junipermist.device.Switch
Explore with Pulumi AI
This resource manages the Switch configuration. It can be used to define specific configuration at the device level or to override Org/Site Network template settings.
Example Usage
Coming soon!
Coming soon!
Coming soon!
Coming soon!
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.device.Switch;
import com.pulumi.junipermist.device.SwitchArgs;
import com.pulumi.junipermist.device.inputs.SwitchIpConfigArgs;
import com.pulumi.junipermist.device.inputs.SwitchMistNacArgs;
import com.pulumi.junipermist.device.inputs.SwitchDhcpdConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var switchOne = new Switch("switchOne", SwitchArgs.builder()
.name("switch_one")
.deviceId(inventory.devices()[1].id())
.siteId(inventory.devices()[1].siteId())
.managed(true)
.role("test")
.networks(Map.of("prx", Map.of("vlanId", "18")))
.portUsages(Map.of("prx", Map.ofEntries(
Map.entry("mode", "trunk"),
Map.entry("disabled", false),
Map.entry("portNetwork", "default"),
Map.entry("stpEdge", false),
Map.entry("allNetworks", false),
Map.entry("networks",
"default",
"prx"),
Map.entry("speed", "auto"),
Map.entry("duplex", "auto"),
Map.entry("macLimit", 0),
Map.entry("persistMac", false),
Map.entry("poeDisabled", false),
Map.entry("enableQos", false),
Map.entry("stormControl", ),
Map.entry("description", "")
)))
.ipConfig(SwitchIpConfigArgs.builder()
.type("static")
.ip("10.3.18.99")
.netmask("255.255.255.0")
.network("prx")
.gateway("10.3.18.11")
.build())
.portConfig(Map.ofEntries(
Map.entry("ge-0/0/0", Map.ofEntries(
Map.entry("usage", "prx"),
Map.entry("critical", false),
Map.entry("noLocalOverwrite", true)
)),
Map.entry("ge-0/0/11", Map.ofEntries(
Map.entry("usage", "default"),
Map.entry("portNetwork", "prx"),
Map.entry("critical", false)
))
))
.portMirroring(Map.of("test", Map.ofEntries(
Map.entry("outputPortId", "ge-0/0/10"),
Map.entry("inputPortIdsIngress", "ge-0/0/2"),
Map.entry("inputPortIdsEgress", "ge-0/0/2"),
Map.entry("inputNetworksIngress", "default")
)))
.mistNac(SwitchMistNacArgs.builder()
.enabled(true)
.build())
.dhcpdConfig(SwitchDhcpdConfigArgs.builder()
.enabled(true)
%!v(PANIC=Format method: interface conversion: model.Expression is *model.TemplateExpression, not *model.LiteralValueExpression))
.build());
}
}
resources:
switchOne:
type: junipermist:device:Switch
name: switch_one
properties:
name: switch_one
deviceId: ${inventory.devices[1].id}
siteId: ${inventory.devices[1].siteId}
managed: true
role: test
networks:
prx:
vlanId: '18'
portUsages:
prx:
mode: trunk
disabled: false
portNetwork: default
stpEdge: false
allNetworks: false
networks:
- default
- prx
speed: auto
duplex: auto
macLimit: 0
persistMac: false
poeDisabled: false
enableQos: false
stormControl: {}
description:
ipConfig:
type: static
ip: 10.3.18.99
netmask: 255.255.255.0
network: prx
gateway: 10.3.18.11
portConfig:
ge-0/0/0:
usage: prx
critical: false
noLocalOverwrite: true
ge-0/0/11:
usage: default
portNetwork: prx
critical: false
portMirroring:
test:
outputPortId: ge-0/0/10
inputPortIdsIngress:
- ge-0/0/2
inputPortIdsEgress:
- ge-0/0/2
inputNetworksIngress:
- default
mistNac:
enabled: true
dhcpdConfig:
enabled: true
prx:
type: relay
servers:
- 1.2.3.4
Create Switch Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Switch(name: string, args: SwitchArgs, opts?: CustomResourceOptions);
@overload
def Switch(resource_name: str,
args: SwitchArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Switch(resource_name: str,
opts: Optional[ResourceOptions] = None,
device_id: Optional[str] = None,
site_id: Optional[str] = None,
extra_routes: Optional[Mapping[str, SwitchExtraRoutesArgs]] = None,
virtual_chassis: Optional[SwitchVirtualChassisArgs] = None,
dhcp_snooping: Optional[SwitchDhcpSnoopingArgs] = None,
dhcpd_config: Optional[SwitchDhcpdConfigArgs] = None,
disable_auto_config: Optional[bool] = None,
dns_servers: Optional[Sequence[str]] = None,
oob_ip_config: Optional[SwitchOobIpConfigArgs] = None,
evpn_config: Optional[SwitchEvpnConfigArgs] = None,
acl_policies: Optional[Sequence[SwitchAclPolicyArgs]] = None,
extra_routes6: Optional[Mapping[str, SwitchExtraRoutes6Args]] = None,
ip_config: Optional[SwitchIpConfigArgs] = None,
managed: Optional[bool] = None,
map_id: Optional[str] = None,
mist_nac: Optional[SwitchMistNacArgs] = None,
name: Optional[str] = None,
networks: Optional[Mapping[str, SwitchNetworksArgs]] = None,
notes: Optional[str] = None,
other_ip_configs: Optional[Mapping[str, SwitchOtherIpConfigsArgs]] = None,
dns_suffixes: Optional[Sequence[str]] = None,
additional_config_cmds: Optional[Sequence[str]] = None,
ntp_servers: Optional[Sequence[str]] = None,
port_config: Optional[Mapping[str, SwitchPortConfigArgs]] = None,
port_mirroring: Optional[Mapping[str, SwitchPortMirroringArgs]] = None,
port_usages: Optional[Mapping[str, SwitchPortUsagesArgs]] = None,
radius_config: Optional[SwitchRadiusConfigArgs] = None,
remote_syslog: Optional[SwitchRemoteSyslogArgs] = None,
role: Optional[str] = None,
router_id: Optional[str] = None,
acl_tags: Optional[Mapping[str, SwitchAclTagsArgs]] = None,
snmp_config: Optional[SwitchSnmpConfigArgs] = None,
stp_config: Optional[SwitchStpConfigArgs] = None,
switch_mgmt: Optional[SwitchSwitchMgmtArgs] = None,
use_router_id_as_source_ip: Optional[bool] = None,
vars: Optional[Mapping[str, str]] = None,
ospf_areas: Optional[Mapping[str, SwitchOspfAreasArgs]] = None,
vrf_config: Optional[SwitchVrfConfigArgs] = None,
vrf_instances: Optional[Mapping[str, SwitchVrfInstancesArgs]] = None,
vrrp_config: Optional[SwitchVrrpConfigArgs] = None,
x: Optional[float] = None,
y: Optional[float] = None)
func NewSwitch(ctx *Context, name string, args SwitchArgs, opts ...ResourceOption) (*Switch, error)
public Switch(string name, SwitchArgs args, CustomResourceOptions? opts = null)
public Switch(String name, SwitchArgs args)
public Switch(String name, SwitchArgs args, CustomResourceOptions options)
type: junipermist:device:Switch
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args SwitchArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args SwitchArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args SwitchArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args SwitchArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args SwitchArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var switchResource = new JuniperMist.Device.Switch("switchResource", new()
{
DeviceId = "string",
SiteId = "string",
ExtraRoutes =
{
{ "string", new JuniperMist.Device.Inputs.SwitchExtraRoutesArgs
{
Via = "string",
Discard = false,
Metric = 0,
NextQualified =
{
{ "string", new JuniperMist.Device.Inputs.SwitchExtraRoutesNextQualifiedArgs
{
Metric = 0,
Preference = 0,
} },
},
NoResolve = false,
Preference = 0,
} },
},
VirtualChassis = new JuniperMist.Device.Inputs.SwitchVirtualChassisArgs
{
Members = new[]
{
new JuniperMist.Device.Inputs.SwitchVirtualChassisMemberArgs
{
Mac = "string",
MemberId = 0,
VcRole = "string",
},
},
Preprovisioned = false,
},
DhcpSnooping = new JuniperMist.Device.Inputs.SwitchDhcpSnoopingArgs
{
AllNetworks = false,
EnableArpSpoofCheck = false,
EnableIpSourceGuard = false,
Enabled = false,
Networks = new[]
{
"string",
},
},
DhcpdConfig = new JuniperMist.Device.Inputs.SwitchDhcpdConfigArgs
{
Config =
{
{ "string", new JuniperMist.Device.Inputs.SwitchDhcpdConfigConfigArgs
{
DnsServers = new[]
{
"string",
},
DnsSuffixes = new[]
{
"string",
},
FixedBindings =
{
{ "string", new JuniperMist.Device.Inputs.SwitchDhcpdConfigConfigFixedBindingsArgs
{
Ip = "string",
Name = "string",
} },
},
Gateway = "string",
IpEnd = "string",
IpEnd6 = "string",
IpStart = "string",
IpStart6 = "string",
LeaseTime = 0,
Options =
{
{ "string", new JuniperMist.Device.Inputs.SwitchDhcpdConfigConfigOptionsArgs
{
Type = "string",
Value = "string",
} },
},
ServerIdOverride = false,
Servers = new[]
{
"string",
},
Servers6s = new[]
{
"string",
},
Type = "string",
Type6 = "string",
VendorEncapulated =
{
{ "string", new JuniperMist.Device.Inputs.SwitchDhcpdConfigConfigVendorEncapulatedArgs
{
Type = "string",
Value = "string",
} },
},
} },
},
Enabled = false,
},
DisableAutoConfig = false,
DnsServers = new[]
{
"string",
},
OobIpConfig = new JuniperMist.Device.Inputs.SwitchOobIpConfigArgs
{
Gateway = "string",
Ip = "string",
Netmask = "string",
Network = "string",
Type = "string",
UseMgmtVrf = false,
UseMgmtVrfForHostOut = false,
},
EvpnConfig = new JuniperMist.Device.Inputs.SwitchEvpnConfigArgs
{
Enabled = false,
Role = "string",
},
AclPolicies = new[]
{
new JuniperMist.Device.Inputs.SwitchAclPolicyArgs
{
Actions = new[]
{
new JuniperMist.Device.Inputs.SwitchAclPolicyActionArgs
{
DstTag = "string",
Action = "string",
},
},
Name = "string",
SrcTags = new[]
{
"string",
},
},
},
ExtraRoutes6 =
{
{ "string", new JuniperMist.Device.Inputs.SwitchExtraRoutes6Args
{
Via = "string",
Discard = false,
Metric = 0,
NextQualified =
{
{ "string", new JuniperMist.Device.Inputs.SwitchExtraRoutes6NextQualifiedArgs
{
Metric = 0,
Preference = 0,
} },
},
NoResolve = false,
Preference = 0,
} },
},
IpConfig = new JuniperMist.Device.Inputs.SwitchIpConfigArgs
{
Dns = new[]
{
"string",
},
DnsSuffixes = new[]
{
"string",
},
Gateway = "string",
Ip = "string",
Netmask = "string",
Network = "string",
Type = "string",
},
Managed = false,
MapId = "string",
MistNac = new JuniperMist.Device.Inputs.SwitchMistNacArgs
{
Enabled = false,
Network = "string",
},
Name = "string",
Networks =
{
{ "string", new JuniperMist.Device.Inputs.SwitchNetworksArgs
{
VlanId = "string",
Isolation = false,
IsolationVlanId = "string",
Subnet = "string",
} },
},
Notes = "string",
OtherIpConfigs =
{
{ "string", new JuniperMist.Device.Inputs.SwitchOtherIpConfigsArgs
{
EvpnAnycast = false,
Ip = "string",
Ip6 = "string",
Netmask = "string",
Netmask6 = "string",
Type = "string",
Type6 = "string",
} },
},
DnsSuffixes = new[]
{
"string",
},
AdditionalConfigCmds = new[]
{
"string",
},
NtpServers = new[]
{
"string",
},
PortConfig =
{
{ "string", new JuniperMist.Device.Inputs.SwitchPortConfigArgs
{
Usage = "string",
DisableAutoneg = false,
DynamicUsage = "string",
Aggregated = false,
Critical = false,
Description = "string",
AeDisableLacp = false,
Duplex = "string",
AeLacpSlow = false,
Esilag = false,
Mtu = 0,
NoLocalOverwrite = false,
PoeDisabled = false,
Speed = "string",
AeIdx = 0,
} },
},
PortMirroring =
{
{ "string", new JuniperMist.Device.Inputs.SwitchPortMirroringArgs
{
InputNetworksIngresses = new[]
{
"string",
},
InputPortIdsEgresses = new[]
{
"string",
},
InputPortIdsIngresses = new[]
{
"string",
},
OutputNetwork = "string",
OutputPortId = "string",
} },
},
PortUsages =
{
{ "string", new JuniperMist.Device.Inputs.SwitchPortUsagesArgs
{
AllNetworks = false,
AllowDhcpd = false,
AllowMultipleSupplicants = false,
BypassAuthWhenServerDown = false,
BypassAuthWhenServerDownForUnkonwnClient = false,
Description = "string",
DisableAutoneg = false,
Disabled = false,
Duplex = "string",
DynamicVlanNetworks = new[]
{
"string",
},
EnableMacAuth = false,
EnableQos = false,
GuestNetwork = "string",
InterSwitchLink = false,
MacAuthOnly = false,
MacAuthPreferred = false,
MacAuthProtocol = "string",
MacLimit = 0,
Mode = "string",
Mtu = 0,
Networks = new[]
{
"string",
},
PersistMac = false,
PoeDisabled = false,
PortAuth = "string",
PortNetwork = "string",
ReauthInterval = 0,
ResetDefaultWhen = "string",
Rules = new[]
{
new JuniperMist.Device.Inputs.SwitchPortUsagesRuleArgs
{
Src = "string",
Equals = "string",
EqualsAnies = new[]
{
"string",
},
Expression = "string",
Usage = "string",
},
},
ServerFailNetwork = "string",
ServerRejectNetwork = "string",
Speed = "string",
StormControl = new JuniperMist.Device.Inputs.SwitchPortUsagesStormControlArgs
{
NoBroadcast = false,
NoMulticast = false,
NoRegisteredMulticast = false,
NoUnknownUnicast = false,
Percentage = 0,
},
StpEdge = false,
StpNoRootPort = false,
StpP2p = false,
VoipNetwork = "string",
} },
},
RadiusConfig = new JuniperMist.Device.Inputs.SwitchRadiusConfigArgs
{
AcctInterimInterval = 0,
AcctServers = new[]
{
new JuniperMist.Device.Inputs.SwitchRadiusConfigAcctServerArgs
{
Host = "string",
Secret = "string",
KeywrapEnabled = false,
KeywrapFormat = "string",
KeywrapKek = "string",
KeywrapMack = "string",
Port = 0,
},
},
AuthServers = new[]
{
new JuniperMist.Device.Inputs.SwitchRadiusConfigAuthServerArgs
{
Host = "string",
Secret = "string",
KeywrapEnabled = false,
KeywrapFormat = "string",
KeywrapKek = "string",
KeywrapMack = "string",
Port = 0,
RequireMessageAuthenticator = false,
},
},
AuthServersRetries = 0,
AuthServersTimeout = 0,
CoaEnabled = false,
CoaPort = 0,
Network = "string",
SourceIp = "string",
},
RemoteSyslog = new JuniperMist.Device.Inputs.SwitchRemoteSyslogArgs
{
Archive = new JuniperMist.Device.Inputs.SwitchRemoteSyslogArchiveArgs
{
Files = 0,
Size = "string",
},
Console = new JuniperMist.Device.Inputs.SwitchRemoteSyslogConsoleArgs
{
Contents = new[]
{
new JuniperMist.Device.Inputs.SwitchRemoteSyslogConsoleContentArgs
{
Facility = "string",
Severity = "string",
},
},
},
Enabled = false,
Files = new[]
{
new JuniperMist.Device.Inputs.SwitchRemoteSyslogFileArgs
{
Archive = new JuniperMist.Device.Inputs.SwitchRemoteSyslogFileArchiveArgs
{
Files = 0,
Size = "string",
},
Contents = new[]
{
new JuniperMist.Device.Inputs.SwitchRemoteSyslogFileContentArgs
{
Facility = "string",
Severity = "string",
},
},
ExplicitPriority = false,
File = "string",
Match = "string",
StructuredData = false,
},
},
Network = "string",
SendToAllServers = false,
Servers = new[]
{
new JuniperMist.Device.Inputs.SwitchRemoteSyslogServerArgs
{
Contents = new[]
{
new JuniperMist.Device.Inputs.SwitchRemoteSyslogServerContentArgs
{
Facility = "string",
Severity = "string",
},
},
ExplicitPriority = false,
Facility = "string",
Host = "string",
Match = "string",
Port = 0,
Protocol = "string",
RoutingInstance = "string",
Severity = "string",
SourceAddress = "string",
StructuredData = false,
Tag = "string",
},
},
TimeFormat = "string",
Users = new[]
{
new JuniperMist.Device.Inputs.SwitchRemoteSyslogUserArgs
{
Contents = new[]
{
new JuniperMist.Device.Inputs.SwitchRemoteSyslogUserContentArgs
{
Facility = "string",
Severity = "string",
},
},
Match = "string",
User = "string",
},
},
},
Role = "string",
RouterId = "string",
AclTags =
{
{ "string", new JuniperMist.Device.Inputs.SwitchAclTagsArgs
{
Type = "string",
GbpTag = 0,
Macs = new[]
{
"string",
},
Network = "string",
RadiusGroup = "string",
Specs = new[]
{
new JuniperMist.Device.Inputs.SwitchAclTagsSpecArgs
{
PortRange = "string",
Protocol = "string",
},
},
Subnets = new[]
{
"string",
},
} },
},
SnmpConfig = new JuniperMist.Device.Inputs.SwitchSnmpConfigArgs
{
ClientLists = new[]
{
new JuniperMist.Device.Inputs.SwitchSnmpConfigClientListArgs
{
ClientListName = "string",
Clients = new[]
{
"string",
},
},
},
Contact = "string",
Description = "string",
Enabled = false,
EngineId = "string",
Location = "string",
Name = "string",
Network = "string",
TrapGroups = new[]
{
new JuniperMist.Device.Inputs.SwitchSnmpConfigTrapGroupArgs
{
Categories = new[]
{
"string",
},
GroupName = "string",
Targets = new[]
{
"string",
},
Version = "string",
},
},
V2cConfigs = new[]
{
new JuniperMist.Device.Inputs.SwitchSnmpConfigV2cConfigArgs
{
Authorization = "string",
ClientListName = "string",
CommunityName = "string",
View = "string",
},
},
V3Config = new JuniperMist.Device.Inputs.SwitchSnmpConfigV3ConfigArgs
{
Notifies = new[]
{
new JuniperMist.Device.Inputs.SwitchSnmpConfigV3ConfigNotifyArgs
{
Name = "string",
Tag = "string",
Type = "string",
},
},
NotifyFilters = new[]
{
new JuniperMist.Device.Inputs.SwitchSnmpConfigV3ConfigNotifyFilterArgs
{
Contents = new[]
{
new JuniperMist.Device.Inputs.SwitchSnmpConfigV3ConfigNotifyFilterContentArgs
{
Include = false,
Oid = "string",
},
},
ProfileName = "string",
},
},
TargetAddresses = new[]
{
new JuniperMist.Device.Inputs.SwitchSnmpConfigV3ConfigTargetAddressArgs
{
Address = "string",
AddressMask = "string",
Port = 0,
TagList = "string",
TargetAddressName = "string",
TargetParameters = "string",
},
},
TargetParameters = new[]
{
new JuniperMist.Device.Inputs.SwitchSnmpConfigV3ConfigTargetParameterArgs
{
MessageProcessingModel = "string",
Name = "string",
NotifyFilter = "string",
SecurityLevel = "string",
SecurityModel = "string",
SecurityName = "string",
},
},
Usm = new JuniperMist.Device.Inputs.SwitchSnmpConfigV3ConfigUsmArgs
{
EngineType = "string",
Engineid = "string",
Users = new[]
{
new JuniperMist.Device.Inputs.SwitchSnmpConfigV3ConfigUsmUserArgs
{
AuthenticationPassword = "string",
AuthenticationType = "string",
EncryptionPassword = "string",
EncryptionType = "string",
Name = "string",
},
},
},
Vacm = new JuniperMist.Device.Inputs.SwitchSnmpConfigV3ConfigVacmArgs
{
Accesses = new[]
{
new JuniperMist.Device.Inputs.SwitchSnmpConfigV3ConfigVacmAccessArgs
{
GroupName = "string",
PrefixLists = new[]
{
new JuniperMist.Device.Inputs.SwitchSnmpConfigV3ConfigVacmAccessPrefixListArgs
{
ContextPrefix = "string",
NotifyView = "string",
ReadView = "string",
SecurityLevel = "string",
SecurityModel = "string",
Type = "string",
WriteView = "string",
},
},
},
},
SecurityToGroup = new JuniperMist.Device.Inputs.SwitchSnmpConfigV3ConfigVacmSecurityToGroupArgs
{
Contents = new[]
{
new JuniperMist.Device.Inputs.SwitchSnmpConfigV3ConfigVacmSecurityToGroupContentArgs
{
Group = "string",
SecurityName = "string",
},
},
SecurityModel = "string",
},
},
},
Views = new[]
{
new JuniperMist.Device.Inputs.SwitchSnmpConfigViewArgs
{
Include = false,
Oid = "string",
ViewName = "string",
},
},
},
StpConfig = new JuniperMist.Device.Inputs.SwitchStpConfigArgs
{
VstpEnabled = false,
},
SwitchMgmt = new JuniperMist.Device.Inputs.SwitchSwitchMgmtArgs
{
ApAffinityThreshold = 0,
CliBanner = "string",
CliIdleTimeout = 0,
ConfigRevertTimer = 0,
DhcpOptionFqdn = false,
DisableOobDownAlarm = false,
LocalAccounts =
{
{ "string", new JuniperMist.Device.Inputs.SwitchSwitchMgmtLocalAccountsArgs
{
Password = "string",
Role = "string",
} },
},
MxedgeProxyHost = "string",
MxedgeProxyPort = 0,
ProtectRe = new JuniperMist.Device.Inputs.SwitchSwitchMgmtProtectReArgs
{
AllowedServices = new[]
{
"string",
},
Customs = new[]
{
new JuniperMist.Device.Inputs.SwitchSwitchMgmtProtectReCustomArgs
{
Subnets = new[]
{
"string",
},
PortRange = "string",
Protocol = "string",
},
},
Enabled = false,
TrustedHosts = new[]
{
"string",
},
},
RootPassword = "string",
Tacacs = new JuniperMist.Device.Inputs.SwitchSwitchMgmtTacacsArgs
{
AcctServers = new[]
{
new JuniperMist.Device.Inputs.SwitchSwitchMgmtTacacsAcctServerArgs
{
Host = "string",
Port = "string",
Secret = "string",
Timeout = 0,
},
},
DefaultRole = "string",
Enabled = false,
Network = "string",
TacplusServers = new[]
{
new JuniperMist.Device.Inputs.SwitchSwitchMgmtTacacsTacplusServerArgs
{
Host = "string",
Port = "string",
Secret = "string",
Timeout = 0,
},
},
},
UseMxedgeProxy = false,
},
UseRouterIdAsSourceIp = false,
Vars =
{
{ "string", "string" },
},
OspfAreas =
{
{ "string", new JuniperMist.Device.Inputs.SwitchOspfAreasArgs
{
Networks =
{
{ "string", new JuniperMist.Device.Inputs.SwitchOspfAreasNetworksArgs
{
AuthKeys =
{
{ "string", "string" },
},
AuthPassword = "string",
AuthType = "string",
BfdMinimumInterval = 0,
DeadInterval = 0,
ExportPolicy = "string",
HelloInterval = 0,
ImportPolicy = "string",
InterfaceType = "string",
Metric = 0,
NoReadvertiseToOverlay = false,
Passive = false,
} },
},
IncludeLoopback = false,
Type = "string",
} },
},
VrfConfig = new JuniperMist.Device.Inputs.SwitchVrfConfigArgs
{
Enabled = false,
},
VrfInstances =
{
{ "string", new JuniperMist.Device.Inputs.SwitchVrfInstancesArgs
{
Networks = new[]
{
"string",
},
VrfExtraRoutes =
{
{ "string", new JuniperMist.Device.Inputs.SwitchVrfInstancesVrfExtraRoutesArgs
{
Via = "string",
} },
},
} },
},
VrrpConfig = new JuniperMist.Device.Inputs.SwitchVrrpConfigArgs
{
Enabled = false,
Groups =
{
{ "string", new JuniperMist.Device.Inputs.SwitchVrrpConfigGroupsArgs
{
Priority = 0,
} },
},
},
X = 0,
Y = 0,
});
example, err := device.NewSwitch(ctx, "switchResource", &device.SwitchArgs{
DeviceId: pulumi.String("string"),
SiteId: pulumi.String("string"),
ExtraRoutes: device.SwitchExtraRoutesMap{
"string": &device.SwitchExtraRoutesArgs{
Via: pulumi.String("string"),
Discard: pulumi.Bool(false),
Metric: pulumi.Int(0),
NextQualified: device.SwitchExtraRoutesNextQualifiedMap{
"string": &device.SwitchExtraRoutesNextQualifiedArgs{
Metric: pulumi.Int(0),
Preference: pulumi.Int(0),
},
},
NoResolve: pulumi.Bool(false),
Preference: pulumi.Int(0),
},
},
VirtualChassis: &device.SwitchVirtualChassisArgs{
Members: device.SwitchVirtualChassisMemberArray{
&device.SwitchVirtualChassisMemberArgs{
Mac: pulumi.String("string"),
MemberId: pulumi.Int(0),
VcRole: pulumi.String("string"),
},
},
Preprovisioned: pulumi.Bool(false),
},
DhcpSnooping: &device.SwitchDhcpSnoopingArgs{
AllNetworks: pulumi.Bool(false),
EnableArpSpoofCheck: pulumi.Bool(false),
EnableIpSourceGuard: pulumi.Bool(false),
Enabled: pulumi.Bool(false),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
},
DhcpdConfig: &device.SwitchDhcpdConfigArgs{
Config: device.SwitchDhcpdConfigConfigMap{
"string": &device.SwitchDhcpdConfigConfigArgs{
DnsServers: pulumi.StringArray{
pulumi.String("string"),
},
DnsSuffixes: pulumi.StringArray{
pulumi.String("string"),
},
FixedBindings: device.SwitchDhcpdConfigConfigFixedBindingsMap{
"string": &device.SwitchDhcpdConfigConfigFixedBindingsArgs{
Ip: pulumi.String("string"),
Name: pulumi.String("string"),
},
},
Gateway: pulumi.String("string"),
IpEnd: pulumi.String("string"),
IpEnd6: pulumi.String("string"),
IpStart: pulumi.String("string"),
IpStart6: pulumi.String("string"),
LeaseTime: pulumi.Int(0),
Options: device.SwitchDhcpdConfigConfigOptionsMap{
"string": &device.SwitchDhcpdConfigConfigOptionsArgs{
Type: pulumi.String("string"),
Value: pulumi.String("string"),
},
},
ServerIdOverride: pulumi.Bool(false),
Servers: pulumi.StringArray{
pulumi.String("string"),
},
Servers6s: pulumi.StringArray{
pulumi.String("string"),
},
Type: pulumi.String("string"),
Type6: pulumi.String("string"),
VendorEncapulated: device.SwitchDhcpdConfigConfigVendorEncapulatedMap{
"string": &device.SwitchDhcpdConfigConfigVendorEncapulatedArgs{
Type: pulumi.String("string"),
Value: pulumi.String("string"),
},
},
},
},
Enabled: pulumi.Bool(false),
},
DisableAutoConfig: pulumi.Bool(false),
DnsServers: pulumi.StringArray{
pulumi.String("string"),
},
OobIpConfig: &device.SwitchOobIpConfigArgs{
Gateway: pulumi.String("string"),
Ip: pulumi.String("string"),
Netmask: pulumi.String("string"),
Network: pulumi.String("string"),
Type: pulumi.String("string"),
UseMgmtVrf: pulumi.Bool(false),
UseMgmtVrfForHostOut: pulumi.Bool(false),
},
EvpnConfig: &device.SwitchEvpnConfigArgs{
Enabled: pulumi.Bool(false),
Role: pulumi.String("string"),
},
AclPolicies: device.SwitchAclPolicyArray{
&device.SwitchAclPolicyArgs{
Actions: device.SwitchAclPolicyActionArray{
&device.SwitchAclPolicyActionArgs{
DstTag: pulumi.String("string"),
Action: pulumi.String("string"),
},
},
Name: pulumi.String("string"),
SrcTags: pulumi.StringArray{
pulumi.String("string"),
},
},
},
ExtraRoutes6: device.SwitchExtraRoutes6Map{
"string": &device.SwitchExtraRoutes6Args{
Via: pulumi.String("string"),
Discard: pulumi.Bool(false),
Metric: pulumi.Int(0),
NextQualified: device.SwitchExtraRoutes6NextQualifiedMap{
"string": &device.SwitchExtraRoutes6NextQualifiedArgs{
Metric: pulumi.Int(0),
Preference: pulumi.Int(0),
},
},
NoResolve: pulumi.Bool(false),
Preference: pulumi.Int(0),
},
},
IpConfig: &device.SwitchIpConfigArgs{
Dns: pulumi.StringArray{
pulumi.String("string"),
},
DnsSuffixes: pulumi.StringArray{
pulumi.String("string"),
},
Gateway: pulumi.String("string"),
Ip: pulumi.String("string"),
Netmask: pulumi.String("string"),
Network: pulumi.String("string"),
Type: pulumi.String("string"),
},
Managed: pulumi.Bool(false),
MapId: pulumi.String("string"),
MistNac: &device.SwitchMistNacArgs{
Enabled: pulumi.Bool(false),
Network: pulumi.String("string"),
},
Name: pulumi.String("string"),
Networks: device.SwitchNetworksMap{
"string": &device.SwitchNetworksArgs{
VlanId: pulumi.String("string"),
Isolation: pulumi.Bool(false),
IsolationVlanId: pulumi.String("string"),
Subnet: pulumi.String("string"),
},
},
Notes: pulumi.String("string"),
OtherIpConfigs: device.SwitchOtherIpConfigsMap{
"string": &device.SwitchOtherIpConfigsArgs{
EvpnAnycast: pulumi.Bool(false),
Ip: pulumi.String("string"),
Ip6: pulumi.String("string"),
Netmask: pulumi.String("string"),
Netmask6: pulumi.String("string"),
Type: pulumi.String("string"),
Type6: pulumi.String("string"),
},
},
DnsSuffixes: pulumi.StringArray{
pulumi.String("string"),
},
AdditionalConfigCmds: pulumi.StringArray{
pulumi.String("string"),
},
NtpServers: pulumi.StringArray{
pulumi.String("string"),
},
PortConfig: device.SwitchPortConfigMap{
"string": &device.SwitchPortConfigArgs{
Usage: pulumi.String("string"),
DisableAutoneg: pulumi.Bool(false),
DynamicUsage: pulumi.String("string"),
Aggregated: pulumi.Bool(false),
Critical: pulumi.Bool(false),
Description: pulumi.String("string"),
AeDisableLacp: pulumi.Bool(false),
Duplex: pulumi.String("string"),
AeLacpSlow: pulumi.Bool(false),
Esilag: pulumi.Bool(false),
Mtu: pulumi.Int(0),
NoLocalOverwrite: pulumi.Bool(false),
PoeDisabled: pulumi.Bool(false),
Speed: pulumi.String("string"),
AeIdx: pulumi.Int(0),
},
},
PortMirroring: device.SwitchPortMirroringMap{
"string": &device.SwitchPortMirroringArgs{
InputNetworksIngresses: pulumi.StringArray{
pulumi.String("string"),
},
InputPortIdsEgresses: pulumi.StringArray{
pulumi.String("string"),
},
InputPortIdsIngresses: pulumi.StringArray{
pulumi.String("string"),
},
OutputNetwork: pulumi.String("string"),
OutputPortId: pulumi.String("string"),
},
},
PortUsages: device.SwitchPortUsagesMap{
"string": &device.SwitchPortUsagesArgs{
AllNetworks: pulumi.Bool(false),
AllowDhcpd: pulumi.Bool(false),
AllowMultipleSupplicants: pulumi.Bool(false),
BypassAuthWhenServerDown: pulumi.Bool(false),
BypassAuthWhenServerDownForUnkonwnClient: pulumi.Bool(false),
Description: pulumi.String("string"),
DisableAutoneg: pulumi.Bool(false),
Disabled: pulumi.Bool(false),
Duplex: pulumi.String("string"),
DynamicVlanNetworks: pulumi.StringArray{
pulumi.String("string"),
},
EnableMacAuth: pulumi.Bool(false),
EnableQos: pulumi.Bool(false),
GuestNetwork: pulumi.String("string"),
InterSwitchLink: pulumi.Bool(false),
MacAuthOnly: pulumi.Bool(false),
MacAuthPreferred: pulumi.Bool(false),
MacAuthProtocol: pulumi.String("string"),
MacLimit: pulumi.Int(0),
Mode: pulumi.String("string"),
Mtu: pulumi.Int(0),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
PersistMac: pulumi.Bool(false),
PoeDisabled: pulumi.Bool(false),
PortAuth: pulumi.String("string"),
PortNetwork: pulumi.String("string"),
ReauthInterval: pulumi.Int(0),
ResetDefaultWhen: pulumi.String("string"),
Rules: device.SwitchPortUsagesRuleArray{
&device.SwitchPortUsagesRuleArgs{
Src: pulumi.String("string"),
Equals: pulumi.String("string"),
EqualsAnies: pulumi.StringArray{
pulumi.String("string"),
},
Expression: pulumi.String("string"),
Usage: pulumi.String("string"),
},
},
ServerFailNetwork: pulumi.String("string"),
ServerRejectNetwork: pulumi.String("string"),
Speed: pulumi.String("string"),
StormControl: &device.SwitchPortUsagesStormControlArgs{
NoBroadcast: pulumi.Bool(false),
NoMulticast: pulumi.Bool(false),
NoRegisteredMulticast: pulumi.Bool(false),
NoUnknownUnicast: pulumi.Bool(false),
Percentage: pulumi.Int(0),
},
StpEdge: pulumi.Bool(false),
StpNoRootPort: pulumi.Bool(false),
StpP2p: pulumi.Bool(false),
VoipNetwork: pulumi.String("string"),
},
},
RadiusConfig: &device.SwitchRadiusConfigArgs{
AcctInterimInterval: pulumi.Int(0),
AcctServers: device.SwitchRadiusConfigAcctServerArray{
&device.SwitchRadiusConfigAcctServerArgs{
Host: pulumi.String("string"),
Secret: pulumi.String("string"),
KeywrapEnabled: pulumi.Bool(false),
KeywrapFormat: pulumi.String("string"),
KeywrapKek: pulumi.String("string"),
KeywrapMack: pulumi.String("string"),
Port: pulumi.Int(0),
},
},
AuthServers: device.SwitchRadiusConfigAuthServerArray{
&device.SwitchRadiusConfigAuthServerArgs{
Host: pulumi.String("string"),
Secret: pulumi.String("string"),
KeywrapEnabled: pulumi.Bool(false),
KeywrapFormat: pulumi.String("string"),
KeywrapKek: pulumi.String("string"),
KeywrapMack: pulumi.String("string"),
Port: pulumi.Int(0),
RequireMessageAuthenticator: pulumi.Bool(false),
},
},
AuthServersRetries: pulumi.Int(0),
AuthServersTimeout: pulumi.Int(0),
CoaEnabled: pulumi.Bool(false),
CoaPort: pulumi.Int(0),
Network: pulumi.String("string"),
SourceIp: pulumi.String("string"),
},
RemoteSyslog: &device.SwitchRemoteSyslogArgs{
Archive: &device.SwitchRemoteSyslogArchiveArgs{
Files: pulumi.Int(0),
Size: pulumi.String("string"),
},
Console: &device.SwitchRemoteSyslogConsoleArgs{
Contents: device.SwitchRemoteSyslogConsoleContentArray{
&device.SwitchRemoteSyslogConsoleContentArgs{
Facility: pulumi.String("string"),
Severity: pulumi.String("string"),
},
},
},
Enabled: pulumi.Bool(false),
Files: device.SwitchRemoteSyslogFileArray{
&device.SwitchRemoteSyslogFileArgs{
Archive: &device.SwitchRemoteSyslogFileArchiveArgs{
Files: pulumi.Int(0),
Size: pulumi.String("string"),
},
Contents: device.SwitchRemoteSyslogFileContentArray{
&device.SwitchRemoteSyslogFileContentArgs{
Facility: pulumi.String("string"),
Severity: pulumi.String("string"),
},
},
ExplicitPriority: pulumi.Bool(false),
File: pulumi.String("string"),
Match: pulumi.String("string"),
StructuredData: pulumi.Bool(false),
},
},
Network: pulumi.String("string"),
SendToAllServers: pulumi.Bool(false),
Servers: device.SwitchRemoteSyslogServerArray{
&device.SwitchRemoteSyslogServerArgs{
Contents: device.SwitchRemoteSyslogServerContentArray{
&device.SwitchRemoteSyslogServerContentArgs{
Facility: pulumi.String("string"),
Severity: pulumi.String("string"),
},
},
ExplicitPriority: pulumi.Bool(false),
Facility: pulumi.String("string"),
Host: pulumi.String("string"),
Match: pulumi.String("string"),
Port: pulumi.Int(0),
Protocol: pulumi.String("string"),
RoutingInstance: pulumi.String("string"),
Severity: pulumi.String("string"),
SourceAddress: pulumi.String("string"),
StructuredData: pulumi.Bool(false),
Tag: pulumi.String("string"),
},
},
TimeFormat: pulumi.String("string"),
Users: device.SwitchRemoteSyslogUserArray{
&device.SwitchRemoteSyslogUserArgs{
Contents: device.SwitchRemoteSyslogUserContentArray{
&device.SwitchRemoteSyslogUserContentArgs{
Facility: pulumi.String("string"),
Severity: pulumi.String("string"),
},
},
Match: pulumi.String("string"),
User: pulumi.String("string"),
},
},
},
Role: pulumi.String("string"),
RouterId: pulumi.String("string"),
AclTags: device.SwitchAclTagsMap{
"string": &device.SwitchAclTagsArgs{
Type: pulumi.String("string"),
GbpTag: pulumi.Int(0),
Macs: pulumi.StringArray{
pulumi.String("string"),
},
Network: pulumi.String("string"),
RadiusGroup: pulumi.String("string"),
Specs: device.SwitchAclTagsSpecArray{
&device.SwitchAclTagsSpecArgs{
PortRange: pulumi.String("string"),
Protocol: pulumi.String("string"),
},
},
Subnets: pulumi.StringArray{
pulumi.String("string"),
},
},
},
SnmpConfig: &device.SwitchSnmpConfigArgs{
ClientLists: device.SwitchSnmpConfigClientListArray{
&device.SwitchSnmpConfigClientListArgs{
ClientListName: pulumi.String("string"),
Clients: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Contact: pulumi.String("string"),
Description: pulumi.String("string"),
Enabled: pulumi.Bool(false),
EngineId: pulumi.String("string"),
Location: pulumi.String("string"),
Name: pulumi.String("string"),
Network: pulumi.String("string"),
TrapGroups: device.SwitchSnmpConfigTrapGroupArray{
&device.SwitchSnmpConfigTrapGroupArgs{
Categories: pulumi.StringArray{
pulumi.String("string"),
},
GroupName: pulumi.String("string"),
Targets: pulumi.StringArray{
pulumi.String("string"),
},
Version: pulumi.String("string"),
},
},
V2cConfigs: device.SwitchSnmpConfigV2cConfigArray{
&device.SwitchSnmpConfigV2cConfigArgs{
Authorization: pulumi.String("string"),
ClientListName: pulumi.String("string"),
CommunityName: pulumi.String("string"),
View: pulumi.String("string"),
},
},
V3Config: &device.SwitchSnmpConfigV3ConfigArgs{
Notifies: device.SwitchSnmpConfigV3ConfigNotifyArray{
&device.SwitchSnmpConfigV3ConfigNotifyArgs{
Name: pulumi.String("string"),
Tag: pulumi.String("string"),
Type: pulumi.String("string"),
},
},
NotifyFilters: device.SwitchSnmpConfigV3ConfigNotifyFilterArray{
&device.SwitchSnmpConfigV3ConfigNotifyFilterArgs{
Contents: device.SwitchSnmpConfigV3ConfigNotifyFilterContentArray{
&device.SwitchSnmpConfigV3ConfigNotifyFilterContentArgs{
Include: pulumi.Bool(false),
Oid: pulumi.String("string"),
},
},
ProfileName: pulumi.String("string"),
},
},
TargetAddresses: device.SwitchSnmpConfigV3ConfigTargetAddressArray{
&device.SwitchSnmpConfigV3ConfigTargetAddressArgs{
Address: pulumi.String("string"),
AddressMask: pulumi.String("string"),
Port: pulumi.Int(0),
TagList: pulumi.String("string"),
TargetAddressName: pulumi.String("string"),
TargetParameters: pulumi.String("string"),
},
},
TargetParameters: device.SwitchSnmpConfigV3ConfigTargetParameterArray{
&device.SwitchSnmpConfigV3ConfigTargetParameterArgs{
MessageProcessingModel: pulumi.String("string"),
Name: pulumi.String("string"),
NotifyFilter: pulumi.String("string"),
SecurityLevel: pulumi.String("string"),
SecurityModel: pulumi.String("string"),
SecurityName: pulumi.String("string"),
},
},
Usm: &device.SwitchSnmpConfigV3ConfigUsmArgs{
EngineType: pulumi.String("string"),
Engineid: pulumi.String("string"),
Users: device.SwitchSnmpConfigV3ConfigUsmUserArray{
&device.SwitchSnmpConfigV3ConfigUsmUserArgs{
AuthenticationPassword: pulumi.String("string"),
AuthenticationType: pulumi.String("string"),
EncryptionPassword: pulumi.String("string"),
EncryptionType: pulumi.String("string"),
Name: pulumi.String("string"),
},
},
},
Vacm: &device.SwitchSnmpConfigV3ConfigVacmArgs{
Accesses: device.SwitchSnmpConfigV3ConfigVacmAccessArray{
&device.SwitchSnmpConfigV3ConfigVacmAccessArgs{
GroupName: pulumi.String("string"),
PrefixLists: device.SwitchSnmpConfigV3ConfigVacmAccessPrefixListArray{
&device.SwitchSnmpConfigV3ConfigVacmAccessPrefixListArgs{
ContextPrefix: pulumi.String("string"),
NotifyView: pulumi.String("string"),
ReadView: pulumi.String("string"),
SecurityLevel: pulumi.String("string"),
SecurityModel: pulumi.String("string"),
Type: pulumi.String("string"),
WriteView: pulumi.String("string"),
},
},
},
},
SecurityToGroup: &device.SwitchSnmpConfigV3ConfigVacmSecurityToGroupArgs{
Contents: device.SwitchSnmpConfigV3ConfigVacmSecurityToGroupContentArray{
&device.SwitchSnmpConfigV3ConfigVacmSecurityToGroupContentArgs{
Group: pulumi.String("string"),
SecurityName: pulumi.String("string"),
},
},
SecurityModel: pulumi.String("string"),
},
},
},
Views: device.SwitchSnmpConfigViewArray{
&device.SwitchSnmpConfigViewArgs{
Include: pulumi.Bool(false),
Oid: pulumi.String("string"),
ViewName: pulumi.String("string"),
},
},
},
StpConfig: &device.SwitchStpConfigArgs{
VstpEnabled: pulumi.Bool(false),
},
SwitchMgmt: &device.SwitchSwitchMgmtArgs{
ApAffinityThreshold: pulumi.Int(0),
CliBanner: pulumi.String("string"),
CliIdleTimeout: pulumi.Int(0),
ConfigRevertTimer: pulumi.Int(0),
DhcpOptionFqdn: pulumi.Bool(false),
DisableOobDownAlarm: pulumi.Bool(false),
LocalAccounts: device.SwitchSwitchMgmtLocalAccountsMap{
"string": &device.SwitchSwitchMgmtLocalAccountsArgs{
Password: pulumi.String("string"),
Role: pulumi.String("string"),
},
},
MxedgeProxyHost: pulumi.String("string"),
MxedgeProxyPort: pulumi.Int(0),
ProtectRe: &device.SwitchSwitchMgmtProtectReArgs{
AllowedServices: pulumi.StringArray{
pulumi.String("string"),
},
Customs: device.SwitchSwitchMgmtProtectReCustomArray{
&device.SwitchSwitchMgmtProtectReCustomArgs{
Subnets: pulumi.StringArray{
pulumi.String("string"),
},
PortRange: pulumi.String("string"),
Protocol: pulumi.String("string"),
},
},
Enabled: pulumi.Bool(false),
TrustedHosts: pulumi.StringArray{
pulumi.String("string"),
},
},
RootPassword: pulumi.String("string"),
Tacacs: &device.SwitchSwitchMgmtTacacsArgs{
AcctServers: device.SwitchSwitchMgmtTacacsAcctServerArray{
&device.SwitchSwitchMgmtTacacsAcctServerArgs{
Host: pulumi.String("string"),
Port: pulumi.String("string"),
Secret: pulumi.String("string"),
Timeout: pulumi.Int(0),
},
},
DefaultRole: pulumi.String("string"),
Enabled: pulumi.Bool(false),
Network: pulumi.String("string"),
TacplusServers: device.SwitchSwitchMgmtTacacsTacplusServerArray{
&device.SwitchSwitchMgmtTacacsTacplusServerArgs{
Host: pulumi.String("string"),
Port: pulumi.String("string"),
Secret: pulumi.String("string"),
Timeout: pulumi.Int(0),
},
},
},
UseMxedgeProxy: pulumi.Bool(false),
},
UseRouterIdAsSourceIp: pulumi.Bool(false),
Vars: pulumi.StringMap{
"string": pulumi.String("string"),
},
OspfAreas: device.SwitchOspfAreasMap{
"string": &device.SwitchOspfAreasArgs{
Networks: device.SwitchOspfAreasNetworksMap{
"string": &device.SwitchOspfAreasNetworksArgs{
AuthKeys: pulumi.StringMap{
"string": pulumi.String("string"),
},
AuthPassword: pulumi.String("string"),
AuthType: pulumi.String("string"),
BfdMinimumInterval: pulumi.Int(0),
DeadInterval: pulumi.Int(0),
ExportPolicy: pulumi.String("string"),
HelloInterval: pulumi.Int(0),
ImportPolicy: pulumi.String("string"),
InterfaceType: pulumi.String("string"),
Metric: pulumi.Int(0),
NoReadvertiseToOverlay: pulumi.Bool(false),
Passive: pulumi.Bool(false),
},
},
IncludeLoopback: pulumi.Bool(false),
Type: pulumi.String("string"),
},
},
VrfConfig: &device.SwitchVrfConfigArgs{
Enabled: pulumi.Bool(false),
},
VrfInstances: device.SwitchVrfInstancesMap{
"string": &device.SwitchVrfInstancesArgs{
Networks: pulumi.StringArray{
pulumi.String("string"),
},
VrfExtraRoutes: device.SwitchVrfInstancesVrfExtraRoutesMap{
"string": &device.SwitchVrfInstancesVrfExtraRoutesArgs{
Via: pulumi.String("string"),
},
},
},
},
VrrpConfig: &device.SwitchVrrpConfigArgs{
Enabled: pulumi.Bool(false),
Groups: device.SwitchVrrpConfigGroupsMap{
"string": &device.SwitchVrrpConfigGroupsArgs{
Priority: pulumi.Int(0),
},
},
},
X: pulumi.Float64(0),
Y: pulumi.Float64(0),
})
var switchResource = new Switch("switchResource", SwitchArgs.builder()
.deviceId("string")
.siteId("string")
.extraRoutes(Map.of("string", Map.ofEntries(
Map.entry("via", "string"),
Map.entry("discard", false),
Map.entry("metric", 0),
Map.entry("nextQualified", Map.of("string", Map.ofEntries(
Map.entry("metric", 0),
Map.entry("preference", 0)
))),
Map.entry("noResolve", false),
Map.entry("preference", 0)
)))
.virtualChassis(SwitchVirtualChassisArgs.builder()
.members(SwitchVirtualChassisMemberArgs.builder()
.mac("string")
.memberId(0)
.vcRole("string")
.build())
.preprovisioned(false)
.build())
.dhcpSnooping(SwitchDhcpSnoopingArgs.builder()
.allNetworks(false)
.enableArpSpoofCheck(false)
.enableIpSourceGuard(false)
.enabled(false)
.networks("string")
.build())
.dhcpdConfig(SwitchDhcpdConfigArgs.builder()
.config(Map.of("string", Map.ofEntries(
Map.entry("dnsServers", "string"),
Map.entry("dnsSuffixes", "string"),
Map.entry("fixedBindings", Map.of("string", Map.ofEntries(
Map.entry("ip", "string"),
Map.entry("name", "string")
))),
Map.entry("gateway", "string"),
Map.entry("ipEnd", "string"),
Map.entry("ipEnd6", "string"),
Map.entry("ipStart", "string"),
Map.entry("ipStart6", "string"),
Map.entry("leaseTime", 0),
Map.entry("options", Map.of("string", Map.ofEntries(
Map.entry("type", "string"),
Map.entry("value", "string")
))),
Map.entry("serverIdOverride", false),
Map.entry("servers", "string"),
Map.entry("servers6s", "string"),
Map.entry("type", "string"),
Map.entry("type6", "string"),
Map.entry("vendorEncapulated", Map.of("string", Map.ofEntries(
Map.entry("type", "string"),
Map.entry("value", "string")
)))
)))
.enabled(false)
.build())
.disableAutoConfig(false)
.dnsServers("string")
.oobIpConfig(SwitchOobIpConfigArgs.builder()
.gateway("string")
.ip("string")
.netmask("string")
.network("string")
.type("string")
.useMgmtVrf(false)
.useMgmtVrfForHostOut(false)
.build())
.evpnConfig(SwitchEvpnConfigArgs.builder()
.enabled(false)
.role("string")
.build())
.aclPolicies(SwitchAclPolicyArgs.builder()
.actions(SwitchAclPolicyActionArgs.builder()
.dstTag("string")
.action("string")
.build())
.name("string")
.srcTags("string")
.build())
.extraRoutes6(Map.of("string", Map.ofEntries(
Map.entry("via", "string"),
Map.entry("discard", false),
Map.entry("metric", 0),
Map.entry("nextQualified", Map.of("string", Map.ofEntries(
Map.entry("metric", 0),
Map.entry("preference", 0)
))),
Map.entry("noResolve", false),
Map.entry("preference", 0)
)))
.ipConfig(SwitchIpConfigArgs.builder()
.dns("string")
.dnsSuffixes("string")
.gateway("string")
.ip("string")
.netmask("string")
.network("string")
.type("string")
.build())
.managed(false)
.mapId("string")
.mistNac(SwitchMistNacArgs.builder()
.enabled(false)
.network("string")
.build())
.name("string")
.networks(Map.of("string", Map.ofEntries(
Map.entry("vlanId", "string"),
Map.entry("isolation", false),
Map.entry("isolationVlanId", "string"),
Map.entry("subnet", "string")
)))
.notes("string")
.otherIpConfigs(Map.of("string", Map.ofEntries(
Map.entry("evpnAnycast", false),
Map.entry("ip", "string"),
Map.entry("ip6", "string"),
Map.entry("netmask", "string"),
Map.entry("netmask6", "string"),
Map.entry("type", "string"),
Map.entry("type6", "string")
)))
.dnsSuffixes("string")
.additionalConfigCmds("string")
.ntpServers("string")
.portConfig(Map.of("string", Map.ofEntries(
Map.entry("usage", "string"),
Map.entry("disableAutoneg", false),
Map.entry("dynamicUsage", "string"),
Map.entry("aggregated", false),
Map.entry("critical", false),
Map.entry("description", "string"),
Map.entry("aeDisableLacp", false),
Map.entry("duplex", "string"),
Map.entry("aeLacpSlow", false),
Map.entry("esilag", false),
Map.entry("mtu", 0),
Map.entry("noLocalOverwrite", false),
Map.entry("poeDisabled", false),
Map.entry("speed", "string"),
Map.entry("aeIdx", 0)
)))
.portMirroring(Map.of("string", Map.ofEntries(
Map.entry("inputNetworksIngresses", "string"),
Map.entry("inputPortIdsEgresses", "string"),
Map.entry("inputPortIdsIngresses", "string"),
Map.entry("outputNetwork", "string"),
Map.entry("outputPortId", "string")
)))
.portUsages(Map.of("string", Map.ofEntries(
Map.entry("allNetworks", false),
Map.entry("allowDhcpd", false),
Map.entry("allowMultipleSupplicants", false),
Map.entry("bypassAuthWhenServerDown", false),
Map.entry("bypassAuthWhenServerDownForUnkonwnClient", false),
Map.entry("description", "string"),
Map.entry("disableAutoneg", false),
Map.entry("disabled", false),
Map.entry("duplex", "string"),
Map.entry("dynamicVlanNetworks", "string"),
Map.entry("enableMacAuth", false),
Map.entry("enableQos", false),
Map.entry("guestNetwork", "string"),
Map.entry("interSwitchLink", false),
Map.entry("macAuthOnly", false),
Map.entry("macAuthPreferred", false),
Map.entry("macAuthProtocol", "string"),
Map.entry("macLimit", 0),
Map.entry("mode", "string"),
Map.entry("mtu", 0),
Map.entry("networks", "string"),
Map.entry("persistMac", false),
Map.entry("poeDisabled", false),
Map.entry("portAuth", "string"),
Map.entry("portNetwork", "string"),
Map.entry("reauthInterval", 0),
Map.entry("resetDefaultWhen", "string"),
Map.entry("rules", Map.ofEntries(
Map.entry("src", "string"),
Map.entry("equals", "string"),
Map.entry("equalsAnies", "string"),
Map.entry("expression", "string"),
Map.entry("usage", "string")
)),
Map.entry("serverFailNetwork", "string"),
Map.entry("serverRejectNetwork", "string"),
Map.entry("speed", "string"),
Map.entry("stormControl", Map.ofEntries(
Map.entry("noBroadcast", false),
Map.entry("noMulticast", false),
Map.entry("noRegisteredMulticast", false),
Map.entry("noUnknownUnicast", false),
Map.entry("percentage", 0)
)),
Map.entry("stpEdge", false),
Map.entry("stpNoRootPort", false),
Map.entry("stpP2p", false),
Map.entry("voipNetwork", "string")
)))
.radiusConfig(SwitchRadiusConfigArgs.builder()
.acctInterimInterval(0)
.acctServers(SwitchRadiusConfigAcctServerArgs.builder()
.host("string")
.secret("string")
.keywrapEnabled(false)
.keywrapFormat("string")
.keywrapKek("string")
.keywrapMack("string")
.port(0)
.build())
.authServers(SwitchRadiusConfigAuthServerArgs.builder()
.host("string")
.secret("string")
.keywrapEnabled(false)
.keywrapFormat("string")
.keywrapKek("string")
.keywrapMack("string")
.port(0)
.requireMessageAuthenticator(false)
.build())
.authServersRetries(0)
.authServersTimeout(0)
.coaEnabled(false)
.coaPort(0)
.network("string")
.sourceIp("string")
.build())
.remoteSyslog(SwitchRemoteSyslogArgs.builder()
.archive(SwitchRemoteSyslogArchiveArgs.builder()
.files(0)
.size("string")
.build())
.console(SwitchRemoteSyslogConsoleArgs.builder()
.contents(SwitchRemoteSyslogConsoleContentArgs.builder()
.facility("string")
.severity("string")
.build())
.build())
.enabled(false)
.files(SwitchRemoteSyslogFileArgs.builder()
.archive(SwitchRemoteSyslogFileArchiveArgs.builder()
.files(0)
.size("string")
.build())
.contents(SwitchRemoteSyslogFileContentArgs.builder()
.facility("string")
.severity("string")
.build())
.explicitPriority(false)
.file("string")
.match("string")
.structuredData(false)
.build())
.network("string")
.sendToAllServers(false)
.servers(SwitchRemoteSyslogServerArgs.builder()
.contents(SwitchRemoteSyslogServerContentArgs.builder()
.facility("string")
.severity("string")
.build())
.explicitPriority(false)
.facility("string")
.host("string")
.match("string")
.port(0)
.protocol("string")
.routingInstance("string")
.severity("string")
.sourceAddress("string")
.structuredData(false)
.tag("string")
.build())
.timeFormat("string")
.users(SwitchRemoteSyslogUserArgs.builder()
.contents(SwitchRemoteSyslogUserContentArgs.builder()
.facility("string")
.severity("string")
.build())
.match("string")
.user("string")
.build())
.build())
.role("string")
.routerId("string")
.aclTags(Map.of("string", Map.ofEntries(
Map.entry("type", "string"),
Map.entry("gbpTag", 0),
Map.entry("macs", "string"),
Map.entry("network", "string"),
Map.entry("radiusGroup", "string"),
Map.entry("specs", Map.ofEntries(
Map.entry("portRange", "string"),
Map.entry("protocol", "string")
)),
Map.entry("subnets", "string")
)))
.snmpConfig(SwitchSnmpConfigArgs.builder()
.clientLists(SwitchSnmpConfigClientListArgs.builder()
.clientListName("string")
.clients("string")
.build())
.contact("string")
.description("string")
.enabled(false)
.engineId("string")
.location("string")
.name("string")
.network("string")
.trapGroups(SwitchSnmpConfigTrapGroupArgs.builder()
.categories("string")
.groupName("string")
.targets("string")
.version("string")
.build())
.v2cConfigs(SwitchSnmpConfigV2cConfigArgs.builder()
.authorization("string")
.clientListName("string")
.communityName("string")
.view("string")
.build())
.v3Config(SwitchSnmpConfigV3ConfigArgs.builder()
.notifies(SwitchSnmpConfigV3ConfigNotifyArgs.builder()
.name("string")
.tag("string")
.type("string")
.build())
.notifyFilters(SwitchSnmpConfigV3ConfigNotifyFilterArgs.builder()
.contents(SwitchSnmpConfigV3ConfigNotifyFilterContentArgs.builder()
.include(false)
.oid("string")
.build())
.profileName("string")
.build())
.targetAddresses(SwitchSnmpConfigV3ConfigTargetAddressArgs.builder()
.address("string")
.addressMask("string")
.port(0)
.tagList("string")
.targetAddressName("string")
.targetParameters("string")
.build())
.targetParameters(SwitchSnmpConfigV3ConfigTargetParameterArgs.builder()
.messageProcessingModel("string")
.name("string")
.notifyFilter("string")
.securityLevel("string")
.securityModel("string")
.securityName("string")
.build())
.usm(SwitchSnmpConfigV3ConfigUsmArgs.builder()
.engineType("string")
.engineid("string")
.users(SwitchSnmpConfigV3ConfigUsmUserArgs.builder()
.authenticationPassword("string")
.authenticationType("string")
.encryptionPassword("string")
.encryptionType("string")
.name("string")
.build())
.build())
.vacm(SwitchSnmpConfigV3ConfigVacmArgs.builder()
.accesses(SwitchSnmpConfigV3ConfigVacmAccessArgs.builder()
.groupName("string")
.prefixLists(SwitchSnmpConfigV3ConfigVacmAccessPrefixListArgs.builder()
.contextPrefix("string")
.notifyView("string")
.readView("string")
.securityLevel("string")
.securityModel("string")
.type("string")
.writeView("string")
.build())
.build())
.securityToGroup(SwitchSnmpConfigV3ConfigVacmSecurityToGroupArgs.builder()
.contents(SwitchSnmpConfigV3ConfigVacmSecurityToGroupContentArgs.builder()
.group("string")
.securityName("string")
.build())
.securityModel("string")
.build())
.build())
.build())
.views(SwitchSnmpConfigViewArgs.builder()
.include(false)
.oid("string")
.viewName("string")
.build())
.build())
.stpConfig(SwitchStpConfigArgs.builder()
.vstpEnabled(false)
.build())
.switchMgmt(SwitchSwitchMgmtArgs.builder()
.apAffinityThreshold(0)
.cliBanner("string")
.cliIdleTimeout(0)
.configRevertTimer(0)
.dhcpOptionFqdn(false)
.disableOobDownAlarm(false)
.localAccounts(Map.of("string", Map.ofEntries(
Map.entry("password", "string"),
Map.entry("role", "string")
)))
.mxedgeProxyHost("string")
.mxedgeProxyPort(0)
.protectRe(SwitchSwitchMgmtProtectReArgs.builder()
.allowedServices("string")
.customs(SwitchSwitchMgmtProtectReCustomArgs.builder()
.subnets("string")
.portRange("string")
.protocol("string")
.build())
.enabled(false)
.trustedHosts("string")
.build())
.rootPassword("string")
.tacacs(SwitchSwitchMgmtTacacsArgs.builder()
.acctServers(SwitchSwitchMgmtTacacsAcctServerArgs.builder()
.host("string")
.port("string")
.secret("string")
.timeout(0)
.build())
.defaultRole("string")
.enabled(false)
.network("string")
.tacplusServers(SwitchSwitchMgmtTacacsTacplusServerArgs.builder()
.host("string")
.port("string")
.secret("string")
.timeout(0)
.build())
.build())
.useMxedgeProxy(false)
.build())
.useRouterIdAsSourceIp(false)
.vars(Map.of("string", "string"))
.ospfAreas(Map.of("string", Map.ofEntries(
Map.entry("networks", Map.of("string", Map.ofEntries(
Map.entry("authKeys", Map.of("string", "string")),
Map.entry("authPassword", "string"),
Map.entry("authType", "string"),
Map.entry("bfdMinimumInterval", 0),
Map.entry("deadInterval", 0),
Map.entry("exportPolicy", "string"),
Map.entry("helloInterval", 0),
Map.entry("importPolicy", "string"),
Map.entry("interfaceType", "string"),
Map.entry("metric", 0),
Map.entry("noReadvertiseToOverlay", false),
Map.entry("passive", false)
))),
Map.entry("includeLoopback", false),
Map.entry("type", "string")
)))
.vrfConfig(SwitchVrfConfigArgs.builder()
.enabled(false)
.build())
.vrfInstances(Map.of("string", Map.ofEntries(
Map.entry("networks", "string"),
Map.entry("vrfExtraRoutes", Map.of("string", Map.of("via", "string")))
)))
.vrrpConfig(SwitchVrrpConfigArgs.builder()
.enabled(false)
.groups(Map.of("string", Map.of("priority", 0)))
.build())
.x(0)
.y(0)
.build());
switch_resource = junipermist.device.Switch("switchResource",
device_id="string",
site_id="string",
extra_routes={
"string": junipermist.device.SwitchExtraRoutesArgs(
via="string",
discard=False,
metric=0,
next_qualified={
"string": junipermist.device.SwitchExtraRoutesNextQualifiedArgs(
metric=0,
preference=0,
),
},
no_resolve=False,
preference=0,
),
},
virtual_chassis=junipermist.device.SwitchVirtualChassisArgs(
members=[junipermist.device.SwitchVirtualChassisMemberArgs(
mac="string",
member_id=0,
vc_role="string",
)],
preprovisioned=False,
),
dhcp_snooping=junipermist.device.SwitchDhcpSnoopingArgs(
all_networks=False,
enable_arp_spoof_check=False,
enable_ip_source_guard=False,
enabled=False,
networks=["string"],
),
dhcpd_config=junipermist.device.SwitchDhcpdConfigArgs(
config={
"string": junipermist.device.SwitchDhcpdConfigConfigArgs(
dns_servers=["string"],
dns_suffixes=["string"],
fixed_bindings={
"string": junipermist.device.SwitchDhcpdConfigConfigFixedBindingsArgs(
ip="string",
name="string",
),
},
gateway="string",
ip_end="string",
ip_end6="string",
ip_start="string",
ip_start6="string",
lease_time=0,
options={
"string": junipermist.device.SwitchDhcpdConfigConfigOptionsArgs(
type="string",
value="string",
),
},
server_id_override=False,
servers=["string"],
servers6s=["string"],
type="string",
type6="string",
vendor_encapulated={
"string": junipermist.device.SwitchDhcpdConfigConfigVendorEncapulatedArgs(
type="string",
value="string",
),
},
),
},
enabled=False,
),
disable_auto_config=False,
dns_servers=["string"],
oob_ip_config=junipermist.device.SwitchOobIpConfigArgs(
gateway="string",
ip="string",
netmask="string",
network="string",
type="string",
use_mgmt_vrf=False,
use_mgmt_vrf_for_host_out=False,
),
evpn_config=junipermist.device.SwitchEvpnConfigArgs(
enabled=False,
role="string",
),
acl_policies=[junipermist.device.SwitchAclPolicyArgs(
actions=[junipermist.device.SwitchAclPolicyActionArgs(
dst_tag="string",
action="string",
)],
name="string",
src_tags=["string"],
)],
extra_routes6={
"string": junipermist.device.SwitchExtraRoutes6Args(
via="string",
discard=False,
metric=0,
next_qualified={
"string": junipermist.device.SwitchExtraRoutes6NextQualifiedArgs(
metric=0,
preference=0,
),
},
no_resolve=False,
preference=0,
),
},
ip_config=junipermist.device.SwitchIpConfigArgs(
dns=["string"],
dns_suffixes=["string"],
gateway="string",
ip="string",
netmask="string",
network="string",
type="string",
),
managed=False,
map_id="string",
mist_nac=junipermist.device.SwitchMistNacArgs(
enabled=False,
network="string",
),
name="string",
networks={
"string": junipermist.device.SwitchNetworksArgs(
vlan_id="string",
isolation=False,
isolation_vlan_id="string",
subnet="string",
),
},
notes="string",
other_ip_configs={
"string": junipermist.device.SwitchOtherIpConfigsArgs(
evpn_anycast=False,
ip="string",
ip6="string",
netmask="string",
netmask6="string",
type="string",
type6="string",
),
},
dns_suffixes=["string"],
additional_config_cmds=["string"],
ntp_servers=["string"],
port_config={
"string": junipermist.device.SwitchPortConfigArgs(
usage="string",
disable_autoneg=False,
dynamic_usage="string",
aggregated=False,
critical=False,
description="string",
ae_disable_lacp=False,
duplex="string",
ae_lacp_slow=False,
esilag=False,
mtu=0,
no_local_overwrite=False,
poe_disabled=False,
speed="string",
ae_idx=0,
),
},
port_mirroring={
"string": junipermist.device.SwitchPortMirroringArgs(
input_networks_ingresses=["string"],
input_port_ids_egresses=["string"],
input_port_ids_ingresses=["string"],
output_network="string",
output_port_id="string",
),
},
port_usages={
"string": junipermist.device.SwitchPortUsagesArgs(
all_networks=False,
allow_dhcpd=False,
allow_multiple_supplicants=False,
bypass_auth_when_server_down=False,
bypass_auth_when_server_down_for_unkonwn_client=False,
description="string",
disable_autoneg=False,
disabled=False,
duplex="string",
dynamic_vlan_networks=["string"],
enable_mac_auth=False,
enable_qos=False,
guest_network="string",
inter_switch_link=False,
mac_auth_only=False,
mac_auth_preferred=False,
mac_auth_protocol="string",
mac_limit=0,
mode="string",
mtu=0,
networks=["string"],
persist_mac=False,
poe_disabled=False,
port_auth="string",
port_network="string",
reauth_interval=0,
reset_default_when="string",
rules=[junipermist.device.SwitchPortUsagesRuleArgs(
src="string",
equals="string",
equals_anies=["string"],
expression="string",
usage="string",
)],
server_fail_network="string",
server_reject_network="string",
speed="string",
storm_control=junipermist.device.SwitchPortUsagesStormControlArgs(
no_broadcast=False,
no_multicast=False,
no_registered_multicast=False,
no_unknown_unicast=False,
percentage=0,
),
stp_edge=False,
stp_no_root_port=False,
stp_p2p=False,
voip_network="string",
),
},
radius_config=junipermist.device.SwitchRadiusConfigArgs(
acct_interim_interval=0,
acct_servers=[junipermist.device.SwitchRadiusConfigAcctServerArgs(
host="string",
secret="string",
keywrap_enabled=False,
keywrap_format="string",
keywrap_kek="string",
keywrap_mack="string",
port=0,
)],
auth_servers=[junipermist.device.SwitchRadiusConfigAuthServerArgs(
host="string",
secret="string",
keywrap_enabled=False,
keywrap_format="string",
keywrap_kek="string",
keywrap_mack="string",
port=0,
require_message_authenticator=False,
)],
auth_servers_retries=0,
auth_servers_timeout=0,
coa_enabled=False,
coa_port=0,
network="string",
source_ip="string",
),
remote_syslog=junipermist.device.SwitchRemoteSyslogArgs(
archive=junipermist.device.SwitchRemoteSyslogArchiveArgs(
files=0,
size="string",
),
console=junipermist.device.SwitchRemoteSyslogConsoleArgs(
contents=[junipermist.device.SwitchRemoteSyslogConsoleContentArgs(
facility="string",
severity="string",
)],
),
enabled=False,
files=[junipermist.device.SwitchRemoteSyslogFileArgs(
archive=junipermist.device.SwitchRemoteSyslogFileArchiveArgs(
files=0,
size="string",
),
contents=[junipermist.device.SwitchRemoteSyslogFileContentArgs(
facility="string",
severity="string",
)],
explicit_priority=False,
file="string",
match="string",
structured_data=False,
)],
network="string",
send_to_all_servers=False,
servers=[junipermist.device.SwitchRemoteSyslogServerArgs(
contents=[junipermist.device.SwitchRemoteSyslogServerContentArgs(
facility="string",
severity="string",
)],
explicit_priority=False,
facility="string",
host="string",
match="string",
port=0,
protocol="string",
routing_instance="string",
severity="string",
source_address="string",
structured_data=False,
tag="string",
)],
time_format="string",
users=[junipermist.device.SwitchRemoteSyslogUserArgs(
contents=[junipermist.device.SwitchRemoteSyslogUserContentArgs(
facility="string",
severity="string",
)],
match="string",
user="string",
)],
),
role="string",
router_id="string",
acl_tags={
"string": junipermist.device.SwitchAclTagsArgs(
type="string",
gbp_tag=0,
macs=["string"],
network="string",
radius_group="string",
specs=[junipermist.device.SwitchAclTagsSpecArgs(
port_range="string",
protocol="string",
)],
subnets=["string"],
),
},
snmp_config=junipermist.device.SwitchSnmpConfigArgs(
client_lists=[junipermist.device.SwitchSnmpConfigClientListArgs(
client_list_name="string",
clients=["string"],
)],
contact="string",
description="string",
enabled=False,
engine_id="string",
location="string",
name="string",
network="string",
trap_groups=[junipermist.device.SwitchSnmpConfigTrapGroupArgs(
categories=["string"],
group_name="string",
targets=["string"],
version="string",
)],
v2c_configs=[junipermist.device.SwitchSnmpConfigV2cConfigArgs(
authorization="string",
client_list_name="string",
community_name="string",
view="string",
)],
v3_config=junipermist.device.SwitchSnmpConfigV3ConfigArgs(
notifies=[junipermist.device.SwitchSnmpConfigV3ConfigNotifyArgs(
name="string",
tag="string",
type="string",
)],
notify_filters=[junipermist.device.SwitchSnmpConfigV3ConfigNotifyFilterArgs(
contents=[junipermist.device.SwitchSnmpConfigV3ConfigNotifyFilterContentArgs(
include=False,
oid="string",
)],
profile_name="string",
)],
target_addresses=[junipermist.device.SwitchSnmpConfigV3ConfigTargetAddressArgs(
address="string",
address_mask="string",
port=0,
tag_list="string",
target_address_name="string",
target_parameters="string",
)],
target_parameters=[junipermist.device.SwitchSnmpConfigV3ConfigTargetParameterArgs(
message_processing_model="string",
name="string",
notify_filter="string",
security_level="string",
security_model="string",
security_name="string",
)],
usm=junipermist.device.SwitchSnmpConfigV3ConfigUsmArgs(
engine_type="string",
engineid="string",
users=[junipermist.device.SwitchSnmpConfigV3ConfigUsmUserArgs(
authentication_password="string",
authentication_type="string",
encryption_password="string",
encryption_type="string",
name="string",
)],
),
vacm=junipermist.device.SwitchSnmpConfigV3ConfigVacmArgs(
accesses=[junipermist.device.SwitchSnmpConfigV3ConfigVacmAccessArgs(
group_name="string",
prefix_lists=[junipermist.device.SwitchSnmpConfigV3ConfigVacmAccessPrefixListArgs(
context_prefix="string",
notify_view="string",
read_view="string",
security_level="string",
security_model="string",
type="string",
write_view="string",
)],
)],
security_to_group=junipermist.device.SwitchSnmpConfigV3ConfigVacmSecurityToGroupArgs(
contents=[junipermist.device.SwitchSnmpConfigV3ConfigVacmSecurityToGroupContentArgs(
group="string",
security_name="string",
)],
security_model="string",
),
),
),
views=[junipermist.device.SwitchSnmpConfigViewArgs(
include=False,
oid="string",
view_name="string",
)],
),
stp_config=junipermist.device.SwitchStpConfigArgs(
vstp_enabled=False,
),
switch_mgmt=junipermist.device.SwitchSwitchMgmtArgs(
ap_affinity_threshold=0,
cli_banner="string",
cli_idle_timeout=0,
config_revert_timer=0,
dhcp_option_fqdn=False,
disable_oob_down_alarm=False,
local_accounts={
"string": junipermist.device.SwitchSwitchMgmtLocalAccountsArgs(
password="string",
role="string",
),
},
mxedge_proxy_host="string",
mxedge_proxy_port=0,
protect_re=junipermist.device.SwitchSwitchMgmtProtectReArgs(
allowed_services=["string"],
customs=[junipermist.device.SwitchSwitchMgmtProtectReCustomArgs(
subnets=["string"],
port_range="string",
protocol="string",
)],
enabled=False,
trusted_hosts=["string"],
),
root_password="string",
tacacs=junipermist.device.SwitchSwitchMgmtTacacsArgs(
acct_servers=[junipermist.device.SwitchSwitchMgmtTacacsAcctServerArgs(
host="string",
port="string",
secret="string",
timeout=0,
)],
default_role="string",
enabled=False,
network="string",
tacplus_servers=[junipermist.device.SwitchSwitchMgmtTacacsTacplusServerArgs(
host="string",
port="string",
secret="string",
timeout=0,
)],
),
use_mxedge_proxy=False,
),
use_router_id_as_source_ip=False,
vars={
"string": "string",
},
ospf_areas={
"string": junipermist.device.SwitchOspfAreasArgs(
networks={
"string": junipermist.device.SwitchOspfAreasNetworksArgs(
auth_keys={
"string": "string",
},
auth_password="string",
auth_type="string",
bfd_minimum_interval=0,
dead_interval=0,
export_policy="string",
hello_interval=0,
import_policy="string",
interface_type="string",
metric=0,
no_readvertise_to_overlay=False,
passive=False,
),
},
include_loopback=False,
type="string",
),
},
vrf_config=junipermist.device.SwitchVrfConfigArgs(
enabled=False,
),
vrf_instances={
"string": junipermist.device.SwitchVrfInstancesArgs(
networks=["string"],
vrf_extra_routes={
"string": junipermist.device.SwitchVrfInstancesVrfExtraRoutesArgs(
via="string",
),
},
),
},
vrrp_config=junipermist.device.SwitchVrrpConfigArgs(
enabled=False,
groups={
"string": junipermist.device.SwitchVrrpConfigGroupsArgs(
priority=0,
),
},
),
x=0,
y=0)
const switchResource = new junipermist.device.Switch("switchResource", {
deviceId: "string",
siteId: "string",
extraRoutes: {
string: {
via: "string",
discard: false,
metric: 0,
nextQualified: {
string: {
metric: 0,
preference: 0,
},
},
noResolve: false,
preference: 0,
},
},
virtualChassis: {
members: [{
mac: "string",
memberId: 0,
vcRole: "string",
}],
preprovisioned: false,
},
dhcpSnooping: {
allNetworks: false,
enableArpSpoofCheck: false,
enableIpSourceGuard: false,
enabled: false,
networks: ["string"],
},
dhcpdConfig: {
config: {
string: {
dnsServers: ["string"],
dnsSuffixes: ["string"],
fixedBindings: {
string: {
ip: "string",
name: "string",
},
},
gateway: "string",
ipEnd: "string",
ipEnd6: "string",
ipStart: "string",
ipStart6: "string",
leaseTime: 0,
options: {
string: {
type: "string",
value: "string",
},
},
serverIdOverride: false,
servers: ["string"],
servers6s: ["string"],
type: "string",
type6: "string",
vendorEncapulated: {
string: {
type: "string",
value: "string",
},
},
},
},
enabled: false,
},
disableAutoConfig: false,
dnsServers: ["string"],
oobIpConfig: {
gateway: "string",
ip: "string",
netmask: "string",
network: "string",
type: "string",
useMgmtVrf: false,
useMgmtVrfForHostOut: false,
},
evpnConfig: {
enabled: false,
role: "string",
},
aclPolicies: [{
actions: [{
dstTag: "string",
action: "string",
}],
name: "string",
srcTags: ["string"],
}],
extraRoutes6: {
string: {
via: "string",
discard: false,
metric: 0,
nextQualified: {
string: {
metric: 0,
preference: 0,
},
},
noResolve: false,
preference: 0,
},
},
ipConfig: {
dns: ["string"],
dnsSuffixes: ["string"],
gateway: "string",
ip: "string",
netmask: "string",
network: "string",
type: "string",
},
managed: false,
mapId: "string",
mistNac: {
enabled: false,
network: "string",
},
name: "string",
networks: {
string: {
vlanId: "string",
isolation: false,
isolationVlanId: "string",
subnet: "string",
},
},
notes: "string",
otherIpConfigs: {
string: {
evpnAnycast: false,
ip: "string",
ip6: "string",
netmask: "string",
netmask6: "string",
type: "string",
type6: "string",
},
},
dnsSuffixes: ["string"],
additionalConfigCmds: ["string"],
ntpServers: ["string"],
portConfig: {
string: {
usage: "string",
disableAutoneg: false,
dynamicUsage: "string",
aggregated: false,
critical: false,
description: "string",
aeDisableLacp: false,
duplex: "string",
aeLacpSlow: false,
esilag: false,
mtu: 0,
noLocalOverwrite: false,
poeDisabled: false,
speed: "string",
aeIdx: 0,
},
},
portMirroring: {
string: {
inputNetworksIngresses: ["string"],
inputPortIdsEgresses: ["string"],
inputPortIdsIngresses: ["string"],
outputNetwork: "string",
outputPortId: "string",
},
},
portUsages: {
string: {
allNetworks: false,
allowDhcpd: false,
allowMultipleSupplicants: false,
bypassAuthWhenServerDown: false,
bypassAuthWhenServerDownForUnkonwnClient: false,
description: "string",
disableAutoneg: false,
disabled: false,
duplex: "string",
dynamicVlanNetworks: ["string"],
enableMacAuth: false,
enableQos: false,
guestNetwork: "string",
interSwitchLink: false,
macAuthOnly: false,
macAuthPreferred: false,
macAuthProtocol: "string",
macLimit: 0,
mode: "string",
mtu: 0,
networks: ["string"],
persistMac: false,
poeDisabled: false,
portAuth: "string",
portNetwork: "string",
reauthInterval: 0,
resetDefaultWhen: "string",
rules: [{
src: "string",
equals: "string",
equalsAnies: ["string"],
expression: "string",
usage: "string",
}],
serverFailNetwork: "string",
serverRejectNetwork: "string",
speed: "string",
stormControl: {
noBroadcast: false,
noMulticast: false,
noRegisteredMulticast: false,
noUnknownUnicast: false,
percentage: 0,
},
stpEdge: false,
stpNoRootPort: false,
stpP2p: false,
voipNetwork: "string",
},
},
radiusConfig: {
acctInterimInterval: 0,
acctServers: [{
host: "string",
secret: "string",
keywrapEnabled: false,
keywrapFormat: "string",
keywrapKek: "string",
keywrapMack: "string",
port: 0,
}],
authServers: [{
host: "string",
secret: "string",
keywrapEnabled: false,
keywrapFormat: "string",
keywrapKek: "string",
keywrapMack: "string",
port: 0,
requireMessageAuthenticator: false,
}],
authServersRetries: 0,
authServersTimeout: 0,
coaEnabled: false,
coaPort: 0,
network: "string",
sourceIp: "string",
},
remoteSyslog: {
archive: {
files: 0,
size: "string",
},
console: {
contents: [{
facility: "string",
severity: "string",
}],
},
enabled: false,
files: [{
archive: {
files: 0,
size: "string",
},
contents: [{
facility: "string",
severity: "string",
}],
explicitPriority: false,
file: "string",
match: "string",
structuredData: false,
}],
network: "string",
sendToAllServers: false,
servers: [{
contents: [{
facility: "string",
severity: "string",
}],
explicitPriority: false,
facility: "string",
host: "string",
match: "string",
port: 0,
protocol: "string",
routingInstance: "string",
severity: "string",
sourceAddress: "string",
structuredData: false,
tag: "string",
}],
timeFormat: "string",
users: [{
contents: [{
facility: "string",
severity: "string",
}],
match: "string",
user: "string",
}],
},
role: "string",
routerId: "string",
aclTags: {
string: {
type: "string",
gbpTag: 0,
macs: ["string"],
network: "string",
radiusGroup: "string",
specs: [{
portRange: "string",
protocol: "string",
}],
subnets: ["string"],
},
},
snmpConfig: {
clientLists: [{
clientListName: "string",
clients: ["string"],
}],
contact: "string",
description: "string",
enabled: false,
engineId: "string",
location: "string",
name: "string",
network: "string",
trapGroups: [{
categories: ["string"],
groupName: "string",
targets: ["string"],
version: "string",
}],
v2cConfigs: [{
authorization: "string",
clientListName: "string",
communityName: "string",
view: "string",
}],
v3Config: {
notifies: [{
name: "string",
tag: "string",
type: "string",
}],
notifyFilters: [{
contents: [{
include: false,
oid: "string",
}],
profileName: "string",
}],
targetAddresses: [{
address: "string",
addressMask: "string",
port: 0,
tagList: "string",
targetAddressName: "string",
targetParameters: "string",
}],
targetParameters: [{
messageProcessingModel: "string",
name: "string",
notifyFilter: "string",
securityLevel: "string",
securityModel: "string",
securityName: "string",
}],
usm: {
engineType: "string",
engineid: "string",
users: [{
authenticationPassword: "string",
authenticationType: "string",
encryptionPassword: "string",
encryptionType: "string",
name: "string",
}],
},
vacm: {
accesses: [{
groupName: "string",
prefixLists: [{
contextPrefix: "string",
notifyView: "string",
readView: "string",
securityLevel: "string",
securityModel: "string",
type: "string",
writeView: "string",
}],
}],
securityToGroup: {
contents: [{
group: "string",
securityName: "string",
}],
securityModel: "string",
},
},
},
views: [{
include: false,
oid: "string",
viewName: "string",
}],
},
stpConfig: {
vstpEnabled: false,
},
switchMgmt: {
apAffinityThreshold: 0,
cliBanner: "string",
cliIdleTimeout: 0,
configRevertTimer: 0,
dhcpOptionFqdn: false,
disableOobDownAlarm: false,
localAccounts: {
string: {
password: "string",
role: "string",
},
},
mxedgeProxyHost: "string",
mxedgeProxyPort: 0,
protectRe: {
allowedServices: ["string"],
customs: [{
subnets: ["string"],
portRange: "string",
protocol: "string",
}],
enabled: false,
trustedHosts: ["string"],
},
rootPassword: "string",
tacacs: {
acctServers: [{
host: "string",
port: "string",
secret: "string",
timeout: 0,
}],
defaultRole: "string",
enabled: false,
network: "string",
tacplusServers: [{
host: "string",
port: "string",
secret: "string",
timeout: 0,
}],
},
useMxedgeProxy: false,
},
useRouterIdAsSourceIp: false,
vars: {
string: "string",
},
ospfAreas: {
string: {
networks: {
string: {
authKeys: {
string: "string",
},
authPassword: "string",
authType: "string",
bfdMinimumInterval: 0,
deadInterval: 0,
exportPolicy: "string",
helloInterval: 0,
importPolicy: "string",
interfaceType: "string",
metric: 0,
noReadvertiseToOverlay: false,
passive: false,
},
},
includeLoopback: false,
type: "string",
},
},
vrfConfig: {
enabled: false,
},
vrfInstances: {
string: {
networks: ["string"],
vrfExtraRoutes: {
string: {
via: "string",
},
},
},
},
vrrpConfig: {
enabled: false,
groups: {
string: {
priority: 0,
},
},
},
x: 0,
y: 0,
});
type: junipermist:device:Switch
properties:
aclPolicies:
- actions:
- action: string
dstTag: string
name: string
srcTags:
- string
aclTags:
string:
gbpTag: 0
macs:
- string
network: string
radiusGroup: string
specs:
- portRange: string
protocol: string
subnets:
- string
type: string
additionalConfigCmds:
- string
deviceId: string
dhcpSnooping:
allNetworks: false
enableArpSpoofCheck: false
enableIpSourceGuard: false
enabled: false
networks:
- string
dhcpdConfig:
config:
string:
dnsServers:
- string
dnsSuffixes:
- string
fixedBindings:
string:
ip: string
name: string
gateway: string
ipEnd: string
ipEnd6: string
ipStart: string
ipStart6: string
leaseTime: 0
options:
string:
type: string
value: string
serverIdOverride: false
servers:
- string
servers6s:
- string
type: string
type6: string
vendorEncapulated:
string:
type: string
value: string
enabled: false
disableAutoConfig: false
dnsServers:
- string
dnsSuffixes:
- string
evpnConfig:
enabled: false
role: string
extraRoutes:
string:
discard: false
metric: 0
nextQualified:
string:
metric: 0
preference: 0
noResolve: false
preference: 0
via: string
extraRoutes6:
string:
discard: false
metric: 0
nextQualified:
string:
metric: 0
preference: 0
noResolve: false
preference: 0
via: string
ipConfig:
dns:
- string
dnsSuffixes:
- string
gateway: string
ip: string
netmask: string
network: string
type: string
managed: false
mapId: string
mistNac:
enabled: false
network: string
name: string
networks:
string:
isolation: false
isolationVlanId: string
subnet: string
vlanId: string
notes: string
ntpServers:
- string
oobIpConfig:
gateway: string
ip: string
netmask: string
network: string
type: string
useMgmtVrf: false
useMgmtVrfForHostOut: false
ospfAreas:
string:
includeLoopback: false
networks:
string:
authKeys:
string: string
authPassword: string
authType: string
bfdMinimumInterval: 0
deadInterval: 0
exportPolicy: string
helloInterval: 0
importPolicy: string
interfaceType: string
metric: 0
noReadvertiseToOverlay: false
passive: false
type: string
otherIpConfigs:
string:
evpnAnycast: false
ip: string
ip6: string
netmask: string
netmask6: string
type: string
type6: string
portConfig:
string:
aeDisableLacp: false
aeIdx: 0
aeLacpSlow: false
aggregated: false
critical: false
description: string
disableAutoneg: false
duplex: string
dynamicUsage: string
esilag: false
mtu: 0
noLocalOverwrite: false
poeDisabled: false
speed: string
usage: string
portMirroring:
string:
inputNetworksIngresses:
- string
inputPortIdsEgresses:
- string
inputPortIdsIngresses:
- string
outputNetwork: string
outputPortId: string
portUsages:
string:
allNetworks: false
allowDhcpd: false
allowMultipleSupplicants: false
bypassAuthWhenServerDown: false
bypassAuthWhenServerDownForUnkonwnClient: false
description: string
disableAutoneg: false
disabled: false
duplex: string
dynamicVlanNetworks:
- string
enableMacAuth: false
enableQos: false
guestNetwork: string
interSwitchLink: false
macAuthOnly: false
macAuthPreferred: false
macAuthProtocol: string
macLimit: 0
mode: string
mtu: 0
networks:
- string
persistMac: false
poeDisabled: false
portAuth: string
portNetwork: string
reauthInterval: 0
resetDefaultWhen: string
rules:
- equals: string
equalsAnies:
- string
expression: string
src: string
usage: string
serverFailNetwork: string
serverRejectNetwork: string
speed: string
stormControl:
noBroadcast: false
noMulticast: false
noRegisteredMulticast: false
noUnknownUnicast: false
percentage: 0
stpEdge: false
stpNoRootPort: false
stpP2p: false
voipNetwork: string
radiusConfig:
acctInterimInterval: 0
acctServers:
- host: string
keywrapEnabled: false
keywrapFormat: string
keywrapKek: string
keywrapMack: string
port: 0
secret: string
authServers:
- host: string
keywrapEnabled: false
keywrapFormat: string
keywrapKek: string
keywrapMack: string
port: 0
requireMessageAuthenticator: false
secret: string
authServersRetries: 0
authServersTimeout: 0
coaEnabled: false
coaPort: 0
network: string
sourceIp: string
remoteSyslog:
archive:
files: 0
size: string
console:
contents:
- facility: string
severity: string
enabled: false
files:
- archive:
files: 0
size: string
contents:
- facility: string
severity: string
explicitPriority: false
file: string
match: string
structuredData: false
network: string
sendToAllServers: false
servers:
- contents:
- facility: string
severity: string
explicitPriority: false
facility: string
host: string
match: string
port: 0
protocol: string
routingInstance: string
severity: string
sourceAddress: string
structuredData: false
tag: string
timeFormat: string
users:
- contents:
- facility: string
severity: string
match: string
user: string
role: string
routerId: string
siteId: string
snmpConfig:
clientLists:
- clientListName: string
clients:
- string
contact: string
description: string
enabled: false
engineId: string
location: string
name: string
network: string
trapGroups:
- categories:
- string
groupName: string
targets:
- string
version: string
v2cConfigs:
- authorization: string
clientListName: string
communityName: string
view: string
v3Config:
notifies:
- name: string
tag: string
type: string
notifyFilters:
- contents:
- include: false
oid: string
profileName: string
targetAddresses:
- address: string
addressMask: string
port: 0
tagList: string
targetAddressName: string
targetParameters: string
targetParameters:
- messageProcessingModel: string
name: string
notifyFilter: string
securityLevel: string
securityModel: string
securityName: string
usm:
engineType: string
engineid: string
users:
- authenticationPassword: string
authenticationType: string
encryptionPassword: string
encryptionType: string
name: string
vacm:
accesses:
- groupName: string
prefixLists:
- contextPrefix: string
notifyView: string
readView: string
securityLevel: string
securityModel: string
type: string
writeView: string
securityToGroup:
contents:
- group: string
securityName: string
securityModel: string
views:
- include: false
oid: string
viewName: string
stpConfig:
vstpEnabled: false
switchMgmt:
apAffinityThreshold: 0
cliBanner: string
cliIdleTimeout: 0
configRevertTimer: 0
dhcpOptionFqdn: false
disableOobDownAlarm: false
localAccounts:
string:
password: string
role: string
mxedgeProxyHost: string
mxedgeProxyPort: 0
protectRe:
allowedServices:
- string
customs:
- portRange: string
protocol: string
subnets:
- string
enabled: false
trustedHosts:
- string
rootPassword: string
tacacs:
acctServers:
- host: string
port: string
secret: string
timeout: 0
defaultRole: string
enabled: false
network: string
tacplusServers:
- host: string
port: string
secret: string
timeout: 0
useMxedgeProxy: false
useRouterIdAsSourceIp: false
vars:
string: string
virtualChassis:
members:
- mac: string
memberId: 0
vcRole: string
preprovisioned: false
vrfConfig:
enabled: false
vrfInstances:
string:
networks:
- string
vrfExtraRoutes:
string:
via: string
vrrpConfig:
enabled: false
groups:
string:
priority: 0
x: 0
"y": 0
Switch Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The Switch resource accepts the following input properties:
- Device
Id string - Site
Id string - Acl
Policies List<Pulumi.Juniper Mist. Device. Inputs. Switch Acl Policy> - Dictionary<string, Pulumi.
Juniper Mist. Device. Inputs. Switch Acl Tags Args> - ACL Tags to identify traffic source or destination. Key name is the tag name
- Additional
Config List<string>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- Dhcp
Snooping Pulumi.Juniper Mist. Device. Inputs. Switch Dhcp Snooping - Dhcpd
Config Pulumi.Juniper Mist. Device. Inputs. Switch Dhcpd Config - Disable
Auto boolConfig - for a claimed switch, we control the configs by default. This option (disables the behavior)
- Dns
Servers List<string> - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - Dns
Suffixes List<string> - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - Evpn
Config Pulumi.Juniper Mist. Device. Inputs. Switch Evpn Config - EVPN Junos settings
- Extra
Routes Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Extra Routes Args> - Extra
Routes6 Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Extra Routes6Args> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- Ip
Config Pulumi.Juniper Mist. Device. Inputs. Switch Ip Config - Junos IP Config
- Managed bool
- for an adopted switch, we don’t overwrite their existing configs automatically
- Map
Id string - map where the device belongs to
- Mist
Nac Pulumi.Juniper Mist. Device. Inputs. Switch Mist Nac - enable mist_nac to use radsec
- Name string
- Networks
Dictionary<string, Pulumi.
Juniper Mist. Device. Inputs. Switch Networks Args> - Property key is network name
- Notes string
- Ntp
Servers List<string> - list of NTP servers specific to this device. By default, those in Site Settings will be used
- Oob
Ip Pulumi.Config Juniper Mist. Device. Inputs. Switch Oob Ip Config - If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
re1
- If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
- Ospf
Areas Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Ospf Areas Args> - Junos OSPF areas
- Other
Ip Dictionary<string, Pulumi.Configs Juniper Mist. Device. Inputs. Switch Other Ip Configs Args> - Property key is the network name
- Port
Config Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Port Config Args> - Property key is the port name or range (e.g. "ge-0/0/0-10")
- Port
Mirroring Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Port Mirroring Args> - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- Port
Usages Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Port Usages Args> - Radius
Config Pulumi.Juniper Mist. Device. Inputs. Switch Radius Config - Junos Radius config
- Remote
Syslog Pulumi.Juniper Mist. Device. Inputs. Switch Remote Syslog - Role string
- Router
Id string - used for OSPF / BGP / EVPN
- Snmp
Config Pulumi.Juniper Mist. Device. Inputs. Switch Snmp Config - Stp
Config Pulumi.Juniper Mist. Device. Inputs. Switch Stp Config - Switch
Mgmt Pulumi.Juniper Mist. Device. Inputs. Switch Switch Mgmt - Switch settings
- Use
Router boolId As Source Ip - whether to use it for snmp / syslog / tacplus / radius
- Vars Dictionary<string, string>
- a dictionary of name->value, the vars can then be used in Wlans. This can overwrite those from Site Vars
- Virtual
Chassis Pulumi.Juniper Mist. Device. Inputs. Switch Virtual Chassis - required for preprovisioned Virtual Chassis
- Vrf
Config Pulumi.Juniper Mist. Device. Inputs. Switch Vrf Config - Vrf
Instances Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Vrf Instances Args> - Property key is the network name
- Vrrp
Config Pulumi.Juniper Mist. Device. Inputs. Switch Vrrp Config - Junos VRRP config
- X double
- x in pixel
- Y double
- y in pixel
- Device
Id string - Site
Id string - Acl
Policies []SwitchAcl Policy Args - map[string]Switch
Acl Tags Args - ACL Tags to identify traffic source or destination. Key name is the tag name
- Additional
Config []stringCmds - additional CLI commands to append to the generated Junos config Note: no check is done
- Dhcp
Snooping SwitchDhcp Snooping Args - Dhcpd
Config SwitchDhcpd Config Args - Disable
Auto boolConfig - for a claimed switch, we control the configs by default. This option (disables the behavior)
- Dns
Servers []string - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - Dns
Suffixes []string - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - Evpn
Config SwitchEvpn Config Args - EVPN Junos settings
- Extra
Routes map[string]SwitchExtra Routes Args - Extra
Routes6 map[string]SwitchExtra Routes6Args - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- Ip
Config SwitchIp Config Args - Junos IP Config
- Managed bool
- for an adopted switch, we don’t overwrite their existing configs automatically
- Map
Id string - map where the device belongs to
- Mist
Nac SwitchMist Nac Args - enable mist_nac to use radsec
- Name string
- Networks
map[string]Switch
Networks Args - Property key is network name
- Notes string
- Ntp
Servers []string - list of NTP servers specific to this device. By default, those in Site Settings will be used
- Oob
Ip SwitchConfig Oob Ip Config Args - If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
re1
- If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
- Ospf
Areas map[string]SwitchOspf Areas Args - Junos OSPF areas
- Other
Ip map[string]SwitchConfigs Other Ip Configs Args - Property key is the network name
- Port
Config map[string]SwitchPort Config Args - Property key is the port name or range (e.g. "ge-0/0/0-10")
- Port
Mirroring map[string]SwitchPort Mirroring Args - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- Port
Usages map[string]SwitchPort Usages Args - Radius
Config SwitchRadius Config Args - Junos Radius config
- Remote
Syslog SwitchRemote Syslog Args - Role string
- Router
Id string - used for OSPF / BGP / EVPN
- Snmp
Config SwitchSnmp Config Args - Stp
Config SwitchStp Config Args - Switch
Mgmt SwitchSwitch Mgmt Args - Switch settings
- Use
Router boolId As Source Ip - whether to use it for snmp / syslog / tacplus / radius
- Vars map[string]string
- a dictionary of name->value, the vars can then be used in Wlans. This can overwrite those from Site Vars
- Virtual
Chassis SwitchVirtual Chassis Args - required for preprovisioned Virtual Chassis
- Vrf
Config SwitchVrf Config Args - Vrf
Instances map[string]SwitchVrf Instances Args - Property key is the network name
- Vrrp
Config SwitchVrrp Config Args - Junos VRRP config
- X float64
- x in pixel
- Y float64
- y in pixel
- device
Id String - site
Id String - acl
Policies List<SwitchAcl Policy> - Map<String,Switch
Acl Tags Args> - ACL Tags to identify traffic source or destination. Key name is the tag name
- additional
Config List<String>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- dhcp
Snooping SwitchDhcp Snooping - dhcpd
Config SwitchDhcpd Config - disable
Auto BooleanConfig - for a claimed switch, we control the configs by default. This option (disables the behavior)
- dns
Servers List<String> - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - dns
Suffixes List<String> - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - evpn
Config SwitchEvpn Config - EVPN Junos settings
- extra
Routes Map<String,SwitchExtra Routes Args> - extra
Routes6 Map<String,SwitchExtra Routes6Args> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- ip
Config SwitchIp Config - Junos IP Config
- managed Boolean
- for an adopted switch, we don’t overwrite their existing configs automatically
- map
Id String - map where the device belongs to
- mist
Nac SwitchMist Nac - enable mist_nac to use radsec
- name String
- networks
Map<String,Switch
Networks Args> - Property key is network name
- notes String
- ntp
Servers List<String> - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob
Ip SwitchConfig Oob Ip Config - If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
re1
- If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
- ospf
Areas Map<String,SwitchOspf Areas Args> - Junos OSPF areas
- other
Ip Map<String,SwitchConfigs Other Ip Configs Args> - Property key is the network name
- port
Config Map<String,SwitchPort Config Args> - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port
Mirroring Map<String,SwitchPort Mirroring Args> - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port
Usages Map<String,SwitchPort Usages Args> - radius
Config SwitchRadius Config - Junos Radius config
- remote
Syslog SwitchRemote Syslog - role String
- router
Id String - used for OSPF / BGP / EVPN
- snmp
Config SwitchSnmp Config - stp
Config SwitchStp Config - switch
Mgmt SwitchSwitch Mgmt - Switch settings
- use
Router BooleanId As Source Ip - whether to use it for snmp / syslog / tacplus / radius
- vars Map<String,String>
- a dictionary of name->value, the vars can then be used in Wlans. This can overwrite those from Site Vars
- virtual
Chassis SwitchVirtual Chassis - required for preprovisioned Virtual Chassis
- vrf
Config SwitchVrf Config - vrf
Instances Map<String,SwitchVrf Instances Args> - Property key is the network name
- vrrp
Config SwitchVrrp Config - Junos VRRP config
- x Double
- x in pixel
- y Double
- y in pixel
- device
Id string - site
Id string - acl
Policies SwitchAcl Policy[] - {[key: string]: Switch
Acl Tags Args} - ACL Tags to identify traffic source or destination. Key name is the tag name
- additional
Config string[]Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- dhcp
Snooping SwitchDhcp Snooping - dhcpd
Config SwitchDhcpd Config - disable
Auto booleanConfig - for a claimed switch, we control the configs by default. This option (disables the behavior)
- dns
Servers string[] - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - dns
Suffixes string[] - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - evpn
Config SwitchEvpn Config - EVPN Junos settings
- extra
Routes {[key: string]: SwitchExtra Routes Args} - extra
Routes6 {[key: string]: SwitchExtra Routes6Args} - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- ip
Config SwitchIp Config - Junos IP Config
- managed boolean
- for an adopted switch, we don’t overwrite their existing configs automatically
- map
Id string - map where the device belongs to
- mist
Nac SwitchMist Nac - enable mist_nac to use radsec
- name string
- networks
{[key: string]: Switch
Networks Args} - Property key is network name
- notes string
- ntp
Servers string[] - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob
Ip SwitchConfig Oob Ip Config - If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
re1
- If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
- ospf
Areas {[key: string]: SwitchOspf Areas Args} - Junos OSPF areas
- other
Ip {[key: string]: SwitchConfigs Other Ip Configs Args} - Property key is the network name
- port
Config {[key: string]: SwitchPort Config Args} - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port
Mirroring {[key: string]: SwitchPort Mirroring Args} - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port
Usages {[key: string]: SwitchPort Usages Args} - radius
Config SwitchRadius Config - Junos Radius config
- remote
Syslog SwitchRemote Syslog - role string
- router
Id string - used for OSPF / BGP / EVPN
- snmp
Config SwitchSnmp Config - stp
Config SwitchStp Config - switch
Mgmt SwitchSwitch Mgmt - Switch settings
- use
Router booleanId As Source Ip - whether to use it for snmp / syslog / tacplus / radius
- vars {[key: string]: string}
- a dictionary of name->value, the vars can then be used in Wlans. This can overwrite those from Site Vars
- virtual
Chassis SwitchVirtual Chassis - required for preprovisioned Virtual Chassis
- vrf
Config SwitchVrf Config - vrf
Instances {[key: string]: SwitchVrf Instances Args} - Property key is the network name
- vrrp
Config SwitchVrrp Config - Junos VRRP config
- x number
- x in pixel
- y number
- y in pixel
- device_
id str - site_
id str - acl_
policies Sequence[SwitchAcl Policy Args] - Mapping[str, Switch
Acl Tags Args] - ACL Tags to identify traffic source or destination. Key name is the tag name
- additional_
config_ Sequence[str]cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- dhcp_
snooping SwitchDhcp Snooping Args - dhcpd_
config SwitchDhcpd Config Args - disable_
auto_ boolconfig - for a claimed switch, we control the configs by default. This option (disables the behavior)
- dns_
servers Sequence[str] - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - dns_
suffixes Sequence[str] - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - evpn_
config SwitchEvpn Config Args - EVPN Junos settings
- extra_
routes Mapping[str, SwitchExtra Routes Args] - extra_
routes6 Mapping[str, SwitchExtra Routes6Args] - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- ip_
config SwitchIp Config Args - Junos IP Config
- managed bool
- for an adopted switch, we don’t overwrite their existing configs automatically
- map_
id str - map where the device belongs to
- mist_
nac SwitchMist Nac Args - enable mist_nac to use radsec
- name str
- networks
Mapping[str, Switch
Networks Args] - Property key is network name
- notes str
- ntp_
servers Sequence[str] - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob_
ip_ Switchconfig Oob Ip Config Args - If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
re1
- If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
- ospf_
areas Mapping[str, SwitchOspf Areas Args] - Junos OSPF areas
- other_
ip_ Mapping[str, Switchconfigs Other Ip Configs Args] - Property key is the network name
- port_
config Mapping[str, SwitchPort Config Args] - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port_
mirroring Mapping[str, SwitchPort Mirroring Args] - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port_
usages Mapping[str, SwitchPort Usages Args] - radius_
config SwitchRadius Config Args - Junos Radius config
- remote_
syslog SwitchRemote Syslog Args - role str
- router_
id str - used for OSPF / BGP / EVPN
- snmp_
config SwitchSnmp Config Args - stp_
config SwitchStp Config Args - switch_
mgmt SwitchSwitch Mgmt Args - Switch settings
- use_
router_ boolid_ as_ source_ ip - whether to use it for snmp / syslog / tacplus / radius
- vars Mapping[str, str]
- a dictionary of name->value, the vars can then be used in Wlans. This can overwrite those from Site Vars
- virtual_
chassis SwitchVirtual Chassis Args - required for preprovisioned Virtual Chassis
- vrf_
config SwitchVrf Config Args - vrf_
instances Mapping[str, SwitchVrf Instances Args] - Property key is the network name
- vrrp_
config SwitchVrrp Config Args - Junos VRRP config
- x float
- x in pixel
- y float
- y in pixel
- device
Id String - site
Id String - acl
Policies List<Property Map> - Map<Property Map>
- ACL Tags to identify traffic source or destination. Key name is the tag name
- additional
Config List<String>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- dhcp
Snooping Property Map - dhcpd
Config Property Map - disable
Auto BooleanConfig - for a claimed switch, we control the configs by default. This option (disables the behavior)
- dns
Servers List<String> - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - dns
Suffixes List<String> - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - evpn
Config Property Map - EVPN Junos settings
- extra
Routes Map<Property Map> - extra
Routes6 Map<Property Map> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- ip
Config Property Map - Junos IP Config
- managed Boolean
- for an adopted switch, we don’t overwrite their existing configs automatically
- map
Id String - map where the device belongs to
- mist
Nac Property Map - enable mist_nac to use radsec
- name String
- networks Map<Property Map>
- Property key is network name
- notes String
- ntp
Servers List<String> - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob
Ip Property MapConfig - If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
re1
- If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
- ospf
Areas Map<Property Map> - Junos OSPF areas
- other
Ip Map<Property Map>Configs - Property key is the network name
- port
Config Map<Property Map> - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port
Mirroring Map<Property Map> - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port
Usages Map<Property Map> - radius
Config Property Map - Junos Radius config
- remote
Syslog Property Map - role String
- router
Id String - used for OSPF / BGP / EVPN
- snmp
Config Property Map - stp
Config Property Map - switch
Mgmt Property Map - Switch settings
- use
Router BooleanId As Source Ip - whether to use it for snmp / syslog / tacplus / radius
- vars Map<String>
- a dictionary of name->value, the vars can then be used in Wlans. This can overwrite those from Site Vars
- virtual
Chassis Property Map - required for preprovisioned Virtual Chassis
- vrf
Config Property Map - vrf
Instances Map<Property Map> - Property key is the network name
- vrrp
Config Property Map - Junos VRRP config
- x Number
- x in pixel
- y Number
- y in pixel
Outputs
All input properties are implicitly available as output properties. Additionally, the Switch resource produces the following output properties:
- id str
- The provider-assigned unique ID for this managed resource.
- image1_
url str - image2_
url str - image3_
url str - mac str
- device MAC address
- model str
- device Model
- org_
id str - serial str
- device Serial
- type str
- Device Type. enum:
switch
Look up Existing Switch Resource
Get an existing Switch resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: SwitchState, opts?: CustomResourceOptions): Switch
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
acl_policies: Optional[Sequence[SwitchAclPolicyArgs]] = None,
acl_tags: Optional[Mapping[str, SwitchAclTagsArgs]] = None,
additional_config_cmds: Optional[Sequence[str]] = None,
device_id: Optional[str] = None,
dhcp_snooping: Optional[SwitchDhcpSnoopingArgs] = None,
dhcpd_config: Optional[SwitchDhcpdConfigArgs] = None,
disable_auto_config: Optional[bool] = None,
dns_servers: Optional[Sequence[str]] = None,
dns_suffixes: Optional[Sequence[str]] = None,
evpn_config: Optional[SwitchEvpnConfigArgs] = None,
extra_routes: Optional[Mapping[str, SwitchExtraRoutesArgs]] = None,
extra_routes6: Optional[Mapping[str, SwitchExtraRoutes6Args]] = None,
image1_url: Optional[str] = None,
image2_url: Optional[str] = None,
image3_url: Optional[str] = None,
ip_config: Optional[SwitchIpConfigArgs] = None,
mac: Optional[str] = None,
managed: Optional[bool] = None,
map_id: Optional[str] = None,
mist_nac: Optional[SwitchMistNacArgs] = None,
model: Optional[str] = None,
name: Optional[str] = None,
networks: Optional[Mapping[str, SwitchNetworksArgs]] = None,
notes: Optional[str] = None,
ntp_servers: Optional[Sequence[str]] = None,
oob_ip_config: Optional[SwitchOobIpConfigArgs] = None,
org_id: Optional[str] = None,
ospf_areas: Optional[Mapping[str, SwitchOspfAreasArgs]] = None,
other_ip_configs: Optional[Mapping[str, SwitchOtherIpConfigsArgs]] = None,
port_config: Optional[Mapping[str, SwitchPortConfigArgs]] = None,
port_mirroring: Optional[Mapping[str, SwitchPortMirroringArgs]] = None,
port_usages: Optional[Mapping[str, SwitchPortUsagesArgs]] = None,
radius_config: Optional[SwitchRadiusConfigArgs] = None,
remote_syslog: Optional[SwitchRemoteSyslogArgs] = None,
role: Optional[str] = None,
router_id: Optional[str] = None,
serial: Optional[str] = None,
site_id: Optional[str] = None,
snmp_config: Optional[SwitchSnmpConfigArgs] = None,
stp_config: Optional[SwitchStpConfigArgs] = None,
switch_mgmt: Optional[SwitchSwitchMgmtArgs] = None,
type: Optional[str] = None,
use_router_id_as_source_ip: Optional[bool] = None,
vars: Optional[Mapping[str, str]] = None,
virtual_chassis: Optional[SwitchVirtualChassisArgs] = None,
vrf_config: Optional[SwitchVrfConfigArgs] = None,
vrf_instances: Optional[Mapping[str, SwitchVrfInstancesArgs]] = None,
vrrp_config: Optional[SwitchVrrpConfigArgs] = None,
x: Optional[float] = None,
y: Optional[float] = None) -> Switch
func GetSwitch(ctx *Context, name string, id IDInput, state *SwitchState, opts ...ResourceOption) (*Switch, error)
public static Switch Get(string name, Input<string> id, SwitchState? state, CustomResourceOptions? opts = null)
public static Switch get(String name, Output<String> id, SwitchState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Acl
Policies List<Pulumi.Juniper Mist. Device. Inputs. Switch Acl Policy> - Dictionary<string, Pulumi.
Juniper Mist. Device. Inputs. Switch Acl Tags Args> - ACL Tags to identify traffic source or destination. Key name is the tag name
- Additional
Config List<string>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- Device
Id string - Dhcp
Snooping Pulumi.Juniper Mist. Device. Inputs. Switch Dhcp Snooping - Dhcpd
Config Pulumi.Juniper Mist. Device. Inputs. Switch Dhcpd Config - Disable
Auto boolConfig - for a claimed switch, we control the configs by default. This option (disables the behavior)
- Dns
Servers List<string> - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - Dns
Suffixes List<string> - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - Evpn
Config Pulumi.Juniper Mist. Device. Inputs. Switch Evpn Config - EVPN Junos settings
- Extra
Routes Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Extra Routes Args> - Extra
Routes6 Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Extra Routes6Args> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- Image1Url string
- Image2Url string
- Image3Url string
- Ip
Config Pulumi.Juniper Mist. Device. Inputs. Switch Ip Config - Junos IP Config
- Mac string
- device MAC address
- Managed bool
- for an adopted switch, we don’t overwrite their existing configs automatically
- Map
Id string - map where the device belongs to
- Mist
Nac Pulumi.Juniper Mist. Device. Inputs. Switch Mist Nac - enable mist_nac to use radsec
- Model string
- device Model
- Name string
- Networks
Dictionary<string, Pulumi.
Juniper Mist. Device. Inputs. Switch Networks Args> - Property key is network name
- Notes string
- Ntp
Servers List<string> - list of NTP servers specific to this device. By default, those in Site Settings will be used
- Oob
Ip Pulumi.Config Juniper Mist. Device. Inputs. Switch Oob Ip Config - If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
re1
- If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
- Org
Id string - Ospf
Areas Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Ospf Areas Args> - Junos OSPF areas
- Other
Ip Dictionary<string, Pulumi.Configs Juniper Mist. Device. Inputs. Switch Other Ip Configs Args> - Property key is the network name
- Port
Config Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Port Config Args> - Property key is the port name or range (e.g. "ge-0/0/0-10")
- Port
Mirroring Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Port Mirroring Args> - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- Port
Usages Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Port Usages Args> - Radius
Config Pulumi.Juniper Mist. Device. Inputs. Switch Radius Config - Junos Radius config
- Remote
Syslog Pulumi.Juniper Mist. Device. Inputs. Switch Remote Syslog - Role string
- Router
Id string - used for OSPF / BGP / EVPN
- Serial string
- device Serial
- Site
Id string - Snmp
Config Pulumi.Juniper Mist. Device. Inputs. Switch Snmp Config - Stp
Config Pulumi.Juniper Mist. Device. Inputs. Switch Stp Config - Switch
Mgmt Pulumi.Juniper Mist. Device. Inputs. Switch Switch Mgmt - Switch settings
- Type string
- Device Type. enum:
switch
- Use
Router boolId As Source Ip - whether to use it for snmp / syslog / tacplus / radius
- Vars Dictionary<string, string>
- a dictionary of name->value, the vars can then be used in Wlans. This can overwrite those from Site Vars
- Virtual
Chassis Pulumi.Juniper Mist. Device. Inputs. Switch Virtual Chassis - required for preprovisioned Virtual Chassis
- Vrf
Config Pulumi.Juniper Mist. Device. Inputs. Switch Vrf Config - Vrf
Instances Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Vrf Instances Args> - Property key is the network name
- Vrrp
Config Pulumi.Juniper Mist. Device. Inputs. Switch Vrrp Config - Junos VRRP config
- X double
- x in pixel
- Y double
- y in pixel
- Acl
Policies []SwitchAcl Policy Args - map[string]Switch
Acl Tags Args - ACL Tags to identify traffic source or destination. Key name is the tag name
- Additional
Config []stringCmds - additional CLI commands to append to the generated Junos config Note: no check is done
- Device
Id string - Dhcp
Snooping SwitchDhcp Snooping Args - Dhcpd
Config SwitchDhcpd Config Args - Disable
Auto boolConfig - for a claimed switch, we control the configs by default. This option (disables the behavior)
- Dns
Servers []string - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - Dns
Suffixes []string - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - Evpn
Config SwitchEvpn Config Args - EVPN Junos settings
- Extra
Routes map[string]SwitchExtra Routes Args - Extra
Routes6 map[string]SwitchExtra Routes6Args - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- Image1Url string
- Image2Url string
- Image3Url string
- Ip
Config SwitchIp Config Args - Junos IP Config
- Mac string
- device MAC address
- Managed bool
- for an adopted switch, we don’t overwrite their existing configs automatically
- Map
Id string - map where the device belongs to
- Mist
Nac SwitchMist Nac Args - enable mist_nac to use radsec
- Model string
- device Model
- Name string
- Networks
map[string]Switch
Networks Args - Property key is network name
- Notes string
- Ntp
Servers []string - list of NTP servers specific to this device. By default, those in Site Settings will be used
- Oob
Ip SwitchConfig Oob Ip Config Args - If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
re1
- If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
- Org
Id string - Ospf
Areas map[string]SwitchOspf Areas Args - Junos OSPF areas
- Other
Ip map[string]SwitchConfigs Other Ip Configs Args - Property key is the network name
- Port
Config map[string]SwitchPort Config Args - Property key is the port name or range (e.g. "ge-0/0/0-10")
- Port
Mirroring map[string]SwitchPort Mirroring Args - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- Port
Usages map[string]SwitchPort Usages Args - Radius
Config SwitchRadius Config Args - Junos Radius config
- Remote
Syslog SwitchRemote Syslog Args - Role string
- Router
Id string - used for OSPF / BGP / EVPN
- Serial string
- device Serial
- Site
Id string - Snmp
Config SwitchSnmp Config Args - Stp
Config SwitchStp Config Args - Switch
Mgmt SwitchSwitch Mgmt Args - Switch settings
- Type string
- Device Type. enum:
switch
- Use
Router boolId As Source Ip - whether to use it for snmp / syslog / tacplus / radius
- Vars map[string]string
- a dictionary of name->value, the vars can then be used in Wlans. This can overwrite those from Site Vars
- Virtual
Chassis SwitchVirtual Chassis Args - required for preprovisioned Virtual Chassis
- Vrf
Config SwitchVrf Config Args - Vrf
Instances map[string]SwitchVrf Instances Args - Property key is the network name
- Vrrp
Config SwitchVrrp Config Args - Junos VRRP config
- X float64
- x in pixel
- Y float64
- y in pixel
- acl
Policies List<SwitchAcl Policy> - Map<String,Switch
Acl Tags Args> - ACL Tags to identify traffic source or destination. Key name is the tag name
- additional
Config List<String>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- device
Id String - dhcp
Snooping SwitchDhcp Snooping - dhcpd
Config SwitchDhcpd Config - disable
Auto BooleanConfig - for a claimed switch, we control the configs by default. This option (disables the behavior)
- dns
Servers List<String> - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - dns
Suffixes List<String> - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - evpn
Config SwitchEvpn Config - EVPN Junos settings
- extra
Routes Map<String,SwitchExtra Routes Args> - extra
Routes6 Map<String,SwitchExtra Routes6Args> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- image1Url String
- image2Url String
- image3Url String
- ip
Config SwitchIp Config - Junos IP Config
- mac String
- device MAC address
- managed Boolean
- for an adopted switch, we don’t overwrite their existing configs automatically
- map
Id String - map where the device belongs to
- mist
Nac SwitchMist Nac - enable mist_nac to use radsec
- model String
- device Model
- name String
- networks
Map<String,Switch
Networks Args> - Property key is network name
- notes String
- ntp
Servers List<String> - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob
Ip SwitchConfig Oob Ip Config - If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
re1
- If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
- org
Id String - ospf
Areas Map<String,SwitchOspf Areas Args> - Junos OSPF areas
- other
Ip Map<String,SwitchConfigs Other Ip Configs Args> - Property key is the network name
- port
Config Map<String,SwitchPort Config Args> - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port
Mirroring Map<String,SwitchPort Mirroring Args> - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port
Usages Map<String,SwitchPort Usages Args> - radius
Config SwitchRadius Config - Junos Radius config
- remote
Syslog SwitchRemote Syslog - role String
- router
Id String - used for OSPF / BGP / EVPN
- serial String
- device Serial
- site
Id String - snmp
Config SwitchSnmp Config - stp
Config SwitchStp Config - switch
Mgmt SwitchSwitch Mgmt - Switch settings
- type String
- Device Type. enum:
switch
- use
Router BooleanId As Source Ip - whether to use it for snmp / syslog / tacplus / radius
- vars Map<String,String>
- a dictionary of name->value, the vars can then be used in Wlans. This can overwrite those from Site Vars
- virtual
Chassis SwitchVirtual Chassis - required for preprovisioned Virtual Chassis
- vrf
Config SwitchVrf Config - vrf
Instances Map<String,SwitchVrf Instances Args> - Property key is the network name
- vrrp
Config SwitchVrrp Config - Junos VRRP config
- x Double
- x in pixel
- y Double
- y in pixel
- acl
Policies SwitchAcl Policy[] - {[key: string]: Switch
Acl Tags Args} - ACL Tags to identify traffic source or destination. Key name is the tag name
- additional
Config string[]Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- device
Id string - dhcp
Snooping SwitchDhcp Snooping - dhcpd
Config SwitchDhcpd Config - disable
Auto booleanConfig - for a claimed switch, we control the configs by default. This option (disables the behavior)
- dns
Servers string[] - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - dns
Suffixes string[] - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - evpn
Config SwitchEvpn Config - EVPN Junos settings
- extra
Routes {[key: string]: SwitchExtra Routes Args} - extra
Routes6 {[key: string]: SwitchExtra Routes6Args} - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- image1Url string
- image2Url string
- image3Url string
- ip
Config SwitchIp Config - Junos IP Config
- mac string
- device MAC address
- managed boolean
- for an adopted switch, we don’t overwrite their existing configs automatically
- map
Id string - map where the device belongs to
- mist
Nac SwitchMist Nac - enable mist_nac to use radsec
- model string
- device Model
- name string
- networks
{[key: string]: Switch
Networks Args} - Property key is network name
- notes string
- ntp
Servers string[] - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob
Ip SwitchConfig Oob Ip Config - If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
re1
- If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
- org
Id string - ospf
Areas {[key: string]: SwitchOspf Areas Args} - Junos OSPF areas
- other
Ip {[key: string]: SwitchConfigs Other Ip Configs Args} - Property key is the network name
- port
Config {[key: string]: SwitchPort Config Args} - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port
Mirroring {[key: string]: SwitchPort Mirroring Args} - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port
Usages {[key: string]: SwitchPort Usages Args} - radius
Config SwitchRadius Config - Junos Radius config
- remote
Syslog SwitchRemote Syslog - role string
- router
Id string - used for OSPF / BGP / EVPN
- serial string
- device Serial
- site
Id string - snmp
Config SwitchSnmp Config - stp
Config SwitchStp Config - switch
Mgmt SwitchSwitch Mgmt - Switch settings
- type string
- Device Type. enum:
switch
- use
Router booleanId As Source Ip - whether to use it for snmp / syslog / tacplus / radius
- vars {[key: string]: string}
- a dictionary of name->value, the vars can then be used in Wlans. This can overwrite those from Site Vars
- virtual
Chassis SwitchVirtual Chassis - required for preprovisioned Virtual Chassis
- vrf
Config SwitchVrf Config - vrf
Instances {[key: string]: SwitchVrf Instances Args} - Property key is the network name
- vrrp
Config SwitchVrrp Config - Junos VRRP config
- x number
- x in pixel
- y number
- y in pixel
- acl_
policies Sequence[SwitchAcl Policy Args] - Mapping[str, Switch
Acl Tags Args] - ACL Tags to identify traffic source or destination. Key name is the tag name
- additional_
config_ Sequence[str]cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- device_
id str - dhcp_
snooping SwitchDhcp Snooping Args - dhcpd_
config SwitchDhcpd Config Args - disable_
auto_ boolconfig - for a claimed switch, we control the configs by default. This option (disables the behavior)
- dns_
servers Sequence[str] - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - dns_
suffixes Sequence[str] - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - evpn_
config SwitchEvpn Config Args - EVPN Junos settings
- extra_
routes Mapping[str, SwitchExtra Routes Args] - extra_
routes6 Mapping[str, SwitchExtra Routes6Args] - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- image1_
url str - image2_
url str - image3_
url str - ip_
config SwitchIp Config Args - Junos IP Config
- mac str
- device MAC address
- managed bool
- for an adopted switch, we don’t overwrite their existing configs automatically
- map_
id str - map where the device belongs to
- mist_
nac SwitchMist Nac Args - enable mist_nac to use radsec
- model str
- device Model
- name str
- networks
Mapping[str, Switch
Networks Args] - Property key is network name
- notes str
- ntp_
servers Sequence[str] - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob_
ip_ Switchconfig Oob Ip Config Args - If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
re1
- If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
- org_
id str - ospf_
areas Mapping[str, SwitchOspf Areas Args] - Junos OSPF areas
- other_
ip_ Mapping[str, Switchconfigs Other Ip Configs Args] - Property key is the network name
- port_
config Mapping[str, SwitchPort Config Args] - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port_
mirroring Mapping[str, SwitchPort Mirroring Args] - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port_
usages Mapping[str, SwitchPort Usages Args] - radius_
config SwitchRadius Config Args - Junos Radius config
- remote_
syslog SwitchRemote Syslog Args - role str
- router_
id str - used for OSPF / BGP / EVPN
- serial str
- device Serial
- site_
id str - snmp_
config SwitchSnmp Config Args - stp_
config SwitchStp Config Args - switch_
mgmt SwitchSwitch Mgmt Args - Switch settings
- type str
- Device Type. enum:
switch
- use_
router_ boolid_ as_ source_ ip - whether to use it for snmp / syslog / tacplus / radius
- vars Mapping[str, str]
- a dictionary of name->value, the vars can then be used in Wlans. This can overwrite those from Site Vars
- virtual_
chassis SwitchVirtual Chassis Args - required for preprovisioned Virtual Chassis
- vrf_
config SwitchVrf Config Args - vrf_
instances Mapping[str, SwitchVrf Instances Args] - Property key is the network name
- vrrp_
config SwitchVrrp Config Args - Junos VRRP config
- x float
- x in pixel
- y float
- y in pixel
- acl
Policies List<Property Map> - Map<Property Map>
- ACL Tags to identify traffic source or destination. Key name is the tag name
- additional
Config List<String>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- device
Id String - dhcp
Snooping Property Map - dhcpd
Config Property Map - disable
Auto BooleanConfig - for a claimed switch, we control the configs by default. This option (disables the behavior)
- dns
Servers List<String> - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - dns
Suffixes List<String> - Global dns settings. To keep compatibility, dns settings in
ip_config
andoob_ip_config
will overwrite this setting - evpn
Config Property Map - EVPN Junos settings
- extra
Routes Map<Property Map> - extra
Routes6 Map<Property Map> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- image1Url String
- image2Url String
- image3Url String
- ip
Config Property Map - Junos IP Config
- mac String
- device MAC address
- managed Boolean
- for an adopted switch, we don’t overwrite their existing configs automatically
- map
Id String - map where the device belongs to
- mist
Nac Property Map - enable mist_nac to use radsec
- model String
- device Model
- name String
- networks Map<Property Map>
- Property key is network name
- notes String
- ntp
Servers List<String> - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob
Ip Property MapConfig - If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
re1
- If HA configuration: key parameter will be nodeX (eg: node1) - If there are 2 routing engines, re1 mgmt IP has to be
set separately (if desired): key parameter =
- org
Id String - ospf
Areas Map<Property Map> - Junos OSPF areas
- other
Ip Map<Property Map>Configs - Property key is the network name
- port
Config Map<Property Map> - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port
Mirroring Map<Property Map> - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port
Usages Map<Property Map> - radius
Config Property Map - Junos Radius config
- remote
Syslog Property Map - role String
- router
Id String - used for OSPF / BGP / EVPN
- serial String
- device Serial
- site
Id String - snmp
Config Property Map - stp
Config Property Map - switch
Mgmt Property Map - Switch settings
- type String
- Device Type. enum:
switch
- use
Router BooleanId As Source Ip - whether to use it for snmp / syslog / tacplus / radius
- vars Map<String>
- a dictionary of name->value, the vars can then be used in Wlans. This can overwrite those from Site Vars
- virtual
Chassis Property Map - required for preprovisioned Virtual Chassis
- vrf
Config Property Map - vrf
Instances Map<Property Map> - Property key is the network name
- vrrp
Config Property Map - Junos VRRP config
- x Number
- x in pixel
- y Number
- y in pixel
Supporting Types
SwitchAclPolicy, SwitchAclPolicyArgs
- Actions
List<Pulumi.
Juniper Mist. Device. Inputs. Switch Acl Policy Action> - for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
network
is required in either the source or destination so that we know where to attach the policy to
- Name string
- List<string>
- for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
network
is required in either the source or destination so that we know where to attach the policy to
- Actions
[]Switch
Acl Policy Action - for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
network
is required in either the source or destination so that we know where to attach the policy to
- Name string
- []string
- for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
network
is required in either the source or destination so that we know where to attach the policy to
- actions
List<Switch
Acl Policy Action> - for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
network
is required in either the source or destination so that we know where to attach the policy to
- name String
- List<String>
- for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
network
is required in either the source or destination so that we know where to attach the policy to
- actions
Switch
Acl Policy Action[] - for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
network
is required in either the source or destination so that we know where to attach the policy to
- name string
- string[]
- for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
network
is required in either the source or destination so that we know where to attach the policy to
- actions
Sequence[Switch
Acl Policy Action] - for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
network
is required in either the source or destination so that we know where to attach the policy to
- name str
- Sequence[str]
- for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
network
is required in either the source or destination so that we know where to attach the policy to
- actions List<Property Map>
- for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
network
is required in either the source or destination so that we know where to attach the policy to
- name String
- List<String>
- for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
network
is required in either the source or destination so that we know where to attach the policy to
SwitchAclPolicyAction, SwitchAclPolicyActionArgs
SwitchAclTags, SwitchAclTagsArgs
- Type string
- enum:
any
,dynamic_gbp
,mac
,network
,radius_group
,resource
,static_gbp
,subnet
- Gbp
Tag int - required if
type
==dynamic_gbp
(gbp_tag received from RADIUS)type
==static_gbp
(applying gbp tag against matching conditions)
- Macs List<string>
- required if
type
==mac
type
==static_gbp
if from matching mac
- Network string
- if:
type
==mac
(optional. default isany
)type
==subnet
(optional. default isany
)type
==network
type
==resource
(optional. default isany
)type
==static_gbp
if from matching network (vlan)'
- Radius
Group string - required if:
type
==radius_group
type
==static_gbp
if from matching radius_group
- Specs
List<Pulumi.
Juniper Mist. Device. Inputs. Switch Acl Tags Spec> - if
type
==resource
empty means unrestricted, i.e. any - Subnets List<string>
- if
type
==subnet
type
==resource
(optional. default isany
)type
==static_gbp
if from matching subnet
- Type string
- enum:
any
,dynamic_gbp
,mac
,network
,radius_group
,resource
,static_gbp
,subnet
- Gbp
Tag int - required if
type
==dynamic_gbp
(gbp_tag received from RADIUS)type
==static_gbp
(applying gbp tag against matching conditions)
- Macs []string
- required if
type
==mac
type
==static_gbp
if from matching mac
- Network string
- if:
type
==mac
(optional. default isany
)type
==subnet
(optional. default isany
)type
==network
type
==resource
(optional. default isany
)type
==static_gbp
if from matching network (vlan)'
- Radius
Group string - required if:
type
==radius_group
type
==static_gbp
if from matching radius_group
- Specs
[]Switch
Acl Tags Spec - if
type
==resource
empty means unrestricted, i.e. any - Subnets []string
- if
type
==subnet
type
==resource
(optional. default isany
)type
==static_gbp
if from matching subnet
- type String
- enum:
any
,dynamic_gbp
,mac
,network
,radius_group
,resource
,static_gbp
,subnet
- gbp
Tag Integer - required if
type
==dynamic_gbp
(gbp_tag received from RADIUS)type
==static_gbp
(applying gbp tag against matching conditions)
- macs List<String>
- required if
type
==mac
type
==static_gbp
if from matching mac
- network String
- if:
type
==mac
(optional. default isany
)type
==subnet
(optional. default isany
)type
==network
type
==resource
(optional. default isany
)type
==static_gbp
if from matching network (vlan)'
- radius
Group String - required if:
type
==radius_group
type
==static_gbp
if from matching radius_group
- specs
List<Switch
Acl Tags Spec> - if
type
==resource
empty means unrestricted, i.e. any - subnets List<String>
- if
type
==subnet
type
==resource
(optional. default isany
)type
==static_gbp
if from matching subnet
- type string
- enum:
any
,dynamic_gbp
,mac
,network
,radius_group
,resource
,static_gbp
,subnet
- gbp
Tag number - required if
type
==dynamic_gbp
(gbp_tag received from RADIUS)type
==static_gbp
(applying gbp tag against matching conditions)
- macs string[]
- required if
type
==mac
type
==static_gbp
if from matching mac
- network string
- if:
type
==mac
(optional. default isany
)type
==subnet
(optional. default isany
)type
==network
type
==resource
(optional. default isany
)type
==static_gbp
if from matching network (vlan)'
- radius
Group string - required if:
type
==radius_group
type
==static_gbp
if from matching radius_group
- specs
Switch
Acl Tags Spec[] - if
type
==resource
empty means unrestricted, i.e. any - subnets string[]
- if
type
==subnet
type
==resource
(optional. default isany
)type
==static_gbp
if from matching subnet
- type str
- enum:
any
,dynamic_gbp
,mac
,network
,radius_group
,resource
,static_gbp
,subnet
- gbp_
tag int - required if
type
==dynamic_gbp
(gbp_tag received from RADIUS)type
==static_gbp
(applying gbp tag against matching conditions)
- macs Sequence[str]
- required if
type
==mac
type
==static_gbp
if from matching mac
- network str
- if:
type
==mac
(optional. default isany
)type
==subnet
(optional. default isany
)type
==network
type
==resource
(optional. default isany
)type
==static_gbp
if from matching network (vlan)'
- radius_
group str - required if:
type
==radius_group
type
==static_gbp
if from matching radius_group
- specs
Sequence[Switch
Acl Tags Spec] - if
type
==resource
empty means unrestricted, i.e. any - subnets Sequence[str]
- if
type
==subnet
type
==resource
(optional. default isany
)type
==static_gbp
if from matching subnet
- type String
- enum:
any
,dynamic_gbp
,mac
,network
,radius_group
,resource
,static_gbp
,subnet
- gbp
Tag Number - required if
type
==dynamic_gbp
(gbp_tag received from RADIUS)type
==static_gbp
(applying gbp tag against matching conditions)
- macs List<String>
- required if
type
==mac
type
==static_gbp
if from matching mac
- network String
- if:
type
==mac
(optional. default isany
)type
==subnet
(optional. default isany
)type
==network
type
==resource
(optional. default isany
)type
==static_gbp
if from matching network (vlan)'
- radius
Group String - required if:
type
==radius_group
type
==static_gbp
if from matching radius_group
- specs List<Property Map>
- if
type
==resource
empty means unrestricted, i.e. any - subnets List<String>
- if
type
==subnet
type
==resource
(optional. default isany
)type
==static_gbp
if from matching subnet
SwitchAclTagsSpec, SwitchAclTagsSpecArgs
- port_
range str - matched dst port, "0" means any
- protocol str
tcp
/udp
/icmp
/gre
/any
/:protocol_number
.protocol_number
is between 1-254
SwitchDhcpSnooping, SwitchDhcpSnoopingArgs
- All
Networks bool - Enable
Arp boolSpoof Check - Enable for dynamic ARP inspection check
- Enable
Ip boolSource Guard - Enable for check for forging source IP address
- Enabled bool
- Networks List<string>
- if
all_networks
==false
, list of network with DHCP snooping enabled
- All
Networks bool - Enable
Arp boolSpoof Check - Enable for dynamic ARP inspection check
- Enable
Ip boolSource Guard - Enable for check for forging source IP address
- Enabled bool
- Networks []string
- if
all_networks
==false
, list of network with DHCP snooping enabled
- all
Networks Boolean - enable
Arp BooleanSpoof Check - Enable for dynamic ARP inspection check
- enable
Ip BooleanSource Guard - Enable for check for forging source IP address
- enabled Boolean
- networks List<String>
- if
all_networks
==false
, list of network with DHCP snooping enabled
- all
Networks boolean - enable
Arp booleanSpoof Check - Enable for dynamic ARP inspection check
- enable
Ip booleanSource Guard - Enable for check for forging source IP address
- enabled boolean
- networks string[]
- if
all_networks
==false
, list of network with DHCP snooping enabled
- all_
networks bool - enable_
arp_ boolspoof_ check - Enable for dynamic ARP inspection check
- enable_
ip_ boolsource_ guard - Enable for check for forging source IP address
- enabled bool
- networks Sequence[str]
- if
all_networks
==false
, list of network with DHCP snooping enabled
- all
Networks Boolean - enable
Arp BooleanSpoof Check - Enable for dynamic ARP inspection check
- enable
Ip BooleanSource Guard - Enable for check for forging source IP address
- enabled Boolean
- networks List<String>
- if
all_networks
==false
, list of network with DHCP snooping enabled
SwitchDhcpdConfig, SwitchDhcpdConfigArgs
SwitchDhcpdConfigConfig, SwitchDhcpdConfigConfigArgs
- Dns
Servers List<string> - if
type
==local
- optional, if not defined, system one will be used - Dns
Suffixes List<string> - if
type
==local
- optional, if not defined, system one will be used - Fixed
Bindings Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Dhcpd Config Config Fixed Bindings> - Property key is the MAC Address. Format is
[0-9a-f]{12}
(e.g "5684dae9ac8b") - Gateway string
- if
type
==local
- optional,ip
will be used if not provided - Ip
End string - if
type
==local
- Ip
End6 string - if
type6
==local
- Ip
Start string - if
type
==local
- Ip
Start6 string - if
type6
==local
- Lease
Time int - in seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- Options
Dictionary<string, Pulumi.
Juniper Mist. Device. Inputs. Switch Dhcpd Config Config Options> - Property key is the DHCP option number
- Server
Id boolOverride server_id_override
==true
means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- Servers List<string>
- if
type
==relay
- Servers6s List<string>
- if
type6
==relay
- Type string
- enum:
none
,relay
(DHCP Relay),server
(DHCP Server) - Type6 string
- enum:
none
,relay
(DHCP Relay),server
(DHCP Server) - Vendor
Encapulated Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Dhcpd Config Config Vendor Encapulated> - Property key is :, with
- enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
- sub option code: 1-255, sub-option code'
- Dns
Servers []string - if
type
==local
- optional, if not defined, system one will be used - Dns
Suffixes []string - if
type
==local
- optional, if not defined, system one will be used - Fixed
Bindings map[string]SwitchDhcpd Config Config Fixed Bindings - Property key is the MAC Address. Format is
[0-9a-f]{12}
(e.g "5684dae9ac8b") - Gateway string
- if
type
==local
- optional,ip
will be used if not provided - Ip
End string - if
type
==local
- Ip
End6 string - if
type6
==local
- Ip
Start string - if
type
==local
- Ip
Start6 string - if
type6
==local
- Lease
Time int - in seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- Options
map[string]Switch
Dhcpd Config Config Options - Property key is the DHCP option number
- Server
Id boolOverride server_id_override
==true
means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- Servers []string
- if
type
==relay
- Servers6s []string
- if
type6
==relay
- Type string
- enum:
none
,relay
(DHCP Relay),server
(DHCP Server) - Type6 string
- enum:
none
,relay
(DHCP Relay),server
(DHCP Server) - Vendor
Encapulated map[string]SwitchDhcpd Config Config Vendor Encapulated - Property key is :, with
- enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
- sub option code: 1-255, sub-option code'
- dns
Servers List<String> - if
type
==local
- optional, if not defined, system one will be used - dns
Suffixes List<String> - if
type
==local
- optional, if not defined, system one will be used - fixed
Bindings Map<String,SwitchDhcpd Config Config Fixed Bindings> - Property key is the MAC Address. Format is
[0-9a-f]{12}
(e.g "5684dae9ac8b") - gateway String
- if
type
==local
- optional,ip
will be used if not provided - ip
End String - if
type
==local
- ip
End6 String - if
type6
==local
- ip
Start String - if
type
==local
- ip
Start6 String - if
type6
==local
- lease
Time Integer - in seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options
Map<String,Switch
Dhcpd Config Config Options> - Property key is the DHCP option number
- server
Id BooleanOverride server_id_override
==true
means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers List<String>
- if
type
==relay
- servers6s List<String>
- if
type6
==relay
- type String
- enum:
none
,relay
(DHCP Relay),server
(DHCP Server) - type6 String
- enum:
none
,relay
(DHCP Relay),server
(DHCP Server) - vendor
Encapulated Map<String,SwitchDhcpd Config Config Vendor Encapulated> - Property key is :, with
- enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
- sub option code: 1-255, sub-option code'
- dns
Servers string[] - if
type
==local
- optional, if not defined, system one will be used - dns
Suffixes string[] - if
type
==local
- optional, if not defined, system one will be used - fixed
Bindings {[key: string]: SwitchDhcpd Config Config Fixed Bindings} - Property key is the MAC Address. Format is
[0-9a-f]{12}
(e.g "5684dae9ac8b") - gateway string
- if
type
==local
- optional,ip
will be used if not provided - ip
End string - if
type
==local
- ip
End6 string - if
type6
==local
- ip
Start string - if
type
==local
- ip
Start6 string - if
type6
==local
- lease
Time number - in seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options
{[key: string]: Switch
Dhcpd Config Config Options} - Property key is the DHCP option number
- server
Id booleanOverride server_id_override
==true
means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers string[]
- if
type
==relay
- servers6s string[]
- if
type6
==relay
- type string
- enum:
none
,relay
(DHCP Relay),server
(DHCP Server) - type6 string
- enum:
none
,relay
(DHCP Relay),server
(DHCP Server) - vendor
Encapulated {[key: string]: SwitchDhcpd Config Config Vendor Encapulated} - Property key is :, with
- enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
- sub option code: 1-255, sub-option code'
- dns_
servers Sequence[str] - if
type
==local
- optional, if not defined, system one will be used - dns_
suffixes Sequence[str] - if
type
==local
- optional, if not defined, system one will be used - fixed_
bindings Mapping[str, SwitchDhcpd Config Config Fixed Bindings] - Property key is the MAC Address. Format is
[0-9a-f]{12}
(e.g "5684dae9ac8b") - gateway str
- if
type
==local
- optional,ip
will be used if not provided - ip_
end str - if
type
==local
- ip_
end6 str - if
type6
==local
- ip_
start str - if
type
==local
- ip_
start6 str - if
type6
==local
- lease_
time int - in seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options
Mapping[str, Switch
Dhcpd Config Config Options] - Property key is the DHCP option number
- server_
id_ booloverride server_id_override
==true
means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers Sequence[str]
- if
type
==relay
- servers6s Sequence[str]
- if
type6
==relay
- type str
- enum:
none
,relay
(DHCP Relay),server
(DHCP Server) - type6 str
- enum:
none
,relay
(DHCP Relay),server
(DHCP Server) - vendor_
encapulated Mapping[str, SwitchDhcpd Config Config Vendor Encapulated] - Property key is :, with
- enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
- sub option code: 1-255, sub-option code'
- dns
Servers List<String> - if
type
==local
- optional, if not defined, system one will be used - dns
Suffixes List<String> - if
type
==local
- optional, if not defined, system one will be used - fixed
Bindings Map<Property Map> - Property key is the MAC Address. Format is
[0-9a-f]{12}
(e.g "5684dae9ac8b") - gateway String
- if
type
==local
- optional,ip
will be used if not provided - ip
End String - if
type
==local
- ip
End6 String - if
type6
==local
- ip
Start String - if
type
==local
- ip
Start6 String - if
type6
==local
- lease
Time Number - in seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options Map<Property Map>
- Property key is the DHCP option number
- server
Id BooleanOverride server_id_override
==true
means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers List<String>
- if
type
==relay
- servers6s List<String>
- if
type6
==relay
- type String
- enum:
none
,relay
(DHCP Relay),server
(DHCP Server) - type6 String
- enum:
none
,relay
(DHCP Relay),server
(DHCP Server) - vendor
Encapulated Map<Property Map> - Property key is :, with
- enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
- sub option code: 1-255, sub-option code'
SwitchDhcpdConfigConfigFixedBindings, SwitchDhcpdConfigConfigFixedBindingsArgs
SwitchDhcpdConfigConfigOptions, SwitchDhcpdConfigConfigOptionsArgs
SwitchDhcpdConfigConfigVendorEncapulated, SwitchDhcpdConfigConfigVendorEncapulatedArgs
SwitchEvpnConfig, SwitchEvpnConfigArgs
SwitchExtraRoutes, SwitchExtraRoutesArgs
- Via string
- next-hop IP Address
- Discard bool
- this takes precedence
- Metric int
- Next
Qualified Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Extra Routes Next Qualified> - No
Resolve bool - Preference int
- Via string
- next-hop IP Address
- Discard bool
- this takes precedence
- Metric int
- Next
Qualified map[string]SwitchExtra Routes Next Qualified - No
Resolve bool - Preference int
- via String
- next-hop IP Address
- discard Boolean
- this takes precedence
- metric Integer
- next
Qualified Map<String,SwitchExtra Routes Next Qualified> - no
Resolve Boolean - preference Integer
- via string
- next-hop IP Address
- discard boolean
- this takes precedence
- metric number
- next
Qualified {[key: string]: SwitchExtra Routes Next Qualified} - no
Resolve boolean - preference number
- via str
- next-hop IP Address
- discard bool
- this takes precedence
- metric int
- next_
qualified Mapping[str, SwitchExtra Routes Next Qualified] - no_
resolve bool - preference int
- via String
- next-hop IP Address
- discard Boolean
- this takes precedence
- metric Number
- next
Qualified Map<Property Map> - no
Resolve Boolean - preference Number
SwitchExtraRoutes6, SwitchExtraRoutes6Args
- Via string
- next-hop IP Address
- Discard bool
- this takes precedence
- Metric int
- Next
Qualified Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Extra Routes6Next Qualified> - No
Resolve bool - Preference int
- Via string
- next-hop IP Address
- Discard bool
- this takes precedence
- Metric int
- Next
Qualified map[string]SwitchExtra Routes6Next Qualified - No
Resolve bool - Preference int
- via String
- next-hop IP Address
- discard Boolean
- this takes precedence
- metric Integer
- next
Qualified Map<String,SwitchExtra Routes6Next Qualified> - no
Resolve Boolean - preference Integer
- via string
- next-hop IP Address
- discard boolean
- this takes precedence
- metric number
- next
Qualified {[key: string]: SwitchExtra Routes6Next Qualified} - no
Resolve boolean - preference number
- via str
- next-hop IP Address
- discard bool
- this takes precedence
- metric int
- next_
qualified Mapping[str, SwitchExtra Routes6Next Qualified] - no_
resolve bool - preference int
- via String
- next-hop IP Address
- discard Boolean
- this takes precedence
- metric Number
- next
Qualified Map<Property Map> - no
Resolve Boolean - preference Number
SwitchExtraRoutes6NextQualified, SwitchExtraRoutes6NextQualifiedArgs
- Metric int
- Preference int
- Metric int
- Preference int
- metric Integer
- preference Integer
- metric number
- preference number
- metric int
- preference int
- metric Number
- preference Number
SwitchExtraRoutesNextQualified, SwitchExtraRoutesNextQualifiedArgs
- Metric int
- Preference int
- Metric int
- Preference int
- metric Integer
- preference Integer
- metric number
- preference number
- metric int
- preference int
- metric Number
- preference Number
SwitchIpConfig, SwitchIpConfigArgs
- Dns List<string>
- Required when
type
==static
- Dns
Suffixes List<string> - Gateway string
- Ip string
- Netmask string
- used only if
subnet
is not specified innetworks
- Network string
- the network where this mgmt IP reside, this will be used as default network for outbound-ssh, dns, ntp, dns, tacplus, radius, syslog, snmp
- Type string
- enum:
dhcp
,static
- Dns []string
- Required when
type
==static
- Dns
Suffixes []string - Gateway string
- Ip string
- Netmask string
- used only if
subnet
is not specified innetworks
- Network string
- the network where this mgmt IP reside, this will be used as default network for outbound-ssh, dns, ntp, dns, tacplus, radius, syslog, snmp
- Type string
- enum:
dhcp
,static
- dns List<String>
- Required when
type
==static
- dns
Suffixes List<String> - gateway String
- ip String
- netmask String
- used only if
subnet
is not specified innetworks
- network String
- the network where this mgmt IP reside, this will be used as default network for outbound-ssh, dns, ntp, dns, tacplus, radius, syslog, snmp
- type String
- enum:
dhcp
,static
- dns string[]
- Required when
type
==static
- dns
Suffixes string[] - gateway string
- ip string
- netmask string
- used only if
subnet
is not specified innetworks
- network string
- the network where this mgmt IP reside, this will be used as default network for outbound-ssh, dns, ntp, dns, tacplus, radius, syslog, snmp
- type string
- enum:
dhcp
,static
- dns Sequence[str]
- Required when
type
==static
- dns_
suffixes Sequence[str] - gateway str
- ip str
- netmask str
- used only if
subnet
is not specified innetworks
- network str
- the network where this mgmt IP reside, this will be used as default network for outbound-ssh, dns, ntp, dns, tacplus, radius, syslog, snmp
- type str
- enum:
dhcp
,static
- dns List<String>
- Required when
type
==static
- dns
Suffixes List<String> - gateway String
- ip String
- netmask String
- used only if
subnet
is not specified innetworks
- network String
- the network where this mgmt IP reside, this will be used as default network for outbound-ssh, dns, ntp, dns, tacplus, radius, syslog, snmp
- type String
- enum:
dhcp
,static
SwitchMistNac, SwitchMistNacArgs
SwitchNetworks, SwitchNetworksArgs
- Vlan
Id string - Isolation bool
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required)
NOTE: this features requires uplink device to also a be Juniper device and
inter_switch_link
to be set - Isolation
Vlan stringId - Subnet string
- optional for pure switching, required when L3 / routing features are used
- Vlan
Id string - Isolation bool
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required)
NOTE: this features requires uplink device to also a be Juniper device and
inter_switch_link
to be set - Isolation
Vlan stringId - Subnet string
- optional for pure switching, required when L3 / routing features are used
- vlan
Id String - isolation Boolean
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required)
NOTE: this features requires uplink device to also a be Juniper device and
inter_switch_link
to be set - isolation
Vlan StringId - subnet String
- optional for pure switching, required when L3 / routing features are used
- vlan
Id string - isolation boolean
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required)
NOTE: this features requires uplink device to also a be Juniper device and
inter_switch_link
to be set - isolation
Vlan stringId - subnet string
- optional for pure switching, required when L3 / routing features are used
- vlan_
id str - isolation bool
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required)
NOTE: this features requires uplink device to also a be Juniper device and
inter_switch_link
to be set - isolation_
vlan_ strid - subnet str
- optional for pure switching, required when L3 / routing features are used
- vlan
Id String - isolation Boolean
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required)
NOTE: this features requires uplink device to also a be Juniper device and
inter_switch_link
to be set - isolation
Vlan StringId - subnet String
- optional for pure switching, required when L3 / routing features are used
SwitchOobIpConfig, SwitchOobIpConfigArgs
- Gateway string
- Ip string
- Netmask string
- used only if
subnet
is not specified innetworks
- Network string
- optional, the network to be used for mgmt
- Type string
- enum:
dhcp
,static
- Use
Mgmt boolVrf - f supported on the platform. If enabled, DNS will be using this routing-instance, too
- Use
Mgmt boolVrf For Host Out - for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- Gateway string
- Ip string
- Netmask string
- used only if
subnet
is not specified innetworks
- Network string
- optional, the network to be used for mgmt
- Type string
- enum:
dhcp
,static
- Use
Mgmt boolVrf - f supported on the platform. If enabled, DNS will be using this routing-instance, too
- Use
Mgmt boolVrf For Host Out - for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- gateway String
- ip String
- netmask String
- used only if
subnet
is not specified innetworks
- network String
- optional, the network to be used for mgmt
- type String
- enum:
dhcp
,static
- use
Mgmt BooleanVrf - f supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt BooleanVrf For Host Out - for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- gateway string
- ip string
- netmask string
- used only if
subnet
is not specified innetworks
- network string
- optional, the network to be used for mgmt
- type string
- enum:
dhcp
,static
- use
Mgmt booleanVrf - f supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt booleanVrf For Host Out - for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- gateway str
- ip str
- netmask str
- used only if
subnet
is not specified innetworks
- network str
- optional, the network to be used for mgmt
- type str
- enum:
dhcp
,static
- use_
mgmt_ boolvrf - f supported on the platform. If enabled, DNS will be using this routing-instance, too
- use_
mgmt_ boolvrf_ for_ host_ out - for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- gateway String
- ip String
- netmask String
- used only if
subnet
is not specified innetworks
- network String
- optional, the network to be used for mgmt
- type String
- enum:
dhcp
,static
- use
Mgmt BooleanVrf - f supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt BooleanVrf For Host Out - for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
SwitchOspfAreas, SwitchOspfAreasArgs
- Networks
Dictionary<string, Pulumi.
Juniper Mist. Device. Inputs. Switch Ospf Areas Networks> - Include
Loopback bool - Type string
- OSPF type. enum:
default
,nssa
,stub
- Networks
map[string]Switch
Ospf Areas Networks - Include
Loopback bool - Type string
- OSPF type. enum:
default
,nssa
,stub
- networks
Map<String,Switch
Ospf Areas Networks> - include
Loopback Boolean - type String
- OSPF type. enum:
default
,nssa
,stub
- networks
{[key: string]: Switch
Ospf Areas Networks} - include
Loopback boolean - type string
- OSPF type. enum:
default
,nssa
,stub
- networks
Mapping[str, Switch
Ospf Areas Networks] - include_
loopback bool - type str
- OSPF type. enum:
default
,nssa
,stub
- networks Map<Property Map>
- include
Loopback Boolean - type String
- OSPF type. enum:
default
,nssa
,stub
SwitchOspfAreasNetworks, SwitchOspfAreasNetworksArgs
- Auth
Keys Dictionary<string, string> - Required if
auth_type
==md5
. Property key is the key number - Auth
Password string - Required if
auth_type
==password
, the password, max length is 8 - Auth
Type string - auth type. enum:
md5
,none
,password
- Bfd
Minimum intInterval - Dead
Interval int - Export
Policy string - Hello
Interval int - Import
Policy string - Interface
Type string - interface type (nbma = non-broadcast multi-access). enum:
broadcast
,nbma
,p2mp
,p2p
- Metric int
- No
Readvertise boolTo Overlay - by default, we'll re-advertise all learned OSPF routes toward overlay
- Passive bool
- whether to send OSPF-Hello
- Auth
Keys map[string]string - Required if
auth_type
==md5
. Property key is the key number - Auth
Password string - Required if
auth_type
==password
, the password, max length is 8 - Auth
Type string - auth type. enum:
md5
,none
,password
- Bfd
Minimum intInterval - Dead
Interval int - Export
Policy string - Hello
Interval int - Import
Policy string - Interface
Type string - interface type (nbma = non-broadcast multi-access). enum:
broadcast
,nbma
,p2mp
,p2p
- Metric int
- No
Readvertise boolTo Overlay - by default, we'll re-advertise all learned OSPF routes toward overlay
- Passive bool
- whether to send OSPF-Hello
- auth
Keys Map<String,String> - Required if
auth_type
==md5
. Property key is the key number - auth
Password String - Required if
auth_type
==password
, the password, max length is 8 - auth
Type String - auth type. enum:
md5
,none
,password
- bfd
Minimum IntegerInterval - dead
Interval Integer - export
Policy String - hello
Interval Integer - import
Policy String - interface
Type String - interface type (nbma = non-broadcast multi-access). enum:
broadcast
,nbma
,p2mp
,p2p
- metric Integer
- no
Readvertise BooleanTo Overlay - by default, we'll re-advertise all learned OSPF routes toward overlay
- passive Boolean
- whether to send OSPF-Hello
- auth
Keys {[key: string]: string} - Required if
auth_type
==md5
. Property key is the key number - auth
Password string - Required if
auth_type
==password
, the password, max length is 8 - auth
Type string - auth type. enum:
md5
,none
,password
- bfd
Minimum numberInterval - dead
Interval number - export
Policy string - hello
Interval number - import
Policy string - interface
Type string - interface type (nbma = non-broadcast multi-access). enum:
broadcast
,nbma
,p2mp
,p2p
- metric number
- no
Readvertise booleanTo Overlay - by default, we'll re-advertise all learned OSPF routes toward overlay
- passive boolean
- whether to send OSPF-Hello
- auth_
keys Mapping[str, str] - Required if
auth_type
==md5
. Property key is the key number - auth_
password str - Required if
auth_type
==password
, the password, max length is 8 - auth_
type str - auth type. enum:
md5
,none
,password
- bfd_
minimum_ intinterval - dead_
interval int - export_
policy str - hello_
interval int - import_
policy str - interface_
type str - interface type (nbma = non-broadcast multi-access). enum:
broadcast
,nbma
,p2mp
,p2p
- metric int
- no_
readvertise_ boolto_ overlay - by default, we'll re-advertise all learned OSPF routes toward overlay
- passive bool
- whether to send OSPF-Hello
- auth
Keys Map<String> - Required if
auth_type
==md5
. Property key is the key number - auth
Password String - Required if
auth_type
==password
, the password, max length is 8 - auth
Type String - auth type. enum:
md5
,none
,password
- bfd
Minimum NumberInterval - dead
Interval Number - export
Policy String - hello
Interval Number - import
Policy String - interface
Type String - interface type (nbma = non-broadcast multi-access). enum:
broadcast
,nbma
,p2mp
,p2p
- metric Number
- no
Readvertise BooleanTo Overlay - by default, we'll re-advertise all learned OSPF routes toward overlay
- passive Boolean
- whether to send OSPF-Hello
SwitchOtherIpConfigs, SwitchOtherIpConfigsArgs
- Evpn
Anycast bool - for EVPN, if anycast is desired
- Ip string
- required if
type
==static
- Ip6 string
- required if
type6
==static
- Netmask string
- optional,
subnet
fromnetwork
definition will be used if defined - Netmask6 string
- optional,
subnet
fromnetwork
definition will be used if defined - Type string
- enum:
dhcp
,static
- Type6 string
- enum:
autoconf
,dhcp
,disabled
,static
- Evpn
Anycast bool - for EVPN, if anycast is desired
- Ip string
- required if
type
==static
- Ip6 string
- required if
type6
==static
- Netmask string
- optional,
subnet
fromnetwork
definition will be used if defined - Netmask6 string
- optional,
subnet
fromnetwork
definition will be used if defined - Type string
- enum:
dhcp
,static
- Type6 string
- enum:
autoconf
,dhcp
,disabled
,static
- evpn
Anycast Boolean - for EVPN, if anycast is desired
- ip String
- required if
type
==static
- ip6 String
- required if
type6
==static
- netmask String
- optional,
subnet
fromnetwork
definition will be used if defined - netmask6 String
- optional,
subnet
fromnetwork
definition will be used if defined - type String
- enum:
dhcp
,static
- type6 String
- enum:
autoconf
,dhcp
,disabled
,static
- evpn
Anycast boolean - for EVPN, if anycast is desired
- ip string
- required if
type
==static
- ip6 string
- required if
type6
==static
- netmask string
- optional,
subnet
fromnetwork
definition will be used if defined - netmask6 string
- optional,
subnet
fromnetwork
definition will be used if defined - type string
- enum:
dhcp
,static
- type6 string
- enum:
autoconf
,dhcp
,disabled
,static
- evpn_
anycast bool - for EVPN, if anycast is desired
- ip str
- required if
type
==static
- ip6 str
- required if
type6
==static
- netmask str
- optional,
subnet
fromnetwork
definition will be used if defined - netmask6 str
- optional,
subnet
fromnetwork
definition will be used if defined - type str
- enum:
dhcp
,static
- type6 str
- enum:
autoconf
,dhcp
,disabled
,static
- evpn
Anycast Boolean - for EVPN, if anycast is desired
- ip String
- required if
type
==static
- ip6 String
- required if
type6
==static
- netmask String
- optional,
subnet
fromnetwork
definition will be used if defined - netmask6 String
- optional,
subnet
fromnetwork
definition will be used if defined - type String
- enum:
dhcp
,static
- type6 String
- enum:
autoconf
,dhcp
,disabled
,static
SwitchPortConfig, SwitchPortConfigArgs
- Usage string
port usage name.
If EVPN is used, use
evpn_uplink
orevpn_downlink
- Ae
Disable boolLacp - To disable LACP support for the AE interface
- Ae
Idx int - Users could force to use the designated AE name
- Ae
Lacp boolSlow - to use fast timeout
- Aggregated bool
- Critical bool
- if want to generate port up/down alarm
- Description string
- Disable
Autoneg bool - if
speed
andduplex
are specified, whether to disable autonegotiation - Duplex string
- enum:
auto
,full
,half
- Dynamic
Usage string - Enable dynamic usage for this port. Set to
dynamic
to enable. - Esilag bool
- Mtu int
- media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- No
Local boolOverwrite - prevent helpdesk to override the port config
- Poe
Disabled bool - Speed string
- enum:
100m
,10m
,1g
,2.5g
,5g
,auto
- Usage string
port usage name.
If EVPN is used, use
evpn_uplink
orevpn_downlink
- Ae
Disable boolLacp - To disable LACP support for the AE interface
- Ae
Idx int - Users could force to use the designated AE name
- Ae
Lacp boolSlow - to use fast timeout
- Aggregated bool
- Critical bool
- if want to generate port up/down alarm
- Description string
- Disable
Autoneg bool - if
speed
andduplex
are specified, whether to disable autonegotiation - Duplex string
- enum:
auto
,full
,half
- Dynamic
Usage string - Enable dynamic usage for this port. Set to
dynamic
to enable. - Esilag bool
- Mtu int
- media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- No
Local boolOverwrite - prevent helpdesk to override the port config
- Poe
Disabled bool - Speed string
- enum:
100m
,10m
,1g
,2.5g
,5g
,auto
- usage String
port usage name.
If EVPN is used, use
evpn_uplink
orevpn_downlink
- ae
Disable BooleanLacp - To disable LACP support for the AE interface
- ae
Idx Integer - Users could force to use the designated AE name
- ae
Lacp BooleanSlow - to use fast timeout
- aggregated Boolean
- critical Boolean
- if want to generate port up/down alarm
- description String
- disable
Autoneg Boolean - if
speed
andduplex
are specified, whether to disable autonegotiation - duplex String
- enum:
auto
,full
,half
- dynamic
Usage String - Enable dynamic usage for this port. Set to
dynamic
to enable. - esilag Boolean
- mtu Integer
- media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- no
Local BooleanOverwrite - prevent helpdesk to override the port config
- poe
Disabled Boolean - speed String
- enum:
100m
,10m
,1g
,2.5g
,5g
,auto
- usage string
port usage name.
If EVPN is used, use
evpn_uplink
orevpn_downlink
- ae
Disable booleanLacp - To disable LACP support for the AE interface
- ae
Idx number - Users could force to use the designated AE name
- ae
Lacp booleanSlow - to use fast timeout
- aggregated boolean
- critical boolean
- if want to generate port up/down alarm
- description string
- disable
Autoneg boolean - if
speed
andduplex
are specified, whether to disable autonegotiation - duplex string
- enum:
auto
,full
,half
- dynamic
Usage string - Enable dynamic usage for this port. Set to
dynamic
to enable. - esilag boolean
- mtu number
- media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- no
Local booleanOverwrite - prevent helpdesk to override the port config
- poe
Disabled boolean - speed string
- enum:
100m
,10m
,1g
,2.5g
,5g
,auto
- usage str
port usage name.
If EVPN is used, use
evpn_uplink
orevpn_downlink
- ae_
disable_ boollacp - To disable LACP support for the AE interface
- ae_
idx int - Users could force to use the designated AE name
- ae_
lacp_ boolslow - to use fast timeout
- aggregated bool
- critical bool
- if want to generate port up/down alarm
- description str
- disable_
autoneg bool - if
speed
andduplex
are specified, whether to disable autonegotiation - duplex str
- enum:
auto
,full
,half
- dynamic_
usage str - Enable dynamic usage for this port. Set to
dynamic
to enable. - esilag bool
- mtu int
- media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- no_
local_ booloverwrite - prevent helpdesk to override the port config
- poe_
disabled bool - speed str
- enum:
100m
,10m
,1g
,2.5g
,5g
,auto
- usage String
port usage name.
If EVPN is used, use
evpn_uplink
orevpn_downlink
- ae
Disable BooleanLacp - To disable LACP support for the AE interface
- ae
Idx Number - Users could force to use the designated AE name
- ae
Lacp BooleanSlow - to use fast timeout
- aggregated Boolean
- critical Boolean
- if want to generate port up/down alarm
- description String
- disable
Autoneg Boolean - if
speed
andduplex
are specified, whether to disable autonegotiation - duplex String
- enum:
auto
,full
,half
- dynamic
Usage String - Enable dynamic usage for this port. Set to
dynamic
to enable. - esilag Boolean
- mtu Number
- media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- no
Local BooleanOverwrite - prevent helpdesk to override the port config
- poe
Disabled Boolean - speed String
- enum:
100m
,10m
,1g
,2.5g
,5g
,auto
SwitchPortMirroring, SwitchPortMirroringArgs
- Input
Networks List<string>Ingresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - Input
Port List<string>Ids Egresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - Input
Port List<string>Ids Ingresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - Output
Network string - exaclty one of the
output_port_id
oroutput_network
should be provided - Output
Port stringId - exaclty one of the
output_port_id
oroutput_network
should be provided
- Input
Networks []stringIngresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - Input
Port []stringIds Egresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - Input
Port []stringIds Ingresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - Output
Network string - exaclty one of the
output_port_id
oroutput_network
should be provided - Output
Port stringId - exaclty one of the
output_port_id
oroutput_network
should be provided
- input
Networks List<String>Ingresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - input
Port List<String>Ids Egresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - input
Port List<String>Ids Ingresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - output
Network String - exaclty one of the
output_port_id
oroutput_network
should be provided - output
Port StringId - exaclty one of the
output_port_id
oroutput_network
should be provided
- input
Networks string[]Ingresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - input
Port string[]Ids Egresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - input
Port string[]Ids Ingresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - output
Network string - exaclty one of the
output_port_id
oroutput_network
should be provided - output
Port stringId - exaclty one of the
output_port_id
oroutput_network
should be provided
- input_
networks_ Sequence[str]ingresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - input_
port_ Sequence[str]ids_ egresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - input_
port_ Sequence[str]ids_ ingresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - output_
network str - exaclty one of the
output_port_id
oroutput_network
should be provided - output_
port_ strid - exaclty one of the
output_port_id
oroutput_network
should be provided
- input
Networks List<String>Ingresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - input
Port List<String>Ids Egresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - input
Port List<String>Ids Ingresses - at least one of the
input_port_ids_ingress
,input_port_ids_egress
orinput_networks_ingress
should be specified - output
Network String - exaclty one of the
output_port_id
oroutput_network
should be provided - output
Port StringId - exaclty one of the
output_port_id
oroutput_network
should be provided
SwitchPortUsages, SwitchPortUsagesArgs
- All
Networks bool - Only if
mode
==trunk
whether to trunk all network/vlans - Allow
Dhcpd bool Only if
mode
!=dynamic
if DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state.When it is not defined, it means using the system’s default setting which depends on whether the port is a access or trunk port.
- Allow
Multiple boolSupplicants - Only if
mode
!=dynamic
- Bypass
Auth boolWhen Server Down - Only if
mode
!=dynamic
andport_auth
==dot1x
bypass auth for known clients if set to true when RADIUS server is down - Bypass
Auth boolWhen Server Down For Unkonwn Client - Only if
mode
!=dynamic
andport_auth
=dot1x
bypass auth for all (including unknown clients) if set to true when RADIUS server is down - Description string
- Only if
mode
!=dynamic
- Disable
Autoneg bool - Only if
mode
!=dynamic
if speed and duplex are specified, whether to disable autonegotiation - Disabled bool
- Only if
mode
!=dynamic
whether the port is disabled - Duplex string
- Only if
mode
!=dynamic
link connection mode. enum:auto
,full
,half
- Dynamic
Vlan List<string>Networks - Only if
mode
!=dynamic
andport_auth
==dot1x
, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return - Enable
Mac boolAuth - Only if
mode
!=dynamic
andport_auth
==dot1x
whether to enable MAC Auth - Enable
Qos bool - Only if
mode
!=dynamic
- Guest
Network string - Only if
mode
!=dynamic
andport_auth
==dot1x
which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - Inter
Switch boolLink - Only if
mode
!=dynamic
inter_switch_link is used together with "isolation" under networks NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together - Mac
Auth boolOnly - Only if
mode
!=dynamic
andenable_mac_auth
==true
- Mac
Auth boolPreferred - Only if
mode
!=dynamic
+enable_mac_auth
==true
+mac_auth_only
==false
, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x. - Mac
Auth stringProtocol - Only if
mode
!=dynamic
andenable_mac_auth
==true
. This type is ignored if mist_nac is enabled. enum:eap-md5
,eap-peap
,pap
- Mac
Limit int - Only if
mode
!=dynamic
max number of mac addresses, default is 0 for unlimited, otherwise range is 1 or higher, with upper bound constrained by platform - Mode string
mode
==dynamic
must only be used with the port usage with the namedynamic
. enum:access
,dynamic
,inet
,trunk
- Mtu int
- Only if
mode
!=dynamic
media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. The default value is 1514. - Networks List<string>
- Only if
mode
==trunk
, the list of network/vlans - Persist
Mac bool - Only if
mode
==access
andport_auth
!=dot1x
whether the port should retain dynamically learned MAC addresses - Poe
Disabled bool - Only if
mode
!=dynamic
whether PoE capabilities are disabled for a port - Port
Auth string - Only if
mode
!=dynamic
if dot1x is desired, set to dot1x. enum:dot1x
- Port
Network string - Only if
mode
!=dynamic
native network/vlan for untagged traffic - Reauth
Interval int - Only if
mode
!=dynamic
andport_auth
=dot1x
reauthentication interval range - Reset
Default stringWhen - Only if
mode
==dynamic
Control when the DPC port should be changed to the default port usage. enum:link_down
,none
(let the DPC port keep at the current port usage) - Rules
List<Pulumi.
Juniper Mist. Device. Inputs. Switch Port Usages Rule> - Only if
mode
==dynamic
- Server
Fail stringNetwork - Only if
mode
!=dynamic
andport_auth
==dot1x
sets server fail fallback vlan - Server
Reject stringNetwork - Only if
mode
!=dynamic
andport_auth
==dot1x
when radius server reject / fails - Speed string
- Only if
mode
!=dynamic
speed, default is auto to automatically negotiate speed - Storm
Control Pulumi.Juniper Mist. Device. Inputs. Switch Port Usages Storm Control - Switch storm control
Only if
mode
!=dynamic
- Stp
Edge bool - Only if
mode
!=dynamic
when enabled, the port is not expected to receive BPDU frames - Stp
No boolRoot Port - Stp
P2p bool - Voip
Network string - Only if
mode
!=dynamic
network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- All
Networks bool - Only if
mode
==trunk
whether to trunk all network/vlans - Allow
Dhcpd bool Only if
mode
!=dynamic
if DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state.When it is not defined, it means using the system’s default setting which depends on whether the port is a access or trunk port.
- Allow
Multiple boolSupplicants - Only if
mode
!=dynamic
- Bypass
Auth boolWhen Server Down - Only if
mode
!=dynamic
andport_auth
==dot1x
bypass auth for known clients if set to true when RADIUS server is down - Bypass
Auth boolWhen Server Down For Unkonwn Client - Only if
mode
!=dynamic
andport_auth
=dot1x
bypass auth for all (including unknown clients) if set to true when RADIUS server is down - Description string
- Only if
mode
!=dynamic
- Disable
Autoneg bool - Only if
mode
!=dynamic
if speed and duplex are specified, whether to disable autonegotiation - Disabled bool
- Only if
mode
!=dynamic
whether the port is disabled - Duplex string
- Only if
mode
!=dynamic
link connection mode. enum:auto
,full
,half
- Dynamic
Vlan []stringNetworks - Only if
mode
!=dynamic
andport_auth
==dot1x
, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return - Enable
Mac boolAuth - Only if
mode
!=dynamic
andport_auth
==dot1x
whether to enable MAC Auth - Enable
Qos bool - Only if
mode
!=dynamic
- Guest
Network string - Only if
mode
!=dynamic
andport_auth
==dot1x
which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - Inter
Switch boolLink - Only if
mode
!=dynamic
inter_switch_link is used together with "isolation" under networks NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together - Mac
Auth boolOnly - Only if
mode
!=dynamic
andenable_mac_auth
==true
- Mac
Auth boolPreferred - Only if
mode
!=dynamic
+enable_mac_auth
==true
+mac_auth_only
==false
, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x. - Mac
Auth stringProtocol - Only if
mode
!=dynamic
andenable_mac_auth
==true
. This type is ignored if mist_nac is enabled. enum:eap-md5
,eap-peap
,pap
- Mac
Limit int - Only if
mode
!=dynamic
max number of mac addresses, default is 0 for unlimited, otherwise range is 1 or higher, with upper bound constrained by platform - Mode string
mode
==dynamic
must only be used with the port usage with the namedynamic
. enum:access
,dynamic
,inet
,trunk
- Mtu int
- Only if
mode
!=dynamic
media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. The default value is 1514. - Networks []string
- Only if
mode
==trunk
, the list of network/vlans - Persist
Mac bool - Only if
mode
==access
andport_auth
!=dot1x
whether the port should retain dynamically learned MAC addresses - Poe
Disabled bool - Only if
mode
!=dynamic
whether PoE capabilities are disabled for a port - Port
Auth string - Only if
mode
!=dynamic
if dot1x is desired, set to dot1x. enum:dot1x
- Port
Network string - Only if
mode
!=dynamic
native network/vlan for untagged traffic - Reauth
Interval int - Only if
mode
!=dynamic
andport_auth
=dot1x
reauthentication interval range - Reset
Default stringWhen - Only if
mode
==dynamic
Control when the DPC port should be changed to the default port usage. enum:link_down
,none
(let the DPC port keep at the current port usage) - Rules
[]Switch
Port Usages Rule - Only if
mode
==dynamic
- Server
Fail stringNetwork - Only if
mode
!=dynamic
andport_auth
==dot1x
sets server fail fallback vlan - Server
Reject stringNetwork - Only if
mode
!=dynamic
andport_auth
==dot1x
when radius server reject / fails - Speed string
- Only if
mode
!=dynamic
speed, default is auto to automatically negotiate speed - Storm
Control SwitchPort Usages Storm Control - Switch storm control
Only if
mode
!=dynamic
- Stp
Edge bool - Only if
mode
!=dynamic
when enabled, the port is not expected to receive BPDU frames - Stp
No boolRoot Port - Stp
P2p bool - Voip
Network string - Only if
mode
!=dynamic
network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- all
Networks Boolean - Only if
mode
==trunk
whether to trunk all network/vlans - allow
Dhcpd Boolean Only if
mode
!=dynamic
if DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state.When it is not defined, it means using the system’s default setting which depends on whether the port is a access or trunk port.
- allow
Multiple BooleanSupplicants - Only if
mode
!=dynamic
- bypass
Auth BooleanWhen Server Down - Only if
mode
!=dynamic
andport_auth
==dot1x
bypass auth for known clients if set to true when RADIUS server is down - bypass
Auth BooleanWhen Server Down For Unkonwn Client - Only if
mode
!=dynamic
andport_auth
=dot1x
bypass auth for all (including unknown clients) if set to true when RADIUS server is down - description String
- Only if
mode
!=dynamic
- disable
Autoneg Boolean - Only if
mode
!=dynamic
if speed and duplex are specified, whether to disable autonegotiation - disabled Boolean
- Only if
mode
!=dynamic
whether the port is disabled - duplex String
- Only if
mode
!=dynamic
link connection mode. enum:auto
,full
,half
- dynamic
Vlan List<String>Networks - Only if
mode
!=dynamic
andport_auth
==dot1x
, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return - enable
Mac BooleanAuth - Only if
mode
!=dynamic
andport_auth
==dot1x
whether to enable MAC Auth - enable
Qos Boolean - Only if
mode
!=dynamic
- guest
Network String - Only if
mode
!=dynamic
andport_auth
==dot1x
which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - inter
Switch BooleanLink - Only if
mode
!=dynamic
inter_switch_link is used together with "isolation" under networks NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together - mac
Auth BooleanOnly - Only if
mode
!=dynamic
andenable_mac_auth
==true
- mac
Auth BooleanPreferred - Only if
mode
!=dynamic
+enable_mac_auth
==true
+mac_auth_only
==false
, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x. - mac
Auth StringProtocol - Only if
mode
!=dynamic
andenable_mac_auth
==true
. This type is ignored if mist_nac is enabled. enum:eap-md5
,eap-peap
,pap
- mac
Limit Integer - Only if
mode
!=dynamic
max number of mac addresses, default is 0 for unlimited, otherwise range is 1 or higher, with upper bound constrained by platform - mode String
mode
==dynamic
must only be used with the port usage with the namedynamic
. enum:access
,dynamic
,inet
,trunk
- mtu Integer
- Only if
mode
!=dynamic
media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. The default value is 1514. - networks List<String>
- Only if
mode
==trunk
, the list of network/vlans - persist
Mac Boolean - Only if
mode
==access
andport_auth
!=dot1x
whether the port should retain dynamically learned MAC addresses - poe
Disabled Boolean - Only if
mode
!=dynamic
whether PoE capabilities are disabled for a port - port
Auth String - Only if
mode
!=dynamic
if dot1x is desired, set to dot1x. enum:dot1x
- port
Network String - Only if
mode
!=dynamic
native network/vlan for untagged traffic - reauth
Interval Integer - Only if
mode
!=dynamic
andport_auth
=dot1x
reauthentication interval range - reset
Default StringWhen - Only if
mode
==dynamic
Control when the DPC port should be changed to the default port usage. enum:link_down
,none
(let the DPC port keep at the current port usage) - rules
List<Switch
Port Usages Rule> - Only if
mode
==dynamic
- server
Fail StringNetwork - Only if
mode
!=dynamic
andport_auth
==dot1x
sets server fail fallback vlan - server
Reject StringNetwork - Only if
mode
!=dynamic
andport_auth
==dot1x
when radius server reject / fails - speed String
- Only if
mode
!=dynamic
speed, default is auto to automatically negotiate speed - storm
Control SwitchPort Usages Storm Control - Switch storm control
Only if
mode
!=dynamic
- stp
Edge Boolean - Only if
mode
!=dynamic
when enabled, the port is not expected to receive BPDU frames - stp
No BooleanRoot Port - stp
P2p Boolean - voip
Network String - Only if
mode
!=dynamic
network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- all
Networks boolean - Only if
mode
==trunk
whether to trunk all network/vlans - allow
Dhcpd boolean Only if
mode
!=dynamic
if DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state.When it is not defined, it means using the system’s default setting which depends on whether the port is a access or trunk port.
- allow
Multiple booleanSupplicants - Only if
mode
!=dynamic
- bypass
Auth booleanWhen Server Down - Only if
mode
!=dynamic
andport_auth
==dot1x
bypass auth for known clients if set to true when RADIUS server is down - bypass
Auth booleanWhen Server Down For Unkonwn Client - Only if
mode
!=dynamic
andport_auth
=dot1x
bypass auth for all (including unknown clients) if set to true when RADIUS server is down - description string
- Only if
mode
!=dynamic
- disable
Autoneg boolean - Only if
mode
!=dynamic
if speed and duplex are specified, whether to disable autonegotiation - disabled boolean
- Only if
mode
!=dynamic
whether the port is disabled - duplex string
- Only if
mode
!=dynamic
link connection mode. enum:auto
,full
,half
- dynamic
Vlan string[]Networks - Only if
mode
!=dynamic
andport_auth
==dot1x
, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return - enable
Mac booleanAuth - Only if
mode
!=dynamic
andport_auth
==dot1x
whether to enable MAC Auth - enable
Qos boolean - Only if
mode
!=dynamic
- guest
Network string - Only if
mode
!=dynamic
andport_auth
==dot1x
which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - inter
Switch booleanLink - Only if
mode
!=dynamic
inter_switch_link is used together with "isolation" under networks NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together - mac
Auth booleanOnly - Only if
mode
!=dynamic
andenable_mac_auth
==true
- mac
Auth booleanPreferred - Only if
mode
!=dynamic
+enable_mac_auth
==true
+mac_auth_only
==false
, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x. - mac
Auth stringProtocol - Only if
mode
!=dynamic
andenable_mac_auth
==true
. This type is ignored if mist_nac is enabled. enum:eap-md5
,eap-peap
,pap
- mac
Limit number - Only if
mode
!=dynamic
max number of mac addresses, default is 0 for unlimited, otherwise range is 1 or higher, with upper bound constrained by platform - mode string
mode
==dynamic
must only be used with the port usage with the namedynamic
. enum:access
,dynamic
,inet
,trunk
- mtu number
- Only if
mode
!=dynamic
media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. The default value is 1514. - networks string[]
- Only if
mode
==trunk
, the list of network/vlans - persist
Mac boolean - Only if
mode
==access
andport_auth
!=dot1x
whether the port should retain dynamically learned MAC addresses - poe
Disabled boolean - Only if
mode
!=dynamic
whether PoE capabilities are disabled for a port - port
Auth string - Only if
mode
!=dynamic
if dot1x is desired, set to dot1x. enum:dot1x
- port
Network string - Only if
mode
!=dynamic
native network/vlan for untagged traffic - reauth
Interval number - Only if
mode
!=dynamic
andport_auth
=dot1x
reauthentication interval range - reset
Default stringWhen - Only if
mode
==dynamic
Control when the DPC port should be changed to the default port usage. enum:link_down
,none
(let the DPC port keep at the current port usage) - rules
Switch
Port Usages Rule[] - Only if
mode
==dynamic
- server
Fail stringNetwork - Only if
mode
!=dynamic
andport_auth
==dot1x
sets server fail fallback vlan - server
Reject stringNetwork - Only if
mode
!=dynamic
andport_auth
==dot1x
when radius server reject / fails - speed string
- Only if
mode
!=dynamic
speed, default is auto to automatically negotiate speed - storm
Control SwitchPort Usages Storm Control - Switch storm control
Only if
mode
!=dynamic
- stp
Edge boolean - Only if
mode
!=dynamic
when enabled, the port is not expected to receive BPDU frames - stp
No booleanRoot Port - stp
P2p boolean - voip
Network string - Only if
mode
!=dynamic
network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- all_
networks bool - Only if
mode
==trunk
whether to trunk all network/vlans - allow_
dhcpd bool Only if
mode
!=dynamic
if DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state.When it is not defined, it means using the system’s default setting which depends on whether the port is a access or trunk port.
- allow_
multiple_ boolsupplicants - Only if
mode
!=dynamic
- bypass_
auth_ boolwhen_ server_ down - Only if
mode
!=dynamic
andport_auth
==dot1x
bypass auth for known clients if set to true when RADIUS server is down - bypass_
auth_ boolwhen_ server_ down_ for_ unkonwn_ client - Only if
mode
!=dynamic
andport_auth
=dot1x
bypass auth for all (including unknown clients) if set to true when RADIUS server is down - description str
- Only if
mode
!=dynamic
- disable_
autoneg bool - Only if
mode
!=dynamic
if speed and duplex are specified, whether to disable autonegotiation - disabled bool
- Only if
mode
!=dynamic
whether the port is disabled - duplex str
- Only if
mode
!=dynamic
link connection mode. enum:auto
,full
,half
- dynamic_
vlan_ Sequence[str]networks - Only if
mode
!=dynamic
andport_auth
==dot1x
, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return - enable_
mac_ boolauth - Only if
mode
!=dynamic
andport_auth
==dot1x
whether to enable MAC Auth - enable_
qos bool - Only if
mode
!=dynamic
- guest_
network str - Only if
mode
!=dynamic
andport_auth
==dot1x
which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - inter_
switch_ boollink - Only if
mode
!=dynamic
inter_switch_link is used together with "isolation" under networks NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together - mac_
auth_ boolonly - Only if
mode
!=dynamic
andenable_mac_auth
==true
- mac_
auth_ boolpreferred - Only if
mode
!=dynamic
+enable_mac_auth
==true
+mac_auth_only
==false
, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x. - mac_
auth_ strprotocol - Only if
mode
!=dynamic
andenable_mac_auth
==true
. This type is ignored if mist_nac is enabled. enum:eap-md5
,eap-peap
,pap
- mac_
limit int - Only if
mode
!=dynamic
max number of mac addresses, default is 0 for unlimited, otherwise range is 1 or higher, with upper bound constrained by platform - mode str
mode
==dynamic
must only be used with the port usage with the namedynamic
. enum:access
,dynamic
,inet
,trunk
- mtu int
- Only if
mode
!=dynamic
media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. The default value is 1514. - networks Sequence[str]
- Only if
mode
==trunk
, the list of network/vlans - persist_
mac bool - Only if
mode
==access
andport_auth
!=dot1x
whether the port should retain dynamically learned MAC addresses - poe_
disabled bool - Only if
mode
!=dynamic
whether PoE capabilities are disabled for a port - port_
auth str - Only if
mode
!=dynamic
if dot1x is desired, set to dot1x. enum:dot1x
- port_
network str - Only if
mode
!=dynamic
native network/vlan for untagged traffic - reauth_
interval int - Only if
mode
!=dynamic
andport_auth
=dot1x
reauthentication interval range - reset_
default_ strwhen - Only if
mode
==dynamic
Control when the DPC port should be changed to the default port usage. enum:link_down
,none
(let the DPC port keep at the current port usage) - rules
Sequence[Switch
Port Usages Rule] - Only if
mode
==dynamic
- server_
fail_ strnetwork - Only if
mode
!=dynamic
andport_auth
==dot1x
sets server fail fallback vlan - server_
reject_ strnetwork - Only if
mode
!=dynamic
andport_auth
==dot1x
when radius server reject / fails - speed str
- Only if
mode
!=dynamic
speed, default is auto to automatically negotiate speed - storm_
control SwitchPort Usages Storm Control - Switch storm control
Only if
mode
!=dynamic
- stp_
edge bool - Only if
mode
!=dynamic
when enabled, the port is not expected to receive BPDU frames - stp_
no_ boolroot_ port - stp_
p2p bool - voip_
network str - Only if
mode
!=dynamic
network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- all
Networks Boolean - Only if
mode
==trunk
whether to trunk all network/vlans - allow
Dhcpd Boolean Only if
mode
!=dynamic
if DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state.When it is not defined, it means using the system’s default setting which depends on whether the port is a access or trunk port.
- allow
Multiple BooleanSupplicants - Only if
mode
!=dynamic
- bypass
Auth BooleanWhen Server Down - Only if
mode
!=dynamic
andport_auth
==dot1x
bypass auth for known clients if set to true when RADIUS server is down - bypass
Auth BooleanWhen Server Down For Unkonwn Client - Only if
mode
!=dynamic
andport_auth
=dot1x
bypass auth for all (including unknown clients) if set to true when RADIUS server is down - description String
- Only if
mode
!=dynamic
- disable
Autoneg Boolean - Only if
mode
!=dynamic
if speed and duplex are specified, whether to disable autonegotiation - disabled Boolean
- Only if
mode
!=dynamic
whether the port is disabled - duplex String
- Only if
mode
!=dynamic
link connection mode. enum:auto
,full
,half
- dynamic
Vlan List<String>Networks - Only if
mode
!=dynamic
andport_auth
==dot1x
, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return - enable
Mac BooleanAuth - Only if
mode
!=dynamic
andport_auth
==dot1x
whether to enable MAC Auth - enable
Qos Boolean - Only if
mode
!=dynamic
- guest
Network String - Only if
mode
!=dynamic
andport_auth
==dot1x
which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - inter
Switch BooleanLink - Only if
mode
!=dynamic
inter_switch_link is used together with "isolation" under networks NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together - mac
Auth BooleanOnly - Only if
mode
!=dynamic
andenable_mac_auth
==true
- mac
Auth BooleanPreferred - Only if
mode
!=dynamic
+enable_mac_auth
==true
+mac_auth_only
==false
, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x. - mac
Auth StringProtocol - Only if
mode
!=dynamic
andenable_mac_auth
==true
. This type is ignored if mist_nac is enabled. enum:eap-md5
,eap-peap
,pap
- mac
Limit Number - Only if
mode
!=dynamic
max number of mac addresses, default is 0 for unlimited, otherwise range is 1 or higher, with upper bound constrained by platform - mode String
mode
==dynamic
must only be used with the port usage with the namedynamic
. enum:access
,dynamic
,inet
,trunk
- mtu Number
- Only if
mode
!=dynamic
media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. The default value is 1514. - networks List<String>
- Only if
mode
==trunk
, the list of network/vlans - persist
Mac Boolean - Only if
mode
==access
andport_auth
!=dot1x
whether the port should retain dynamically learned MAC addresses - poe
Disabled Boolean - Only if
mode
!=dynamic
whether PoE capabilities are disabled for a port - port
Auth String - Only if
mode
!=dynamic
if dot1x is desired, set to dot1x. enum:dot1x
- port
Network String - Only if
mode
!=dynamic
native network/vlan for untagged traffic - reauth
Interval Number - Only if
mode
!=dynamic
andport_auth
=dot1x
reauthentication interval range - reset
Default StringWhen - Only if
mode
==dynamic
Control when the DPC port should be changed to the default port usage. enum:link_down
,none
(let the DPC port keep at the current port usage) - rules List<Property Map>
- Only if
mode
==dynamic
- server
Fail StringNetwork - Only if
mode
!=dynamic
andport_auth
==dot1x
sets server fail fallback vlan - server
Reject StringNetwork - Only if
mode
!=dynamic
andport_auth
==dot1x
when radius server reject / fails - speed String
- Only if
mode
!=dynamic
speed, default is auto to automatically negotiate speed - storm
Control Property Map - Switch storm control
Only if
mode
!=dynamic
- stp
Edge Boolean - Only if
mode
!=dynamic
when enabled, the port is not expected to receive BPDU frames - stp
No BooleanRoot Port - stp
P2p Boolean - voip
Network String - Only if
mode
!=dynamic
network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
SwitchPortUsagesRule, SwitchPortUsagesRuleArgs
- Src string
- enum:
link_peermac
,lldp_chassis_id
,lldp_hardware_revision
,lldp_manufacturer_name
,lldp_oui
,lldp_serial_number
,lldp_system_name
,radius_dynamicfilter
,radius_usermac
,radius_username
- Equals string
- Equals
Anies List<string> - use
equals_any
to match any item in a list - Expression string
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- Usage string
port_usage
name
- Src string
- enum:
link_peermac
,lldp_chassis_id
,lldp_hardware_revision
,lldp_manufacturer_name
,lldp_oui
,lldp_serial_number
,lldp_system_name
,radius_dynamicfilter
,radius_usermac
,radius_username
- Equals string
- Equals
Anies []string - use
equals_any
to match any item in a list - Expression string
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- Usage string
port_usage
name
- src String
- enum:
link_peermac
,lldp_chassis_id
,lldp_hardware_revision
,lldp_manufacturer_name
,lldp_oui
,lldp_serial_number
,lldp_system_name
,radius_dynamicfilter
,radius_usermac
,radius_username
- equals
Anies List<String> - use
equals_any
to match any item in a list - equals_ String
- expression String
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- usage String
port_usage
name
- src string
- enum:
link_peermac
,lldp_chassis_id
,lldp_hardware_revision
,lldp_manufacturer_name
,lldp_oui
,lldp_serial_number
,lldp_system_name
,radius_dynamicfilter
,radius_usermac
,radius_username
- equals string
- equals
Anies string[] - use
equals_any
to match any item in a list - expression string
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- usage string
port_usage
name
- src str
- enum:
link_peermac
,lldp_chassis_id
,lldp_hardware_revision
,lldp_manufacturer_name
,lldp_oui
,lldp_serial_number
,lldp_system_name
,radius_dynamicfilter
,radius_usermac
,radius_username
- equals str
- equals_
anies Sequence[str] - use
equals_any
to match any item in a list - expression str
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- usage str
port_usage
name
- src String
- enum:
link_peermac
,lldp_chassis_id
,lldp_hardware_revision
,lldp_manufacturer_name
,lldp_oui
,lldp_serial_number
,lldp_system_name
,radius_dynamicfilter
,radius_usermac
,radius_username
- equals String
- equals
Anies List<String> - use
equals_any
to match any item in a list - expression String
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- usage String
port_usage
name
SwitchPortUsagesStormControl, SwitchPortUsagesStormControlArgs
- No
Broadcast bool - whether to disable storm control on broadcast traffic
- No
Multicast bool - whether to disable storm control on multicast traffic
- No
Registered boolMulticast - whether to disable storm control on registered multicast traffic
- No
Unknown boolUnicast - whether to disable storm control on unknown unicast traffic
- Percentage int
- bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- No
Broadcast bool - whether to disable storm control on broadcast traffic
- No
Multicast bool - whether to disable storm control on multicast traffic
- No
Registered boolMulticast - whether to disable storm control on registered multicast traffic
- No
Unknown boolUnicast - whether to disable storm control on unknown unicast traffic
- Percentage int
- bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- no
Broadcast Boolean - whether to disable storm control on broadcast traffic
- no
Multicast Boolean - whether to disable storm control on multicast traffic
- no
Registered BooleanMulticast - whether to disable storm control on registered multicast traffic
- no
Unknown BooleanUnicast - whether to disable storm control on unknown unicast traffic
- percentage Integer
- bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- no
Broadcast boolean - whether to disable storm control on broadcast traffic
- no
Multicast boolean - whether to disable storm control on multicast traffic
- no
Registered booleanMulticast - whether to disable storm control on registered multicast traffic
- no
Unknown booleanUnicast - whether to disable storm control on unknown unicast traffic
- percentage number
- bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- no_
broadcast bool - whether to disable storm control on broadcast traffic
- no_
multicast bool - whether to disable storm control on multicast traffic
- no_
registered_ boolmulticast - whether to disable storm control on registered multicast traffic
- no_
unknown_ boolunicast - whether to disable storm control on unknown unicast traffic
- percentage int
- bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- no
Broadcast Boolean - whether to disable storm control on broadcast traffic
- no
Multicast Boolean - whether to disable storm control on multicast traffic
- no
Registered BooleanMulticast - whether to disable storm control on registered multicast traffic
- no
Unknown BooleanUnicast - whether to disable storm control on unknown unicast traffic
- percentage Number
- bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
SwitchRadiusConfig, SwitchRadiusConfigArgs
- Acct
Interim intInterval - how frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
- Acct
Servers List<Pulumi.Juniper Mist. Device. Inputs. Switch Radius Config Acct Server> - Auth
Servers List<Pulumi.Juniper Mist. Device. Inputs. Switch Radius Config Auth Server> - Auth
Servers intRetries - radius auth session retries
- Auth
Servers intTimeout - radius auth session timeout
- Coa
Enabled bool - Coa
Port int - Network string
- use
network
orsource_ip
which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - Source
Ip string - use
network
orsource_ip
- Acct
Interim intInterval - how frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
- Acct
Servers []SwitchRadius Config Acct Server - Auth
Servers []SwitchRadius Config Auth Server - Auth
Servers intRetries - radius auth session retries
- Auth
Servers intTimeout - radius auth session timeout
- Coa
Enabled bool - Coa
Port int - Network string
- use
network
orsource_ip
which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - Source
Ip string - use
network
orsource_ip
- acct
Interim IntegerInterval - how frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
- acct
Servers List<SwitchRadius Config Acct Server> - auth
Servers List<SwitchRadius Config Auth Server> - auth
Servers IntegerRetries - radius auth session retries
- auth
Servers IntegerTimeout - radius auth session timeout
- coa
Enabled Boolean - coa
Port Integer - network String
- use
network
orsource_ip
which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - source
Ip String - use
network
orsource_ip
- acct
Interim numberInterval - how frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
- acct
Servers SwitchRadius Config Acct Server[] - auth
Servers SwitchRadius Config Auth Server[] - auth
Servers numberRetries - radius auth session retries
- auth
Servers numberTimeout - radius auth session timeout
- coa
Enabled boolean - coa
Port number - network string
- use
network
orsource_ip
which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - source
Ip string - use
network
orsource_ip
- acct_
interim_ intinterval - how frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
- acct_
servers Sequence[SwitchRadius Config Acct Server] - auth_
servers Sequence[SwitchRadius Config Auth Server] - auth_
servers_ intretries - radius auth session retries
- auth_
servers_ inttimeout - radius auth session timeout
- coa_
enabled bool - coa_
port int - network str
- use
network
orsource_ip
which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - source_
ip str - use
network
orsource_ip
- acct
Interim NumberInterval - how frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
- acct
Servers List<Property Map> - auth
Servers List<Property Map> - auth
Servers NumberRetries - radius auth session retries
- auth
Servers NumberTimeout - radius auth session timeout
- coa
Enabled Boolean - coa
Port Number - network String
- use
network
orsource_ip
which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - source
Ip String - use
network
orsource_ip
SwitchRadiusConfigAcctServer, SwitchRadiusConfigAcctServerArgs
- Host string
- ip / hostname of RADIUS server
- Secret string
- secret of RADIUS server
- Keywrap
Enabled bool - Keywrap
Format string - enum:
ascii
,hex
- Keywrap
Kek string - Keywrap
Mack string - Port int
- Acct port of RADIUS server
- Host string
- ip / hostname of RADIUS server
- Secret string
- secret of RADIUS server
- Keywrap
Enabled bool - Keywrap
Format string - enum:
ascii
,hex
- Keywrap
Kek string - Keywrap
Mack string - Port int
- Acct port of RADIUS server
- host String
- ip / hostname of RADIUS server
- secret String
- secret of RADIUS server
- keywrap
Enabled Boolean - keywrap
Format String - enum:
ascii
,hex
- keywrap
Kek String - keywrap
Mack String - port Integer
- Acct port of RADIUS server
- host string
- ip / hostname of RADIUS server
- secret string
- secret of RADIUS server
- keywrap
Enabled boolean - keywrap
Format string - enum:
ascii
,hex
- keywrap
Kek string - keywrap
Mack string - port number
- Acct port of RADIUS server
- host str
- ip / hostname of RADIUS server
- secret str
- secret of RADIUS server
- keywrap_
enabled bool - keywrap_
format str - enum:
ascii
,hex
- keywrap_
kek str - keywrap_
mack str - port int
- Acct port of RADIUS server
- host String
- ip / hostname of RADIUS server
- secret String
- secret of RADIUS server
- keywrap
Enabled Boolean - keywrap
Format String - enum:
ascii
,hex
- keywrap
Kek String - keywrap
Mack String - port Number
- Acct port of RADIUS server
SwitchRadiusConfigAuthServer, SwitchRadiusConfigAuthServerArgs
- Host string
- ip / hostname of RADIUS server
- Secret string
- secret of RADIUS server
- Keywrap
Enabled bool - Keywrap
Format string - enum:
ascii
,hex
- Keywrap
Kek string - Keywrap
Mack string - Port int
- Auth port of RADIUS server
- Require
Message boolAuthenticator - whether to require Message-Authenticator in requests
- Host string
- ip / hostname of RADIUS server
- Secret string
- secret of RADIUS server
- Keywrap
Enabled bool - Keywrap
Format string - enum:
ascii
,hex
- Keywrap
Kek string - Keywrap
Mack string - Port int
- Auth port of RADIUS server
- Require
Message boolAuthenticator - whether to require Message-Authenticator in requests
- host String
- ip / hostname of RADIUS server
- secret String
- secret of RADIUS server
- keywrap
Enabled Boolean - keywrap
Format String - enum:
ascii
,hex
- keywrap
Kek String - keywrap
Mack String - port Integer
- Auth port of RADIUS server
- require
Message BooleanAuthenticator - whether to require Message-Authenticator in requests
- host string
- ip / hostname of RADIUS server
- secret string
- secret of RADIUS server
- keywrap
Enabled boolean - keywrap
Format string - enum:
ascii
,hex
- keywrap
Kek string - keywrap
Mack string - port number
- Auth port of RADIUS server
- require
Message booleanAuthenticator - whether to require Message-Authenticator in requests
- host str
- ip / hostname of RADIUS server
- secret str
- secret of RADIUS server
- keywrap_
enabled bool - keywrap_
format str - enum:
ascii
,hex
- keywrap_
kek str - keywrap_
mack str - port int
- Auth port of RADIUS server
- require_
message_ boolauthenticator - whether to require Message-Authenticator in requests
- host String
- ip / hostname of RADIUS server
- secret String
- secret of RADIUS server
- keywrap
Enabled Boolean - keywrap
Format String - enum:
ascii
,hex
- keywrap
Kek String - keywrap
Mack String - port Number
- Auth port of RADIUS server
- require
Message BooleanAuthenticator - whether to require Message-Authenticator in requests
SwitchRemoteSyslog, SwitchRemoteSyslogArgs
- Archive
Pulumi.
Juniper Mist. Device. Inputs. Switch Remote Syslog Archive - Console
Pulumi.
Juniper Mist. Device. Inputs. Switch Remote Syslog Console - Enabled bool
- Files
List<Pulumi.
Juniper Mist. Device. Inputs. Switch Remote Syslog File> - Network string
- if source_address is configured, will use the vlan firstly otherwise use source_ip
- Send
To boolAll Servers - Servers
List<Pulumi.
Juniper Mist. Device. Inputs. Switch Remote Syslog Server> - Time
Format string - enum:
millisecond
,year
,year millisecond
- Users
List<Pulumi.
Juniper Mist. Device. Inputs. Switch Remote Syslog User>
- Archive
Switch
Remote Syslog Archive - Console
Switch
Remote Syslog Console - Enabled bool
- Files
[]Switch
Remote Syslog File - Network string
- if source_address is configured, will use the vlan firstly otherwise use source_ip
- Send
To boolAll Servers - Servers
[]Switch
Remote Syslog Server - Time
Format string - enum:
millisecond
,year
,year millisecond
- Users
[]Switch
Remote Syslog User
- archive
Switch
Remote Syslog Archive - console
Switch
Remote Syslog Console - enabled Boolean
- files
List<Switch
Remote Syslog File> - network String
- if source_address is configured, will use the vlan firstly otherwise use source_ip
- send
To BooleanAll Servers - servers
List<Switch
Remote Syslog Server> - time
Format String - enum:
millisecond
,year
,year millisecond
- users
List<Switch
Remote Syslog User>
- archive
Switch
Remote Syslog Archive - console
Switch
Remote Syslog Console - enabled boolean
- files
Switch
Remote Syslog File[] - network string
- if source_address is configured, will use the vlan firstly otherwise use source_ip
- send
To booleanAll Servers - servers
Switch
Remote Syslog Server[] - time
Format string - enum:
millisecond
,year
,year millisecond
- users
Switch
Remote Syslog User[]
- archive
Switch
Remote Syslog Archive - console
Switch
Remote Syslog Console - enabled bool
- files
Sequence[Switch
Remote Syslog File] - network str
- if source_address is configured, will use the vlan firstly otherwise use source_ip
- send_
to_ boolall_ servers - servers
Sequence[Switch
Remote Syslog Server] - time_
format str - enum:
millisecond
,year
,year millisecond
- users
Sequence[Switch
Remote Syslog User]
- archive Property Map
- console Property Map
- enabled Boolean
- files List<Property Map>
- network String
- if source_address is configured, will use the vlan firstly otherwise use source_ip
- send
To BooleanAll Servers - servers List<Property Map>
- time
Format String - enum:
millisecond
,year
,year millisecond
- users List<Property Map>
SwitchRemoteSyslogArchive, SwitchRemoteSyslogArchiveArgs
SwitchRemoteSyslogConsole, SwitchRemoteSyslogConsoleArgs
SwitchRemoteSyslogConsoleContent, SwitchRemoteSyslogConsoleContentArgs
SwitchRemoteSyslogFile, SwitchRemoteSyslogFileArgs
- archive
Switch
Remote Syslog File Archive - contents
List<Switch
Remote Syslog File Content> - explicit
Priority Boolean - file String
- match String
- structured
Data Boolean
- archive
Switch
Remote Syslog File Archive - contents
Switch
Remote Syslog File Content[] - explicit
Priority boolean - file string
- match string
- structured
Data boolean
- archive Property Map
- contents List<Property Map>
- explicit
Priority Boolean - file String
- match String
- structured
Data Boolean
SwitchRemoteSyslogFileArchive, SwitchRemoteSyslogFileArchiveArgs
SwitchRemoteSyslogFileContent, SwitchRemoteSyslogFileContentArgs
SwitchRemoteSyslogServer, SwitchRemoteSyslogServerArgs
- Contents
List<Pulumi.
Juniper Mist. Device. Inputs. Switch Remote Syslog Server Content> - Explicit
Priority bool - Facility string
- enum:
any
,authorization
,change-log
,config
,conflict-log
,daemon
,dfc
,external
,firewall
,ftp
,interactive-commands
,kernel
,ntp
,pfe
,security
,user
- Host string
- Match string
- Port int
- Protocol string
- enum:
tcp
,udp
- Routing
Instance string - Severity string
- enum:
alert
,any
,critical
,emergency
,error
,info
,notice
,warning
- Source
Address string - if source_address is configured, will use the vlan firstly otherwise use source_ip
- Structured
Data bool - Tag string
- Contents
[]Switch
Remote Syslog Server Content - Explicit
Priority bool - Facility string
- enum:
any
,authorization
,change-log
,config
,conflict-log
,daemon
,dfc
,external
,firewall
,ftp
,interactive-commands
,kernel
,ntp
,pfe
,security
,user
- Host string
- Match string
- Port int
- Protocol string
- enum:
tcp
,udp
- Routing
Instance string - Severity string
- enum:
alert
,any
,critical
,emergency
,error
,info
,notice
,warning
- Source
Address string - if source_address is configured, will use the vlan firstly otherwise use source_ip
- Structured
Data bool - Tag string
- contents
List<Switch
Remote Syslog Server Content> - explicit
Priority Boolean - facility String
- enum:
any
,authorization
,change-log
,config
,conflict-log
,daemon
,dfc
,external
,firewall
,ftp
,interactive-commands
,kernel
,ntp
,pfe
,security
,user
- host String
- match String
- port Integer
- protocol String
- enum:
tcp
,udp
- routing
Instance String - severity String
- enum:
alert
,any
,critical
,emergency
,error
,info
,notice
,warning
- source
Address String - if source_address is configured, will use the vlan firstly otherwise use source_ip
- structured
Data Boolean - tag String
- contents
Switch
Remote Syslog Server Content[] - explicit
Priority boolean - facility string
- enum:
any
,authorization
,change-log
,config
,conflict-log
,daemon
,dfc
,external
,firewall
,ftp
,interactive-commands
,kernel
,ntp
,pfe
,security
,user
- host string
- match string
- port number
- protocol string
- enum:
tcp
,udp
- routing
Instance string - severity string
- enum:
alert
,any
,critical
,emergency
,error
,info
,notice
,warning
- source
Address string - if source_address is configured, will use the vlan firstly otherwise use source_ip
- structured
Data boolean - tag string
- contents
Sequence[Switch
Remote Syslog Server Content] - explicit_
priority bool - facility str
- enum:
any
,authorization
,change-log
,config
,conflict-log
,daemon
,dfc
,external
,firewall
,ftp
,interactive-commands
,kernel
,ntp
,pfe
,security
,user
- host str
- match str
- port int
- protocol str
- enum:
tcp
,udp
- routing_
instance str - severity str
- enum:
alert
,any
,critical
,emergency
,error
,info
,notice
,warning
- source_
address str - if source_address is configured, will use the vlan firstly otherwise use source_ip
- structured_
data bool - tag str
- contents List<Property Map>
- explicit
Priority Boolean - facility String
- enum:
any
,authorization
,change-log
,config
,conflict-log
,daemon
,dfc
,external
,firewall
,ftp
,interactive-commands
,kernel
,ntp
,pfe
,security
,user
- host String
- match String
- port Number
- protocol String
- enum:
tcp
,udp
- routing
Instance String - severity String
- enum:
alert
,any
,critical
,emergency
,error
,info
,notice
,warning
- source
Address String - if source_address is configured, will use the vlan firstly otherwise use source_ip
- structured
Data Boolean - tag String
SwitchRemoteSyslogServerContent, SwitchRemoteSyslogServerContentArgs
SwitchRemoteSyslogUser, SwitchRemoteSyslogUserArgs
- Contents
[]Switch
Remote Syslog User Content - Match string
- User string
- contents
List<Switch
Remote Syslog User Content> - match String
- user String
- contents
Switch
Remote Syslog User Content[] - match string
- user string
- contents List<Property Map>
- match String
- user String
SwitchRemoteSyslogUserContent, SwitchRemoteSyslogUserContentArgs
SwitchSnmpConfig, SwitchSnmpConfigArgs
- Client
Lists List<Pulumi.Juniper Mist. Device. Inputs. Switch Snmp Config Client List> - Contact string
- Description string
- Enabled bool
- Engine
Id string - enum:
engine-id-suffix
,local
,use-default-ip-address
,use_mac-address
- Location string
- Name string
- Network string
- Trap
Groups List<Pulumi.Juniper Mist. Device. Inputs. Switch Snmp Config Trap Group> - V2c
Configs List<Pulumi.Juniper Mist. Device. Inputs. Switch Snmp Config V2c Config> - V3Config
Pulumi.
Juniper Mist. Device. Inputs. Switch Snmp Config V3Config - Views
List<Pulumi.
Juniper Mist. Device. Inputs. Switch Snmp Config View>
- Client
Lists []SwitchSnmp Config Client List - Contact string
- Description string
- Enabled bool
- Engine
Id string - enum:
engine-id-suffix
,local
,use-default-ip-address
,use_mac-address
- Location string
- Name string
- Network string
- Trap
Groups []SwitchSnmp Config Trap Group - V2c
Configs []SwitchSnmp Config V2c Config - V3Config
Switch
Snmp Config V3Config - Views
[]Switch
Snmp Config View
- client
Lists List<SwitchSnmp Config Client List> - contact String
- description String
- enabled Boolean
- engine
Id String - enum:
engine-id-suffix
,local
,use-default-ip-address
,use_mac-address
- location String
- name String
- network String
- trap
Groups List<SwitchSnmp Config Trap Group> - v2c
Configs List<SwitchSnmp Config V2c Config> - v3Config
Switch
Snmp Config V3Config - views
List<Switch
Snmp Config View>
- client
Lists SwitchSnmp Config Client List[] - contact string
- description string
- enabled boolean
- engine
Id string - enum:
engine-id-suffix
,local
,use-default-ip-address
,use_mac-address
- location string
- name string
- network string
- trap
Groups SwitchSnmp Config Trap Group[] - v2c
Configs SwitchSnmp Config V2c Config[] - v3Config
Switch
Snmp Config V3Config - views
Switch
Snmp Config View[]
- client_
lists Sequence[SwitchSnmp Config Client List] - contact str
- description str
- enabled bool
- engine_
id str - enum:
engine-id-suffix
,local
,use-default-ip-address
,use_mac-address
- location str
- name str
- network str
- trap_
groups Sequence[SwitchSnmp Config Trap Group] - v2c_
configs Sequence[SwitchSnmp Config V2c Config] - v3_
config SwitchSnmp Config V3Config - views
Sequence[Switch
Snmp Config View]
- client
Lists List<Property Map> - contact String
- description String
- enabled Boolean
- engine
Id String - enum:
engine-id-suffix
,local
,use-default-ip-address
,use_mac-address
- location String
- name String
- network String
- trap
Groups List<Property Map> - v2c
Configs List<Property Map> - v3Config Property Map
- views List<Property Map>
SwitchSnmpConfigClientList, SwitchSnmpConfigClientListArgs
- Client
List stringName - Clients List<string>
- Client
List stringName - Clients []string
- client
List StringName - clients List<String>
- client
List stringName - clients string[]
- client_
list_ strname - clients Sequence[str]
- client
List StringName - clients List<String>
SwitchSnmpConfigTrapGroup, SwitchSnmpConfigTrapGroupArgs
- Categories List<string>
- Group
Name string - Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
- Targets List<string>
- Version string
- enum:
all
,v1
,v2
- Categories []string
- Group
Name string - Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
- Targets []string
- Version string
- enum:
all
,v1
,v2
- categories List<String>
- group
Name String - Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
- targets List<String>
- version String
- enum:
all
,v1
,v2
- categories string[]
- group
Name string - Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
- targets string[]
- version string
- enum:
all
,v1
,v2
- categories Sequence[str]
- group_
name str - Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
- targets Sequence[str]
- version str
- enum:
all
,v1
,v2
- categories List<String>
- group
Name String - Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
- targets List<String>
- version String
- enum:
all
,v1
,v2
SwitchSnmpConfigV2cConfig, SwitchSnmpConfigV2cConfigArgs
- string
- Client
List stringName - client_list_name here should refer to client_list above
- Community
Name string - View string
- view name here should be defined in views above
- string
- Client
List stringName - client_list_name here should refer to client_list above
- Community
Name string - View string
- view name here should be defined in views above
- String
- client
List StringName - client_list_name here should refer to client_list above
- community
Name String - view String
- view name here should be defined in views above
- string
- client
List stringName - client_list_name here should refer to client_list above
- community
Name string - view string
- view name here should be defined in views above
- str
- client_
list_ strname - client_list_name here should refer to client_list above
- community_
name str - view str
- view name here should be defined in views above
- String
- client
List StringName - client_list_name here should refer to client_list above
- community
Name String - view String
- view name here should be defined in views above
SwitchSnmpConfigV3Config, SwitchSnmpConfigV3ConfigArgs
- Notifies
List<Pulumi.
Juniper Mist. Device. Inputs. Switch Snmp Config V3Config Notify> - Notify
Filters List<Pulumi.Juniper Mist. Device. Inputs. Switch Snmp Config V3Config Notify Filter> - Target
Addresses List<Pulumi.Juniper Mist. Device. Inputs. Switch Snmp Config V3Config Target Address> - Target
Parameters List<Pulumi.Juniper Mist. Device. Inputs. Switch Snmp Config V3Config Target Parameter> - Usm
Pulumi.
Juniper Mist. Device. Inputs. Switch Snmp Config V3Config Usm - Vacm
Pulumi.
Juniper Mist. Device. Inputs. Switch Snmp Config V3Config Vacm
- notifies
Sequence[Switch
Snmp Config V3Config Notify] - notify_
filters Sequence[SwitchSnmp Config V3Config Notify Filter] - target_
addresses Sequence[SwitchSnmp Config V3Config Target Address] - target_
parameters Sequence[SwitchSnmp Config V3Config Target Parameter] - usm
Switch
Snmp Config V3Config Usm - vacm
Switch
Snmp Config V3Config Vacm
SwitchSnmpConfigV3ConfigNotify, SwitchSnmpConfigV3ConfigNotifyArgs
SwitchSnmpConfigV3ConfigNotifyFilter, SwitchSnmpConfigV3ConfigNotifyFilterArgs
SwitchSnmpConfigV3ConfigNotifyFilterContent, SwitchSnmpConfigV3ConfigNotifyFilterContentArgs
SwitchSnmpConfigV3ConfigTargetAddress, SwitchSnmpConfigV3ConfigTargetAddressArgs
- Address string
- Address
Mask string - Port int
- Tag
List string - <refer to notify tag, can be multiple with blank
- Target
Address stringName - Target
Parameters string - refer to notify target parameters name
- Address string
- Address
Mask string - Port int
- Tag
List string - <refer to notify tag, can be multiple with blank
- Target
Address stringName - Target
Parameters string - refer to notify target parameters name
- address String
- address
Mask String - port Integer
- tag
List String - <refer to notify tag, can be multiple with blank
- target
Address StringName - target
Parameters String - refer to notify target parameters name
- address string
- address
Mask string - port number
- tag
List string - <refer to notify tag, can be multiple with blank
- target
Address stringName - target
Parameters string - refer to notify target parameters name
- address str
- address_
mask str - port int
- tag_
list str - <refer to notify tag, can be multiple with blank
- target_
address_ strname - target_
parameters str - refer to notify target parameters name
- address String
- address
Mask String - port Number
- tag
List String - <refer to notify tag, can be multiple with blank
- target
Address StringName - target
Parameters String - refer to notify target parameters name
SwitchSnmpConfigV3ConfigTargetParameter, SwitchSnmpConfigV3ConfigTargetParameterArgs
- Message
Processing stringModel - enum:
v1
,v2c
,v3
- Name string
- Notify
Filter string - refer to profile-name in notify_filter
- Security
Level string - enum:
authentication
,none
,privacy
- Security
Model string - enum:
usm
,v1
,v2c
- Security
Name string - refer to security_name in usm
- Message
Processing stringModel - enum:
v1
,v2c
,v3
- Name string
- Notify
Filter string - refer to profile-name in notify_filter
- Security
Level string - enum:
authentication
,none
,privacy
- Security
Model string - enum:
usm
,v1
,v2c
- Security
Name string - refer to security_name in usm
- message
Processing StringModel - enum:
v1
,v2c
,v3
- name String
- notify
Filter String - refer to profile-name in notify_filter
- security
Level String - enum:
authentication
,none
,privacy
- security
Model String - enum:
usm
,v1
,v2c
- security
Name String - refer to security_name in usm
- message
Processing stringModel - enum:
v1
,v2c
,v3
- name string
- notify
Filter string - refer to profile-name in notify_filter
- security
Level string - enum:
authentication
,none
,privacy
- security
Model string - enum:
usm
,v1
,v2c
- security
Name string - refer to security_name in usm
- message_
processing_ strmodel - enum:
v1
,v2c
,v3
- name str
- notify_
filter str - refer to profile-name in notify_filter
- security_
level str - enum:
authentication
,none
,privacy
- security_
model str - enum:
usm
,v1
,v2c
- security_
name str - refer to security_name in usm
- message
Processing StringModel - enum:
v1
,v2c
,v3
- name String
- notify
Filter String - refer to profile-name in notify_filter
- security
Level String - enum:
authentication
,none
,privacy
- security
Model String - enum:
usm
,v1
,v2c
- security
Name String - refer to security_name in usm
SwitchSnmpConfigV3ConfigUsm, SwitchSnmpConfigV3ConfigUsmArgs
- Engine
Type string - enum:
local_engine
,remote_engine
- Engineid string
- required only if
engine_type
==remote_engine
- Users
List<Pulumi.
Juniper Mist. Device. Inputs. Switch Snmp Config V3Config Usm User>
- Engine
Type string - enum:
local_engine
,remote_engine
- Engineid string
- required only if
engine_type
==remote_engine
- Users
[]Switch
Snmp Config V3Config Usm User
- engine
Type String - enum:
local_engine
,remote_engine
- engineid String
- required only if
engine_type
==remote_engine
- users
List<Switch
Snmp Config V3Config Usm User>
- engine
Type string - enum:
local_engine
,remote_engine
- engineid string
- required only if
engine_type
==remote_engine
- users
Switch
Snmp Config V3Config Usm User[]
- engine_
type str - enum:
local_engine
,remote_engine
- engineid str
- required only if
engine_type
==remote_engine
- users
Sequence[Switch
Snmp Config V3Config Usm User]
- engine
Type String - enum:
local_engine
,remote_engine
- engineid String
- required only if
engine_type
==remote_engine
- users List<Property Map>
SwitchSnmpConfigV3ConfigUsmUser, SwitchSnmpConfigV3ConfigUsmUserArgs
- Authentication
Password string - Not required if
authentication_type
==authentication_none
include alphabetic, numeric, and special characters, but it cannot include control characters. - Authentication
Type string - sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum:
authentication_md5
,authentication_none
,authentication_sha
,authentication_sha224
,authentication_sha256
,authentication_sha384
,authentication_sha512
- Encryption
Password string - Not required if
encryption_type
==privacy-none
include alphabetic, numeric, and special characters, but it cannot include control characters - Encryption
Type string - enum:
privacy-3des
,privacy-aes128
,privacy-des
,privacy-none
- Name string
- Authentication
Password string - Not required if
authentication_type
==authentication_none
include alphabetic, numeric, and special characters, but it cannot include control characters. - Authentication
Type string - sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum:
authentication_md5
,authentication_none
,authentication_sha
,authentication_sha224
,authentication_sha256
,authentication_sha384
,authentication_sha512
- Encryption
Password string - Not required if
encryption_type
==privacy-none
include alphabetic, numeric, and special characters, but it cannot include control characters - Encryption
Type string - enum:
privacy-3des
,privacy-aes128
,privacy-des
,privacy-none
- Name string
- authentication
Password String - Not required if
authentication_type
==authentication_none
include alphabetic, numeric, and special characters, but it cannot include control characters. - authentication
Type String - sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum:
authentication_md5
,authentication_none
,authentication_sha
,authentication_sha224
,authentication_sha256
,authentication_sha384
,authentication_sha512
- encryption
Password String - Not required if
encryption_type
==privacy-none
include alphabetic, numeric, and special characters, but it cannot include control characters - encryption
Type String - enum:
privacy-3des
,privacy-aes128
,privacy-des
,privacy-none
- name String
- authentication
Password string - Not required if
authentication_type
==authentication_none
include alphabetic, numeric, and special characters, but it cannot include control characters. - authentication
Type string - sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum:
authentication_md5
,authentication_none
,authentication_sha
,authentication_sha224
,authentication_sha256
,authentication_sha384
,authentication_sha512
- encryption
Password string - Not required if
encryption_type
==privacy-none
include alphabetic, numeric, and special characters, but it cannot include control characters - encryption
Type string - enum:
privacy-3des
,privacy-aes128
,privacy-des
,privacy-none
- name string
- authentication_
password str - Not required if
authentication_type
==authentication_none
include alphabetic, numeric, and special characters, but it cannot include control characters. - authentication_
type str - sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum:
authentication_md5
,authentication_none
,authentication_sha
,authentication_sha224
,authentication_sha256
,authentication_sha384
,authentication_sha512
- encryption_
password str - Not required if
encryption_type
==privacy-none
include alphabetic, numeric, and special characters, but it cannot include control characters - encryption_
type str - enum:
privacy-3des
,privacy-aes128
,privacy-des
,privacy-none
- name str
- authentication
Password String - Not required if
authentication_type
==authentication_none
include alphabetic, numeric, and special characters, but it cannot include control characters. - authentication
Type String - sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum:
authentication_md5
,authentication_none
,authentication_sha
,authentication_sha224
,authentication_sha256
,authentication_sha384
,authentication_sha512
- encryption
Password String - Not required if
encryption_type
==privacy-none
include alphabetic, numeric, and special characters, but it cannot include control characters - encryption
Type String - enum:
privacy-3des
,privacy-aes128
,privacy-des
,privacy-none
- name String
SwitchSnmpConfigV3ConfigVacm, SwitchSnmpConfigV3ConfigVacmArgs
SwitchSnmpConfigV3ConfigVacmAccess, SwitchSnmpConfigV3ConfigVacmAccessArgs
SwitchSnmpConfigV3ConfigVacmAccessPrefixList, SwitchSnmpConfigV3ConfigVacmAccessPrefixListArgs
- Context
Prefix string - only required if
type
==context_prefix
- Notify
View string - refer to view name
- Read
View string - refer to view name
- Security
Level string - enum:
authentication
,none
,privacy
- Security
Model string - enum:
any
,usm
,v1
,v2c
- Type string
- enum:
context_prefix
,default_context_prefix
- Write
View string - refer to view name
- Context
Prefix string - only required if
type
==context_prefix
- Notify
View string - refer to view name
- Read
View string - refer to view name
- Security
Level string - enum:
authentication
,none
,privacy
- Security
Model string - enum:
any
,usm
,v1
,v2c
- Type string
- enum:
context_prefix
,default_context_prefix
- Write
View string - refer to view name
- context
Prefix String - only required if
type
==context_prefix
- notify
View String - refer to view name
- read
View String - refer to view name
- security
Level String - enum:
authentication
,none
,privacy
- security
Model String - enum:
any
,usm
,v1
,v2c
- type String
- enum:
context_prefix
,default_context_prefix
- write
View String - refer to view name
- context
Prefix string - only required if
type
==context_prefix
- notify
View string - refer to view name
- read
View string - refer to view name
- security
Level string - enum:
authentication
,none
,privacy
- security
Model string - enum:
any
,usm
,v1
,v2c
- type string
- enum:
context_prefix
,default_context_prefix
- write
View string - refer to view name
- context_
prefix str - only required if
type
==context_prefix
- notify_
view str - refer to view name
- read_
view str - refer to view name
- security_
level str - enum:
authentication
,none
,privacy
- security_
model str - enum:
any
,usm
,v1
,v2c
- type str
- enum:
context_prefix
,default_context_prefix
- write_
view str - refer to view name
- context
Prefix String - only required if
type
==context_prefix
- notify
View String - refer to view name
- read
View String - refer to view name
- security
Level String - enum:
authentication
,none
,privacy
- security
Model String - enum:
any
,usm
,v1
,v2c
- type String
- enum:
context_prefix
,default_context_prefix
- write
View String - refer to view name
SwitchSnmpConfigV3ConfigVacmSecurityToGroup, SwitchSnmpConfigV3ConfigVacmSecurityToGroupArgs
- Contents
[]Switch
Snmp Config V3Config Vacm Security To Group Content - Security
Model string - enum:
usm
,v1
,v2c
- contents
List<Switch
Snmp Config V3Config Vacm Security To Group Content> - security
Model String - enum:
usm
,v1
,v2c
- contents
Switch
Snmp Config V3Config Vacm Security To Group Content[] - security
Model string - enum:
usm
,v1
,v2c
- contents
Sequence[Switch
Snmp Config V3Config Vacm Security To Group Content] - security_
model str - enum:
usm
,v1
,v2c
- contents List<Property Map>
- security
Model String - enum:
usm
,v1
,v2c
SwitchSnmpConfigV3ConfigVacmSecurityToGroupContent, SwitchSnmpConfigV3ConfigVacmSecurityToGroupContentArgs
- Group string
- refer to group_name under access
- Security
Name string
- Group string
- refer to group_name under access
- Security
Name string
- group String
- refer to group_name under access
- security
Name String
- group string
- refer to group_name under access
- security
Name string
- group str
- refer to group_name under access
- security_
name str
- group String
- refer to group_name under access
- security
Name String
SwitchSnmpConfigView, SwitchSnmpConfigViewArgs
SwitchStpConfig, SwitchStpConfigArgs
- Vstp
Enabled bool - ignored for switches participating in EVPN
- Vstp
Enabled bool - ignored for switches participating in EVPN
- vstp
Enabled Boolean - ignored for switches participating in EVPN
- vstp
Enabled boolean - ignored for switches participating in EVPN
- vstp_
enabled bool - ignored for switches participating in EVPN
- vstp
Enabled Boolean - ignored for switches participating in EVPN
SwitchSwitchMgmt, SwitchSwitchMgmtArgs
- Ap
Affinity intThreshold - ap_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
- string
- Set Banners for switches. Allows markup formatting
- Cli
Idle intTimeout - Sets timeout for switches
- Config
Revert intTimer - the rollback timer for commit confirmed
- Dhcp
Option boolFqdn - Enable to provide the FQDN with DHCP option 81
- Disable
Oob boolDown Alarm - Local
Accounts Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Switch Switch Mgmt Local Accounts> - Property key is the user name. For Local user authentication
- Mxedge
Proxy stringHost - Mxedge
Proxy intPort - Protect
Re Pulumi.Juniper Mist. Device. Inputs. Switch Switch Mgmt Protect Re - restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
- Root
Password string - Tacacs
Pulumi.
Juniper Mist. Device. Inputs. Switch Switch Mgmt Tacacs - Use
Mxedge boolProxy - to use mxedge as proxy
- Ap
Affinity intThreshold - ap_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
- string
- Set Banners for switches. Allows markup formatting
- Cli
Idle intTimeout - Sets timeout for switches
- Config
Revert intTimer - the rollback timer for commit confirmed
- Dhcp
Option boolFqdn - Enable to provide the FQDN with DHCP option 81
- Disable
Oob boolDown Alarm - Local
Accounts map[string]SwitchSwitch Mgmt Local Accounts - Property key is the user name. For Local user authentication
- Mxedge
Proxy stringHost - Mxedge
Proxy intPort - Protect
Re SwitchSwitch Mgmt Protect Re - restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
- Root
Password string - Tacacs
Switch
Switch Mgmt Tacacs - Use
Mxedge boolProxy - to use mxedge as proxy
- ap
Affinity IntegerThreshold - ap_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
- String
- Set Banners for switches. Allows markup formatting
- cli
Idle IntegerTimeout - Sets timeout for switches
- config
Revert IntegerTimer - the rollback timer for commit confirmed
- dhcp
Option BooleanFqdn - Enable to provide the FQDN with DHCP option 81
- disable
Oob BooleanDown Alarm - local
Accounts Map<String,SwitchSwitch Mgmt Local Accounts> - Property key is the user name. For Local user authentication
- mxedge
Proxy StringHost - mxedge
Proxy IntegerPort - protect
Re SwitchSwitch Mgmt Protect Re - restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
- root
Password String - tacacs
Switch
Switch Mgmt Tacacs - use
Mxedge BooleanProxy - to use mxedge as proxy
- ap
Affinity numberThreshold - ap_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
- string
- Set Banners for switches. Allows markup formatting
- cli
Idle numberTimeout - Sets timeout for switches
- config
Revert numberTimer - the rollback timer for commit confirmed
- dhcp
Option booleanFqdn - Enable to provide the FQDN with DHCP option 81
- disable
Oob booleanDown Alarm - local
Accounts {[key: string]: SwitchSwitch Mgmt Local Accounts} - Property key is the user name. For Local user authentication
- mxedge
Proxy stringHost - mxedge
Proxy numberPort - protect
Re SwitchSwitch Mgmt Protect Re - restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
- root
Password string - tacacs
Switch
Switch Mgmt Tacacs - use
Mxedge booleanProxy - to use mxedge as proxy
- ap_
affinity_ intthreshold - ap_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
- str
- Set Banners for switches. Allows markup formatting
- cli_
idle_ inttimeout - Sets timeout for switches
- config_
revert_ inttimer - the rollback timer for commit confirmed
- dhcp_
option_ boolfqdn - Enable to provide the FQDN with DHCP option 81
- disable_
oob_ booldown_ alarm - local_
accounts Mapping[str, SwitchSwitch Mgmt Local Accounts] - Property key is the user name. For Local user authentication
- mxedge_
proxy_ strhost - mxedge_
proxy_ intport - protect_
re SwitchSwitch Mgmt Protect Re - restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
- root_
password str - tacacs
Switch
Switch Mgmt Tacacs - use_
mxedge_ boolproxy - to use mxedge as proxy
- ap
Affinity NumberThreshold - ap_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
- String
- Set Banners for switches. Allows markup formatting
- cli
Idle NumberTimeout - Sets timeout for switches
- config
Revert NumberTimer - the rollback timer for commit confirmed
- dhcp
Option BooleanFqdn - Enable to provide the FQDN with DHCP option 81
- disable
Oob BooleanDown Alarm - local
Accounts Map<Property Map> - Property key is the user name. For Local user authentication
- mxedge
Proxy StringHost - mxedge
Proxy NumberPort - protect
Re Property Map - restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
- root
Password String - tacacs Property Map
- use
Mxedge BooleanProxy - to use mxedge as proxy
SwitchSwitchMgmtLocalAccounts, SwitchSwitchMgmtLocalAccountsArgs
SwitchSwitchMgmtProtectRe, SwitchSwitchMgmtProtectReArgs
- Allowed
Services List<string> - optionally, services we'll allow. enum:
icmp
,ssh
- Customs
List<Pulumi.
Juniper Mist. Device. Inputs. Switch Switch Mgmt Protect Re Custom> - Enabled bool
- when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- Trusted
Hosts List<string> - host/subnets we'll allow traffic to/from
- Allowed
Services []string - optionally, services we'll allow. enum:
icmp
,ssh
- Customs
[]Switch
Switch Mgmt Protect Re Custom - Enabled bool
- when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- Trusted
Hosts []string - host/subnets we'll allow traffic to/from
- allowed
Services List<String> - optionally, services we'll allow. enum:
icmp
,ssh
- customs
List<Switch
Switch Mgmt Protect Re Custom> - enabled Boolean
- when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- trusted
Hosts List<String> - host/subnets we'll allow traffic to/from
- allowed
Services string[] - optionally, services we'll allow. enum:
icmp
,ssh
- customs
Switch
Switch Mgmt Protect Re Custom[] - enabled boolean
- when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- trusted
Hosts string[] - host/subnets we'll allow traffic to/from
- allowed_
services Sequence[str] - optionally, services we'll allow. enum:
icmp
,ssh
- customs
Sequence[Switch
Switch Mgmt Protect Re Custom] - enabled bool
- when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- trusted_
hosts Sequence[str] - host/subnets we'll allow traffic to/from
- allowed
Services List<String> - optionally, services we'll allow. enum:
icmp
,ssh
- customs List<Property Map>
- enabled Boolean
- when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- trusted
Hosts List<String> - host/subnets we'll allow traffic to/from
SwitchSwitchMgmtProtectReCustom, SwitchSwitchMgmtProtectReCustomArgs
- subnets Sequence[str]
- port_
range str - matched dst port, "0" means any. Note: For
protocol
==any
andport_range
==any
, configuretrusted_hosts
instead - protocol str
- enum:
any
,icmp
,tcp
,udp
. Note: Forprotocol
==any
andport_range
==any
, configuretrusted_hosts
instead
SwitchSwitchMgmtTacacs, SwitchSwitchMgmtTacacsArgs
- Acct
Servers List<Pulumi.Juniper Mist. Device. Inputs. Switch Switch Mgmt Tacacs Acct Server> - Default
Role string - enum:
admin
,helpdesk
,none
,read
- Enabled bool
- Network string
- which network the TACACS server resides
- Tacplus
Servers List<Pulumi.Juniper Mist. Device. Inputs. Switch Switch Mgmt Tacacs Tacplus Server>
- Acct
Servers []SwitchSwitch Mgmt Tacacs Acct Server - Default
Role string - enum:
admin
,helpdesk
,none
,read
- Enabled bool
- Network string
- which network the TACACS server resides
- Tacplus
Servers []SwitchSwitch Mgmt Tacacs Tacplus Server
- acct
Servers List<SwitchSwitch Mgmt Tacacs Acct Server> - default
Role String - enum:
admin
,helpdesk
,none
,read
- enabled Boolean
- network String
- which network the TACACS server resides
- tacplus
Servers List<SwitchSwitch Mgmt Tacacs Tacplus Server>
- acct
Servers SwitchSwitch Mgmt Tacacs Acct Server[] - default
Role string - enum:
admin
,helpdesk
,none
,read
- enabled boolean
- network string
- which network the TACACS server resides
- tacplus
Servers SwitchSwitch Mgmt Tacacs Tacplus Server[]
- acct_
servers Sequence[SwitchSwitch Mgmt Tacacs Acct Server] - default_
role str - enum:
admin
,helpdesk
,none
,read
- enabled bool
- network str
- which network the TACACS server resides
- tacplus_
servers Sequence[SwitchSwitch Mgmt Tacacs Tacplus Server]
- acct
Servers List<Property Map> - default
Role String - enum:
admin
,helpdesk
,none
,read
- enabled Boolean
- network String
- which network the TACACS server resides
- tacplus
Servers List<Property Map>
SwitchSwitchMgmtTacacsAcctServer, SwitchSwitchMgmtTacacsAcctServerArgs
SwitchSwitchMgmtTacacsTacplusServer, SwitchSwitchMgmtTacacsTacplusServerArgs
SwitchVirtualChassis, SwitchVirtualChassisArgs
- Members
List<Pulumi.
Juniper Mist. Device. Inputs. Switch Virtual Chassis Member> - list of Virtual Chassis members
- Preprovisioned bool
- to configure whether the VC is preprovisioned or nonprovisioned
- Members
[]Switch
Virtual Chassis Member - list of Virtual Chassis members
- Preprovisioned bool
- to configure whether the VC is preprovisioned or nonprovisioned
- members
List<Switch
Virtual Chassis Member> - list of Virtual Chassis members
- preprovisioned Boolean
- to configure whether the VC is preprovisioned or nonprovisioned
- members
Switch
Virtual Chassis Member[] - list of Virtual Chassis members
- preprovisioned boolean
- to configure whether the VC is preprovisioned or nonprovisioned
- members
Sequence[Switch
Virtual Chassis Member] - list of Virtual Chassis members
- preprovisioned bool
- to configure whether the VC is preprovisioned or nonprovisioned
- members List<Property Map>
- list of Virtual Chassis members
- preprovisioned Boolean
- to configure whether the VC is preprovisioned or nonprovisioned
SwitchVirtualChassisMember, SwitchVirtualChassisMemberArgs
SwitchVrfConfig, SwitchVrfConfigArgs
- Enabled bool
- whether to enable VRF (when supported on the device)
- Enabled bool
- whether to enable VRF (when supported on the device)
- enabled Boolean
- whether to enable VRF (when supported on the device)
- enabled boolean
- whether to enable VRF (when supported on the device)
- enabled bool
- whether to enable VRF (when supported on the device)
- enabled Boolean
- whether to enable VRF (when supported on the device)
SwitchVrfInstances, SwitchVrfInstancesArgs
- Networks List<string>
- Vrf
Extra Dictionary<string, Pulumi.Routes Juniper Mist. Device. Inputs. Switch Vrf Instances Vrf Extra Routes> - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- Networks []string
- Vrf
Extra map[string]SwitchRoutes Vrf Instances Vrf Extra Routes - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- networks List<String>
- vrf
Extra Map<String,SwitchRoutes Vrf Instances Vrf Extra Routes> - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- networks string[]
- vrf
Extra {[key: string]: SwitchRoutes Vrf Instances Vrf Extra Routes} - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- networks Sequence[str]
- vrf_
extra_ Mapping[str, Switchroutes Vrf Instances Vrf Extra Routes] - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- networks List<String>
- vrf
Extra Map<Property Map>Routes - Property key is the destination CIDR (e.g. "10.0.0.0/8")
SwitchVrfInstancesVrfExtraRoutes, SwitchVrfInstancesVrfExtraRoutesArgs
- Via string
- Next-hop address
- Via string
- Next-hop address
- via String
- Next-hop address
- via string
- Next-hop address
- via str
- Next-hop address
- via String
- Next-hop address
SwitchVrrpConfig, SwitchVrrpConfigArgs
SwitchVrrpConfigGroups, SwitchVrrpConfigGroupsArgs
- Priority int
- Priority int
- priority Integer
- priority number
- priority int
- priority Number
Import
Using pulumi import
, import mist_device_switch
with:
Switch Configuration can be imported by specifying the site_id and the device_id
$ pulumi import junipermist:device/switch:Switch switch_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- junipermist pulumi/pulumi-junipermist
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
mist
Terraform Provider.