Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[EOL/EOE] [NSM] What is supplemental CLI and how do I configure it ?



Article ID: KB22526 KB Last Updated: 18 Oct 2020Version: 2.0
Note: A product listed in this article has either reached hardware End of Life (EOL) OR software End of Engineering (EOE).  Refer to End of Life Products & Milestones for the EOL, EOE, and End of Support (EOS) dates.
This article provides information about supplemental CLI and how to configure it.
Supplemental CLI and how to configure it.
 Supplemental CLI:

You can, with the Supplemental CLI option, configure features on security devices that are not yet formally supported in NSM. When you perform an update, the specified CLI commands are sent unconditionally to the security device.

NSM does not validate whether or not these commands are sent successfully. If you edit the actual configuration on the device using the supplemental CLI, validation errors may occur.

Where to find supplemental CLI:

NSM GUI > Edit the device > Configuration > Advanced > Supplemental Cli

How to configure commands in supplemental CLI:


The priority ensures that you are able to define objects/policies/vpn settings or whatever in order, so that the object being referenced by a lower priority supplemental cli exists.

For example, if you have an address object that needs to be defined, then this must have a higher priority than the other added supplemental CLI that references it. Else the cli, when sent to the device, will be out of order and will fail.


You can disable / enable any particular supplemental cli by selecting this option.

Cli Content:

Paste the line of config here.

Sample command :
# set tcp-mss
Once you save it, this line of config will be included in the NSM database for this device /template. NSM will push it to the device on the next update.


You can add your comments, this would not be send to the device.

Note :

  • The supplemental cli option can also be configured on a ScreenOS template.

  • The supplemental cli option is not available for Junos devices.
Modification History:
2020-10-18: Tagged article for EOL/EOE.
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search