juniper firewall rules parse tree -> vendor config