I just followed this workaround: when you use CLI policy, have a complete line of a command as a variable. So, when you configure the device, use the exclamation mark (!) so that it is ignored in the config.CLI Template:interface {{IF Name}}descript...