See here: Load config missing firewall state config
Same issue, trying to apply a full configuration file on top of existing config and generating a diff with compare, sadly state established does not get applied, neither with " or without.
This is also an issue with route-maps, set large-community and set community both display this issue.
[policy route-map INTERNAL-OUT rule 30 set large-community]
- add "65534:5001:300"
+ replace ""
Also system service conntrack-sync accept-protocol udp is not able to be applied.
Further more it always adds the conntrack-modules:
+ conntrack {
+ modules {
+ ftp
+ h323
+ nfs
+ pptp
+ sip
+ sqlnet
+ tftp
+ }
+ }