Can you add a replace attribute in the container for the prefix-lists matching /AUTO-*/, and see if the permissions work? The equivalent replace: tag in the text format works with a restricted login class when using netconf.
http://www.juniper.net/documentation/en_US/junos14.2/topics/reference/tag-summary/junos-xml-protocol-replace-attribute.html On Mon, Feb 22, 2016 at 9:46 PM, Chuck Anderson <c...@wpi.edu> wrote: > On Mon, Feb 22, 2016 at 09:08:04PM -0500, Jared Mauch wrote: > > > 1. "load replace" config with the new prefix list contents > > > 2. commit > > > > > > Try ‘load update’ first. > > > > That should be much faster than load replace. > > Yes, I see it is fast, but I can't figure out the right XML to do the > equivalent of "load update relative" in the CLI. If I leave off the > "relative", then the entire configuration is replaced (deleted), not > just the prefix-list. > > "show | compare | display xml" exists in 15.1, but not in 14.2 :-( > _______________________________________________ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp > _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp