Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Juniper Mist
  3. API Docs
  4. org
  5. Setting
Juniper Mist v0.0.27 published on Friday, Sep 27, 2024 by Pulumi
pulumi/pulumi-junipermist

junipermist.org.Setting

Explore with Pulumi AI

junipermist logo
Juniper Mist v0.0.27 published on Friday, Sep 27, 2024 by Pulumi
pulumi/pulumi-junipermist

    This resource manages the Org Settings. The Org Settings can be used to customize the Org configuration

    Example Usage

    Coming soon!

    Coming soon!

    Coming soon!

    Coming soon!

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.org.Setting;
import com.pulumi.junipermist.org.SettingArgs;
import com.pulumi.junipermist.org.inputs.SettingCradlepointArgs;
import com.pulumi.junipermist.org.inputs.SettingMxedgeMgmtArgs;
import com.pulumi.junipermist.org.inputs.SettingPasswordPolicyArgs;
import com.pulumi.junipermist.org.inputs.SettingSecurityArgs;
import com.pulumi.junipermist.org.inputs.SettingSyntheticTestArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var terraformTest = new Setting("terraformTest", SettingArgs.builder()
            .orgId(terraformTestMistOrg.id())
            .apUpdownThreshold(10)
            .cradlepoint(SettingCradlepointArgs.builder()
                .cp_api_id("cp_api_id_test")
                .cp_api_key("secret")
                .ecm_api_id("ecm_api_id_test")
                .ecm_api_key("secret")
                .build())
            .deviceUpdownThreshold(10)
            .disablePcap(false)
            .disableRemoteShell(true)
            .gatewayUpdownThreshold(10)
            .mxedgeMgmt(SettingMxedgeMgmtArgs.builder()
                .mist_password("mist_secret_passowrd")
                .root_password("root_secret_password")
                .oob_ip_type("dhcp")
                .oob_ip_type6("disabled")
                .build())
            .passwordPolicy(SettingPasswordPolicyArgs.builder()
                .enabled(true)
                .freshness(180)
                .min_length(12)
                .requires_special_char(true)
                .requires_two_factor_auth(false)
                .build())
            .security(SettingSecurityArgs.builder()
                .disable_local_ssh(true)
                .build())
            .switchUpdownThreshold(10)
            .syntheticTest(SettingSyntheticTestArgs.builder()
                .disabled(false)
                .vlans(                
                    SettingSyntheticTestVlanArgs.builder()
                        .vlanIds(                        
                            "10",
                            "30")
                        .customTestUrls(                        
                            "http://www.abc.com/",
                            "https://10.3.5.1:8080/about")
                        .build(),
                    SettingSyntheticTestVlanArgs.builder()
                        .vlanIds("20")
                        .disabled(true)
                        .build())
                .build())
            .uiIdleTimeout(120)
            .build());

    }
}

    resources:
  terraformTest:
    type: junipermist:org:Setting
    name: terraform_test
    properties:
      orgId: ${terraformTestMistOrg.id}
      apUpdownThreshold: 10
      cradlepoint:
        cp_api_id: cp_api_id_test
        cp_api_key: secret
        ecm_api_id: ecm_api_id_test
        ecm_api_key: secret
      deviceUpdownThreshold: 10
      disablePcap: false
      disableRemoteShell: true
      gatewayUpdownThreshold: 10
      mxedgeMgmt:
        mist_password: mist_secret_passowrd
        root_password: root_secret_password
        oob_ip_type: dhcp
        oob_ip_type6: disabled
      passwordPolicy:
        enabled: true
        freshness: 180
        min_length: 12
        requires_special_char: true
        requires_two_factor_auth: false
      security:
        disable_local_ssh: true
      switchUpdownThreshold: 10
      syntheticTest:
        disabled: false
        vlans:
          - vlanIds:
              - '10'
              - '30'
            customTestUrls:
              - http://www.abc.com/
              - https://10.3.5.1:8080/about
          - vlanIds:
              - '20'
            disabled: true
      uiIdleTimeout: 120

    Create Setting Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Setting(name: string, args: SettingArgs, opts?: CustomResourceOptions);
    @overload
def Setting(resource_name: str,
            args: SettingArgs,
            opts: Optional[ResourceOptions] = None)

@overload
def Setting(resource_name: str,
            opts: Optional[ResourceOptions] = None,
            org_id: Optional[str] = None,
            mist_nac: Optional[SettingMistNacArgs] = None,
            cradlepoint: Optional[SettingCradlepointArgs] = None,
            mxedge_fips_enabled: Optional[bool] = None,
            cloudshark: Optional[SettingCloudsharkArgs] = None,
            mxedge_mgmt: Optional[SettingMxedgeMgmtArgs] = None,
            device_cert: Optional[SettingDeviceCertArgs] = None,
            device_updown_threshold: Optional[int] = None,
            disable_pcap: Optional[bool] = None,
            disable_remote_shell: Optional[bool] = None,
            gateway_updown_threshold: Optional[int] = None,
            installer: Optional[SettingInstallerArgs] = None,
            api_policy: Optional[SettingApiPolicyArgs] = None,
            mgmt: Optional[SettingMgmtArgs] = None,
            ap_updown_threshold: Optional[int] = None,
            celona: Optional[SettingCelonaArgs] = None,
            cacerts: Optional[Sequence[str]] = None,
            jcloud: Optional[SettingJcloudArgs] = None,
            password_policy: Optional[SettingPasswordPolicyArgs] = None,
            pcap: Optional[SettingPcapArgs] = None,
            port_channelization: Optional[SettingPortChannelizationArgs] = None,
            security: Optional[SettingSecurityArgs] = None,
            switch_mgmt: Optional[SettingSwitchMgmtArgs] = None,
            switch_updown_threshold: Optional[int] = None,
            synthetic_test: Optional[SettingSyntheticTestArgs] = None,
            ui_idle_timeout: Optional[int] = None,
            vpn_options: Optional[SettingVpnOptionsArgs] = None,
            wan_pma: Optional[SettingWanPmaArgs] = None,
            wired_pma: Optional[SettingWiredPmaArgs] = None,
            wireless_pma: Optional[SettingWirelessPmaArgs] = None)
    func NewSetting(ctx *Context, name string, args SettingArgs, opts ...ResourceOption) (*Setting, error)
    public Setting(string name, SettingArgs args, CustomResourceOptions? opts = null)
    public Setting(String name, SettingArgs args)
public Setting(String name, SettingArgs args, CustomResourceOptions options)

    type: junipermist:org:Setting
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args SettingArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args SettingArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args SettingArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args SettingArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args SettingArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var settingResource = new JuniperMist.Org.Setting("settingResource", new()
{
    OrgId = "string",
    MistNac = new JuniperMist.Org.Inputs.SettingMistNacArgs
    {
        Cacerts = new[]
        {
            "string",
        },
        DefaultIdpId = "string",
        DisableRsaeAlgorithms = false,
        EapSslSecurityLevel = 0,
        EuOnly = false,
        IdpMachineCertLookupField = "string",
        IdpUserCertLookupField = "string",
        Idps = new[]
        {
            new JuniperMist.Org.Inputs.SettingMistNacIdpArgs
            {
                Id = "string",
                UserRealms = new[]
                {
                    "string",
                },
                ExcludeRealms = new[]
                {
                    "string",
                },
            },
        },
        ServerCert = new JuniperMist.Org.Inputs.SettingMistNacServerCertArgs
        {
            Cert = "string",
            Key = "string",
            Password = "string",
        },
        UseIpVersion = "string",
        UseSslPort = false,
    },
    Cradlepoint = new JuniperMist.Org.Inputs.SettingCradlepointArgs
    {
        CpApiId = "string",
        CpApiKey = "string",
        EcmApiId = "string",
        EcmApiKey = "string",
    },
    MxedgeFipsEnabled = false,
    Cloudshark = new JuniperMist.Org.Inputs.SettingCloudsharkArgs
    {
        Apitoken = "string",
        Url = "string",
    },
    MxedgeMgmt = new JuniperMist.Org.Inputs.SettingMxedgeMgmtArgs
    {
        FipsEnabled = false,
        MistPassword = "string",
        OobIpType = "string",
        OobIpType6 = "string",
        RootPassword = "string",
    },
    DeviceCert = new JuniperMist.Org.Inputs.SettingDeviceCertArgs
    {
        Cert = "string",
        Key = "string",
    },
    DeviceUpdownThreshold = 0,
    DisablePcap = false,
    DisableRemoteShell = false,
    GatewayUpdownThreshold = 0,
    Installer = new JuniperMist.Org.Inputs.SettingInstallerArgs
    {
        AllowAllDevices = false,
        AllowAllSites = false,
        ExtraSiteIds = new[]
        {
            "string",
        },
        GracePeriod = 0,
    },
    ApiPolicy = new JuniperMist.Org.Inputs.SettingApiPolicyArgs
    {
        NoReveal = false,
    },
    Mgmt = new JuniperMist.Org.Inputs.SettingMgmtArgs
    {
        MxtunnelIds = new[]
        {
            "string",
        },
        UseMxtunnel = false,
        UseWxtunnel = false,
    },
    ApUpdownThreshold = 0,
    Celona = new JuniperMist.Org.Inputs.SettingCelonaArgs
    {
        ApiKey = "string",
        ApiPrefix = "string",
    },
    Cacerts = new[]
    {
        "string",
    },
    Jcloud = new JuniperMist.Org.Inputs.SettingJcloudArgs
    {
        OrgApitoken = "string",
        OrgApitokenName = "string",
        OrgId = "string",
    },
    PasswordPolicy = new JuniperMist.Org.Inputs.SettingPasswordPolicyArgs
    {
        Enabled = false,
        ExpiryInDays = 0,
        MinLength = 0,
        RequiresSpecialChar = false,
        RequiresTwoFactorAuth = false,
    },
    Pcap = new JuniperMist.Org.Inputs.SettingPcapArgs
    {
        Bucket = "string",
        MaxPktLen = 0,
    },
    PortChannelization = new JuniperMist.Org.Inputs.SettingPortChannelizationArgs
    {
        Config = 
        {
            { "string", "string" },
        },
        Enabled = false,
    },
    Security = new JuniperMist.Org.Inputs.SettingSecurityArgs
    {
        DisableLocalSsh = false,
        FipsZeroizePassword = "string",
        LimitSshAccess = false,
    },
    SwitchMgmt = new JuniperMist.Org.Inputs.SettingSwitchMgmtArgs
    {
        ApAffinityThreshold = 0,
    },
    SwitchUpdownThreshold = 0,
    SyntheticTest = new JuniperMist.Org.Inputs.SettingSyntheticTestArgs
    {
        Disabled = false,
        Vlans = new[]
        {
            new JuniperMist.Org.Inputs.SettingSyntheticTestVlanArgs
            {
                CustomTestUrls = new[]
                {
                    "string",
                },
                Disabled = false,
                VlanIds = new[]
                {
                    "string",
                },
            },
        },
        WanSpeedtest = new JuniperMist.Org.Inputs.SettingSyntheticTestWanSpeedtestArgs
        {
            Enabled = false,
            TimeOfDay = "string",
        },
    },
    UiIdleTimeout = 0,
    VpnOptions = new JuniperMist.Org.Inputs.SettingVpnOptionsArgs
    {
        AsBase = 0,
        StSubnet = "string",
    },
    WanPma = new JuniperMist.Org.Inputs.SettingWanPmaArgs
    {
        Enabled = false,
    },
    WiredPma = new JuniperMist.Org.Inputs.SettingWiredPmaArgs
    {
        Enabled = false,
    },
    WirelessPma = new JuniperMist.Org.Inputs.SettingWirelessPmaArgs
    {
        Enabled = false,
    },
});

    example, err := org.NewSetting(ctx, "settingResource", &org.SettingArgs{
	OrgId: pulumi.String("string"),
	MistNac: &org.SettingMistNacArgs{
		Cacerts: pulumi.StringArray{
			pulumi.String("string"),
		},
		DefaultIdpId:              pulumi.String("string"),
		DisableRsaeAlgorithms:     pulumi.Bool(false),
		EapSslSecurityLevel:       pulumi.Int(0),
		EuOnly:                    pulumi.Bool(false),
		IdpMachineCertLookupField: pulumi.String("string"),
		IdpUserCertLookupField:    pulumi.String("string"),
		Idps: org.SettingMistNacIdpArray{
			&org.SettingMistNacIdpArgs{
				Id: pulumi.String("string"),
				UserRealms: pulumi.StringArray{
					pulumi.String("string"),
				},
				ExcludeRealms: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
		ServerCert: &org.SettingMistNacServerCertArgs{
			Cert:     pulumi.String("string"),
			Key:      pulumi.String("string"),
			Password: pulumi.String("string"),
		},
		UseIpVersion: pulumi.String("string"),
		UseSslPort:   pulumi.Bool(false),
	},
	Cradlepoint: &org.SettingCradlepointArgs{
		CpApiId:   pulumi.String("string"),
		CpApiKey:  pulumi.String("string"),
		EcmApiId:  pulumi.String("string"),
		EcmApiKey: pulumi.String("string"),
	},
	MxedgeFipsEnabled: pulumi.Bool(false),
	Cloudshark: &org.SettingCloudsharkArgs{
		Apitoken: pulumi.String("string"),
		Url:      pulumi.String("string"),
	},
	MxedgeMgmt: &org.SettingMxedgeMgmtArgs{
		FipsEnabled:  pulumi.Bool(false),
		MistPassword: pulumi.String("string"),
		OobIpType:    pulumi.String("string"),
		OobIpType6:   pulumi.String("string"),
		RootPassword: pulumi.String("string"),
	},
	DeviceCert: &org.SettingDeviceCertArgs{
		Cert: pulumi.String("string"),
		Key:  pulumi.String("string"),
	},
	DeviceUpdownThreshold:  pulumi.Int(0),
	DisablePcap:            pulumi.Bool(false),
	DisableRemoteShell:     pulumi.Bool(false),
	GatewayUpdownThreshold: pulumi.Int(0),
	Installer: &org.SettingInstallerArgs{
		AllowAllDevices: pulumi.Bool(false),
		AllowAllSites:   pulumi.Bool(false),
		ExtraSiteIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		GracePeriod: pulumi.Int(0),
	},
	ApiPolicy: &org.SettingApiPolicyArgs{
		NoReveal: pulumi.Bool(false),
	},
	Mgmt: &org.SettingMgmtArgs{
		MxtunnelIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		UseMxtunnel: pulumi.Bool(false),
		UseWxtunnel: pulumi.Bool(false),
	},
	ApUpdownThreshold: pulumi.Int(0),
	Celona: &org.SettingCelonaArgs{
		ApiKey:    pulumi.String("string"),
		ApiPrefix: pulumi.String("string"),
	},
	Cacerts: pulumi.StringArray{
		pulumi.String("string"),
	},
	Jcloud: &org.SettingJcloudArgs{
		OrgApitoken:     pulumi.String("string"),
		OrgApitokenName: pulumi.String("string"),
		OrgId:           pulumi.String("string"),
	},
	PasswordPolicy: &org.SettingPasswordPolicyArgs{
		Enabled:               pulumi.Bool(false),
		ExpiryInDays:          pulumi.Int(0),
		MinLength:             pulumi.Int(0),
		RequiresSpecialChar:   pulumi.Bool(false),
		RequiresTwoFactorAuth: pulumi.Bool(false),
	},
	Pcap: &org.SettingPcapArgs{
		Bucket:    pulumi.String("string"),
		MaxPktLen: pulumi.Int(0),
	},
	PortChannelization: &org.SettingPortChannelizationArgs{
		Config: pulumi.StringMap{
			"string": pulumi.String("string"),
		},
		Enabled: pulumi.Bool(false),
	},
	Security: &org.SettingSecurityArgs{
		DisableLocalSsh:     pulumi.Bool(false),
		FipsZeroizePassword: pulumi.String("string"),
		LimitSshAccess:      pulumi.Bool(false),
	},
	SwitchMgmt: &org.SettingSwitchMgmtArgs{
		ApAffinityThreshold: pulumi.Int(0),
	},
	SwitchUpdownThreshold: pulumi.Int(0),
	SyntheticTest: &org.SettingSyntheticTestArgs{
		Disabled: pulumi.Bool(false),
		Vlans: org.SettingSyntheticTestVlanArray{
			&org.SettingSyntheticTestVlanArgs{
				CustomTestUrls: pulumi.StringArray{
					pulumi.String("string"),
				},
				Disabled: pulumi.Bool(false),
				VlanIds: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
		WanSpeedtest: &org.SettingSyntheticTestWanSpeedtestArgs{
			Enabled:   pulumi.Bool(false),
			TimeOfDay: pulumi.String("string"),
		},
	},
	UiIdleTimeout: pulumi.Int(0),
	VpnOptions: &org.SettingVpnOptionsArgs{
		AsBase:   pulumi.Int(0),
		StSubnet: pulumi.String("string"),
	},
	WanPma: &org.SettingWanPmaArgs{
		Enabled: pulumi.Bool(false),
	},
	WiredPma: &org.SettingWiredPmaArgs{
		Enabled: pulumi.Bool(false),
	},
	WirelessPma: &org.SettingWirelessPmaArgs{
		Enabled: pulumi.Bool(false),
	},
})

    var settingResource = new Setting("settingResource", SettingArgs.builder()
    .orgId("string")
    .mistNac(SettingMistNacArgs.builder()
        .cacerts("string")
        .defaultIdpId("string")
        .disableRsaeAlgorithms(false)
        .eapSslSecurityLevel(0)
        .euOnly(false)
        .idpMachineCertLookupField("string")
        .idpUserCertLookupField("string")
        .idps(SettingMistNacIdpArgs.builder()
            .id("string")
            .userRealms("string")
            .excludeRealms("string")
            .build())
        .serverCert(SettingMistNacServerCertArgs.builder()
            .cert("string")
            .key("string")
            .password("string")
            .build())
        .useIpVersion("string")
        .useSslPort(false)
        .build())
    .cradlepoint(SettingCradlepointArgs.builder()
        .cpApiId("string")
        .cpApiKey("string")
        .ecmApiId("string")
        .ecmApiKey("string")
        .build())
    .mxedgeFipsEnabled(false)
    .cloudshark(SettingCloudsharkArgs.builder()
        .apitoken("string")
        .url("string")
        .build())
    .mxedgeMgmt(SettingMxedgeMgmtArgs.builder()
        .fipsEnabled(false)
        .mistPassword("string")
        .oobIpType("string")
        .oobIpType6("string")
        .rootPassword("string")
        .build())
    .deviceCert(SettingDeviceCertArgs.builder()
        .cert("string")
        .key("string")
        .build())
    .deviceUpdownThreshold(0)
    .disablePcap(false)
    .disableRemoteShell(false)
    .gatewayUpdownThreshold(0)
    .installer(SettingInstallerArgs.builder()
        .allowAllDevices(false)
        .allowAllSites(false)
        .extraSiteIds("string")
        .gracePeriod(0)
        .build())
    .apiPolicy(SettingApiPolicyArgs.builder()
        .noReveal(false)
        .build())
    .mgmt(SettingMgmtArgs.builder()
        .mxtunnelIds("string")
        .useMxtunnel(false)
        .useWxtunnel(false)
        .build())
    .apUpdownThreshold(0)
    .celona(SettingCelonaArgs.builder()
        .apiKey("string")
        .apiPrefix("string")
        .build())
    .cacerts("string")
    .jcloud(SettingJcloudArgs.builder()
        .orgApitoken("string")
        .orgApitokenName("string")
        .orgId("string")
        .build())
    .passwordPolicy(SettingPasswordPolicyArgs.builder()
        .enabled(false)
        .expiryInDays(0)
        .minLength(0)
        .requiresSpecialChar(false)
        .requiresTwoFactorAuth(false)
        .build())
    .pcap(SettingPcapArgs.builder()
        .bucket("string")
        .maxPktLen(0)
        .build())
    .portChannelization(SettingPortChannelizationArgs.builder()
        .config(Map.of("string", "string"))
        .enabled(false)
        .build())
    .security(SettingSecurityArgs.builder()
        .disableLocalSsh(false)
        .fipsZeroizePassword("string")
        .limitSshAccess(false)
        .build())
    .switchMgmt(SettingSwitchMgmtArgs.builder()
        .apAffinityThreshold(0)
        .build())
    .switchUpdownThreshold(0)
    .syntheticTest(SettingSyntheticTestArgs.builder()
        .disabled(false)
        .vlans(SettingSyntheticTestVlanArgs.builder()
            .customTestUrls("string")
            .disabled(false)
            .vlanIds("string")
            .build())
        .wanSpeedtest(SettingSyntheticTestWanSpeedtestArgs.builder()
            .enabled(false)
            .timeOfDay("string")
            .build())
        .build())
    .uiIdleTimeout(0)
    .vpnOptions(SettingVpnOptionsArgs.builder()
        .asBase(0)
        .stSubnet("string")
        .build())
    .wanPma(SettingWanPmaArgs.builder()
        .enabled(false)
        .build())
    .wiredPma(SettingWiredPmaArgs.builder()
        .enabled(false)
        .build())
    .wirelessPma(SettingWirelessPmaArgs.builder()
        .enabled(false)
        .build())
    .build());

    setting_resource = junipermist.org.Setting("settingResource",
    org_id="string",
    mist_nac=junipermist.org.SettingMistNacArgs(
        cacerts=["string"],
        default_idp_id="string",
        disable_rsae_algorithms=False,
        eap_ssl_security_level=0,
        eu_only=False,
        idp_machine_cert_lookup_field="string",
        idp_user_cert_lookup_field="string",
        idps=[junipermist.org.SettingMistNacIdpArgs(
            id="string",
            user_realms=["string"],
            exclude_realms=["string"],
        )],
        server_cert=junipermist.org.SettingMistNacServerCertArgs(
            cert="string",
            key="string",
            password="string",
        ),
        use_ip_version="string",
        use_ssl_port=False,
    ),
    cradlepoint=junipermist.org.SettingCradlepointArgs(
        cp_api_id="string",
        cp_api_key="string",
        ecm_api_id="string",
        ecm_api_key="string",
    ),
    mxedge_fips_enabled=False,
    cloudshark=junipermist.org.SettingCloudsharkArgs(
        apitoken="string",
        url="string",
    ),
    mxedge_mgmt=junipermist.org.SettingMxedgeMgmtArgs(
        fips_enabled=False,
        mist_password="string",
        oob_ip_type="string",
        oob_ip_type6="string",
        root_password="string",
    ),
    device_cert=junipermist.org.SettingDeviceCertArgs(
        cert="string",
        key="string",
    ),
    device_updown_threshold=0,
    disable_pcap=False,
    disable_remote_shell=False,
    gateway_updown_threshold=0,
    installer=junipermist.org.SettingInstallerArgs(
        allow_all_devices=False,
        allow_all_sites=False,
        extra_site_ids=["string"],
        grace_period=0,
    ),
    api_policy=junipermist.org.SettingApiPolicyArgs(
        no_reveal=False,
    ),
    mgmt=junipermist.org.SettingMgmtArgs(
        mxtunnel_ids=["string"],
        use_mxtunnel=False,
        use_wxtunnel=False,
    ),
    ap_updown_threshold=0,
    celona=junipermist.org.SettingCelonaArgs(
        api_key="string",
        api_prefix="string",
    ),
    cacerts=["string"],
    jcloud=junipermist.org.SettingJcloudArgs(
        org_apitoken="string",
        org_apitoken_name="string",
        org_id="string",
    ),
    password_policy=junipermist.org.SettingPasswordPolicyArgs(
        enabled=False,
        expiry_in_days=0,
        min_length=0,
        requires_special_char=False,
        requires_two_factor_auth=False,
    ),
    pcap=junipermist.org.SettingPcapArgs(
        bucket="string",
        max_pkt_len=0,
    ),
    port_channelization=junipermist.org.SettingPortChannelizationArgs(
        config={
            "string": "string",
        },
        enabled=False,
    ),
    security=junipermist.org.SettingSecurityArgs(
        disable_local_ssh=False,
        fips_zeroize_password="string",
        limit_ssh_access=False,
    ),
    switch_mgmt=junipermist.org.SettingSwitchMgmtArgs(
        ap_affinity_threshold=0,
    ),
    switch_updown_threshold=0,
    synthetic_test=junipermist.org.SettingSyntheticTestArgs(
        disabled=False,
        vlans=[junipermist.org.SettingSyntheticTestVlanArgs(
            custom_test_urls=["string"],
            disabled=False,
            vlan_ids=["string"],
        )],
        wan_speedtest=junipermist.org.SettingSyntheticTestWanSpeedtestArgs(
            enabled=False,
            time_of_day="string",
        ),
    ),
    ui_idle_timeout=0,
    vpn_options=junipermist.org.SettingVpnOptionsArgs(
        as_base=0,
        st_subnet="string",
    ),
    wan_pma=junipermist.org.SettingWanPmaArgs(
        enabled=False,
    ),
    wired_pma=junipermist.org.SettingWiredPmaArgs(
        enabled=False,
    ),
    wireless_pma=junipermist.org.SettingWirelessPmaArgs(
        enabled=False,
    ))

    const settingResource = new junipermist.org.Setting("settingResource", {
    orgId: "string",
    mistNac: {
        cacerts: ["string"],
        defaultIdpId: "string",
        disableRsaeAlgorithms: false,
        eapSslSecurityLevel: 0,
        euOnly: false,
        idpMachineCertLookupField: "string",
        idpUserCertLookupField: "string",
        idps: [{
            id: "string",
            userRealms: ["string"],
            excludeRealms: ["string"],
        }],
        serverCert: {
            cert: "string",
            key: "string",
            password: "string",
        },
        useIpVersion: "string",
        useSslPort: false,
    },
    cradlepoint: {
        cpApiId: "string",
        cpApiKey: "string",
        ecmApiId: "string",
        ecmApiKey: "string",
    },
    mxedgeFipsEnabled: false,
    cloudshark: {
        apitoken: "string",
        url: "string",
    },
    mxedgeMgmt: {
        fipsEnabled: false,
        mistPassword: "string",
        oobIpType: "string",
        oobIpType6: "string",
        rootPassword: "string",
    },
    deviceCert: {
        cert: "string",
        key: "string",
    },
    deviceUpdownThreshold: 0,
    disablePcap: false,
    disableRemoteShell: false,
    gatewayUpdownThreshold: 0,
    installer: {
        allowAllDevices: false,
        allowAllSites: false,
        extraSiteIds: ["string"],
        gracePeriod: 0,
    },
    apiPolicy: {
        noReveal: false,
    },
    mgmt: {
        mxtunnelIds: ["string"],
        useMxtunnel: false,
        useWxtunnel: false,
    },
    apUpdownThreshold: 0,
    celona: {
        apiKey: "string",
        apiPrefix: "string",
    },
    cacerts: ["string"],
    jcloud: {
        orgApitoken: "string",
        orgApitokenName: "string",
        orgId: "string",
    },
    passwordPolicy: {
        enabled: false,
        expiryInDays: 0,
        minLength: 0,
        requiresSpecialChar: false,
        requiresTwoFactorAuth: false,
    },
    pcap: {
        bucket: "string",
        maxPktLen: 0,
    },
    portChannelization: {
        config: {
            string: "string",
        },
        enabled: false,
    },
    security: {
        disableLocalSsh: false,
        fipsZeroizePassword: "string",
        limitSshAccess: false,
    },
    switchMgmt: {
        apAffinityThreshold: 0,
    },
    switchUpdownThreshold: 0,
    syntheticTest: {
        disabled: false,
        vlans: [{
            customTestUrls: ["string"],
            disabled: false,
            vlanIds: ["string"],
        }],
        wanSpeedtest: {
            enabled: false,
            timeOfDay: "string",
        },
    },
    uiIdleTimeout: 0,
    vpnOptions: {
        asBase: 0,
        stSubnet: "string",
    },
    wanPma: {
        enabled: false,
    },
    wiredPma: {
        enabled: false,
    },
    wirelessPma: {
        enabled: false,
    },
});

    type: junipermist:org:Setting
properties:
    apUpdownThreshold: 0
    apiPolicy:
        noReveal: false
    cacerts:
        - string
    celona:
        apiKey: string
        apiPrefix: string
    cloudshark:
        apitoken: string
        url: string
    cradlepoint:
        cpApiId: string
        cpApiKey: string
        ecmApiId: string
        ecmApiKey: string
    deviceCert:
        cert: string
        key: string
    deviceUpdownThreshold: 0
    disablePcap: false
    disableRemoteShell: false
    gatewayUpdownThreshold: 0
    installer:
        allowAllDevices: false
        allowAllSites: false
        extraSiteIds:
            - string
        gracePeriod: 0
    jcloud:
        orgApitoken: string
        orgApitokenName: string
        orgId: string
    mgmt:
        mxtunnelIds:
            - string
        useMxtunnel: false
        useWxtunnel: false
    mistNac:
        cacerts:
            - string
        defaultIdpId: string
        disableRsaeAlgorithms: false
        eapSslSecurityLevel: 0
        euOnly: false
        idpMachineCertLookupField: string
        idpUserCertLookupField: string
        idps:
            - excludeRealms:
                - string
              id: string
              userRealms:
                - string
        serverCert:
            cert: string
            key: string
            password: string
        useIpVersion: string
        useSslPort: false
    mxedgeFipsEnabled: false
    mxedgeMgmt:
        fipsEnabled: false
        mistPassword: string
        oobIpType: string
        oobIpType6: string
        rootPassword: string
    orgId: string
    passwordPolicy:
        enabled: false
        expiryInDays: 0
        minLength: 0
        requiresSpecialChar: false
        requiresTwoFactorAuth: false
    pcap:
        bucket: string
        maxPktLen: 0
    portChannelization:
        config:
            string: string
        enabled: false
    security:
        disableLocalSsh: false
        fipsZeroizePassword: string
        limitSshAccess: false
    switchMgmt:
        apAffinityThreshold: 0
    switchUpdownThreshold: 0
    syntheticTest:
        disabled: false
        vlans:
            - customTestUrls:
                - string
              disabled: false
              vlanIds:
                - string
        wanSpeedtest:
            enabled: false
            timeOfDay: string
    uiIdleTimeout: 0
    vpnOptions:
        asBase: 0
        stSubnet: string
    wanPma:
        enabled: false
    wiredPma:
        enabled: false
    wirelessPma:
        enabled: false

    Setting Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The Setting resource accepts the following input properties:

    OrgId string
    ApUpdownThreshold int
    enable threshold-based device down delivery for AP devices only. When configured it takes effect for AP devices and device_updown_threshold is ignored.
    ApiPolicy Pulumi.JuniperMist.Org.Inputs.SettingApiPolicy
    Cacerts List<string>
    list of PEM-encoded ca certs
    Celona Pulumi.JuniperMist.Org.Inputs.SettingCelona
    Cloudshark Pulumi.JuniperMist.Org.Inputs.SettingCloudshark
    Cradlepoint Pulumi.JuniperMist.Org.Inputs.SettingCradlepoint
    DeviceCert Pulumi.JuniperMist.Org.Inputs.SettingDeviceCert
    common device cert, optional
    DeviceUpdownThreshold int
    enable threshold-based device down delivery via * device-updowns webhooks topic, * Mist Alert Framework; e.g. send AP/SW/GW down event only if AP/SW/GW Up is not seen within the threshold in minutes; 0 - 240, default is 0 (trigger immediate)
    DisablePcap bool
    whether to disallow Mist to analyze pcap files (this is required for marvis pcap)
    DisableRemoteShell bool
    whether to disable remote shell access for an entire org
    GatewayUpdownThreshold int
    enable threshold-based device down delivery for Gateway devices only. When configured it takes effect for GW devices and device_updown_threshold is ignored.
    Installer Pulumi.JuniperMist.Org.Inputs.SettingInstaller
    Jcloud Pulumi.JuniperMist.Org.Inputs.SettingJcloud
    Mgmt Pulumi.JuniperMist.Org.Inputs.SettingMgmt
    management-related properties
    MistNac Pulumi.JuniperMist.Org.Inputs.SettingMistNac
    MxedgeFipsEnabled bool
    MxedgeMgmt Pulumi.JuniperMist.Org.Inputs.SettingMxedgeMgmt
    PasswordPolicy Pulumi.JuniperMist.Org.Inputs.SettingPasswordPolicy
    password policy
    Pcap Pulumi.JuniperMist.Org.Inputs.SettingPcap
    PortChannelization Pulumi.JuniperMist.Org.Inputs.SettingPortChannelization
    Security Pulumi.JuniperMist.Org.Inputs.SettingSecurity
    SwitchMgmt Pulumi.JuniperMist.Org.Inputs.SettingSwitchMgmt
    SwitchUpdownThreshold int
    enable threshold-based device down delivery for Switch devices only. When configured it takes effect for SW devices and device_updown_threshold is ignored.
    SyntheticTest Pulumi.JuniperMist.Org.Inputs.SettingSyntheticTest
    UiIdleTimeout int
    automatically logout the user when UI session is inactive. 0 means disabled
    VpnOptions Pulumi.JuniperMist.Org.Inputs.SettingVpnOptions
    WanPma Pulumi.JuniperMist.Org.Inputs.SettingWanPma
    WiredPma Pulumi.JuniperMist.Org.Inputs.SettingWiredPma
    WirelessPma Pulumi.JuniperMist.Org.Inputs.SettingWirelessPma
    OrgId string
    ApUpdownThreshold int
    enable threshold-based device down delivery for AP devices only. When configured it takes effect for AP devices and device_updown_threshold is ignored.
    ApiPolicy SettingApiPolicyArgs
    Cacerts []string
    list of PEM-encoded ca certs
    Celona SettingCelonaArgs
    Cloudshark SettingCloudsharkArgs
    Cradlepoint SettingCradlepointArgs
    DeviceCert SettingDeviceCertArgs
    common device cert, optional
    DeviceUpdownThreshold int
    enable threshold-based device down delivery via * device-updowns webhooks topic, * Mist Alert Framework; e.g. send AP/SW/GW down event only if AP/SW/GW Up is not seen within the threshold in minutes; 0 - 240, default is 0 (trigger immediate)
    DisablePcap bool
    whether to disallow Mist to analyze pcap files (this is required for marvis pcap)
    DisableRemoteShell bool
    whether to disable remote shell access for an entire org
    GatewayUpdownThreshold int
    enable threshold-based device down delivery for Gateway devices only. When configured it takes effect for GW devices and device_updown_threshold is ignored.
    Installer SettingInstallerArgs
    Jcloud SettingJcloudArgs
    Mgmt SettingMgmtArgs
    management-related properties
    MistNac SettingMistNacArgs
    MxedgeFipsEnabled bool
    MxedgeMgmt SettingMxedgeMgmtArgs
    PasswordPolicy SettingPasswordPolicyArgs
    password policy
    Pcap SettingPcapArgs
    PortChannelization SettingPortChannelizationArgs
    Security SettingSecurityArgs
    SwitchMgmt SettingSwitchMgmtArgs
    SwitchUpdownThreshold int
    enable threshold-based device down delivery for Switch devices only. When configured it takes effect for SW devices and device_updown_threshold is ignored.
    SyntheticTest SettingSyntheticTestArgs
    UiIdleTimeout int
    automatically logout the user when UI session is inactive. 0 means disabled
    VpnOptions SettingVpnOptionsArgs
    WanPma SettingWanPmaArgs
    WiredPma SettingWiredPmaArgs
    WirelessPma SettingWirelessPmaArgs
    orgId String
    apUpdownThreshold Integer
    enable threshold-based device down delivery for AP devices only. When configured it takes effect for AP devices and device_updown_threshold is ignored.
    apiPolicy SettingApiPolicy
    cacerts List<String>
    list of PEM-encoded ca certs
    celona SettingCelona
    cloudshark SettingCloudshark
    cradlepoint SettingCradlepoint
    deviceCert SettingDeviceCert
    common device cert, optional
    deviceUpdownThreshold Integer
    enable threshold-based device down delivery via * device-updowns webhooks topic, * Mist Alert Framework; e.g. send AP/SW/GW down event only if AP/SW/GW Up is not seen within the threshold in minutes; 0 - 240, default is 0 (trigger immediate)
    disablePcap Boolean
    whether to disallow Mist to analyze pcap files (this is required for marvis pcap)
    disableRemoteShell Boolean
    whether to disable remote shell access for an entire org
    gatewayUpdownThreshold Integer
    enable threshold-based device down delivery for Gateway devices only. When configured it takes effect for GW devices and device_updown_threshold is ignored.
    installer SettingInstaller
    jcloud SettingJcloud
    mgmt SettingMgmt
    management-related properties
    mistNac SettingMistNac
    mxedgeFipsEnabled Boolean
    mxedgeMgmt SettingMxedgeMgmt
    passwordPolicy SettingPasswordPolicy
    password policy
    pcap SettingPcap
    portChannelization SettingPortChannelization
    security SettingSecurity
    switchMgmt SettingSwitchMgmt
    switchUpdownThreshold Integer
    enable threshold-based device down delivery for Switch devices only. When configured it takes effect for SW devices and device_updown_threshold is ignored.
    syntheticTest SettingSyntheticTest
    uiIdleTimeout Integer
    automatically logout the user when UI session is inactive. 0 means disabled
    vpnOptions SettingVpnOptions
    wanPma SettingWanPma
    wiredPma SettingWiredPma
    wirelessPma SettingWirelessPma
    orgId string
    apUpdownThreshold number
    enable threshold-based device down delivery for AP devices only. When configured it takes effect for AP devices and device_updown_threshold is ignored.
    apiPolicy SettingApiPolicy
    cacerts string[]
    list of PEM-encoded ca certs
    celona SettingCelona
    cloudshark SettingCloudshark
    cradlepoint SettingCradlepoint
    deviceCert SettingDeviceCert
    common device cert, optional
    deviceUpdownThreshold number
    enable threshold-based device down delivery via * device-updowns webhooks topic, * Mist Alert Framework; e.g. send AP/SW/GW down event only if AP/SW/GW Up is not seen within the threshold in minutes; 0 - 240, default is 0 (trigger immediate)
    disablePcap boolean
    whether to disallow Mist to analyze pcap files (this is required for marvis pcap)
    disableRemoteShell boolean
    whether to disable remote shell access for an entire org
    gatewayUpdownThreshold number
    enable threshold-based device down delivery for Gateway devices only. When configured it takes effect for GW devices and device_updown_threshold is ignored.
    installer SettingInstaller
    jcloud SettingJcloud
    mgmt SettingMgmt
    management-related properties
    mistNac SettingMistNac
    mxedgeFipsEnabled boolean
    mxedgeMgmt SettingMxedgeMgmt
    passwordPolicy SettingPasswordPolicy
    password policy
    pcap SettingPcap
    portChannelization SettingPortChannelization
    security SettingSecurity
    switchMgmt SettingSwitchMgmt
    switchUpdownThreshold number
    enable threshold-based device down delivery for Switch devices only. When configured it takes effect for SW devices and device_updown_threshold is ignored.
    syntheticTest SettingSyntheticTest
    uiIdleTimeout number
    automatically logout the user when UI session is inactive. 0 means disabled
    vpnOptions SettingVpnOptions
    wanPma SettingWanPma
    wiredPma SettingWiredPma
    wirelessPma SettingWirelessPma
    org_id str
    ap_updown_threshold int
    enable threshold-based device down delivery for AP devices only. When configured it takes effect for AP devices and device_updown_threshold is ignored.
    api_policy SettingApiPolicyArgs
    cacerts Sequence[str]
    list of PEM-encoded ca certs
    celona SettingCelonaArgs
    cloudshark SettingCloudsharkArgs
    cradlepoint SettingCradlepointArgs
    device_cert SettingDeviceCertArgs
    common device cert, optional
    device_updown_threshold int
    enable threshold-based device down delivery via * device-updowns webhooks topic, * Mist Alert Framework; e.g. send AP/SW/GW down event only if AP/SW/GW Up is not seen within the threshold in minutes; 0 - 240, default is 0 (trigger immediate)
    disable_pcap bool
    whether to disallow Mist to analyze pcap files (this is required for marvis pcap)
    disable_remote_shell bool
    whether to disable remote shell access for an entire org
    gateway_updown_threshold int
    enable threshold-based device down delivery for Gateway devices only. When configured it takes effect for GW devices and device_updown_threshold is ignored.
    installer SettingInstallerArgs
    jcloud SettingJcloudArgs
    mgmt SettingMgmtArgs
    management-related properties
    mist_nac SettingMistNacArgs
    mxedge_fips_enabled bool
    mxedge_mgmt SettingMxedgeMgmtArgs
    password_policy SettingPasswordPolicyArgs
    password policy
    pcap SettingPcapArgs
    port_channelization SettingPortChannelizationArgs
    security SettingSecurityArgs
    switch_mgmt SettingSwitchMgmtArgs
    switch_updown_threshold int
    enable threshold-based device down delivery for Switch devices only. When configured it takes effect for SW devices and device_updown_threshold is ignored.
    synthetic_test SettingSyntheticTestArgs
    ui_idle_timeout int
    automatically logout the user when UI session is inactive. 0 means disabled
    vpn_options SettingVpnOptionsArgs
    wan_pma SettingWanPmaArgs
    wired_pma SettingWiredPmaArgs
    wireless_pma SettingWirelessPmaArgs
    orgId String
    apUpdownThreshold Number
    enable threshold-based device down delivery for AP devices only. When configured it takes effect for AP devices and device_updown_threshold is ignored.
    apiPolicy Property Map
    cacerts List<String>
    list of PEM-encoded ca certs
    celona Property Map
    cloudshark Property Map
    cradlepoint Property Map
    deviceCert Property Map
    common device cert, optional
    deviceUpdownThreshold Number
    enable threshold-based device down delivery via * device-updowns webhooks topic, * Mist Alert Framework; e.g. send AP/SW/GW down event only if AP/SW/GW Up is not seen within the threshold in minutes; 0 - 240, default is 0 (trigger immediate)
    disablePcap Boolean
    whether to disallow Mist to analyze pcap files (this is required for marvis pcap)
    disableRemoteShell Boolean
    whether to disable remote shell access for an entire org
    gatewayUpdownThreshold Number
    enable threshold-based device down delivery for Gateway devices only. When configured it takes effect for GW devices and device_updown_threshold is ignored.
    installer Property Map
    jcloud Property Map
    mgmt Property Map
    management-related properties
    mistNac Property Map
    mxedgeFipsEnabled Boolean
    mxedgeMgmt Property Map
    passwordPolicy Property Map
    password policy
    pcap Property Map
    portChannelization Property Map
    security Property Map
    switchMgmt Property Map
    switchUpdownThreshold Number
    enable threshold-based device down delivery for Switch devices only. When configured it takes effect for SW devices and device_updown_threshold is ignored.
    syntheticTest Property Map
    uiIdleTimeout Number
    automatically logout the user when UI session is inactive. 0 means disabled
    vpnOptions Property Map
    wanPma Property Map
    wiredPma Property Map
    wirelessPma Property Map

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Setting resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Juniper Pulumi.JuniperMist.Org.Outputs.SettingJuniper
    Id string
    The provider-assigned unique ID for this managed resource.
    Juniper SettingJuniper
    id String
    The provider-assigned unique ID for this managed resource.
    juniper SettingJuniper
    id string
    The provider-assigned unique ID for this managed resource.
    juniper SettingJuniper
    id str
    The provider-assigned unique ID for this managed resource.
    juniper SettingJuniper
    id String
    The provider-assigned unique ID for this managed resource.
    juniper Property Map

    Look up Existing Setting Resource

    Get an existing Setting resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: SettingState, opts?: CustomResourceOptions): Setting
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        ap_updown_threshold: Optional[int] = None,
        api_policy: Optional[SettingApiPolicyArgs] = None,
        cacerts: Optional[Sequence[str]] = None,
        celona: Optional[SettingCelonaArgs] = None,
        cloudshark: Optional[SettingCloudsharkArgs] = None,
        cradlepoint: Optional[SettingCradlepointArgs] = None,
        device_cert: Optional[SettingDeviceCertArgs] = None,
        device_updown_threshold: Optional[int] = None,
        disable_pcap: Optional[bool] = None,
        disable_remote_shell: Optional[bool] = None,
        gateway_updown_threshold: Optional[int] = None,
        installer: Optional[SettingInstallerArgs] = None,
        jcloud: Optional[SettingJcloudArgs] = None,
        juniper: Optional[SettingJuniperArgs] = None,
        mgmt: Optional[SettingMgmtArgs] = None,
        mist_nac: Optional[SettingMistNacArgs] = None,
        mxedge_fips_enabled: Optional[bool] = None,
        mxedge_mgmt: Optional[SettingMxedgeMgmtArgs] = None,
        org_id: Optional[str] = None,
        password_policy: Optional[SettingPasswordPolicyArgs] = None,
        pcap: Optional[SettingPcapArgs] = None,
        port_channelization: Optional[SettingPortChannelizationArgs] = None,
        security: Optional[SettingSecurityArgs] = None,
        switch_mgmt: Optional[SettingSwitchMgmtArgs] = None,
        switch_updown_threshold: Optional[int] = None,
        synthetic_test: Optional[SettingSyntheticTestArgs] = None,
        ui_idle_timeout: Optional[int] = None,
        vpn_options: Optional[SettingVpnOptionsArgs] = None,
        wan_pma: Optional[SettingWanPmaArgs] = None,
        wired_pma: Optional[SettingWiredPmaArgs] = None,
        wireless_pma: Optional[SettingWirelessPmaArgs] = None) -> Setting
    func GetSetting(ctx *Context, name string, id IDInput, state *SettingState, opts ...ResourceOption) (*Setting, error)
    public static Setting Get(string name, Input<string> id, SettingState? state, CustomResourceOptions? opts = null)
    public static Setting get(String name, Output<String> id, SettingState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ApUpdownThreshold int
    enable threshold-based device down delivery for AP devices only. When configured it takes effect for AP devices and device_updown_threshold is ignored.
    ApiPolicy Pulumi.JuniperMist.Org.Inputs.SettingApiPolicy
    Cacerts List<string>
    list of PEM-encoded ca certs
    Celona Pulumi.JuniperMist.Org.Inputs.SettingCelona
    Cloudshark Pulumi.JuniperMist.Org.Inputs.SettingCloudshark
    Cradlepoint Pulumi.JuniperMist.Org.Inputs.SettingCradlepoint
    DeviceCert Pulumi.JuniperMist.Org.Inputs.SettingDeviceCert
    common device cert, optional
    DeviceUpdownThreshold int
    enable threshold-based device down delivery via * device-updowns webhooks topic, * Mist Alert Framework; e.g. send AP/SW/GW down event only if AP/SW/GW Up is not seen within the threshold in minutes; 0 - 240, default is 0 (trigger immediate)
    DisablePcap bool
    whether to disallow Mist to analyze pcap files (this is required for marvis pcap)
    DisableRemoteShell bool
    whether to disable remote shell access for an entire org
    GatewayUpdownThreshold int
    enable threshold-based device down delivery for Gateway devices only. When configured it takes effect for GW devices and device_updown_threshold is ignored.
    Installer Pulumi.JuniperMist.Org.Inputs.SettingInstaller
    Jcloud Pulumi.JuniperMist.Org.Inputs.SettingJcloud
    Juniper Pulumi.JuniperMist.Org.Inputs.SettingJuniper
    Mgmt Pulumi.JuniperMist.Org.Inputs.SettingMgmt
    management-related properties
    MistNac Pulumi.JuniperMist.Org.Inputs.SettingMistNac
    MxedgeFipsEnabled bool
    MxedgeMgmt Pulumi.JuniperMist.Org.Inputs.SettingMxedgeMgmt
    OrgId string
    PasswordPolicy Pulumi.JuniperMist.Org.Inputs.SettingPasswordPolicy
    password policy
    Pcap Pulumi.JuniperMist.Org.Inputs.SettingPcap
    PortChannelization Pulumi.JuniperMist.Org.Inputs.SettingPortChannelization
    Security Pulumi.JuniperMist.Org.Inputs.SettingSecurity
    SwitchMgmt Pulumi.JuniperMist.Org.Inputs.SettingSwitchMgmt
    SwitchUpdownThreshold int
    enable threshold-based device down delivery for Switch devices only. When configured it takes effect for SW devices and device_updown_threshold is ignored.
    SyntheticTest Pulumi.JuniperMist.Org.Inputs.SettingSyntheticTest
    UiIdleTimeout int
    automatically logout the user when UI session is inactive. 0 means disabled
    VpnOptions Pulumi.JuniperMist.Org.Inputs.SettingVpnOptions
    WanPma Pulumi.JuniperMist.Org.Inputs.SettingWanPma
    WiredPma Pulumi.JuniperMist.Org.Inputs.SettingWiredPma
    WirelessPma Pulumi.JuniperMist.Org.Inputs.SettingWirelessPma
    ApUpdownThreshold int
    enable threshold-based device down delivery for AP devices only. When configured it takes effect for AP devices and device_updown_threshold is ignored.
    ApiPolicy SettingApiPolicyArgs
    Cacerts []string
    list of PEM-encoded ca certs
    Celona SettingCelonaArgs
    Cloudshark SettingCloudsharkArgs
    Cradlepoint SettingCradlepointArgs
    DeviceCert SettingDeviceCertArgs
    common device cert, optional
    DeviceUpdownThreshold int
    enable threshold-based device down delivery via * device-updowns webhooks topic, * Mist Alert Framework; e.g. send AP/SW/GW down event only if AP/SW/GW Up is not seen within the threshold in minutes; 0 - 240, default is 0 (trigger immediate)
    DisablePcap bool
    whether to disallow Mist to analyze pcap files (this is required for marvis pcap)
    DisableRemoteShell bool
    whether to disable remote shell access for an entire org
    GatewayUpdownThreshold int
    enable threshold-based device down delivery for Gateway devices only. When configured it takes effect for GW devices and device_updown_threshold is ignored.
    Installer SettingInstallerArgs
    Jcloud SettingJcloudArgs
    Juniper SettingJuniperArgs
    Mgmt SettingMgmtArgs
    management-related properties
    MistNac SettingMistNacArgs
    MxedgeFipsEnabled bool
    MxedgeMgmt SettingMxedgeMgmtArgs
    OrgId string
    PasswordPolicy SettingPasswordPolicyArgs
    password policy
    Pcap SettingPcapArgs
    PortChannelization SettingPortChannelizationArgs
    Security SettingSecurityArgs
    SwitchMgmt SettingSwitchMgmtArgs
    SwitchUpdownThreshold int
    enable threshold-based device down delivery for Switch devices only. When configured it takes effect for SW devices and device_updown_threshold is ignored.
    SyntheticTest SettingSyntheticTestArgs
    UiIdleTimeout int
    automatically logout the user when UI session is inactive. 0 means disabled
    VpnOptions SettingVpnOptionsArgs
    WanPma SettingWanPmaArgs
    WiredPma SettingWiredPmaArgs
    WirelessPma SettingWirelessPmaArgs
    apUpdownThreshold Integer
    enable threshold-based device down delivery for AP devices only. When configured it takes effect for AP devices and device_updown_threshold is ignored.
    apiPolicy SettingApiPolicy
    cacerts List<String>
    list of PEM-encoded ca certs
    celona SettingCelona
    cloudshark SettingCloudshark
    cradlepoint SettingCradlepoint
    deviceCert SettingDeviceCert
    common device cert, optional
    deviceUpdownThreshold Integer
    enable threshold-based device down delivery via * device-updowns webhooks topic, * Mist Alert Framework; e.g. send AP/SW/GW down event only if AP/SW/GW Up is not seen within the threshold in minutes; 0 - 240, default is 0 (trigger immediate)
    disablePcap Boolean
    whether to disallow Mist to analyze pcap files (this is required for marvis pcap)
    disableRemoteShell Boolean
    whether to disable remote shell access for an entire org
    gatewayUpdownThreshold Integer
    enable threshold-based device down delivery for Gateway devices only. When configured it takes effect for GW devices and device_updown_threshold is ignored.
    installer SettingInstaller
    jcloud SettingJcloud
    juniper SettingJuniper
    mgmt SettingMgmt
    management-related properties
    mistNac SettingMistNac
    mxedgeFipsEnabled Boolean
    mxedgeMgmt SettingMxedgeMgmt
    orgId String
    passwordPolicy SettingPasswordPolicy
    password policy
    pcap SettingPcap
    portChannelization SettingPortChannelization
    security SettingSecurity
    switchMgmt SettingSwitchMgmt
    switchUpdownThreshold Integer
    enable threshold-based device down delivery for Switch devices only. When configured it takes effect for SW devices and device_updown_threshold is ignored.
    syntheticTest SettingSyntheticTest
    uiIdleTimeout Integer
    automatically logout the user when UI session is inactive. 0 means disabled
    vpnOptions SettingVpnOptions
    wanPma SettingWanPma
    wiredPma SettingWiredPma
    wirelessPma SettingWirelessPma
    apUpdownThreshold number
    enable threshold-based device down delivery for AP devices only. When configured it takes effect for AP devices and device_updown_threshold is ignored.
    apiPolicy SettingApiPolicy
    cacerts string[]
    list of PEM-encoded ca certs
    celona SettingCelona
    cloudshark SettingCloudshark
    cradlepoint SettingCradlepoint
    deviceCert SettingDeviceCert
    common device cert, optional
    deviceUpdownThreshold number
    enable threshold-based device down delivery via * device-updowns webhooks topic, * Mist Alert Framework; e.g. send AP/SW/GW down event only if AP/SW/GW Up is not seen within the threshold in minutes; 0 - 240, default is 0 (trigger immediate)
    disablePcap boolean
    whether to disallow Mist to analyze pcap files (this is required for marvis pcap)
    disableRemoteShell boolean
    whether to disable remote shell access for an entire org
    gatewayUpdownThreshold number
    enable threshold-based device down delivery for Gateway devices only. When configured it takes effect for GW devices and device_updown_threshold is ignored.
    installer SettingInstaller
    jcloud SettingJcloud
    juniper SettingJuniper
    mgmt SettingMgmt
    management-related properties
    mistNac SettingMistNac
    mxedgeFipsEnabled boolean
    mxedgeMgmt SettingMxedgeMgmt
    orgId string
    passwordPolicy SettingPasswordPolicy
    password policy
    pcap SettingPcap
    portChannelization SettingPortChannelization
    security SettingSecurity
    switchMgmt SettingSwitchMgmt
    switchUpdownThreshold number
    enable threshold-based device down delivery for Switch devices only. When configured it takes effect for SW devices and device_updown_threshold is ignored.
    syntheticTest SettingSyntheticTest
    uiIdleTimeout number
    automatically logout the user when UI session is inactive. 0 means disabled
    vpnOptions SettingVpnOptions
    wanPma SettingWanPma
    wiredPma SettingWiredPma
    wirelessPma SettingWirelessPma
    ap_updown_threshold int
    enable threshold-based device down delivery for AP devices only. When configured it takes effect for AP devices and device_updown_threshold is ignored.
    api_policy SettingApiPolicyArgs
    cacerts Sequence[str]
    list of PEM-encoded ca certs
    celona SettingCelonaArgs
    cloudshark SettingCloudsharkArgs
    cradlepoint SettingCradlepointArgs
    device_cert SettingDeviceCertArgs
    common device cert, optional
    device_updown_threshold int
    enable threshold-based device down delivery via * device-updowns webhooks topic, * Mist Alert Framework; e.g. send AP/SW/GW down event only if AP/SW/GW Up is not seen within the threshold in minutes; 0 - 240, default is 0 (trigger immediate)
    disable_pcap bool
    whether to disallow Mist to analyze pcap files (this is required for marvis pcap)
    disable_remote_shell bool
    whether to disable remote shell access for an entire org
    gateway_updown_threshold int
    enable threshold-based device down delivery for Gateway devices only. When configured it takes effect for GW devices and device_updown_threshold is ignored.
    installer SettingInstallerArgs
    jcloud SettingJcloudArgs
    juniper SettingJuniperArgs
    mgmt SettingMgmtArgs
    management-related properties
    mist_nac SettingMistNacArgs
    mxedge_fips_enabled bool
    mxedge_mgmt SettingMxedgeMgmtArgs
    org_id str
    password_policy SettingPasswordPolicyArgs
    password policy
    pcap SettingPcapArgs
    port_channelization SettingPortChannelizationArgs
    security SettingSecurityArgs
    switch_mgmt SettingSwitchMgmtArgs
    switch_updown_threshold int
    enable threshold-based device down delivery for Switch devices only. When configured it takes effect for SW devices and device_updown_threshold is ignored.
    synthetic_test SettingSyntheticTestArgs
    ui_idle_timeout int
    automatically logout the user when UI session is inactive. 0 means disabled
    vpn_options SettingVpnOptionsArgs
    wan_pma SettingWanPmaArgs
    wired_pma SettingWiredPmaArgs
    wireless_pma SettingWirelessPmaArgs
    apUpdownThreshold Number
    enable threshold-based device down delivery for AP devices only. When configured it takes effect for AP devices and device_updown_threshold is ignored.
    apiPolicy Property Map
    cacerts List<String>
    list of PEM-encoded ca certs
    celona Property Map
    cloudshark Property Map
    cradlepoint Property Map
    deviceCert Property Map
    common device cert, optional
    deviceUpdownThreshold Number
    enable threshold-based device down delivery via * device-updowns webhooks topic, * Mist Alert Framework; e.g. send AP/SW/GW down event only if AP/SW/GW Up is not seen within the threshold in minutes; 0 - 240, default is 0 (trigger immediate)
    disablePcap Boolean
    whether to disallow Mist to analyze pcap files (this is required for marvis pcap)
    disableRemoteShell Boolean
    whether to disable remote shell access for an entire org
    gatewayUpdownThreshold Number
    enable threshold-based device down delivery for Gateway devices only. When configured it takes effect for GW devices and device_updown_threshold is ignored.
    installer Property Map
    jcloud Property Map
    juniper Property Map
    mgmt Property Map
    management-related properties
    mistNac Property Map
    mxedgeFipsEnabled Boolean
    mxedgeMgmt Property Map
    orgId String
    passwordPolicy Property Map
    password policy
    pcap Property Map
    portChannelization Property Map
    security Property Map
    switchMgmt Property Map
    switchUpdownThreshold Number
    enable threshold-based device down delivery for Switch devices only. When configured it takes effect for SW devices and device_updown_threshold is ignored.
    syntheticTest Property Map
    uiIdleTimeout Number
    automatically logout the user when UI session is inactive. 0 means disabled
    vpnOptions Property Map
    wanPma Property Map
    wiredPma Property Map
    wirelessPma Property Map

    Supporting Types

    SettingApiPolicy, SettingApiPolicyArgs

    NoReveal bool
    by default, API hides password/secrets when the user doesn't have write access

    • true: API will hide passwords/secrets for all users
    • false: API will hide passwords/secrets for read-only users
    NoReveal bool
    by default, API hides password/secrets when the user doesn't have write access

    • true: API will hide passwords/secrets for all users
    • false: API will hide passwords/secrets for read-only users
    noReveal Boolean
    by default, API hides password/secrets when the user doesn't have write access

    • true: API will hide passwords/secrets for all users
    • false: API will hide passwords/secrets for read-only users
    noReveal boolean
    by default, API hides password/secrets when the user doesn't have write access

    • true: API will hide passwords/secrets for all users
    • false: API will hide passwords/secrets for read-only users
    no_reveal bool
    by default, API hides password/secrets when the user doesn't have write access

    • true: API will hide passwords/secrets for all users
    • false: API will hide passwords/secrets for read-only users
    noReveal Boolean
    by default, API hides password/secrets when the user doesn't have write access

    • true: API will hide passwords/secrets for all users
    • false: API will hide passwords/secrets for read-only users

    SettingCelona, SettingCelonaArgs

    ApiKey string
    ApiPrefix string
    ApiKey string
    ApiPrefix string
    apiKey String
    apiPrefix String
    apiKey string
    apiPrefix string
    apiKey String
    apiPrefix String

    SettingCloudshark, SettingCloudsharkArgs

    Apitoken string
    Url string
    if using CS Enteprise
    Apitoken string
    Url string
    if using CS Enteprise
    apitoken String
    url String
    if using CS Enteprise
    apitoken string
    url string
    if using CS Enteprise
    apitoken str
    url str
    if using CS Enteprise
    apitoken String
    url String
    if using CS Enteprise

    SettingCradlepoint, SettingCradlepointArgs

    CpApiId string
    CpApiKey string
    EcmApiId string
    EcmApiKey string
    CpApiId string
    CpApiKey string
    EcmApiId string
    EcmApiKey string
    cpApiId String
    cpApiKey String
    ecmApiId String
    ecmApiKey String
    cpApiId string
    cpApiKey string
    ecmApiId string
    ecmApiKey string
    cpApiId String
    cpApiKey String
    ecmApiId String
    ecmApiKey String

    SettingDeviceCert, SettingDeviceCertArgs

    Cert string
    Key string
    Cert string
    Key string
    cert String
    key String
    cert string
    key string
    cert str
    key str
    cert String
    key String

    SettingInstaller, SettingInstallerArgs

    allowAllDevices Boolean
    allowAllSites Boolean
    extraSiteIds List<String>
    gracePeriod Integer
    allowAllDevices Boolean
    allowAllSites Boolean
    extraSiteIds List<String>
    gracePeriod Number

    SettingJcloud, SettingJcloudArgs

    OrgApitoken string
    JCloud Org Token
    OrgApitokenName string
    JCloud Org Token Name
    OrgId string
    JCloud Org ID
    OrgApitoken string
    JCloud Org Token
    OrgApitokenName string
    JCloud Org Token Name
    OrgId string
    JCloud Org ID
    orgApitoken String
    JCloud Org Token
    orgApitokenName String
    JCloud Org Token Name
    orgId String
    JCloud Org ID
    orgApitoken string
    JCloud Org Token
    orgApitokenName string
    JCloud Org Token Name
    orgId string
    JCloud Org ID
    org_apitoken str
    JCloud Org Token
    org_apitoken_name str
    JCloud Org Token Name
    org_id str
    JCloud Org ID
    orgApitoken String
    JCloud Org Token
    orgApitokenName String
    JCloud Org Token Name
    orgId String
    JCloud Org ID

    SettingJuniper, SettingJuniperArgs

    SettingJuniperAccount, SettingJuniperAccountArgs

    LinkedBy string
    Name string
    LinkedBy string
    Name string
    linkedBy String
    name String
    linkedBy string
    name string
    linkedBy String
    name String

    SettingMgmt, SettingMgmtArgs

    MxtunnelIds List<string>
    list of Mist Tunnels
    UseMxtunnel bool
    whether to use Mist Tunnel for mgmt connectivity, this takes precedence over use_wxtunnel
    UseWxtunnel bool
    whether to use wxtunnel for mgmt connectivity
    MxtunnelIds []string
    list of Mist Tunnels
    UseMxtunnel bool
    whether to use Mist Tunnel for mgmt connectivity, this takes precedence over use_wxtunnel
    UseWxtunnel bool
    whether to use wxtunnel for mgmt connectivity
    mxtunnelIds List<String>
    list of Mist Tunnels
    useMxtunnel Boolean
    whether to use Mist Tunnel for mgmt connectivity, this takes precedence over use_wxtunnel
    useWxtunnel Boolean
    whether to use wxtunnel for mgmt connectivity
    mxtunnelIds string[]
    list of Mist Tunnels
    useMxtunnel boolean
    whether to use Mist Tunnel for mgmt connectivity, this takes precedence over use_wxtunnel
    useWxtunnel boolean
    whether to use wxtunnel for mgmt connectivity
    mxtunnel_ids Sequence[str]
    list of Mist Tunnels
    use_mxtunnel bool
    whether to use Mist Tunnel for mgmt connectivity, this takes precedence over use_wxtunnel
    use_wxtunnel bool
    whether to use wxtunnel for mgmt connectivity
    mxtunnelIds List<String>
    list of Mist Tunnels
    useMxtunnel Boolean
    whether to use Mist Tunnel for mgmt connectivity, this takes precedence over use_wxtunnel
    useWxtunnel Boolean
    whether to use wxtunnel for mgmt connectivity

    SettingMistNac, SettingMistNacArgs

    Cacerts List<string>
    list of PEM-encoded ca certs
    DefaultIdpId string
    use this IDP when no explicit realm present in the incoming username/CN OR when no IDP is explicitly mapped to the incoming realm.
    DisableRsaeAlgorithms bool
    to disable RSAE_PSS_SHA256, RSAE_PSS_SHA384, RSAE_PSS_SHA512 from server side. see https://www.openssl.org/docs/man3.0/man1/openssl-ciphers.html
    EapSslSecurityLevel int
    eap ssl security level see https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_security_level.html#DEFAULT-CALLBACK-BEHAVIOUR
    EuOnly bool
    By default NAC POD failover considers all NAC pods available around the globe, i.e. EU, US, or APAC based, failover happens based on geo IP of the originating site. For strict GDPR compliancy NAC POD failover would only happen between the PODs located within the EU environment, and no authentication would take place outside of EU. This is an org setting that is applicable to WLANs, switch templates, mxedge clusters that have mist_nac enabled
    IdpMachineCertLookupField string
    allow customer to choose the EAP-TLS client certificate's field to use for IDP Machine Groups lookup
    IdpUserCertLookupField string
    allow customer to choose the EAP-TLS client certificate's field to use for IDP User Groups lookup
    Idps List<Pulumi.JuniperMist.Org.Inputs.SettingMistNacIdp>
    ServerCert Pulumi.JuniperMist.Org.Inputs.SettingMistNacServerCert
    radius server cert to be presented in EAP TLS
    UseIpVersion string
    by default NAS devices(switches/aps) and proxies(mxedge) are configured to reach mist-nac via IPv4. enum: v4, v6
    UseSslPort bool
    By default NAS devices (switches/aps) and proxies(mxedge) are configured to use port TCP2083(radsec) to reach mist-nac. Set use_ssl_port==true to override that port with TCP43 (ssl), This is a org level setting that is applicable to wlans, switch_templates, and mxedge_clusters that have mist-nac enabled
    Cacerts []string
    list of PEM-encoded ca certs
    DefaultIdpId string
    use this IDP when no explicit realm present in the incoming username/CN OR when no IDP is explicitly mapped to the incoming realm.
    DisableRsaeAlgorithms bool
    to disable RSAE_PSS_SHA256, RSAE_PSS_SHA384, RSAE_PSS_SHA512 from server side. see https://www.openssl.org/docs/man3.0/man1/openssl-ciphers.html
    EapSslSecurityLevel int
    eap ssl security level see https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_security_level.html#DEFAULT-CALLBACK-BEHAVIOUR
    EuOnly bool
    By default NAC POD failover considers all NAC pods available around the globe, i.e. EU, US, or APAC based, failover happens based on geo IP of the originating site. For strict GDPR compliancy NAC POD failover would only happen between the PODs located within the EU environment, and no authentication would take place outside of EU. This is an org setting that is applicable to WLANs, switch templates, mxedge clusters that have mist_nac enabled
    IdpMachineCertLookupField string
    allow customer to choose the EAP-TLS client certificate's field to use for IDP Machine Groups lookup
    IdpUserCertLookupField string
    allow customer to choose the EAP-TLS client certificate's field to use for IDP User Groups lookup
    Idps []SettingMistNacIdp
    ServerCert SettingMistNacServerCert
    radius server cert to be presented in EAP TLS
    UseIpVersion string
    by default NAS devices(switches/aps) and proxies(mxedge) are configured to reach mist-nac via IPv4. enum: v4, v6
    UseSslPort bool
    By default NAS devices (switches/aps) and proxies(mxedge) are configured to use port TCP2083(radsec) to reach mist-nac. Set use_ssl_port==true to override that port with TCP43 (ssl), This is a org level setting that is applicable to wlans, switch_templates, and mxedge_clusters that have mist-nac enabled
    cacerts List<String>
    list of PEM-encoded ca certs
    defaultIdpId String
    use this IDP when no explicit realm present in the incoming username/CN OR when no IDP is explicitly mapped to the incoming realm.
    disableRsaeAlgorithms Boolean
    to disable RSAE_PSS_SHA256, RSAE_PSS_SHA384, RSAE_PSS_SHA512 from server side. see https://www.openssl.org/docs/man3.0/man1/openssl-ciphers.html
    eapSslSecurityLevel Integer
    eap ssl security level see https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_security_level.html#DEFAULT-CALLBACK-BEHAVIOUR
    euOnly Boolean
    By default NAC POD failover considers all NAC pods available around the globe, i.e. EU, US, or APAC based, failover happens based on geo IP of the originating site. For strict GDPR compliancy NAC POD failover would only happen between the PODs located within the EU environment, and no authentication would take place outside of EU. This is an org setting that is applicable to WLANs, switch templates, mxedge clusters that have mist_nac enabled
    idpMachineCertLookupField String
    allow customer to choose the EAP-TLS client certificate's field to use for IDP Machine Groups lookup
    idpUserCertLookupField String
    allow customer to choose the EAP-TLS client certificate's field to use for IDP User Groups lookup
    idps List<SettingMistNacIdp>
    serverCert SettingMistNacServerCert
    radius server cert to be presented in EAP TLS
    useIpVersion String
    by default NAS devices(switches/aps) and proxies(mxedge) are configured to reach mist-nac via IPv4. enum: v4, v6
    useSslPort Boolean
    By default NAS devices (switches/aps) and proxies(mxedge) are configured to use port TCP2083(radsec) to reach mist-nac. Set use_ssl_port==true to override that port with TCP43 (ssl), This is a org level setting that is applicable to wlans, switch_templates, and mxedge_clusters that have mist-nac enabled
    cacerts string[]
    list of PEM-encoded ca certs
    defaultIdpId string
    use this IDP when no explicit realm present in the incoming username/CN OR when no IDP is explicitly mapped to the incoming realm.
    disableRsaeAlgorithms boolean
    to disable RSAE_PSS_SHA256, RSAE_PSS_SHA384, RSAE_PSS_SHA512 from server side. see https://www.openssl.org/docs/man3.0/man1/openssl-ciphers.html
    eapSslSecurityLevel number
    eap ssl security level see https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_security_level.html#DEFAULT-CALLBACK-BEHAVIOUR
    euOnly boolean
    By default NAC POD failover considers all NAC pods available around the globe, i.e. EU, US, or APAC based, failover happens based on geo IP of the originating site. For strict GDPR compliancy NAC POD failover would only happen between the PODs located within the EU environment, and no authentication would take place outside of EU. This is an org setting that is applicable to WLANs, switch templates, mxedge clusters that have mist_nac enabled
    idpMachineCertLookupField string
    allow customer to choose the EAP-TLS client certificate's field to use for IDP Machine Groups lookup
    idpUserCertLookupField string
    allow customer to choose the EAP-TLS client certificate's field to use for IDP User Groups lookup
    idps SettingMistNacIdp[]
    serverCert SettingMistNacServerCert
    radius server cert to be presented in EAP TLS
    useIpVersion string
    by default NAS devices(switches/aps) and proxies(mxedge) are configured to reach mist-nac via IPv4. enum: v4, v6
    useSslPort boolean
    By default NAS devices (switches/aps) and proxies(mxedge) are configured to use port TCP2083(radsec) to reach mist-nac. Set use_ssl_port==true to override that port with TCP43 (ssl), This is a org level setting that is applicable to wlans, switch_templates, and mxedge_clusters that have mist-nac enabled
    cacerts Sequence[str]
    list of PEM-encoded ca certs
    default_idp_id str
    use this IDP when no explicit realm present in the incoming username/CN OR when no IDP is explicitly mapped to the incoming realm.
    disable_rsae_algorithms bool
    to disable RSAE_PSS_SHA256, RSAE_PSS_SHA384, RSAE_PSS_SHA512 from server side. see https://www.openssl.org/docs/man3.0/man1/openssl-ciphers.html
    eap_ssl_security_level int
    eap ssl security level see https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_security_level.html#DEFAULT-CALLBACK-BEHAVIOUR
    eu_only bool
    By default NAC POD failover considers all NAC pods available around the globe, i.e. EU, US, or APAC based, failover happens based on geo IP of the originating site. For strict GDPR compliancy NAC POD failover would only happen between the PODs located within the EU environment, and no authentication would take place outside of EU. This is an org setting that is applicable to WLANs, switch templates, mxedge clusters that have mist_nac enabled
    idp_machine_cert_lookup_field str
    allow customer to choose the EAP-TLS client certificate's field to use for IDP Machine Groups lookup
    idp_user_cert_lookup_field str
    allow customer to choose the EAP-TLS client certificate's field to use for IDP User Groups lookup
    idps Sequence[SettingMistNacIdp]
    server_cert SettingMistNacServerCert
    radius server cert to be presented in EAP TLS
    use_ip_version str
    by default NAS devices(switches/aps) and proxies(mxedge) are configured to reach mist-nac via IPv4. enum: v4, v6
    use_ssl_port bool
    By default NAS devices (switches/aps) and proxies(mxedge) are configured to use port TCP2083(radsec) to reach mist-nac. Set use_ssl_port==true to override that port with TCP43 (ssl), This is a org level setting that is applicable to wlans, switch_templates, and mxedge_clusters that have mist-nac enabled
    cacerts List<String>
    list of PEM-encoded ca certs
    defaultIdpId String
    use this IDP when no explicit realm present in the incoming username/CN OR when no IDP is explicitly mapped to the incoming realm.
    disableRsaeAlgorithms Boolean
    to disable RSAE_PSS_SHA256, RSAE_PSS_SHA384, RSAE_PSS_SHA512 from server side. see https://www.openssl.org/docs/man3.0/man1/openssl-ciphers.html
    eapSslSecurityLevel Number
    eap ssl security level see https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_security_level.html#DEFAULT-CALLBACK-BEHAVIOUR
    euOnly Boolean
    By default NAC POD failover considers all NAC pods available around the globe, i.e. EU, US, or APAC based, failover happens based on geo IP of the originating site. For strict GDPR compliancy NAC POD failover would only happen between the PODs located within the EU environment, and no authentication would take place outside of EU. This is an org setting that is applicable to WLANs, switch templates, mxedge clusters that have mist_nac enabled
    idpMachineCertLookupField String
    allow customer to choose the EAP-TLS client certificate's field to use for IDP Machine Groups lookup
    idpUserCertLookupField String
    allow customer to choose the EAP-TLS client certificate's field to use for IDP User Groups lookup
    idps List<Property Map>
    serverCert Property Map
    radius server cert to be presented in EAP TLS
    useIpVersion String
    by default NAS devices(switches/aps) and proxies(mxedge) are configured to reach mist-nac via IPv4. enum: v4, v6
    useSslPort Boolean
    By default NAS devices (switches/aps) and proxies(mxedge) are configured to use port TCP2083(radsec) to reach mist-nac. Set use_ssl_port==true to override that port with TCP43 (ssl), This is a org level setting that is applicable to wlans, switch_templates, and mxedge_clusters that have mist-nac enabled

    SettingMistNacIdp, SettingMistNacIdpArgs

    Id string
    ID of the mist_nacidp
    UserRealms List<string>
    which realm should trigger this IDP. User Realm is extracted from:

    • Username-AVP (mist.com from john@mist.com)
    • Cert CN
    ExcludeRealms List<string>
    when the IDP of mxedge_proxy type, exclude the following realms from proxying in addition to other valid home realms in this org
    Id string
    ID of the mist_nacidp
    UserRealms []string
    which realm should trigger this IDP. User Realm is extracted from:

    • Username-AVP (mist.com from john@mist.com)
    • Cert CN
    ExcludeRealms []string
    when the IDP of mxedge_proxy type, exclude the following realms from proxying in addition to other valid home realms in this org
    id String
    ID of the mist_nacidp
    userRealms List<String>
    which realm should trigger this IDP. User Realm is extracted from:

    • Username-AVP (mist.com from john@mist.com)
    • Cert CN
    excludeRealms List<String>
    when the IDP of mxedge_proxy type, exclude the following realms from proxying in addition to other valid home realms in this org
    id string
    ID of the mist_nacidp
    userRealms string[]
    which realm should trigger this IDP. User Realm is extracted from:

    • Username-AVP (mist.com from john@mist.com)
    • Cert CN
    excludeRealms string[]
    when the IDP of mxedge_proxy type, exclude the following realms from proxying in addition to other valid home realms in this org
    id str
    ID of the mist_nacidp
    user_realms Sequence[str]
    which realm should trigger this IDP. User Realm is extracted from:

    • Username-AVP (mist.com from john@mist.com)
    • Cert CN
    exclude_realms Sequence[str]
    when the IDP of mxedge_proxy type, exclude the following realms from proxying in addition to other valid home realms in this org
    id String
    ID of the mist_nacidp
    userRealms List<String>
    which realm should trigger this IDP. User Realm is extracted from:

    • Username-AVP (mist.com from john@mist.com)
    • Cert CN
    excludeRealms List<String>
    when the IDP of mxedge_proxy type, exclude the following realms from proxying in addition to other valid home realms in this org

    SettingMistNacServerCert, SettingMistNacServerCertArgs

    Cert string
    Key string
    Password string
    private key password (optional)
    Cert string
    Key string
    Password string
    private key password (optional)
    cert String
    key String
    password String
    private key password (optional)
    cert string
    key string
    password string
    private key password (optional)
    cert str
    key str
    password str
    private key password (optional)
    cert String
    key String
    password String
    private key password (optional)

    SettingMxedgeMgmt, SettingMxedgeMgmtArgs

    FipsEnabled bool
    MistPassword string
    OobIpType string
    enum: dhcp, disabled, static
    OobIpType6 string
    enum: autoconf, dhcp, disabled, static
    RootPassword string
    FipsEnabled bool
    MistPassword string
    OobIpType string
    enum: dhcp, disabled, static
    OobIpType6 string
    enum: autoconf, dhcp, disabled, static
    RootPassword string
    fipsEnabled Boolean
    mistPassword String
    oobIpType String
    enum: dhcp, disabled, static
    oobIpType6 String
    enum: autoconf, dhcp, disabled, static
    rootPassword String
    fipsEnabled boolean
    mistPassword string
    oobIpType string
    enum: dhcp, disabled, static
    oobIpType6 string
    enum: autoconf, dhcp, disabled, static
    rootPassword string
    fips_enabled bool
    mist_password str
    oob_ip_type str
    enum: dhcp, disabled, static
    oob_ip_type6 str
    enum: autoconf, dhcp, disabled, static
    root_password str
    fipsEnabled Boolean
    mistPassword String
    oobIpType String
    enum: dhcp, disabled, static
    oobIpType6 String
    enum: autoconf, dhcp, disabled, static
    rootPassword String

    SettingPasswordPolicy, SettingPasswordPolicyArgs

    Enabled bool
    whether the policy is enabled
    ExpiryInDays int
    password expiry in days
    MinLength int
    required password length
    RequiresSpecialChar bool
    whether to require special character
    RequiresTwoFactorAuth bool
    whether to require two-factor auth
    Enabled bool
    whether the policy is enabled
    ExpiryInDays int
    password expiry in days
    MinLength int
    required password length
    RequiresSpecialChar bool
    whether to require special character
    RequiresTwoFactorAuth bool
    whether to require two-factor auth
    enabled Boolean
    whether the policy is enabled
    expiryInDays Integer
    password expiry in days
    minLength Integer
    required password length
    requiresSpecialChar Boolean
    whether to require special character
    requiresTwoFactorAuth Boolean
    whether to require two-factor auth
    enabled boolean
    whether the policy is enabled
    expiryInDays number
    password expiry in days
    minLength number
    required password length
    requiresSpecialChar boolean
    whether to require special character
    requiresTwoFactorAuth boolean
    whether to require two-factor auth
    enabled bool
    whether the policy is enabled
    expiry_in_days int
    password expiry in days
    min_length int
    required password length
    requires_special_char bool
    whether to require special character
    requires_two_factor_auth bool
    whether to require two-factor auth
    enabled Boolean
    whether the policy is enabled
    expiryInDays Number
    password expiry in days
    minLength Number
    required password length
    requiresSpecialChar Boolean
    whether to require special character
    requiresTwoFactorAuth Boolean
    whether to require two-factor auth

    SettingPcap, SettingPcapArgs

    Bucket string
    MaxPktLen int
    max_len of non-management packets to capture
    Bucket string
    MaxPktLen int
    max_len of non-management packets to capture
    bucket String
    maxPktLen Integer
    max_len of non-management packets to capture
    bucket string
    maxPktLen number
    max_len of non-management packets to capture
    bucket str
    max_pkt_len int
    max_len of non-management packets to capture
    bucket String
    maxPktLen Number
    max_len of non-management packets to capture

    SettingPortChannelization, SettingPortChannelizationArgs

    Config Dictionary<string, string>
    Property key is the interface name or range (e.g. et-0/0/47, et-0/0/48-49), Property value is the interface speed (e.g. 25g, 50g)
    Enabled bool
    Config map[string]string
    Property key is the interface name or range (e.g. et-0/0/47, et-0/0/48-49), Property value is the interface speed (e.g. 25g, 50g)
    Enabled bool
    config Map<String,String>
    Property key is the interface name or range (e.g. et-0/0/47, et-0/0/48-49), Property value is the interface speed (e.g. 25g, 50g)
    enabled Boolean
    config {[key: string]: string}
    Property key is the interface name or range (e.g. et-0/0/47, et-0/0/48-49), Property value is the interface speed (e.g. 25g, 50g)
    enabled boolean
    config Mapping[str, str]
    Property key is the interface name or range (e.g. et-0/0/47, et-0/0/48-49), Property value is the interface speed (e.g. 25g, 50g)
    enabled bool
    config Map<String>
    Property key is the interface name or range (e.g. et-0/0/47, et-0/0/48-49), Property value is the interface speed (e.g. 25g, 50g)
    enabled Boolean

    SettingSecurity, SettingSecurityArgs

    DisableLocalSsh bool
    whether to disable local SSH (by default, local SSH is enabled with allow_mist in Org is enabled
    FipsZeroizePassword string
    password required to zeroize devices (FIPS) on site level
    LimitSshAccess bool
    whether to allow certain SSH keys to SSH into the AP (see Site:Setting)
    DisableLocalSsh bool
    whether to disable local SSH (by default, local SSH is enabled with allow_mist in Org is enabled
    FipsZeroizePassword string
    password required to zeroize devices (FIPS) on site level
    LimitSshAccess bool
    whether to allow certain SSH keys to SSH into the AP (see Site:Setting)
    disableLocalSsh Boolean
    whether to disable local SSH (by default, local SSH is enabled with allow_mist in Org is enabled
    fipsZeroizePassword String
    password required to zeroize devices (FIPS) on site level
    limitSshAccess Boolean
    whether to allow certain SSH keys to SSH into the AP (see Site:Setting)
    disableLocalSsh boolean
    whether to disable local SSH (by default, local SSH is enabled with allow_mist in Org is enabled
    fipsZeroizePassword string
    password required to zeroize devices (FIPS) on site level
    limitSshAccess boolean
    whether to allow certain SSH keys to SSH into the AP (see Site:Setting)
    disable_local_ssh bool
    whether to disable local SSH (by default, local SSH is enabled with allow_mist in Org is enabled
    fips_zeroize_password str
    password required to zeroize devices (FIPS) on site level
    limit_ssh_access bool
    whether to allow certain SSH keys to SSH into the AP (see Site:Setting)
    disableLocalSsh Boolean
    whether to disable local SSH (by default, local SSH is enabled with allow_mist in Org is enabled
    fipsZeroizePassword String
    password required to zeroize devices (FIPS) on site level
    limitSshAccess Boolean
    whether to allow certain SSH keys to SSH into the AP (see Site:Setting)

    SettingSwitchMgmt, SettingSwitchMgmtArgs

    ApAffinityThreshold int
    If the field is set in both site/setting and org/setting, the value from site/setting will be used.
    ApAffinityThreshold int
    If the field is set in both site/setting and org/setting, the value from site/setting will be used.
    apAffinityThreshold Integer
    If the field is set in both site/setting and org/setting, the value from site/setting will be used.
    apAffinityThreshold number
    If the field is set in both site/setting and org/setting, the value from site/setting will be used.
    ap_affinity_threshold int
    If the field is set in both site/setting and org/setting, the value from site/setting will be used.
    apAffinityThreshold Number
    If the field is set in both site/setting and org/setting, the value from site/setting will be used.

    SettingSyntheticTest, SettingSyntheticTestArgs

    SettingSyntheticTestVlan, SettingSyntheticTestVlanArgs

    CustomTestUrls List<string>
    Disabled bool
    for some vlans where we don't want this to run
    VlanIds List<string>
    CustomTestUrls []string
    Disabled bool
    for some vlans where we don't want this to run
    VlanIds []string
    customTestUrls List<String>
    disabled Boolean
    for some vlans where we don't want this to run
    vlanIds List<String>
    customTestUrls string[]
    disabled boolean
    for some vlans where we don't want this to run
    vlanIds string[]
    custom_test_urls Sequence[str]
    disabled bool
    for some vlans where we don't want this to run
    vlan_ids Sequence[str]
    customTestUrls List<String>
    disabled Boolean
    for some vlans where we don't want this to run
    vlanIds List<String>

    SettingSyntheticTestWanSpeedtest, SettingSyntheticTestWanSpeedtestArgs

    Enabled bool
    TimeOfDay string
    any / HH:MM (24-hour format)
    Enabled bool
    TimeOfDay string
    any / HH:MM (24-hour format)
    enabled Boolean
    timeOfDay String
    any / HH:MM (24-hour format)
    enabled boolean
    timeOfDay string
    any / HH:MM (24-hour format)
    enabled bool
    time_of_day str
    any / HH:MM (24-hour format)
    enabled Boolean
    timeOfDay String
    any / HH:MM (24-hour format)

    SettingVpnOptions, SettingVpnOptionsArgs

    AsBase int
    StSubnet string
    equiring /12 or bigger to support 16 private IPs for 65535 gateways
    AsBase int
    StSubnet string
    equiring /12 or bigger to support 16 private IPs for 65535 gateways
    asBase Integer
    stSubnet String
    equiring /12 or bigger to support 16 private IPs for 65535 gateways
    asBase number
    stSubnet string
    equiring /12 or bigger to support 16 private IPs for 65535 gateways
    as_base int
    st_subnet str
    equiring /12 or bigger to support 16 private IPs for 65535 gateways
    asBase Number
    stSubnet String
    equiring /12 or bigger to support 16 private IPs for 65535 gateways

    SettingWanPma, SettingWanPmaArgs

    Enabled bool
    Enabled bool
    enabled Boolean
    enabled boolean
    enabled bool
    enabled Boolean

    SettingWiredPma, SettingWiredPmaArgs

    Enabled bool
    Enabled bool
    enabled Boolean
    enabled boolean
    enabled bool
    enabled Boolean

    SettingWirelessPma, SettingWirelessPmaArgs

    Enabled bool
    Enabled bool
    enabled Boolean
    enabled boolean
    enabled bool
    enabled Boolean

    Import

    Using pulumi import, import mist_org_setting with:

    Org Setting can be imported by specifying the org_id

    $ pulumi import junipermist:org/setting:Setting setting_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    junipermist pulumi/pulumi-junipermist
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the mist Terraform Provider.
    junipermist logo
    Juniper Mist v0.0.27 published on Friday, Sep 27, 2024 by Pulumi
    pulumi/pulumi-junipermist