Docs Home
Packages
Juniper Mist v0.0.27 published on Friday, Sep 27, 2024 by Pulumi
junipermist.site.Networktemplate
Explore with Pulumi AI
This resource manages the Site Network configuration (Switch configuration). The Site Network template can be used to override the Org Network template assign to the site, or to configure common switch settings accross the site without having to create an Org Network template.
Example Usage
Coming soon!
Coming soon!
Coming soon!
Coming soon!
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.site.Networktemplate;
import com.pulumi.junipermist.site.NetworktemplateArgs;
import com.pulumi.junipermist.site.inputs.NetworktemplateRadiusConfigArgs;
import com.pulumi.junipermist.site.inputs.NetworktemplateSwitchMatchingArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var networktemplateOne = new Networktemplate("networktemplateOne", NetworktemplateArgs.builder()
.siteId(terraformTest.id())
.dnsServers(
"8.8.8.8",
"1.1.1.1")
.dnsSuffixes("mycorp.com")
.ntpServers("pool.ntp.org")
.additionalConfigCmds(
"set system hostnam test",
"set system services ssh root-login allow")
.networks(Map.ofEntries(
Map.entry("network_one", Map.of("vlanId", 10)),
Map.entry("network_two", Map.of("vlanId", 11))
))
.portUsages(Map.of("trunk", Map.ofEntries(
Map.entry("allNetworks", true),
Map.entry("enableQos", true),
Map.entry("mode", "port_usage_one"),
Map.entry("portNetwork", "network_one")
)))
.radiusConfig(NetworktemplateRadiusConfigArgs.builder()
.acct_interim_interval(60)
.coa_enabled(true)
.network("network_one")
.acct_servers(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
.auth_servers(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
.build())
.switchMatching(NetworktemplateSwitchMatchingArgs.builder()
.enable(true)
.rules(NetworktemplateSwitchMatchingRuleArgs.builder()
.name("switch_rule_one")
.matchType("match_name[0:3]")
.matchValue("abc")
.portConfig(Map.of("ge-0/0/0-10", Map.of("usage", "port_usage_one")))
.build())
.build())
.build());
}
}
resources:
networktemplateOne:
type: junipermist:site:Networktemplate
name: networktemplate_one
properties:
siteId: ${terraformTest.id}
dnsServers:
- 8.8.8.8
- 1.1.1.1
dnsSuffixes:
- mycorp.com
ntpServers:
- pool.ntp.org
additionalConfigCmds:
- set system hostnam test
- set system services ssh root-login allow
networks:
network_one:
vlanId: 10
network_two:
vlanId: 11
portUsages:
trunk:
allNetworks: true
enableQos: true
mode: port_usage_one
portNetwork: network_one
radiusConfig:
acct_interim_interval: 60
coa_enabled: true
network: network_one
acct_servers:
- host: 1.2.3.4
secret: secret
auth_servers:
- host: 1.2.3.4
secret: secret
switchMatching:
enable: true
rules:
- name: switch_rule_one
matchType: match_name[0:3]
matchValue: abc
portConfig:
ge-0/0/0-10:
usage: port_usage_one
Create Networktemplate Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Networktemplate(name: string, args: NetworktemplateArgs, opts?: CustomResourceOptions);@overload
def Networktemplate(resource_name: str,
args: NetworktemplateArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Networktemplate(resource_name: str,
opts: Optional[ResourceOptions] = None,
site_id: Optional[str] = None,
port_mirroring: Optional[Mapping[str, NetworktemplatePortMirroringArgs]] = None,
vrf_instances: Optional[Mapping[str, NetworktemplateVrfInstancesArgs]] = None,
ospf_areas: Optional[Mapping[str, NetworktemplateOspfAreasArgs]] = None,
dns_servers: Optional[Sequence[str]] = None,
dns_suffixes: Optional[Sequence[str]] = None,
extra_routes: Optional[Mapping[str, NetworktemplateExtraRoutesArgs]] = None,
extra_routes6: Optional[Mapping[str, NetworktemplateExtraRoutes6Args]] = None,
mist_nac: Optional[NetworktemplateMistNacArgs] = None,
networks: Optional[Mapping[str, NetworktemplateNetworksArgs]] = None,
port_usages: Optional[Mapping[str, NetworktemplatePortUsagesArgs]] = None,
dhcp_snooping: Optional[NetworktemplateDhcpSnoopingArgs] = None,
additional_config_cmds: Optional[Sequence[str]] = None,
ntp_servers: Optional[Sequence[str]] = None,
radius_config: Optional[NetworktemplateRadiusConfigArgs] = None,
remote_syslog: Optional[NetworktemplateRemoteSyslogArgs] = None,
remove_existing_configs: Optional[bool] = None,
acl_tags: Optional[Mapping[str, NetworktemplateAclTagsArgs]] = None,
snmp_config: Optional[NetworktemplateSnmpConfigArgs] = None,
switch_matching: Optional[NetworktemplateSwitchMatchingArgs] = None,
switch_mgmt: Optional[NetworktemplateSwitchMgmtArgs] = None,
uplink_port_config: Optional[NetworktemplateUplinkPortConfigArgs] = None,
vrf_config: Optional[NetworktemplateVrfConfigArgs] = None,
acl_policies: Optional[Sequence[NetworktemplateAclPolicyArgs]] = None)func NewNetworktemplate(ctx *Context, name string, args NetworktemplateArgs, opts ...ResourceOption) (*Networktemplate, error)public Networktemplate(string name, NetworktemplateArgs args, CustomResourceOptions? opts = null)
public Networktemplate(String name, NetworktemplateArgs args)
public Networktemplate(String name, NetworktemplateArgs args, CustomResourceOptions options)
type: junipermist:site:Networktemplate
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args NetworktemplateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args NetworktemplateArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args NetworktemplateArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args NetworktemplateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args NetworktemplateArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var junipermistNetworktemplateResource = new JuniperMist.Site.Networktemplate("junipermistNetworktemplateResource", new()
{
SiteId = "string",
PortMirroring =
{
{ "string", new JuniperMist.Site.Inputs.NetworktemplatePortMirroringArgs
{
InputNetworksIngresses = new[]
{
"string",
},
InputPortIdsEgresses = new[]
{
"string",
},
InputPortIdsIngresses = new[]
{
"string",
},
OutputNetwork = "string",
OutputPortId = "string",
} },
},
VrfInstances =
{
{ "string", new JuniperMist.Site.Inputs.NetworktemplateVrfInstancesArgs
{
ExtraRoutes =
{
{ "string", new JuniperMist.Site.Inputs.NetworktemplateVrfInstancesExtraRoutesArgs
{
Via = "string",
} },
},
Networks = new[]
{
"string",
},
} },
},
OspfAreas =
{
{ "string", new JuniperMist.Site.Inputs.NetworktemplateOspfAreasArgs
{
OspfNetworks =
{
{ "string", new JuniperMist.Site.Inputs.NetworktemplateOspfAreasOspfNetworksArgs
{
AuthKeys =
{
{ "string", "string" },
},
AuthPassword = "string",
AuthType = "string",
BfdMinimumInterval = 0,
DeadInterval = 0,
ExportPolicy = "string",
HelloInterval = 0,
ImportPolicy = "string",
InterfaceType = "string",
Metric = 0,
NoReadvertiseToOverlay = false,
Passive = false,
} },
},
IncludeLoopback = false,
Type = "string",
} },
},
DnsServers = new[]
{
"string",
},
DnsSuffixes = new[]
{
"string",
},
ExtraRoutes =
{
{ "string", new JuniperMist.Site.Inputs.NetworktemplateExtraRoutesArgs
{
Via = "string",
Discard = false,
Metric = 0,
NextQualified =
{
{ "string", new JuniperMist.Site.Inputs.NetworktemplateExtraRoutesNextQualifiedArgs
{
Metric = 0,
Preference = 0,
} },
},
NoResolve = false,
Preference = 0,
} },
},
ExtraRoutes6 =
{
{ "string", new JuniperMist.Site.Inputs.NetworktemplateExtraRoutes6Args
{
Via = "string",
Discard = false,
Metric = 0,
NextQualified =
{
{ "string", new JuniperMist.Site.Inputs.NetworktemplateExtraRoutes6NextQualifiedArgs
{
Metric = 0,
Preference = 0,
} },
},
NoResolve = false,
Preference = 0,
} },
},
MistNac = new JuniperMist.Site.Inputs.NetworktemplateMistNacArgs
{
Enabled = false,
Network = "string",
},
Networks =
{
{ "string", new JuniperMist.Site.Inputs.NetworktemplateNetworksArgs
{
VlanId = "string",
Isolation = false,
IsolationVlanId = "string",
Subnet = "string",
} },
},
PortUsages =
{
{ "string", new JuniperMist.Site.Inputs.NetworktemplatePortUsagesArgs
{
AllNetworks = false,
AllowDhcpd = false,
AllowMultipleSupplicants = false,
BypassAuthWhenServerDown = false,
BypassAuthWhenServerDownForUnkonwnClient = false,
Description = "string",
DisableAutoneg = false,
Disabled = false,
Duplex = "string",
DynamicVlanNetworks = new[]
{
"string",
},
EnableMacAuth = false,
EnableQos = false,
GuestNetwork = "string",
InterSwitchLink = false,
MacAuthOnly = false,
MacAuthPreferred = false,
MacAuthProtocol = "string",
MacLimit = 0,
Mode = "string",
Mtu = 0,
Networks = new[]
{
"string",
},
PersistMac = false,
PoeDisabled = false,
PortAuth = "string",
PortNetwork = "string",
ReauthInterval = 0,
ResetDefaultWhen = "string",
Rules = new[]
{
new JuniperMist.Site.Inputs.NetworktemplatePortUsagesRuleArgs
{
Src = "string",
Equals = "string",
EqualsAnies = new[]
{
"string",
},
Expression = "string",
Usage = "string",
},
},
ServerFailNetwork = "string",
ServerRejectNetwork = "string",
Speed = "string",
StormControl = new JuniperMist.Site.Inputs.NetworktemplatePortUsagesStormControlArgs
{
NoBroadcast = false,
NoMulticast = false,
NoRegisteredMulticast = false,
NoUnknownUnicast = false,
Percentage = 0,
},
StpEdge = false,
StpNoRootPort = false,
StpP2p = false,
VoipNetwork = "string",
} },
},
DhcpSnooping = new JuniperMist.Site.Inputs.NetworktemplateDhcpSnoopingArgs
{
AllNetworks = false,
EnableArpSpoofCheck = false,
EnableIpSourceGuard = false,
Enabled = false,
Networks = new[]
{
"string",
},
},
AdditionalConfigCmds = new[]
{
"string",
},
NtpServers = new[]
{
"string",
},
RadiusConfig = new JuniperMist.Site.Inputs.NetworktemplateRadiusConfigArgs
{
AcctInterimInterval = 0,
AcctServers = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateRadiusConfigAcctServerArgs
{
Host = "string",
Secret = "string",
KeywrapEnabled = false,
KeywrapFormat = "string",
KeywrapKek = "string",
KeywrapMack = "string",
Port = 0,
},
},
AuthServers = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateRadiusConfigAuthServerArgs
{
Host = "string",
Secret = "string",
KeywrapEnabled = false,
KeywrapFormat = "string",
KeywrapKek = "string",
KeywrapMack = "string",
Port = 0,
RequireMessageAuthenticator = false,
},
},
AuthServersRetries = 0,
AuthServersTimeout = 0,
CoaEnabled = false,
CoaPort = 0,
Network = "string",
SourceIp = "string",
},
RemoteSyslog = new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogArgs
{
Archive = new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogArchiveArgs
{
Files = 0,
Size = "string",
},
Console = new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogConsoleArgs
{
Contents = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogConsoleContentArgs
{
Facility = "string",
Severity = "string",
},
},
},
Enabled = false,
Files = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogFileArgs
{
Archive = new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogFileArchiveArgs
{
Files = 0,
Size = "string",
},
Contents = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogFileContentArgs
{
Facility = "string",
Severity = "string",
},
},
ExplicitPriority = false,
File = "string",
Match = "string",
StructuredData = false,
},
},
Network = "string",
SendToAllServers = false,
Servers = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogServerArgs
{
Contents = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogServerContentArgs
{
Facility = "string",
Severity = "string",
},
},
ExplicitPriority = false,
Facility = "string",
Host = "string",
Match = "string",
Port = 0,
Protocol = "string",
RoutingInstance = "string",
Severity = "string",
SourceAddress = "string",
StructuredData = false,
Tag = "string",
},
},
TimeFormat = "string",
Users = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogUserArgs
{
Contents = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogUserContentArgs
{
Facility = "string",
Severity = "string",
},
},
Match = "string",
User = "string",
},
},
},
RemoveExistingConfigs = false,
AclTags =
{
{ "string", new JuniperMist.Site.Inputs.NetworktemplateAclTagsArgs
{
Type = "string",
GbpTag = 0,
Macs = new[]
{
"string",
},
Network = "string",
RadiusGroup = "string",
Specs = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateAclTagsSpecArgs
{
PortRange = "string",
Protocol = "string",
},
},
Subnets = new[]
{
"string",
},
} },
},
SnmpConfig = new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigArgs
{
ClientLists = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigClientListArgs
{
ClientListName = "string",
Clients = new[]
{
"string",
},
},
},
Contact = "string",
Description = "string",
Enabled = false,
EngineId = "string",
Location = "string",
Name = "string",
Network = "string",
TrapGroups = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigTrapGroupArgs
{
Categories = new[]
{
"string",
},
GroupName = "string",
Targets = new[]
{
"string",
},
Version = "string",
},
},
V2cConfigs = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV2cConfigArgs
{
Authorization = "string",
ClientListName = "string",
CommunityName = "string",
View = "string",
},
},
V3Config = new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigArgs
{
Notifies = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigNotifyArgs
{
Name = "string",
Tag = "string",
Type = "string",
},
},
NotifyFilters = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigNotifyFilterArgs
{
Contents = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArgs
{
Include = false,
Oid = "string",
},
},
ProfileName = "string",
},
},
TargetAddresses = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigTargetAddressArgs
{
Address = "string",
AddressMask = "string",
Port = 0,
TagList = "string",
TargetAddressName = "string",
TargetParameters = "string",
},
},
TargetParameters = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigTargetParameterArgs
{
MessageProcessingModel = "string",
Name = "string",
NotifyFilter = "string",
SecurityLevel = "string",
SecurityModel = "string",
SecurityName = "string",
},
},
Usm = new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigUsmArgs
{
EngineType = "string",
Engineid = "string",
Users = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigUsmUserArgs
{
AuthenticationPassword = "string",
AuthenticationType = "string",
EncryptionPassword = "string",
EncryptionType = "string",
Name = "string",
},
},
},
Vacm = new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigVacmArgs
{
Accesses = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigVacmAccessArgs
{
GroupName = "string",
PrefixLists = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArgs
{
ContextPrefix = "string",
NotifyView = "string",
ReadView = "string",
SecurityLevel = "string",
SecurityModel = "string",
Type = "string",
WriteView = "string",
},
},
},
},
SecurityToGroup = new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupArgs
{
Contents = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArgs
{
Group = "string",
SecurityName = "string",
},
},
SecurityModel = "string",
},
},
},
Views = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigViewArgs
{
Include = false,
Oid = "string",
ViewName = "string",
},
},
},
SwitchMatching = new JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingArgs
{
Enable = false,
Rules = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingRuleArgs
{
AdditionalConfigCmds = new[]
{
"string",
},
IpConfig = new JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingRuleIpConfigArgs
{
Network = "string",
Type = "string",
},
MatchRole = "string",
MatchType = "string",
MatchValue = "string",
Name = "string",
OobIpConfig = new JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingRuleOobIpConfigArgs
{
Type = "string",
UseMgmtVrf = false,
UseMgmtVrfForHostOut = false,
},
PortConfig =
{
{ "string", new JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingRulePortConfigArgs
{
Usage = "string",
DisableAutoneg = false,
DynamicUsage = "string",
Aggregated = false,
Critical = false,
Description = "string",
AeDisableLacp = false,
Duplex = "string",
AeLacpSlow = false,
Esilag = false,
Mtu = 0,
NoLocalOverwrite = false,
PoeDisabled = false,
Speed = "string",
AeIdx = 0,
} },
},
PortMirroring =
{
{ "string", new JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingRulePortMirroringArgs
{
InputNetworksIngresses = new[]
{
"string",
},
InputPortIdsEgresses = new[]
{
"string",
},
InputPortIdsIngresses = new[]
{
"string",
},
OutputNetwork = "string",
OutputPortId = "string",
} },
},
},
},
},
SwitchMgmt = new JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtArgs
{
ApAffinityThreshold = 0,
CliBanner = "string",
CliIdleTimeout = 0,
ConfigRevertTimer = 0,
DhcpOptionFqdn = false,
DisableOobDownAlarm = false,
LocalAccounts =
{
{ "string", new JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtLocalAccountsArgs
{
Password = "string",
Role = "string",
} },
},
MxedgeProxyHost = "string",
MxedgeProxyPort = 0,
ProtectRe = new JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtProtectReArgs
{
AllowedServices = new[]
{
"string",
},
Customs = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtProtectReCustomArgs
{
Subnets = new[]
{
"string",
},
PortRange = "string",
Protocol = "string",
},
},
Enabled = false,
TrustedHosts = new[]
{
"string",
},
},
RootPassword = "string",
Tacacs = new JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtTacacsArgs
{
AcctServers = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtTacacsAcctServerArgs
{
Host = "string",
Port = "string",
Secret = "string",
Timeout = 0,
},
},
DefaultRole = "string",
Enabled = false,
Network = "string",
TacplusServers = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtTacacsTacplusServerArgs
{
Host = "string",
Port = "string",
Secret = "string",
Timeout = 0,
},
},
},
UseMxedgeProxy = false,
},
UplinkPortConfig = new JuniperMist.Site.Inputs.NetworktemplateUplinkPortConfigArgs
{
Dot1x = false,
KeepWlansUpIfDown = false,
},
VrfConfig = new JuniperMist.Site.Inputs.NetworktemplateVrfConfigArgs
{
Enabled = false,
},
AclPolicies = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateAclPolicyArgs
{
Actions = new[]
{
new JuniperMist.Site.Inputs.NetworktemplateAclPolicyActionArgs
{
DstTag = "string",
Action = "string",
},
},
Name = "string",
SrcTags = new[]
{
"string",
},
},
},
});
example, err := site.NewNetworktemplate(ctx, "junipermistNetworktemplateResource", &site.NetworktemplateArgs{
SiteId: pulumi.String("string"),
PortMirroring: site.NetworktemplatePortMirroringMap{
"string": &site.NetworktemplatePortMirroringArgs{
InputNetworksIngresses: pulumi.StringArray{
pulumi.String("string"),
},
InputPortIdsEgresses: pulumi.StringArray{
pulumi.String("string"),
},
InputPortIdsIngresses: pulumi.StringArray{
pulumi.String("string"),
},
OutputNetwork: pulumi.String("string"),
OutputPortId: pulumi.String("string"),
},
},
VrfInstances: site.NetworktemplateVrfInstancesMap{
"string": &site.NetworktemplateVrfInstancesArgs{
ExtraRoutes: site.NetworktemplateVrfInstancesExtraRoutesMap{
"string": &site.NetworktemplateVrfInstancesExtraRoutesArgs{
Via: pulumi.String("string"),
},
},
Networks: pulumi.StringArray{
pulumi.String("string"),
},
},
},
OspfAreas: site.NetworktemplateOspfAreasMap{
"string": &site.NetworktemplateOspfAreasArgs{
OspfNetworks: site.NetworktemplateOspfAreasOspfNetworksMap{
"string": &site.NetworktemplateOspfAreasOspfNetworksArgs{
AuthKeys: pulumi.StringMap{
"string": pulumi.String("string"),
},
AuthPassword: pulumi.String("string"),
AuthType: pulumi.String("string"),
BfdMinimumInterval: pulumi.Int(0),
DeadInterval: pulumi.Int(0),
ExportPolicy: pulumi.String("string"),
HelloInterval: pulumi.Int(0),
ImportPolicy: pulumi.String("string"),
InterfaceType: pulumi.String("string"),
Metric: pulumi.Int(0),
NoReadvertiseToOverlay: pulumi.Bool(false),
Passive: pulumi.Bool(false),
},
},
IncludeLoopback: pulumi.Bool(false),
Type: pulumi.String("string"),
},
},
DnsServers: pulumi.StringArray{
pulumi.String("string"),
},
DnsSuffixes: pulumi.StringArray{
pulumi.String("string"),
},
ExtraRoutes: site.NetworktemplateExtraRoutesMap{
"string": &site.NetworktemplateExtraRoutesArgs{
Via: pulumi.String("string"),
Discard: pulumi.Bool(false),
Metric: pulumi.Int(0),
NextQualified: site.NetworktemplateExtraRoutesNextQualifiedMap{
"string": &site.NetworktemplateExtraRoutesNextQualifiedArgs{
Metric: pulumi.Int(0),
Preference: pulumi.Int(0),
},
},
NoResolve: pulumi.Bool(false),
Preference: pulumi.Int(0),
},
},
ExtraRoutes6: site.NetworktemplateExtraRoutes6Map{
"string": &site.NetworktemplateExtraRoutes6Args{
Via: pulumi.String("string"),
Discard: pulumi.Bool(false),
Metric: pulumi.Int(0),
NextQualified: site.NetworktemplateExtraRoutes6NextQualifiedMap{
"string": &site.NetworktemplateExtraRoutes6NextQualifiedArgs{
Metric: pulumi.Int(0),
Preference: pulumi.Int(0),
},
},
NoResolve: pulumi.Bool(false),
Preference: pulumi.Int(0),
},
},
MistNac: &site.NetworktemplateMistNacArgs{
Enabled: pulumi.Bool(false),
Network: pulumi.String("string"),
},
Networks: site.NetworktemplateNetworksMap{
"string": &site.NetworktemplateNetworksArgs{
VlanId: pulumi.String("string"),
Isolation: pulumi.Bool(false),
IsolationVlanId: pulumi.String("string"),
Subnet: pulumi.String("string"),
},
},
PortUsages: site.NetworktemplatePortUsagesMap{
"string": &site.NetworktemplatePortUsagesArgs{
AllNetworks: pulumi.Bool(false),
AllowDhcpd: pulumi.Bool(false),
AllowMultipleSupplicants: pulumi.Bool(false),
BypassAuthWhenServerDown: pulumi.Bool(false),
BypassAuthWhenServerDownForUnkonwnClient: pulumi.Bool(false),
Description: pulumi.String("string"),
DisableAutoneg: pulumi.Bool(false),
Disabled: pulumi.Bool(false),
Duplex: pulumi.String("string"),
DynamicVlanNetworks: pulumi.StringArray{
pulumi.String("string"),
},
EnableMacAuth: pulumi.Bool(false),
EnableQos: pulumi.Bool(false),
GuestNetwork: pulumi.String("string"),
InterSwitchLink: pulumi.Bool(false),
MacAuthOnly: pulumi.Bool(false),
MacAuthPreferred: pulumi.Bool(false),
MacAuthProtocol: pulumi.String("string"),
MacLimit: pulumi.Int(0),
Mode: pulumi.String("string"),
Mtu: pulumi.Int(0),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
PersistMac: pulumi.Bool(false),
PoeDisabled: pulumi.Bool(false),
PortAuth: pulumi.String("string"),
PortNetwork: pulumi.String("string"),
ReauthInterval: pulumi.Int(0),
ResetDefaultWhen: pulumi.String("string"),
Rules: site.NetworktemplatePortUsagesRuleArray{
&site.NetworktemplatePortUsagesRuleArgs{
Src: pulumi.String("string"),
Equals: pulumi.String("string"),
EqualsAnies: pulumi.StringArray{
pulumi.String("string"),
},
Expression: pulumi.String("string"),
Usage: pulumi.String("string"),
},
},
ServerFailNetwork: pulumi.String("string"),
ServerRejectNetwork: pulumi.String("string"),
Speed: pulumi.String("string"),
StormControl: &site.NetworktemplatePortUsagesStormControlArgs{
NoBroadcast: pulumi.Bool(false),
NoMulticast: pulumi.Bool(false),
NoRegisteredMulticast: pulumi.Bool(false),
NoUnknownUnicast: pulumi.Bool(false),
Percentage: pulumi.Int(0),
},
StpEdge: pulumi.Bool(false),
StpNoRootPort: pulumi.Bool(false),
StpP2p: pulumi.Bool(false),
VoipNetwork: pulumi.String("string"),
},
},
DhcpSnooping: &site.NetworktemplateDhcpSnoopingArgs{
AllNetworks: pulumi.Bool(false),
EnableArpSpoofCheck: pulumi.Bool(false),
EnableIpSourceGuard: pulumi.Bool(false),
Enabled: pulumi.Bool(false),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
},
AdditionalConfigCmds: pulumi.StringArray{
pulumi.String("string"),
},
NtpServers: pulumi.StringArray{
pulumi.String("string"),
},
RadiusConfig: &site.NetworktemplateRadiusConfigArgs{
AcctInterimInterval: pulumi.Int(0),
AcctServers: site.NetworktemplateRadiusConfigAcctServerArray{
&site.NetworktemplateRadiusConfigAcctServerArgs{
Host: pulumi.String("string"),
Secret: pulumi.String("string"),
KeywrapEnabled: pulumi.Bool(false),
KeywrapFormat: pulumi.String("string"),
KeywrapKek: pulumi.String("string"),
KeywrapMack: pulumi.String("string"),
Port: pulumi.Int(0),
},
},
AuthServers: site.NetworktemplateRadiusConfigAuthServerArray{
&site.NetworktemplateRadiusConfigAuthServerArgs{
Host: pulumi.String("string"),
Secret: pulumi.String("string"),
KeywrapEnabled: pulumi.Bool(false),
KeywrapFormat: pulumi.String("string"),
KeywrapKek: pulumi.String("string"),
KeywrapMack: pulumi.String("string"),
Port: pulumi.Int(0),
RequireMessageAuthenticator: pulumi.Bool(false),
},
},
AuthServersRetries: pulumi.Int(0),
AuthServersTimeout: pulumi.Int(0),
CoaEnabled: pulumi.Bool(false),
CoaPort: pulumi.Int(0),
Network: pulumi.String("string"),
SourceIp: pulumi.String("string"),
},
RemoteSyslog: &site.NetworktemplateRemoteSyslogArgs{
Archive: &site.NetworktemplateRemoteSyslogArchiveArgs{
Files: pulumi.Int(0),
Size: pulumi.String("string"),
},
Console: &site.NetworktemplateRemoteSyslogConsoleArgs{
Contents: site.NetworktemplateRemoteSyslogConsoleContentArray{
&site.NetworktemplateRemoteSyslogConsoleContentArgs{
Facility: pulumi.String("string"),
Severity: pulumi.String("string"),
},
},
},
Enabled: pulumi.Bool(false),
Files: site.NetworktemplateRemoteSyslogFileArray{
&site.NetworktemplateRemoteSyslogFileArgs{
Archive: &site.NetworktemplateRemoteSyslogFileArchiveArgs{
Files: pulumi.Int(0),
Size: pulumi.String("string"),
},
Contents: site.NetworktemplateRemoteSyslogFileContentArray{
&site.NetworktemplateRemoteSyslogFileContentArgs{
Facility: pulumi.String("string"),
Severity: pulumi.String("string"),
},
},
ExplicitPriority: pulumi.Bool(false),
File: pulumi.String("string"),
Match: pulumi.String("string"),
StructuredData: pulumi.Bool(false),
},
},
Network: pulumi.String("string"),
SendToAllServers: pulumi.Bool(false),
Servers: site.NetworktemplateRemoteSyslogServerArray{
&site.NetworktemplateRemoteSyslogServerArgs{
Contents: site.NetworktemplateRemoteSyslogServerContentArray{
&site.NetworktemplateRemoteSyslogServerContentArgs{
Facility: pulumi.String("string"),
Severity: pulumi.String("string"),
},
},
ExplicitPriority: pulumi.Bool(false),
Facility: pulumi.String("string"),
Host: pulumi.String("string"),
Match: pulumi.String("string"),
Port: pulumi.Int(0),
Protocol: pulumi.String("string"),
RoutingInstance: pulumi.String("string"),
Severity: pulumi.String("string"),
SourceAddress: pulumi.String("string"),
StructuredData: pulumi.Bool(false),
Tag: pulumi.String("string"),
},
},
TimeFormat: pulumi.String("string"),
Users: site.NetworktemplateRemoteSyslogUserArray{
&site.NetworktemplateRemoteSyslogUserArgs{
Contents: site.NetworktemplateRemoteSyslogUserContentArray{
&site.NetworktemplateRemoteSyslogUserContentArgs{
Facility: pulumi.String("string"),
Severity: pulumi.String("string"),
},
},
Match: pulumi.String("string"),
User: pulumi.String("string"),
},
},
},
RemoveExistingConfigs: pulumi.Bool(false),
AclTags: site.NetworktemplateAclTagsMap{
"string": &site.NetworktemplateAclTagsArgs{
Type: pulumi.String("string"),
GbpTag: pulumi.Int(0),
Macs: pulumi.StringArray{
pulumi.String("string"),
},
Network: pulumi.String("string"),
RadiusGroup: pulumi.String("string"),
Specs: site.NetworktemplateAclTagsSpecArray{
&site.NetworktemplateAclTagsSpecArgs{
PortRange: pulumi.String("string"),
Protocol: pulumi.String("string"),
},
},
Subnets: pulumi.StringArray{
pulumi.String("string"),
},
},
},
SnmpConfig: &site.NetworktemplateSnmpConfigArgs{
ClientLists: site.NetworktemplateSnmpConfigClientListArray{
&site.NetworktemplateSnmpConfigClientListArgs{
ClientListName: pulumi.String("string"),
Clients: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Contact: pulumi.String("string"),
Description: pulumi.String("string"),
Enabled: pulumi.Bool(false),
EngineId: pulumi.String("string"),
Location: pulumi.String("string"),
Name: pulumi.String("string"),
Network: pulumi.String("string"),
TrapGroups: site.NetworktemplateSnmpConfigTrapGroupArray{
&site.NetworktemplateSnmpConfigTrapGroupArgs{
Categories: pulumi.StringArray{
pulumi.String("string"),
},
GroupName: pulumi.String("string"),
Targets: pulumi.StringArray{
pulumi.String("string"),
},
Version: pulumi.String("string"),
},
},
V2cConfigs: site.NetworktemplateSnmpConfigV2cConfigArray{
&site.NetworktemplateSnmpConfigV2cConfigArgs{
Authorization: pulumi.String("string"),
ClientListName: pulumi.String("string"),
CommunityName: pulumi.String("string"),
View: pulumi.String("string"),
},
},
V3Config: &site.NetworktemplateSnmpConfigV3ConfigArgs{
Notifies: site.NetworktemplateSnmpConfigV3ConfigNotifyArray{
&site.NetworktemplateSnmpConfigV3ConfigNotifyArgs{
Name: pulumi.String("string"),
Tag: pulumi.String("string"),
Type: pulumi.String("string"),
},
},
NotifyFilters: site.NetworktemplateSnmpConfigV3ConfigNotifyFilterArray{
&site.NetworktemplateSnmpConfigV3ConfigNotifyFilterArgs{
Contents: site.NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArray{
&site.NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArgs{
Include: pulumi.Bool(false),
Oid: pulumi.String("string"),
},
},
ProfileName: pulumi.String("string"),
},
},
TargetAddresses: site.NetworktemplateSnmpConfigV3ConfigTargetAddressArray{
&site.NetworktemplateSnmpConfigV3ConfigTargetAddressArgs{
Address: pulumi.String("string"),
AddressMask: pulumi.String("string"),
Port: pulumi.Int(0),
TagList: pulumi.String("string"),
TargetAddressName: pulumi.String("string"),
TargetParameters: pulumi.String("string"),
},
},
TargetParameters: site.NetworktemplateSnmpConfigV3ConfigTargetParameterArray{
&site.NetworktemplateSnmpConfigV3ConfigTargetParameterArgs{
MessageProcessingModel: pulumi.String("string"),
Name: pulumi.String("string"),
NotifyFilter: pulumi.String("string"),
SecurityLevel: pulumi.String("string"),
SecurityModel: pulumi.String("string"),
SecurityName: pulumi.String("string"),
},
},
Usm: &site.NetworktemplateSnmpConfigV3ConfigUsmArgs{
EngineType: pulumi.String("string"),
Engineid: pulumi.String("string"),
Users: site.NetworktemplateSnmpConfigV3ConfigUsmUserArray{
&site.NetworktemplateSnmpConfigV3ConfigUsmUserArgs{
AuthenticationPassword: pulumi.String("string"),
AuthenticationType: pulumi.String("string"),
EncryptionPassword: pulumi.String("string"),
EncryptionType: pulumi.String("string"),
Name: pulumi.String("string"),
},
},
},
Vacm: &site.NetworktemplateSnmpConfigV3ConfigVacmArgs{
Accesses: site.NetworktemplateSnmpConfigV3ConfigVacmAccessArray{
&site.NetworktemplateSnmpConfigV3ConfigVacmAccessArgs{
GroupName: pulumi.String("string"),
PrefixLists: site.NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArray{
&site.NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArgs{
ContextPrefix: pulumi.String("string"),
NotifyView: pulumi.String("string"),
ReadView: pulumi.String("string"),
SecurityLevel: pulumi.String("string"),
SecurityModel: pulumi.String("string"),
Type: pulumi.String("string"),
WriteView: pulumi.String("string"),
},
},
},
},
SecurityToGroup: &site.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupArgs{
Contents: site.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArray{
&site.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArgs{
Group: pulumi.String("string"),
SecurityName: pulumi.String("string"),
},
},
SecurityModel: pulumi.String("string"),
},
},
},
Views: site.NetworktemplateSnmpConfigViewArray{
&site.NetworktemplateSnmpConfigViewArgs{
Include: pulumi.Bool(false),
Oid: pulumi.String("string"),
ViewName: pulumi.String("string"),
},
},
},
SwitchMatching: &site.NetworktemplateSwitchMatchingArgs{
Enable: pulumi.Bool(false),
Rules: site.NetworktemplateSwitchMatchingRuleArray{
&site.NetworktemplateSwitchMatchingRuleArgs{
AdditionalConfigCmds: pulumi.StringArray{
pulumi.String("string"),
},
IpConfig: &site.NetworktemplateSwitchMatchingRuleIpConfigArgs{
Network: pulumi.String("string"),
Type: pulumi.String("string"),
},
MatchRole: pulumi.String("string"),
MatchType: pulumi.String("string"),
MatchValue: pulumi.String("string"),
Name: pulumi.String("string"),
OobIpConfig: &site.NetworktemplateSwitchMatchingRuleOobIpConfigArgs{
Type: pulumi.String("string"),
UseMgmtVrf: pulumi.Bool(false),
UseMgmtVrfForHostOut: pulumi.Bool(false),
},
PortConfig: site.NetworktemplateSwitchMatchingRulePortConfigMap{
"string": &site.NetworktemplateSwitchMatchingRulePortConfigArgs{
Usage: pulumi.String("string"),
DisableAutoneg: pulumi.Bool(false),
DynamicUsage: pulumi.String("string"),
Aggregated: pulumi.Bool(false),
Critical: pulumi.Bool(false),
Description: pulumi.String("string"),
AeDisableLacp: pulumi.Bool(false),
Duplex: pulumi.String("string"),
AeLacpSlow: pulumi.Bool(false),
Esilag: pulumi.Bool(false),
Mtu: pulumi.Int(0),
NoLocalOverwrite: pulumi.Bool(false),
PoeDisabled: pulumi.Bool(false),
Speed: pulumi.String("string"),
AeIdx: pulumi.Int(0),
},
},
PortMirroring: site.NetworktemplateSwitchMatchingRulePortMirroringMap{
"string": &site.NetworktemplateSwitchMatchingRulePortMirroringArgs{
InputNetworksIngresses: pulumi.StringArray{
pulumi.String("string"),
},
InputPortIdsEgresses: pulumi.StringArray{
pulumi.String("string"),
},
InputPortIdsIngresses: pulumi.StringArray{
pulumi.String("string"),
},
OutputNetwork: pulumi.String("string"),
OutputPortId: pulumi.String("string"),
},
},
},
},
},
SwitchMgmt: &site.NetworktemplateSwitchMgmtArgs{
ApAffinityThreshold: pulumi.Int(0),
CliBanner: pulumi.String("string"),
CliIdleTimeout: pulumi.Int(0),
ConfigRevertTimer: pulumi.Int(0),
DhcpOptionFqdn: pulumi.Bool(false),
DisableOobDownAlarm: pulumi.Bool(false),
LocalAccounts: site.NetworktemplateSwitchMgmtLocalAccountsMap{
"string": &site.NetworktemplateSwitchMgmtLocalAccountsArgs{
Password: pulumi.String("string"),
Role: pulumi.String("string"),
},
},
MxedgeProxyHost: pulumi.String("string"),
MxedgeProxyPort: pulumi.Int(0),
ProtectRe: &site.NetworktemplateSwitchMgmtProtectReArgs{
AllowedServices: pulumi.StringArray{
pulumi.String("string"),
},
Customs: site.NetworktemplateSwitchMgmtProtectReCustomArray{
&site.NetworktemplateSwitchMgmtProtectReCustomArgs{
Subnets: pulumi.StringArray{
pulumi.String("string"),
},
PortRange: pulumi.String("string"),
Protocol: pulumi.String("string"),
},
},
Enabled: pulumi.Bool(false),
TrustedHosts: pulumi.StringArray{
pulumi.String("string"),
},
},
RootPassword: pulumi.String("string"),
Tacacs: &site.NetworktemplateSwitchMgmtTacacsArgs{
AcctServers: site.NetworktemplateSwitchMgmtTacacsAcctServerArray{
&site.NetworktemplateSwitchMgmtTacacsAcctServerArgs{
Host: pulumi.String("string"),
Port: pulumi.String("string"),
Secret: pulumi.String("string"),
Timeout: pulumi.Int(0),
},
},
DefaultRole: pulumi.String("string"),
Enabled: pulumi.Bool(false),
Network: pulumi.String("string"),
TacplusServers: site.NetworktemplateSwitchMgmtTacacsTacplusServerArray{
&site.NetworktemplateSwitchMgmtTacacsTacplusServerArgs{
Host: pulumi.String("string"),
Port: pulumi.String("string"),
Secret: pulumi.String("string"),
Timeout: pulumi.Int(0),
},
},
},
UseMxedgeProxy: pulumi.Bool(false),
},
UplinkPortConfig: &site.NetworktemplateUplinkPortConfigArgs{
Dot1x: pulumi.Bool(false),
KeepWlansUpIfDown: pulumi.Bool(false),
},
VrfConfig: &site.NetworktemplateVrfConfigArgs{
Enabled: pulumi.Bool(false),
},
AclPolicies: site.NetworktemplateAclPolicyArray{
&site.NetworktemplateAclPolicyArgs{
Actions: site.NetworktemplateAclPolicyActionArray{
&site.NetworktemplateAclPolicyActionArgs{
DstTag: pulumi.String("string"),
Action: pulumi.String("string"),
},
},
Name: pulumi.String("string"),
SrcTags: pulumi.StringArray{
pulumi.String("string"),
},
},
},
})
var junipermistNetworktemplateResource = new Networktemplate("junipermistNetworktemplateResource", NetworktemplateArgs.builder()
.siteId("string")
.portMirroring(Map.of("string", Map.ofEntries(
Map.entry("inputNetworksIngresses", "string"),
Map.entry("inputPortIdsEgresses", "string"),
Map.entry("inputPortIdsIngresses", "string"),
Map.entry("outputNetwork", "string"),
Map.entry("outputPortId", "string")
)))
.vrfInstances(Map.of("string", Map.ofEntries(
Map.entry("extraRoutes", Map.of("string", Map.of("via", "string"))),
Map.entry("networks", "string")
)))
.ospfAreas(Map.of("string", Map.ofEntries(
Map.entry("ospfNetworks", Map.of("string", Map.ofEntries(
Map.entry("authKeys", Map.of("string", "string")),
Map.entry("authPassword", "string"),
Map.entry("authType", "string"),
Map.entry("bfdMinimumInterval", 0),
Map.entry("deadInterval", 0),
Map.entry("exportPolicy", "string"),
Map.entry("helloInterval", 0),
Map.entry("importPolicy", "string"),
Map.entry("interfaceType", "string"),
Map.entry("metric", 0),
Map.entry("noReadvertiseToOverlay", false),
Map.entry("passive", false)
))),
Map.entry("includeLoopback", false),
Map.entry("type", "string")
)))
.dnsServers("string")
.dnsSuffixes("string")
.extraRoutes(Map.of("string", Map.ofEntries(
Map.entry("via", "string"),
Map.entry("discard", false),
Map.entry("metric", 0),
Map.entry("nextQualified", Map.of("string", Map.ofEntries(
Map.entry("metric", 0),
Map.entry("preference", 0)
))),
Map.entry("noResolve", false),
Map.entry("preference", 0)
)))
.extraRoutes6(Map.of("string", Map.ofEntries(
Map.entry("via", "string"),
Map.entry("discard", false),
Map.entry("metric", 0),
Map.entry("nextQualified", Map.of("string", Map.ofEntries(
Map.entry("metric", 0),
Map.entry("preference", 0)
))),
Map.entry("noResolve", false),
Map.entry("preference", 0)
)))
.mistNac(NetworktemplateMistNacArgs.builder()
.enabled(false)
.network("string")
.build())
.networks(Map.of("string", Map.ofEntries(
Map.entry("vlanId", "string"),
Map.entry("isolation", false),
Map.entry("isolationVlanId", "string"),
Map.entry("subnet", "string")
)))
.portUsages(Map.of("string", Map.ofEntries(
Map.entry("allNetworks", false),
Map.entry("allowDhcpd", false),
Map.entry("allowMultipleSupplicants", false),
Map.entry("bypassAuthWhenServerDown", false),
Map.entry("bypassAuthWhenServerDownForUnkonwnClient", false),
Map.entry("description", "string"),
Map.entry("disableAutoneg", false),
Map.entry("disabled", false),
Map.entry("duplex", "string"),
Map.entry("dynamicVlanNetworks", "string"),
Map.entry("enableMacAuth", false),
Map.entry("enableQos", false),
Map.entry("guestNetwork", "string"),
Map.entry("interSwitchLink", false),
Map.entry("macAuthOnly", false),
Map.entry("macAuthPreferred", false),
Map.entry("macAuthProtocol", "string"),
Map.entry("macLimit", 0),
Map.entry("mode", "string"),
Map.entry("mtu", 0),
Map.entry("networks", "string"),
Map.entry("persistMac", false),
Map.entry("poeDisabled", false),
Map.entry("portAuth", "string"),
Map.entry("portNetwork", "string"),
Map.entry("reauthInterval", 0),
Map.entry("resetDefaultWhen", "string"),
Map.entry("rules", Map.ofEntries(
Map.entry("src", "string"),
Map.entry("equals", "string"),
Map.entry("equalsAnies", "string"),
Map.entry("expression", "string"),
Map.entry("usage", "string")
)),
Map.entry("serverFailNetwork", "string"),
Map.entry("serverRejectNetwork", "string"),
Map.entry("speed", "string"),
Map.entry("stormControl", Map.ofEntries(
Map.entry("noBroadcast", false),
Map.entry("noMulticast", false),
Map.entry("noRegisteredMulticast", false),
Map.entry("noUnknownUnicast", false),
Map.entry("percentage", 0)
)),
Map.entry("stpEdge", false),
Map.entry("stpNoRootPort", false),
Map.entry("stpP2p", false),
Map.entry("voipNetwork", "string")
)))
.dhcpSnooping(NetworktemplateDhcpSnoopingArgs.builder()
.allNetworks(false)
.enableArpSpoofCheck(false)
.enableIpSourceGuard(false)
.enabled(false)
.networks("string")
.build())
.additionalConfigCmds("string")
.ntpServers("string")
.radiusConfig(NetworktemplateRadiusConfigArgs.builder()
.acctInterimInterval(0)
.acctServers(NetworktemplateRadiusConfigAcctServerArgs.builder()
.host("string")
.secret("string")
.keywrapEnabled(false)
.keywrapFormat("string")
.keywrapKek("string")
.keywrapMack("string")
.port(0)
.build())
.authServers(NetworktemplateRadiusConfigAuthServerArgs.builder()
.host("string")
.secret("string")
.keywrapEnabled(false)
.keywrapFormat("string")
.keywrapKek("string")
.keywrapMack("string")
.port(0)
.requireMessageAuthenticator(false)
.build())
.authServersRetries(0)
.authServersTimeout(0)
.coaEnabled(false)
.coaPort(0)
.network("string")
.sourceIp("string")
.build())
.remoteSyslog(NetworktemplateRemoteSyslogArgs.builder()
.archive(NetworktemplateRemoteSyslogArchiveArgs.builder()
.files(0)
.size("string")
.build())
.console(NetworktemplateRemoteSyslogConsoleArgs.builder()
.contents(NetworktemplateRemoteSyslogConsoleContentArgs.builder()
.facility("string")
.severity("string")
.build())
.build())
.enabled(false)
.files(NetworktemplateRemoteSyslogFileArgs.builder()
.archive(NetworktemplateRemoteSyslogFileArchiveArgs.builder()
.files(0)
.size("string")
.build())
.contents(NetworktemplateRemoteSyslogFileContentArgs.builder()
.facility("string")
.severity("string")
.build())
.explicitPriority(false)
.file("string")
.match("string")
.structuredData(false)
.build())
.network("string")
.sendToAllServers(false)
.servers(NetworktemplateRemoteSyslogServerArgs.builder()
.contents(NetworktemplateRemoteSyslogServerContentArgs.builder()
.facility("string")
.severity("string")
.build())
.explicitPriority(false)
.facility("string")
.host("string")
.match("string")
.port(0)
.protocol("string")
.routingInstance("string")
.severity("string")
.sourceAddress("string")
.structuredData(false)
.tag("string")
.build())
.timeFormat("string")
.users(NetworktemplateRemoteSyslogUserArgs.builder()
.contents(NetworktemplateRemoteSyslogUserContentArgs.builder()
.facility("string")
.severity("string")
.build())
.match("string")
.user("string")
.build())
.build())
.removeExistingConfigs(false)
.aclTags(Map.of("string", Map.ofEntries(
Map.entry("type", "string"),
Map.entry("gbpTag", 0),
Map.entry("macs", "string"),
Map.entry("network", "string"),
Map.entry("radiusGroup", "string"),
Map.entry("specs", Map.ofEntries(
Map.entry("portRange", "string"),
Map.entry("protocol", "string")
)),
Map.entry("subnets", "string")
)))
.snmpConfig(NetworktemplateSnmpConfigArgs.builder()
.clientLists(NetworktemplateSnmpConfigClientListArgs.builder()
.clientListName("string")
.clients("string")
.build())
.contact("string")
.description("string")
.enabled(false)
.engineId("string")
.location("string")
.name("string")
.network("string")
.trapGroups(NetworktemplateSnmpConfigTrapGroupArgs.builder()
.categories("string")
.groupName("string")
.targets("string")
.version("string")
.build())
.v2cConfigs(NetworktemplateSnmpConfigV2cConfigArgs.builder()
.authorization("string")
.clientListName("string")
.communityName("string")
.view("string")
.build())
.v3Config(NetworktemplateSnmpConfigV3ConfigArgs.builder()
.notifies(NetworktemplateSnmpConfigV3ConfigNotifyArgs.builder()
.name("string")
.tag("string")
.type("string")
.build())
.notifyFilters(NetworktemplateSnmpConfigV3ConfigNotifyFilterArgs.builder()
.contents(NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArgs.builder()
.include(false)
.oid("string")
.build())
.profileName("string")
.build())
.targetAddresses(NetworktemplateSnmpConfigV3ConfigTargetAddressArgs.builder()
.address("string")
.addressMask("string")
.port(0)
.tagList("string")
.targetAddressName("string")
.targetParameters("string")
.build())
.targetParameters(NetworktemplateSnmpConfigV3ConfigTargetParameterArgs.builder()
.messageProcessingModel("string")
.name("string")
.notifyFilter("string")
.securityLevel("string")
.securityModel("string")
.securityName("string")
.build())
.usm(NetworktemplateSnmpConfigV3ConfigUsmArgs.builder()
.engineType("string")
.engineid("string")
.users(NetworktemplateSnmpConfigV3ConfigUsmUserArgs.builder()
.authenticationPassword("string")
.authenticationType("string")
.encryptionPassword("string")
.encryptionType("string")
.name("string")
.build())
.build())
.vacm(NetworktemplateSnmpConfigV3ConfigVacmArgs.builder()
.accesses(NetworktemplateSnmpConfigV3ConfigVacmAccessArgs.builder()
.groupName("string")
.prefixLists(NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArgs.builder()
.contextPrefix("string")
.notifyView("string")
.readView("string")
.securityLevel("string")
.securityModel("string")
.type("string")
.writeView("string")
.build())
.build())
.securityToGroup(NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupArgs.builder()
.contents(NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArgs.builder()
.group("string")
.securityName("string")
.build())
.securityModel("string")
.build())
.build())
.build())
.views(NetworktemplateSnmpConfigViewArgs.builder()
.include(false)
.oid("string")
.viewName("string")
.build())
.build())
.switchMatching(NetworktemplateSwitchMatchingArgs.builder()
.enable(false)
.rules(NetworktemplateSwitchMatchingRuleArgs.builder()
.additionalConfigCmds("string")
.ipConfig(NetworktemplateSwitchMatchingRuleIpConfigArgs.builder()
.network("string")
.type("string")
.build())
.matchRole("string")
.matchType("string")
.matchValue("string")
.name("string")
.oobIpConfig(NetworktemplateSwitchMatchingRuleOobIpConfigArgs.builder()
.type("string")
.useMgmtVrf(false)
.useMgmtVrfForHostOut(false)
.build())
.portConfig(Map.of("string", Map.ofEntries(
Map.entry("usage", "string"),
Map.entry("disableAutoneg", false),
Map.entry("dynamicUsage", "string"),
Map.entry("aggregated", false),
Map.entry("critical", false),
Map.entry("description", "string"),
Map.entry("aeDisableLacp", false),
Map.entry("duplex", "string"),
Map.entry("aeLacpSlow", false),
Map.entry("esilag", false),
Map.entry("mtu", 0),
Map.entry("noLocalOverwrite", false),
Map.entry("poeDisabled", false),
Map.entry("speed", "string"),
Map.entry("aeIdx", 0)
)))
.portMirroring(Map.of("string", Map.ofEntries(
Map.entry("inputNetworksIngresses", "string"),
Map.entry("inputPortIdsEgresses", "string"),
Map.entry("inputPortIdsIngresses", "string"),
Map.entry("outputNetwork", "string"),
Map.entry("outputPortId", "string")
)))
.build())
.build())
.switchMgmt(NetworktemplateSwitchMgmtArgs.builder()
.apAffinityThreshold(0)
.cliBanner("string")
.cliIdleTimeout(0)
.configRevertTimer(0)
.dhcpOptionFqdn(false)
.disableOobDownAlarm(false)
.localAccounts(Map.of("string", Map.ofEntries(
Map.entry("password", "string"),
Map.entry("role", "string")
)))
.mxedgeProxyHost("string")
.mxedgeProxyPort(0)
.protectRe(NetworktemplateSwitchMgmtProtectReArgs.builder()
.allowedServices("string")
.customs(NetworktemplateSwitchMgmtProtectReCustomArgs.builder()
.subnets("string")
.portRange("string")
.protocol("string")
.build())
.enabled(false)
.trustedHosts("string")
.build())
.rootPassword("string")
.tacacs(NetworktemplateSwitchMgmtTacacsArgs.builder()
.acctServers(NetworktemplateSwitchMgmtTacacsAcctServerArgs.builder()
.host("string")
.port("string")
.secret("string")
.timeout(0)
.build())
.defaultRole("string")
.enabled(false)
.network("string")
.tacplusServers(NetworktemplateSwitchMgmtTacacsTacplusServerArgs.builder()
.host("string")
.port("string")
.secret("string")
.timeout(0)
.build())
.build())
.useMxedgeProxy(false)
.build())
.uplinkPortConfig(NetworktemplateUplinkPortConfigArgs.builder()
.dot1x(false)
.keepWlansUpIfDown(false)
.build())
.vrfConfig(NetworktemplateVrfConfigArgs.builder()
.enabled(false)
.build())
.aclPolicies(NetworktemplateAclPolicyArgs.builder()
.actions(NetworktemplateAclPolicyActionArgs.builder()
.dstTag("string")
.action("string")
.build())
.name("string")
.srcTags("string")
.build())
.build());
junipermist_networktemplate_resource = junipermist.site.Networktemplate("junipermistNetworktemplateResource",
site_id="string",
port_mirroring={
"string": junipermist.site.NetworktemplatePortMirroringArgs(
input_networks_ingresses=["string"],
input_port_ids_egresses=["string"],
input_port_ids_ingresses=["string"],
output_network="string",
output_port_id="string",
),
},
vrf_instances={
"string": junipermist.site.NetworktemplateVrfInstancesArgs(
extra_routes={
"string": junipermist.site.NetworktemplateVrfInstancesExtraRoutesArgs(
via="string",
),
},
networks=["string"],
),
},
ospf_areas={
"string": junipermist.site.NetworktemplateOspfAreasArgs(
ospf_networks={
"string": junipermist.site.NetworktemplateOspfAreasOspfNetworksArgs(
auth_keys={
"string": "string",
},
auth_password="string",
auth_type="string",
bfd_minimum_interval=0,
dead_interval=0,
export_policy="string",
hello_interval=0,
import_policy="string",
interface_type="string",
metric=0,
no_readvertise_to_overlay=False,
passive=False,
),
},
include_loopback=False,
type="string",
),
},
dns_servers=["string"],
dns_suffixes=["string"],
extra_routes={
"string": junipermist.site.NetworktemplateExtraRoutesArgs(
via="string",
discard=False,
metric=0,
next_qualified={
"string": junipermist.site.NetworktemplateExtraRoutesNextQualifiedArgs(
metric=0,
preference=0,
),
},
no_resolve=False,
preference=0,
),
},
extra_routes6={
"string": junipermist.site.NetworktemplateExtraRoutes6Args(
via="string",
discard=False,
metric=0,
next_qualified={
"string": junipermist.site.NetworktemplateExtraRoutes6NextQualifiedArgs(
metric=0,
preference=0,
),
},
no_resolve=False,
preference=0,
),
},
mist_nac=junipermist.site.NetworktemplateMistNacArgs(
enabled=False,
network="string",
),
networks={
"string": junipermist.site.NetworktemplateNetworksArgs(
vlan_id="string",
isolation=False,
isolation_vlan_id="string",
subnet="string",
),
},
port_usages={
"string": junipermist.site.NetworktemplatePortUsagesArgs(
all_networks=False,
allow_dhcpd=False,
allow_multiple_supplicants=False,
bypass_auth_when_server_down=False,
bypass_auth_when_server_down_for_unkonwn_client=False,
description="string",
disable_autoneg=False,
disabled=False,
duplex="string",
dynamic_vlan_networks=["string"],
enable_mac_auth=False,
enable_qos=False,
guest_network="string",
inter_switch_link=False,
mac_auth_only=False,
mac_auth_preferred=False,
mac_auth_protocol="string",
mac_limit=0,
mode="string",
mtu=0,
networks=["string"],
persist_mac=False,
poe_disabled=False,
port_auth="string",
port_network="string",
reauth_interval=0,
reset_default_when="string",
rules=[junipermist.site.NetworktemplatePortUsagesRuleArgs(
src="string",
equals="string",
equals_anies=["string"],
expression="string",
usage="string",
)],
server_fail_network="string",
server_reject_network="string",
speed="string",
storm_control=junipermist.site.NetworktemplatePortUsagesStormControlArgs(
no_broadcast=False,
no_multicast=False,
no_registered_multicast=False,
no_unknown_unicast=False,
percentage=0,
),
stp_edge=False,
stp_no_root_port=False,
stp_p2p=False,
voip_network="string",
),
},
dhcp_snooping=junipermist.site.NetworktemplateDhcpSnoopingArgs(
all_networks=False,
enable_arp_spoof_check=False,
enable_ip_source_guard=False,
enabled=False,
networks=["string"],
),
additional_config_cmds=["string"],
ntp_servers=["string"],
radius_config=junipermist.site.NetworktemplateRadiusConfigArgs(
acct_interim_interval=0,
acct_servers=[junipermist.site.NetworktemplateRadiusConfigAcctServerArgs(
host="string",
secret="string",
keywrap_enabled=False,
keywrap_format="string",
keywrap_kek="string",
keywrap_mack="string",
port=0,
)],
auth_servers=[junipermist.site.NetworktemplateRadiusConfigAuthServerArgs(
host="string",
secret="string",
keywrap_enabled=False,
keywrap_format="string",
keywrap_kek="string",
keywrap_mack="string",
port=0,
require_message_authenticator=False,
)],
auth_servers_retries=0,
auth_servers_timeout=0,
coa_enabled=False,
coa_port=0,
network="string",
source_ip="string",
),
remote_syslog=junipermist.site.NetworktemplateRemoteSyslogArgs(
archive=junipermist.site.NetworktemplateRemoteSyslogArchiveArgs(
files=0,
size="string",
),
console=junipermist.site.NetworktemplateRemoteSyslogConsoleArgs(
contents=[junipermist.site.NetworktemplateRemoteSyslogConsoleContentArgs(
facility="string",
severity="string",
)],
),
enabled=False,
files=[junipermist.site.NetworktemplateRemoteSyslogFileArgs(
archive=junipermist.site.NetworktemplateRemoteSyslogFileArchiveArgs(
files=0,
size="string",
),
contents=[junipermist.site.NetworktemplateRemoteSyslogFileContentArgs(
facility="string",
severity="string",
)],
explicit_priority=False,
file="string",
match="string",
structured_data=False,
)],
network="string",
send_to_all_servers=False,
servers=[junipermist.site.NetworktemplateRemoteSyslogServerArgs(
contents=[junipermist.site.NetworktemplateRemoteSyslogServerContentArgs(
facility="string",
severity="string",
)],
explicit_priority=False,
facility="string",
host="string",
match="string",
port=0,
protocol="string",
routing_instance="string",
severity="string",
source_address="string",
structured_data=False,
tag="string",
)],
time_format="string",
users=[junipermist.site.NetworktemplateRemoteSyslogUserArgs(
contents=[junipermist.site.NetworktemplateRemoteSyslogUserContentArgs(
facility="string",
severity="string",
)],
match="string",
user="string",
)],
),
remove_existing_configs=False,
acl_tags={
"string": junipermist.site.NetworktemplateAclTagsArgs(
type="string",
gbp_tag=0,
macs=["string"],
network="string",
radius_group="string",
specs=[junipermist.site.NetworktemplateAclTagsSpecArgs(
port_range="string",
protocol="string",
)],
subnets=["string"],
),
},
snmp_config=junipermist.site.NetworktemplateSnmpConfigArgs(
client_lists=[junipermist.site.NetworktemplateSnmpConfigClientListArgs(
client_list_name="string",
clients=["string"],
)],
contact="string",
description="string",
enabled=False,
engine_id="string",
location="string",
name="string",
network="string",
trap_groups=[junipermist.site.NetworktemplateSnmpConfigTrapGroupArgs(
categories=["string"],
group_name="string",
targets=["string"],
version="string",
)],
v2c_configs=[junipermist.site.NetworktemplateSnmpConfigV2cConfigArgs(
authorization="string",
client_list_name="string",
community_name="string",
view="string",
)],
v3_config=junipermist.site.NetworktemplateSnmpConfigV3ConfigArgs(
notifies=[junipermist.site.NetworktemplateSnmpConfigV3ConfigNotifyArgs(
name="string",
tag="string",
type="string",
)],
notify_filters=[junipermist.site.NetworktemplateSnmpConfigV3ConfigNotifyFilterArgs(
contents=[junipermist.site.NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArgs(
include=False,
oid="string",
)],
profile_name="string",
)],
target_addresses=[junipermist.site.NetworktemplateSnmpConfigV3ConfigTargetAddressArgs(
address="string",
address_mask="string",
port=0,
tag_list="string",
target_address_name="string",
target_parameters="string",
)],
target_parameters=[junipermist.site.NetworktemplateSnmpConfigV3ConfigTargetParameterArgs(
message_processing_model="string",
name="string",
notify_filter="string",
security_level="string",
security_model="string",
security_name="string",
)],
usm=junipermist.site.NetworktemplateSnmpConfigV3ConfigUsmArgs(
engine_type="string",
engineid="string",
users=[junipermist.site.NetworktemplateSnmpConfigV3ConfigUsmUserArgs(
authentication_password="string",
authentication_type="string",
encryption_password="string",
encryption_type="string",
name="string",
)],
),
vacm=junipermist.site.NetworktemplateSnmpConfigV3ConfigVacmArgs(
accesses=[junipermist.site.NetworktemplateSnmpConfigV3ConfigVacmAccessArgs(
group_name="string",
prefix_lists=[junipermist.site.NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArgs(
context_prefix="string",
notify_view="string",
read_view="string",
security_level="string",
security_model="string",
type="string",
write_view="string",
)],
)],
security_to_group=junipermist.site.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupArgs(
contents=[junipermist.site.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArgs(
group="string",
security_name="string",
)],
security_model="string",
),
),
),
views=[junipermist.site.NetworktemplateSnmpConfigViewArgs(
include=False,
oid="string",
view_name="string",
)],
),
switch_matching=junipermist.site.NetworktemplateSwitchMatchingArgs(
enable=False,
rules=[junipermist.site.NetworktemplateSwitchMatchingRuleArgs(
additional_config_cmds=["string"],
ip_config=junipermist.site.NetworktemplateSwitchMatchingRuleIpConfigArgs(
network="string",
type="string",
),
match_role="string",
match_type="string",
match_value="string",
name="string",
oob_ip_config=junipermist.site.NetworktemplateSwitchMatchingRuleOobIpConfigArgs(
type="string",
use_mgmt_vrf=False,
use_mgmt_vrf_for_host_out=False,
),
port_config={
"string": junipermist.site.NetworktemplateSwitchMatchingRulePortConfigArgs(
usage="string",
disable_autoneg=False,
dynamic_usage="string",
aggregated=False,
critical=False,
description="string",
ae_disable_lacp=False,
duplex="string",
ae_lacp_slow=False,
esilag=False,
mtu=0,
no_local_overwrite=False,
poe_disabled=False,
speed="string",
ae_idx=0,
),
},
port_mirroring={
"string": junipermist.site.NetworktemplateSwitchMatchingRulePortMirroringArgs(
input_networks_ingresses=["string"],
input_port_ids_egresses=["string"],
input_port_ids_ingresses=["string"],
output_network="string",
output_port_id="string",
),
},
)],
),
switch_mgmt=junipermist.site.NetworktemplateSwitchMgmtArgs(
ap_affinity_threshold=0,
cli_banner="string",
cli_idle_timeout=0,
config_revert_timer=0,
dhcp_option_fqdn=False,
disable_oob_down_alarm=False,
local_accounts={
"string": junipermist.site.NetworktemplateSwitchMgmtLocalAccountsArgs(
password="string",
role="string",
),
},
mxedge_proxy_host="string",
mxedge_proxy_port=0,
protect_re=junipermist.site.NetworktemplateSwitchMgmtProtectReArgs(
allowed_services=["string"],
customs=[junipermist.site.NetworktemplateSwitchMgmtProtectReCustomArgs(
subnets=["string"],
port_range="string",
protocol="string",
)],
enabled=False,
trusted_hosts=["string"],
),
root_password="string",
tacacs=junipermist.site.NetworktemplateSwitchMgmtTacacsArgs(
acct_servers=[junipermist.site.NetworktemplateSwitchMgmtTacacsAcctServerArgs(
host="string",
port="string",
secret="string",
timeout=0,
)],
default_role="string",
enabled=False,
network="string",
tacplus_servers=[junipermist.site.NetworktemplateSwitchMgmtTacacsTacplusServerArgs(
host="string",
port="string",
secret="string",
timeout=0,
)],
),
use_mxedge_proxy=False,
),
uplink_port_config=junipermist.site.NetworktemplateUplinkPortConfigArgs(
dot1x=False,
keep_wlans_up_if_down=False,
),
vrf_config=junipermist.site.NetworktemplateVrfConfigArgs(
enabled=False,
),
acl_policies=[junipermist.site.NetworktemplateAclPolicyArgs(
actions=[junipermist.site.NetworktemplateAclPolicyActionArgs(
dst_tag="string",
action="string",
)],
name="string",
src_tags=["string"],
)])
const junipermistNetworktemplateResource = new junipermist.site.Networktemplate("junipermistNetworktemplateResource", {
siteId: "string",
portMirroring: {
string: {
inputNetworksIngresses: ["string"],
inputPortIdsEgresses: ["string"],
inputPortIdsIngresses: ["string"],
outputNetwork: "string",
outputPortId: "string",
},
},
vrfInstances: {
string: {
extraRoutes: {
string: {
via: "string",
},
},
networks: ["string"],
},
},
ospfAreas: {
string: {
ospfNetworks: {
string: {
authKeys: {
string: "string",
},
authPassword: "string",
authType: "string",
bfdMinimumInterval: 0,
deadInterval: 0,
exportPolicy: "string",
helloInterval: 0,
importPolicy: "string",
interfaceType: "string",
metric: 0,
noReadvertiseToOverlay: false,
passive: false,
},
},
includeLoopback: false,
type: "string",
},
},
dnsServers: ["string"],
dnsSuffixes: ["string"],
extraRoutes: {
string: {
via: "string",
discard: false,
metric: 0,
nextQualified: {
string: {
metric: 0,
preference: 0,
},
},
noResolve: false,
preference: 0,
},
},
extraRoutes6: {
string: {
via: "string",
discard: false,
metric: 0,
nextQualified: {
string: {
metric: 0,
preference: 0,
},
},
noResolve: false,
preference: 0,
},
},
mistNac: {
enabled: false,
network: "string",
},
networks: {
string: {
vlanId: "string",
isolation: false,
isolationVlanId: "string",
subnet: "string",
},
},
portUsages: {
string: {
allNetworks: false,
allowDhcpd: false,
allowMultipleSupplicants: false,
bypassAuthWhenServerDown: false,
bypassAuthWhenServerDownForUnkonwnClient: false,
description: "string",
disableAutoneg: false,
disabled: false,
duplex: "string",
dynamicVlanNetworks: ["string"],
enableMacAuth: false,
enableQos: false,
guestNetwork: "string",
interSwitchLink: false,
macAuthOnly: false,
macAuthPreferred: false,
macAuthProtocol: "string",
macLimit: 0,
mode: "string",
mtu: 0,
networks: ["string"],
persistMac: false,
poeDisabled: false,
portAuth: "string",
portNetwork: "string",
reauthInterval: 0,
resetDefaultWhen: "string",
rules: [{
src: "string",
equals: "string",
equalsAnies: ["string"],
expression: "string",
usage: "string",
}],
serverFailNetwork: "string",
serverRejectNetwork: "string",
speed: "string",
stormControl: {
noBroadcast: false,
noMulticast: false,
noRegisteredMulticast: false,
noUnknownUnicast: false,
percentage: 0,
},
stpEdge: false,
stpNoRootPort: false,
stpP2p: false,
voipNetwork: "string",
},
},
dhcpSnooping: {
allNetworks: false,
enableArpSpoofCheck: false,
enableIpSourceGuard: false,
enabled: false,
networks: ["string"],
},
additionalConfigCmds: ["string"],
ntpServers: ["string"],
radiusConfig: {
acctInterimInterval: 0,
acctServers: [{
host: "string",
secret: "string",
keywrapEnabled: false,
keywrapFormat: "string",
keywrapKek: "string",
keywrapMack: "string",
port: 0,
}],
authServers: [{
host: "string",
secret: "string",
keywrapEnabled: false,
keywrapFormat: "string",
keywrapKek: "string",
keywrapMack: "string",
port: 0,
requireMessageAuthenticator: false,
}],
authServersRetries: 0,
authServersTimeout: 0,
coaEnabled: false,
coaPort: 0,
network: "string",
sourceIp: "string",
},
remoteSyslog: {
archive: {
files: 0,
size: "string",
},
console: {
contents: [{
facility: "string",
severity: "string",
}],
},
enabled: false,
files: [{
archive: {
files: 0,
size: "string",
},
contents: [{
facility: "string",
severity: "string",
}],
explicitPriority: false,
file: "string",
match: "string",
structuredData: false,
}],
network: "string",
sendToAllServers: false,
servers: [{
contents: [{
facility: "string",
severity: "string",
}],
explicitPriority: false,
facility: "string",
host: "string",
match: "string",
port: 0,
protocol: "string",
routingInstance: "string",
severity: "string",
sourceAddress: "string",
structuredData: false,
tag: "string",
}],
timeFormat: "string",
users: [{
contents: [{
facility: "string",
severity: "string",
}],
match: "string",
user: "string",
}],
},
removeExistingConfigs: false,
aclTags: {
string: {
type: "string",
gbpTag: 0,
macs: ["string"],
network: "string",
radiusGroup: "string",
specs: [{
portRange: "string",
protocol: "string",
}],
subnets: ["string"],
},
},
snmpConfig: {
clientLists: [{
clientListName: "string",
clients: ["string"],
}],
contact: "string",
description: "string",
enabled: false,
engineId: "string",
location: "string",
name: "string",
network: "string",
trapGroups: [{
categories: ["string"],
groupName: "string",
targets: ["string"],
version: "string",
}],
v2cConfigs: [{
authorization: "string",
clientListName: "string",
communityName: "string",
view: "string",
}],
v3Config: {
notifies: [{
name: "string",
tag: "string",
type: "string",
}],
notifyFilters: [{
contents: [{
include: false,
oid: "string",
}],
profileName: "string",
}],
targetAddresses: [{
address: "string",
addressMask: "string",
port: 0,
tagList: "string",
targetAddressName: "string",
targetParameters: "string",
}],
targetParameters: [{
messageProcessingModel: "string",
name: "string",
notifyFilter: "string",
securityLevel: "string",
securityModel: "string",
securityName: "string",
}],
usm: {
engineType: "string",
engineid: "string",
users: [{
authenticationPassword: "string",
authenticationType: "string",
encryptionPassword: "string",
encryptionType: "string",
name: "string",
}],
},
vacm: {
accesses: [{
groupName: "string",
prefixLists: [{
contextPrefix: "string",
notifyView: "string",
readView: "string",
securityLevel: "string",
securityModel: "string",
type: "string",
writeView: "string",
}],
}],
securityToGroup: {
contents: [{
group: "string",
securityName: "string",
}],
securityModel: "string",
},
},
},
views: [{
include: false,
oid: "string",
viewName: "string",
}],
},
switchMatching: {
enable: false,
rules: [{
additionalConfigCmds: ["string"],
ipConfig: {
network: "string",
type: "string",
},
matchRole: "string",
matchType: "string",
matchValue: "string",
name: "string",
oobIpConfig: {
type: "string",
useMgmtVrf: false,
useMgmtVrfForHostOut: false,
},
portConfig: {
string: {
usage: "string",
disableAutoneg: false,
dynamicUsage: "string",
aggregated: false,
critical: false,
description: "string",
aeDisableLacp: false,
duplex: "string",
aeLacpSlow: false,
esilag: false,
mtu: 0,
noLocalOverwrite: false,
poeDisabled: false,
speed: "string",
aeIdx: 0,
},
},
portMirroring: {
string: {
inputNetworksIngresses: ["string"],
inputPortIdsEgresses: ["string"],
inputPortIdsIngresses: ["string"],
outputNetwork: "string",
outputPortId: "string",
},
},
}],
},
switchMgmt: {
apAffinityThreshold: 0,
cliBanner: "string",
cliIdleTimeout: 0,
configRevertTimer: 0,
dhcpOptionFqdn: false,
disableOobDownAlarm: false,
localAccounts: {
string: {
password: "string",
role: "string",
},
},
mxedgeProxyHost: "string",
mxedgeProxyPort: 0,
protectRe: {
allowedServices: ["string"],
customs: [{
subnets: ["string"],
portRange: "string",
protocol: "string",
}],
enabled: false,
trustedHosts: ["string"],
},
rootPassword: "string",
tacacs: {
acctServers: [{
host: "string",
port: "string",
secret: "string",
timeout: 0,
}],
defaultRole: "string",
enabled: false,
network: "string",
tacplusServers: [{
host: "string",
port: "string",
secret: "string",
timeout: 0,
}],
},
useMxedgeProxy: false,
},
uplinkPortConfig: {
dot1x: false,
keepWlansUpIfDown: false,
},
vrfConfig: {
enabled: false,
},
aclPolicies: [{
actions: [{
dstTag: "string",
action: "string",
}],
name: "string",
srcTags: ["string"],
}],
});
type: junipermist:site:Networktemplate
properties:
aclPolicies:
- actions:
- action: string
dstTag: string
name: string
srcTags:
- string
aclTags:
string:
gbpTag: 0
macs:
- string
network: string
radiusGroup: string
specs:
- portRange: string
protocol: string
subnets:
- string
type: string
additionalConfigCmds:
- string
dhcpSnooping:
allNetworks: false
enableArpSpoofCheck: false
enableIpSourceGuard: false
enabled: false
networks:
- string
dnsServers:
- string
dnsSuffixes:
- string
extraRoutes:
string:
discard: false
metric: 0
nextQualified:
string:
metric: 0
preference: 0
noResolve: false
preference: 0
via: string
extraRoutes6:
string:
discard: false
metric: 0
nextQualified:
string:
metric: 0
preference: 0
noResolve: false
preference: 0
via: string
mistNac:
enabled: false
network: string
networks:
string:
isolation: false
isolationVlanId: string
subnet: string
vlanId: string
ntpServers:
- string
ospfAreas:
string:
includeLoopback: false
ospfNetworks:
string:
authKeys:
string: string
authPassword: string
authType: string
bfdMinimumInterval: 0
deadInterval: 0
exportPolicy: string
helloInterval: 0
importPolicy: string
interfaceType: string
metric: 0
noReadvertiseToOverlay: false
passive: false
type: string
portMirroring:
string:
inputNetworksIngresses:
- string
inputPortIdsEgresses:
- string
inputPortIdsIngresses:
- string
outputNetwork: string
outputPortId: string
portUsages:
string:
allNetworks: false
allowDhcpd: false
allowMultipleSupplicants: false
bypassAuthWhenServerDown: false
bypassAuthWhenServerDownForUnkonwnClient: false
description: string
disableAutoneg: false
disabled: false
duplex: string
dynamicVlanNetworks:
- string
enableMacAuth: false
enableQos: false
guestNetwork: string
interSwitchLink: false
macAuthOnly: false
macAuthPreferred: false
macAuthProtocol: string
macLimit: 0
mode: string
mtu: 0
networks:
- string
persistMac: false
poeDisabled: false
portAuth: string
portNetwork: string
reauthInterval: 0
resetDefaultWhen: string
rules:
- equals: string
equalsAnies:
- string
expression: string
src: string
usage: string
serverFailNetwork: string
serverRejectNetwork: string
speed: string
stormControl:
noBroadcast: false
noMulticast: false
noRegisteredMulticast: false
noUnknownUnicast: false
percentage: 0
stpEdge: false
stpNoRootPort: false
stpP2p: false
voipNetwork: string
radiusConfig:
acctInterimInterval: 0
acctServers:
- host: string
keywrapEnabled: false
keywrapFormat: string
keywrapKek: string
keywrapMack: string
port: 0
secret: string
authServers:
- host: string
keywrapEnabled: false
keywrapFormat: string
keywrapKek: string
keywrapMack: string
port: 0
requireMessageAuthenticator: false
secret: string
authServersRetries: 0
authServersTimeout: 0
coaEnabled: false
coaPort: 0
network: string
sourceIp: string
remoteSyslog:
archive:
files: 0
size: string
console:
contents:
- facility: string
severity: string
enabled: false
files:
- archive:
files: 0
size: string
contents:
- facility: string
severity: string
explicitPriority: false
file: string
match: string
structuredData: false
network: string
sendToAllServers: false
servers:
- contents:
- facility: string
severity: string
explicitPriority: false
facility: string
host: string
match: string
port: 0
protocol: string
routingInstance: string
severity: string
sourceAddress: string
structuredData: false
tag: string
timeFormat: string
users:
- contents:
- facility: string
severity: string
match: string
user: string
removeExistingConfigs: false
siteId: string
snmpConfig:
clientLists:
- clientListName: string
clients:
- string
contact: string
description: string
enabled: false
engineId: string
location: string
name: string
network: string
trapGroups:
- categories:
- string
groupName: string
targets:
- string
version: string
v2cConfigs:
- authorization: string
clientListName: string
communityName: string
view: string
v3Config:
notifies:
- name: string
tag: string
type: string
notifyFilters:
- contents:
- include: false
oid: string
profileName: string
targetAddresses:
- address: string
addressMask: string
port: 0
tagList: string
targetAddressName: string
targetParameters: string
targetParameters:
- messageProcessingModel: string
name: string
notifyFilter: string
securityLevel: string
securityModel: string
securityName: string
usm:
engineType: string
engineid: string
users:
- authenticationPassword: string
authenticationType: string
encryptionPassword: string
encryptionType: string
name: string
vacm:
accesses:
- groupName: string
prefixLists:
- contextPrefix: string
notifyView: string
readView: string
securityLevel: string
securityModel: string
type: string
writeView: string
securityToGroup:
contents:
- group: string
securityName: string
securityModel: string
views:
- include: false
oid: string
viewName: string
switchMatching:
enable: false
rules:
- additionalConfigCmds:
- string
ipConfig:
network: string
type: string
matchRole: string
matchType: string
matchValue: string
name: string
oobIpConfig:
type: string
useMgmtVrf: false
useMgmtVrfForHostOut: false
portConfig:
string:
aeDisableLacp: false
aeIdx: 0
aeLacpSlow: false
aggregated: false
critical: false
description: string
disableAutoneg: false
duplex: string
dynamicUsage: string
esilag: false
mtu: 0
noLocalOverwrite: false
poeDisabled: false
speed: string
usage: string
portMirroring:
string:
inputNetworksIngresses:
- string
inputPortIdsEgresses:
- string
inputPortIdsIngresses:
- string
outputNetwork: string
outputPortId: string
switchMgmt:
apAffinityThreshold: 0
cliBanner: string
cliIdleTimeout: 0
configRevertTimer: 0
dhcpOptionFqdn: false
disableOobDownAlarm: false
localAccounts:
string:
password: string
role: string
mxedgeProxyHost: string
mxedgeProxyPort: 0
protectRe:
allowedServices:
- string
customs:
- portRange: string
protocol: string
subnets:
- string
enabled: false
trustedHosts:
- string
rootPassword: string
tacacs:
acctServers:
- host: string
port: string
secret: string
timeout: 0
defaultRole: string
enabled: false
network: string
tacplusServers:
- host: string
port: string
secret: string
timeout: 0
useMxedgeProxy: false
uplinkPortConfig:
dot1x: false
keepWlansUpIfDown: false
vrfConfig:
enabled: false
vrfInstances:
string:
extraRoutes:
string:
via: string
networks:
- string
Networktemplate Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The Networktemplate resource accepts the following input properties:
- Site
Id string - Acl
Policies List<Pulumi.Juniper Mist. Site. Inputs. Networktemplate Acl Policy> -
Dictionary<string, Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Acl Tags Args> - ACL Tags to identify traffic source or destination. Key name is the tag name
- Additional
Config List<string>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- Dhcp
Snooping Pulumi.Juniper Mist. Site. Inputs. Networktemplate Dhcp Snooping - Dns
Servers List<string> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Dns
Suffixes List<string> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Extra
Routes Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Extra Routes Args> - Extra
Routes6 Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Extra Routes6Args> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- Mist
Nac Pulumi.Juniper Mist. Site. Inputs. Networktemplate Mist Nac - enable mist_nac to use radsec
- Networks
Dictionary<string, Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Networks Args> - Property key is network name
- Ntp
Servers List<string> - list of NTP servers
- Ospf
Areas Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Ospf Areas Args> - Junos OSPF areas
- Port
Mirroring Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Port Mirroring Args> - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- Port
Usages Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Port Usages Args> - Radius
Config Pulumi.Juniper Mist. Site. Inputs. Networktemplate Radius Config - Junos Radius config
- Remote
Syslog Pulumi.Juniper Mist. Site. Inputs. Networktemplate Remote Syslog - Remove
Existing boolConfigs - by default, when we configure a device, we only clean up config we generates. Remove existing configs if enabled
- Snmp
Config Pulumi.Juniper Mist. Site. Inputs. Networktemplate Snmp Config - Switch
Matching Pulumi.Juniper Mist. Site. Inputs. Networktemplate Switch Matching - Switch template
- Switch
Mgmt Pulumi.Juniper Mist. Site. Inputs. Networktemplate Switch Mgmt - Switch settings
- Uplink
Port Pulumi.Config Juniper Mist. Site. Inputs. Networktemplate Uplink Port Config - Vrf
Config Pulumi.Juniper Mist. Site. Inputs. Networktemplate Vrf Config - Vrf
Instances Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Vrf Instances Args> - Property key is the network name
- Site
Id string - Acl
Policies []NetworktemplateAcl Policy Args -
map[string]Networktemplate
Acl Tags Args - ACL Tags to identify traffic source or destination. Key name is the tag name
- Additional
Config []stringCmds - additional CLI commands to append to the generated Junos config Note: no check is done
- Dhcp
Snooping NetworktemplateDhcp Snooping Args - Dns
Servers []string - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Dns
Suffixes []string - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Extra
Routes map[string]NetworktemplateExtra Routes Args - Extra
Routes6 map[string]NetworktemplateExtra Routes6Args - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- Mist
Nac NetworktemplateMist Nac Args - enable mist_nac to use radsec
- Networks
map[string]Networktemplate
Networks Args - Property key is network name
- Ntp
Servers []string - list of NTP servers
- Ospf
Areas map[string]NetworktemplateOspf Areas Args - Junos OSPF areas
- Port
Mirroring map[string]NetworktemplatePort Mirroring Args - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- Port
Usages map[string]NetworktemplatePort Usages Args - Radius
Config NetworktemplateRadius Config Args - Junos Radius config
- Remote
Syslog NetworktemplateRemote Syslog Args - Remove
Existing boolConfigs - by default, when we configure a device, we only clean up config we generates. Remove existing configs if enabled
- Snmp
Config NetworktemplateSnmp Config Args - Switch
Matching NetworktemplateSwitch Matching Args - Switch template
- Switch
Mgmt NetworktemplateSwitch Mgmt Args - Switch settings
- Uplink
Port NetworktemplateConfig Uplink Port Config Args - Vrf
Config NetworktemplateVrf Config Args - Vrf
Instances map[string]NetworktemplateVrf Instances Args - Property key is the network name
- site
Id String - acl
Policies List<NetworktemplateAcl Policy> -
Map<String,Networktemplate
Acl Tags Args> - ACL Tags to identify traffic source or destination. Key name is the tag name
- additional
Config List<String>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- dhcp
Snooping NetworktemplateDhcp Snooping - dns
Servers List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns
Suffixes List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra
Routes Map<String,NetworktemplateExtra Routes Args> - extra
Routes6 Map<String,NetworktemplateExtra Routes6Args> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- mist
Nac NetworktemplateMist Nac - enable mist_nac to use radsec
- networks
Map<String,Networktemplate
Networks Args> - Property key is network name
- ntp
Servers List<String> - list of NTP servers
- ospf
Areas Map<String,NetworktemplateOspf Areas Args> - Junos OSPF areas
- port
Mirroring Map<String,NetworktemplatePort Mirroring Args> - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port
Usages Map<String,NetworktemplatePort Usages Args> - radius
Config NetworktemplateRadius Config - Junos Radius config
- remote
Syslog NetworktemplateRemote Syslog - remove
Existing BooleanConfigs - by default, when we configure a device, we only clean up config we generates. Remove existing configs if enabled
- snmp
Config NetworktemplateSnmp Config - switch
Matching NetworktemplateSwitch Matching - Switch template
- switch
Mgmt NetworktemplateSwitch Mgmt - Switch settings
- uplink
Port NetworktemplateConfig Uplink Port Config - vrf
Config NetworktemplateVrf Config - vrf
Instances Map<String,NetworktemplateVrf Instances Args> - Property key is the network name
- site
Id string - acl
Policies NetworktemplateAcl Policy[] -
{[key: string]: Networktemplate
Acl Tags Args} - ACL Tags to identify traffic source or destination. Key name is the tag name
- additional
Config string[]Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- dhcp
Snooping NetworktemplateDhcp Snooping - dns
Servers string[] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns
Suffixes string[] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra
Routes {[key: string]: NetworktemplateExtra Routes Args} - extra
Routes6 {[key: string]: NetworktemplateExtra Routes6Args} - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- mist
Nac NetworktemplateMist Nac - enable mist_nac to use radsec
- networks
{[key: string]: Networktemplate
Networks Args} - Property key is network name
- ntp
Servers string[] - list of NTP servers
- ospf
Areas {[key: string]: NetworktemplateOspf Areas Args} - Junos OSPF areas
- port
Mirroring {[key: string]: NetworktemplatePort Mirroring Args} - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port
Usages {[key: string]: NetworktemplatePort Usages Args} - radius
Config NetworktemplateRadius Config - Junos Radius config
- remote
Syslog NetworktemplateRemote Syslog - remove
Existing booleanConfigs - by default, when we configure a device, we only clean up config we generates. Remove existing configs if enabled
- snmp
Config NetworktemplateSnmp Config - switch
Matching NetworktemplateSwitch Matching - Switch template
- switch
Mgmt NetworktemplateSwitch Mgmt - Switch settings
- uplink
Port NetworktemplateConfig Uplink Port Config - vrf
Config NetworktemplateVrf Config - vrf
Instances {[key: string]: NetworktemplateVrf Instances Args} - Property key is the network name
- site_
id str - acl_
policies Sequence[NetworktemplateAcl Policy Args] -
Mapping[str, Networktemplate
Acl Tags Args] - ACL Tags to identify traffic source or destination. Key name is the tag name
- additional_
config_ Sequence[str]cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- dhcp_
snooping NetworktemplateDhcp Snooping Args - dns_
servers Sequence[str] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns_
suffixes Sequence[str] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra_
routes Mapping[str, NetworktemplateExtra Routes Args] - extra_
routes6 Mapping[str, NetworktemplateExtra Routes6Args] - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- mist_
nac NetworktemplateMist Nac Args - enable mist_nac to use radsec
- networks
Mapping[str, Networktemplate
Networks Args] - Property key is network name
- ntp_
servers Sequence[str] - list of NTP servers
- ospf_
areas Mapping[str, NetworktemplateOspf Areas Args] - Junos OSPF areas
- port_
mirroring Mapping[str, NetworktemplatePort Mirroring Args] - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port_
usages Mapping[str, NetworktemplatePort Usages Args] - radius_
config NetworktemplateRadius Config Args - Junos Radius config
- remote_
syslog NetworktemplateRemote Syslog Args - remove_
existing_ boolconfigs - by default, when we configure a device, we only clean up config we generates. Remove existing configs if enabled
- snmp_
config NetworktemplateSnmp Config Args - switch_
matching NetworktemplateSwitch Matching Args - Switch template
- switch_
mgmt NetworktemplateSwitch Mgmt Args - Switch settings
- uplink_
port_ Networktemplateconfig Uplink Port Config Args - vrf_
config NetworktemplateVrf Config Args - vrf_
instances Mapping[str, NetworktemplateVrf Instances Args] - Property key is the network name
- site
Id String - acl
Policies List<Property Map> - Map<Property Map>
- ACL Tags to identify traffic source or destination. Key name is the tag name
- additional
Config List<String>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- dhcp
Snooping Property Map - dns
Servers List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns
Suffixes List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra
Routes Map<Property Map> - extra
Routes6 Map<Property Map> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- mist
Nac Property Map - enable mist_nac to use radsec
- networks Map<Property Map>
- Property key is network name
- ntp
Servers List<String> - list of NTP servers
- ospf
Areas Map<Property Map> - Junos OSPF areas
- port
Mirroring Map<Property Map> - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port
Usages Map<Property Map> - radius
Config Property Map - Junos Radius config
- remote
Syslog Property Map - remove
Existing BooleanConfigs - by default, when we configure a device, we only clean up config we generates. Remove existing configs if enabled
- snmp
Config Property Map - switch
Matching Property Map - Switch template
- switch
Mgmt Property Map - Switch settings
- uplink
Port Property MapConfig - vrf
Config Property Map - vrf
Instances Map<Property Map> - Property key is the network name
Outputs
All input properties are implicitly available as output properties. Additionally, the Networktemplate resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Networktemplate Resource
Get an existing Networktemplate resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: NetworktemplateState, opts?: CustomResourceOptions): Networktemplate@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
acl_policies: Optional[Sequence[NetworktemplateAclPolicyArgs]] = None,
acl_tags: Optional[Mapping[str, NetworktemplateAclTagsArgs]] = None,
additional_config_cmds: Optional[Sequence[str]] = None,
dhcp_snooping: Optional[NetworktemplateDhcpSnoopingArgs] = None,
dns_servers: Optional[Sequence[str]] = None,
dns_suffixes: Optional[Sequence[str]] = None,
extra_routes: Optional[Mapping[str, NetworktemplateExtraRoutesArgs]] = None,
extra_routes6: Optional[Mapping[str, NetworktemplateExtraRoutes6Args]] = None,
mist_nac: Optional[NetworktemplateMistNacArgs] = None,
networks: Optional[Mapping[str, NetworktemplateNetworksArgs]] = None,
ntp_servers: Optional[Sequence[str]] = None,
ospf_areas: Optional[Mapping[str, NetworktemplateOspfAreasArgs]] = None,
port_mirroring: Optional[Mapping[str, NetworktemplatePortMirroringArgs]] = None,
port_usages: Optional[Mapping[str, NetworktemplatePortUsagesArgs]] = None,
radius_config: Optional[NetworktemplateRadiusConfigArgs] = None,
remote_syslog: Optional[NetworktemplateRemoteSyslogArgs] = None,
remove_existing_configs: Optional[bool] = None,
site_id: Optional[str] = None,
snmp_config: Optional[NetworktemplateSnmpConfigArgs] = None,
switch_matching: Optional[NetworktemplateSwitchMatchingArgs] = None,
switch_mgmt: Optional[NetworktemplateSwitchMgmtArgs] = None,
uplink_port_config: Optional[NetworktemplateUplinkPortConfigArgs] = None,
vrf_config: Optional[NetworktemplateVrfConfigArgs] = None,
vrf_instances: Optional[Mapping[str, NetworktemplateVrfInstancesArgs]] = None) -> Networktemplatefunc GetNetworktemplate(ctx *Context, name string, id IDInput, state *NetworktemplateState, opts ...ResourceOption) (*Networktemplate, error)public static Networktemplate Get(string name, Input<string> id, NetworktemplateState? state, CustomResourceOptions? opts = null)public static Networktemplate get(String name, Output<String> id, NetworktemplateState state, CustomResourceOptions options)Resource lookup is not supported in YAML- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Acl
Policies List<Pulumi.Juniper Mist. Site. Inputs. Networktemplate Acl Policy> -
Dictionary<string, Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Acl Tags Args> - ACL Tags to identify traffic source or destination. Key name is the tag name
- Additional
Config List<string>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- Dhcp
Snooping Pulumi.Juniper Mist. Site. Inputs. Networktemplate Dhcp Snooping - Dns
Servers List<string> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Dns
Suffixes List<string> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Extra
Routes Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Extra Routes Args> - Extra
Routes6 Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Extra Routes6Args> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- Mist
Nac Pulumi.Juniper Mist. Site. Inputs. Networktemplate Mist Nac - enable mist_nac to use radsec
- Networks
Dictionary<string, Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Networks Args> - Property key is network name
- Ntp
Servers List<string> - list of NTP servers
- Ospf
Areas Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Ospf Areas Args> - Junos OSPF areas
- Port
Mirroring Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Port Mirroring Args> - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- Port
Usages Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Port Usages Args> - Radius
Config Pulumi.Juniper Mist. Site. Inputs. Networktemplate Radius Config - Junos Radius config
- Remote
Syslog Pulumi.Juniper Mist. Site. Inputs. Networktemplate Remote Syslog - Remove
Existing boolConfigs - by default, when we configure a device, we only clean up config we generates. Remove existing configs if enabled
- Site
Id string - Snmp
Config Pulumi.Juniper Mist. Site. Inputs. Networktemplate Snmp Config - Switch
Matching Pulumi.Juniper Mist. Site. Inputs. Networktemplate Switch Matching - Switch template
- Switch
Mgmt Pulumi.Juniper Mist. Site. Inputs. Networktemplate Switch Mgmt - Switch settings
- Uplink
Port Pulumi.Config Juniper Mist. Site. Inputs. Networktemplate Uplink Port Config - Vrf
Config Pulumi.Juniper Mist. Site. Inputs. Networktemplate Vrf Config - Vrf
Instances Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Vrf Instances Args> - Property key is the network name
- Acl
Policies []NetworktemplateAcl Policy Args -
map[string]Networktemplate
Acl Tags Args - ACL Tags to identify traffic source or destination. Key name is the tag name
- Additional
Config []stringCmds - additional CLI commands to append to the generated Junos config Note: no check is done
- Dhcp
Snooping NetworktemplateDhcp Snooping Args - Dns
Servers []string - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Dns
Suffixes []string - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Extra
Routes map[string]NetworktemplateExtra Routes Args - Extra
Routes6 map[string]NetworktemplateExtra Routes6Args - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- Mist
Nac NetworktemplateMist Nac Args - enable mist_nac to use radsec
- Networks
map[string]Networktemplate
Networks Args - Property key is network name
- Ntp
Servers []string - list of NTP servers
- Ospf
Areas map[string]NetworktemplateOspf Areas Args - Junos OSPF areas
- Port
Mirroring map[string]NetworktemplatePort Mirroring Args - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- Port
Usages map[string]NetworktemplatePort Usages Args - Radius
Config NetworktemplateRadius Config Args - Junos Radius config
- Remote
Syslog NetworktemplateRemote Syslog Args - Remove
Existing boolConfigs - by default, when we configure a device, we only clean up config we generates. Remove existing configs if enabled
- Site
Id string - Snmp
Config NetworktemplateSnmp Config Args - Switch
Matching NetworktemplateSwitch Matching Args - Switch template
- Switch
Mgmt NetworktemplateSwitch Mgmt Args - Switch settings
- Uplink
Port NetworktemplateConfig Uplink Port Config Args - Vrf
Config NetworktemplateVrf Config Args - Vrf
Instances map[string]NetworktemplateVrf Instances Args - Property key is the network name
- acl
Policies List<NetworktemplateAcl Policy> -
Map<String,Networktemplate
Acl Tags Args> - ACL Tags to identify traffic source or destination. Key name is the tag name
- additional
Config List<String>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- dhcp
Snooping NetworktemplateDhcp Snooping - dns
Servers List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns
Suffixes List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra
Routes Map<String,NetworktemplateExtra Routes Args> - extra
Routes6 Map<String,NetworktemplateExtra Routes6Args> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- mist
Nac NetworktemplateMist Nac - enable mist_nac to use radsec
- networks
Map<String,Networktemplate
Networks Args> - Property key is network name
- ntp
Servers List<String> - list of NTP servers
- ospf
Areas Map<String,NetworktemplateOspf Areas Args> - Junos OSPF areas
- port
Mirroring Map<String,NetworktemplatePort Mirroring Args> - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port
Usages Map<String,NetworktemplatePort Usages Args> - radius
Config NetworktemplateRadius Config - Junos Radius config
- remote
Syslog NetworktemplateRemote Syslog - remove
Existing BooleanConfigs - by default, when we configure a device, we only clean up config we generates. Remove existing configs if enabled
- site
Id String - snmp
Config NetworktemplateSnmp Config - switch
Matching NetworktemplateSwitch Matching - Switch template
- switch
Mgmt NetworktemplateSwitch Mgmt - Switch settings
- uplink
Port NetworktemplateConfig Uplink Port Config - vrf
Config NetworktemplateVrf Config - vrf
Instances Map<String,NetworktemplateVrf Instances Args> - Property key is the network name
- acl
Policies NetworktemplateAcl Policy[] -
{[key: string]: Networktemplate
Acl Tags Args} - ACL Tags to identify traffic source or destination. Key name is the tag name
- additional
Config string[]Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- dhcp
Snooping NetworktemplateDhcp Snooping - dns
Servers string[] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns
Suffixes string[] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra
Routes {[key: string]: NetworktemplateExtra Routes Args} - extra
Routes6 {[key: string]: NetworktemplateExtra Routes6Args} - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- mist
Nac NetworktemplateMist Nac - enable mist_nac to use radsec
- networks
{[key: string]: Networktemplate
Networks Args} - Property key is network name
- ntp
Servers string[] - list of NTP servers
- ospf
Areas {[key: string]: NetworktemplateOspf Areas Args} - Junos OSPF areas
- port
Mirroring {[key: string]: NetworktemplatePort Mirroring Args} - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port
Usages {[key: string]: NetworktemplatePort Usages Args} - radius
Config NetworktemplateRadius Config - Junos Radius config
- remote
Syslog NetworktemplateRemote Syslog - remove
Existing booleanConfigs - by default, when we configure a device, we only clean up config we generates. Remove existing configs if enabled
- site
Id string - snmp
Config NetworktemplateSnmp Config - switch
Matching NetworktemplateSwitch Matching - Switch template
- switch
Mgmt NetworktemplateSwitch Mgmt - Switch settings
- uplink
Port NetworktemplateConfig Uplink Port Config - vrf
Config NetworktemplateVrf Config - vrf
Instances {[key: string]: NetworktemplateVrf Instances Args} - Property key is the network name
- acl_
policies Sequence[NetworktemplateAcl Policy Args] -
Mapping[str, Networktemplate
Acl Tags Args] - ACL Tags to identify traffic source or destination. Key name is the tag name
- additional_
config_ Sequence[str]cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- dhcp_
snooping NetworktemplateDhcp Snooping Args - dns_
servers Sequence[str] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns_
suffixes Sequence[str] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra_
routes Mapping[str, NetworktemplateExtra Routes Args] - extra_
routes6 Mapping[str, NetworktemplateExtra Routes6Args] - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- mist_
nac NetworktemplateMist Nac Args - enable mist_nac to use radsec
- networks
Mapping[str, Networktemplate
Networks Args] - Property key is network name
- ntp_
servers Sequence[str] - list of NTP servers
- ospf_
areas Mapping[str, NetworktemplateOspf Areas Args] - Junos OSPF areas
- port_
mirroring Mapping[str, NetworktemplatePort Mirroring Args] - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port_
usages Mapping[str, NetworktemplatePort Usages Args] - radius_
config NetworktemplateRadius Config Args - Junos Radius config
- remote_
syslog NetworktemplateRemote Syslog Args - remove_
existing_ boolconfigs - by default, when we configure a device, we only clean up config we generates. Remove existing configs if enabled
- site_
id str - snmp_
config NetworktemplateSnmp Config Args - switch_
matching NetworktemplateSwitch Matching Args - Switch template
- switch_
mgmt NetworktemplateSwitch Mgmt Args - Switch settings
- uplink_
port_ Networktemplateconfig Uplink Port Config Args - vrf_
config NetworktemplateVrf Config Args - vrf_
instances Mapping[str, NetworktemplateVrf Instances Args] - Property key is the network name
- acl
Policies List<Property Map> - Map<Property Map>
- ACL Tags to identify traffic source or destination. Key name is the tag name
- additional
Config List<String>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- dhcp
Snooping Property Map - dns
Servers List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns
Suffixes List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra
Routes Map<Property Map> - extra
Routes6 Map<Property Map> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- mist
Nac Property Map - enable mist_nac to use radsec
- networks Map<Property Map>
- Property key is network name
- ntp
Servers List<String> - list of NTP servers
- ospf
Areas Map<Property Map> - Junos OSPF areas
- port
Mirroring Map<Property Map> - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- port
Usages Map<Property Map> - radius
Config Property Map - Junos Radius config
- remote
Syslog Property Map - remove
Existing BooleanConfigs - by default, when we configure a device, we only clean up config we generates. Remove existing configs if enabled
- site
Id String - snmp
Config Property Map - switch
Matching Property Map - Switch template
- switch
Mgmt Property Map - Switch settings
- uplink
Port Property MapConfig - vrf
Config Property Map - vrf
Instances Map<Property Map> - Property key is the network name
Supporting Types
NetworktemplateAclPolicy, NetworktemplateAclPolicyArgs
- Actions
List<Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Acl Policy Action> - for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
networkis required in either the source or destination so that we know where to attach the policy to
- Name string
- List<string>
- for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
networkis required in either the source or destination so that we know where to attach the policy to
- Actions
[]Networktemplate
Acl Policy Action - for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
networkis required in either the source or destination so that we know where to attach the policy to
- Name string
- []string
- for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
networkis required in either the source or destination so that we know where to attach the policy to
- actions
List<Networktemplate
Acl Policy Action> - for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
networkis required in either the source or destination so that we know where to attach the policy to
- name String
- List<String>
- for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
networkis required in either the source or destination so that we know where to attach the policy to
- actions
Networktemplate
Acl Policy Action[] - for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
networkis required in either the source or destination so that we know where to attach the policy to
- name string
- string[]
- for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
networkis required in either the source or destination so that we know where to attach the policy to
- actions
Sequence[Networktemplate
Acl Policy Action] - for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
networkis required in either the source or destination so that we know where to attach the policy to
- name str
- Sequence[str]
- for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
networkis required in either the source or destination so that we know where to attach the policy to
- actions List<Property Map>
- for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
networkis required in either the source or destination so that we know where to attach the policy to
- name String
- List<String>
- for GBP-based policy, all src_tags and dst_tags have to be gbp-based
- for ACL-based policy,
networkis required in either the source or destination so that we know where to attach the policy to
NetworktemplateAclPolicyAction, NetworktemplateAclPolicyActionArgs
NetworktemplateAclTags, NetworktemplateAclTagsArgs
- Type string
- enum:
any,dynamic_gbp,mac,network,radius_group,resource,static_gbp,subnet - Gbp
Tag int - required if
type==dynamic_gbp(gbp_tag received from RADIUS)type==static_gbp(applying gbp tag against matching conditions)
- Macs List<string>
- required if
type==mactype==static_gbpif from matching mac
- Network string
- if:
type==mac(optional. default isany)type==subnet(optional. default isany)type==networktype==resource(optional. default isany)type==static_gbpif from matching network (vlan)'
- Radius
Group string - required if:
type==radius_grouptype==static_gbpif from matching radius_group
- Specs
List<Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Acl Tags Spec> - if
type==resourceempty means unrestricted, i.e. any - Subnets List<string>
- if
type==subnettype==resource(optional. default isany)type==static_gbpif from matching subnet
- Type string
- enum:
any,dynamic_gbp,mac,network,radius_group,resource,static_gbp,subnet - Gbp
Tag int - required if
type==dynamic_gbp(gbp_tag received from RADIUS)type==static_gbp(applying gbp tag against matching conditions)
- Macs []string
- required if
type==mactype==static_gbpif from matching mac
- Network string
- if:
type==mac(optional. default isany)type==subnet(optional. default isany)type==networktype==resource(optional. default isany)type==static_gbpif from matching network (vlan)'
- Radius
Group string - required if:
type==radius_grouptype==static_gbpif from matching radius_group
- Specs
[]Networktemplate
Acl Tags Spec - if
type==resourceempty means unrestricted, i.e. any - Subnets []string
- if
type==subnettype==resource(optional. default isany)type==static_gbpif from matching subnet
- type String
- enum:
any,dynamic_gbp,mac,network,radius_group,resource,static_gbp,subnet - gbp
Tag Integer - required if
type==dynamic_gbp(gbp_tag received from RADIUS)type==static_gbp(applying gbp tag against matching conditions)
- macs List<String>
- required if
type==mactype==static_gbpif from matching mac
- network String
- if:
type==mac(optional. default isany)type==subnet(optional. default isany)type==networktype==resource(optional. default isany)type==static_gbpif from matching network (vlan)'
- radius
Group String - required if:
type==radius_grouptype==static_gbpif from matching radius_group
- specs
List<Networktemplate
Acl Tags Spec> - if
type==resourceempty means unrestricted, i.e. any - subnets List<String>
- if
type==subnettype==resource(optional. default isany)type==static_gbpif from matching subnet
- type string
- enum:
any,dynamic_gbp,mac,network,radius_group,resource,static_gbp,subnet - gbp
Tag number - required if
type==dynamic_gbp(gbp_tag received from RADIUS)type==static_gbp(applying gbp tag against matching conditions)
- macs string[]
- required if
type==mactype==static_gbpif from matching mac
- network string
- if:
type==mac(optional. default isany)type==subnet(optional. default isany)type==networktype==resource(optional. default isany)type==static_gbpif from matching network (vlan)'
- radius
Group string - required if:
type==radius_grouptype==static_gbpif from matching radius_group
- specs
Networktemplate
Acl Tags Spec[] - if
type==resourceempty means unrestricted, i.e. any - subnets string[]
- if
type==subnettype==resource(optional. default isany)type==static_gbpif from matching subnet
- type str
- enum:
any,dynamic_gbp,mac,network,radius_group,resource,static_gbp,subnet - gbp_
tag int - required if
type==dynamic_gbp(gbp_tag received from RADIUS)type==static_gbp(applying gbp tag against matching conditions)
- macs Sequence[str]
- required if
type==mactype==static_gbpif from matching mac
- network str
- if:
type==mac(optional. default isany)type==subnet(optional. default isany)type==networktype==resource(optional. default isany)type==static_gbpif from matching network (vlan)'
- radius_
group str - required if:
type==radius_grouptype==static_gbpif from matching radius_group
- specs
Sequence[Networktemplate
Acl Tags Spec] - if
type==resourceempty means unrestricted, i.e. any - subnets Sequence[str]
- if
type==subnettype==resource(optional. default isany)type==static_gbpif from matching subnet
- type String
- enum:
any,dynamic_gbp,mac,network,radius_group,resource,static_gbp,subnet - gbp
Tag Number - required if
type==dynamic_gbp(gbp_tag received from RADIUS)type==static_gbp(applying gbp tag against matching conditions)
- macs List<String>
- required if
type==mactype==static_gbpif from matching mac
- network String
- if:
type==mac(optional. default isany)type==subnet(optional. default isany)type==networktype==resource(optional. default isany)type==static_gbpif from matching network (vlan)'
- radius
Group String - required if:
type==radius_grouptype==static_gbpif from matching radius_group
- specs List<Property Map>
- if
type==resourceempty means unrestricted, i.e. any - subnets List<String>
- if
type==subnettype==resource(optional. default isany)type==static_gbpif from matching subnet
NetworktemplateAclTagsSpec, NetworktemplateAclTagsSpecArgs
- port_
range str - matched dst port, "0" means any
- protocol str
tcp/udp/icmp/gre/any/:protocol_number.protocol_numberis between 1-254
NetworktemplateDhcpSnooping, NetworktemplateDhcpSnoopingArgs
- All
Networks bool - Enable
Arp boolSpoof Check - Enable for dynamic ARP inspection check
- Enable
Ip boolSource Guard - Enable for check for forging source IP address
- Enabled bool
- Networks List<string>
- if
all_networks==false, list of network with DHCP snooping enabled
- All
Networks bool - Enable
Arp boolSpoof Check - Enable for dynamic ARP inspection check
- Enable
Ip boolSource Guard - Enable for check for forging source IP address
- Enabled bool
- Networks []string
- if
all_networks==false, list of network with DHCP snooping enabled
- all
Networks Boolean - enable
Arp BooleanSpoof Check - Enable for dynamic ARP inspection check
- enable
Ip BooleanSource Guard - Enable for check for forging source IP address
- enabled Boolean
- networks List<String>
- if
all_networks==false, list of network with DHCP snooping enabled
- all
Networks boolean - enable
Arp booleanSpoof Check - Enable for dynamic ARP inspection check
- enable
Ip booleanSource Guard - Enable for check for forging source IP address
- enabled boolean
- networks string[]
- if
all_networks==false, list of network with DHCP snooping enabled
- all_
networks bool - enable_
arp_ boolspoof_ check - Enable for dynamic ARP inspection check
- enable_
ip_ boolsource_ guard - Enable for check for forging source IP address
- enabled bool
- networks Sequence[str]
- if
all_networks==false, list of network with DHCP snooping enabled
- all
Networks Boolean - enable
Arp BooleanSpoof Check - Enable for dynamic ARP inspection check
- enable
Ip BooleanSource Guard - Enable for check for forging source IP address
- enabled Boolean
- networks List<String>
- if
all_networks==false, list of network with DHCP snooping enabled
NetworktemplateExtraRoutes, NetworktemplateExtraRoutesArgs
- Via string
- next-hop IP Address
- Discard bool
- this takes precedence
- Metric int
- Next
Qualified Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Extra Routes Next Qualified> - No
Resolve bool - Preference int
- Via string
- next-hop IP Address
- Discard bool
- this takes precedence
- Metric int
- Next
Qualified map[string]NetworktemplateExtra Routes Next Qualified - No
Resolve bool - Preference int
- via String
- next-hop IP Address
- discard Boolean
- this takes precedence
- metric Integer
- next
Qualified Map<String,NetworktemplateExtra Routes Next Qualified> - no
Resolve Boolean - preference Integer
- via string
- next-hop IP Address
- discard boolean
- this takes precedence
- metric number
- next
Qualified {[key: string]: NetworktemplateExtra Routes Next Qualified} - no
Resolve boolean - preference number
- via str
- next-hop IP Address
- discard bool
- this takes precedence
- metric int
- next_
qualified Mapping[str, NetworktemplateExtra Routes Next Qualified] - no_
resolve bool - preference int
- via String
- next-hop IP Address
- discard Boolean
- this takes precedence
- metric Number
- next
Qualified Map<Property Map> - no
Resolve Boolean - preference Number
NetworktemplateExtraRoutes6, NetworktemplateExtraRoutes6Args
- Via string
- next-hop IP Address
- Discard bool
- this takes precedence
- Metric int
- Next
Qualified Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Extra Routes6Next Qualified> - No
Resolve bool - Preference int
- Via string
- next-hop IP Address
- Discard bool
- this takes precedence
- Metric int
- Next
Qualified map[string]NetworktemplateExtra Routes6Next Qualified - No
Resolve bool - Preference int
- via String
- next-hop IP Address
- discard Boolean
- this takes precedence
- metric Integer
- next
Qualified Map<String,NetworktemplateExtra Routes6Next Qualified> - no
Resolve Boolean - preference Integer
- via string
- next-hop IP Address
- discard boolean
- this takes precedence
- metric number
- next
Qualified {[key: string]: NetworktemplateExtra Routes6Next Qualified} - no
Resolve boolean - preference number
- via str
- next-hop IP Address
- discard bool
- this takes precedence
- metric int
- next_
qualified Mapping[str, NetworktemplateExtra Routes6Next Qualified] - no_
resolve bool - preference int
- via String
- next-hop IP Address
- discard Boolean
- this takes precedence
- metric Number
- next
Qualified Map<Property Map> - no
Resolve Boolean - preference Number
NetworktemplateExtraRoutes6NextQualified, NetworktemplateExtraRoutes6NextQualifiedArgs
- Metric int
- Preference int
- Metric int
- Preference int
- metric Integer
- preference Integer
- metric number
- preference number
- metric int
- preference int
- metric Number
- preference Number
NetworktemplateExtraRoutesNextQualified, NetworktemplateExtraRoutesNextQualifiedArgs
- Metric int
- Preference int
- Metric int
- Preference int
- metric Integer
- preference Integer
- metric number
- preference number
- metric int
- preference int
- metric Number
- preference Number
NetworktemplateMistNac, NetworktemplateMistNacArgs
NetworktemplateNetworks, NetworktemplateNetworksArgs
- Vlan
Id string - Isolation bool
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required)
NOTE: this features requires uplink device to also a be Juniper device and
inter_switch_linkto be set - Isolation
Vlan stringId - Subnet string
- optional for pure switching, required when L3 / routing features are used
- Vlan
Id string - Isolation bool
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required)
NOTE: this features requires uplink device to also a be Juniper device and
inter_switch_linkto be set - Isolation
Vlan stringId - Subnet string
- optional for pure switching, required when L3 / routing features are used
- vlan
Id String - isolation Boolean
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required)
NOTE: this features requires uplink device to also a be Juniper device and
inter_switch_linkto be set - isolation
Vlan StringId - subnet String
- optional for pure switching, required when L3 / routing features are used
- vlan
Id string - isolation boolean
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required)
NOTE: this features requires uplink device to also a be Juniper device and
inter_switch_linkto be set - isolation
Vlan stringId - subnet string
- optional for pure switching, required when L3 / routing features are used
- vlan_
id str - isolation bool
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required)
NOTE: this features requires uplink device to also a be Juniper device and
inter_switch_linkto be set - isolation_
vlan_ strid - subnet str
- optional for pure switching, required when L3 / routing features are used
- vlan
Id String - isolation Boolean
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required)
NOTE: this features requires uplink device to also a be Juniper device and
inter_switch_linkto be set - isolation
Vlan StringId - subnet String
- optional for pure switching, required when L3 / routing features are used
NetworktemplateOspfAreas, NetworktemplateOspfAreasArgs
- Ospf
Networks Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Ospf Areas Ospf Networks> - Include
Loopback bool - Type string
- OSPF type. enum:
default,nssa,stub
- Ospf
Networks map[string]NetworktemplateOspf Areas Ospf Networks - Include
Loopback bool - Type string
- OSPF type. enum:
default,nssa,stub
- ospf
Networks Map<String,NetworktemplateOspf Areas Ospf Networks> - include
Loopback Boolean - type String
- OSPF type. enum:
default,nssa,stub
- ospf
Networks {[key: string]: NetworktemplateOspf Areas Ospf Networks} - include
Loopback boolean - type string
- OSPF type. enum:
default,nssa,stub
- ospf_
networks Mapping[str, NetworktemplateOspf Areas Ospf Networks] - include_
loopback bool - type str
- OSPF type. enum:
default,nssa,stub
- ospf
Networks Map<Property Map> - include
Loopback Boolean - type String
- OSPF type. enum:
default,nssa,stub
NetworktemplateOspfAreasOspfNetworks, NetworktemplateOspfAreasOspfNetworksArgs
- Auth
Keys Dictionary<string, string> - Required if
auth_type==md5. Property key is the key number - Auth
Password string - Required if
auth_type==password, the password, max length is 8 - Auth
Type string - auth type. enum:
md5,none,password - Bfd
Minimum intInterval - Dead
Interval int - Export
Policy string - Hello
Interval int - Import
Policy string - Interface
Type string - interface type (nbma = non-broadcast multi-access). enum:
broadcast,nbma,p2mp,p2p - Metric int
- No
Readvertise boolTo Overlay - by default, we'll re-advertise all learned OSPF routes toward overlay
- Passive bool
- whether to send OSPF-Hello
- Auth
Keys map[string]string - Required if
auth_type==md5. Property key is the key number - Auth
Password string - Required if
auth_type==password, the password, max length is 8 - Auth
Type string - auth type. enum:
md5,none,password - Bfd
Minimum intInterval - Dead
Interval int - Export
Policy string - Hello
Interval int - Import
Policy string - Interface
Type string - interface type (nbma = non-broadcast multi-access). enum:
broadcast,nbma,p2mp,p2p - Metric int
- No
Readvertise boolTo Overlay - by default, we'll re-advertise all learned OSPF routes toward overlay
- Passive bool
- whether to send OSPF-Hello
- auth
Keys Map<String,String> - Required if
auth_type==md5. Property key is the key number - auth
Password String - Required if
auth_type==password, the password, max length is 8 - auth
Type String - auth type. enum:
md5,none,password - bfd
Minimum IntegerInterval - dead
Interval Integer - export
Policy String - hello
Interval Integer - import
Policy String - interface
Type String - interface type (nbma = non-broadcast multi-access). enum:
broadcast,nbma,p2mp,p2p - metric Integer
- no
Readvertise BooleanTo Overlay - by default, we'll re-advertise all learned OSPF routes toward overlay
- passive Boolean
- whether to send OSPF-Hello
- auth
Keys {[key: string]: string} - Required if
auth_type==md5. Property key is the key number - auth
Password string - Required if
auth_type==password, the password, max length is 8 - auth
Type string - auth type. enum:
md5,none,password - bfd
Minimum numberInterval - dead
Interval number - export
Policy string - hello
Interval number - import
Policy string - interface
Type string - interface type (nbma = non-broadcast multi-access). enum:
broadcast,nbma,p2mp,p2p - metric number
- no
Readvertise booleanTo Overlay - by default, we'll re-advertise all learned OSPF routes toward overlay
- passive boolean
- whether to send OSPF-Hello
- auth_
keys Mapping[str, str] - Required if
auth_type==md5. Property key is the key number - auth_
password str - Required if
auth_type==password, the password, max length is 8 - auth_
type str - auth type. enum:
md5,none,password - bfd_
minimum_ intinterval - dead_
interval int - export_
policy str - hello_
interval int - import_
policy str - interface_
type str - interface type (nbma = non-broadcast multi-access). enum:
broadcast,nbma,p2mp,p2p - metric int
- no_
readvertise_ boolto_ overlay - by default, we'll re-advertise all learned OSPF routes toward overlay
- passive bool
- whether to send OSPF-Hello
- auth
Keys Map<String> - Required if
auth_type==md5. Property key is the key number - auth
Password String - Required if
auth_type==password, the password, max length is 8 - auth
Type String - auth type. enum:
md5,none,password - bfd
Minimum NumberInterval - dead
Interval Number - export
Policy String - hello
Interval Number - import
Policy String - interface
Type String - interface type (nbma = non-broadcast multi-access). enum:
broadcast,nbma,p2mp,p2p - metric Number
- no
Readvertise BooleanTo Overlay - by default, we'll re-advertise all learned OSPF routes toward overlay
- passive Boolean
- whether to send OSPF-Hello
NetworktemplatePortMirroring, NetworktemplatePortMirroringArgs
- Input
Networks List<string>Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - Input
Port List<string>Ids Egresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - Input
Port List<string>Ids Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - Output
Network string - exaclty one of the
output_port_idoroutput_networkshould be provided - Output
Port stringId - exaclty one of the
output_port_idoroutput_networkshould be provided
- Input
Networks []stringIngresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - Input
Port []stringIds Egresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - Input
Port []stringIds Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - Output
Network string - exaclty one of the
output_port_idoroutput_networkshould be provided - Output
Port stringId - exaclty one of the
output_port_idoroutput_networkshould be provided
- input
Networks List<String>Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input
Port List<String>Ids Egresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input
Port List<String>Ids Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - output
Network String - exaclty one of the
output_port_idoroutput_networkshould be provided - output
Port StringId - exaclty one of the
output_port_idoroutput_networkshould be provided
- input
Networks string[]Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input
Port string[]Ids Egresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input
Port string[]Ids Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - output
Network string - exaclty one of the
output_port_idoroutput_networkshould be provided - output
Port stringId - exaclty one of the
output_port_idoroutput_networkshould be provided
- input_
networks_ Sequence[str]ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input_
port_ Sequence[str]ids_ egresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input_
port_ Sequence[str]ids_ ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - output_
network str - exaclty one of the
output_port_idoroutput_networkshould be provided - output_
port_ strid - exaclty one of the
output_port_idoroutput_networkshould be provided
- input
Networks List<String>Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input
Port List<String>Ids Egresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input
Port List<String>Ids Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - output
Network String - exaclty one of the
output_port_idoroutput_networkshould be provided - output
Port StringId - exaclty one of the
output_port_idoroutput_networkshould be provided
NetworktemplatePortUsages, NetworktemplatePortUsagesArgs
- All
Networks bool - Only if
mode==trunkwhether to trunk all network/vlans - Allow
Dhcpd bool Only if
mode!=dynamicif DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state.When it is not defined, it means using the system’s default setting which depends on whether the port is a access or trunk port.
- Allow
Multiple boolSupplicants - Only if
mode!=dynamic - Bypass
Auth boolWhen Server Down - Only if
mode!=dynamicandport_auth==dot1xbypass auth for known clients if set to true when RADIUS server is down - Bypass
Auth boolWhen Server Down For Unkonwn Client - Only if
mode!=dynamicandport_auth=dot1xbypass auth for all (including unknown clients) if set to true when RADIUS server is down - Description string
- Only if
mode!=dynamic - Disable
Autoneg bool - Only if
mode!=dynamicif speed and duplex are specified, whether to disable autonegotiation - Disabled bool
- Only if
mode!=dynamicwhether the port is disabled - Duplex string
- Only if
mode!=dynamiclink connection mode. enum:auto,full,half - Dynamic
Vlan List<string>Networks - Only if
mode!=dynamicandport_auth==dot1x, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return - Enable
Mac boolAuth - Only if
mode!=dynamicandport_auth==dot1xwhether to enable MAC Auth - Enable
Qos bool - Only if
mode!=dynamic - Guest
Network string - Only if
mode!=dynamicandport_auth==dot1xwhich network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - Inter
Switch boolLink - Only if
mode!=dynamicinter_switch_link is used together with "isolation" under networks NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together - Mac
Auth boolOnly - Only if
mode!=dynamicandenable_mac_auth==true - Mac
Auth boolPreferred - Only if
mode!=dynamic+enable_mac_auth==true+mac_auth_only==false, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x. - Mac
Auth stringProtocol - Only if
mode!=dynamicandenable_mac_auth==true. This type is ignored if mist_nac is enabled. enum:eap-md5,eap-peap,pap - Mac
Limit int - Only if
mode!=dynamicmax number of mac addresses, default is 0 for unlimited, otherwise range is 1 or higher, with upper bound constrained by platform - Mode string
mode==dynamicmust only be used with the port usage with the namedynamic. enum:access,dynamic,inet,trunk- Mtu int
- Only if
mode!=dynamicmedia maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. The default value is 1514. - Networks List<string>
- Only if
mode==trunk, the list of network/vlans - Persist
Mac bool - Only if
mode==accessandport_auth!=dot1xwhether the port should retain dynamically learned MAC addresses - Poe
Disabled bool - Only if
mode!=dynamicwhether PoE capabilities are disabled for a port - Port
Auth string - Only if
mode!=dynamicif dot1x is desired, set to dot1x. enum:dot1x - Port
Network string - Only if
mode!=dynamicnative network/vlan for untagged traffic - Reauth
Interval int - Only if
mode!=dynamicandport_auth=dot1xreauthentication interval range - Reset
Default stringWhen - Only if
mode==dynamicControl when the DPC port should be changed to the default port usage. enum:link_down,none(let the DPC port keep at the current port usage) - Rules
List<Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Port Usages Rule> - Only if
mode==dynamic - Server
Fail stringNetwork - Only if
mode!=dynamicandport_auth==dot1xsets server fail fallback vlan - Server
Reject stringNetwork - Only if
mode!=dynamicandport_auth==dot1xwhen radius server reject / fails - Speed string
- Only if
mode!=dynamicspeed, default is auto to automatically negotiate speed - Storm
Control Pulumi.Juniper Mist. Site. Inputs. Networktemplate Port Usages Storm Control - Switch storm control
Only if
mode!=dynamic - Stp
Edge bool - Only if
mode!=dynamicwhen enabled, the port is not expected to receive BPDU frames - Stp
No boolRoot Port - Stp
P2p bool - Voip
Network string - Only if
mode!=dynamicnetwork/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- All
Networks bool - Only if
mode==trunkwhether to trunk all network/vlans - Allow
Dhcpd bool Only if
mode!=dynamicif DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state.When it is not defined, it means using the system’s default setting which depends on whether the port is a access or trunk port.
- Allow
Multiple boolSupplicants - Only if
mode!=dynamic - Bypass
Auth boolWhen Server Down - Only if
mode!=dynamicandport_auth==dot1xbypass auth for known clients if set to true when RADIUS server is down - Bypass
Auth boolWhen Server Down For Unkonwn Client - Only if
mode!=dynamicandport_auth=dot1xbypass auth for all (including unknown clients) if set to true when RADIUS server is down - Description string
- Only if
mode!=dynamic - Disable
Autoneg bool - Only if
mode!=dynamicif speed and duplex are specified, whether to disable autonegotiation - Disabled bool
- Only if
mode!=dynamicwhether the port is disabled - Duplex string
- Only if
mode!=dynamiclink connection mode. enum:auto,full,half - Dynamic
Vlan []stringNetworks - Only if
mode!=dynamicandport_auth==dot1x, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return - Enable
Mac boolAuth - Only if
mode!=dynamicandport_auth==dot1xwhether to enable MAC Auth - Enable
Qos bool - Only if
mode!=dynamic - Guest
Network string - Only if
mode!=dynamicandport_auth==dot1xwhich network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - Inter
Switch boolLink - Only if
mode!=dynamicinter_switch_link is used together with "isolation" under networks NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together - Mac
Auth boolOnly - Only if
mode!=dynamicandenable_mac_auth==true - Mac
Auth boolPreferred - Only if
mode!=dynamic+enable_mac_auth==true+mac_auth_only==false, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x. - Mac
Auth stringProtocol - Only if
mode!=dynamicandenable_mac_auth==true. This type is ignored if mist_nac is enabled. enum:eap-md5,eap-peap,pap - Mac
Limit int - Only if
mode!=dynamicmax number of mac addresses, default is 0 for unlimited, otherwise range is 1 or higher, with upper bound constrained by platform - Mode string
mode==dynamicmust only be used with the port usage with the namedynamic. enum:access,dynamic,inet,trunk- Mtu int
- Only if
mode!=dynamicmedia maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. The default value is 1514. - Networks []string
- Only if
mode==trunk, the list of network/vlans - Persist
Mac bool - Only if
mode==accessandport_auth!=dot1xwhether the port should retain dynamically learned MAC addresses - Poe
Disabled bool - Only if
mode!=dynamicwhether PoE capabilities are disabled for a port - Port
Auth string - Only if
mode!=dynamicif dot1x is desired, set to dot1x. enum:dot1x - Port
Network string - Only if
mode!=dynamicnative network/vlan for untagged traffic - Reauth
Interval int - Only if
mode!=dynamicandport_auth=dot1xreauthentication interval range - Reset
Default stringWhen - Only if
mode==dynamicControl when the DPC port should be changed to the default port usage. enum:link_down,none(let the DPC port keep at the current port usage) - Rules
[]Networktemplate
Port Usages Rule - Only if
mode==dynamic - Server
Fail stringNetwork - Only if
mode!=dynamicandport_auth==dot1xsets server fail fallback vlan - Server
Reject stringNetwork - Only if
mode!=dynamicandport_auth==dot1xwhen radius server reject / fails - Speed string
- Only if
mode!=dynamicspeed, default is auto to automatically negotiate speed - Storm
Control NetworktemplatePort Usages Storm Control - Switch storm control
Only if
mode!=dynamic - Stp
Edge bool - Only if
mode!=dynamicwhen enabled, the port is not expected to receive BPDU frames - Stp
No boolRoot Port - Stp
P2p bool - Voip
Network string - Only if
mode!=dynamicnetwork/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- all
Networks Boolean - Only if
mode==trunkwhether to trunk all network/vlans - allow
Dhcpd Boolean Only if
mode!=dynamicif DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state.When it is not defined, it means using the system’s default setting which depends on whether the port is a access or trunk port.
- allow
Multiple BooleanSupplicants - Only if
mode!=dynamic - bypass
Auth BooleanWhen Server Down - Only if
mode!=dynamicandport_auth==dot1xbypass auth for known clients if set to true when RADIUS server is down - bypass
Auth BooleanWhen Server Down For Unkonwn Client - Only if
mode!=dynamicandport_auth=dot1xbypass auth for all (including unknown clients) if set to true when RADIUS server is down - description String
- Only if
mode!=dynamic - disable
Autoneg Boolean - Only if
mode!=dynamicif speed and duplex are specified, whether to disable autonegotiation - disabled Boolean
- Only if
mode!=dynamicwhether the port is disabled - duplex String
- Only if
mode!=dynamiclink connection mode. enum:auto,full,half - dynamic
Vlan List<String>Networks - Only if
mode!=dynamicandport_auth==dot1x, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return - enable
Mac BooleanAuth - Only if
mode!=dynamicandport_auth==dot1xwhether to enable MAC Auth - enable
Qos Boolean - Only if
mode!=dynamic - guest
Network String - Only if
mode!=dynamicandport_auth==dot1xwhich network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - inter
Switch BooleanLink - Only if
mode!=dynamicinter_switch_link is used together with "isolation" under networks NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together - mac
Auth BooleanOnly - Only if
mode!=dynamicandenable_mac_auth==true - mac
Auth BooleanPreferred - Only if
mode!=dynamic+enable_mac_auth==true+mac_auth_only==false, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x. - mac
Auth StringProtocol - Only if
mode!=dynamicandenable_mac_auth==true. This type is ignored if mist_nac is enabled. enum:eap-md5,eap-peap,pap - mac
Limit Integer - Only if
mode!=dynamicmax number of mac addresses, default is 0 for unlimited, otherwise range is 1 or higher, with upper bound constrained by platform - mode String
mode==dynamicmust only be used with the port usage with the namedynamic. enum:access,dynamic,inet,trunk- mtu Integer
- Only if
mode!=dynamicmedia maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. The default value is 1514. - networks List<String>
- Only if
mode==trunk, the list of network/vlans - persist
Mac Boolean - Only if
mode==accessandport_auth!=dot1xwhether the port should retain dynamically learned MAC addresses - poe
Disabled Boolean - Only if
mode!=dynamicwhether PoE capabilities are disabled for a port - port
Auth String - Only if
mode!=dynamicif dot1x is desired, set to dot1x. enum:dot1x - port
Network String - Only if
mode!=dynamicnative network/vlan for untagged traffic - reauth
Interval Integer - Only if
mode!=dynamicandport_auth=dot1xreauthentication interval range - reset
Default StringWhen - Only if
mode==dynamicControl when the DPC port should be changed to the default port usage. enum:link_down,none(let the DPC port keep at the current port usage) - rules
List<Networktemplate
Port Usages Rule> - Only if
mode==dynamic - server
Fail StringNetwork - Only if
mode!=dynamicandport_auth==dot1xsets server fail fallback vlan - server
Reject StringNetwork - Only if
mode!=dynamicandport_auth==dot1xwhen radius server reject / fails - speed String
- Only if
mode!=dynamicspeed, default is auto to automatically negotiate speed - storm
Control NetworktemplatePort Usages Storm Control - Switch storm control
Only if
mode!=dynamic - stp
Edge Boolean - Only if
mode!=dynamicwhen enabled, the port is not expected to receive BPDU frames - stp
No BooleanRoot Port - stp
P2p Boolean - voip
Network String - Only if
mode!=dynamicnetwork/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- all
Networks boolean - Only if
mode==trunkwhether to trunk all network/vlans - allow
Dhcpd boolean Only if
mode!=dynamicif DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state.When it is not defined, it means using the system’s default setting which depends on whether the port is a access or trunk port.
- allow
Multiple booleanSupplicants - Only if
mode!=dynamic - bypass
Auth booleanWhen Server Down - Only if
mode!=dynamicandport_auth==dot1xbypass auth for known clients if set to true when RADIUS server is down - bypass
Auth booleanWhen Server Down For Unkonwn Client - Only if
mode!=dynamicandport_auth=dot1xbypass auth for all (including unknown clients) if set to true when RADIUS server is down - description string
- Only if
mode!=dynamic - disable
Autoneg boolean - Only if
mode!=dynamicif speed and duplex are specified, whether to disable autonegotiation - disabled boolean
- Only if
mode!=dynamicwhether the port is disabled - duplex string
- Only if
mode!=dynamiclink connection mode. enum:auto,full,half - dynamic
Vlan string[]Networks - Only if
mode!=dynamicandport_auth==dot1x, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return - enable
Mac booleanAuth - Only if
mode!=dynamicandport_auth==dot1xwhether to enable MAC Auth - enable
Qos boolean - Only if
mode!=dynamic - guest
Network string - Only if
mode!=dynamicandport_auth==dot1xwhich network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - inter
Switch booleanLink - Only if
mode!=dynamicinter_switch_link is used together with "isolation" under networks NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together - mac
Auth booleanOnly - Only if
mode!=dynamicandenable_mac_auth==true - mac
Auth booleanPreferred - Only if
mode!=dynamic+enable_mac_auth==true+mac_auth_only==false, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x. - mac
Auth stringProtocol - Only if
mode!=dynamicandenable_mac_auth==true. This type is ignored if mist_nac is enabled. enum:eap-md5,eap-peap,pap - mac
Limit number - Only if
mode!=dynamicmax number of mac addresses, default is 0 for unlimited, otherwise range is 1 or higher, with upper bound constrained by platform - mode string
mode==dynamicmust only be used with the port usage with the namedynamic. enum:access,dynamic,inet,trunk- mtu number
- Only if
mode!=dynamicmedia maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. The default value is 1514. - networks string[]
- Only if
mode==trunk, the list of network/vlans - persist
Mac boolean - Only if
mode==accessandport_auth!=dot1xwhether the port should retain dynamically learned MAC addresses - poe
Disabled boolean - Only if
mode!=dynamicwhether PoE capabilities are disabled for a port - port
Auth string - Only if
mode!=dynamicif dot1x is desired, set to dot1x. enum:dot1x - port
Network string - Only if
mode!=dynamicnative network/vlan for untagged traffic - reauth
Interval number - Only if
mode!=dynamicandport_auth=dot1xreauthentication interval range - reset
Default stringWhen - Only if
mode==dynamicControl when the DPC port should be changed to the default port usage. enum:link_down,none(let the DPC port keep at the current port usage) - rules
Networktemplate
Port Usages Rule[] - Only if
mode==dynamic - server
Fail stringNetwork - Only if
mode!=dynamicandport_auth==dot1xsets server fail fallback vlan - server
Reject stringNetwork - Only if
mode!=dynamicandport_auth==dot1xwhen radius server reject / fails - speed string
- Only if
mode!=dynamicspeed, default is auto to automatically negotiate speed - storm
Control NetworktemplatePort Usages Storm Control - Switch storm control
Only if
mode!=dynamic - stp
Edge boolean - Only if
mode!=dynamicwhen enabled, the port is not expected to receive BPDU frames - stp
No booleanRoot Port - stp
P2p boolean - voip
Network string - Only if
mode!=dynamicnetwork/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- all_
networks bool - Only if
mode==trunkwhether to trunk all network/vlans - allow_
dhcpd bool Only if
mode!=dynamicif DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state.When it is not defined, it means using the system’s default setting which depends on whether the port is a access or trunk port.
- allow_
multiple_ boolsupplicants - Only if
mode!=dynamic - bypass_
auth_ boolwhen_ server_ down - Only if
mode!=dynamicandport_auth==dot1xbypass auth for known clients if set to true when RADIUS server is down - bypass_
auth_ boolwhen_ server_ down_ for_ unkonwn_ client - Only if
mode!=dynamicandport_auth=dot1xbypass auth for all (including unknown clients) if set to true when RADIUS server is down - description str
- Only if
mode!=dynamic - disable_
autoneg bool - Only if
mode!=dynamicif speed and duplex are specified, whether to disable autonegotiation - disabled bool
- Only if
mode!=dynamicwhether the port is disabled - duplex str
- Only if
mode!=dynamiclink connection mode. enum:auto,full,half - dynamic_
vlan_ Sequence[str]networks - Only if
mode!=dynamicandport_auth==dot1x, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return - enable_
mac_ boolauth - Only if
mode!=dynamicandport_auth==dot1xwhether to enable MAC Auth - enable_
qos bool - Only if
mode!=dynamic - guest_
network str - Only if
mode!=dynamicandport_auth==dot1xwhich network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - inter_
switch_ boollink - Only if
mode!=dynamicinter_switch_link is used together with "isolation" under networks NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together - mac_
auth_ boolonly - Only if
mode!=dynamicandenable_mac_auth==true - mac_
auth_ boolpreferred - Only if
mode!=dynamic+enable_mac_auth==true+mac_auth_only==false, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x. - mac_
auth_ strprotocol - Only if
mode!=dynamicandenable_mac_auth==true. This type is ignored if mist_nac is enabled. enum:eap-md5,eap-peap,pap - mac_
limit int - Only if
mode!=dynamicmax number of mac addresses, default is 0 for unlimited, otherwise range is 1 or higher, with upper bound constrained by platform - mode str
mode==dynamicmust only be used with the port usage with the namedynamic. enum:access,dynamic,inet,trunk- mtu int
- Only if
mode!=dynamicmedia maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. The default value is 1514. - networks Sequence[str]
- Only if
mode==trunk, the list of network/vlans - persist_
mac bool - Only if
mode==accessandport_auth!=dot1xwhether the port should retain dynamically learned MAC addresses - poe_
disabled bool - Only if
mode!=dynamicwhether PoE capabilities are disabled for a port - port_
auth str - Only if
mode!=dynamicif dot1x is desired, set to dot1x. enum:dot1x - port_
network str - Only if
mode!=dynamicnative network/vlan for untagged traffic - reauth_
interval int - Only if
mode!=dynamicandport_auth=dot1xreauthentication interval range - reset_
default_ strwhen - Only if
mode==dynamicControl when the DPC port should be changed to the default port usage. enum:link_down,none(let the DPC port keep at the current port usage) - rules
Sequence[Networktemplate
Port Usages Rule] - Only if
mode==dynamic - server_
fail_ strnetwork - Only if
mode!=dynamicandport_auth==dot1xsets server fail fallback vlan - server_
reject_ strnetwork - Only if
mode!=dynamicandport_auth==dot1xwhen radius server reject / fails - speed str
- Only if
mode!=dynamicspeed, default is auto to automatically negotiate speed - storm_
control NetworktemplatePort Usages Storm Control - Switch storm control
Only if
mode!=dynamic - stp_
edge bool - Only if
mode!=dynamicwhen enabled, the port is not expected to receive BPDU frames - stp_
no_ boolroot_ port - stp_
p2p bool - voip_
network str - Only if
mode!=dynamicnetwork/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- all
Networks Boolean - Only if
mode==trunkwhether to trunk all network/vlans - allow
Dhcpd Boolean Only if
mode!=dynamicif DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state.When it is not defined, it means using the system’s default setting which depends on whether the port is a access or trunk port.
- allow
Multiple BooleanSupplicants - Only if
mode!=dynamic - bypass
Auth BooleanWhen Server Down - Only if
mode!=dynamicandport_auth==dot1xbypass auth for known clients if set to true when RADIUS server is down - bypass
Auth BooleanWhen Server Down For Unkonwn Client - Only if
mode!=dynamicandport_auth=dot1xbypass auth for all (including unknown clients) if set to true when RADIUS server is down - description String
- Only if
mode!=dynamic - disable
Autoneg Boolean - Only if
mode!=dynamicif speed and duplex are specified, whether to disable autonegotiation - disabled Boolean
- Only if
mode!=dynamicwhether the port is disabled - duplex String
- Only if
mode!=dynamiclink connection mode. enum:auto,full,half - dynamic
Vlan List<String>Networks - Only if
mode!=dynamicandport_auth==dot1x, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return - enable
Mac BooleanAuth - Only if
mode!=dynamicandport_auth==dot1xwhether to enable MAC Auth - enable
Qos Boolean - Only if
mode!=dynamic - guest
Network String - Only if
mode!=dynamicandport_auth==dot1xwhich network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - inter
Switch BooleanLink - Only if
mode!=dynamicinter_switch_link is used together with "isolation" under networks NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together - mac
Auth BooleanOnly - Only if
mode!=dynamicandenable_mac_auth==true - mac
Auth BooleanPreferred - Only if
mode!=dynamic+enable_mac_auth==true+mac_auth_only==false, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x. - mac
Auth StringProtocol - Only if
mode!=dynamicandenable_mac_auth==true. This type is ignored if mist_nac is enabled. enum:eap-md5,eap-peap,pap - mac
Limit Number - Only if
mode!=dynamicmax number of mac addresses, default is 0 for unlimited, otherwise range is 1 or higher, with upper bound constrained by platform - mode String
mode==dynamicmust only be used with the port usage with the namedynamic. enum:access,dynamic,inet,trunk- mtu Number
- Only if
mode!=dynamicmedia maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. The default value is 1514. - networks List<String>
- Only if
mode==trunk, the list of network/vlans - persist
Mac Boolean - Only if
mode==accessandport_auth!=dot1xwhether the port should retain dynamically learned MAC addresses - poe
Disabled Boolean - Only if
mode!=dynamicwhether PoE capabilities are disabled for a port - port
Auth String - Only if
mode!=dynamicif dot1x is desired, set to dot1x. enum:dot1x - port
Network String - Only if
mode!=dynamicnative network/vlan for untagged traffic - reauth
Interval Number - Only if
mode!=dynamicandport_auth=dot1xreauthentication interval range - reset
Default StringWhen - Only if
mode==dynamicControl when the DPC port should be changed to the default port usage. enum:link_down,none(let the DPC port keep at the current port usage) - rules List<Property Map>
- Only if
mode==dynamic - server
Fail StringNetwork - Only if
mode!=dynamicandport_auth==dot1xsets server fail fallback vlan - server
Reject StringNetwork - Only if
mode!=dynamicandport_auth==dot1xwhen radius server reject / fails - speed String
- Only if
mode!=dynamicspeed, default is auto to automatically negotiate speed - storm
Control Property Map - Switch storm control
Only if
mode!=dynamic - stp
Edge Boolean - Only if
mode!=dynamicwhen enabled, the port is not expected to receive BPDU frames - stp
No BooleanRoot Port - stp
P2p Boolean - voip
Network String - Only if
mode!=dynamicnetwork/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
NetworktemplatePortUsagesRule, NetworktemplatePortUsagesRuleArgs
- Src string
- enum:
link_peermac,lldp_chassis_id,lldp_hardware_revision,lldp_manufacturer_name,lldp_oui,lldp_serial_number,lldp_system_name,radius_dynamicfilter,radius_usermac,radius_username - Equals string
- Equals
Anies List<string> - use
equals_anyto match any item in a list - Expression string
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- Usage string
port_usagename
- Src string
- enum:
link_peermac,lldp_chassis_id,lldp_hardware_revision,lldp_manufacturer_name,lldp_oui,lldp_serial_number,lldp_system_name,radius_dynamicfilter,radius_usermac,radius_username - Equals string
- Equals
Anies []string - use
equals_anyto match any item in a list - Expression string
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- Usage string
port_usagename
- src String
- enum:
link_peermac,lldp_chassis_id,lldp_hardware_revision,lldp_manufacturer_name,lldp_oui,lldp_serial_number,lldp_system_name,radius_dynamicfilter,radius_usermac,radius_username - equals
Anies List<String> - use
equals_anyto match any item in a list - equals_ String
- expression String
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- usage String
port_usagename
- src string
- enum:
link_peermac,lldp_chassis_id,lldp_hardware_revision,lldp_manufacturer_name,lldp_oui,lldp_serial_number,lldp_system_name,radius_dynamicfilter,radius_usermac,radius_username - equals string
- equals
Anies string[] - use
equals_anyto match any item in a list - expression string
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- usage string
port_usagename
- src str
- enum:
link_peermac,lldp_chassis_id,lldp_hardware_revision,lldp_manufacturer_name,lldp_oui,lldp_serial_number,lldp_system_name,radius_dynamicfilter,radius_usermac,radius_username - equals str
- equals_
anies Sequence[str] - use
equals_anyto match any item in a list - expression str
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- usage str
port_usagename
- src String
- enum:
link_peermac,lldp_chassis_id,lldp_hardware_revision,lldp_manufacturer_name,lldp_oui,lldp_serial_number,lldp_system_name,radius_dynamicfilter,radius_usermac,radius_username - equals String
- equals
Anies List<String> - use
equals_anyto match any item in a list - expression String
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- usage String
port_usagename
NetworktemplatePortUsagesStormControl, NetworktemplatePortUsagesStormControlArgs
- No
Broadcast bool - whether to disable storm control on broadcast traffic
- No
Multicast bool - whether to disable storm control on multicast traffic
- No
Registered boolMulticast - whether to disable storm control on registered multicast traffic
- No
Unknown boolUnicast - whether to disable storm control on unknown unicast traffic
- Percentage int
- bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- No
Broadcast bool - whether to disable storm control on broadcast traffic
- No
Multicast bool - whether to disable storm control on multicast traffic
- No
Registered boolMulticast - whether to disable storm control on registered multicast traffic
- No
Unknown boolUnicast - whether to disable storm control on unknown unicast traffic
- Percentage int
- bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- no
Broadcast Boolean - whether to disable storm control on broadcast traffic
- no
Multicast Boolean - whether to disable storm control on multicast traffic
- no
Registered BooleanMulticast - whether to disable storm control on registered multicast traffic
- no
Unknown BooleanUnicast - whether to disable storm control on unknown unicast traffic
- percentage Integer
- bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- no
Broadcast boolean - whether to disable storm control on broadcast traffic
- no
Multicast boolean - whether to disable storm control on multicast traffic
- no
Registered booleanMulticast - whether to disable storm control on registered multicast traffic
- no
Unknown booleanUnicast - whether to disable storm control on unknown unicast traffic
- percentage number
- bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- no_
broadcast bool - whether to disable storm control on broadcast traffic
- no_
multicast bool - whether to disable storm control on multicast traffic
- no_
registered_ boolmulticast - whether to disable storm control on registered multicast traffic
- no_
unknown_ boolunicast - whether to disable storm control on unknown unicast traffic
- percentage int
- bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- no
Broadcast Boolean - whether to disable storm control on broadcast traffic
- no
Multicast Boolean - whether to disable storm control on multicast traffic
- no
Registered BooleanMulticast - whether to disable storm control on registered multicast traffic
- no
Unknown BooleanUnicast - whether to disable storm control on unknown unicast traffic
- percentage Number
- bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
NetworktemplateRadiusConfig, NetworktemplateRadiusConfigArgs
- Acct
Interim intInterval - how frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
- Acct
Servers List<Pulumi.Juniper Mist. Site. Inputs. Networktemplate Radius Config Acct Server> - Auth
Servers List<Pulumi.Juniper Mist. Site. Inputs. Networktemplate Radius Config Auth Server> - Auth
Servers intRetries - radius auth session retries
- Auth
Servers intTimeout - radius auth session timeout
- Coa
Enabled bool - Coa
Port int - Network string
- use
networkorsource_ipwhich network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - Source
Ip string - use
networkorsource_ip
- Acct
Interim intInterval - how frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
- Acct
Servers []NetworktemplateRadius Config Acct Server - Auth
Servers []NetworktemplateRadius Config Auth Server - Auth
Servers intRetries - radius auth session retries
- Auth
Servers intTimeout - radius auth session timeout
- Coa
Enabled bool - Coa
Port int - Network string
- use
networkorsource_ipwhich network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - Source
Ip string - use
networkorsource_ip
- acct
Interim IntegerInterval - how frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
- acct
Servers List<NetworktemplateRadius Config Acct Server> - auth
Servers List<NetworktemplateRadius Config Auth Server> - auth
Servers IntegerRetries - radius auth session retries
- auth
Servers IntegerTimeout - radius auth session timeout
- coa
Enabled Boolean - coa
Port Integer - network String
- use
networkorsource_ipwhich network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - source
Ip String - use
networkorsource_ip
- acct
Interim numberInterval - how frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
- acct
Servers NetworktemplateRadius Config Acct Server[] - auth
Servers NetworktemplateRadius Config Auth Server[] - auth
Servers numberRetries - radius auth session retries
- auth
Servers numberTimeout - radius auth session timeout
- coa
Enabled boolean - coa
Port number - network string
- use
networkorsource_ipwhich network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - source
Ip string - use
networkorsource_ip
- acct_
interim_ intinterval - how frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
- acct_
servers Sequence[NetworktemplateRadius Config Acct Server] - auth_
servers Sequence[NetworktemplateRadius Config Auth Server] - auth_
servers_ intretries - radius auth session retries
- auth_
servers_ inttimeout - radius auth session timeout
- coa_
enabled bool - coa_
port int - network str
- use
networkorsource_ipwhich network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - source_
ip str - use
networkorsource_ip
- acct
Interim NumberInterval - how frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
- acct
Servers List<Property Map> - auth
Servers List<Property Map> - auth
Servers NumberRetries - radius auth session retries
- auth
Servers NumberTimeout - radius auth session timeout
- coa
Enabled Boolean - coa
Port Number - network String
- use
networkorsource_ipwhich network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - source
Ip String - use
networkorsource_ip
NetworktemplateRadiusConfigAcctServer, NetworktemplateRadiusConfigAcctServerArgs
- Host string
- ip / hostname of RADIUS server
- Secret string
- secret of RADIUS server
- Keywrap
Enabled bool - Keywrap
Format string - enum:
ascii,hex - Keywrap
Kek string - Keywrap
Mack string - Port int
- Acct port of RADIUS server
- Host string
- ip / hostname of RADIUS server
- Secret string
- secret of RADIUS server
- Keywrap
Enabled bool - Keywrap
Format string - enum:
ascii,hex - Keywrap
Kek string - Keywrap
Mack string - Port int
- Acct port of RADIUS server
- host String
- ip / hostname of RADIUS server
- secret String
- secret of RADIUS server
- keywrap
Enabled Boolean - keywrap
Format String - enum:
ascii,hex - keywrap
Kek String - keywrap
Mack String - port Integer
- Acct port of RADIUS server
- host string
- ip / hostname of RADIUS server
- secret string
- secret of RADIUS server
- keywrap
Enabled boolean - keywrap
Format string - enum:
ascii,hex - keywrap
Kek string - keywrap
Mack string - port number
- Acct port of RADIUS server
- host str
- ip / hostname of RADIUS server
- secret str
- secret of RADIUS server
- keywrap_
enabled bool - keywrap_
format str - enum:
ascii,hex - keywrap_
kek str - keywrap_
mack str - port int
- Acct port of RADIUS server
- host String
- ip / hostname of RADIUS server
- secret String
- secret of RADIUS server
- keywrap
Enabled Boolean - keywrap
Format String - enum:
ascii,hex - keywrap
Kek String - keywrap
Mack String - port Number
- Acct port of RADIUS server
NetworktemplateRadiusConfigAuthServer, NetworktemplateRadiusConfigAuthServerArgs
- Host string
- ip / hostname of RADIUS server
- Secret string
- secret of RADIUS server
- Keywrap
Enabled bool - Keywrap
Format string - enum:
ascii,hex - Keywrap
Kek string - Keywrap
Mack string - Port int
- Auth port of RADIUS server
- Require
Message boolAuthenticator - whether to require Message-Authenticator in requests
- Host string
- ip / hostname of RADIUS server
- Secret string
- secret of RADIUS server
- Keywrap
Enabled bool - Keywrap
Format string - enum:
ascii,hex - Keywrap
Kek string - Keywrap
Mack string - Port int
- Auth port of RADIUS server
- Require
Message boolAuthenticator - whether to require Message-Authenticator in requests
- host String
- ip / hostname of RADIUS server
- secret String
- secret of RADIUS server
- keywrap
Enabled Boolean - keywrap
Format String - enum:
ascii,hex - keywrap
Kek String - keywrap
Mack String - port Integer
- Auth port of RADIUS server
- require
Message BooleanAuthenticator - whether to require Message-Authenticator in requests
- host string
- ip / hostname of RADIUS server
- secret string
- secret of RADIUS server
- keywrap
Enabled boolean - keywrap
Format string - enum:
ascii,hex - keywrap
Kek string - keywrap
Mack string - port number
- Auth port of RADIUS server
- require
Message booleanAuthenticator - whether to require Message-Authenticator in requests
- host str
- ip / hostname of RADIUS server
- secret str
- secret of RADIUS server
- keywrap_
enabled bool - keywrap_
format str - enum:
ascii,hex - keywrap_
kek str - keywrap_
mack str - port int
- Auth port of RADIUS server
- require_
message_ boolauthenticator - whether to require Message-Authenticator in requests
- host String
- ip / hostname of RADIUS server
- secret String
- secret of RADIUS server
- keywrap
Enabled Boolean - keywrap
Format String - enum:
ascii,hex - keywrap
Kek String - keywrap
Mack String - port Number
- Auth port of RADIUS server
- require
Message BooleanAuthenticator - whether to require Message-Authenticator in requests
NetworktemplateRemoteSyslog, NetworktemplateRemoteSyslogArgs
- Archive
Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Remote Syslog Archive - Console
Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Remote Syslog Console - Enabled bool
- Files
List<Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Remote Syslog File> - Network string
- if source_address is configured, will use the vlan firstly otherwise use source_ip
- Send
To boolAll Servers - Servers
List<Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Remote Syslog Server> - Time
Format string - enum:
millisecond,year,year millisecond - Users
List<Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Remote Syslog User>
- Archive
Networktemplate
Remote Syslog Archive - Console
Networktemplate
Remote Syslog Console - Enabled bool
- Files
[]Networktemplate
Remote Syslog File - Network string
- if source_address is configured, will use the vlan firstly otherwise use source_ip
- Send
To boolAll Servers - Servers
[]Networktemplate
Remote Syslog Server - Time
Format string - enum:
millisecond,year,year millisecond - Users
[]Networktemplate
Remote Syslog User
- archive
Networktemplate
Remote Syslog Archive - console
Networktemplate
Remote Syslog Console - enabled Boolean
- files
List<Networktemplate
Remote Syslog File> - network String
- if source_address is configured, will use the vlan firstly otherwise use source_ip
- send
To BooleanAll Servers - servers
List<Networktemplate
Remote Syslog Server> - time
Format String - enum:
millisecond,year,year millisecond - users
List<Networktemplate
Remote Syslog User>
- archive
Networktemplate
Remote Syslog Archive - console
Networktemplate
Remote Syslog Console - enabled boolean
- files
Networktemplate
Remote Syslog File[] - network string
- if source_address is configured, will use the vlan firstly otherwise use source_ip
- send
To booleanAll Servers - servers
Networktemplate
Remote Syslog Server[] - time
Format string - enum:
millisecond,year,year millisecond - users
Networktemplate
Remote Syslog User[]
- archive
Networktemplate
Remote Syslog Archive - console
Networktemplate
Remote Syslog Console - enabled bool
- files
Sequence[Networktemplate
Remote Syslog File] - network str
- if source_address is configured, will use the vlan firstly otherwise use source_ip
- send_
to_ boolall_ servers - servers
Sequence[Networktemplate
Remote Syslog Server] - time_
format str - enum:
millisecond,year,year millisecond - users
Sequence[Networktemplate
Remote Syslog User]
- archive Property Map
- console Property Map
- enabled Boolean
- files List<Property Map>
- network String
- if source_address is configured, will use the vlan firstly otherwise use source_ip
- send
To BooleanAll Servers - servers List<Property Map>
- time
Format String - enum:
millisecond,year,year millisecond - users List<Property Map>
NetworktemplateRemoteSyslogArchive, NetworktemplateRemoteSyslogArchiveArgs
NetworktemplateRemoteSyslogConsole, NetworktemplateRemoteSyslogConsoleArgs
NetworktemplateRemoteSyslogConsoleContent, NetworktemplateRemoteSyslogConsoleContentArgs
NetworktemplateRemoteSyslogFile, NetworktemplateRemoteSyslogFileArgs
- archive Property Map
- contents List<Property Map>
- explicit
Priority Boolean - file String
- match String
- structured
Data Boolean
NetworktemplateRemoteSyslogFileArchive, NetworktemplateRemoteSyslogFileArchiveArgs
NetworktemplateRemoteSyslogFileContent, NetworktemplateRemoteSyslogFileContentArgs
NetworktemplateRemoteSyslogServer, NetworktemplateRemoteSyslogServerArgs
- Contents
List<Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Remote Syslog Server Content> - Explicit
Priority bool - Facility string
- enum:
any,authorization,change-log,config,conflict-log,daemon,dfc,external,firewall,ftp,interactive-commands,kernel,ntp,pfe,security,user - Host string
- Match string
- Port int
- Protocol string
- enum:
tcp,udp - Routing
Instance string - Severity string
- enum:
alert,any,critical,emergency,error,info,notice,warning - Source
Address string - if source_address is configured, will use the vlan firstly otherwise use source_ip
- Structured
Data bool - Tag string
- Contents
[]Networktemplate
Remote Syslog Server Content - Explicit
Priority bool - Facility string
- enum:
any,authorization,change-log,config,conflict-log,daemon,dfc,external,firewall,ftp,interactive-commands,kernel,ntp,pfe,security,user - Host string
- Match string
- Port int
- Protocol string
- enum:
tcp,udp - Routing
Instance string - Severity string
- enum:
alert,any,critical,emergency,error,info,notice,warning - Source
Address string - if source_address is configured, will use the vlan firstly otherwise use source_ip
- Structured
Data bool - Tag string
- contents
List<Networktemplate
Remote Syslog Server Content> - explicit
Priority Boolean - facility String
- enum:
any,authorization,change-log,config,conflict-log,daemon,dfc,external,firewall,ftp,interactive-commands,kernel,ntp,pfe,security,user - host String
- match String
- port Integer
- protocol String
- enum:
tcp,udp - routing
Instance String - severity String
- enum:
alert,any,critical,emergency,error,info,notice,warning - source
Address String - if source_address is configured, will use the vlan firstly otherwise use source_ip
- structured
Data Boolean - tag String
- contents
Networktemplate
Remote Syslog Server Content[] - explicit
Priority boolean - facility string
- enum:
any,authorization,change-log,config,conflict-log,daemon,dfc,external,firewall,ftp,interactive-commands,kernel,ntp,pfe,security,user - host string
- match string
- port number
- protocol string
- enum:
tcp,udp - routing
Instance string - severity string
- enum:
alert,any,critical,emergency,error,info,notice,warning - source
Address string - if source_address is configured, will use the vlan firstly otherwise use source_ip
- structured
Data boolean - tag string
- contents
Sequence[Networktemplate
Remote Syslog Server Content] - explicit_
priority bool - facility str
- enum:
any,authorization,change-log,config,conflict-log,daemon,dfc,external,firewall,ftp,interactive-commands,kernel,ntp,pfe,security,user - host str
- match str
- port int
- protocol str
- enum:
tcp,udp - routing_
instance str - severity str
- enum:
alert,any,critical,emergency,error,info,notice,warning - source_
address str - if source_address is configured, will use the vlan firstly otherwise use source_ip
- structured_
data bool - tag str
- contents List<Property Map>
- explicit
Priority Boolean - facility String
- enum:
any,authorization,change-log,config,conflict-log,daemon,dfc,external,firewall,ftp,interactive-commands,kernel,ntp,pfe,security,user - host String
- match String
- port Number
- protocol String
- enum:
tcp,udp - routing
Instance String - severity String
- enum:
alert,any,critical,emergency,error,info,notice,warning - source
Address String - if source_address is configured, will use the vlan firstly otherwise use source_ip
- structured
Data Boolean - tag String
NetworktemplateRemoteSyslogServerContent, NetworktemplateRemoteSyslogServerContentArgs
NetworktemplateRemoteSyslogUser, NetworktemplateRemoteSyslogUserArgs
- Contents
[]Networktemplate
Remote Syslog User Content - Match string
- User string
- contents
Networktemplate
Remote Syslog User Content[] - match string
- user string
- contents List<Property Map>
- match String
- user String
NetworktemplateRemoteSyslogUserContent, NetworktemplateRemoteSyslogUserContentArgs
NetworktemplateSnmpConfig, NetworktemplateSnmpConfigArgs
- Client
Lists List<Pulumi.Juniper Mist. Site. Inputs. Networktemplate Snmp Config Client List> - Contact string
- Description string
- Enabled bool
- Engine
Id string - enum:
engine-id-suffix,local,use-default-ip-address,use_mac-address - Location string
- Name string
- Network string
- Trap
Groups List<Pulumi.Juniper Mist. Site. Inputs. Networktemplate Snmp Config Trap Group> - V2c
Configs List<Pulumi.Juniper Mist. Site. Inputs. Networktemplate Snmp Config V2c Config> - V3Config
Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Snmp Config V3Config - Views
List<Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Snmp Config View>
- Client
Lists []NetworktemplateSnmp Config Client List - Contact string
- Description string
- Enabled bool
- Engine
Id string - enum:
engine-id-suffix,local,use-default-ip-address,use_mac-address - Location string
- Name string
- Network string
- Trap
Groups []NetworktemplateSnmp Config Trap Group - V2c
Configs []NetworktemplateSnmp Config V2c Config - V3Config
Networktemplate
Snmp Config V3Config - Views
[]Networktemplate
Snmp Config View
- client
Lists List<NetworktemplateSnmp Config Client List> - contact String
- description String
- enabled Boolean
- engine
Id String - enum:
engine-id-suffix,local,use-default-ip-address,use_mac-address - location String
- name String
- network String
- trap
Groups List<NetworktemplateSnmp Config Trap Group> - v2c
Configs List<NetworktemplateSnmp Config V2c Config> - v3Config
Networktemplate
Snmp Config V3Config - views
List<Networktemplate
Snmp Config View>
- client
Lists NetworktemplateSnmp Config Client List[] - contact string
- description string
- enabled boolean
- engine
Id string - enum:
engine-id-suffix,local,use-default-ip-address,use_mac-address - location string
- name string
- network string
- trap
Groups NetworktemplateSnmp Config Trap Group[] - v2c
Configs NetworktemplateSnmp Config V2c Config[] - v3Config
Networktemplate
Snmp Config V3Config - views
Networktemplate
Snmp Config View[]
- client_
lists Sequence[NetworktemplateSnmp Config Client List] - contact str
- description str
- enabled bool
- engine_
id str - enum:
engine-id-suffix,local,use-default-ip-address,use_mac-address - location str
- name str
- network str
- trap_
groups Sequence[NetworktemplateSnmp Config Trap Group] - v2c_
configs Sequence[NetworktemplateSnmp Config V2c Config] - v3_
config NetworktemplateSnmp Config V3Config - views
Sequence[Networktemplate
Snmp Config View]
- client
Lists List<Property Map> - contact String
- description String
- enabled Boolean
- engine
Id String - enum:
engine-id-suffix,local,use-default-ip-address,use_mac-address - location String
- name String
- network String
- trap
Groups List<Property Map> - v2c
Configs List<Property Map> - v3Config Property Map
- views List<Property Map>
NetworktemplateSnmpConfigClientList, NetworktemplateSnmpConfigClientListArgs
- Client
List stringName - Clients List<string>
- Client
List stringName - Clients []string
- client
List StringName - clients List<String>
- client
List stringName - clients string[]
- client_
list_ strname - clients Sequence[str]
- client
List StringName - clients List<String>
NetworktemplateSnmpConfigTrapGroup, NetworktemplateSnmpConfigTrapGroupArgs
- Categories List<string>
- Group
Name string - Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
- Targets List<string>
- Version string
- enum:
all,v1,v2
- Categories []string
- Group
Name string - Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
- Targets []string
- Version string
- enum:
all,v1,v2
- categories List<String>
- group
Name String - Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
- targets List<String>
- version String
- enum:
all,v1,v2
- categories string[]
- group
Name string - Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
- targets string[]
- version string
- enum:
all,v1,v2
- categories Sequence[str]
- group_
name str - Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
- targets Sequence[str]
- version str
- enum:
all,v1,v2
- categories List<String>
- group
Name String - Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
- targets List<String>
- version String
- enum:
all,v1,v2
NetworktemplateSnmpConfigV2cConfig, NetworktemplateSnmpConfigV2cConfigArgs
- string
- Client
List stringName - client_list_name here should refer to client_list above
- Community
Name string - View string
- view name here should be defined in views above
- string
- Client
List stringName - client_list_name here should refer to client_list above
- Community
Name string - View string
- view name here should be defined in views above
- String
- client
List StringName - client_list_name here should refer to client_list above
- community
Name String - view String
- view name here should be defined in views above
- string
- client
List stringName - client_list_name here should refer to client_list above
- community
Name string - view string
- view name here should be defined in views above
- str
- client_
list_ strname - client_list_name here should refer to client_list above
- community_
name str - view str
- view name here should be defined in views above
- String
- client
List StringName - client_list_name here should refer to client_list above
- community
Name String - view String
- view name here should be defined in views above
NetworktemplateSnmpConfigV3Config, NetworktemplateSnmpConfigV3ConfigArgs
- Notifies
List<Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Snmp Config V3Config Notify> - Notify
Filters List<Pulumi.Juniper Mist. Site. Inputs. Networktemplate Snmp Config V3Config Notify Filter> - Target
Addresses List<Pulumi.Juniper Mist. Site. Inputs. Networktemplate Snmp Config V3Config Target Address> - Target
Parameters List<Pulumi.Juniper Mist. Site. Inputs. Networktemplate Snmp Config V3Config Target Parameter> - Usm
Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Snmp Config V3Config Usm - Vacm
Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Snmp Config V3Config Vacm
- Notifies
[]Networktemplate
Snmp Config V3Config Notify - Notify
Filters []NetworktemplateSnmp Config V3Config Notify Filter - Target
Addresses []NetworktemplateSnmp Config V3Config Target Address - Target
Parameters []NetworktemplateSnmp Config V3Config Target Parameter - Usm
Networktemplate
Snmp Config V3Config Usm - Vacm
Networktemplate
Snmp Config V3Config Vacm
- notifies
List<Networktemplate
Snmp Config V3Config Notify> - notify
Filters List<NetworktemplateSnmp Config V3Config Notify Filter> - target
Addresses List<NetworktemplateSnmp Config V3Config Target Address> - target
Parameters List<NetworktemplateSnmp Config V3Config Target Parameter> - usm
Networktemplate
Snmp Config V3Config Usm - vacm
Networktemplate
Snmp Config V3Config Vacm
- notifies
Networktemplate
Snmp Config V3Config Notify[] - notify
Filters NetworktemplateSnmp Config V3Config Notify Filter[] - target
Addresses NetworktemplateSnmp Config V3Config Target Address[] - target
Parameters NetworktemplateSnmp Config V3Config Target Parameter[] - usm
Networktemplate
Snmp Config V3Config Usm - vacm
Networktemplate
Snmp Config V3Config Vacm
- notifies
Sequence[Networktemplate
Snmp Config V3Config Notify] - notify_
filters Sequence[NetworktemplateSnmp Config V3Config Notify Filter] - target_
addresses Sequence[NetworktemplateSnmp Config V3Config Target Address] - target_
parameters Sequence[NetworktemplateSnmp Config V3Config Target Parameter] - usm
Networktemplate
Snmp Config V3Config Usm - vacm
Networktemplate
Snmp Config V3Config Vacm
NetworktemplateSnmpConfigV3ConfigNotify, NetworktemplateSnmpConfigV3ConfigNotifyArgs
NetworktemplateSnmpConfigV3ConfigNotifyFilter, NetworktemplateSnmpConfigV3ConfigNotifyFilterArgs
NetworktemplateSnmpConfigV3ConfigNotifyFilterContent, NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArgs
NetworktemplateSnmpConfigV3ConfigTargetAddress, NetworktemplateSnmpConfigV3ConfigTargetAddressArgs
- Address string
- Address
Mask string - Port int
- Tag
List string - <refer to notify tag, can be multiple with blank
- Target
Address stringName - Target
Parameters string - refer to notify target parameters name
- Address string
- Address
Mask string - Port int
- Tag
List string - <refer to notify tag, can be multiple with blank
- Target
Address stringName - Target
Parameters string - refer to notify target parameters name
- address String
- address
Mask String - port Integer
- tag
List String - <refer to notify tag, can be multiple with blank
- target
Address StringName - target
Parameters String - refer to notify target parameters name
- address string
- address
Mask string - port number
- tag
List string - <refer to notify tag, can be multiple with blank
- target
Address stringName - target
Parameters string - refer to notify target parameters name
- address str
- address_
mask str - port int
- tag_
list str - <refer to notify tag, can be multiple with blank
- target_
address_ strname - target_
parameters str - refer to notify target parameters name
- address String
- address
Mask String - port Number
- tag
List String - <refer to notify tag, can be multiple with blank
- target
Address StringName - target
Parameters String - refer to notify target parameters name
NetworktemplateSnmpConfigV3ConfigTargetParameter, NetworktemplateSnmpConfigV3ConfigTargetParameterArgs
- Message
Processing stringModel - enum:
v1,v2c,v3 - Name string
- Notify
Filter string - refer to profile-name in notify_filter
- Security
Level string - enum:
authentication,none,privacy - Security
Model string - enum:
usm,v1,v2c - Security
Name string - refer to security_name in usm
- Message
Processing stringModel - enum:
v1,v2c,v3 - Name string
- Notify
Filter string - refer to profile-name in notify_filter
- Security
Level string - enum:
authentication,none,privacy - Security
Model string - enum:
usm,v1,v2c - Security
Name string - refer to security_name in usm
- message
Processing StringModel - enum:
v1,v2c,v3 - name String
- notify
Filter String - refer to profile-name in notify_filter
- security
Level String - enum:
authentication,none,privacy - security
Model String - enum:
usm,v1,v2c - security
Name String - refer to security_name in usm
- message
Processing stringModel - enum:
v1,v2c,v3 - name string
- notify
Filter string - refer to profile-name in notify_filter
- security
Level string - enum:
authentication,none,privacy - security
Model string - enum:
usm,v1,v2c - security
Name string - refer to security_name in usm
- message_
processing_ strmodel - enum:
v1,v2c,v3 - name str
- notify_
filter str - refer to profile-name in notify_filter
- security_
level str - enum:
authentication,none,privacy - security_
model str - enum:
usm,v1,v2c - security_
name str - refer to security_name in usm
- message
Processing StringModel - enum:
v1,v2c,v3 - name String
- notify
Filter String - refer to profile-name in notify_filter
- security
Level String - enum:
authentication,none,privacy - security
Model String - enum:
usm,v1,v2c - security
Name String - refer to security_name in usm
NetworktemplateSnmpConfigV3ConfigUsm, NetworktemplateSnmpConfigV3ConfigUsmArgs
- Engine
Type string - enum:
local_engine,remote_engine - Engineid string
- required only if
engine_type==remote_engine - Users
List<Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Snmp Config V3Config Usm User>
- Engine
Type string - enum:
local_engine,remote_engine - Engineid string
- required only if
engine_type==remote_engine - Users
[]Networktemplate
Snmp Config V3Config Usm User
- engine
Type String - enum:
local_engine,remote_engine - engineid String
- required only if
engine_type==remote_engine - users
List<Networktemplate
Snmp Config V3Config Usm User>
- engine
Type string - enum:
local_engine,remote_engine - engineid string
- required only if
engine_type==remote_engine - users
Networktemplate
Snmp Config V3Config Usm User[]
- engine_
type str - enum:
local_engine,remote_engine - engineid str
- required only if
engine_type==remote_engine - users
Sequence[Networktemplate
Snmp Config V3Config Usm User]
- engine
Type String - enum:
local_engine,remote_engine - engineid String
- required only if
engine_type==remote_engine - users List<Property Map>
NetworktemplateSnmpConfigV3ConfigUsmUser, NetworktemplateSnmpConfigV3ConfigUsmUserArgs
- Authentication
Password string - Not required if
authentication_type==authentication_noneinclude alphabetic, numeric, and special characters, but it cannot include control characters. - Authentication
Type string - sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum:
authentication_md5,authentication_none,authentication_sha,authentication_sha224,authentication_sha256,authentication_sha384,authentication_sha512 - Encryption
Password string - Not required if
encryption_type==privacy-noneinclude alphabetic, numeric, and special characters, but it cannot include control characters - Encryption
Type string - enum:
privacy-3des,privacy-aes128,privacy-des,privacy-none - Name string
- Authentication
Password string - Not required if
authentication_type==authentication_noneinclude alphabetic, numeric, and special characters, but it cannot include control characters. - Authentication
Type string - sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum:
authentication_md5,authentication_none,authentication_sha,authentication_sha224,authentication_sha256,authentication_sha384,authentication_sha512 - Encryption
Password string - Not required if
encryption_type==privacy-noneinclude alphabetic, numeric, and special characters, but it cannot include control characters - Encryption
Type string - enum:
privacy-3des,privacy-aes128,privacy-des,privacy-none - Name string
- authentication
Password String - Not required if
authentication_type==authentication_noneinclude alphabetic, numeric, and special characters, but it cannot include control characters. - authentication
Type String - sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum:
authentication_md5,authentication_none,authentication_sha,authentication_sha224,authentication_sha256,authentication_sha384,authentication_sha512 - encryption
Password String - Not required if
encryption_type==privacy-noneinclude alphabetic, numeric, and special characters, but it cannot include control characters - encryption
Type String - enum:
privacy-3des,privacy-aes128,privacy-des,privacy-none - name String
- authentication
Password string - Not required if
authentication_type==authentication_noneinclude alphabetic, numeric, and special characters, but it cannot include control characters. - authentication
Type string - sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum:
authentication_md5,authentication_none,authentication_sha,authentication_sha224,authentication_sha256,authentication_sha384,authentication_sha512 - encryption
Password string - Not required if
encryption_type==privacy-noneinclude alphabetic, numeric, and special characters, but it cannot include control characters - encryption
Type string - enum:
privacy-3des,privacy-aes128,privacy-des,privacy-none - name string
- authentication_
password str - Not required if
authentication_type==authentication_noneinclude alphabetic, numeric, and special characters, but it cannot include control characters. - authentication_
type str - sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum:
authentication_md5,authentication_none,authentication_sha,authentication_sha224,authentication_sha256,authentication_sha384,authentication_sha512 - encryption_
password str - Not required if
encryption_type==privacy-noneinclude alphabetic, numeric, and special characters, but it cannot include control characters - encryption_
type str - enum:
privacy-3des,privacy-aes128,privacy-des,privacy-none - name str
- authentication
Password String - Not required if
authentication_type==authentication_noneinclude alphabetic, numeric, and special characters, but it cannot include control characters. - authentication
Type String - sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum:
authentication_md5,authentication_none,authentication_sha,authentication_sha224,authentication_sha256,authentication_sha384,authentication_sha512 - encryption
Password String - Not required if
encryption_type==privacy-noneinclude alphabetic, numeric, and special characters, but it cannot include control characters - encryption
Type String - enum:
privacy-3des,privacy-aes128,privacy-des,privacy-none - name String
NetworktemplateSnmpConfigV3ConfigVacm, NetworktemplateSnmpConfigV3ConfigVacmArgs
NetworktemplateSnmpConfigV3ConfigVacmAccess, NetworktemplateSnmpConfigV3ConfigVacmAccessArgs
NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixList, NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArgs
- Context
Prefix string - only required if
type==context_prefix - Notify
View string - refer to view name
- Read
View string - refer to view name
- Security
Level string - enum:
authentication,none,privacy - Security
Model string - enum:
any,usm,v1,v2c - Type string
- enum:
context_prefix,default_context_prefix - Write
View string - refer to view name
- Context
Prefix string - only required if
type==context_prefix - Notify
View string - refer to view name
- Read
View string - refer to view name
- Security
Level string - enum:
authentication,none,privacy - Security
Model string - enum:
any,usm,v1,v2c - Type string
- enum:
context_prefix,default_context_prefix - Write
View string - refer to view name
- context
Prefix String - only required if
type==context_prefix - notify
View String - refer to view name
- read
View String - refer to view name
- security
Level String - enum:
authentication,none,privacy - security
Model String - enum:
any,usm,v1,v2c - type String
- enum:
context_prefix,default_context_prefix - write
View String - refer to view name
- context
Prefix string - only required if
type==context_prefix - notify
View string - refer to view name
- read
View string - refer to view name
- security
Level string - enum:
authentication,none,privacy - security
Model string - enum:
any,usm,v1,v2c - type string
- enum:
context_prefix,default_context_prefix - write
View string - refer to view name
- context_
prefix str - only required if
type==context_prefix - notify_
view str - refer to view name
- read_
view str - refer to view name
- security_
level str - enum:
authentication,none,privacy - security_
model str - enum:
any,usm,v1,v2c - type str
- enum:
context_prefix,default_context_prefix - write_
view str - refer to view name
- context
Prefix String - only required if
type==context_prefix - notify
View String - refer to view name
- read
View String - refer to view name
- security
Level String - enum:
authentication,none,privacy - security
Model String - enum:
any,usm,v1,v2c - type String
- enum:
context_prefix,default_context_prefix - write
View String - refer to view name
NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroup, NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupArgs
- Contents
[]Networktemplate
Snmp Config V3Config Vacm Security To Group Content - Security
Model string - enum:
usm,v1,v2c
- contents
List<Networktemplate
Snmp Config V3Config Vacm Security To Group Content> - security
Model String - enum:
usm,v1,v2c
- contents
Networktemplate
Snmp Config V3Config Vacm Security To Group Content[] - security
Model string - enum:
usm,v1,v2c
- contents
Sequence[Networktemplate
Snmp Config V3Config Vacm Security To Group Content] - security_
model str - enum:
usm,v1,v2c
- contents List<Property Map>
- security
Model String - enum:
usm,v1,v2c
NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContent, NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArgs
- Group string
- refer to group_name under access
- Security
Name string
- Group string
- refer to group_name under access
- Security
Name string
- group String
- refer to group_name under access
- security
Name String
- group string
- refer to group_name under access
- security
Name string
- group str
- refer to group_name under access
- security_
name str
- group String
- refer to group_name under access
- security
Name String
NetworktemplateSnmpConfigView, NetworktemplateSnmpConfigViewArgs
NetworktemplateSwitchMatching, NetworktemplateSwitchMatchingArgs
- enable Boolean
- rules List<Property Map>
NetworktemplateSwitchMatchingRule, NetworktemplateSwitchMatchingRuleArgs
- Additional
Config List<string>Cmds additional CLI commands to append to the generated Junos config
Note: no check is done
- Ip
Config Pulumi.Juniper Mist. Site. Inputs. Networktemplate Switch Matching Rule Ip Config - In-Band Management interface configuration
- Match
Role string - role to match
- Match
Type string - 'property key define the type of matching, value is the string to match. e.g:
match_name[0:3],match_name[2:6],match_model,match_model[0-6] - Match
Value string - Name string
- Oob
Ip Pulumi.Config Juniper Mist. Site. Inputs. Networktemplate Switch Matching Rule Oob Ip Config - Out-of-Band Management interface configuration
- Port
Config Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Switch Matching Rule Port Config> - Propery key is the interface name or interface range
- Port
Mirroring Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Switch Matching Rule Port Mirroring> - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- Additional
Config []stringCmds additional CLI commands to append to the generated Junos config
Note: no check is done
- Ip
Config NetworktemplateSwitch Matching Rule Ip Config - In-Band Management interface configuration
- Match
Role string - role to match
- Match
Type string - 'property key define the type of matching, value is the string to match. e.g:
match_name[0:3],match_name[2:6],match_model,match_model[0-6] - Match
Value string - Name string
- Oob
Ip NetworktemplateConfig Switch Matching Rule Oob Ip Config - Out-of-Band Management interface configuration
- Port
Config map[string]NetworktemplateSwitch Matching Rule Port Config - Propery key is the interface name or interface range
- Port
Mirroring map[string]NetworktemplateSwitch Matching Rule Port Mirroring - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- additional
Config List<String>Cmds additional CLI commands to append to the generated Junos config
Note: no check is done
- ip
Config NetworktemplateSwitch Matching Rule Ip Config - In-Band Management interface configuration
- match
Role String - role to match
- match
Type String - 'property key define the type of matching, value is the string to match. e.g:
match_name[0:3],match_name[2:6],match_model,match_model[0-6] - match
Value String - name String
- oob
Ip NetworktemplateConfig Switch Matching Rule Oob Ip Config - Out-of-Band Management interface configuration
- port
Config Map<String,NetworktemplateSwitch Matching Rule Port Config> - Propery key is the interface name or interface range
- port
Mirroring Map<String,NetworktemplateSwitch Matching Rule Port Mirroring> - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- additional
Config string[]Cmds additional CLI commands to append to the generated Junos config
Note: no check is done
- ip
Config NetworktemplateSwitch Matching Rule Ip Config - In-Band Management interface configuration
- match
Role string - role to match
- match
Type string - 'property key define the type of matching, value is the string to match. e.g:
match_name[0:3],match_name[2:6],match_model,match_model[0-6] - match
Value string - name string
- oob
Ip NetworktemplateConfig Switch Matching Rule Oob Ip Config - Out-of-Band Management interface configuration
- port
Config {[key: string]: NetworktemplateSwitch Matching Rule Port Config} - Propery key is the interface name or interface range
- port
Mirroring {[key: string]: NetworktemplateSwitch Matching Rule Port Mirroring} - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- additional_
config_ Sequence[str]cmds additional CLI commands to append to the generated Junos config
Note: no check is done
- ip_
config NetworktemplateSwitch Matching Rule Ip Config - In-Band Management interface configuration
- match_
role str - role to match
- match_
type str - 'property key define the type of matching, value is the string to match. e.g:
match_name[0:3],match_name[2:6],match_model,match_model[0-6] - match_
value str - name str
- oob_
ip_ Networktemplateconfig Switch Matching Rule Oob Ip Config - Out-of-Band Management interface configuration
- port_
config Mapping[str, NetworktemplateSwitch Matching Rule Port Config] - Propery key is the interface name or interface range
- port_
mirroring Mapping[str, NetworktemplateSwitch Matching Rule Port Mirroring] - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
- additional
Config List<String>Cmds additional CLI commands to append to the generated Junos config
Note: no check is done
- ip
Config Property Map - In-Band Management interface configuration
- match
Role String - role to match
- match
Type String - 'property key define the type of matching, value is the string to match. e.g:
match_name[0:3],match_name[2:6],match_model,match_model[0-6] - match
Value String - name String
- oob
Ip Property MapConfig - Out-of-Band Management interface configuration
- port
Config Map<Property Map> - Propery key is the interface name or interface range
- port
Mirroring Map<Property Map> - Property key is the port mirroring instance name (Maximum: 4) port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
NetworktemplateSwitchMatchingRuleIpConfig, NetworktemplateSwitchMatchingRuleIpConfigArgs
NetworktemplateSwitchMatchingRuleOobIpConfig, NetworktemplateSwitchMatchingRuleOobIpConfigArgs
- Type string
- enum:
dhcp,static - Use
Mgmt boolVrf - f supported on the platform. If enabled, DNS will be using this routing-instance, too
- Use
Mgmt boolVrf For Host Out - for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- Type string
- enum:
dhcp,static - Use
Mgmt boolVrf - f supported on the platform. If enabled, DNS will be using this routing-instance, too
- Use
Mgmt boolVrf For Host Out - for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- type String
- enum:
dhcp,static - use
Mgmt BooleanVrf - f supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt BooleanVrf For Host Out - for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- type string
- enum:
dhcp,static - use
Mgmt booleanVrf - f supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt booleanVrf For Host Out - for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- type str
- enum:
dhcp,static - use_
mgmt_ boolvrf - f supported on the platform. If enabled, DNS will be using this routing-instance, too
- use_
mgmt_ boolvrf_ for_ host_ out - for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- type String
- enum:
dhcp,static - use
Mgmt BooleanVrf - f supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt BooleanVrf For Host Out - for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
NetworktemplateSwitchMatchingRulePortConfig, NetworktemplateSwitchMatchingRulePortConfigArgs
- Usage string
port usage name.
If EVPN is used, use
evpn_uplinkorevpn_downlink- Ae
Disable boolLacp - To disable LACP support for the AE interface
- Ae
Idx int - Users could force to use the designated AE name
- Ae
Lacp boolSlow - to use fast timeout
- Aggregated bool
- Critical bool
- if want to generate port up/down alarm
- Description string
- Disable
Autoneg bool - if
speedandduplexare specified, whether to disable autonegotiation - Duplex string
- enum:
auto,full,half - Dynamic
Usage string - Enable dynamic usage for this port. Set to
dynamicto enable. - Esilag bool
- Mtu int
- media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- No
Local boolOverwrite - prevent helpdesk to override the port config
- Poe
Disabled bool - Speed string
- enum:
100m,10m,1g,2.5g,5g,auto
- Usage string
port usage name.
If EVPN is used, use
evpn_uplinkorevpn_downlink- Ae
Disable boolLacp - To disable LACP support for the AE interface
- Ae
Idx int - Users could force to use the designated AE name
- Ae
Lacp boolSlow - to use fast timeout
- Aggregated bool
- Critical bool
- if want to generate port up/down alarm
- Description string
- Disable
Autoneg bool - if
speedandduplexare specified, whether to disable autonegotiation - Duplex string
- enum:
auto,full,half - Dynamic
Usage string - Enable dynamic usage for this port. Set to
dynamicto enable. - Esilag bool
- Mtu int
- media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- No
Local boolOverwrite - prevent helpdesk to override the port config
- Poe
Disabled bool - Speed string
- enum:
100m,10m,1g,2.5g,5g,auto
- usage String
port usage name.
If EVPN is used, use
evpn_uplinkorevpn_downlink- ae
Disable BooleanLacp - To disable LACP support for the AE interface
- ae
Idx Integer - Users could force to use the designated AE name
- ae
Lacp BooleanSlow - to use fast timeout
- aggregated Boolean
- critical Boolean
- if want to generate port up/down alarm
- description String
- disable
Autoneg Boolean - if
speedandduplexare specified, whether to disable autonegotiation - duplex String
- enum:
auto,full,half - dynamic
Usage String - Enable dynamic usage for this port. Set to
dynamicto enable. - esilag Boolean
- mtu Integer
- media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- no
Local BooleanOverwrite - prevent helpdesk to override the port config
- poe
Disabled Boolean - speed String
- enum:
100m,10m,1g,2.5g,5g,auto
- usage string
port usage name.
If EVPN is used, use
evpn_uplinkorevpn_downlink- ae
Disable booleanLacp - To disable LACP support for the AE interface
- ae
Idx number - Users could force to use the designated AE name
- ae
Lacp booleanSlow - to use fast timeout
- aggregated boolean
- critical boolean
- if want to generate port up/down alarm
- description string
- disable
Autoneg boolean - if
speedandduplexare specified, whether to disable autonegotiation - duplex string
- enum:
auto,full,half - dynamic
Usage string - Enable dynamic usage for this port. Set to
dynamicto enable. - esilag boolean
- mtu number
- media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- no
Local booleanOverwrite - prevent helpdesk to override the port config
- poe
Disabled boolean - speed string
- enum:
100m,10m,1g,2.5g,5g,auto
- usage str
port usage name.
If EVPN is used, use
evpn_uplinkorevpn_downlink- ae_
disable_ boollacp - To disable LACP support for the AE interface
- ae_
idx int - Users could force to use the designated AE name
- ae_
lacp_ boolslow - to use fast timeout
- aggregated bool
- critical bool
- if want to generate port up/down alarm
- description str
- disable_
autoneg bool - if
speedandduplexare specified, whether to disable autonegotiation - duplex str
- enum:
auto,full,half - dynamic_
usage str - Enable dynamic usage for this port. Set to
dynamicto enable. - esilag bool
- mtu int
- media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- no_
local_ booloverwrite - prevent helpdesk to override the port config
- poe_
disabled bool - speed str
- enum:
100m,10m,1g,2.5g,5g,auto
- usage String
port usage name.
If EVPN is used, use
evpn_uplinkorevpn_downlink- ae
Disable BooleanLacp - To disable LACP support for the AE interface
- ae
Idx Number - Users could force to use the designated AE name
- ae
Lacp BooleanSlow - to use fast timeout
- aggregated Boolean
- critical Boolean
- if want to generate port up/down alarm
- description String
- disable
Autoneg Boolean - if
speedandduplexare specified, whether to disable autonegotiation - duplex String
- enum:
auto,full,half - dynamic
Usage String - Enable dynamic usage for this port. Set to
dynamicto enable. - esilag Boolean
- mtu Number
- media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- no
Local BooleanOverwrite - prevent helpdesk to override the port config
- poe
Disabled Boolean - speed String
- enum:
100m,10m,1g,2.5g,5g,auto
NetworktemplateSwitchMatchingRulePortMirroring, NetworktemplateSwitchMatchingRulePortMirroringArgs
- Input
Networks List<string>Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - Input
Port List<string>Ids Egresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - Input
Port List<string>Ids Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - Output
Network string - exaclty one of the
output_port_idoroutput_networkshould be provided - Output
Port stringId - exaclty one of the
output_port_idoroutput_networkshould be provided
- Input
Networks []stringIngresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - Input
Port []stringIds Egresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - Input
Port []stringIds Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - Output
Network string - exaclty one of the
output_port_idoroutput_networkshould be provided - Output
Port stringId - exaclty one of the
output_port_idoroutput_networkshould be provided
- input
Networks List<String>Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input
Port List<String>Ids Egresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input
Port List<String>Ids Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - output
Network String - exaclty one of the
output_port_idoroutput_networkshould be provided - output
Port StringId - exaclty one of the
output_port_idoroutput_networkshould be provided
- input
Networks string[]Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input
Port string[]Ids Egresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input
Port string[]Ids Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - output
Network string - exaclty one of the
output_port_idoroutput_networkshould be provided - output
Port stringId - exaclty one of the
output_port_idoroutput_networkshould be provided
- input_
networks_ Sequence[str]ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input_
port_ Sequence[str]ids_ egresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input_
port_ Sequence[str]ids_ ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - output_
network str - exaclty one of the
output_port_idoroutput_networkshould be provided - output_
port_ strid - exaclty one of the
output_port_idoroutput_networkshould be provided
- input
Networks List<String>Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input
Port List<String>Ids Egresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - input
Port List<String>Ids Ingresses - at least one of the
input_port_ids_ingress,input_port_ids_egressorinput_networks_ingressshould be specified - output
Network String - exaclty one of the
output_port_idoroutput_networkshould be provided - output
Port StringId - exaclty one of the
output_port_idoroutput_networkshould be provided
NetworktemplateSwitchMgmt, NetworktemplateSwitchMgmtArgs
- Ap
Affinity intThreshold - ap_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
- string
- Set Banners for switches. Allows markup formatting
- Cli
Idle intTimeout - Sets timeout for switches
- Config
Revert intTimer - the rollback timer for commit confirmed
- Dhcp
Option boolFqdn - Enable to provide the FQDN with DHCP option 81
- Disable
Oob boolDown Alarm - Local
Accounts Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Switch Mgmt Local Accounts> - Property key is the user name. For Local user authentication
- Mxedge
Proxy stringHost - Mxedge
Proxy intPort - Protect
Re Pulumi.Juniper Mist. Site. Inputs. Networktemplate Switch Mgmt Protect Re - restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
- Root
Password string - Tacacs
Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Switch Mgmt Tacacs - Use
Mxedge boolProxy - to use mxedge as proxy
- Ap
Affinity intThreshold - ap_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
- string
- Set Banners for switches. Allows markup formatting
- Cli
Idle intTimeout - Sets timeout for switches
- Config
Revert intTimer - the rollback timer for commit confirmed
- Dhcp
Option boolFqdn - Enable to provide the FQDN with DHCP option 81
- Disable
Oob boolDown Alarm - Local
Accounts map[string]NetworktemplateSwitch Mgmt Local Accounts - Property key is the user name. For Local user authentication
- Mxedge
Proxy stringHost - Mxedge
Proxy intPort - Protect
Re NetworktemplateSwitch Mgmt Protect Re - restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
- Root
Password string - Tacacs
Networktemplate
Switch Mgmt Tacacs - Use
Mxedge boolProxy - to use mxedge as proxy
- ap
Affinity IntegerThreshold - ap_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
- String
- Set Banners for switches. Allows markup formatting
- cli
Idle IntegerTimeout - Sets timeout for switches
- config
Revert IntegerTimer - the rollback timer for commit confirmed
- dhcp
Option BooleanFqdn - Enable to provide the FQDN with DHCP option 81
- disable
Oob BooleanDown Alarm - local
Accounts Map<String,NetworktemplateSwitch Mgmt Local Accounts> - Property key is the user name. For Local user authentication
- mxedge
Proxy StringHost - mxedge
Proxy IntegerPort - protect
Re NetworktemplateSwitch Mgmt Protect Re - restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
- root
Password String - tacacs
Networktemplate
Switch Mgmt Tacacs - use
Mxedge BooleanProxy - to use mxedge as proxy
- ap
Affinity numberThreshold - ap_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
- string
- Set Banners for switches. Allows markup formatting
- cli
Idle numberTimeout - Sets timeout for switches
- config
Revert numberTimer - the rollback timer for commit confirmed
- dhcp
Option booleanFqdn - Enable to provide the FQDN with DHCP option 81
- disable
Oob booleanDown Alarm - local
Accounts {[key: string]: NetworktemplateSwitch Mgmt Local Accounts} - Property key is the user name. For Local user authentication
- mxedge
Proxy stringHost - mxedge
Proxy numberPort - protect
Re NetworktemplateSwitch Mgmt Protect Re - restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
- root
Password string - tacacs
Networktemplate
Switch Mgmt Tacacs - use
Mxedge booleanProxy - to use mxedge as proxy
- ap_
affinity_ intthreshold - ap_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
- str
- Set Banners for switches. Allows markup formatting
- cli_
idle_ inttimeout - Sets timeout for switches
- config_
revert_ inttimer - the rollback timer for commit confirmed
- dhcp_
option_ boolfqdn - Enable to provide the FQDN with DHCP option 81
- disable_
oob_ booldown_ alarm - local_
accounts Mapping[str, NetworktemplateSwitch Mgmt Local Accounts] - Property key is the user name. For Local user authentication
- mxedge_
proxy_ strhost - mxedge_
proxy_ intport - protect_
re NetworktemplateSwitch Mgmt Protect Re - restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
- root_
password str - tacacs
Networktemplate
Switch Mgmt Tacacs - use_
mxedge_ boolproxy - to use mxedge as proxy
- ap
Affinity NumberThreshold - ap_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
- String
- Set Banners for switches. Allows markup formatting
- cli
Idle NumberTimeout - Sets timeout for switches
- config
Revert NumberTimer - the rollback timer for commit confirmed
- dhcp
Option BooleanFqdn - Enable to provide the FQDN with DHCP option 81
- disable
Oob BooleanDown Alarm - local
Accounts Map<Property Map> - Property key is the user name. For Local user authentication
- mxedge
Proxy StringHost - mxedge
Proxy NumberPort - protect
Re Property Map - restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
- root
Password String - tacacs Property Map
- use
Mxedge BooleanProxy - to use mxedge as proxy
NetworktemplateSwitchMgmtLocalAccounts, NetworktemplateSwitchMgmtLocalAccountsArgs
NetworktemplateSwitchMgmtProtectRe, NetworktemplateSwitchMgmtProtectReArgs
- Allowed
Services List<string> - optionally, services we'll allow. enum:
icmp,ssh - Customs
List<Pulumi.
Juniper Mist. Site. Inputs. Networktemplate Switch Mgmt Protect Re Custom> - Enabled bool
- when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- Trusted
Hosts List<string> - host/subnets we'll allow traffic to/from
- Allowed
Services []string - optionally, services we'll allow. enum:
icmp,ssh - Customs
[]Networktemplate
Switch Mgmt Protect Re Custom - Enabled bool
- when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- Trusted
Hosts []string - host/subnets we'll allow traffic to/from
- allowed
Services List<String> - optionally, services we'll allow. enum:
icmp,ssh - customs
List<Networktemplate
Switch Mgmt Protect Re Custom> - enabled Boolean
- when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- trusted
Hosts List<String> - host/subnets we'll allow traffic to/from
- allowed
Services string[] - optionally, services we'll allow. enum:
icmp,ssh - customs
Networktemplate
Switch Mgmt Protect Re Custom[] - enabled boolean
- when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- trusted
Hosts string[] - host/subnets we'll allow traffic to/from
- allowed_
services Sequence[str] - optionally, services we'll allow. enum:
icmp,ssh - customs
Sequence[Networktemplate
Switch Mgmt Protect Re Custom] - enabled bool
- when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- trusted_
hosts Sequence[str] - host/subnets we'll allow traffic to/from
- allowed
Services List<String> - optionally, services we'll allow. enum:
icmp,ssh - customs List<Property Map>
- enabled Boolean
- when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- trusted
Hosts List<String> - host/subnets we'll allow traffic to/from
NetworktemplateSwitchMgmtProtectReCustom, NetworktemplateSwitchMgmtProtectReCustomArgs
- subnets Sequence[str]
- port_
range str - matched dst port, "0" means any. Note: For
protocol==anyandport_range==any, configuretrusted_hostsinstead - protocol str
- enum:
any,icmp,tcp,udp. Note: Forprotocol==anyandport_range==any, configuretrusted_hostsinstead
NetworktemplateSwitchMgmtTacacs, NetworktemplateSwitchMgmtTacacsArgs
- Acct
Servers List<Pulumi.Juniper Mist. Site. Inputs. Networktemplate Switch Mgmt Tacacs Acct Server> - Default
Role string - enum:
admin,helpdesk,none,read - Enabled bool
- Network string
- which network the TACACS server resides
- Tacplus
Servers List<Pulumi.Juniper Mist. Site. Inputs. Networktemplate Switch Mgmt Tacacs Tacplus Server>
- Acct
Servers []NetworktemplateSwitch Mgmt Tacacs Acct Server - Default
Role string - enum:
admin,helpdesk,none,read - Enabled bool
- Network string
- which network the TACACS server resides
- Tacplus
Servers []NetworktemplateSwitch Mgmt Tacacs Tacplus Server
- acct
Servers List<NetworktemplateSwitch Mgmt Tacacs Acct Server> - default
Role String - enum:
admin,helpdesk,none,read - enabled Boolean
- network String
- which network the TACACS server resides
- tacplus
Servers List<NetworktemplateSwitch Mgmt Tacacs Tacplus Server>
- acct
Servers NetworktemplateSwitch Mgmt Tacacs Acct Server[] - default
Role string - enum:
admin,helpdesk,none,read - enabled boolean
- network string
- which network the TACACS server resides
- tacplus
Servers NetworktemplateSwitch Mgmt Tacacs Tacplus Server[]
- acct_
servers Sequence[NetworktemplateSwitch Mgmt Tacacs Acct Server] - default_
role str - enum:
admin,helpdesk,none,read - enabled bool
- network str
- which network the TACACS server resides
- tacplus_
servers Sequence[NetworktemplateSwitch Mgmt Tacacs Tacplus Server]
- acct
Servers List<Property Map> - default
Role String - enum:
admin,helpdesk,none,read - enabled Boolean
- network String
- which network the TACACS server resides
- tacplus
Servers List<Property Map>
NetworktemplateSwitchMgmtTacacsAcctServer, NetworktemplateSwitchMgmtTacacsAcctServerArgs
NetworktemplateSwitchMgmtTacacsTacplusServer, NetworktemplateSwitchMgmtTacacsTacplusServerArgs
NetworktemplateUplinkPortConfig, NetworktemplateUplinkPortConfigArgs
- Dot1x bool
- Whether to do 802.1x against uplink switch. When enaled, AP cert will be used to do EAP-TLS and the Org's CA Cert has to be provisioned at the switch
- Keep
Wlans boolUp If Down - by default, WLANs are disabled when uplink is down. In some scenario, like SiteSurvey, one would want the AP to keep sending beacons.
- Dot1x bool
- Whether to do 802.1x against uplink switch. When enaled, AP cert will be used to do EAP-TLS and the Org's CA Cert has to be provisioned at the switch
- Keep
Wlans boolUp If Down - by default, WLANs are disabled when uplink is down. In some scenario, like SiteSurvey, one would want the AP to keep sending beacons.
- dot1x Boolean
- Whether to do 802.1x against uplink switch. When enaled, AP cert will be used to do EAP-TLS and the Org's CA Cert has to be provisioned at the switch
- keep
Wlans BooleanUp If Down - by default, WLANs are disabled when uplink is down. In some scenario, like SiteSurvey, one would want the AP to keep sending beacons.
- dot1x boolean
- Whether to do 802.1x against uplink switch. When enaled, AP cert will be used to do EAP-TLS and the Org's CA Cert has to be provisioned at the switch
- keep
Wlans booleanUp If Down - by default, WLANs are disabled when uplink is down. In some scenario, like SiteSurvey, one would want the AP to keep sending beacons.
- dot1x bool
- Whether to do 802.1x against uplink switch. When enaled, AP cert will be used to do EAP-TLS and the Org's CA Cert has to be provisioned at the switch
- keep_
wlans_ boolup_ if_ down - by default, WLANs are disabled when uplink is down. In some scenario, like SiteSurvey, one would want the AP to keep sending beacons.
- dot1x Boolean
- Whether to do 802.1x against uplink switch. When enaled, AP cert will be used to do EAP-TLS and the Org's CA Cert has to be provisioned at the switch
- keep
Wlans BooleanUp If Down - by default, WLANs are disabled when uplink is down. In some scenario, like SiteSurvey, one would want the AP to keep sending beacons.
NetworktemplateVrfConfig, NetworktemplateVrfConfigArgs
- Enabled bool
- whether to enable VRF (when supported on the device)
- Enabled bool
- whether to enable VRF (when supported on the device)
- enabled Boolean
- whether to enable VRF (when supported on the device)
- enabled boolean
- whether to enable VRF (when supported on the device)
- enabled bool
- whether to enable VRF (when supported on the device)
- enabled Boolean
- whether to enable VRF (when supported on the device)
NetworktemplateVrfInstances, NetworktemplateVrfInstancesArgs
- Extra
Routes Dictionary<string, Pulumi.Juniper Mist. Site. Inputs. Networktemplate Vrf Instances Extra Routes> - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- Networks List<string>
- Extra
Routes map[string]NetworktemplateVrf Instances Extra Routes - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- Networks []string
- extra
Routes Map<String,NetworktemplateVrf Instances Extra Routes> - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- networks List<String>
- extra
Routes {[key: string]: NetworktemplateVrf Instances Extra Routes} - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- networks string[]
- extra_
routes Mapping[str, NetworktemplateVrf Instances Extra Routes] - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- networks Sequence[str]
- extra
Routes Map<Property Map> - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- networks List<String>
NetworktemplateVrfInstancesExtraRoutes, NetworktemplateVrfInstancesExtraRoutesArgs
- Via string
- Next-hop address
- Via string
- Next-hop address
- via String
- Next-hop address
- via string
- Next-hop address
- via str
- Next-hop address
- via String
- Next-hop address
Import
Using pulumi import, import mist_site_networktemplate with:
Site Network Template can be imported by specifying the site_id
$ pulumi import junipermist:site/networktemplate:Networktemplate networktemplate_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- junipermist pulumi/pulumi-junipermist
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
mistTerraform Provider.