |  o--rw none?           empty
    |  |  |  |        o--:(extend)
    |  |  |  |        |  o--rw extend?         uint16
    |  |  |  |        o--:(delete-after)
    |  |  |  |           o--rw delete-after?   uint16
    |  |  |  o--rw exit?               empty
    |  |  |  o--rw auto-enroll
    |  |  |  |  o--rw percent?      ios-types:percentage
    |  |  |  |  o--rw regenerate?   empty
    |  |  |  o--rw eckeypair?          string
    |  |  |  o--rw eku
    |  |  |  |  o--rw request
    |  |  |  |     o--rw client-auth?        empty
    |  |  |  |     o--rw code-signing?       empty
    |  |  |  |     o--rw email-protection?   empty
    |  |  |  |     o--rw ipsec-end-system?   empty
    |  |  |  |     o--rw ipsec-tunnel?       empty
    |  |  |  |     o--rw ipsec-user?         empty
    |  |  |  |     o--rw ocsp-signing?       empty
    |  |  |  |     o--rw server-auth?        empty
    |  |  |  |     o--rw ssh-client?         empty
    |  |  |  |     o--rw ssh-server?         empty
    |  |  |  |     o--rw time-stamping?      empty
    |  |  |  o--rw enrollment
    |  |  |  |  o--rw http-proxy
    |  |  |  |  |  o--rw hostname?   string
    |  |  |  |  |  o--rw port?       uint16
    |  |  |  |  o--rw mode
    |  |  |  |  |  o--rw ra?   empty
    |  |  |  |  o--rw enrollment-method
    |  |  |  |  |  o--rw (method)?
    |  |  |  |  |     o--:(pkcs12-case)
    |  |  |  |  |     |  o--rw pkcs12?       empty
    |  |  |  |  |     o--:(profile-case)
    |  |  |  |  |     |  o--rw profile?      -> /ios:native/crypto/ios-crypto:pki/profile/enrollment/tag
    |  |  |  |  |     o--:(selfsigned-case)
    |  |  |  |  |     |  o--rw selfsigned?   empty
    |  |  |  |  |     o--:(terminal-case)
    |  |  |  |  |     |  o--rw terminal!
    |  |  |  |  |     |     o--rw pem?   empty
    |  |  |  |  |     o--:(url-case)
    |  |  |  |  |        o--rw url?          string
    |  |  |  |  o--rw pkcs12?              empty
    |  |  |  |  o--rw profile?             -> /ios:native/crypto/ios-crypto:pki/profile/enrollment/tag
    |  |  |  |  o--rw retry
    |  |  |  |  |  o--rw count?    uint8
    |  |  |  |  |  o--rw period?   uint8
    |  |  |  |  o--rw selfsigned?          empty
    |  |  |  |  o--rw terminal!
    |  |  |  |  |  o--rw pem?   empty
    |  |  |  |  o--rw url?                 string
    |  |  |  o--rw fqdn?               string
    |  |  |  o--rw password!
    |  |  |  |  o--rw encryption-type?   uint8
    |  |  |  |  o--rw clear-password?    string
    |  |  |  o--rw fingerprint?        string
    |  |  |  o--rw hash?               enumeration
    |  |  |  o--rw http-proxy
    |  |  |  |  o--rw hostname?   string
    |  |  |  |  o--rw port?       uint16
    |  |  |  o--rw ip-extension
    |  |  |  |  o--rw unicast
    |  |  |  |  |  o--rw range
    |  |  |  |  |  |  o--rw (ipv4-ipv6)?
    |  |  |  |  |  |     o--:(ipv4-range)
    |  |  |  |  |  |     |  o--rw start?      inet:ipv4-address
    |  |  |  |  |  |     |  o--rw end?        inet:ipv4-address
    |  |  |  |  |  |     o--:(ipv6-range)
    |  |  |  |  |  |        o--rw start-v6?   inet:ipv6-address
    |  |  |  |  |  |        o--rw end-v6?     inet:ipv6-address
    |  |  |  |  |  o--rw prefix?    union
    |  |  |  |  |  o--rw inherit
    |  |  |  |  |     o--rw ipv4?   empty
    |  |  |  |  |     o--rw ipv6?   empty
    |  |  |  |  o--rw multicast
    |  |  |  |  |  o--rw range
    |  |  |  |  |  |  o--rw (ipv4-ipv6)?
    |  |  |  |  |  |     o--:(ipv4-range)
    |  |  |  |  |  |     |  o--rw start?      inet:ipv4-address
    |  |  |  |  |  |     |  o--rw end?        inet:ipv4-address
    |  |  |  |  |  |     o--:(ipv6-range)
    |  |  |  |  |  |        o--rw start-v6?   inet:ipv6-address
    |  |  |  |  |  |        o--rw end-v6?     inet:ipv6-address
    |  |  |  |  |  o--rw prefix?    union
    |  |  |  |  |  o--rw inherit
    |  |  |  |  |     o--rw ipv4?   empty
    |  |  |  |  |     o--rw ipv6?   empty
    |  |  |  |  o--rw range
    |  |  |  |  |  o--rw (ipv4-ipv6)?
    |  |  |  |  |     o--:(ipv4-range)
    |  |  |  |  |     |  o--rw start?      inet:ipv4-address
    |  |  |  |  |     |  o--rw end?        inet:ipv4-address
    |  |  |  |  |     o--:(ipv6-range)
    |  |  |  |  |        o--rw start-v6?   inet:ipv6-address
    |  |  |  |  |        o--rw end-v6?     inet:ipv6-address
    |  |  |  |  o--rw prefix?      union
    |  |  |  |  o--rw inherit
    |  |  |  |     o--rw ipv4?   empty
    |  |  |  |     o--rw ipv6?   empty
    |  |  |  o--rw match
    |  |  |  |  o--rw key-usage
    |  |  |  |  |  o--rw cRLSign?   empty
    |  |  |  |  o--rw eku
    |  |  |  |  |  o--rw client-auth?        empty
    |  |  |  |  |  o--rw code-signing?       empty
    |  |  |  |  |  o--rw email-protection?   empty
    |  |  |  |  |  o--rw ipsec-end-system?   empty
    |  |  |  |  |  o--rw ipsec-tunnel?       empty
    |  |  |  |  |  o--rw ipsec-user?         empty
    |  |  |  |  |  o--rw ocsp-signing?       empty
    |  |  |  |  |  o--rw server-auth?        empty
    |  |  |  |  |  o--rw ssh-client?         empty
    |  |  |  |  |  o--rw ssh-server?         empty
    |  |  |  |  |  o--rw time-stamping?      empty
    |  |  |  |  o--rw certificate* [name]
    |  |  |  |     o--rw name        string
    |  |  |  |     o--rw allow
    |  |  |  |     |  o--rw expired-certificate?   empty
    |  |  |  |     o--rw skip?       enumeration
    |  |  |  |     o--rw override
    |  |  |  |        o--rw cdp
    |  |  |  |        |  o--rw directory?   string
    |  |  |  |        |  o--rw url?         string
    |  |  |  |        o--rw ocsp
    |  |  |  |        |  o--rw trustpoint?     string
    |  |  |  |        |  o--rw sequence-num?   uint16
    |  |  |  |        |  o--rw url?            string
    |  |  |  |        o--rw sia
    |  |  |  |           o--rw sequence-num?   uint16
    |  |  |  |           o--rw url?            string
    |  |  |  o--rw ocsp
    |  |  |  |  o--rw disable-nonce?   empty
    |  |  |  |  o--rw url?             string
    |  |  |  o--rw on?                 string
    |  |  |  o--rw primary?            empty
    |  |  |  o--rw regenerate?         empty
    |  |  |  o--rw revocation-check*   enumeration
    |  |  |  o--rw root
    |  |  |  |  o--rw proxy?   string
    |  |  |  |  o--rw tftp
    |  |  |  |     o--rw hostname?   string
    |  |  |  |     o--rw filename?   string
    |  |  |  o--rw source
    |  |  |  |  o--rw interface?   string
    |  |  |  o--rw storage?            string
    |  |  |  o--rw auto-trigger?       empty
    |  |  |  o--rw rsakeypair
    |  |  |  |  o--rw key-label?     string
    |  |  |  |  o--rw gen-key?       uint16
    |  |  |  |  o--rw encrypt-key?   uint16
    |  |  |  o--rw serial-number!
    |  |  |  |  o--rw none?   empty
    |  |  |  o--rw ip-address
    |  |  |  |  o--rw address-line?   string
    |  |  |  |  o--rw none?           empty
    |  |  |  o--rw subject-name?       string
    |  |  |  o--rw subject-alt-name?   string
    |  |  |  o--rw usage?              enumeration
    |  |  |  o--rw vrf?                string
    |  |  +--rw authorization
    |  |  |  +--rw list?       string
    |  |  |  +--rw password?   string
    |  |  |  +--rw username
    |  |  |     +--rw alt-subjectname
    |  |  |     |  +--rw userprinciplename?        empty
    |  |  |     |  +--rw userprinciplename-conf
    |  |  |     |     +--rw userprinciplename
    |  |  |     |        +--rw secondary?   empty
    |  |  |     +--rw subjectname
    |  |  |        +--rw all?                       empty
    |  |  |        +--rw all-conf
    |  |  |        |  +--rw all
    |  |  |        |     +--rw secondary?   empty
    |  |  |        +--rw commonname?                empty
    |  |  |        +--rw commonname-conf
    |  |  |        |  +--rw commonname
    |  |  |        |     +--rw secondary?   empty
    |  |  |        +--rw country?                   empty
    |  |  |        +--rw country-conf
    |  |  |        |  +--rw country
    |  |  |        |     +--rw secondary?   empty
    |  |  |        +--rw email?                     empty
    |  |  |        +--rw email-conf
    |  |  |        |  +--rw email
    |  |  |        |     +--rw secondary?   empty
    |  |  |        +--rw ipaddress?                 empty
    |  |  |        +--rw ipaddress-conf
    |  |  |        |  +--rw ipaddress
    |  |  |        |     +--rw secondary?   empty
    |  |  |        +--rw locality?                  empty
    |  |  |        +--rw locality-conf
    |  |  |        |  +--rw locality
    |  |  |        |     +--rw secondary?   empty
    |  |  |        +--rw organization?              empty
    |  |  |        +--rw organization-conf
    |  |  |        |  +--rw organization
    |  |  |        |     +--rw secondary?   empty
    |  |  |        +--rw organizationalunit?        empty
    |  |  |        +--rw organizationalunit-conf
    |  |  |        |  +--rw organizationalunit
    |  |  |        |     +--rw secondary?   empty
    |  |  |        +--rw postalcode?                empty
    |  |  |        +--rw postalcode-conf
    |  |  |        |  +--rw postalcode
    |  |  |        |     +--rw secondary?   empty
    |  |  |        +--rw serialnumber?              empty
    |  |  |        +--rw serialnumber-conf
    |  |  |        |  +--rw serialnumber
    |  |  |        |     +--rw secondary?   empty
    |  |  |        +--rw state?                     empty
    |  |  |        +--rw state-conf
    |  |  |        |  +--rw state
    |  |  |        |     +--rw secondary?   empty
    |  |  |        +--rw streetaddress?             empty
    |  |  |        +--rw streetaddress-conf
    |  |  |        |  +--rw streetaddress
    |  |  |        |     +--rw secondary?   empty
    |  |  |        +--rw title?                     empty
    |  |  |        +--rw title-conf
    |  |  |        |  +--rw title
    |  |  |        |     +--rw secondary?   empty
    |  |  |        +--rw unstructuredname?          empty
    |  |  |        +--rw unstructuredname-conf
    |  |  |           +--rw unstructuredname
    |  |  |              +--rw secondary?   empty
    |  |  +--rw certificate
    |  |  |  +--rw chain?   string
    |  |  +--rw chain-validation
    |  |  |  +--rw stop?       empty
    |  |  |  +--rw continue?   string
    |  |  +--rw crl
    |  |  |  +--rw query?   string
    |  |  |  +--rw cache
    |  |  |     +--rw (cache-choice)?
    |  |  |        +--:(none)
    |  |  |        |  +--rw none?           empty
    |  |  |        +--:(extend)
    |  |  |        |  +--rw extend?         uint16
    |  |  |        +--:(delete-after)
    |  |  |           +--rw delete-after?   uint16
    |  |  +--rw disable-scep?       empty
    |  |  +--rw ca-check-strict?    empty
    |  |  +--rw exit?               empty
    |  |  +--rw auto-enroll!
    |  |  |  +--rw percent?      ios-types:percentage
    |  |  |  +--rw regenerate?   empty
    |  |  +--rw eckeypair?          string
    |  |  +--rw eku
    |  |  |  +--rw request
    |  |  |     +--rw client-auth?        empty
    |  |  |     +--rw code-signing?       empty
    |  |  |     +--rw email-protection?   empty
    |  |  |     +--rw ipsec-end-system?   empty
    |  |  |     +--rw ipsec-tunnel?       empty
    |  |  |     +--rw ipsec-user?         empty
    |  |  |     +--rw ocsp-signing?       empty
    |  |  |     +--rw server-auth?        empty
    |  |  |     +--rw ssh-client?         empty
    |  |  |     +--rw ssh-server?         empty
    |  |  |     +--rw time-stamping?      empty
    |  |  +--rw enrollment
    |  |  |  +--rw http-proxy
    |  |  |  |  +--rw hostname?   string
    |  |  |  |  +--rw port?       uint16
    |  |  |  +--rw mode
    |  |  |  |  +--rw ra?   empty
    |  |  |  +--rw enrollment-method
    |  |  |  |  +--rw (method)?
    |  |  |  |     +--:(pkcs12-case)
    |  |  |  |     |  +--rw pkcs12?       empty
    |  |  |  |     +--:(profile-case)
    |  |  |  |     |  +--rw profile?      -> /ios:native/crypto/ios-crypto:pki/profile/enrollment/tag
    |  |  |  |     +--:(selfsigned-case)
    |  |  |  |     |  +--rw selfsigned?   empty
    |  |  |  |     +--:(terminal-case)
    |  |  |  |     |  +--rw terminal!
    |  |  |  |     |     +--rw pem?   empty
    |  |  |  |     +--:(url-case)
    |  |  |  |        +--rw url?          string
    |  |  |  x--rw pkcs12?              empty
    |  |  |  x--rw profile?             -> /ios:native/crypto/ios-crypto:pki/profile/enrollment/tag
    |  |  |  x--rw selfsigned?          empty
    |  |  |  x--rw terminal!
    |  |  |  |  x--rw pem?   empty
    |  |  |  x--rw url?                 string
    |  |  |  +--rw retry
    |  |  |     +--rw count?    uint8
    |  |  |     +--rw period?   uint8
    |  |  +--rw fqdn?               string
    |  |  +--rw password!
    |  |  |  +--rw encryption-type?   uint8
    |  |  |  +--rw clear-password?    string
    |  |  +--rw fingerprint?        string
    |  |  +--rw hash?               enumeration
    |  |  +--rw http-proxy
    |  |  |  +--rw hostname?   string
    |  |  |  +--rw port?       uint16
    |  |  +--rw ip-extension
    |  |  |  +--rw unicast
    |  |  |  |  +--rw range
    |  |  |  |  |  +--rw (ipv4-ipv6)?
    |  |  |  |  |     +--:(ipv4-range)
    |  |  |  |  |     |  +--rw start?      inet:ipv4-address
    |  |  |  |  |     |  +--rw end?        inet:ipv4-address
    |  |  |  |  |     +--:(ipv6-range)
    |  |  |  |  |        +--rw start-v6?   inet:ipv6-address
    |  |  |  |  |        +--rw end-v6?     inet:ipv6-address
    |  |  |  |  +--rw prefix?    union
    |  |  |  |  +--rw inherit
    |  |  |  |     +--rw ipv4?   empty
    |  |  |  |     +--rw ipv6?   empty
    |  |  |  +--rw multicast
    |  |  |  |  +--rw range
    |  |  |  |  |  +--rw (ipv4-ipv6)?
    |  |  |  |  |     +--:(ipv4-range)
    |  |  |  |  |     |  +--rw start?      inet:ipv4-address
    |  |  |  |  |     |  +--rw end?        inet:ipv4-address
    |  |  |  |  |     +--:(ipv6-range)
    |  |  |  |  |        +--rw start-v6?   inet:ipv6-address
    |  |  |  |  |        +--rw end-v6?     inet:ipv6-address
    |  |  |  |  +--rw prefix?    union
    |  |  |  |  +--rw inherit
    |  |  |  |     +--rw ipv4?   empty
    |  |  |  |     +--rw ipv6?   empty
    |  |  |  +--rw range
    |  |  |  |  +--rw (ipv4-ipv6)?
    |  |  |  |     +--:(ipv4-range)
    |  |  |  |     |  +--rw start?      inet:ipv4-address
    |  |  |  |     |  +--rw end?        inet:ipv4-address
    |  |  |  |     +--:(ipv6-range)
    |  |  |  |        +--rw start-v6?   inet:ipv6-address
    |  |  |  |        +--rw end-v6?     inet:ipv6-address
    |  |  |  +--rw prefix?      union
    |  |  |  +--rw inherit
    |  |  |     +--rw ipv4?   empty
    |  |  |     +--rw ipv6?   empty
    |  |  +--rw match
    |  |  |  +--rw key-usage
    |  |  |  |  +--rw cRLSign?   empty
    |  |  |  +--rw eku
    |  |  |  |  +--rw client-auth?        empty
    |  |  |  |  +--rw code-signing?       empty
    |  |  |  |  +--rw email-protection?   empty
    |  |  |  |  +--rw ipsec-end-system?   empty
    |  |  |  |  +--rw ipsec-tunnel?       empty
    |  |  |  |  +--rw ipsec-user?         empty
    |  |  |  |  +--rw ocsp-signing?       empty
    |  |  |  |  +--rw server-auth?        empty
    |  |  |  |  +--rw ssh-client?         empty
    |  |  |  |  +--rw ssh-server?         empty
    |  |  |  |  +--rw time-stamping?      empty
    |  |  |  +--rw certificate* [name]
    |  |  |     +--rw name        string
    |  |  |     +--rw allow
    |  |  |     |  +--rw expired-certificate?   empty
    |  |  |     +--rw skip?       enumeration
    |  |  |     +--rw override
    |  |  |        +--rw cdp
    |  |  |        |  +--rw directory?   string
    |  |  |        |  +--rw url?         string
    |  |  |        +--rw ocsp
    |  |  |        |  +--rw trustpoint?     string
    |  |  |        |  +--rw sequence-num?   uint16
    |  |  |        |  +--rw url?            string
    |  |  |        +--rw sia
    |  |  |           +--rw sequence-num?   uint16
    |  |  |           +--rw url?            string
    |  |  +--rw ocsp
    |  |  |  +--rw disable-nonce?   empty
    |  |  |  +--rw url?             string
    |  |  +--rw on?                 string
    |  |  +--rw primary?            empty
    |  |  +--rw regenerate?         empty
    |  |  +--rw revocation-check*   enumeration
    |  |  +--rw root
    |  |  |  +--rw proxy?   string
    |  |  |  +--rw tftp
    |  |  |     +--rw hostname?   string
    |  |  |     +--rw filename?   string
    |  |  +--rw source
    |  |  |  +--rw interface?   string
    |  |  +--rw storage?            string
    |  |  +--rw rsakeypair
    |  |  |  +--rw key-label?     string
    |  |  |  +--rw gen-key?       uint16
    |  |  |  +--rw encrypt-key?   uint16
    |  |  +--rw serial-number!
    |  |  |  +--rw none?   empty
    |  |  +--rw ip-address
    |  |  |  +--rw address-line?   string
    |  |  |  +--rw none?           empty
    |  |  +--rw subject-name?       string
    |  |  +--rw subject-alt-name?   string
    |  |  +--rw usage?              enumeration
    |  |  +--rw vrf?                string
    |  |  +--rw auto-trigger?       empty
    |  +--rw token
    |  |  +--rw token-name* [name]
    |  |     +--rw name       string
    |  |     +--rw removal
    |  |        +--rw timeout?   uint16
    |  +--rw trustpool
    |  |  +--rw clean?    empty
    |  |  +--rw import!
    |  |  |  +--rw clean?       empty
    |  |  |  +--rw terminal?    empty
    |  |  |  +--rw url?         string
    |  |  |  +--rw ca-bundle?   empty
    |  |  +--rw policy!
    |  |     o--rw default
    |  |     |  o--rw ca-bundle
    |  |     |  |  o--rw url?            string
    |  |     |  |  o--rw (source-vrf)?
    |  |     |  |     o--:(source)
    |  |     |  |     |  o--rw source
    |  |     |  |     |     o--rw interface?   string
    |  |     |  |     o--:(vrf)
    |  |     |  |        o--rw vrf?      string
    |  |     |  o--rw vrf?                string
    |  |     |  o--rw source
    |  |     |  |  o--rw interface?   string
    |  |     |  o--rw storage?            string
    |  |     |  o--rw revocation-check?   enumeration
    |  |     |  o--rw ocsp
    |  |     |  |  o--rw disable-nonce?   empty
    |  |     |  |  o--rw url?             string
    |  |     |  o--rw chain-validation?   empty
    |  |     |  o--rw exit?               empty
    |  |     |  o--rw match
    |  |     |  |  o--rw certificate* [name]
    |  |     |  |     o--rw name        string
    |  |     |  |     o--rw allow
    |  |     |  |     |  o--rw expired-certificate?   empty
    |  |     |  |     o--rw skip?       enumeration
    |  |     |  |     o--rw override
    |  |     |  |        o--rw cdp
    |  |     |  |        |  o--rw (dir-url)?
    |  |     |  |        |     o--:(directory)
    |  |     |  |        |     |  o--rw directory?   string
    |  |     |  |        |     o--:(url)
    |  |     |  |        |        o--rw url?         string
    |  |     |  |        o--rw ocsp
    |  |     |  |        |  o--rw trustpool?      string
    |  |     |  |        |  o--rw sequence-num?   uint16
    |  |     |  |        |  o--rw url?            string
    |  |     |  |        o--rw sia
    |  |     |  |           o--rw sequence-num?   uint16
    |  |     |  |           o--rw url?            string
    |  |     |  o--rw crl
    |  |     |     o--rw query?   string
    |  |     |     o--rw cache
    |  |     |        o--rw (cache-choice)?
    |  |     |           o--:(none)
    |  |     |           |  o--rw none?           empty
    |  |     |           o--:(delete-after)
    |  |     |              o--rw delete-after?   uint16
    |  |     +--rw ca-bundle
    |  |     |  +--rw url?            string
    |  |     |  +--rw (source-vrf)?
    |  |     |     +--:(source)
    |  |     |     |  +--rw source
    |  |     |     |     +--rw interface?   string
    |  |     |     +--:(vrf)
    |  |     |        +--rw vrf?      string
    |  |     +--rw vrf?                string
    |  |     +--rw source
    |  |     |  +--rw interface?   string
    |  |     +--rw storage?            string
    |  |     +--rw revocation-check?   enumeration
    |  |     +--rw ocsp
    |  |     |  +--rw disable-nonce?   empty
    |  |     |  +--rw url?             string
    |  |     +--rw chain-validation?   empty
    |  |     +--rw exit?               empty
    |  |     +--rw match
    |  |     |  +--rw certificate* [name]
    |  |     |     +--rw name        string
    |  |     |     +--rw allow
    |  |     |     |  +--rw expired-certificate?   empty
    |  |     |     +--rw skip?       enumeration
    |  |     |     +--rw override
    |  |     |        +--rw cdp
    |  |     |        |  +--rw (dir-url)?
    |  |     |        |     +--:(directory)
    |  |     |        |     |  +--rw directory?   string
    |  |     |        |     +--:(url)
    |  |     |        |        +--rw url?         string
    |  |     |        +--rw ocsp
    |  |     |        |  +--rw trustpool?      string
    |  |     |        |  +--rw sequence-num?   uint16
    |  |     |        |  +--rw url?            string
    |  |     |        +--rw sia
    |  |     |           +--rw sequence-num?   uint16
    |  |     |           +--rw url?            string
    |  |     +--rw crl
    |  |        +--rw query?   string
    |  |        +--rw cache
    |  |           +--rw (cache-choice)?
    |  |              +--:(none)
    |  |              |  +--rw none?           empty
    |  |              +--:(delete-after)
    |  |                 +--rw delete-after?   uint16
    |  o--rw default
    |     o--rw removal
    |        o--rw timeout?   uint16
    +--rw tls-tunnel
    |  +--rw tls-tunnel-list* [tunnel-name]
    |     +--rw tunnel-name            string
    |     +--rw cc-mode?               empty
    |     +--rw device-id?             string
    |     +--rw tls-local-interface* [priority]
    |     |  +--rw interface-name?   string
    |     |  +--rw priority          uint8
    |     x--rw local-interface* [interface-name]
    |     |  x--rw interface-name    string
    |     |  x--rw priority?         uint8
    |     +--rw mode?                  enumeration
    |     +--rw overlay
    |     |  +--rw (overlay-case)?
    |     |     +--:(overlay-address-case)
    |     |     |  +--rw address?     inet:ip-address
    |     |     |  +--rw vrf?         string
    |     |     +--:(overlay-intf-case)
    |     |        +--rw interface?   string
    |     o--rw overlay-address
    |     |  o--rw addresses?   inet:ip-address
    |     |  o--rw vrf?         string
    |     +--rw pki
    |     |  +--rw trustpoint* [trustpoint-name]
    |     |     +--rw trustpoint-name    string
    |     |     +--rw use?               enumeration
    |     +--rw protection
    |     |  +--rw protection?   enumeration
    |     +--rw psk
    |     |  +--rw id* [id]
    |     |     +--rw id     string
    |     |     +--rw key
    |     |        +--rw key?            empty
    |     |        +--rw encryption?     enumeration
    |     |        +--rw unencryt-key?   string
    |     +--rw server
    |     |  +--rw ipv4* [ipv4]
    |     |  |  +--rw ipv4    inet:ipv4-address
    |     |  |  +--rw port?   uint32
    |     |  +--rw ipv6* [ipv6]
    |     |  |  +--rw ipv6    inet:ipv6-address
    |     |  |  +--rw port?   uint32
    |     |  +--rw url* [url]
    |     |     +--rw url     string
    |     |     +--rw port?   uint32
    |     +--rw shutdown?              boolean
    +--rw ssl
    |  +--rw ssl-authorization
    |  |  +--rw policy* [name]
    |  |     +--rw name                            string
    |  |     +--rw banner?                         string
    |  |     +--rw client
    |  |     |  +--rw profile?   string
    |  |     +--rw def-domain?                     string
    |  |     +--rw disable-always-on?              empty
    |  |     +--rw dns
    |  |     |  +--rw primary-address?     inet:ipv4-address
    |  |     |  +--rw secondary-address?   inet:ipv4-address
    |  |     +--rw dpd-interval
    |  |     |  +--rw client?   uint16
    |  |     |  +--rw server?   uint16
    |  |     +--rw homepage?                       string
    |  |     +--rw include-local-lan?              empty
    |  |     +--rw ipv6
    |  |     |  +--rw dns
    |  |     |  |  +--rw primary-address?     inet:ipv6-address
    |  |     |  |  +--rw secondary-address?   inet:ipv6-address
    |  |     |  +--rw pool
    |  |     |  |  +--rw WORD?   string
    |  |     |  +--rw prefix?   uint8
    |  |     |  +--rw route
    |  |     |     +--rw set
    |  |     |        +--rw access-list?   string
    |  |     +--rw keepalive?                      uint32
    |  |     +--rw module?                         enumeration
    |  |     +--rw msie-proxy
    |  |     |  +--rw exception
    |  |     |  |  +--rw WORD?   string
    |  |     |  +--rw option?      enumeration
    |  |     |  +--rw server
    |  |     |     +--rw WORD?   string
    |  |     +--rw mtu?                            uint32
    |  |     +--rw netmask?                        inet:ipv4-address
    |  |     +--rw pool?                           string
    |  |     +--rw rekey
    |  |     |  +--rw time?   uint16
    |  |     +--rw route
    |  |     |  +--rw set
    |  |     |     +--rw access-list?   string
    |  |     |     +--rw interface
    |  |     |        +--rw (interface-choice)?
    |  |     |           +--:(AppNav-Compress)
    |  |     |           |  +--rw AppNav-Compress?             uint16
    |  |     |           +--:(AppNav-UnCompress)
    |  |     |           |  +--rw AppNav-UnCompress?           uint16
    |  |     |           +--:(ATM)
    |  |     |           |  +--rw ATM?                         string
    |  |     |           +--:(ATM-subinterface)
    |  |     |           |  +--rw ATM-subinterface
    |  |     |           |     +--rw ATM?   string
    |  |     |           +--:(ATM-ACR)
    |  |     |           |  +--rw ATM-ACR?                     string
    |  |     |           +--:(ATM-ACRsubinterface)
    |  |     |           |  +--rw ATM-ACRsubinterface
    |  |     |           |     +--rw ATM-ACR?   string
    |  |     |           +--:(BDI)
    |  |     |           |  +--rw BDI?                         string
    |  |     |           +--:(CEM)
    |  |     |           |  +--rw CEM?                         string
    |  |     |           +--:(CEM-ACR)
    |  |     |           |  +--rw CEM-ACR?                     uint8
    |  |     |           +--:(Embedded-Service-Engine)
    |  |     |           |  +--rw Embedded-Service-Engine?     string
    |  |     |           +--:(Ethernet)
    |  |     |           |  +--rw Ethernet?                    string
    |  |     |           +--:(FastEthernet)
    |  |     |           |  +--rw FastEthernet?                string
    |  |     |           +--:(GigabitEthernet)
    |  |     |           |  +--rw GigabitEthernet?             string
    |  |     |           +--:(FiveGigabitEthernet)
    |  |     |           |  +--rw FiveGigabitEthernet?         string
    |  |     |           +--:(AppGigabitEthernet)
    |  |     |           |  +--rw AppGigabitEthernet?          string
    |  |     |           o--:(TwentyFiveGigabitEthernet)
    |  |     |           |  o--rw TwentyFiveGigabitEthernet?   string
    |  |     |           +--:(TwentyFiveGigE)
    |  |     |           |  +--rw TwentyFiveGigE?              string
    |  |     |           +--:(TwoGigabitEthernet)
    |  |     |           |  +--rw TwoGigabitEthernet?          string
    |  |     |           +--:(FortyGigabitEthernet)
    |  |     |           |  +--rw FortyGigabitEthernet?        string
    |  |     |           +--:(FiftyGigabitEthernet)
    |  |     |           |  +--rw FiftyGigabitEthernet?        string
    |  |     |           +--:(HundredGigE)
    |  |     |           |  +--rw HundredGigE?                 string
    |  |     |           +--:(L2LISP)
    |  |     |           |  +--rw L2LISP?                      string
    |  |     |           +--:(L2LISP-subinterface)
    |  |     |           |  +--rw L2LISP-subinterface
    |  |     |           |     +--rw L2LISP?   string
    |  |     |           +--:(LISP)
    |  |     |           |  +--rw LISP?                        string
    |  |     |           +--:(LISP-subinterface)
    |  |     |           |  +--rw LISP-subinterface
    |  |     |           |     +--rw LISP?   string
    |  |     |           +--:(Loopback)
    |  |     |           |  +--rw Loopback?                    uint32
    |  |     |           +--:(Multilink)
    |  |     |           |  +--rw Multilink?                   uint16
    |  |     |           +--:(nve)
    |  |     |           |  +--rw nve?                         uint16
    |  |     |           +--:(overlay)
    |  |     |           |  +--rw overlay?                     uint16
    |  |     |           +--:(Port-channel)
    |  |     |           |  +--rw Port-channel?                uint32
    |  |     |           +--:(Port-channel-subinterface)
    |  |     |           |  +--rw Port-channel-subinterface
    |  |     |           |     +--rw Port-channel?   string
    |  |     |           +--:(pseudowire)
    |  |     |           |  +--rw pseudowire?                  uint32
    |  |     |           +--:(SM)
    |  |     |           |  +--rw SM?                          string
    |  |     |           +--:(Cellular)
    |  |     |           |  +--rw Cellular?                    string
    |  |     |           +--:(Dialer)
    |  |     |           |  +--rw Dialer?                      string
    |  |     |           +--:(Serial)
    |  |     |           |  +--rw Serial?                      string
    |  |     |           +--:(Async)
    |  |     |           |  +--rw Async?                       string
    |  |     |           +--:(TenGigabitEthernet)
    |  |     |           |  +--rw TenGigabitEthernet?          string
    |  |     |           +--:(Tunnel)
    |  |     |           |  +--rw Tunnel?                      uint32
    |  |     |           +--:(Virtual-Template)
    |  |     |           |  +--rw Virtual-Template?            uint16
    |  |     |           +--:(Vlan)
    |  |     |           |  +--rw Vlan?                        uint16
    |  |     |           +--:(VirtualPortGroup)
    |  |     |           |  +--rw VirtualPortGroup?            uint16
    |  |     |           +--:(vasileft)
    |  |     |           |  +--rw vasileft?                    uint16
    |  |     |           +--:(vasiright)
    |  |     |           |  +--rw vasiright?                   uint16
    |  |     |           +--:(BD-VIF)
    |  |     |           |  +--rw BD-VIF?                      string
    |  |     |           +--:(MFR)
    |  |     |           |  +--rw MFR?                         uint32
    |  |     |           +--:(Serial-subinterface)
    |  |     |           |  +--rw Serial-subinterface
    |  |     |           |     +--rw Serial?   string
    |  |     |           +--:(Bundle)
    |  |     |              +--rw Bundle?                      uint32 {ios-features:cable-config}?
    |  |     +--rw smartcard-removal-disconnect?   empty
    |  |     +--rw split-dns?                      string
    |  |     +--rw timeout
    |  |     |  +--rw disconnect?   int32
    |  |     |  +--rw idle?         uint32
    |  |     |  +--rw session?      uint32
    |  |     +--rw wins
    |  |        +--rw primary-ip?     inet:ipv4-address
    |  |        +--rw secondary-ip?   inet:ipv4-address
    |  o--rw authorization
    |  |  o--rw policy?   string
    |  +--rw diagnose
    |  |  +--rw error?   uint16
    |  +--rw ssl-policy* [name]
    |  |  +--rw name        string
    |  |  +--rw pki
    |  |  |  +--rw trustpoint
    |  |  |     +--rw name?   string
    |  |  |     +--rw sign?   empty
    |  |  +--rw ip
    |  |  |  +--rw (ip-choice)?
    |  |  |  |  +--:(address-case)
    |  |  |  |  |  +--rw address-container
    |  |  |  |  |     +--rw local
    |  |  |  |  |        +--rw ip-address?   inet:ipv4-address
    |  |  |  |  |        +--rw port?         uint16
    |  |  |  |  |        +--rw vrf?          string
    |  |  |  |  |        +--rw standby?      string
    |  |  |  |  +--:(interface-case)
    |  |  |  |     +--rw interface-container
    |  |  |  |        +--rw interface-name
    |  |  |  |           +--rw (interface-choice)?
    |  |  |  |           |  +--:(AppNav-Compress)
    |  |  |  |           |  |  +--rw AppNav-Compress?             -> /ios:native/interface/AppNav-Compress/name
    |  |  |  |           |  +--:(AppNav-UnCompress)
    |  |  |  |           |  |  +--rw AppNav-UnCompress?           -> /ios:native/interface/AppNav-UnCompress/name
    |  |  |  |           |  +--:(ATM)
    |  |  |  |           |  |  +--rw ATM?                         -> /ios:native/interface/ATM/name
    |  |  |  |           |  +--:(ATM-subinterface)
    |  |  |  |           |  |  +--rw ATM-subinterface
    |  |  |  |           |  |     +--rw ATM?   -> /ios:native/interface/ATM-subinterface/ATM/name
    |  |  |  |           |  +--:(ATM-ACR)
    |  |  |  |           |  |  +--rw ATM-ACR?                     -> /ios:native/interface/ATM-ACR/name
    |  |  |  |           |  +--:(ATM-ACRsubinterface)
    |  |  |  |           |  |  +--rw ATM-ACRsubinterface
    |  |  |  |           |  |     +--rw ATM-ACR?   -> /ios:native/interface/ATM-ACRsubinterface/ATM-ACR/name
    |  |  |  |           |  +--:(BDI)
    |  |  |  |           |  |  +--rw BDI?                         -> /ios:native/interface/BDI/name
    |  |  |  |           |  +--:(CEM)
    |  |  |  |           |  |  +--rw CEM?                         -> /ios:native/interface/CEM/name
    |  |  |  |           |  +--:(CEM-ACR)
    |  |  |  |           |  |  +--rw CEM-ACR?                     -> /ios:native/interface/CEM-ACR/name
    |  |  |  |           |  +--:(Embedded-Service-Engine)
    |  |  |  |           |  |  +--rw Embedded-Service-Engine?     -> /ios:native/interface/Embedded-Service-Engine/name
    |  |  |  |           |  +--:(Ethernet)
    |  |  |  |           |  |  +--rw Ethernet?                    -> /ios:native/interface/Ethernet/name
    |  |  |  |           |  +--:(FastEthernet)
    |  |  |  |           |  |  +--rw FastEthernet?                -> /ios:native/interface/FastEthernet/name
    |  |  |  |           |  +--:(GigabitEthernet)
    |  |  |  |           |  |  +--rw GigabitEthernet?             -> /ios:native/interface/GigabitEthernet/name
    |  |  |  |           |  +--:(FiveGigabitEthernet)
    |  |  |  |           |  |  +--rw FiveGigabitEthernet?         -> /ios:native/interface/FiveGigabitEthernet/name
    |  |  |  |           |  +--:(AppGigabitEthernet)
    |  |  |  |           |  |  +--rw AppGigabitEthernet?          -> /ios:native/interface/AppGigabitEthernet/name
    |  |  |  |           |  +--:(TwentyFiveGigE)
    |  |  |  |           |  |  +--rw TwentyFiveGigE?              -> /ios:native/interface/TwentyFiveGigE/name
    |  |  |  |           |  +--:(TwoGigabitEthernet)
    |  |  |  |           |  |  +--rw TwoGigabitEthernet?          -> /ios:native/interface/TwoGigabitEthernet/name
    |  |  |  |           |  +--:(FortyGigabitEthernet)
    |  |  |  |           |  |  +--rw FortyGigabitEthernet?        -> /ios:native/interface/FortyGigabitEthernet/name
    |  |  |  |           |  +--:(FiftyGigabitEthernet)
    |  |  |  |           |  |  +--rw FiftyGigabitEthernet?        -> /ios:native/interface/FiftyGigabitEthernet/name
    |  |  |  |           |  +--:(HundredGigE)
    |  |  |  |           |  |  +--rw HundredGigE?                 -> /ios:native/interface/HundredGigE/name
    |  |  |  |           |  +--:(TwoHundredGigE)
    |  |  |  |           |  |  +--rw TwoHundredGigE?              -> /ios:native/interface/TwoHundredGigE/name
    |  |  |  |           |  +--:(FourHundredGigE)
    |  |  |  |           |  |  +--rw FourHundredGigE?             -> /ios:native/interface/FourHundredGigE/name
    |  |  |  |           |  +--:(L2LISP)
    |  |  |  |           |  |  +--rw L2LISP?                      -> /ios:native/interface/L2LISP/name
    |  |  |  |           |  +--:(L2LISP-subinterface)
    |  |  |  |           |  |  +--rw L2LISP-subinterface
    |  |  |  |           |  |     +--rw L2LISP?   -> /ios:native/interface/L2LISP-subinterface/L2LISP/name
    |  |  |  |           |  +--:(LISP)
    |  |  |  |           |  |  +--rw LISP?                        -> /ios:native/interface/LISP/name
    |  |  |  |           |  +--:(LISP-subinterface)
    |  |  |  |           |  |  +--rw LISP-subinterface
    |  |  |  |           |  |     +--rw LISP?   -> /ios:native/interface/LISP-subinterface/LISP/name
    |  |  |  |           |  +--:(Loopback)
    |  |  |  |           |  |  +--rw Loopback?                    -> /ios:native/interface/Loopback/name
    |  |  |  |           |  +--:(LORAWAN)
    |  |  |  |           |  |  +--rw LORAWAN?                     -> /ios:native/interface/LORAWAN/name
    |  |  |  |           |  +--:(WPAN)
    |  |  |  |           |  |  +--rw WPAN?                        -> /ios:native/interface/WPAN/name {ios-features:wpan}?
    |  |  |  |           |  +--:(Virtual-WPAN)
    |  |  |  |           |  |  +--rw Virtual-WPAN?                -> /ios:native/interface/Virtual-WPAN/name {ios-features:wpan}?
    |  |  |  |           |  +--:(Multilink)
    |  |  |  |           |  |  +--rw Multilink?                   -> /ios:native/interface/Multilink/name
    |  |  |  |           |  +--:(nve)
    |  |  |  |           |  |  +--rw nve?                         -> /ios:native/interface/nve/name
    |  |  |  |           |  +--:(overlay)
    |  |  |  |           |  |  +--rw overlay?                     -> /ios:native/interface/overlay/name
    |  |  |  |           |  +--:(Port-channel)
    |  |  |  |           |  |  +--rw Port-channel?                -> /ios:native/interface/Port-channel/name
    |  |  |  |           |  +--:(Port-channel-subinterface)
    |  |  |  |           |  |  +--rw Port-channel-subinterface
    |  |  |  |           |  |     +--rw Port-channel?   -> /ios:native/interface/Port-channel-subinterface/Port-channel/name
    |  |  |  |           |  +--:(PRP-channel)
    |  |  |  |           |  |  +--rw PRP-channel?                 -> /ios:native/interface/PRP-channel/name
    |  |  |  |           |  +--:(pseudowire)
    |  |  |  |           |  |  +--rw pseudowire?                  -> /ios:native/interface/pseudowire/name
    |  |  |  |           |  +--:(SM)
    |  |  |  |           |  |  +--rw SM?                          -> /ios:native/interface/SM/name
    |  |  |  |           |  +--:(Cellular)
    |  |  |  |           |  |  +--rw Cellular?                    -> /ios:native/interface/Cellular/name
    |  |  |  |           |  +--:(Dialer)
    |  |  |  |           |  |  +--rw Dialer?                      -> /ios:native/interface/Dialer/name
    |  |  |  |           |  +--:(Serial)
    |  |  |  |           |  |  +--rw Serial?                      -> /ios:native/interface/Serial/name
    |  |  |  |           |  +--:(Async)
    |  |  |  |           |  |  +--rw Async?                       -> /ios:native/interface/Async/name
    |  |  |  |           |  +--:(TenGigabitEthernet)
    |  |  |  |           |  |  +--rw TenGigabitEthernet?          -> /ios:native/interface/TenGigabitEthernet/name
    |  |  |  |           |  +--:(Tunnel)
    |  |  |  |           |  |  +--rw Tunnel?                      -> /ios:native/interface/Tunnel/name
    |  |  |  |           |  +--:(Virtual-Template)
    |  |  |  |           |  |  +--rw Virtual-Template?            -> /ios:native/interface/Virtual-Template/name
    |  |  |  |           |  +--:(Vlan)
    |  |  |  |           |  |  +--rw Vlan?                        -> /ios:native/interface/Vlan/name
    |  |  |  |           |  +--:(VirtualPortGroup)
    |  |  |  |           |  |  +--rw VirtualPortGroup?            -> /ios:native/interface/VirtualPortGroup/name
    |  |  |  |           |  +--:(vasileft)
    |  |  |  |           |  |  +--rw vasileft?                    -> /ios:native/interface/vasileft/name
    |  |  |  |           |  +--:(vasiright)
    |  |  |  |           |  |  +--rw vasiright?                   -> /ios:native/interface/vasiright/name
    |  |  |  |           |  +--:(BD-VIF)
    |  |  |  |           |  |  +--rw BD-VIF?                      -> /ios:native/interface/BD-VIF/name
    |  |  |  |           |  +--:(MFR)
    |  |  |  |           |  |  +--rw MFR?                         -> /ios:native/interface/MFR/name
    |  |  |  |           |  +--:(Serial-subinterface)
    |  |  |  |           |  |  +--rw Serial-subinterface
    |  |  |  |           |  |     +--rw Serial?   -> /ios:native/interface/Serial-subinterface/Serial/name
    |  |  |  |           |  +--:(Bundle)
    |  |  |  |           |     +--rw Bundle?                      -> /ios:native/interface/Bundle/name {ios-features:cable-config}?
    |  |  |  |           +--rw port?                              uint16
    |  |  |  |           +--rw vrf?                               string
    |  |  |  |           +--rw standby?                           string
    |  |  |  o--rw address
    |  |  |  |  o--rw local
    |  |  |  |     o--rw ip-address?   inet:ip-address
    |  |  |  |     o--rw port?         uint16
    |  |  |  |     o--rw vrf?          string
    |  |  |  |     o--rw standby?      string
    |  |  |  o--rw interface
    |  |  |     o--rw interface-name-list
    |  |  |        o--rw (interface-choice)?
    |  |  |        |  o--:(AppNav-Compress)
    |  |  |        |  |  o--rw AppNav-Compress?             uint16
    |  |  |        |  o--:(AppNav-UnCompress)
    |  |  |        |  |  o--rw AppNav-UnCompress?           uint16
    |  |  |        |  o--:(ATM)
    |  |  |        |  |  o--rw ATM?                         string
    |  |  |        |  o--:(ATM-subinterface)
    |  |  |        |  |  o--rw ATM-subinterface
    |  |  |        |  |     o--rw ATM?   string
    |  |  |        |  o--:(ATM-ACR)
    |  |  |        |  |  o--rw ATM-ACR?                     string
    |  |  |        |  o--:(ATM-ACRsubinterface)
    |  |  |        |  |  o--rw ATM-ACRsubinterface
    |  |  |        |  |     o--rw ATM-ACR?   string
    |  |  |        |  o--:(BDI)
    |  |  |        |  |  o--rw BDI?                         string
    |  |  |        |  o--:(CEM)
    |  |  |        |  |  o--rw CEM?                         string
    |  |  |        |  o--:(CEM-ACR)
    |  |  |        |  |  o--rw CEM-ACR?                     uint8
    |  |  |        |  o--:(Embedded-Service-Engine)
    |  |  |        |  |  o--rw Embedded-Service-Engine?     string
    |  |  |        |  o--:(Ethernet)
    |  |  |        |  |  o--rw Ethernet?                    string
    |  |  |        |  o--:(FastEthernet)
    |  |  |        |  |  o--rw FastEthernet?                string
    |  |  |        |  o--:(GigabitEthernet)
    |  |  |        |  |  o--rw GigabitEthernet?             string
    |  |  |        |  o--:(FiveGigabitEthernet)
    |  |  |        |  |  o--rw FiveGigabitEthernet?         string
    |  |  |        |  o--:(AppGigabitEthernet)
    |  |  |        |  |  o--rw AppGigabitEthernet?          string
    |  |  |        |  o--:(TwentyFiveGigabitEthernet)
    |  |  |        |  |  o--rw TwentyFiveGigabitEthernet?   string
    |  |  |        |  o--:(TwentyFiveGigE)
    |  |  |        |  |  o--rw TwentyFiveGigE?              string
    |  |  |        |  o--:(TwoGigabitEthernet)
    |  |  |        |  |  o--rw TwoGigabitEthernet?          string
    |  |  |        |  o--:(FortyGigabitEthernet)
    |  |  |        |  |  o--rw FortyGigabitEthernet?        string
    |  |  |        |  o--:(HundredGigE)
    |  |  |        |  |  o--rw HundredGigE?                 string
    |  |  |        |  o--:(L2LISP)
    |  |  |        |  |  o--rw L2LISP?                      string
    |  |  |        |  o--:(L2LISP-subinterface)
    |  |  |        |  |  o--rw L2LISP-subinterface
    |  |  |        |  |     o--rw L2LISP?   string
    |  |  |        |  o--:(LISP)
    |  |  |        |  |  o--rw LISP?                        string
    |  |  |        |  o--:(LISP-subinterface)
    |  |  |        |  |  o--rw LISP-subinterface
    |  |  |        |  |     o--rw LISP?   string
    |  |  |        |  o--:(Loopback)
    |  |  |        |  |  o--rw Loopback?                    uint32
    |  |  |        |  o--:(Multilink)
    |  |  |        |  |  o--rw Multilink?                   uint16
    |  |  |        |  o--:(nve)
    |  |  |        |  |  o--rw nve?                         uint16
    |  |  |        |  o--:(overlay)
    |  |  |        |  |  o--rw overlay?                     uint16
    |  |  |        |  o--:(Port-channel)
    |  |  |        |  |  o--rw Port-channel?                uint32
    |  |  |        |  o--:(Port-channel-subinterface)
    |  |  |        |  |  o--rw Port-channel-subinterface
    |  |  |        |  |     o--rw Port-channel?   string
    |  |  |        |  o--:(pseudowire)
    |  |  |        |  |  o--rw pseudowire?                  uint32
    |  |  |        |  o--:(SM)
    |  |  |        |  |  o--rw SM?                          string
    |  |  |        |  o--:(Cellular)
    |  |  |        |  |  o--rw Cellular?                    string
    |  |  |        |  o--:(Dialer)
    |  |  |        |  |  o--rw Dialer?                      string
    |  |  |        |  o--:(Serial)
    |  |  |        |  |  o--rw Serial?                      string
    |  |  |        |  o--:(Async)
    |  |  |        |  |  o--rw Async?                       string
    |  |  |        |  o--:(TenGigabitEthernet)
    |  |  |        |  |  o--rw TenGigabitEthernet?          string
    |  |  |        |  o--:(Tunnel)
    |  |  |        |  |  o--rw Tunnel?                      uint32
    |  |  |        |  o--:(Virtual-Template)
    |  |  |        |  |  o--rw Virtual-Template?            uint16
    |  |  |        |  o--:(Vlan)
    |  |  |        |  |  o--rw Vlan?                        uint16
    |  |  |        |  o--:(VirtualPortGroup)
    |  |  |        |  |  o--rw VirtualPortGroup?            uint16
    |  |  |        |  o--:(vasileft)
    |  |  |        |  |  o--rw vasileft?                    uint16
    |  |  |        |  o--:(vasiright)
    |  |  |        |  |  o--rw vasiright?                   uint16
    |  |  |        |  o--:(BD-VIF)
    |  |  |        |  |  o--rw BD-VIF?                      string
    |  |  |        |  o--:(MFR)
    |  |  |        |  |  o--rw MFR?                         uint32
    |  |  |        |  o--:(Serial-subinterface)
    |  |  |        |  |  o--rw Serial-subinterface
    |  |  |        |  |     o--rw Serial?   string
    |  |  |        |  o--:(Bundle)
    |  |  |        |     o--rw Bundle?                      uint32 {ios-features:cable-config}?
    |  |  |        o--rw port?                              uint16
    |  |  |        o--rw vrf?                               string
    |  |  |        o--rw standby?                           string
    |  |  +--rw ssl
    |  |  |  +--rw proposal?   string
    |  |  +--rw shutdown?   boolean
    |  o--rw policy?              string
    |  +--rw ssl-profile* [name]
    |  |  +--rw name                string
    |  |  +--rw aaa
    |  |  |  +--rw accounting
    |  |  |  |  +--rw user-pass
    |  |  |  |     +--rw list?   empty
    |  |  |  |     +--rw name?   string
    |  |  |  +--rw authentication
    |  |  |  |  +--rw user-pass
    |  |  |  |     +--rw list?   empty
    |  |  |  |     +--rw name?   string
    |  |  |  +--rw authorization
    |  |  |     +--rw group
    |  |  |     |  +--rw (override-userpass)?
    |  |  |     |  |  +--:(override-auth)
    |  |  |     |  |  |  +--rw override-auth
    |  |  |     |  |  |     +--rw user-pass
    |  |  |     |  |  |        +--rw list
    |  |  |     |  |  |           +--rw list-name?   string
    |  |  |     |  |  |           +--rw user-name?   string
    |  |  |     |  |  |           +--rw password
    |  |  |     |  |  |              +--rw encryption?   enumeration
    |  |  |     |  |  |              +--rw key?          string
    |  |  |     |  |  +--:(user-pass-auth)
    |  |  |     |  |     +--rw user-pass-auth
    |  |  |     |  |        +--rw list
    |  |  |     |  |           +--rw list-name?   string
    |  |  |     |  |           +--rw user-name?   string
    |  |  |     |  |           +--rw password
    |  |  |     |  |              +--rw encryption?   enumeration
    |  |  |     |  |              +--rw key?          string
    |  |  |     |  x--rw override
    |  |  |     |  |  x--rw user-pass
    |  |  |     |  |     x--rw list
    |  |  |     |  |        x--rw list-name?   string
    |  |  |     |  |        x--rw user-name?   string
    |  |  |     |  |        x--rw password
    |  |  |     |  |           x--rw encryption?   enumeration
    |  |  |     |  |           x--rw key?          string
    |  |  |     |  x--rw user-pass
    |  |  |     |     x--rw list
    |  |  |     |        x--rw list-name?   string
    |  |  |     |        x--rw user-name?   string
    |  |  |     |        x--rw password
    |  |  |     |           x--rw encryption?   enumeration
    |  |  |     |           x--rw key?          string
    |  |  |     +--rw user
    |  |  |        +--rw user-pass
    |  |  |           +--rw cached?   empty
    |  |  |           +--rw list
    |  |  |              +--rw list-name?   string
    |  |  |              +--rw user-name?   string
    |  |  |              +--rw password
    |  |  |                 +--rw encryption?   enumeration
    |  |  |                 +--rw key?          string
    |  |  +--rw authentication
    |  |  |  +--rw remote
    |  |  |     +--rw user-pass?   empty
    |  |  +--rw match
    |  |  |  +--rw policy?   string
    |  |  |  +--rw url?      string
    |  |  +--rw max-users?          uint16
    |  |  +--rw shutdown?           empty
    |  |  +--rw virtual-template?   uint8
    |  o--rw profile?             string
    |  +--rw ssl-proposal* [name]
    |  |  +--rw name          string
    |  |  +--rw protection
    |  |     +--rw rsa-3des-ede-sha1?   empty
    |  |     +--rw rsa-aes128-sha1?     empty
    |  |     +--rw rsa-aes256-sha1?     empty
    |  |     +--rw rsa-rc4128-md5?      empty
    |  o--rw proposal
    |     o--rw name?         string
    |     o--rw protection
    |        o--rw rsa-3des-ede-sha1?   empty
    |        o--rw rsa-aes128-sha1?     empty
    |        o--rw rsa-aes256-sha1?     empty
    |        o--rw rsa-rc4128-md5?      empty
    +--rw vpn
    |  +--rw anyconnect
    |  |  +--rw file-list* [filename]
    |  |  |  +--rw filename    string
    |  |  |  +--rw sequence?   uint8
    |  |  o--rw file
    |  |  |  o--rw filename?   string
    |  |  |  o--rw sequence?   uint8
    |  |  +--rw profile* [profile-name]
    |  |  |  +--rw profile-name    string
    |  |  |  +--rw file            string
    |  |  o--rw profile-container
    |  |     o--rw profile?    string
    |  |     o--rw filename?   string
    |  +--rw csd?          string
    +--rw xauth?           string
  augment /ios:native/ios:interface/ios:Tunnel/ios-tun:tunnel/ios-tun:protection:
    +--rw dike {ios-features:crypto}?
    |  +--rw profile
    |     +--rw ikev2-profile?   string
    |     +--rw (local-remote)?
    |        +--:(local-case)
    |        |  +--rw local?     uint32
    |        |  +--rw remote1
    |        |     +--rw remote?   uint32
    |        +--:(remote-case)
    |           +--rw remote?    uint32
    +--rw ipsec {ios-features:crypto}?
       +--rw intiate?          empty
       +--rw local-address
       |  +--rw (interface-choice)?
       |     +--:(AppNav-Compress)
       |     |  +--rw AppNav-Compress?             uint16
       |     +--:(AppNav-UnCompress)
       |     |  +--rw AppNav-UnCompress?           uint16
       |     +--:(ATM)
       |     |  +--rw ATM?                         string
       |     +--:(ATM-subinterface)
       |     |  +--rw ATM-subinterface
       |     |     +--rw ATM?   string
       |     +--:(ATM-ACR)
       |     |  +--rw ATM-ACR?                     string
       |     +--:(ATM-ACRsubinterface)
       |     |  +--rw ATM-ACRsubinterface
       |     |     +--rw ATM-ACR?   string
       |     +--:(BDI)
       |     |  +--rw BDI?                         string
       |     +--:(CEM)
       |     |  +--rw CEM?                         string
       |     +--:(CEM-ACR)
       |     |  +--rw CEM-ACR?                     uint8
       |     +--:(Embedded-Service-Engine)
       |     |  +--rw Embedded-Service-Engine?     string
       |     +--:(Ethernet)
       |     |  +--rw Ethernet?                    string
       |     +--:(FastEthernet)
       |     |  +--rw FastEthernet?                string
       |     +--:(GigabitEthernet)
       |     |  +--rw GigabitEthernet?             string
       |     +--:(FiveGigabitEthernet)
       |     |  +--rw FiveGigabitEthernet?         string
       |     +--:(AppGigabitEthernet)
       |     |  +--rw AppGigabitEthernet?          string
       |     o--:(TwentyFiveGigabitEthernet)
       |     |  o--rw TwentyFiveGigabitEthernet?   string
       |     +--:(TwentyFiveGigE)
       |     |  +--rw TwentyFiveGigE?              string
       |     +--:(TwoGigabitEthernet)
       |     |  +--rw TwoGigabitEthernet?          string
       |     +--:(FortyGigabitEthernet)
       |     |  +--rw FortyGigabitEthernet?        string
       |     +--:(FiftyGigabitEthernet)
       |     |  +--rw FiftyGigabitEthernet?        string
       |     +--:(HundredGigE)
       |     |  +--rw HundredGigE?                 string
       |     +--:(L2LISP)
       |     |  +--rw L2LISP?                      string
       |     +--:(L2LISP-subinterface)
       |     |  +--rw L2LISP-subinterface
       |     |     +--rw L2LISP?   string
       |     +--:(LISP)
       |     |  +--rw LISP?                        string
       |     +--:(LISP-subinterface)
       |     |  +--rw LISP-subinterface
       |     |     +--rw LISP?   string
       |     +--:(Loopback)
       |     |  +--rw Loopback?                    uint32
       |     +--:(Multilink)
       |     |  +--rw Multilink?                   uint16
       |     +--:(nve)
       |     |  +--rw nve?                         uint16
       |     +--:(overlay)
       |     |  +--rw overlay?                     uint16
       |     +--:(Port-channel)
       |     |  +--rw Port-channel?                uint32
       |     +--:(Port-channel-subinterface)
       |     |  +--rw Port-channel-subinterface
       |     |     +--rw Port-channel?   string
       |     +--:(pseudowire)
       |     |  +--rw pseudowire?                  uint32
       |     +--:(SM)
       |     |  +--rw SM?                          string
       |     +--:(Cellular)
       |     |  +--rw Cellular?                    string
       |     +--:(Dialer)
       |     |  +--rw Dialer?                      string
       |     +--:(Serial)
       |     |  +--rw Serial?                      string
       |     +--:(Async)
       |     |  +--rw Async?                       string
       |     +--:(TenGigabitEthernet)
       |     |  +--rw TenGigabitEthernet?          string
       |     +--:(Tunnel)
       |     |  +--rw Tunnel?                      uint32
       |     +--:(Virtual-Template)
       |     |  +--rw Virtual-Template?            uint16
       |     +--:(Vlan)
       |     |  +--rw Vlan?                        uint16
       |     +--:(VirtualPortGroup)
       |     |  +--rw VirtualPortGroup?            uint16
       |     +--:(vasileft)
       |     |  +--rw vasileft?                    uint16
       |     +--:(vasiright)
       |     |  +--rw vasiright?                   uint16
       |     +--:(BD-VIF)
       |     |  +--rw BD-VIF?                      string
       |     +--:(MFR)
       |     |  +--rw MFR?                         uint32
       |     +--:(Serial-subinterface)
       |     |  +--rw Serial-subinterface
       |     |     +--rw Serial?   string
       |     +--:(Bundle)
       |        +--rw Bundle?                      uint32 {ios-features:cable-config}?
       +--rw policy
       |  +--rw (ipv4-ipv6)?
       |     +--:(ipv4-case)
       |     |  +--rw ipv4?   ios-types:ext-acl-type
       |     +--:(ipv6-case)
       |        +--rw ipv6?   string
       +--rw profile-option
       |  +--rw name?                   string
       |  +--rw (isakmp_profile-ikev2_profile-shared)?
       |  |  +--:(ikev2-profile-case)
       |  |  |  +--rw ikev2-profile?    string
       |  |  +--:(isakmp-profile-case)
       |  |  |  +--rw isakmp-profile?   string
       |  |  +--:(shared-case)
       |  |     +--rw shared?           empty
       |  +--rw psk?                    string
       o--rw profile?          string
       o--rw ikev2-profile?    string
  augment /ios:native/ios:interface/ios:Virtual-Template/ios-tun:tunnel/ios-tun:protection:
    +--rw dike {ios-features:crypto}?
    |  +--rw profile
    |     +--rw ikev2-profile?   string
    |     +--rw (local-remote)?
    |        +--:(local-case)
    |        |  +--rw local?     uint32
    |        |  +--rw remote1
    |        |     +--rw remote?   uint32
    |        +--:(remote-case)
    |           +--rw remote?    uint32
    +--rw ipsec {ios-features:crypto}?
       +--rw intiate?          empty
       +--rw local-address
       |  +--rw (interface-choice)?
       |     +--:(AppNav-Compress)
       |     |  +--rw AppNav-Compress?             uint16
       |     +--:(AppNav-UnCompress)
       |     |  +--rw AppNav-UnCompress?           uint16
       |     +--:(ATM)
       |     |  +--rw ATM?                         string
       |     +--:(ATM-subinterface)
       |     |  +--rw ATM-subinterface
       |     |     +--rw ATM?   string
       |     +--:(ATM-ACR)
       |     |  +--rw ATM-ACR?                     string
       |     +--:(ATM-ACRsubinterface)
       |     |  +--rw ATM-ACRsubinterface
       |     |     +--rw ATM-ACR?   string
       |     +--:(BDI)
       |     |  +--rw BDI?                         string
       |     +--:(CEM)
       |     |  +--rw CEM?                         string
       |     +--:(CEM-ACR)
       |     |  +--rw CEM-ACR?                     uint8
       |     +--:(Embedded-Service-Engine)
       |     |  +--rw Embedded-Service-Engine?     string
       |     +--:(Ethernet)
       |     |  +--rw Ethernet?                    string
       |     +--:(FastEthernet)
       |     |  +--rw FastEthernet?                string
       |     +--:(GigabitEthernet)
       |     |  +--rw GigabitEthernet?             string
       |     +--:(FiveGigabitEthernet)
       |     |  +--rw FiveGigabitEthernet?         string
       |     +--:(AppGigabitEthernet)
       |     |  +--rw AppGigabitEthernet?          string
       |     o--:(TwentyFiveGigabitEthernet)
       |     |  o--rw TwentyFiveGigabitEthernet?   string
       |     +--:(TwentyFiveGigE)
       |     |  +--rw TwentyFiveGigE?              string
       |     +--:(TwoGigabitEthernet)
       |     |  +--rw TwoGigabitEthernet?          string
       |     +--:(FortyGigabitEthernet)
       |     |  +--rw FortyGigabitEthernet?        string
       |     +--:(FiftyGigabitEthernet)
       |     |  +--rw FiftyGigabitEthernet?        string
       |     +--:(HundredGigE)
       |     |  +--rw HundredGigE?                 string
       |     +--:(L2LISP)
       |     |  +--rw L2LISP?                      string
       |     +--:(L2LISP-subinterface)
       |     |  +--rw L2LISP-subinterface
       |     |     +--rw L2LISP?   string
       |     +--:(LISP)
       |     |  +--rw LISP?                        string
       |     +--:(LISP-subinterface)
       |     |  +--rw LISP-subinterface
       |     |     +--rw LISP?   string
       |     +--:(Loopback)
       |     |  +--rw Loopback?                    uint32
       |     +--:(Multilink)
       |     |  +--rw Multilink?                   uint16
       |     +--:(nve)
       |     |  +--rw nve?                         uint16
       |     +--:(overlay)
       |     |  +--rw overlay?                     uint16
       |     +--:(Port-channel)
       |     |  +--rw Port-channel?                uint32
       |     +--:(Port-channel-subinterface)
       |     |  +--rw Port-channel-subinterface
       |     |     +--rw Port-channel?   string
       |     +--:(pseudowire)
       |     |  +--rw pseudowire?                  uint32
       |     +--:(SM)
       |     |  +--rw SM?                          string
       |     +--:(Cellular)
       |     |  +--rw Cellular?                    string
       |     +--:(Dialer)
       |     |  +--rw Dialer?                      string
       |     +--:(Serial)
       |     |  +--rw Serial?                      string
       |     +--:(Async)
       |     |  +--rw Async?                       string
       |     +--:(TenGigabitEthernet)
       |     |  +--rw TenGigabitEthernet?          string
       |     +--:(Tunnel)
       |     |  +--rw Tunnel?                      uint32
       |     +--:(Virtual-Template)
       |     |  +--rw Virtual-Template?            uint16
       |     +--:(Vlan)
       |     |  +--rw Vlan?                        uint16
       |     +--:(VirtualPortGroup)
       |     |  +--rw VirtualPortGroup?            uint16
       |     +--:(vasileft)
       |     |  +--rw vasileft?                    uint16
       |     +--:(vasiright)
       |     |  +--rw vasiright?                   uint16
       |     +--:(BD-VIF)
       |     |  +--rw BD-VIF?                      string
       |     +--:(MFR)
       |     |  +--rw MFR?                         uint32
       |     +--:(Serial-subinterface)
       |     |  +--rw Serial-subinterface
       |     |     +--rw Serial?   string
       |     +--:(Bundle)
       |        +--rw Bundle?                      uint32 {ios-features:cable-config}?
       +--rw policy
       |  +--rw (ipv4-ipv6)?
       |     +--:(ipv4-case)
       |     |  +--rw ipv4?   ios-types:ext-acl-type
       |     +--:(ipv6-case)
       |        +--rw ipv6?   string
       +--rw profile-option
       |  +--rw name?                   string
       |  +--rw (isakmp_profile-ikev2_profile-shared)?
       |  |  +--:(ikev2-profile-case)
       |  |  |  +--rw ikev2-profile?    string
       |  |  +--:(isakmp-profile-case)
       |  |  |  +--rw isakmp-profile?   string
       |  |  +--:(shared-case)
       |  |     +--rw shared?           empty
       |  +--rw psk?                    string
       o--rw profile?          string
       o--rw ikev2-profile?    string
  augment /ios:native/ios:interface/ios:FastEthernet:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:GigabitEthernet:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:TenGigabitEthernet:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:FiveGigabitEthernet:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:AppGigabitEthernet:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:TwentyFiveGigE:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:TwoGigabitEthernet:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:FortyGigabitEthernet:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:FiftyGigabitEthernet:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:HundredGigE:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:Loopback:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:LISP:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:Ethernet:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:Tunnel:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:Port-channel:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:Virtual-Template:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:Vlan:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:Virtual-PPP:
    +--rw crypto {ios-features:crypto}?
       +--rw map
       |  +--rw tag?          string
       |  +--rw redundancy?   string
       |  +--rw stateful?     empty
       +--rw ipsec
          +--rw df-bit?          enumeration
          +--rw fragmentation?   enumeration
  augment /ios:native/ios:interface/ios:FastEthernet/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:interface/ios:GigabitEthernet/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:interface/ios:TenGigabitEthernet/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:interface/ios:FiveGigabitEthernet/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:interface/ios:AppGigabitEthernet/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:interface/ios:TwentyFiveGigE/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:interface/ios:TwoGigabitEthernet/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:interface/ios:FortyGigabitEthernet/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:interface/ios:FiftyGigabitEthernet/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:interface/ios:HundredGigE/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:interface/ios:Loopback/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:interface/ios:Tunnel/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:interface/ios:Port-channel/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:interface/ios:Virtual-Template/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:interface/ios:Vlan/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:interface/ios:Virtual-PPP/ios:ipv6:
    +--rw crypto {ios-features:crypto}?
       +--rw map?   string
  augment /ios:native/ios:snmp-server/ios-snmp:enable/ios-snmp:enable-choice/ios-snmp:traps:
    +--rw gdoi!
       +--rw gm-incomplete-cfg?          empty
       +--rw gm-re-register?             empty
       +--rw gm-registration-complete?   empty
       +--rw gm-rekey-fail?              empty
       +--rw gm-rekey-rcvd?              empty
       +--rw gm-start-registration?      empty
       +--rw ks-gm-deleted?              empty
       +--rw ks-new-registration?        empty
       +--rw ks-no-rsa-keys?             empty
       +--rw ks-peer-reachable?          empty
       +--rw ks-peer-unreachable?        empty
       +--rw ks-reg-complete?            empty
       +--rw ks-rekey-pushed?            empty
       +--rw ks-role-change?             empty
  augment /ios:native/ios:monitor/ios:event-trace:
    +--rw crypto
       +--rw ikev2
       |  +--rw error!
       |  |  +--rw dump-file?    string
       |  |  +--rw size?         uint32
       |  |  +--rw stacktrace!
       |  |     +--rw depth?   uint8
       |  +--rw event!
       |  |  +--rw dump-file?    string
       |  |  +--rw size?         uint32
       |  |  +--rw stacktrace!
       |  |     +--rw depth?   uint8
       |  +--rw exception!
       |     +--rw dump-file?    string
       |     +--rw size?         uint32
       |     +--rw stacktrace!
       |        +--rw depth?   uint8
       +--rw ipsec
          +--rw error!
          |  +--rw dump-file?    string
          |  +--rw size?         uint32
          |  +--rw stacktrace!
          |     +--rw depth?   uint8
          +--rw event!
          |  +--rw dump-file?    string
          |  +--rw size?         uint32
          |  +--rw stacktrace!
          |     +--rw depth?   uint8
          +--rw exception!
             +--rw dump-file?    string
             +--rw size?         uint32
             +--rw stacktrace!
                +--rw depth?   uint8
  augment /ios:native/ios:monitor/ios:event-trace:
    +--rw gdoi
       +--rw coop!
       |  +--rw dump-file?    string
       |  +--rw size?         uint32
       |  +--rw stacktrace!
       |     +--rw depth?   uint8
       +--rw infra!
       |  +--rw dump-file?    string
       |  +--rw size?         uint32
       |  +--rw stacktrace!
       |     +--rw depth?   uint8
       +--rw registration!
       |  +--rw dump-file?    string
       |  +--rw size?         uint32
       |  +--rw stacktrace!
       |     +--rw depth?   uint8
       +--rw rekey!
          +--rw dump-file?    string
          +--rw size?         uint32
          +--rw stacktrace!
             +--rw depth?   uint8
  augment /ios:native/ios:monitor/ios:event-trace:
    +--rw dmvpn
       +--rw crypto-enable
       |  +--rw crypto?   boolean
       +--rw crypto-options
       |  +--rw crypto
       |     +--rw dump-file?    string
       |     +--rw size?         uint32
       |     +--rw stacktrace!
       |        +--rw depth?   uint8
       +--rw tunnel-enable
       |  +--rw tunnel?   boolean
       +--rw tunnel-options
       |  +--rw tunnel
       |     +--rw dump-file?    string
       |     +--rw size?         uint32
       |     +--rw stacktrace!
       |        +--rw depth?   uint8
       +--rw dump-file?        string
       +--rw nhrp
          +--rw error-enable
          |  +--rw error?   empty
          +--rw error-options
          |  +--rw error
          |     +--rw dump-file?    string
          |     +--rw size?         uint32
          |     +--rw stacktrace!
          |        +--rw depth?   uint8
          +--rw event-enable
          |  +--rw event?   empty
          +--rw event-options
          |  +--rw event
          |     +--rw dump-file?    string
          |     +--rw size?         uint32
          |     +--rw stacktrace!
          |        +--rw depth?   uint8
          +--rw exception-enable
          |  +--rw exception?   empty
          +--rw exception-options
             +--rw exception
                +--rw dump-file?    string
                +--rw size?         uint32
                +--rw stacktrace!
                   +--rw depth?   uint8
  augment /ios:native/ios:monitor/ios:event-trace:
    +--rw flexvpn
       +--rw crypto-enable
       |  +--rw crypto?   boolean
       +--rw crypto-options
       |  +--rw crypto
       |     +--rw dump-file?    string
       |     +--rw size?         uint32
       |     +--rw stacktrace!
       |        +--rw depth?   uint8
       +--rw tunnel-enable
       |  +--rw tunnel?   boolean
       +--rw tunnel-options
       |  +--rw tunnel
       |     +--rw dump-file?    string
       |     +--rw size?         uint32
       |     +--rw stacktrace!
       |        +--rw depth?   uint8
       +--rw dump-file?        string
       +--rw nhrp
          +--rw error-enable
          |  +--rw error?   empty
          +--rw error-options
          |  +--rw error
          |     +--rw dump-file?    string
          |     +--rw size?         uint32
          |     +--rw stacktrace!
          |        +--rw depth?   uint8
          +--rw event-enable
          |  +--rw event?   empty
          +--rw event-options
          |  +--rw event
          |     +--rw dump-file?    string
          |     +--rw size?         uint32
          |     +--rw stacktrace!
          |        +--rw depth?   uint8
          +--rw exception-enable
          |  +--rw exception?   empty
          +--rw exception-options
             +--rw exception
                +--rw dump-file?    string
                +--rw size?         uint32
                +--rw stacktrace!
                   +--rw depth?   uint8