Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
published on Saturday, Jul 11, 2026 by Pulumi
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
published on Saturday, Jul 11, 2026 by Pulumi
This resource manages the Gateway configuration.
It can be used to define specific configuration at the device level or to override Org Gateway template settings.
WARNING For adopted devices, make sure to set
mistConfigured=trueto allow Mist to manage the gateway
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as junipermist from "@pulumi/juniper-mist";
const gatewayOne = new junipermist.device.Gateway("gateway_one", {
name: "gateway_one",
deviceId: clusterOne.deviceId,
siteId: clusterOne.siteId,
oobIpConfig: {
type: "dhcp",
},
dnsServers: ["8.8.8.8"],
additionalConfigCmds: [
"annotate system \" -- custom-main -- Template level --\"",
"delete apply-groups custom-main",
"delete groups custom-main",
"set groups custom-main",
"set groups custom-main system services ssh root-login allow",
"set apply-groups custom-main",
],
});
import pulumi
import pulumi_juniper_mist as junipermist
gateway_one = junipermist.device.Gateway("gateway_one",
name="gateway_one",
device_id=cluster_one["deviceId"],
site_id=cluster_one["siteId"],
oob_ip_config={
"type": "dhcp",
},
dns_servers=["8.8.8.8"],
additional_config_cmds=[
"annotate system \" -- custom-main -- Template level --\"",
"delete apply-groups custom-main",
"delete groups custom-main",
"set groups custom-main",
"set groups custom-main system services ssh root-login allow",
"set apply-groups custom-main",
])
package main
import (
"github.com/pulumi/pulumi-junipermist/sdk/go/junipermist/device"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := device.NewGateway(ctx, "gateway_one", &device.GatewayArgs{
Name: pulumi.String("gateway_one"),
DeviceId: pulumi.Any(clusterOne.DeviceId),
SiteId: pulumi.Any(clusterOne.SiteId),
OobIpConfig: &device.GatewayOobIpConfigArgs{
Type: pulumi.String("dhcp"),
},
DnsServers: pulumi.StringArray{
pulumi.String("8.8.8.8"),
},
AdditionalConfigCmds: pulumi.StringArray{
pulumi.String("annotate system \" -- custom-main -- Template level --\""),
pulumi.String("delete apply-groups custom-main"),
pulumi.String("delete groups custom-main"),
pulumi.String("set groups custom-main"),
pulumi.String("set groups custom-main system services ssh root-login allow"),
pulumi.String("set apply-groups custom-main"),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using JuniperMist = Pulumi.JuniperMist;
return await Deployment.RunAsync(() =>
{
var gatewayOne = new JuniperMist.Device.Gateway("gateway_one", new()
{
Name = "gateway_one",
DeviceId = clusterOne.DeviceId,
SiteId = clusterOne.SiteId,
OobIpConfig = new JuniperMist.Device.Inputs.GatewayOobIpConfigArgs
{
Type = "dhcp",
},
DnsServers = new[]
{
"8.8.8.8",
},
AdditionalConfigCmds = new[]
{
"annotate system \" -- custom-main -- Template level --\"",
"delete apply-groups custom-main",
"delete groups custom-main",
"set groups custom-main",
"set groups custom-main system services ssh root-login allow",
"set apply-groups custom-main",
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.device.Gateway;
import com.pulumi.junipermist.device.GatewayArgs;
import com.pulumi.junipermist.device.inputs.GatewayOobIpConfigArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var gatewayOne = new Gateway("gatewayOne", GatewayArgs.builder()
.name("gateway_one")
.deviceId(clusterOne.deviceId())
.siteId(clusterOne.siteId())
.oobIpConfig(GatewayOobIpConfigArgs.builder()
.type("dhcp")
.build())
.dnsServers("8.8.8.8")
.additionalConfigCmds(
"annotate system \" -- custom-main -- Template level --\"",
"delete apply-groups custom-main",
"delete groups custom-main",
"set groups custom-main",
"set groups custom-main system services ssh root-login allow",
"set apply-groups custom-main")
.build());
}
}
resources:
gatewayOne:
type: junipermist:device:Gateway
name: gateway_one
properties:
name: gateway_one
deviceId: ${clusterOne.deviceId}
siteId: ${clusterOne.siteId}
oobIpConfig:
type: dhcp
dnsServers:
- 8.8.8.8
additionalConfigCmds:
- annotate system " -- custom-main -- Template level --"
- delete apply-groups custom-main
- delete groups custom-main
- set groups custom-main
- set groups custom-main system services ssh root-login allow
- set apply-groups custom-main
pulumi {
required_providers {
junipermist = {
source = "pulumi/junipermist"
}
}
}
resource "junipermist_device_gateway" "gateway_one" {
name = "gateway_one"
device_id = clusterOne.deviceId
site_id = clusterOne.siteId
oob_ip_config = {
type = "dhcp"
}
dns_servers = ["8.8.8.8"]
additional_config_cmds = ["annotate system \" -- custom-main -- Template level --\"", "delete apply-groups custom-main", "delete groups custom-main", "set groups custom-main", "set groups custom-main system services ssh root-login allow", "set apply-groups custom-main"]
}
Create Gateway Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Gateway(name: string, args: GatewayArgs, opts?: CustomResourceOptions);@overload
def Gateway(resource_name: str,
args: GatewayArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Gateway(resource_name: str,
opts: Optional[ResourceOptions] = None,
device_id: Optional[str] = None,
site_id: Optional[str] = None,
ntp_servers: Optional[Sequence[str]] = None,
oob_ip_config: Optional[GatewayOobIpConfigArgs] = None,
dns_servers: Optional[Sequence[str]] = None,
dns_suffixes: Optional[Sequence[str]] = None,
extra_routes: Optional[Mapping[str, GatewayExtraRoutesArgs]] = None,
extra_routes6: Optional[Mapping[str, GatewayExtraRoutes6Args]] = None,
gateway_mgmt: Optional[GatewayGatewayMgmtArgs] = None,
idp_profiles: Optional[Mapping[str, GatewayIdpProfilesArgs]] = None,
ip_configs: Optional[Mapping[str, GatewayIpConfigsArgs]] = None,
managed: Optional[bool] = None,
path_preferences: Optional[Mapping[str, GatewayPathPreferencesArgs]] = None,
mist_configured: Optional[bool] = None,
msp_id: Optional[str] = None,
name: Optional[str] = None,
networks: Optional[Sequence[GatewayNetworkArgs]] = None,
notes: Optional[str] = None,
dhcpd_config: Optional[GatewayDhcpdConfigArgs] = None,
additional_config_cmds: Optional[Sequence[str]] = None,
map_id: Optional[str] = None,
port_config: Optional[Mapping[str, GatewayPortConfigArgs]] = None,
port_mirroring: Optional[GatewayPortMirroringArgs] = None,
router_id: Optional[str] = None,
routing_policies: Optional[Mapping[str, GatewayRoutingPoliciesArgs]] = None,
service_policies: Optional[Sequence[GatewayServicePolicyArgs]] = None,
bgp_config: Optional[Mapping[str, GatewayBgpConfigArgs]] = None,
ssr_additional_config_cmds: Optional[Sequence[str]] = None,
tunnel_configs: Optional[Mapping[str, GatewayTunnelConfigsArgs]] = None,
tunnel_provider_options: Optional[GatewayTunnelProviderOptionsArgs] = None,
url_filtering_deny_msg: Optional[str] = None,
vars: Optional[Mapping[str, str]] = None,
vrf_config: Optional[GatewayVrfConfigArgs] = None,
vrf_instances: Optional[Mapping[str, GatewayVrfInstancesArgs]] = None,
x: Optional[float] = None,
y: Optional[float] = None)func NewGateway(ctx *Context, name string, args GatewayArgs, opts ...ResourceOption) (*Gateway, error)public Gateway(string name, GatewayArgs args, CustomResourceOptions? opts = null)
public Gateway(String name, GatewayArgs args)
public Gateway(String name, GatewayArgs args, CustomResourceOptions options)
type: junipermist:device:Gateway
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "junipermist_device_gateway" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args GatewayArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args GatewayArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args GatewayArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args GatewayArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args GatewayArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var gatewayResource = new JuniperMist.Device.Gateway("gatewayResource", new()
{
DeviceId = "string",
SiteId = "string",
NtpServers = new[]
{
"string",
},
OobIpConfig = new JuniperMist.Device.Inputs.GatewayOobIpConfigArgs
{
Gateway = "string",
Ip = "string",
Netmask = "string",
Node1 = new JuniperMist.Device.Inputs.GatewayOobIpConfigNode1Args
{
Gateway = "string",
Ip = "string",
Netmask = "string",
Type = "string",
UseMgmtVrf = false,
UseMgmtVrfForHostOut = false,
VlanId = "string",
},
Type = "string",
UseMgmtVrf = false,
UseMgmtVrfForHostOut = false,
VlanId = "string",
},
DnsServers = new[]
{
"string",
},
DnsSuffixes = new[]
{
"string",
},
ExtraRoutes =
{
{ "string", new JuniperMist.Device.Inputs.GatewayExtraRoutesArgs
{
Via = "string",
} },
},
ExtraRoutes6 =
{
{ "string", new JuniperMist.Device.Inputs.GatewayExtraRoutes6Args
{
Via = "string",
} },
},
GatewayMgmt = new JuniperMist.Device.Inputs.GatewayGatewayMgmtArgs
{
AdminSshkeys = new[]
{
"string",
},
AppProbing = new JuniperMist.Device.Inputs.GatewayGatewayMgmtAppProbingArgs
{
Apps = new[]
{
"string",
},
CustomApps = new[]
{
new JuniperMist.Device.Inputs.GatewayGatewayMgmtAppProbingCustomAppArgs
{
Address = "string",
AppType = "string",
Hostnames = new[]
{
"string",
},
Key = "string",
Name = "string",
Network = "string",
PacketSize = 0,
Protocol = "string",
Url = "string",
Vrf = "string",
},
},
Enabled = false,
},
AppUsage = false,
AutoSignatureUpdate = new JuniperMist.Device.Inputs.GatewayGatewayMgmtAutoSignatureUpdateArgs
{
DayOfWeek = "string",
Enable = false,
TimeOfDay = "string",
},
ConfigRevertTimer = 0,
DisableConsole = false,
DisableOob = false,
DisableUsb = false,
FipsEnabled = false,
ProbeHosts = new[]
{
"string",
},
ProbeHostsv6s = new[]
{
"string",
},
ProtectRe = new JuniperMist.Device.Inputs.GatewayGatewayMgmtProtectReArgs
{
AllowedServices = new[]
{
"string",
},
Customs = new[]
{
new JuniperMist.Device.Inputs.GatewayGatewayMgmtProtectReCustomArgs
{
PortRange = "string",
Protocol = "string",
Subnets = new[]
{
"string",
},
},
},
Enabled = false,
HitCount = false,
TrustedHosts = new[]
{
"string",
},
},
RootPassword = "string",
SecurityLogSourceAddress = "string",
SecurityLogSourceInterface = "string",
},
IdpProfiles =
{
{ "string", new JuniperMist.Device.Inputs.GatewayIdpProfilesArgs
{
BaseProfile = "string",
Id = "string",
Name = "string",
OrgId = "string",
Overwrites = new[]
{
new JuniperMist.Device.Inputs.GatewayIdpProfilesOverwriteArgs
{
Action = "string",
Matching = new JuniperMist.Device.Inputs.GatewayIdpProfilesOverwriteMatchingArgs
{
AttackNames = new[]
{
"string",
},
DstSubnets = new[]
{
"string",
},
Severities = new[]
{
"string",
},
},
Name = "string",
},
},
} },
},
IpConfigs =
{
{ "string", new JuniperMist.Device.Inputs.GatewayIpConfigsArgs
{
Ip = "string",
Ip6 = "string",
Netmask = "string",
Netmask6 = "string",
SecondaryIps = new[]
{
"string",
},
Type = "string",
Type6 = "string",
} },
},
PathPreferences =
{
{ "string", new JuniperMist.Device.Inputs.GatewayPathPreferencesArgs
{
Paths = new[]
{
new JuniperMist.Device.Inputs.GatewayPathPreferencesPathArgs
{
Type = "string",
Cost = 0,
Disabled = false,
GatewayIp = "string",
InternetAccess = false,
Name = "string",
Networks = new[]
{
"string",
},
TargetIps = new[]
{
"string",
},
WanName = "string",
},
},
Strategy = "string",
} },
},
MistConfigured = false,
MspId = "string",
Name = "string",
Networks = new[]
{
new JuniperMist.Device.Inputs.GatewayNetworkArgs
{
Name = "string",
Subnet = "string",
InternalAccess = new JuniperMist.Device.Inputs.GatewayNetworkInternalAccessArgs
{
Enabled = false,
},
DisallowMistServices = false,
InternetAccess = new JuniperMist.Device.Inputs.GatewayNetworkInternetAccessArgs
{
CreateSimpleServicePolicy = false,
DestinationNat =
{
{ "string", new JuniperMist.Device.Inputs.GatewayNetworkInternetAccessDestinationNatArgs
{
InternalIp = "string",
Name = "string",
Port = "string",
WanName = "string",
} },
},
Enabled = false,
Restricted = false,
StaticNat =
{
{ "string", new JuniperMist.Device.Inputs.GatewayNetworkInternetAccessStaticNatArgs
{
InternalIp = "string",
Name = "string",
WanName = "string",
} },
},
},
Isolation = false,
Multicast = new JuniperMist.Device.Inputs.GatewayNetworkMulticastArgs
{
DisableIgmp = false,
Enabled = false,
Groups =
{
{ "string", new JuniperMist.Device.Inputs.GatewayNetworkMulticastGroupsArgs
{
RpIp = "string",
} },
},
},
Gateway6 = "string",
RoutedForNetworks = new[]
{
"string",
},
Gateway = "string",
Subnet6 = "string",
Tenants =
{
{ "string", new JuniperMist.Device.Inputs.GatewayNetworkTenantsArgs
{
Addresses = new[]
{
"string",
},
} },
},
VlanId = "string",
VpnAccess =
{
{ "string", new JuniperMist.Device.Inputs.GatewayNetworkVpnAccessArgs
{
AdvertisedSubnet = "string",
AllowPing = false,
DestinationNat =
{
{ "string", new JuniperMist.Device.Inputs.GatewayNetworkVpnAccessDestinationNatArgs
{
InternalIp = "string",
Name = "string",
Port = "string",
} },
},
NatPool = "string",
NoReadvertiseToLanBgp = false,
NoReadvertiseToLanOspf = false,
NoReadvertiseToOverlay = false,
OtherVrfs = new[]
{
"string",
},
Routed = false,
SourceNat = new JuniperMist.Device.Inputs.GatewayNetworkVpnAccessSourceNatArgs
{
ExternalIp = "string",
},
StaticNat =
{
{ "string", new JuniperMist.Device.Inputs.GatewayNetworkVpnAccessStaticNatArgs
{
InternalIp = "string",
Name = "string",
} },
},
SummarizedSubnet = "string",
SummarizedSubnetToLanBgp = "string",
SummarizedSubnetToLanOspf = "string",
} },
},
},
},
Notes = "string",
DhcpdConfig = new JuniperMist.Device.Inputs.GatewayDhcpdConfigArgs
{
Config =
{
{ "string", new JuniperMist.Device.Inputs.GatewayDhcpdConfigConfigArgs
{
DnsServers = new[]
{
"string",
},
FixedBindings =
{
{ "string", new JuniperMist.Device.Inputs.GatewayDhcpdConfigConfigFixedBindingsArgs
{
Ip = "string",
Ip6 = "string",
Name = "string",
} },
},
Gateway = "string",
Ip6End = "string",
Ip6Start = "string",
IpEnd = "string",
IpStart = "string",
LeaseTime = 0,
Options =
{
{ "string", new JuniperMist.Device.Inputs.GatewayDhcpdConfigConfigOptionsArgs
{
Type = "string",
Value = "string",
} },
},
ServerIdOverride = false,
Servers = new[]
{
"string",
},
Serversv6s = new[]
{
"string",
},
Type = "string",
Type6 = "string",
VendorEncapsulated =
{
{ "string", new JuniperMist.Device.Inputs.GatewayDhcpdConfigConfigVendorEncapsulatedArgs
{
Type = "string",
Value = "string",
} },
},
} },
},
Enabled = false,
},
AdditionalConfigCmds = new[]
{
"string",
},
MapId = "string",
PortConfig =
{
{ "string", new JuniperMist.Device.Inputs.GatewayPortConfigArgs
{
Usage = "string",
PortNetwork = "string",
LteApn = "string",
Aggregated = false,
Critical = false,
Description = "string",
DisableAutoneg = false,
Disabled = false,
DslType = "string",
DslVci = 0,
DslVpi = 0,
Duplex = "string",
IpConfig = new JuniperMist.Device.Inputs.GatewayPortConfigIpConfigArgs
{
Dns = new[]
{
"string",
},
DnsSuffixes = new[]
{
"string",
},
Gateway = "string",
Gateway6 = "string",
Ip = "string",
Ip6 = "string",
Netmask = "string",
Netmask6 = "string",
Network = "string",
PoserPassword = "string",
PppoeAuth = "string",
PppoeUsername = "string",
Type = "string",
Type6 = "string",
},
AeDisableLacp = false,
LteAuth = "string",
LteBackup = false,
LtePassword = "string",
LteUsername = "string",
Mtu = 0,
Name = "string",
Networks = new[]
{
"string",
},
OuterVlanId = 0,
PoeDisabled = false,
AeLacpForceUp = false,
PoeKeepStateWhenReboot = false,
SsrNoVirtualMac = false,
Redundant = false,
RedundantGroup = 0,
RethIdx = "string",
RethNode = "string",
RethNodes = new[]
{
"string",
},
Speed = "string",
PreserveDscp = false,
SvrPortRange = "string",
TrafficShaping = new JuniperMist.Device.Inputs.GatewayPortConfigTrafficShapingArgs
{
ClassPercentages = new[]
{
0,
},
Enabled = false,
MaxTxKbps = 0,
},
AeIdx = "string",
VlanId = "string",
VpnPaths =
{
{ "string", new JuniperMist.Device.Inputs.GatewayPortConfigVpnPathsArgs
{
BfdProfile = "string",
BfdUseTunnelMode = false,
Preference = 0,
Role = "string",
TrafficShaping = new JuniperMist.Device.Inputs.GatewayPortConfigVpnPathsTrafficShapingArgs
{
ClassPercentages = new[]
{
0,
},
Enabled = false,
MaxTxKbps = 0,
},
} },
},
WanArpPolicer = "string",
WanExtIp = "string",
WanExtIp6 = "string",
WanExtraRoutes =
{
{ "string", new JuniperMist.Device.Inputs.GatewayPortConfigWanExtraRoutesArgs
{
Via = "string",
} },
},
WanExtraRoutes6 =
{
{ "string", new JuniperMist.Device.Inputs.GatewayPortConfigWanExtraRoutes6Args
{
Via = "string",
} },
},
WanNetworks = new[]
{
"string",
},
WanProbeOverride = new JuniperMist.Device.Inputs.GatewayPortConfigWanProbeOverrideArgs
{
Ip6s = new[]
{
"string",
},
Ips = new[]
{
"string",
},
ProbeProfile = "string",
},
WanSourceNat = new JuniperMist.Device.Inputs.GatewayPortConfigWanSourceNatArgs
{
Disabled = false,
Nat6Pool = "string",
NatPool = "string",
},
WanSpeedtestMode = "string",
WanType = "string",
} },
},
PortMirroring = new JuniperMist.Device.Inputs.GatewayPortMirroringArgs
{
PortMirror = new JuniperMist.Device.Inputs.GatewayPortMirroringPortMirrorArgs
{
FamilyType = "string",
IngressPortIds = new[]
{
"string",
},
OutputPortId = "string",
Rate = 0,
RunLength = 0,
},
},
RouterId = "string",
RoutingPolicies =
{
{ "string", new JuniperMist.Device.Inputs.GatewayRoutingPoliciesArgs
{
Terms = new[]
{
new JuniperMist.Device.Inputs.GatewayRoutingPoliciesTermArgs
{
Actions = new JuniperMist.Device.Inputs.GatewayRoutingPoliciesTermActionsArgs
{
Accept = false,
AddCommunities = new[]
{
"string",
},
AddTargetVrfs = new[]
{
"string",
},
Communities = new[]
{
"string",
},
ExcludeAsPaths = new[]
{
"string",
},
ExcludeCommunities = new[]
{
"string",
},
ExportCommunities = new[]
{
"string",
},
LocalPreference = "string",
PrependAsPaths = new[]
{
"string",
},
},
Matching = new JuniperMist.Device.Inputs.GatewayRoutingPoliciesTermMatchingArgs
{
AsPaths = new[]
{
"string",
},
Communities = new[]
{
"string",
},
Networks = new[]
{
"string",
},
Prefixes = new[]
{
"string",
},
Protocols = new[]
{
"string",
},
RouteExists = new JuniperMist.Device.Inputs.GatewayRoutingPoliciesTermMatchingRouteExistsArgs
{
Route = "string",
VrfName = "string",
},
VpnNeighborMacs = new[]
{
"string",
},
VpnPathSla = new JuniperMist.Device.Inputs.GatewayRoutingPoliciesTermMatchingVpnPathSlaArgs
{
MaxJitter = 0,
MaxLatency = 0,
MaxLoss = 0,
},
VpnPaths = new[]
{
"string",
},
},
},
},
} },
},
ServicePolicies = new[]
{
new JuniperMist.Device.Inputs.GatewayServicePolicyArgs
{
Action = "string",
Antivirus = new JuniperMist.Device.Inputs.GatewayServicePolicyAntivirusArgs
{
AvprofileId = "string",
Enabled = false,
Profile = "string",
},
Appqoe = new JuniperMist.Device.Inputs.GatewayServicePolicyAppqoeArgs
{
Enabled = false,
},
Ewfs = new[]
{
new JuniperMist.Device.Inputs.GatewayServicePolicyEwfArgs
{
AlertOnly = false,
BlockMessage = "string",
Enabled = false,
Profile = "string",
},
},
Idp = new JuniperMist.Device.Inputs.GatewayServicePolicyIdpArgs
{
AlertOnly = false,
Enabled = false,
IdpprofileId = "string",
Profile = "string",
},
LocalRouting = false,
Name = "string",
PathPreference = "string",
ServicepolicyId = "string",
Services = new[]
{
"string",
},
Skyatp = new JuniperMist.Device.Inputs.GatewayServicePolicySkyatpArgs
{
DnsDgaDetection = new JuniperMist.Device.Inputs.GatewayServicePolicySkyatpDnsDgaDetectionArgs
{
Enabled = false,
Profile = "string",
},
DnsTunnelDetection = new JuniperMist.Device.Inputs.GatewayServicePolicySkyatpDnsTunnelDetectionArgs
{
Enabled = false,
Profile = "string",
},
HttpInspection = new JuniperMist.Device.Inputs.GatewayServicePolicySkyatpHttpInspectionArgs
{
Enabled = false,
Profile = "string",
},
IotDevicePolicy = new JuniperMist.Device.Inputs.GatewayServicePolicySkyatpIotDevicePolicyArgs
{
Enabled = false,
},
},
SslProxy = new JuniperMist.Device.Inputs.GatewayServicePolicySslProxyArgs
{
CiphersCategory = "string",
Enabled = false,
},
Syslog = new JuniperMist.Device.Inputs.GatewayServicePolicySyslogArgs
{
Enabled = false,
ServerNames = new[]
{
"string",
},
},
Tenants = new[]
{
"string",
},
},
},
BgpConfig =
{
{ "string", new JuniperMist.Device.Inputs.GatewayBgpConfigArgs
{
Via = "string",
ImportPolicy = "string",
NeighborAs = "string",
DisableBfd = false,
Export = "string",
ExportPolicy = "string",
ExtendedV4Nexthop = false,
GracefulRestartTime = 0,
HoldTime = 0,
Import = "string",
AuthKey = "string",
BfdMultiplier = 0,
Neighbors =
{
{ "string", new JuniperMist.Device.Inputs.GatewayBgpConfigNeighborsArgs
{
NeighborAs = "string",
Disabled = false,
ExportPolicy = "string",
HoldTime = 0,
ImportPolicy = "string",
MultihopTtl = 0,
TunnelVia = "string",
} },
},
LocalAs = "string",
Networks = new[]
{
"string",
},
NoPrivateAs = false,
NoReadvertiseToOverlay = false,
TunnelName = "string",
Type = "string",
BfdMinimumInterval = 0,
VpnName = "string",
WanName = "string",
} },
},
SsrAdditionalConfigCmds = new[]
{
"string",
},
TunnelConfigs =
{
{ "string", new JuniperMist.Device.Inputs.GatewayTunnelConfigsArgs
{
AutoProvision = new JuniperMist.Device.Inputs.GatewayTunnelConfigsAutoProvisionArgs
{
Provider = "string",
Enabled = false,
Latlng = new JuniperMist.Device.Inputs.GatewayTunnelConfigsAutoProvisionLatlngArgs
{
Lat = 0,
Lng = 0,
},
Primary = new JuniperMist.Device.Inputs.GatewayTunnelConfigsAutoProvisionPrimaryArgs
{
ProbeIps = new[]
{
"string",
},
WanNames = new[]
{
"string",
},
},
Region = "string",
Secondary = new JuniperMist.Device.Inputs.GatewayTunnelConfigsAutoProvisionSecondaryArgs
{
ProbeIps = new[]
{
"string",
},
WanNames = new[]
{
"string",
},
},
ServiceConnection = "string",
},
IkeLifetime = 0,
IkeMode = "string",
IkeProposals = new[]
{
new JuniperMist.Device.Inputs.GatewayTunnelConfigsIkeProposalArgs
{
AuthAlgo = "string",
DhGroup = "string",
EncAlgo = "string",
},
},
IpsecLifetime = 0,
IpsecProposals = new[]
{
new JuniperMist.Device.Inputs.GatewayTunnelConfigsIpsecProposalArgs
{
AuthAlgo = "string",
DhGroup = "string",
EncAlgo = "string",
},
},
LocalId = "string",
LocalSubnets = new[]
{
"string",
},
Mode = "string",
Networks = new[]
{
"string",
},
Primary = new JuniperMist.Device.Inputs.GatewayTunnelConfigsPrimaryArgs
{
Hosts = new[]
{
"string",
},
WanNames = new[]
{
"string",
},
InternalIps = new[]
{
"string",
},
ProbeIps = new[]
{
"string",
},
RemoteIds = new[]
{
"string",
},
},
Probe = new JuniperMist.Device.Inputs.GatewayTunnelConfigsProbeArgs
{
Interval = 0,
Threshold = 0,
Timeout = 0,
Type = "string",
},
Protocol = "string",
Provider = "string",
Psk = "string",
RemoteSubnets = new[]
{
"string",
},
Secondary = new JuniperMist.Device.Inputs.GatewayTunnelConfigsSecondaryArgs
{
Hosts = new[]
{
"string",
},
WanNames = new[]
{
"string",
},
InternalIps = new[]
{
"string",
},
ProbeIps = new[]
{
"string",
},
RemoteIds = new[]
{
"string",
},
},
Version = "string",
} },
},
TunnelProviderOptions = new JuniperMist.Device.Inputs.GatewayTunnelProviderOptionsArgs
{
Jse = new JuniperMist.Device.Inputs.GatewayTunnelProviderOptionsJseArgs
{
NumUsers = 0,
OrgName = "string",
},
Prisma = new JuniperMist.Device.Inputs.GatewayTunnelProviderOptionsPrismaArgs
{
ServiceAccountName = "string",
},
Zscaler = new JuniperMist.Device.Inputs.GatewayTunnelProviderOptionsZscalerArgs
{
AupBlockInternetUntilAccepted = false,
AupEnabled = false,
AupForceSslInspection = false,
AupTimeoutInDays = 0,
AuthRequired = false,
CautionEnabled = false,
DnBandwidth = 0,
IdleTimeInMinutes = 0,
OfwEnabled = false,
SubLocations = new[]
{
new JuniperMist.Device.Inputs.GatewayTunnelProviderOptionsZscalerSubLocationArgs
{
AupBlockInternetUntilAccepted = false,
AupEnabled = false,
AupForceSslInspection = false,
AupTimeoutInDays = 0,
AuthRequired = false,
CautionEnabled = false,
DnBandwidth = 0,
IdleTimeInMinutes = 0,
Name = "string",
OfwEnabled = false,
SurrogateIp = false,
SurrogateIpEnforcedForKnownBrowsers = false,
SurrogateRefreshTimeInMinutes = 0,
UpBandwidth = 0,
},
},
SurrogateIp = false,
SurrogateIpEnforcedForKnownBrowsers = false,
SurrogateRefreshTimeInMinutes = 0,
UpBandwidth = 0,
XffForwardEnabled = false,
},
},
UrlFilteringDenyMsg = "string",
Vars =
{
{ "string", "string" },
},
VrfConfig = new JuniperMist.Device.Inputs.GatewayVrfConfigArgs
{
Enabled = false,
},
VrfInstances =
{
{ "string", new JuniperMist.Device.Inputs.GatewayVrfInstancesArgs
{
Networks = new[]
{
"string",
},
} },
},
X = 0,
Y = 0,
});
example, err := device.NewGateway(ctx, "gatewayResource", &device.GatewayArgs{
DeviceId: pulumi.String("string"),
SiteId: pulumi.String("string"),
NtpServers: pulumi.StringArray{
pulumi.String("string"),
},
OobIpConfig: &device.GatewayOobIpConfigArgs{
Gateway: pulumi.String("string"),
Ip: pulumi.String("string"),
Netmask: pulumi.String("string"),
Node1: &device.GatewayOobIpConfigNode1Args{
Gateway: pulumi.String("string"),
Ip: pulumi.String("string"),
Netmask: pulumi.String("string"),
Type: pulumi.String("string"),
UseMgmtVrf: pulumi.Bool(false),
UseMgmtVrfForHostOut: pulumi.Bool(false),
VlanId: pulumi.String("string"),
},
Type: pulumi.String("string"),
UseMgmtVrf: pulumi.Bool(false),
UseMgmtVrfForHostOut: pulumi.Bool(false),
VlanId: pulumi.String("string"),
},
DnsServers: pulumi.StringArray{
pulumi.String("string"),
},
DnsSuffixes: pulumi.StringArray{
pulumi.String("string"),
},
ExtraRoutes: device.GatewayExtraRoutesMap{
"string": &device.GatewayExtraRoutesArgs{
Via: pulumi.String("string"),
},
},
ExtraRoutes6: device.GatewayExtraRoutes6Map{
"string": &device.GatewayExtraRoutes6Args{
Via: pulumi.String("string"),
},
},
GatewayMgmt: &device.GatewayGatewayMgmtArgs{
AdminSshkeys: pulumi.StringArray{
pulumi.String("string"),
},
AppProbing: &device.GatewayGatewayMgmtAppProbingArgs{
Apps: pulumi.StringArray{
pulumi.String("string"),
},
CustomApps: device.GatewayGatewayMgmtAppProbingCustomAppArray{
&device.GatewayGatewayMgmtAppProbingCustomAppArgs{
Address: pulumi.String("string"),
AppType: pulumi.String("string"),
Hostnames: pulumi.StringArray{
pulumi.String("string"),
},
Key: pulumi.String("string"),
Name: pulumi.String("string"),
Network: pulumi.String("string"),
PacketSize: pulumi.Int(0),
Protocol: pulumi.String("string"),
Url: pulumi.String("string"),
Vrf: pulumi.String("string"),
},
},
Enabled: pulumi.Bool(false),
},
AppUsage: pulumi.Bool(false),
AutoSignatureUpdate: &device.GatewayGatewayMgmtAutoSignatureUpdateArgs{
DayOfWeek: pulumi.String("string"),
Enable: pulumi.Bool(false),
TimeOfDay: pulumi.String("string"),
},
ConfigRevertTimer: pulumi.Int(0),
DisableConsole: pulumi.Bool(false),
DisableOob: pulumi.Bool(false),
DisableUsb: pulumi.Bool(false),
FipsEnabled: pulumi.Bool(false),
ProbeHosts: pulumi.StringArray{
pulumi.String("string"),
},
ProbeHostsv6s: pulumi.StringArray{
pulumi.String("string"),
},
ProtectRe: &device.GatewayGatewayMgmtProtectReArgs{
AllowedServices: pulumi.StringArray{
pulumi.String("string"),
},
Customs: device.GatewayGatewayMgmtProtectReCustomArray{
&device.GatewayGatewayMgmtProtectReCustomArgs{
PortRange: pulumi.String("string"),
Protocol: pulumi.String("string"),
Subnets: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Enabled: pulumi.Bool(false),
HitCount: pulumi.Bool(false),
TrustedHosts: pulumi.StringArray{
pulumi.String("string"),
},
},
RootPassword: pulumi.String("string"),
SecurityLogSourceAddress: pulumi.String("string"),
SecurityLogSourceInterface: pulumi.String("string"),
},
IdpProfiles: device.GatewayIdpProfilesMap{
"string": &device.GatewayIdpProfilesArgs{
BaseProfile: pulumi.String("string"),
Id: pulumi.String("string"),
Name: pulumi.String("string"),
OrgId: pulumi.String("string"),
Overwrites: device.GatewayIdpProfilesOverwriteArray{
&device.GatewayIdpProfilesOverwriteArgs{
Action: pulumi.String("string"),
Matching: &device.GatewayIdpProfilesOverwriteMatchingArgs{
AttackNames: pulumi.StringArray{
pulumi.String("string"),
},
DstSubnets: pulumi.StringArray{
pulumi.String("string"),
},
Severities: pulumi.StringArray{
pulumi.String("string"),
},
},
Name: pulumi.String("string"),
},
},
},
},
IpConfigs: device.GatewayIpConfigsMap{
"string": &device.GatewayIpConfigsArgs{
Ip: pulumi.String("string"),
Ip6: pulumi.String("string"),
Netmask: pulumi.String("string"),
Netmask6: pulumi.String("string"),
SecondaryIps: pulumi.StringArray{
pulumi.String("string"),
},
Type: pulumi.String("string"),
Type6: pulumi.String("string"),
},
},
PathPreferences: device.GatewayPathPreferencesMap{
"string": &device.GatewayPathPreferencesArgs{
Paths: device.GatewayPathPreferencesPathArray{
&device.GatewayPathPreferencesPathArgs{
Type: pulumi.String("string"),
Cost: pulumi.Int(0),
Disabled: pulumi.Bool(false),
GatewayIp: pulumi.String("string"),
InternetAccess: pulumi.Bool(false),
Name: pulumi.String("string"),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
TargetIps: pulumi.StringArray{
pulumi.String("string"),
},
WanName: pulumi.String("string"),
},
},
Strategy: pulumi.String("string"),
},
},
MistConfigured: pulumi.Bool(false),
MspId: pulumi.String("string"),
Name: pulumi.String("string"),
Networks: device.GatewayNetworkArray{
&device.GatewayNetworkArgs{
Name: pulumi.String("string"),
Subnet: pulumi.String("string"),
InternalAccess: &device.GatewayNetworkInternalAccessArgs{
Enabled: pulumi.Bool(false),
},
DisallowMistServices: pulumi.Bool(false),
InternetAccess: &device.GatewayNetworkInternetAccessArgs{
CreateSimpleServicePolicy: pulumi.Bool(false),
DestinationNat: device.GatewayNetworkInternetAccessDestinationNatMap{
"string": &device.GatewayNetworkInternetAccessDestinationNatArgs{
InternalIp: pulumi.String("string"),
Name: pulumi.String("string"),
Port: pulumi.String("string"),
WanName: pulumi.String("string"),
},
},
Enabled: pulumi.Bool(false),
Restricted: pulumi.Bool(false),
StaticNat: device.GatewayNetworkInternetAccessStaticNatMap{
"string": &device.GatewayNetworkInternetAccessStaticNatArgs{
InternalIp: pulumi.String("string"),
Name: pulumi.String("string"),
WanName: pulumi.String("string"),
},
},
},
Isolation: pulumi.Bool(false),
Multicast: &device.GatewayNetworkMulticastArgs{
DisableIgmp: pulumi.Bool(false),
Enabled: pulumi.Bool(false),
Groups: device.GatewayNetworkMulticastGroupsMap{
"string": &device.GatewayNetworkMulticastGroupsArgs{
RpIp: pulumi.String("string"),
},
},
},
Gateway6: pulumi.String("string"),
RoutedForNetworks: pulumi.StringArray{
pulumi.String("string"),
},
Gateway: pulumi.String("string"),
Subnet6: pulumi.String("string"),
Tenants: device.GatewayNetworkTenantsMap{
"string": &device.GatewayNetworkTenantsArgs{
Addresses: pulumi.StringArray{
pulumi.String("string"),
},
},
},
VlanId: pulumi.String("string"),
VpnAccess: device.GatewayNetworkVpnAccessMap{
"string": &device.GatewayNetworkVpnAccessArgs{
AdvertisedSubnet: pulumi.String("string"),
AllowPing: pulumi.Bool(false),
DestinationNat: device.GatewayNetworkVpnAccessDestinationNatMap{
"string": &device.GatewayNetworkVpnAccessDestinationNatArgs{
InternalIp: pulumi.String("string"),
Name: pulumi.String("string"),
Port: pulumi.String("string"),
},
},
NatPool: pulumi.String("string"),
NoReadvertiseToLanBgp: pulumi.Bool(false),
NoReadvertiseToLanOspf: pulumi.Bool(false),
NoReadvertiseToOverlay: pulumi.Bool(false),
OtherVrfs: pulumi.StringArray{
pulumi.String("string"),
},
Routed: pulumi.Bool(false),
SourceNat: &device.GatewayNetworkVpnAccessSourceNatArgs{
ExternalIp: pulumi.String("string"),
},
StaticNat: device.GatewayNetworkVpnAccessStaticNatMap{
"string": &device.GatewayNetworkVpnAccessStaticNatArgs{
InternalIp: pulumi.String("string"),
Name: pulumi.String("string"),
},
},
SummarizedSubnet: pulumi.String("string"),
SummarizedSubnetToLanBgp: pulumi.String("string"),
SummarizedSubnetToLanOspf: pulumi.String("string"),
},
},
},
},
Notes: pulumi.String("string"),
DhcpdConfig: &device.GatewayDhcpdConfigArgs{
Config: device.GatewayDhcpdConfigConfigMap{
"string": &device.GatewayDhcpdConfigConfigArgs{
DnsServers: pulumi.StringArray{
pulumi.String("string"),
},
FixedBindings: device.GatewayDhcpdConfigConfigFixedBindingsMap{
"string": &device.GatewayDhcpdConfigConfigFixedBindingsArgs{
Ip: pulumi.String("string"),
Ip6: pulumi.String("string"),
Name: pulumi.String("string"),
},
},
Gateway: pulumi.String("string"),
Ip6End: pulumi.String("string"),
Ip6Start: pulumi.String("string"),
IpEnd: pulumi.String("string"),
IpStart: pulumi.String("string"),
LeaseTime: pulumi.Int(0),
Options: device.GatewayDhcpdConfigConfigOptionsMap{
"string": &device.GatewayDhcpdConfigConfigOptionsArgs{
Type: pulumi.String("string"),
Value: pulumi.String("string"),
},
},
ServerIdOverride: pulumi.Bool(false),
Servers: pulumi.StringArray{
pulumi.String("string"),
},
Serversv6s: pulumi.StringArray{
pulumi.String("string"),
},
Type: pulumi.String("string"),
Type6: pulumi.String("string"),
VendorEncapsulated: device.GatewayDhcpdConfigConfigVendorEncapsulatedMap{
"string": &device.GatewayDhcpdConfigConfigVendorEncapsulatedArgs{
Type: pulumi.String("string"),
Value: pulumi.String("string"),
},
},
},
},
Enabled: pulumi.Bool(false),
},
AdditionalConfigCmds: pulumi.StringArray{
pulumi.String("string"),
},
MapId: pulumi.String("string"),
PortConfig: device.GatewayPortConfigMap{
"string": &device.GatewayPortConfigArgs{
Usage: pulumi.String("string"),
PortNetwork: pulumi.String("string"),
LteApn: pulumi.String("string"),
Aggregated: pulumi.Bool(false),
Critical: pulumi.Bool(false),
Description: pulumi.String("string"),
DisableAutoneg: pulumi.Bool(false),
Disabled: pulumi.Bool(false),
DslType: pulumi.String("string"),
DslVci: pulumi.Int(0),
DslVpi: pulumi.Int(0),
Duplex: pulumi.String("string"),
IpConfig: &device.GatewayPortConfigIpConfigArgs{
Dns: pulumi.StringArray{
pulumi.String("string"),
},
DnsSuffixes: pulumi.StringArray{
pulumi.String("string"),
},
Gateway: pulumi.String("string"),
Gateway6: pulumi.String("string"),
Ip: pulumi.String("string"),
Ip6: pulumi.String("string"),
Netmask: pulumi.String("string"),
Netmask6: pulumi.String("string"),
Network: pulumi.String("string"),
PoserPassword: pulumi.String("string"),
PppoeAuth: pulumi.String("string"),
PppoeUsername: pulumi.String("string"),
Type: pulumi.String("string"),
Type6: pulumi.String("string"),
},
AeDisableLacp: pulumi.Bool(false),
LteAuth: pulumi.String("string"),
LteBackup: pulumi.Bool(false),
LtePassword: pulumi.String("string"),
LteUsername: pulumi.String("string"),
Mtu: pulumi.Int(0),
Name: pulumi.String("string"),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
OuterVlanId: pulumi.Int(0),
PoeDisabled: pulumi.Bool(false),
AeLacpForceUp: pulumi.Bool(false),
PoeKeepStateWhenReboot: pulumi.Bool(false),
SsrNoVirtualMac: pulumi.Bool(false),
Redundant: pulumi.Bool(false),
RedundantGroup: pulumi.Int(0),
RethIdx: pulumi.String("string"),
RethNode: pulumi.String("string"),
RethNodes: pulumi.StringArray{
pulumi.String("string"),
},
Speed: pulumi.String("string"),
PreserveDscp: pulumi.Bool(false),
SvrPortRange: pulumi.String("string"),
TrafficShaping: &device.GatewayPortConfigTrafficShapingArgs{
ClassPercentages: pulumi.IntArray{
pulumi.Int(0),
},
Enabled: pulumi.Bool(false),
MaxTxKbps: pulumi.Int(0),
},
AeIdx: pulumi.String("string"),
VlanId: pulumi.String("string"),
VpnPaths: device.GatewayPortConfigVpnPathsMap{
"string": &device.GatewayPortConfigVpnPathsArgs{
BfdProfile: pulumi.String("string"),
BfdUseTunnelMode: pulumi.Bool(false),
Preference: pulumi.Int(0),
Role: pulumi.String("string"),
TrafficShaping: &device.GatewayPortConfigVpnPathsTrafficShapingArgs{
ClassPercentages: pulumi.IntArray{
pulumi.Int(0),
},
Enabled: pulumi.Bool(false),
MaxTxKbps: pulumi.Int(0),
},
},
},
WanArpPolicer: pulumi.String("string"),
WanExtIp: pulumi.String("string"),
WanExtIp6: pulumi.String("string"),
WanExtraRoutes: device.GatewayPortConfigWanExtraRoutesMap{
"string": &device.GatewayPortConfigWanExtraRoutesArgs{
Via: pulumi.String("string"),
},
},
WanExtraRoutes6: device.GatewayPortConfigWanExtraRoutes6Map{
"string": &device.GatewayPortConfigWanExtraRoutes6Args{
Via: pulumi.String("string"),
},
},
WanNetworks: pulumi.StringArray{
pulumi.String("string"),
},
WanProbeOverride: &device.GatewayPortConfigWanProbeOverrideArgs{
Ip6s: pulumi.StringArray{
pulumi.String("string"),
},
Ips: pulumi.StringArray{
pulumi.String("string"),
},
ProbeProfile: pulumi.String("string"),
},
WanSourceNat: &device.GatewayPortConfigWanSourceNatArgs{
Disabled: pulumi.Bool(false),
Nat6Pool: pulumi.String("string"),
NatPool: pulumi.String("string"),
},
WanSpeedtestMode: pulumi.String("string"),
WanType: pulumi.String("string"),
},
},
PortMirroring: &device.GatewayPortMirroringArgs{
PortMirror: &device.GatewayPortMirroringPortMirrorArgs{
FamilyType: pulumi.String("string"),
IngressPortIds: pulumi.StringArray{
pulumi.String("string"),
},
OutputPortId: pulumi.String("string"),
Rate: pulumi.Int(0),
RunLength: pulumi.Int(0),
},
},
RouterId: pulumi.String("string"),
RoutingPolicies: device.GatewayRoutingPoliciesMap{
"string": &device.GatewayRoutingPoliciesArgs{
Terms: device.GatewayRoutingPoliciesTermArray{
&device.GatewayRoutingPoliciesTermArgs{
Actions: &device.GatewayRoutingPoliciesTermActionsArgs{
Accept: pulumi.Bool(false),
AddCommunities: pulumi.StringArray{
pulumi.String("string"),
},
AddTargetVrfs: pulumi.StringArray{
pulumi.String("string"),
},
Communities: pulumi.StringArray{
pulumi.String("string"),
},
ExcludeAsPaths: pulumi.StringArray{
pulumi.String("string"),
},
ExcludeCommunities: pulumi.StringArray{
pulumi.String("string"),
},
ExportCommunities: pulumi.StringArray{
pulumi.String("string"),
},
LocalPreference: pulumi.String("string"),
PrependAsPaths: pulumi.StringArray{
pulumi.String("string"),
},
},
Matching: &device.GatewayRoutingPoliciesTermMatchingArgs{
AsPaths: pulumi.StringArray{
pulumi.String("string"),
},
Communities: pulumi.StringArray{
pulumi.String("string"),
},
Networks: pulumi.StringArray{
pulumi.String("string"),
},
Prefixes: pulumi.StringArray{
pulumi.String("string"),
},
Protocols: pulumi.StringArray{
pulumi.String("string"),
},
RouteExists: &device.GatewayRoutingPoliciesTermMatchingRouteExistsArgs{
Route: pulumi.String("string"),
VrfName: pulumi.String("string"),
},
VpnNeighborMacs: pulumi.StringArray{
pulumi.String("string"),
},
VpnPathSla: &device.GatewayRoutingPoliciesTermMatchingVpnPathSlaArgs{
MaxJitter: pulumi.Int(0),
MaxLatency: pulumi.Int(0),
MaxLoss: pulumi.Int(0),
},
VpnPaths: pulumi.StringArray{
pulumi.String("string"),
},
},
},
},
},
},
ServicePolicies: device.GatewayServicePolicyArray{
&device.GatewayServicePolicyArgs{
Action: pulumi.String("string"),
Antivirus: &device.GatewayServicePolicyAntivirusArgs{
AvprofileId: pulumi.String("string"),
Enabled: pulumi.Bool(false),
Profile: pulumi.String("string"),
},
Appqoe: &device.GatewayServicePolicyAppqoeArgs{
Enabled: pulumi.Bool(false),
},
Ewfs: device.GatewayServicePolicyEwfArray{
&device.GatewayServicePolicyEwfArgs{
AlertOnly: pulumi.Bool(false),
BlockMessage: pulumi.String("string"),
Enabled: pulumi.Bool(false),
Profile: pulumi.String("string"),
},
},
Idp: &device.GatewayServicePolicyIdpArgs{
AlertOnly: pulumi.Bool(false),
Enabled: pulumi.Bool(false),
IdpprofileId: pulumi.String("string"),
Profile: pulumi.String("string"),
},
LocalRouting: pulumi.Bool(false),
Name: pulumi.String("string"),
PathPreference: pulumi.String("string"),
ServicepolicyId: pulumi.String("string"),
Services: pulumi.StringArray{
pulumi.String("string"),
},
Skyatp: &device.GatewayServicePolicySkyatpArgs{
DnsDgaDetection: &device.GatewayServicePolicySkyatpDnsDgaDetectionArgs{
Enabled: pulumi.Bool(false),
Profile: pulumi.String("string"),
},
DnsTunnelDetection: &device.GatewayServicePolicySkyatpDnsTunnelDetectionArgs{
Enabled: pulumi.Bool(false),
Profile: pulumi.String("string"),
},
HttpInspection: &device.GatewayServicePolicySkyatpHttpInspectionArgs{
Enabled: pulumi.Bool(false),
Profile: pulumi.String("string"),
},
IotDevicePolicy: &device.GatewayServicePolicySkyatpIotDevicePolicyArgs{
Enabled: pulumi.Bool(false),
},
},
SslProxy: &device.GatewayServicePolicySslProxyArgs{
CiphersCategory: pulumi.String("string"),
Enabled: pulumi.Bool(false),
},
Syslog: &device.GatewayServicePolicySyslogArgs{
Enabled: pulumi.Bool(false),
ServerNames: pulumi.StringArray{
pulumi.String("string"),
},
},
Tenants: pulumi.StringArray{
pulumi.String("string"),
},
},
},
BgpConfig: device.GatewayBgpConfigMap{
"string": &device.GatewayBgpConfigArgs{
Via: pulumi.String("string"),
ImportPolicy: pulumi.String("string"),
NeighborAs: pulumi.String("string"),
DisableBfd: pulumi.Bool(false),
Export: pulumi.String("string"),
ExportPolicy: pulumi.String("string"),
ExtendedV4Nexthop: pulumi.Bool(false),
GracefulRestartTime: pulumi.Int(0),
HoldTime: pulumi.Int(0),
Import: pulumi.String("string"),
AuthKey: pulumi.String("string"),
BfdMultiplier: pulumi.Int(0),
Neighbors: device.GatewayBgpConfigNeighborsMap{
"string": &device.GatewayBgpConfigNeighborsArgs{
NeighborAs: pulumi.String("string"),
Disabled: pulumi.Bool(false),
ExportPolicy: pulumi.String("string"),
HoldTime: pulumi.Int(0),
ImportPolicy: pulumi.String("string"),
MultihopTtl: pulumi.Int(0),
TunnelVia: pulumi.String("string"),
},
},
LocalAs: pulumi.String("string"),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
NoPrivateAs: pulumi.Bool(false),
NoReadvertiseToOverlay: pulumi.Bool(false),
TunnelName: pulumi.String("string"),
Type: pulumi.String("string"),
BfdMinimumInterval: pulumi.Int(0),
VpnName: pulumi.String("string"),
WanName: pulumi.String("string"),
},
},
SsrAdditionalConfigCmds: pulumi.StringArray{
pulumi.String("string"),
},
TunnelConfigs: device.GatewayTunnelConfigsMap{
"string": &device.GatewayTunnelConfigsArgs{
AutoProvision: &device.GatewayTunnelConfigsAutoProvisionArgs{
Provider: pulumi.String("string"),
Enabled: pulumi.Bool(false),
Latlng: &device.GatewayTunnelConfigsAutoProvisionLatlngArgs{
Lat: pulumi.Float64(0),
Lng: pulumi.Float64(0),
},
Primary: &device.GatewayTunnelConfigsAutoProvisionPrimaryArgs{
ProbeIps: pulumi.StringArray{
pulumi.String("string"),
},
WanNames: pulumi.StringArray{
pulumi.String("string"),
},
},
Region: pulumi.String("string"),
Secondary: &device.GatewayTunnelConfigsAutoProvisionSecondaryArgs{
ProbeIps: pulumi.StringArray{
pulumi.String("string"),
},
WanNames: pulumi.StringArray{
pulumi.String("string"),
},
},
ServiceConnection: pulumi.String("string"),
},
IkeLifetime: pulumi.Int(0),
IkeMode: pulumi.String("string"),
IkeProposals: device.GatewayTunnelConfigsIkeProposalArray{
&device.GatewayTunnelConfigsIkeProposalArgs{
AuthAlgo: pulumi.String("string"),
DhGroup: pulumi.String("string"),
EncAlgo: pulumi.String("string"),
},
},
IpsecLifetime: pulumi.Int(0),
IpsecProposals: device.GatewayTunnelConfigsIpsecProposalArray{
&device.GatewayTunnelConfigsIpsecProposalArgs{
AuthAlgo: pulumi.String("string"),
DhGroup: pulumi.String("string"),
EncAlgo: pulumi.String("string"),
},
},
LocalId: pulumi.String("string"),
LocalSubnets: pulumi.StringArray{
pulumi.String("string"),
},
Mode: pulumi.String("string"),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
Primary: &device.GatewayTunnelConfigsPrimaryArgs{
Hosts: pulumi.StringArray{
pulumi.String("string"),
},
WanNames: pulumi.StringArray{
pulumi.String("string"),
},
InternalIps: pulumi.StringArray{
pulumi.String("string"),
},
ProbeIps: pulumi.StringArray{
pulumi.String("string"),
},
RemoteIds: pulumi.StringArray{
pulumi.String("string"),
},
},
Probe: &device.GatewayTunnelConfigsProbeArgs{
Interval: pulumi.Int(0),
Threshold: pulumi.Int(0),
Timeout: pulumi.Int(0),
Type: pulumi.String("string"),
},
Protocol: pulumi.String("string"),
Provider: pulumi.String("string"),
Psk: pulumi.String("string"),
RemoteSubnets: pulumi.StringArray{
pulumi.String("string"),
},
Secondary: &device.GatewayTunnelConfigsSecondaryArgs{
Hosts: pulumi.StringArray{
pulumi.String("string"),
},
WanNames: pulumi.StringArray{
pulumi.String("string"),
},
InternalIps: pulumi.StringArray{
pulumi.String("string"),
},
ProbeIps: pulumi.StringArray{
pulumi.String("string"),
},
RemoteIds: pulumi.StringArray{
pulumi.String("string"),
},
},
Version: pulumi.String("string"),
},
},
TunnelProviderOptions: &device.GatewayTunnelProviderOptionsArgs{
Jse: &device.GatewayTunnelProviderOptionsJseArgs{
NumUsers: pulumi.Int(0),
OrgName: pulumi.String("string"),
},
Prisma: &device.GatewayTunnelProviderOptionsPrismaArgs{
ServiceAccountName: pulumi.String("string"),
},
Zscaler: &device.GatewayTunnelProviderOptionsZscalerArgs{
AupBlockInternetUntilAccepted: pulumi.Bool(false),
AupEnabled: pulumi.Bool(false),
AupForceSslInspection: pulumi.Bool(false),
AupTimeoutInDays: pulumi.Int(0),
AuthRequired: pulumi.Bool(false),
CautionEnabled: pulumi.Bool(false),
DnBandwidth: pulumi.Float64(0),
IdleTimeInMinutes: pulumi.Int(0),
OfwEnabled: pulumi.Bool(false),
SubLocations: device.GatewayTunnelProviderOptionsZscalerSubLocationArray{
&device.GatewayTunnelProviderOptionsZscalerSubLocationArgs{
AupBlockInternetUntilAccepted: pulumi.Bool(false),
AupEnabled: pulumi.Bool(false),
AupForceSslInspection: pulumi.Bool(false),
AupTimeoutInDays: pulumi.Int(0),
AuthRequired: pulumi.Bool(false),
CautionEnabled: pulumi.Bool(false),
DnBandwidth: pulumi.Float64(0),
IdleTimeInMinutes: pulumi.Int(0),
Name: pulumi.String("string"),
OfwEnabled: pulumi.Bool(false),
SurrogateIp: pulumi.Bool(false),
SurrogateIpEnforcedForKnownBrowsers: pulumi.Bool(false),
SurrogateRefreshTimeInMinutes: pulumi.Int(0),
UpBandwidth: pulumi.Float64(0),
},
},
SurrogateIp: pulumi.Bool(false),
SurrogateIpEnforcedForKnownBrowsers: pulumi.Bool(false),
SurrogateRefreshTimeInMinutes: pulumi.Int(0),
UpBandwidth: pulumi.Float64(0),
XffForwardEnabled: pulumi.Bool(false),
},
},
UrlFilteringDenyMsg: pulumi.String("string"),
Vars: pulumi.StringMap{
"string": pulumi.String("string"),
},
VrfConfig: &device.GatewayVrfConfigArgs{
Enabled: pulumi.Bool(false),
},
VrfInstances: device.GatewayVrfInstancesMap{
"string": &device.GatewayVrfInstancesArgs{
Networks: pulumi.StringArray{
pulumi.String("string"),
},
},
},
X: pulumi.Float64(0),
Y: pulumi.Float64(0),
})
resource "junipermist_device_gateway" "gatewayResource" {
device_id = "string"
site_id = "string"
ntp_servers = ["string"]
oob_ip_config = {
gateway = "string"
ip = "string"
netmask = "string"
node1 = {
gateway = "string"
ip = "string"
netmask = "string"
type = "string"
use_mgmt_vrf = false
use_mgmt_vrf_for_host_out = false
vlan_id = "string"
}
type = "string"
use_mgmt_vrf = false
use_mgmt_vrf_for_host_out = false
vlan_id = "string"
}
dns_servers = ["string"]
dns_suffixes = ["string"]
extra_routes = {
"string" = {
via = "string"
}
}
extra_routes6 = {
"string" = {
via = "string"
}
}
gateway_mgmt = {
admin_sshkeys = ["string"]
app_probing = {
apps = ["string"]
custom_apps = [{
"address" = "string"
"appType" = "string"
"hostnames" = ["string"]
"key" = "string"
"name" = "string"
"network" = "string"
"packetSize" = 0
"protocol" = "string"
"url" = "string"
"vrf" = "string"
}]
enabled = false
}
app_usage = false
auto_signature_update = {
day_of_week = "string"
enable = false
time_of_day = "string"
}
config_revert_timer = 0
disable_console = false
disable_oob = false
disable_usb = false
fips_enabled = false
probe_hosts = ["string"]
probe_hostsv6s = ["string"]
protect_re = {
allowed_services = ["string"]
customs = [{
"portRange" = "string"
"protocol" = "string"
"subnets" = ["string"]
}]
enabled = false
hit_count = false
trusted_hosts = ["string"]
}
root_password = "string"
security_log_source_address = "string"
security_log_source_interface = "string"
}
idp_profiles = {
"string" = {
base_profile = "string"
id = "string"
name = "string"
org_id = "string"
overwrites = [{
"action" = "string"
"matching" = {
"attackNames" = ["string"]
"dstSubnets" = ["string"]
"severities" = ["string"]
}
"name" = "string"
}]
}
}
ip_configs = {
"string" = {
ip = "string"
ip6 = "string"
netmask = "string"
netmask6 = "string"
secondary_ips = ["string"]
type = "string"
type6 = "string"
}
}
path_preferences = {
"string" = {
paths = [{
"type" = "string"
"cost" = 0
"disabled" = false
"gatewayIp" = "string"
"internetAccess" = false
"name" = "string"
"networks" = ["string"]
"targetIps" = ["string"]
"wanName" = "string"
}]
strategy = "string"
}
}
mist_configured = false
msp_id = "string"
name = "string"
networks {
name = "string"
subnet = "string"
internal_access = {
enabled = false
}
disallow_mist_services = false
internet_access = {
create_simple_service_policy = false
destination_nat = {
"string" = {
internal_ip = "string"
name = "string"
port = "string"
wan_name = "string"
}
}
enabled = false
restricted = false
static_nat = {
"string" = {
internal_ip = "string"
name = "string"
wan_name = "string"
}
}
}
isolation = false
multicast = {
disable_igmp = false
enabled = false
groups = {
"string" = {
rp_ip = "string"
}
}
}
gateway6 = "string"
routed_for_networks = ["string"]
gateway = "string"
subnet6 = "string"
tenants = {
"string" = {
addresses = ["string"]
}
}
vlan_id = "string"
vpn_access = {
"string" = {
advertised_subnet = "string"
allow_ping = false
destination_nat = {
"string" = {
internal_ip = "string"
name = "string"
port = "string"
}
}
nat_pool = "string"
no_readvertise_to_lan_bgp = false
no_readvertise_to_lan_ospf = false
no_readvertise_to_overlay = false
other_vrfs = ["string"]
routed = false
source_nat = {
external_ip = "string"
}
static_nat = {
"string" = {
internal_ip = "string"
name = "string"
}
}
summarized_subnet = "string"
summarized_subnet_to_lan_bgp = "string"
summarized_subnet_to_lan_ospf = "string"
}
}
}
notes = "string"
dhcpd_config = {
config = {
"string" = {
dns_servers = ["string"]
fixed_bindings = {
"string" = {
ip = "string"
ip6 = "string"
name = "string"
}
}
gateway = "string"
ip6_end = "string"
ip6_start = "string"
ip_end = "string"
ip_start = "string"
lease_time = 0
options = {
"string" = {
type = "string"
value = "string"
}
}
server_id_override = false
servers = ["string"]
serversv6s = ["string"]
type = "string"
type6 = "string"
vendor_encapsulated = {
"string" = {
type = "string"
value = "string"
}
}
}
}
enabled = false
}
additional_config_cmds = ["string"]
map_id = "string"
port_config = {
"string" = {
usage = "string"
port_network = "string"
lte_apn = "string"
aggregated = false
critical = false
description = "string"
disable_autoneg = false
disabled = false
dsl_type = "string"
dsl_vci = 0
dsl_vpi = 0
duplex = "string"
ip_config = {
dns = ["string"]
dns_suffixes = ["string"]
gateway = "string"
gateway6 = "string"
ip = "string"
ip6 = "string"
netmask = "string"
netmask6 = "string"
network = "string"
poser_password = "string"
pppoe_auth = "string"
pppoe_username = "string"
type = "string"
type6 = "string"
}
ae_disable_lacp = false
lte_auth = "string"
lte_backup = false
lte_password = "string"
lte_username = "string"
mtu = 0
name = "string"
networks = ["string"]
outer_vlan_id = 0
poe_disabled = false
ae_lacp_force_up = false
poe_keep_state_when_reboot = false
ssr_no_virtual_mac = false
redundant = false
redundant_group = 0
reth_idx = "string"
reth_node = "string"
reth_nodes = ["string"]
speed = "string"
preserve_dscp = false
svr_port_range = "string"
traffic_shaping = {
class_percentages = [0]
enabled = false
max_tx_kbps = 0
}
ae_idx = "string"
vlan_id = "string"
vpn_paths = {
"string" = {
bfd_profile = "string"
bfd_use_tunnel_mode = false
preference = 0
role = "string"
traffic_shaping = {
class_percentages = [0]
enabled = false
max_tx_kbps = 0
}
}
}
wan_arp_policer = "string"
wan_ext_ip = "string"
wan_ext_ip6 = "string"
wan_extra_routes = {
"string" = {
via = "string"
}
}
wan_extra_routes6 = {
"string" = {
via = "string"
}
}
wan_networks = ["string"]
wan_probe_override = {
ip6s = ["string"]
ips = ["string"]
probe_profile = "string"
}
wan_source_nat = {
disabled = false
nat6_pool = "string"
nat_pool = "string"
}
wan_speedtest_mode = "string"
wan_type = "string"
}
}
port_mirroring = {
port_mirror = {
family_type = "string"
ingress_port_ids = ["string"]
output_port_id = "string"
rate = 0
run_length = 0
}
}
router_id = "string"
routing_policies = {
"string" = {
terms = [{
"actions" = {
"accept" = false
"addCommunities" = ["string"]
"addTargetVrfs" = ["string"]
"communities" = ["string"]
"excludeAsPaths" = ["string"]
"excludeCommunities" = ["string"]
"exportCommunities" = ["string"]
"localPreference" = "string"
"prependAsPaths" = ["string"]
}
"matching" = {
"asPaths" = ["string"]
"communities" = ["string"]
"networks" = ["string"]
"prefixes" = ["string"]
"protocols" = ["string"]
"routeExists" = {
"route" = "string"
"vrfName" = "string"
}
"vpnNeighborMacs" = ["string"]
"vpnPathSla" = {
"maxJitter" = 0
"maxLatency" = 0
"maxLoss" = 0
}
"vpnPaths" = ["string"]
}
}]
}
}
service_policies {
action = "string"
antivirus = {
avprofile_id = "string"
enabled = false
profile = "string"
}
appqoe = {
enabled = false
}
ewfs {
alert_only = false
block_message = "string"
enabled = false
profile = "string"
}
idp = {
alert_only = false
enabled = false
idpprofile_id = "string"
profile = "string"
}
local_routing = false
name = "string"
path_preference = "string"
servicepolicy_id = "string"
services = ["string"]
skyatp = {
dns_dga_detection = {
enabled = false
profile = "string"
}
dns_tunnel_detection = {
enabled = false
profile = "string"
}
http_inspection = {
enabled = false
profile = "string"
}
iot_device_policy = {
enabled = false
}
}
ssl_proxy = {
ciphers_category = "string"
enabled = false
}
syslog = {
enabled = false
server_names = ["string"]
}
tenants = ["string"]
}
bgp_config = {
"string" = {
via = "string"
import_policy = "string"
neighbor_as = "string"
disable_bfd = false
export = "string"
export_policy = "string"
extended_v4_nexthop = false
graceful_restart_time = 0
hold_time = 0
import = "string"
auth_key = "string"
bfd_multiplier = 0
neighbors = {
"string" = {
neighbor_as = "string"
disabled = false
export_policy = "string"
hold_time = 0
import_policy = "string"
multihop_ttl = 0
tunnel_via = "string"
}
}
local_as = "string"
networks = ["string"]
no_private_as = false
no_readvertise_to_overlay = false
tunnel_name = "string"
type = "string"
bfd_minimum_interval = 0
vpn_name = "string"
wan_name = "string"
}
}
ssr_additional_config_cmds = ["string"]
tunnel_configs = {
"string" = {
auto_provision = {
provider = "string"
enabled = false
latlng = {
lat = 0
lng = 0
}
primary = {
probe_ips = ["string"]
wan_names = ["string"]
}
region = "string"
secondary = {
probe_ips = ["string"]
wan_names = ["string"]
}
service_connection = "string"
}
ike_lifetime = 0
ike_mode = "string"
ike_proposals = [{
"authAlgo" = "string"
"dhGroup" = "string"
"encAlgo" = "string"
}]
ipsec_lifetime = 0
ipsec_proposals = [{
"authAlgo" = "string"
"dhGroup" = "string"
"encAlgo" = "string"
}]
local_id = "string"
local_subnets = ["string"]
mode = "string"
networks = ["string"]
primary = {
hosts = ["string"]
wan_names = ["string"]
internal_ips = ["string"]
probe_ips = ["string"]
remote_ids = ["string"]
}
probe = {
interval = 0
threshold = 0
timeout = 0
type = "string"
}
protocol = "string"
provider = "string"
psk = "string"
remote_subnets = ["string"]
secondary = {
hosts = ["string"]
wan_names = ["string"]
internal_ips = ["string"]
probe_ips = ["string"]
remote_ids = ["string"]
}
version = "string"
}
}
tunnel_provider_options = {
jse = {
num_users = 0
org_name = "string"
}
prisma = {
service_account_name = "string"
}
zscaler = {
aup_block_internet_until_accepted = false
aup_enabled = false
aup_force_ssl_inspection = false
aup_timeout_in_days = 0
auth_required = false
caution_enabled = false
dn_bandwidth = 0
idle_time_in_minutes = 0
ofw_enabled = false
sub_locations = [{
"aupBlockInternetUntilAccepted" = false
"aupEnabled" = false
"aupForceSslInspection" = false
"aupTimeoutInDays" = 0
"authRequired" = false
"cautionEnabled" = false
"dnBandwidth" = 0
"idleTimeInMinutes" = 0
"name" = "string"
"ofwEnabled" = false
"surrogateIp" = false
"surrogateIpEnforcedForKnownBrowsers" = false
"surrogateRefreshTimeInMinutes" = 0
"upBandwidth" = 0
}]
surrogate_ip = false
surrogate_ip_enforced_for_known_browsers = false
surrogate_refresh_time_in_minutes = 0
up_bandwidth = 0
xff_forward_enabled = false
}
}
url_filtering_deny_msg = "string"
vars = {
"string" = "string"
}
vrf_config = {
enabled = false
}
vrf_instances = {
"string" = {
networks = ["string"]
}
}
x = 0
y = 0
}
var gatewayResource = new Gateway("gatewayResource", GatewayArgs.builder()
.deviceId("string")
.siteId("string")
.ntpServers("string")
.oobIpConfig(GatewayOobIpConfigArgs.builder()
.gateway("string")
.ip("string")
.netmask("string")
.node1(GatewayOobIpConfigNode1Args.builder()
.gateway("string")
.ip("string")
.netmask("string")
.type("string")
.useMgmtVrf(false)
.useMgmtVrfForHostOut(false)
.vlanId("string")
.build())
.type("string")
.useMgmtVrf(false)
.useMgmtVrfForHostOut(false)
.vlanId("string")
.build())
.dnsServers("string")
.dnsSuffixes("string")
.extraRoutes(Map.of("string", GatewayExtraRoutesArgs.builder()
.via("string")
.build()))
.extraRoutes6(Map.of("string", GatewayExtraRoutes6Args.builder()
.via("string")
.build()))
.gatewayMgmt(GatewayGatewayMgmtArgs.builder()
.adminSshkeys("string")
.appProbing(GatewayGatewayMgmtAppProbingArgs.builder()
.apps("string")
.customApps(GatewayGatewayMgmtAppProbingCustomAppArgs.builder()
.address("string")
.appType("string")
.hostnames("string")
.key("string")
.name("string")
.network("string")
.packetSize(0)
.protocol("string")
.url("string")
.vrf("string")
.build())
.enabled(false)
.build())
.appUsage(false)
.autoSignatureUpdate(GatewayGatewayMgmtAutoSignatureUpdateArgs.builder()
.dayOfWeek("string")
.enable(false)
.timeOfDay("string")
.build())
.configRevertTimer(0)
.disableConsole(false)
.disableOob(false)
.disableUsb(false)
.fipsEnabled(false)
.probeHosts("string")
.probeHostsv6s("string")
.protectRe(GatewayGatewayMgmtProtectReArgs.builder()
.allowedServices("string")
.customs(GatewayGatewayMgmtProtectReCustomArgs.builder()
.portRange("string")
.protocol("string")
.subnets("string")
.build())
.enabled(false)
.hitCount(false)
.trustedHosts("string")
.build())
.rootPassword("string")
.securityLogSourceAddress("string")
.securityLogSourceInterface("string")
.build())
.idpProfiles(Map.of("string", GatewayIdpProfilesArgs.builder()
.baseProfile("string")
.id("string")
.name("string")
.orgId("string")
.overwrites(GatewayIdpProfilesOverwriteArgs.builder()
.action("string")
.matching(GatewayIdpProfilesOverwriteMatchingArgs.builder()
.attackNames("string")
.dstSubnets("string")
.severities("string")
.build())
.name("string")
.build())
.build()))
.ipConfigs(Map.of("string", GatewayIpConfigsArgs.builder()
.ip("string")
.ip6("string")
.netmask("string")
.netmask6("string")
.secondaryIps("string")
.type("string")
.type6("string")
.build()))
.pathPreferences(Map.of("string", GatewayPathPreferencesArgs.builder()
.paths(GatewayPathPreferencesPathArgs.builder()
.type("string")
.cost(0)
.disabled(false)
.gatewayIp("string")
.internetAccess(false)
.name("string")
.networks("string")
.targetIps("string")
.wanName("string")
.build())
.strategy("string")
.build()))
.mistConfigured(false)
.mspId("string")
.name("string")
.networks(GatewayNetworkArgs.builder()
.name("string")
.subnet("string")
.internalAccess(GatewayNetworkInternalAccessArgs.builder()
.enabled(false)
.build())
.disallowMistServices(false)
.internetAccess(GatewayNetworkInternetAccessArgs.builder()
.createSimpleServicePolicy(false)
.destinationNat(Map.of("string", GatewayNetworkInternetAccessDestinationNatArgs.builder()
.internalIp("string")
.name("string")
.port("string")
.wanName("string")
.build()))
.enabled(false)
.restricted(false)
.staticNat(Map.of("string", GatewayNetworkInternetAccessStaticNatArgs.builder()
.internalIp("string")
.name("string")
.wanName("string")
.build()))
.build())
.isolation(false)
.multicast(GatewayNetworkMulticastArgs.builder()
.disableIgmp(false)
.enabled(false)
.groups(Map.of("string", GatewayNetworkMulticastGroupsArgs.builder()
.rpIp("string")
.build()))
.build())
.gateway6("string")
.routedForNetworks("string")
.gateway("string")
.subnet6("string")
.tenants(Map.of("string", GatewayNetworkTenantsArgs.builder()
.addresses("string")
.build()))
.vlanId("string")
.vpnAccess(Map.of("string", GatewayNetworkVpnAccessArgs.builder()
.advertisedSubnet("string")
.allowPing(false)
.destinationNat(Map.of("string", GatewayNetworkVpnAccessDestinationNatArgs.builder()
.internalIp("string")
.name("string")
.port("string")
.build()))
.natPool("string")
.noReadvertiseToLanBgp(false)
.noReadvertiseToLanOspf(false)
.noReadvertiseToOverlay(false)
.otherVrfs("string")
.routed(false)
.sourceNat(GatewayNetworkVpnAccessSourceNatArgs.builder()
.externalIp("string")
.build())
.staticNat(Map.of("string", GatewayNetworkVpnAccessStaticNatArgs.builder()
.internalIp("string")
.name("string")
.build()))
.summarizedSubnet("string")
.summarizedSubnetToLanBgp("string")
.summarizedSubnetToLanOspf("string")
.build()))
.build())
.notes("string")
.dhcpdConfig(GatewayDhcpdConfigArgs.builder()
.config(Map.of("string", GatewayDhcpdConfigConfigArgs.builder()
.dnsServers("string")
.fixedBindings(Map.of("string", GatewayDhcpdConfigConfigFixedBindingsArgs.builder()
.ip("string")
.ip6("string")
.name("string")
.build()))
.gateway("string")
.ip6End("string")
.ip6Start("string")
.ipEnd("string")
.ipStart("string")
.leaseTime(0)
.options(Map.of("string", GatewayDhcpdConfigConfigOptionsArgs.builder()
.type("string")
.value("string")
.build()))
.serverIdOverride(false)
.servers("string")
.serversv6s("string")
.type("string")
.type6("string")
.vendorEncapsulated(Map.of("string", GatewayDhcpdConfigConfigVendorEncapsulatedArgs.builder()
.type("string")
.value("string")
.build()))
.build()))
.enabled(false)
.build())
.additionalConfigCmds("string")
.mapId("string")
.portConfig(Map.of("string", GatewayPortConfigArgs.builder()
.usage("string")
.portNetwork("string")
.lteApn("string")
.aggregated(false)
.critical(false)
.description("string")
.disableAutoneg(false)
.disabled(false)
.dslType("string")
.dslVci(0)
.dslVpi(0)
.duplex("string")
.ipConfig(GatewayPortConfigIpConfigArgs.builder()
.dns("string")
.dnsSuffixes("string")
.gateway("string")
.gateway6("string")
.ip("string")
.ip6("string")
.netmask("string")
.netmask6("string")
.network("string")
.poserPassword("string")
.pppoeAuth("string")
.pppoeUsername("string")
.type("string")
.type6("string")
.build())
.aeDisableLacp(false)
.lteAuth("string")
.lteBackup(false)
.ltePassword("string")
.lteUsername("string")
.mtu(0)
.name("string")
.networks("string")
.outerVlanId(0)
.poeDisabled(false)
.aeLacpForceUp(false)
.poeKeepStateWhenReboot(false)
.ssrNoVirtualMac(false)
.redundant(false)
.redundantGroup(0)
.rethIdx("string")
.rethNode("string")
.rethNodes("string")
.speed("string")
.preserveDscp(false)
.svrPortRange("string")
.trafficShaping(GatewayPortConfigTrafficShapingArgs.builder()
.classPercentages(0)
.enabled(false)
.maxTxKbps(0)
.build())
.aeIdx("string")
.vlanId("string")
.vpnPaths(Map.of("string", GatewayPortConfigVpnPathsArgs.builder()
.bfdProfile("string")
.bfdUseTunnelMode(false)
.preference(0)
.role("string")
.trafficShaping(GatewayPortConfigVpnPathsTrafficShapingArgs.builder()
.classPercentages(0)
.enabled(false)
.maxTxKbps(0)
.build())
.build()))
.wanArpPolicer("string")
.wanExtIp("string")
.wanExtIp6("string")
.wanExtraRoutes(Map.of("string", GatewayPortConfigWanExtraRoutesArgs.builder()
.via("string")
.build()))
.wanExtraRoutes6(Map.of("string", GatewayPortConfigWanExtraRoutes6Args.builder()
.via("string")
.build()))
.wanNetworks("string")
.wanProbeOverride(GatewayPortConfigWanProbeOverrideArgs.builder()
.ip6s("string")
.ips("string")
.probeProfile("string")
.build())
.wanSourceNat(GatewayPortConfigWanSourceNatArgs.builder()
.disabled(false)
.nat6Pool("string")
.natPool("string")
.build())
.wanSpeedtestMode("string")
.wanType("string")
.build()))
.portMirroring(GatewayPortMirroringArgs.builder()
.portMirror(GatewayPortMirroringPortMirrorArgs.builder()
.familyType("string")
.ingressPortIds("string")
.outputPortId("string")
.rate(0)
.runLength(0)
.build())
.build())
.routerId("string")
.routingPolicies(Map.of("string", GatewayRoutingPoliciesArgs.builder()
.terms(GatewayRoutingPoliciesTermArgs.builder()
.actions(GatewayRoutingPoliciesTermActionsArgs.builder()
.accept(false)
.addCommunities("string")
.addTargetVrfs("string")
.communities("string")
.excludeAsPaths("string")
.excludeCommunities("string")
.exportCommunities("string")
.localPreference("string")
.prependAsPaths("string")
.build())
.matching(GatewayRoutingPoliciesTermMatchingArgs.builder()
.asPaths("string")
.communities("string")
.networks("string")
.prefixes("string")
.protocols("string")
.routeExists(GatewayRoutingPoliciesTermMatchingRouteExistsArgs.builder()
.route("string")
.vrfName("string")
.build())
.vpnNeighborMacs("string")
.vpnPathSla(GatewayRoutingPoliciesTermMatchingVpnPathSlaArgs.builder()
.maxJitter(0)
.maxLatency(0)
.maxLoss(0)
.build())
.vpnPaths("string")
.build())
.build())
.build()))
.servicePolicies(GatewayServicePolicyArgs.builder()
.action("string")
.antivirus(GatewayServicePolicyAntivirusArgs.builder()
.avprofileId("string")
.enabled(false)
.profile("string")
.build())
.appqoe(GatewayServicePolicyAppqoeArgs.builder()
.enabled(false)
.build())
.ewfs(GatewayServicePolicyEwfArgs.builder()
.alertOnly(false)
.blockMessage("string")
.enabled(false)
.profile("string")
.build())
.idp(GatewayServicePolicyIdpArgs.builder()
.alertOnly(false)
.enabled(false)
.idpprofileId("string")
.profile("string")
.build())
.localRouting(false)
.name("string")
.pathPreference("string")
.servicepolicyId("string")
.services("string")
.skyatp(GatewayServicePolicySkyatpArgs.builder()
.dnsDgaDetection(GatewayServicePolicySkyatpDnsDgaDetectionArgs.builder()
.enabled(false)
.profile("string")
.build())
.dnsTunnelDetection(GatewayServicePolicySkyatpDnsTunnelDetectionArgs.builder()
.enabled(false)
.profile("string")
.build())
.httpInspection(GatewayServicePolicySkyatpHttpInspectionArgs.builder()
.enabled(false)
.profile("string")
.build())
.iotDevicePolicy(GatewayServicePolicySkyatpIotDevicePolicyArgs.builder()
.enabled(false)
.build())
.build())
.sslProxy(GatewayServicePolicySslProxyArgs.builder()
.ciphersCategory("string")
.enabled(false)
.build())
.syslog(GatewayServicePolicySyslogArgs.builder()
.enabled(false)
.serverNames("string")
.build())
.tenants("string")
.build())
.bgpConfig(Map.of("string", GatewayBgpConfigArgs.builder()
.via("string")
.importPolicy("string")
.neighborAs("string")
.disableBfd(false)
.export("string")
.exportPolicy("string")
.extendedV4Nexthop(false)
.gracefulRestartTime(0)
.holdTime(0)
.import_("string")
.authKey("string")
.bfdMultiplier(0)
.neighbors(Map.of("string", GatewayBgpConfigNeighborsArgs.builder()
.neighborAs("string")
.disabled(false)
.exportPolicy("string")
.holdTime(0)
.importPolicy("string")
.multihopTtl(0)
.tunnelVia("string")
.build()))
.localAs("string")
.networks("string")
.noPrivateAs(false)
.noReadvertiseToOverlay(false)
.tunnelName("string")
.type("string")
.bfdMinimumInterval(0)
.vpnName("string")
.wanName("string")
.build()))
.ssrAdditionalConfigCmds("string")
.tunnelConfigs(Map.of("string", GatewayTunnelConfigsArgs.builder()
.autoProvision(GatewayTunnelConfigsAutoProvisionArgs.builder()
.provider("string")
.enabled(false)
.latlng(GatewayTunnelConfigsAutoProvisionLatlngArgs.builder()
.lat(0.0)
.lng(0.0)
.build())
.primary(GatewayTunnelConfigsAutoProvisionPrimaryArgs.builder()
.probeIps("string")
.wanNames("string")
.build())
.region("string")
.secondary(GatewayTunnelConfigsAutoProvisionSecondaryArgs.builder()
.probeIps("string")
.wanNames("string")
.build())
.serviceConnection("string")
.build())
.ikeLifetime(0)
.ikeMode("string")
.ikeProposals(GatewayTunnelConfigsIkeProposalArgs.builder()
.authAlgo("string")
.dhGroup("string")
.encAlgo("string")
.build())
.ipsecLifetime(0)
.ipsecProposals(GatewayTunnelConfigsIpsecProposalArgs.builder()
.authAlgo("string")
.dhGroup("string")
.encAlgo("string")
.build())
.localId("string")
.localSubnets("string")
.mode("string")
.networks("string")
.primary(GatewayTunnelConfigsPrimaryArgs.builder()
.hosts("string")
.wanNames("string")
.internalIps("string")
.probeIps("string")
.remoteIds("string")
.build())
.probe(GatewayTunnelConfigsProbeArgs.builder()
.interval(0)
.threshold(0)
.timeout(0)
.type("string")
.build())
.protocol("string")
.provider("string")
.psk("string")
.remoteSubnets("string")
.secondary(GatewayTunnelConfigsSecondaryArgs.builder()
.hosts("string")
.wanNames("string")
.internalIps("string")
.probeIps("string")
.remoteIds("string")
.build())
.version("string")
.build()))
.tunnelProviderOptions(GatewayTunnelProviderOptionsArgs.builder()
.jse(GatewayTunnelProviderOptionsJseArgs.builder()
.numUsers(0)
.orgName("string")
.build())
.prisma(GatewayTunnelProviderOptionsPrismaArgs.builder()
.serviceAccountName("string")
.build())
.zscaler(GatewayTunnelProviderOptionsZscalerArgs.builder()
.aupBlockInternetUntilAccepted(false)
.aupEnabled(false)
.aupForceSslInspection(false)
.aupTimeoutInDays(0)
.authRequired(false)
.cautionEnabled(false)
.dnBandwidth(0.0)
.idleTimeInMinutes(0)
.ofwEnabled(false)
.subLocations(GatewayTunnelProviderOptionsZscalerSubLocationArgs.builder()
.aupBlockInternetUntilAccepted(false)
.aupEnabled(false)
.aupForceSslInspection(false)
.aupTimeoutInDays(0)
.authRequired(false)
.cautionEnabled(false)
.dnBandwidth(0.0)
.idleTimeInMinutes(0)
.name("string")
.ofwEnabled(false)
.surrogateIp(false)
.surrogateIpEnforcedForKnownBrowsers(false)
.surrogateRefreshTimeInMinutes(0)
.upBandwidth(0.0)
.build())
.surrogateIp(false)
.surrogateIpEnforcedForKnownBrowsers(false)
.surrogateRefreshTimeInMinutes(0)
.upBandwidth(0.0)
.xffForwardEnabled(false)
.build())
.build())
.urlFilteringDenyMsg("string")
.vars(Map.of("string", "string"))
.vrfConfig(GatewayVrfConfigArgs.builder()
.enabled(false)
.build())
.vrfInstances(Map.of("string", GatewayVrfInstancesArgs.builder()
.networks("string")
.build()))
.x(0.0)
.y(0.0)
.build());
gateway_resource = junipermist.device.Gateway("gatewayResource",
device_id="string",
site_id="string",
ntp_servers=["string"],
oob_ip_config={
"gateway": "string",
"ip": "string",
"netmask": "string",
"node1": {
"gateway": "string",
"ip": "string",
"netmask": "string",
"type": "string",
"use_mgmt_vrf": False,
"use_mgmt_vrf_for_host_out": False,
"vlan_id": "string",
},
"type": "string",
"use_mgmt_vrf": False,
"use_mgmt_vrf_for_host_out": False,
"vlan_id": "string",
},
dns_servers=["string"],
dns_suffixes=["string"],
extra_routes={
"string": {
"via": "string",
},
},
extra_routes6={
"string": {
"via": "string",
},
},
gateway_mgmt={
"admin_sshkeys": ["string"],
"app_probing": {
"apps": ["string"],
"custom_apps": [{
"address": "string",
"app_type": "string",
"hostnames": ["string"],
"key": "string",
"name": "string",
"network": "string",
"packet_size": 0,
"protocol": "string",
"url": "string",
"vrf": "string",
}],
"enabled": False,
},
"app_usage": False,
"auto_signature_update": {
"day_of_week": "string",
"enable": False,
"time_of_day": "string",
},
"config_revert_timer": 0,
"disable_console": False,
"disable_oob": False,
"disable_usb": False,
"fips_enabled": False,
"probe_hosts": ["string"],
"probe_hostsv6s": ["string"],
"protect_re": {
"allowed_services": ["string"],
"customs": [{
"port_range": "string",
"protocol": "string",
"subnets": ["string"],
}],
"enabled": False,
"hit_count": False,
"trusted_hosts": ["string"],
},
"root_password": "string",
"security_log_source_address": "string",
"security_log_source_interface": "string",
},
idp_profiles={
"string": {
"base_profile": "string",
"id": "string",
"name": "string",
"org_id": "string",
"overwrites": [{
"action": "string",
"matching": {
"attack_names": ["string"],
"dst_subnets": ["string"],
"severities": ["string"],
},
"name": "string",
}],
},
},
ip_configs={
"string": {
"ip": "string",
"ip6": "string",
"netmask": "string",
"netmask6": "string",
"secondary_ips": ["string"],
"type": "string",
"type6": "string",
},
},
path_preferences={
"string": {
"paths": [{
"type": "string",
"cost": 0,
"disabled": False,
"gateway_ip": "string",
"internet_access": False,
"name": "string",
"networks": ["string"],
"target_ips": ["string"],
"wan_name": "string",
}],
"strategy": "string",
},
},
mist_configured=False,
msp_id="string",
name="string",
networks=[{
"name": "string",
"subnet": "string",
"internal_access": {
"enabled": False,
},
"disallow_mist_services": False,
"internet_access": {
"create_simple_service_policy": False,
"destination_nat": {
"string": {
"internal_ip": "string",
"name": "string",
"port": "string",
"wan_name": "string",
},
},
"enabled": False,
"restricted": False,
"static_nat": {
"string": {
"internal_ip": "string",
"name": "string",
"wan_name": "string",
},
},
},
"isolation": False,
"multicast": {
"disable_igmp": False,
"enabled": False,
"groups": {
"string": {
"rp_ip": "string",
},
},
},
"gateway6": "string",
"routed_for_networks": ["string"],
"gateway": "string",
"subnet6": "string",
"tenants": {
"string": {
"addresses": ["string"],
},
},
"vlan_id": "string",
"vpn_access": {
"string": {
"advertised_subnet": "string",
"allow_ping": False,
"destination_nat": {
"string": {
"internal_ip": "string",
"name": "string",
"port": "string",
},
},
"nat_pool": "string",
"no_readvertise_to_lan_bgp": False,
"no_readvertise_to_lan_ospf": False,
"no_readvertise_to_overlay": False,
"other_vrfs": ["string"],
"routed": False,
"source_nat": {
"external_ip": "string",
},
"static_nat": {
"string": {
"internal_ip": "string",
"name": "string",
},
},
"summarized_subnet": "string",
"summarized_subnet_to_lan_bgp": "string",
"summarized_subnet_to_lan_ospf": "string",
},
},
}],
notes="string",
dhcpd_config={
"config": {
"string": {
"dns_servers": ["string"],
"fixed_bindings": {
"string": {
"ip": "string",
"ip6": "string",
"name": "string",
},
},
"gateway": "string",
"ip6_end": "string",
"ip6_start": "string",
"ip_end": "string",
"ip_start": "string",
"lease_time": 0,
"options": {
"string": {
"type": "string",
"value": "string",
},
},
"server_id_override": False,
"servers": ["string"],
"serversv6s": ["string"],
"type": "string",
"type6": "string",
"vendor_encapsulated": {
"string": {
"type": "string",
"value": "string",
},
},
},
},
"enabled": False,
},
additional_config_cmds=["string"],
map_id="string",
port_config={
"string": {
"usage": "string",
"port_network": "string",
"lte_apn": "string",
"aggregated": False,
"critical": False,
"description": "string",
"disable_autoneg": False,
"disabled": False,
"dsl_type": "string",
"dsl_vci": 0,
"dsl_vpi": 0,
"duplex": "string",
"ip_config": {
"dns": ["string"],
"dns_suffixes": ["string"],
"gateway": "string",
"gateway6": "string",
"ip": "string",
"ip6": "string",
"netmask": "string",
"netmask6": "string",
"network": "string",
"poser_password": "string",
"pppoe_auth": "string",
"pppoe_username": "string",
"type": "string",
"type6": "string",
},
"ae_disable_lacp": False,
"lte_auth": "string",
"lte_backup": False,
"lte_password": "string",
"lte_username": "string",
"mtu": 0,
"name": "string",
"networks": ["string"],
"outer_vlan_id": 0,
"poe_disabled": False,
"ae_lacp_force_up": False,
"poe_keep_state_when_reboot": False,
"ssr_no_virtual_mac": False,
"redundant": False,
"redundant_group": 0,
"reth_idx": "string",
"reth_node": "string",
"reth_nodes": ["string"],
"speed": "string",
"preserve_dscp": False,
"svr_port_range": "string",
"traffic_shaping": {
"class_percentages": [0],
"enabled": False,
"max_tx_kbps": 0,
},
"ae_idx": "string",
"vlan_id": "string",
"vpn_paths": {
"string": {
"bfd_profile": "string",
"bfd_use_tunnel_mode": False,
"preference": 0,
"role": "string",
"traffic_shaping": {
"class_percentages": [0],
"enabled": False,
"max_tx_kbps": 0,
},
},
},
"wan_arp_policer": "string",
"wan_ext_ip": "string",
"wan_ext_ip6": "string",
"wan_extra_routes": {
"string": {
"via": "string",
},
},
"wan_extra_routes6": {
"string": {
"via": "string",
},
},
"wan_networks": ["string"],
"wan_probe_override": {
"ip6s": ["string"],
"ips": ["string"],
"probe_profile": "string",
},
"wan_source_nat": {
"disabled": False,
"nat6_pool": "string",
"nat_pool": "string",
},
"wan_speedtest_mode": "string",
"wan_type": "string",
},
},
port_mirroring={
"port_mirror": {
"family_type": "string",
"ingress_port_ids": ["string"],
"output_port_id": "string",
"rate": 0,
"run_length": 0,
},
},
router_id="string",
routing_policies={
"string": {
"terms": [{
"actions": {
"accept": False,
"add_communities": ["string"],
"add_target_vrfs": ["string"],
"communities": ["string"],
"exclude_as_paths": ["string"],
"exclude_communities": ["string"],
"export_communities": ["string"],
"local_preference": "string",
"prepend_as_paths": ["string"],
},
"matching": {
"as_paths": ["string"],
"communities": ["string"],
"networks": ["string"],
"prefixes": ["string"],
"protocols": ["string"],
"route_exists": {
"route": "string",
"vrf_name": "string",
},
"vpn_neighbor_macs": ["string"],
"vpn_path_sla": {
"max_jitter": 0,
"max_latency": 0,
"max_loss": 0,
},
"vpn_paths": ["string"],
},
}],
},
},
service_policies=[{
"action": "string",
"antivirus": {
"avprofile_id": "string",
"enabled": False,
"profile": "string",
},
"appqoe": {
"enabled": False,
},
"ewfs": [{
"alert_only": False,
"block_message": "string",
"enabled": False,
"profile": "string",
}],
"idp": {
"alert_only": False,
"enabled": False,
"idpprofile_id": "string",
"profile": "string",
},
"local_routing": False,
"name": "string",
"path_preference": "string",
"servicepolicy_id": "string",
"services": ["string"],
"skyatp": {
"dns_dga_detection": {
"enabled": False,
"profile": "string",
},
"dns_tunnel_detection": {
"enabled": False,
"profile": "string",
},
"http_inspection": {
"enabled": False,
"profile": "string",
},
"iot_device_policy": {
"enabled": False,
},
},
"ssl_proxy": {
"ciphers_category": "string",
"enabled": False,
},
"syslog": {
"enabled": False,
"server_names": ["string"],
},
"tenants": ["string"],
}],
bgp_config={
"string": {
"via": "string",
"import_policy": "string",
"neighbor_as": "string",
"disable_bfd": False,
"export": "string",
"export_policy": "string",
"extended_v4_nexthop": False,
"graceful_restart_time": 0,
"hold_time": 0,
"import_": "string",
"auth_key": "string",
"bfd_multiplier": 0,
"neighbors": {
"string": {
"neighbor_as": "string",
"disabled": False,
"export_policy": "string",
"hold_time": 0,
"import_policy": "string",
"multihop_ttl": 0,
"tunnel_via": "string",
},
},
"local_as": "string",
"networks": ["string"],
"no_private_as": False,
"no_readvertise_to_overlay": False,
"tunnel_name": "string",
"type": "string",
"bfd_minimum_interval": 0,
"vpn_name": "string",
"wan_name": "string",
},
},
ssr_additional_config_cmds=["string"],
tunnel_configs={
"string": {
"auto_provision": {
"provider": "string",
"enabled": False,
"latlng": {
"lat": float(0),
"lng": float(0),
},
"primary": {
"probe_ips": ["string"],
"wan_names": ["string"],
},
"region": "string",
"secondary": {
"probe_ips": ["string"],
"wan_names": ["string"],
},
"service_connection": "string",
},
"ike_lifetime": 0,
"ike_mode": "string",
"ike_proposals": [{
"auth_algo": "string",
"dh_group": "string",
"enc_algo": "string",
}],
"ipsec_lifetime": 0,
"ipsec_proposals": [{
"auth_algo": "string",
"dh_group": "string",
"enc_algo": "string",
}],
"local_id": "string",
"local_subnets": ["string"],
"mode": "string",
"networks": ["string"],
"primary": {
"hosts": ["string"],
"wan_names": ["string"],
"internal_ips": ["string"],
"probe_ips": ["string"],
"remote_ids": ["string"],
},
"probe": {
"interval": 0,
"threshold": 0,
"timeout": 0,
"type": "string",
},
"protocol": "string",
"provider": "string",
"psk": "string",
"remote_subnets": ["string"],
"secondary": {
"hosts": ["string"],
"wan_names": ["string"],
"internal_ips": ["string"],
"probe_ips": ["string"],
"remote_ids": ["string"],
},
"version": "string",
},
},
tunnel_provider_options={
"jse": {
"num_users": 0,
"org_name": "string",
},
"prisma": {
"service_account_name": "string",
},
"zscaler": {
"aup_block_internet_until_accepted": False,
"aup_enabled": False,
"aup_force_ssl_inspection": False,
"aup_timeout_in_days": 0,
"auth_required": False,
"caution_enabled": False,
"dn_bandwidth": float(0),
"idle_time_in_minutes": 0,
"ofw_enabled": False,
"sub_locations": [{
"aup_block_internet_until_accepted": False,
"aup_enabled": False,
"aup_force_ssl_inspection": False,
"aup_timeout_in_days": 0,
"auth_required": False,
"caution_enabled": False,
"dn_bandwidth": float(0),
"idle_time_in_minutes": 0,
"name": "string",
"ofw_enabled": False,
"surrogate_ip": False,
"surrogate_ip_enforced_for_known_browsers": False,
"surrogate_refresh_time_in_minutes": 0,
"up_bandwidth": float(0),
}],
"surrogate_ip": False,
"surrogate_ip_enforced_for_known_browsers": False,
"surrogate_refresh_time_in_minutes": 0,
"up_bandwidth": float(0),
"xff_forward_enabled": False,
},
},
url_filtering_deny_msg="string",
vars={
"string": "string",
},
vrf_config={
"enabled": False,
},
vrf_instances={
"string": {
"networks": ["string"],
},
},
x=float(0),
y=float(0))
const gatewayResource = new junipermist.device.Gateway("gatewayResource", {
deviceId: "string",
siteId: "string",
ntpServers: ["string"],
oobIpConfig: {
gateway: "string",
ip: "string",
netmask: "string",
node1: {
gateway: "string",
ip: "string",
netmask: "string",
type: "string",
useMgmtVrf: false,
useMgmtVrfForHostOut: false,
vlanId: "string",
},
type: "string",
useMgmtVrf: false,
useMgmtVrfForHostOut: false,
vlanId: "string",
},
dnsServers: ["string"],
dnsSuffixes: ["string"],
extraRoutes: {
string: {
via: "string",
},
},
extraRoutes6: {
string: {
via: "string",
},
},
gatewayMgmt: {
adminSshkeys: ["string"],
appProbing: {
apps: ["string"],
customApps: [{
address: "string",
appType: "string",
hostnames: ["string"],
key: "string",
name: "string",
network: "string",
packetSize: 0,
protocol: "string",
url: "string",
vrf: "string",
}],
enabled: false,
},
appUsage: false,
autoSignatureUpdate: {
dayOfWeek: "string",
enable: false,
timeOfDay: "string",
},
configRevertTimer: 0,
disableConsole: false,
disableOob: false,
disableUsb: false,
fipsEnabled: false,
probeHosts: ["string"],
probeHostsv6s: ["string"],
protectRe: {
allowedServices: ["string"],
customs: [{
portRange: "string",
protocol: "string",
subnets: ["string"],
}],
enabled: false,
hitCount: false,
trustedHosts: ["string"],
},
rootPassword: "string",
securityLogSourceAddress: "string",
securityLogSourceInterface: "string",
},
idpProfiles: {
string: {
baseProfile: "string",
id: "string",
name: "string",
orgId: "string",
overwrites: [{
action: "string",
matching: {
attackNames: ["string"],
dstSubnets: ["string"],
severities: ["string"],
},
name: "string",
}],
},
},
ipConfigs: {
string: {
ip: "string",
ip6: "string",
netmask: "string",
netmask6: "string",
secondaryIps: ["string"],
type: "string",
type6: "string",
},
},
pathPreferences: {
string: {
paths: [{
type: "string",
cost: 0,
disabled: false,
gatewayIp: "string",
internetAccess: false,
name: "string",
networks: ["string"],
targetIps: ["string"],
wanName: "string",
}],
strategy: "string",
},
},
mistConfigured: false,
mspId: "string",
name: "string",
networks: [{
name: "string",
subnet: "string",
internalAccess: {
enabled: false,
},
disallowMistServices: false,
internetAccess: {
createSimpleServicePolicy: false,
destinationNat: {
string: {
internalIp: "string",
name: "string",
port: "string",
wanName: "string",
},
},
enabled: false,
restricted: false,
staticNat: {
string: {
internalIp: "string",
name: "string",
wanName: "string",
},
},
},
isolation: false,
multicast: {
disableIgmp: false,
enabled: false,
groups: {
string: {
rpIp: "string",
},
},
},
gateway6: "string",
routedForNetworks: ["string"],
gateway: "string",
subnet6: "string",
tenants: {
string: {
addresses: ["string"],
},
},
vlanId: "string",
vpnAccess: {
string: {
advertisedSubnet: "string",
allowPing: false,
destinationNat: {
string: {
internalIp: "string",
name: "string",
port: "string",
},
},
natPool: "string",
noReadvertiseToLanBgp: false,
noReadvertiseToLanOspf: false,
noReadvertiseToOverlay: false,
otherVrfs: ["string"],
routed: false,
sourceNat: {
externalIp: "string",
},
staticNat: {
string: {
internalIp: "string",
name: "string",
},
},
summarizedSubnet: "string",
summarizedSubnetToLanBgp: "string",
summarizedSubnetToLanOspf: "string",
},
},
}],
notes: "string",
dhcpdConfig: {
config: {
string: {
dnsServers: ["string"],
fixedBindings: {
string: {
ip: "string",
ip6: "string",
name: "string",
},
},
gateway: "string",
ip6End: "string",
ip6Start: "string",
ipEnd: "string",
ipStart: "string",
leaseTime: 0,
options: {
string: {
type: "string",
value: "string",
},
},
serverIdOverride: false,
servers: ["string"],
serversv6s: ["string"],
type: "string",
type6: "string",
vendorEncapsulated: {
string: {
type: "string",
value: "string",
},
},
},
},
enabled: false,
},
additionalConfigCmds: ["string"],
mapId: "string",
portConfig: {
string: {
usage: "string",
portNetwork: "string",
lteApn: "string",
aggregated: false,
critical: false,
description: "string",
disableAutoneg: false,
disabled: false,
dslType: "string",
dslVci: 0,
dslVpi: 0,
duplex: "string",
ipConfig: {
dns: ["string"],
dnsSuffixes: ["string"],
gateway: "string",
gateway6: "string",
ip: "string",
ip6: "string",
netmask: "string",
netmask6: "string",
network: "string",
poserPassword: "string",
pppoeAuth: "string",
pppoeUsername: "string",
type: "string",
type6: "string",
},
aeDisableLacp: false,
lteAuth: "string",
lteBackup: false,
ltePassword: "string",
lteUsername: "string",
mtu: 0,
name: "string",
networks: ["string"],
outerVlanId: 0,
poeDisabled: false,
aeLacpForceUp: false,
poeKeepStateWhenReboot: false,
ssrNoVirtualMac: false,
redundant: false,
redundantGroup: 0,
rethIdx: "string",
rethNode: "string",
rethNodes: ["string"],
speed: "string",
preserveDscp: false,
svrPortRange: "string",
trafficShaping: {
classPercentages: [0],
enabled: false,
maxTxKbps: 0,
},
aeIdx: "string",
vlanId: "string",
vpnPaths: {
string: {
bfdProfile: "string",
bfdUseTunnelMode: false,
preference: 0,
role: "string",
trafficShaping: {
classPercentages: [0],
enabled: false,
maxTxKbps: 0,
},
},
},
wanArpPolicer: "string",
wanExtIp: "string",
wanExtIp6: "string",
wanExtraRoutes: {
string: {
via: "string",
},
},
wanExtraRoutes6: {
string: {
via: "string",
},
},
wanNetworks: ["string"],
wanProbeOverride: {
ip6s: ["string"],
ips: ["string"],
probeProfile: "string",
},
wanSourceNat: {
disabled: false,
nat6Pool: "string",
natPool: "string",
},
wanSpeedtestMode: "string",
wanType: "string",
},
},
portMirroring: {
portMirror: {
familyType: "string",
ingressPortIds: ["string"],
outputPortId: "string",
rate: 0,
runLength: 0,
},
},
routerId: "string",
routingPolicies: {
string: {
terms: [{
actions: {
accept: false,
addCommunities: ["string"],
addTargetVrfs: ["string"],
communities: ["string"],
excludeAsPaths: ["string"],
excludeCommunities: ["string"],
exportCommunities: ["string"],
localPreference: "string",
prependAsPaths: ["string"],
},
matching: {
asPaths: ["string"],
communities: ["string"],
networks: ["string"],
prefixes: ["string"],
protocols: ["string"],
routeExists: {
route: "string",
vrfName: "string",
},
vpnNeighborMacs: ["string"],
vpnPathSla: {
maxJitter: 0,
maxLatency: 0,
maxLoss: 0,
},
vpnPaths: ["string"],
},
}],
},
},
servicePolicies: [{
action: "string",
antivirus: {
avprofileId: "string",
enabled: false,
profile: "string",
},
appqoe: {
enabled: false,
},
ewfs: [{
alertOnly: false,
blockMessage: "string",
enabled: false,
profile: "string",
}],
idp: {
alertOnly: false,
enabled: false,
idpprofileId: "string",
profile: "string",
},
localRouting: false,
name: "string",
pathPreference: "string",
servicepolicyId: "string",
services: ["string"],
skyatp: {
dnsDgaDetection: {
enabled: false,
profile: "string",
},
dnsTunnelDetection: {
enabled: false,
profile: "string",
},
httpInspection: {
enabled: false,
profile: "string",
},
iotDevicePolicy: {
enabled: false,
},
},
sslProxy: {
ciphersCategory: "string",
enabled: false,
},
syslog: {
enabled: false,
serverNames: ["string"],
},
tenants: ["string"],
}],
bgpConfig: {
string: {
via: "string",
importPolicy: "string",
neighborAs: "string",
disableBfd: false,
"export": "string",
exportPolicy: "string",
extendedV4Nexthop: false,
gracefulRestartTime: 0,
holdTime: 0,
"import": "string",
authKey: "string",
bfdMultiplier: 0,
neighbors: {
string: {
neighborAs: "string",
disabled: false,
exportPolicy: "string",
holdTime: 0,
importPolicy: "string",
multihopTtl: 0,
tunnelVia: "string",
},
},
localAs: "string",
networks: ["string"],
noPrivateAs: false,
noReadvertiseToOverlay: false,
tunnelName: "string",
type: "string",
bfdMinimumInterval: 0,
vpnName: "string",
wanName: "string",
},
},
ssrAdditionalConfigCmds: ["string"],
tunnelConfigs: {
string: {
autoProvision: {
provider: "string",
enabled: false,
latlng: {
lat: 0,
lng: 0,
},
primary: {
probeIps: ["string"],
wanNames: ["string"],
},
region: "string",
secondary: {
probeIps: ["string"],
wanNames: ["string"],
},
serviceConnection: "string",
},
ikeLifetime: 0,
ikeMode: "string",
ikeProposals: [{
authAlgo: "string",
dhGroup: "string",
encAlgo: "string",
}],
ipsecLifetime: 0,
ipsecProposals: [{
authAlgo: "string",
dhGroup: "string",
encAlgo: "string",
}],
localId: "string",
localSubnets: ["string"],
mode: "string",
networks: ["string"],
primary: {
hosts: ["string"],
wanNames: ["string"],
internalIps: ["string"],
probeIps: ["string"],
remoteIds: ["string"],
},
probe: {
interval: 0,
threshold: 0,
timeout: 0,
type: "string",
},
protocol: "string",
provider: "string",
psk: "string",
remoteSubnets: ["string"],
secondary: {
hosts: ["string"],
wanNames: ["string"],
internalIps: ["string"],
probeIps: ["string"],
remoteIds: ["string"],
},
version: "string",
},
},
tunnelProviderOptions: {
jse: {
numUsers: 0,
orgName: "string",
},
prisma: {
serviceAccountName: "string",
},
zscaler: {
aupBlockInternetUntilAccepted: false,
aupEnabled: false,
aupForceSslInspection: false,
aupTimeoutInDays: 0,
authRequired: false,
cautionEnabled: false,
dnBandwidth: 0,
idleTimeInMinutes: 0,
ofwEnabled: false,
subLocations: [{
aupBlockInternetUntilAccepted: false,
aupEnabled: false,
aupForceSslInspection: false,
aupTimeoutInDays: 0,
authRequired: false,
cautionEnabled: false,
dnBandwidth: 0,
idleTimeInMinutes: 0,
name: "string",
ofwEnabled: false,
surrogateIp: false,
surrogateIpEnforcedForKnownBrowsers: false,
surrogateRefreshTimeInMinutes: 0,
upBandwidth: 0,
}],
surrogateIp: false,
surrogateIpEnforcedForKnownBrowsers: false,
surrogateRefreshTimeInMinutes: 0,
upBandwidth: 0,
xffForwardEnabled: false,
},
},
urlFilteringDenyMsg: "string",
vars: {
string: "string",
},
vrfConfig: {
enabled: false,
},
vrfInstances: {
string: {
networks: ["string"],
},
},
x: 0,
y: 0,
});
type: junipermist:device:Gateway
properties:
additionalConfigCmds:
- string
bgpConfig:
string:
authKey: string
bfdMinimumInterval: 0
bfdMultiplier: 0
disableBfd: false
export: string
exportPolicy: string
extendedV4Nexthop: false
gracefulRestartTime: 0
holdTime: 0
import: string
importPolicy: string
localAs: string
neighborAs: string
neighbors:
string:
disabled: false
exportPolicy: string
holdTime: 0
importPolicy: string
multihopTtl: 0
neighborAs: string
tunnelVia: string
networks:
- string
noPrivateAs: false
noReadvertiseToOverlay: false
tunnelName: string
type: string
via: string
vpnName: string
wanName: string
deviceId: string
dhcpdConfig:
config:
string:
dnsServers:
- string
fixedBindings:
string:
ip: string
ip6: string
name: string
gateway: string
ip6End: string
ip6Start: string
ipEnd: string
ipStart: string
leaseTime: 0
options:
string:
type: string
value: string
serverIdOverride: false
servers:
- string
serversv6s:
- string
type: string
type6: string
vendorEncapsulated:
string:
type: string
value: string
enabled: false
dnsServers:
- string
dnsSuffixes:
- string
extraRoutes:
string:
via: string
extraRoutes6:
string:
via: string
gatewayMgmt:
adminSshkeys:
- string
appProbing:
apps:
- string
customApps:
- address: string
appType: string
hostnames:
- string
key: string
name: string
network: string
packetSize: 0
protocol: string
url: string
vrf: string
enabled: false
appUsage: false
autoSignatureUpdate:
dayOfWeek: string
enable: false
timeOfDay: string
configRevertTimer: 0
disableConsole: false
disableOob: false
disableUsb: false
fipsEnabled: false
probeHosts:
- string
probeHostsv6s:
- string
protectRe:
allowedServices:
- string
customs:
- portRange: string
protocol: string
subnets:
- string
enabled: false
hitCount: false
trustedHosts:
- string
rootPassword: string
securityLogSourceAddress: string
securityLogSourceInterface: string
idpProfiles:
string:
baseProfile: string
id: string
name: string
orgId: string
overwrites:
- action: string
matching:
attackNames:
- string
dstSubnets:
- string
severities:
- string
name: string
ipConfigs:
string:
ip: string
ip6: string
netmask: string
netmask6: string
secondaryIps:
- string
type: string
type6: string
mapId: string
mistConfigured: false
mspId: string
name: string
networks:
- disallowMistServices: false
gateway: string
gateway6: string
internalAccess:
enabled: false
internetAccess:
createSimpleServicePolicy: false
destinationNat:
string:
internalIp: string
name: string
port: string
wanName: string
enabled: false
restricted: false
staticNat:
string:
internalIp: string
name: string
wanName: string
isolation: false
multicast:
disableIgmp: false
enabled: false
groups:
string:
rpIp: string
name: string
routedForNetworks:
- string
subnet: string
subnet6: string
tenants:
string:
addresses:
- string
vlanId: string
vpnAccess:
string:
advertisedSubnet: string
allowPing: false
destinationNat:
string:
internalIp: string
name: string
port: string
natPool: string
noReadvertiseToLanBgp: false
noReadvertiseToLanOspf: false
noReadvertiseToOverlay: false
otherVrfs:
- string
routed: false
sourceNat:
externalIp: string
staticNat:
string:
internalIp: string
name: string
summarizedSubnet: string
summarizedSubnetToLanBgp: string
summarizedSubnetToLanOspf: string
notes: string
ntpServers:
- string
oobIpConfig:
gateway: string
ip: string
netmask: string
node1:
gateway: string
ip: string
netmask: string
type: string
useMgmtVrf: false
useMgmtVrfForHostOut: false
vlanId: string
type: string
useMgmtVrf: false
useMgmtVrfForHostOut: false
vlanId: string
pathPreferences:
string:
paths:
- cost: 0
disabled: false
gatewayIp: string
internetAccess: false
name: string
networks:
- string
targetIps:
- string
type: string
wanName: string
strategy: string
portConfig:
string:
aeDisableLacp: false
aeIdx: string
aeLacpForceUp: false
aggregated: false
critical: false
description: string
disableAutoneg: false
disabled: false
dslType: string
dslVci: 0
dslVpi: 0
duplex: string
ipConfig:
dns:
- string
dnsSuffixes:
- string
gateway: string
gateway6: string
ip: string
ip6: string
netmask: string
netmask6: string
network: string
poserPassword: string
pppoeAuth: string
pppoeUsername: string
type: string
type6: string
lteApn: string
lteAuth: string
lteBackup: false
ltePassword: string
lteUsername: string
mtu: 0
name: string
networks:
- string
outerVlanId: 0
poeDisabled: false
poeKeepStateWhenReboot: false
portNetwork: string
preserveDscp: false
redundant: false
redundantGroup: 0
rethIdx: string
rethNode: string
rethNodes:
- string
speed: string
ssrNoVirtualMac: false
svrPortRange: string
trafficShaping:
classPercentages:
- 0
enabled: false
maxTxKbps: 0
usage: string
vlanId: string
vpnPaths:
string:
bfdProfile: string
bfdUseTunnelMode: false
preference: 0
role: string
trafficShaping:
classPercentages:
- 0
enabled: false
maxTxKbps: 0
wanArpPolicer: string
wanExtIp: string
wanExtIp6: string
wanExtraRoutes:
string:
via: string
wanExtraRoutes6:
string:
via: string
wanNetworks:
- string
wanProbeOverride:
ip6s:
- string
ips:
- string
probeProfile: string
wanSourceNat:
disabled: false
nat6Pool: string
natPool: string
wanSpeedtestMode: string
wanType: string
portMirroring:
portMirror:
familyType: string
ingressPortIds:
- string
outputPortId: string
rate: 0
runLength: 0
routerId: string
routingPolicies:
string:
terms:
- actions:
accept: false
addCommunities:
- string
addTargetVrfs:
- string
communities:
- string
excludeAsPaths:
- string
excludeCommunities:
- string
exportCommunities:
- string
localPreference: string
prependAsPaths:
- string
matching:
asPaths:
- string
communities:
- string
networks:
- string
prefixes:
- string
protocols:
- string
routeExists:
route: string
vrfName: string
vpnNeighborMacs:
- string
vpnPathSla:
maxJitter: 0
maxLatency: 0
maxLoss: 0
vpnPaths:
- string
servicePolicies:
- action: string
antivirus:
avprofileId: string
enabled: false
profile: string
appqoe:
enabled: false
ewfs:
- alertOnly: false
blockMessage: string
enabled: false
profile: string
idp:
alertOnly: false
enabled: false
idpprofileId: string
profile: string
localRouting: false
name: string
pathPreference: string
servicepolicyId: string
services:
- string
skyatp:
dnsDgaDetection:
enabled: false
profile: string
dnsTunnelDetection:
enabled: false
profile: string
httpInspection:
enabled: false
profile: string
iotDevicePolicy:
enabled: false
sslProxy:
ciphersCategory: string
enabled: false
syslog:
enabled: false
serverNames:
- string
tenants:
- string
siteId: string
ssrAdditionalConfigCmds:
- string
tunnelConfigs:
string:
autoProvision:
enabled: false
latlng:
lat: 0
lng: 0
primary:
probeIps:
- string
wanNames:
- string
provider: string
region: string
secondary:
probeIps:
- string
wanNames:
- string
serviceConnection: string
ikeLifetime: 0
ikeMode: string
ikeProposals:
- authAlgo: string
dhGroup: string
encAlgo: string
ipsecLifetime: 0
ipsecProposals:
- authAlgo: string
dhGroup: string
encAlgo: string
localId: string
localSubnets:
- string
mode: string
networks:
- string
primary:
hosts:
- string
internalIps:
- string
probeIps:
- string
remoteIds:
- string
wanNames:
- string
probe:
interval: 0
threshold: 0
timeout: 0
type: string
protocol: string
provider: string
psk: string
remoteSubnets:
- string
secondary:
hosts:
- string
internalIps:
- string
probeIps:
- string
remoteIds:
- string
wanNames:
- string
version: string
tunnelProviderOptions:
jse:
numUsers: 0
orgName: string
prisma:
serviceAccountName: string
zscaler:
aupBlockInternetUntilAccepted: false
aupEnabled: false
aupForceSslInspection: false
aupTimeoutInDays: 0
authRequired: false
cautionEnabled: false
dnBandwidth: 0
idleTimeInMinutes: 0
ofwEnabled: false
subLocations:
- aupBlockInternetUntilAccepted: false
aupEnabled: false
aupForceSslInspection: false
aupTimeoutInDays: 0
authRequired: false
cautionEnabled: false
dnBandwidth: 0
idleTimeInMinutes: 0
name: string
ofwEnabled: false
surrogateIp: false
surrogateIpEnforcedForKnownBrowsers: false
surrogateRefreshTimeInMinutes: 0
upBandwidth: 0
surrogateIp: false
surrogateIpEnforcedForKnownBrowsers: false
surrogateRefreshTimeInMinutes: 0
upBandwidth: 0
xffForwardEnabled: false
urlFilteringDenyMsg: string
vars:
string: string
vrfConfig:
enabled: false
vrfInstances:
string:
networks:
- string
x: 0
"y": 0
Gateway Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Gateway resource accepts the following input properties:
- Device
Id string - Site
Id string - Site where this gateway is assigned
- Additional
Config List<string>Cmds - Additional CLI configuration commands to apply to this gateway
- Bgp
Config Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Bgp Config Args> - BGP routing configuration for this gateway. Property key is the BGP session name
- Dhcpd
Config Pulumi.Juniper Mist. Device. Inputs. Gateway Dhcpd Config - DHCP server configuration served by this gateway
- Dns
Servers List<string> - DNS servers configured for this gateway
- Dns
Suffixes List<string> - DNS search suffixes configured for this gateway
- Extra
Routes Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Extra Routes Args> - Additional IPv4 routes configured on this gateway
- Extra
Routes6 Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Extra Routes6Args> - Additional IPv6 routes configured on this gateway
- Gateway
Mgmt Pulumi.Juniper Mist. Device. Inputs. Gateway Gateway Mgmt - Management-plane settings for this gateway
- Idp
Profiles Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Idp Profiles Args> - Intrusion detection and prevention profiles configured for this gateway
- Ip
Configs Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Ip Configs Args> - Gateway interface IP configurations by network name
- Managed bool
- Whether the device is managed by Mist. Deprecated in favour of mist_configured.
- Map
Id string - Map where the device belongs to
- Mist
Configured bool - whether the device can be configured by Mist or not. This deprecates
managedfor adopted devices. - Msp
Id string - MSP that manages this gateway, when applicable
- Name string
- Friendly display name assigned to the gateway
- Networks
List<Pulumi.
Juniper Mist. Device. Inputs. Gateway Network> - Layer 3 networks configured for use by this gateway
- Notes string
- Free-form administrative notes for this gateway
- Ntp
Servers List<string> - NTP servers used by this gateway
- Oob
Ip Pulumi.Config Juniper Mist. Device. Inputs. Gateway Oob Ip Config - Out-of-band management IP configuration for this gateway
- Path
Preferences Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Path Preferences Args> - Property key is the path name
- Port
Config Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Port Config Args> - Property key is the port name or range (e.g. "ge-0/0/0-10")
- Port
Mirroring Pulumi.Juniper Mist. Device. Inputs. Gateway Port Mirroring - Port mirroring configuration for this gateway
- Router
Id string - Auto assigned if not set
- Routing
Policies Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Routing Policies Args> - Routing policies applied by this gateway
- Service
Policies List<Pulumi.Juniper Mist. Device. Inputs. Gateway Service Policy> - Traffic service policies enforced by this gateway
- Ssr
Additional List<string>Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- Tunnel
Configs Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Tunnel Configs Args> - Property key is the tunnel name
- Tunnel
Provider Pulumi.Options Juniper Mist. Device. Inputs. Gateway Tunnel Provider Options - Provider-specific options for tunnels terminated by this gateway
- Url
Filtering stringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- Vars Dictionary<string, string>
- Variable values that override site variables for this gateway
- Vrf
Config Pulumi.Juniper Mist. Device. Inputs. Gateway Vrf Config - VRF configuration applied to this gateway
- Vrf
Instances Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Vrf Instances Args> - VRF instances configured on this gateway
- X double
- Horizontal map position of the gateway, in pixels
- Y double
- Vertical map position of the gateway, in pixels
- Device
Id string - Site
Id string - Site where this gateway is assigned
- Additional
Config []stringCmds - Additional CLI configuration commands to apply to this gateway
- Bgp
Config map[string]GatewayBgp Config Args - BGP routing configuration for this gateway. Property key is the BGP session name
- Dhcpd
Config GatewayDhcpd Config Args - DHCP server configuration served by this gateway
- Dns
Servers []string - DNS servers configured for this gateway
- Dns
Suffixes []string - DNS search suffixes configured for this gateway
- Extra
Routes map[string]GatewayExtra Routes Args - Additional IPv4 routes configured on this gateway
- Extra
Routes6 map[string]GatewayExtra Routes6Args - Additional IPv6 routes configured on this gateway
- Gateway
Mgmt GatewayGateway Mgmt Args - Management-plane settings for this gateway
- Idp
Profiles map[string]GatewayIdp Profiles Args - Intrusion detection and prevention profiles configured for this gateway
- Ip
Configs map[string]GatewayIp Configs Args - Gateway interface IP configurations by network name
- Managed bool
- Whether the device is managed by Mist. Deprecated in favour of mist_configured.
- Map
Id string - Map where the device belongs to
- Mist
Configured bool - whether the device can be configured by Mist or not. This deprecates
managedfor adopted devices. - Msp
Id string - MSP that manages this gateway, when applicable
- Name string
- Friendly display name assigned to the gateway
- Networks
[]Gateway
Network Args - Layer 3 networks configured for use by this gateway
- Notes string
- Free-form administrative notes for this gateway
- Ntp
Servers []string - NTP servers used by this gateway
- Oob
Ip GatewayConfig Oob Ip Config Args - Out-of-band management IP configuration for this gateway
- Path
Preferences map[string]GatewayPath Preferences Args - Property key is the path name
- Port
Config map[string]GatewayPort Config Args - Property key is the port name or range (e.g. "ge-0/0/0-10")
- Port
Mirroring GatewayPort Mirroring Args - Port mirroring configuration for this gateway
- Router
Id string - Auto assigned if not set
- Routing
Policies map[string]GatewayRouting Policies Args - Routing policies applied by this gateway
- Service
Policies []GatewayService Policy Args - Traffic service policies enforced by this gateway
- Ssr
Additional []stringConfig Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- Tunnel
Configs map[string]GatewayTunnel Configs Args - Property key is the tunnel name
- Tunnel
Provider GatewayOptions Tunnel Provider Options Args - Provider-specific options for tunnels terminated by this gateway
- Url
Filtering stringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- Vars map[string]string
- Variable values that override site variables for this gateway
- Vrf
Config GatewayVrf Config Args - VRF configuration applied to this gateway
- Vrf
Instances map[string]GatewayVrf Instances Args - VRF instances configured on this gateway
- X float64
- Horizontal map position of the gateway, in pixels
- Y float64
- Vertical map position of the gateway, in pixels
- device_
id string - site_
id string - Site where this gateway is assigned
- additional_
config_ list(string)cmds - Additional CLI configuration commands to apply to this gateway
- bgp_
config map(object) - BGP routing configuration for this gateway. Property key is the BGP session name
- dhcpd_
config object - DHCP server configuration served by this gateway
- dns_
servers list(string) - DNS servers configured for this gateway
- dns_
suffixes list(string) - DNS search suffixes configured for this gateway
- extra_
routes map(object) - Additional IPv4 routes configured on this gateway
- extra_
routes6 map(object) - Additional IPv6 routes configured on this gateway
- gateway_
mgmt object - Management-plane settings for this gateway
- idp_
profiles map(object) - Intrusion detection and prevention profiles configured for this gateway
- ip_
configs map(object) - Gateway interface IP configurations by network name
- managed bool
- Whether the device is managed by Mist. Deprecated in favour of mist_configured.
- map_
id string - Map where the device belongs to
- mist_
configured bool - whether the device can be configured by Mist or not. This deprecates
managedfor adopted devices. - msp_
id string - MSP that manages this gateway, when applicable
- name string
- Friendly display name assigned to the gateway
- networks list(object)
- Layer 3 networks configured for use by this gateway
- notes string
- Free-form administrative notes for this gateway
- ntp_
servers list(string) - NTP servers used by this gateway
- oob_
ip_ objectconfig - Out-of-band management IP configuration for this gateway
- path_
preferences map(object) - Property key is the path name
- port_
config map(object) - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port_
mirroring object - Port mirroring configuration for this gateway
- router_
id string - Auto assigned if not set
- routing_
policies map(object) - Routing policies applied by this gateway
- service_
policies list(object) - Traffic service policies enforced by this gateway
- ssr_
additional_ list(string)config_ cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel_
configs map(object) - Property key is the tunnel name
- tunnel_
provider_ objectoptions - Provider-specific options for tunnels terminated by this gateway
- url_
filtering_ stringdeny_ msg - When a service policy denies a app_category, what message to show in user's browser
- vars map(string)
- Variable values that override site variables for this gateway
- vrf_
config object - VRF configuration applied to this gateway
- vrf_
instances map(object) - VRF instances configured on this gateway
- x number
- Horizontal map position of the gateway, in pixels
- y number
- Vertical map position of the gateway, in pixels
- device
Id String - site
Id String - Site where this gateway is assigned
- additional
Config List<String>Cmds - Additional CLI configuration commands to apply to this gateway
- bgp
Config Map<String,GatewayBgp Config Args> - BGP routing configuration for this gateway. Property key is the BGP session name
- dhcpd
Config GatewayDhcpd Config - DHCP server configuration served by this gateway
- dns
Servers List<String> - DNS servers configured for this gateway
- dns
Suffixes List<String> - DNS search suffixes configured for this gateway
- extra
Routes Map<String,GatewayExtra Routes Args> - Additional IPv4 routes configured on this gateway
- extra
Routes6 Map<String,GatewayExtra Routes6Args> - Additional IPv6 routes configured on this gateway
- gateway
Mgmt GatewayGateway Mgmt - Management-plane settings for this gateway
- idp
Profiles Map<String,GatewayIdp Profiles Args> - Intrusion detection and prevention profiles configured for this gateway
- ip
Configs Map<String,GatewayIp Configs Args> - Gateway interface IP configurations by network name
- managed Boolean
- Whether the device is managed by Mist. Deprecated in favour of mist_configured.
- map
Id String - Map where the device belongs to
- mist
Configured Boolean - whether the device can be configured by Mist or not. This deprecates
managedfor adopted devices. - msp
Id String - MSP that manages this gateway, when applicable
- name String
- Friendly display name assigned to the gateway
- networks
List<Gateway
Network> - Layer 3 networks configured for use by this gateway
- notes String
- Free-form administrative notes for this gateway
- ntp
Servers List<String> - NTP servers used by this gateway
- oob
Ip GatewayConfig Oob Ip Config - Out-of-band management IP configuration for this gateway
- path
Preferences Map<String,GatewayPath Preferences Args> - Property key is the path name
- port
Config Map<String,GatewayPort Config Args> - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port
Mirroring GatewayPort Mirroring - Port mirroring configuration for this gateway
- router
Id String - Auto assigned if not set
- routing
Policies Map<String,GatewayRouting Policies Args> - Routing policies applied by this gateway
- service
Policies List<GatewayService Policy> - Traffic service policies enforced by this gateway
- ssr
Additional List<String>Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel
Configs Map<String,GatewayTunnel Configs Args> - Property key is the tunnel name
- tunnel
Provider GatewayOptions Tunnel Provider Options - Provider-specific options for tunnels terminated by this gateway
- url
Filtering StringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- vars Map<String,String>
- Variable values that override site variables for this gateway
- vrf
Config GatewayVrf Config - VRF configuration applied to this gateway
- vrf
Instances Map<String,GatewayVrf Instances Args> - VRF instances configured on this gateway
- x Double
- Horizontal map position of the gateway, in pixels
- y Double
- Vertical map position of the gateway, in pixels
- device
Id string - site
Id string - Site where this gateway is assigned
- additional
Config string[]Cmds - Additional CLI configuration commands to apply to this gateway
- bgp
Config {[key: string]: GatewayBgp Config Args} - BGP routing configuration for this gateway. Property key is the BGP session name
- dhcpd
Config GatewayDhcpd Config - DHCP server configuration served by this gateway
- dns
Servers string[] - DNS servers configured for this gateway
- dns
Suffixes string[] - DNS search suffixes configured for this gateway
- extra
Routes {[key: string]: GatewayExtra Routes Args} - Additional IPv4 routes configured on this gateway
- extra
Routes6 {[key: string]: GatewayExtra Routes6Args} - Additional IPv6 routes configured on this gateway
- gateway
Mgmt GatewayGateway Mgmt - Management-plane settings for this gateway
- idp
Profiles {[key: string]: GatewayIdp Profiles Args} - Intrusion detection and prevention profiles configured for this gateway
- ip
Configs {[key: string]: GatewayIp Configs Args} - Gateway interface IP configurations by network name
- managed boolean
- Whether the device is managed by Mist. Deprecated in favour of mist_configured.
- map
Id string - Map where the device belongs to
- mist
Configured boolean - whether the device can be configured by Mist or not. This deprecates
managedfor adopted devices. - msp
Id string - MSP that manages this gateway, when applicable
- name string
- Friendly display name assigned to the gateway
- networks
Gateway
Network[] - Layer 3 networks configured for use by this gateway
- notes string
- Free-form administrative notes for this gateway
- ntp
Servers string[] - NTP servers used by this gateway
- oob
Ip GatewayConfig Oob Ip Config - Out-of-band management IP configuration for this gateway
- path
Preferences {[key: string]: GatewayPath Preferences Args} - Property key is the path name
- port
Config {[key: string]: GatewayPort Config Args} - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port
Mirroring GatewayPort Mirroring - Port mirroring configuration for this gateway
- router
Id string - Auto assigned if not set
- routing
Policies {[key: string]: GatewayRouting Policies Args} - Routing policies applied by this gateway
- service
Policies GatewayService Policy[] - Traffic service policies enforced by this gateway
- ssr
Additional string[]Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel
Configs {[key: string]: GatewayTunnel Configs Args} - Property key is the tunnel name
- tunnel
Provider GatewayOptions Tunnel Provider Options - Provider-specific options for tunnels terminated by this gateway
- url
Filtering stringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- vars {[key: string]: string}
- Variable values that override site variables for this gateway
- vrf
Config GatewayVrf Config - VRF configuration applied to this gateway
- vrf
Instances {[key: string]: GatewayVrf Instances Args} - VRF instances configured on this gateway
- x number
- Horizontal map position of the gateway, in pixels
- y number
- Vertical map position of the gateway, in pixels
- device_
id str - site_
id str - Site where this gateway is assigned
- additional_
config_ Sequence[str]cmds - Additional CLI configuration commands to apply to this gateway
- bgp_
config Mapping[str, GatewayBgp Config Args] - BGP routing configuration for this gateway. Property key is the BGP session name
- dhcpd_
config GatewayDhcpd Config Args - DHCP server configuration served by this gateway
- dns_
servers Sequence[str] - DNS servers configured for this gateway
- dns_
suffixes Sequence[str] - DNS search suffixes configured for this gateway
- extra_
routes Mapping[str, GatewayExtra Routes Args] - Additional IPv4 routes configured on this gateway
- extra_
routes6 Mapping[str, GatewayExtra Routes6Args] - Additional IPv6 routes configured on this gateway
- gateway_
mgmt GatewayGateway Mgmt Args - Management-plane settings for this gateway
- idp_
profiles Mapping[str, GatewayIdp Profiles Args] - Intrusion detection and prevention profiles configured for this gateway
- ip_
configs Mapping[str, GatewayIp Configs Args] - Gateway interface IP configurations by network name
- managed bool
- Whether the device is managed by Mist. Deprecated in favour of mist_configured.
- map_
id str - Map where the device belongs to
- mist_
configured bool - whether the device can be configured by Mist or not. This deprecates
managedfor adopted devices. - msp_
id str - MSP that manages this gateway, when applicable
- name str
- Friendly display name assigned to the gateway
- networks
Sequence[Gateway
Network Args] - Layer 3 networks configured for use by this gateway
- notes str
- Free-form administrative notes for this gateway
- ntp_
servers Sequence[str] - NTP servers used by this gateway
- oob_
ip_ Gatewayconfig Oob Ip Config Args - Out-of-band management IP configuration for this gateway
- path_
preferences Mapping[str, GatewayPath Preferences Args] - Property key is the path name
- port_
config Mapping[str, GatewayPort Config Args] - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port_
mirroring GatewayPort Mirroring Args - Port mirroring configuration for this gateway
- router_
id str - Auto assigned if not set
- routing_
policies Mapping[str, GatewayRouting Policies Args] - Routing policies applied by this gateway
- service_
policies Sequence[GatewayService Policy Args] - Traffic service policies enforced by this gateway
- ssr_
additional_ Sequence[str]config_ cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel_
configs Mapping[str, GatewayTunnel Configs Args] - Property key is the tunnel name
- tunnel_
provider_ Gatewayoptions Tunnel Provider Options Args - Provider-specific options for tunnels terminated by this gateway
- url_
filtering_ strdeny_ msg - When a service policy denies a app_category, what message to show in user's browser
- vars Mapping[str, str]
- Variable values that override site variables for this gateway
- vrf_
config GatewayVrf Config Args - VRF configuration applied to this gateway
- vrf_
instances Mapping[str, GatewayVrf Instances Args] - VRF instances configured on this gateway
- x float
- Horizontal map position of the gateway, in pixels
- y float
- Vertical map position of the gateway, in pixels
- device
Id String - site
Id String - Site where this gateway is assigned
- additional
Config List<String>Cmds - Additional CLI configuration commands to apply to this gateway
- bgp
Config Map<Property Map> - BGP routing configuration for this gateway. Property key is the BGP session name
- dhcpd
Config Property Map - DHCP server configuration served by this gateway
- dns
Servers List<String> - DNS servers configured for this gateway
- dns
Suffixes List<String> - DNS search suffixes configured for this gateway
- extra
Routes Map<Property Map> - Additional IPv4 routes configured on this gateway
- extra
Routes6 Map<Property Map> - Additional IPv6 routes configured on this gateway
- gateway
Mgmt Property Map - Management-plane settings for this gateway
- idp
Profiles Map<Property Map> - Intrusion detection and prevention profiles configured for this gateway
- ip
Configs Map<Property Map> - Gateway interface IP configurations by network name
- managed Boolean
- Whether the device is managed by Mist. Deprecated in favour of mist_configured.
- map
Id String - Map where the device belongs to
- mist
Configured Boolean - whether the device can be configured by Mist or not. This deprecates
managedfor adopted devices. - msp
Id String - MSP that manages this gateway, when applicable
- name String
- Friendly display name assigned to the gateway
- networks List<Property Map>
- Layer 3 networks configured for use by this gateway
- notes String
- Free-form administrative notes for this gateway
- ntp
Servers List<String> - NTP servers used by this gateway
- oob
Ip Property MapConfig - Out-of-band management IP configuration for this gateway
- path
Preferences Map<Property Map> - Property key is the path name
- port
Config Map<Property Map> - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port
Mirroring Property Map - Port mirroring configuration for this gateway
- router
Id String - Auto assigned if not set
- routing
Policies Map<Property Map> - Routing policies applied by this gateway
- service
Policies List<Property Map> - Traffic service policies enforced by this gateway
- ssr
Additional List<String>Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel
Configs Map<Property Map> - Property key is the tunnel name
- tunnel
Provider Property MapOptions - Provider-specific options for tunnels terminated by this gateway
- url
Filtering StringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- vars Map<String>
- Variable values that override site variables for this gateway
- vrf
Config Property Map - VRF configuration applied to this gateway
- vrf
Instances Map<Property Map> - VRF instances configured on this gateway
- x Number
- Horizontal map position of the gateway, in pixels
- y Number
- Vertical map position of the gateway, in pixels
Outputs
All input properties are implicitly available as output properties. Additionally, the Gateway resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Image1Url string
- First custom image URL associated with the gateway
- Image2Url string
- Second custom image URL associated with the gateway
- Image3Url string
- Third custom image URL associated with the gateway
- Mac string
- Gateway MAC address used to identify the device
- Model string
- Gateway model reported for the device
- Org
Id string - Organization that owns this gateway
- Serial string
- Manufacturer serial number for the gateway
- Type string
- Device type discriminator for gateway records
- Id string
- The provider-assigned unique ID for this managed resource.
- Image1Url string
- First custom image URL associated with the gateway
- Image2Url string
- Second custom image URL associated with the gateway
- Image3Url string
- Third custom image URL associated with the gateway
- Mac string
- Gateway MAC address used to identify the device
- Model string
- Gateway model reported for the device
- Org
Id string - Organization that owns this gateway
- Serial string
- Manufacturer serial number for the gateway
- Type string
- Device type discriminator for gateway records
- id string
- The provider-assigned unique ID for this managed resource.
- image1_
url string - First custom image URL associated with the gateway
- image2_
url string - Second custom image URL associated with the gateway
- image3_
url string - Third custom image URL associated with the gateway
- mac string
- Gateway MAC address used to identify the device
- model string
- Gateway model reported for the device
- org_
id string - Organization that owns this gateway
- serial string
- Manufacturer serial number for the gateway
- type string
- Device type discriminator for gateway records
- id String
- The provider-assigned unique ID for this managed resource.
- image1Url String
- First custom image URL associated with the gateway
- image2Url String
- Second custom image URL associated with the gateway
- image3Url String
- Third custom image URL associated with the gateway
- mac String
- Gateway MAC address used to identify the device
- model String
- Gateway model reported for the device
- org
Id String - Organization that owns this gateway
- serial String
- Manufacturer serial number for the gateway
- type String
- Device type discriminator for gateway records
- id string
- The provider-assigned unique ID for this managed resource.
- image1Url string
- First custom image URL associated with the gateway
- image2Url string
- Second custom image URL associated with the gateway
- image3Url string
- Third custom image URL associated with the gateway
- mac string
- Gateway MAC address used to identify the device
- model string
- Gateway model reported for the device
- org
Id string - Organization that owns this gateway
- serial string
- Manufacturer serial number for the gateway
- type string
- Device type discriminator for gateway records
- id str
- The provider-assigned unique ID for this managed resource.
- image1_
url str - First custom image URL associated with the gateway
- image2_
url str - Second custom image URL associated with the gateway
- image3_
url str - Third custom image URL associated with the gateway
- mac str
- Gateway MAC address used to identify the device
- model str
- Gateway model reported for the device
- org_
id str - Organization that owns this gateway
- serial str
- Manufacturer serial number for the gateway
- type str
- Device type discriminator for gateway records
- id String
- The provider-assigned unique ID for this managed resource.
- image1Url String
- First custom image URL associated with the gateway
- image2Url String
- Second custom image URL associated with the gateway
- image3Url String
- Third custom image URL associated with the gateway
- mac String
- Gateway MAC address used to identify the device
- model String
- Gateway model reported for the device
- org
Id String - Organization that owns this gateway
- serial String
- Manufacturer serial number for the gateway
- type String
- Device type discriminator for gateway records
Look up Existing Gateway Resource
Get an existing Gateway resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: GatewayState, opts?: CustomResourceOptions): Gateway@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
additional_config_cmds: Optional[Sequence[str]] = None,
bgp_config: Optional[Mapping[str, GatewayBgpConfigArgs]] = None,
device_id: Optional[str] = None,
dhcpd_config: Optional[GatewayDhcpdConfigArgs] = None,
dns_servers: Optional[Sequence[str]] = None,
dns_suffixes: Optional[Sequence[str]] = None,
extra_routes: Optional[Mapping[str, GatewayExtraRoutesArgs]] = None,
extra_routes6: Optional[Mapping[str, GatewayExtraRoutes6Args]] = None,
gateway_mgmt: Optional[GatewayGatewayMgmtArgs] = None,
idp_profiles: Optional[Mapping[str, GatewayIdpProfilesArgs]] = None,
image1_url: Optional[str] = None,
image2_url: Optional[str] = None,
image3_url: Optional[str] = None,
ip_configs: Optional[Mapping[str, GatewayIpConfigsArgs]] = None,
mac: Optional[str] = None,
managed: Optional[bool] = None,
map_id: Optional[str] = None,
mist_configured: Optional[bool] = None,
model: Optional[str] = None,
msp_id: Optional[str] = None,
name: Optional[str] = None,
networks: Optional[Sequence[GatewayNetworkArgs]] = None,
notes: Optional[str] = None,
ntp_servers: Optional[Sequence[str]] = None,
oob_ip_config: Optional[GatewayOobIpConfigArgs] = None,
org_id: Optional[str] = None,
path_preferences: Optional[Mapping[str, GatewayPathPreferencesArgs]] = None,
port_config: Optional[Mapping[str, GatewayPortConfigArgs]] = None,
port_mirroring: Optional[GatewayPortMirroringArgs] = None,
router_id: Optional[str] = None,
routing_policies: Optional[Mapping[str, GatewayRoutingPoliciesArgs]] = None,
serial: Optional[str] = None,
service_policies: Optional[Sequence[GatewayServicePolicyArgs]] = None,
site_id: Optional[str] = None,
ssr_additional_config_cmds: Optional[Sequence[str]] = None,
tunnel_configs: Optional[Mapping[str, GatewayTunnelConfigsArgs]] = None,
tunnel_provider_options: Optional[GatewayTunnelProviderOptionsArgs] = None,
type: Optional[str] = None,
url_filtering_deny_msg: Optional[str] = None,
vars: Optional[Mapping[str, str]] = None,
vrf_config: Optional[GatewayVrfConfigArgs] = None,
vrf_instances: Optional[Mapping[str, GatewayVrfInstancesArgs]] = None,
x: Optional[float] = None,
y: Optional[float] = None) -> Gatewayfunc GetGateway(ctx *Context, name string, id IDInput, state *GatewayState, opts ...ResourceOption) (*Gateway, error)public static Gateway Get(string name, Input<string> id, GatewayState? state, CustomResourceOptions? opts = null)public static Gateway get(String name, Output<String> id, GatewayState state, CustomResourceOptions options)resources: _: type: junipermist:device:Gateway get: id: ${id}import {
to = junipermist_device_gateway.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Additional
Config List<string>Cmds - Additional CLI configuration commands to apply to this gateway
- Bgp
Config Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Bgp Config Args> - BGP routing configuration for this gateway. Property key is the BGP session name
- Device
Id string - Dhcpd
Config Pulumi.Juniper Mist. Device. Inputs. Gateway Dhcpd Config - DHCP server configuration served by this gateway
- Dns
Servers List<string> - DNS servers configured for this gateway
- Dns
Suffixes List<string> - DNS search suffixes configured for this gateway
- Extra
Routes Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Extra Routes Args> - Additional IPv4 routes configured on this gateway
- Extra
Routes6 Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Extra Routes6Args> - Additional IPv6 routes configured on this gateway
- Gateway
Mgmt Pulumi.Juniper Mist. Device. Inputs. Gateway Gateway Mgmt - Management-plane settings for this gateway
- Idp
Profiles Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Idp Profiles Args> - Intrusion detection and prevention profiles configured for this gateway
- Image1Url string
- First custom image URL associated with the gateway
- Image2Url string
- Second custom image URL associated with the gateway
- Image3Url string
- Third custom image URL associated with the gateway
- Ip
Configs Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Ip Configs Args> - Gateway interface IP configurations by network name
- Mac string
- Gateway MAC address used to identify the device
- Managed bool
- Whether the device is managed by Mist. Deprecated in favour of mist_configured.
- Map
Id string - Map where the device belongs to
- Mist
Configured bool - whether the device can be configured by Mist or not. This deprecates
managedfor adopted devices. - Model string
- Gateway model reported for the device
- Msp
Id string - MSP that manages this gateway, when applicable
- Name string
- Friendly display name assigned to the gateway
- Networks
List<Pulumi.
Juniper Mist. Device. Inputs. Gateway Network> - Layer 3 networks configured for use by this gateway
- Notes string
- Free-form administrative notes for this gateway
- Ntp
Servers List<string> - NTP servers used by this gateway
- Oob
Ip Pulumi.Config Juniper Mist. Device. Inputs. Gateway Oob Ip Config - Out-of-band management IP configuration for this gateway
- Org
Id string - Organization that owns this gateway
- Path
Preferences Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Path Preferences Args> - Property key is the path name
- Port
Config Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Port Config Args> - Property key is the port name or range (e.g. "ge-0/0/0-10")
- Port
Mirroring Pulumi.Juniper Mist. Device. Inputs. Gateway Port Mirroring - Port mirroring configuration for this gateway
- Router
Id string - Auto assigned if not set
- Routing
Policies Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Routing Policies Args> - Routing policies applied by this gateway
- Serial string
- Manufacturer serial number for the gateway
- Service
Policies List<Pulumi.Juniper Mist. Device. Inputs. Gateway Service Policy> - Traffic service policies enforced by this gateway
- Site
Id string - Site where this gateway is assigned
- Ssr
Additional List<string>Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- Tunnel
Configs Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Tunnel Configs Args> - Property key is the tunnel name
- Tunnel
Provider Pulumi.Options Juniper Mist. Device. Inputs. Gateway Tunnel Provider Options - Provider-specific options for tunnels terminated by this gateway
- Type string
- Device type discriminator for gateway records
- Url
Filtering stringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- Vars Dictionary<string, string>
- Variable values that override site variables for this gateway
- Vrf
Config Pulumi.Juniper Mist. Device. Inputs. Gateway Vrf Config - VRF configuration applied to this gateway
- Vrf
Instances Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Vrf Instances Args> - VRF instances configured on this gateway
- X double
- Horizontal map position of the gateway, in pixels
- Y double
- Vertical map position of the gateway, in pixels
- Additional
Config []stringCmds - Additional CLI configuration commands to apply to this gateway
- Bgp
Config map[string]GatewayBgp Config Args - BGP routing configuration for this gateway. Property key is the BGP session name
- Device
Id string - Dhcpd
Config GatewayDhcpd Config Args - DHCP server configuration served by this gateway
- Dns
Servers []string - DNS servers configured for this gateway
- Dns
Suffixes []string - DNS search suffixes configured for this gateway
- Extra
Routes map[string]GatewayExtra Routes Args - Additional IPv4 routes configured on this gateway
- Extra
Routes6 map[string]GatewayExtra Routes6Args - Additional IPv6 routes configured on this gateway
- Gateway
Mgmt GatewayGateway Mgmt Args - Management-plane settings for this gateway
- Idp
Profiles map[string]GatewayIdp Profiles Args - Intrusion detection and prevention profiles configured for this gateway
- Image1Url string
- First custom image URL associated with the gateway
- Image2Url string
- Second custom image URL associated with the gateway
- Image3Url string
- Third custom image URL associated with the gateway
- Ip
Configs map[string]GatewayIp Configs Args - Gateway interface IP configurations by network name
- Mac string
- Gateway MAC address used to identify the device
- Managed bool
- Whether the device is managed by Mist. Deprecated in favour of mist_configured.
- Map
Id string - Map where the device belongs to
- Mist
Configured bool - whether the device can be configured by Mist or not. This deprecates
managedfor adopted devices. - Model string
- Gateway model reported for the device
- Msp
Id string - MSP that manages this gateway, when applicable
- Name string
- Friendly display name assigned to the gateway
- Networks
[]Gateway
Network Args - Layer 3 networks configured for use by this gateway
- Notes string
- Free-form administrative notes for this gateway
- Ntp
Servers []string - NTP servers used by this gateway
- Oob
Ip GatewayConfig Oob Ip Config Args - Out-of-band management IP configuration for this gateway
- Org
Id string - Organization that owns this gateway
- Path
Preferences map[string]GatewayPath Preferences Args - Property key is the path name
- Port
Config map[string]GatewayPort Config Args - Property key is the port name or range (e.g. "ge-0/0/0-10")
- Port
Mirroring GatewayPort Mirroring Args - Port mirroring configuration for this gateway
- Router
Id string - Auto assigned if not set
- Routing
Policies map[string]GatewayRouting Policies Args - Routing policies applied by this gateway
- Serial string
- Manufacturer serial number for the gateway
- Service
Policies []GatewayService Policy Args - Traffic service policies enforced by this gateway
- Site
Id string - Site where this gateway is assigned
- Ssr
Additional []stringConfig Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- Tunnel
Configs map[string]GatewayTunnel Configs Args - Property key is the tunnel name
- Tunnel
Provider GatewayOptions Tunnel Provider Options Args - Provider-specific options for tunnels terminated by this gateway
- Type string
- Device type discriminator for gateway records
- Url
Filtering stringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- Vars map[string]string
- Variable values that override site variables for this gateway
- Vrf
Config GatewayVrf Config Args - VRF configuration applied to this gateway
- Vrf
Instances map[string]GatewayVrf Instances Args - VRF instances configured on this gateway
- X float64
- Horizontal map position of the gateway, in pixels
- Y float64
- Vertical map position of the gateway, in pixels
- additional_
config_ list(string)cmds - Additional CLI configuration commands to apply to this gateway
- bgp_
config map(object) - BGP routing configuration for this gateway. Property key is the BGP session name
- device_
id string - dhcpd_
config object - DHCP server configuration served by this gateway
- dns_
servers list(string) - DNS servers configured for this gateway
- dns_
suffixes list(string) - DNS search suffixes configured for this gateway
- extra_
routes map(object) - Additional IPv4 routes configured on this gateway
- extra_
routes6 map(object) - Additional IPv6 routes configured on this gateway
- gateway_
mgmt object - Management-plane settings for this gateway
- idp_
profiles map(object) - Intrusion detection and prevention profiles configured for this gateway
- image1_
url string - First custom image URL associated with the gateway
- image2_
url string - Second custom image URL associated with the gateway
- image3_
url string - Third custom image URL associated with the gateway
- ip_
configs map(object) - Gateway interface IP configurations by network name
- mac string
- Gateway MAC address used to identify the device
- managed bool
- Whether the device is managed by Mist. Deprecated in favour of mist_configured.
- map_
id string - Map where the device belongs to
- mist_
configured bool - whether the device can be configured by Mist or not. This deprecates
managedfor adopted devices. - model string
- Gateway model reported for the device
- msp_
id string - MSP that manages this gateway, when applicable
- name string
- Friendly display name assigned to the gateway
- networks list(object)
- Layer 3 networks configured for use by this gateway
- notes string
- Free-form administrative notes for this gateway
- ntp_
servers list(string) - NTP servers used by this gateway
- oob_
ip_ objectconfig - Out-of-band management IP configuration for this gateway
- org_
id string - Organization that owns this gateway
- path_
preferences map(object) - Property key is the path name
- port_
config map(object) - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port_
mirroring object - Port mirroring configuration for this gateway
- router_
id string - Auto assigned if not set
- routing_
policies map(object) - Routing policies applied by this gateway
- serial string
- Manufacturer serial number for the gateway
- service_
policies list(object) - Traffic service policies enforced by this gateway
- site_
id string - Site where this gateway is assigned
- ssr_
additional_ list(string)config_ cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel_
configs map(object) - Property key is the tunnel name
- tunnel_
provider_ objectoptions - Provider-specific options for tunnels terminated by this gateway
- type string
- Device type discriminator for gateway records
- url_
filtering_ stringdeny_ msg - When a service policy denies a app_category, what message to show in user's browser
- vars map(string)
- Variable values that override site variables for this gateway
- vrf_
config object - VRF configuration applied to this gateway
- vrf_
instances map(object) - VRF instances configured on this gateway
- x number
- Horizontal map position of the gateway, in pixels
- y number
- Vertical map position of the gateway, in pixels
- additional
Config List<String>Cmds - Additional CLI configuration commands to apply to this gateway
- bgp
Config Map<String,GatewayBgp Config Args> - BGP routing configuration for this gateway. Property key is the BGP session name
- device
Id String - dhcpd
Config GatewayDhcpd Config - DHCP server configuration served by this gateway
- dns
Servers List<String> - DNS servers configured for this gateway
- dns
Suffixes List<String> - DNS search suffixes configured for this gateway
- extra
Routes Map<String,GatewayExtra Routes Args> - Additional IPv4 routes configured on this gateway
- extra
Routes6 Map<String,GatewayExtra Routes6Args> - Additional IPv6 routes configured on this gateway
- gateway
Mgmt GatewayGateway Mgmt - Management-plane settings for this gateway
- idp
Profiles Map<String,GatewayIdp Profiles Args> - Intrusion detection and prevention profiles configured for this gateway
- image1Url String
- First custom image URL associated with the gateway
- image2Url String
- Second custom image URL associated with the gateway
- image3Url String
- Third custom image URL associated with the gateway
- ip
Configs Map<String,GatewayIp Configs Args> - Gateway interface IP configurations by network name
- mac String
- Gateway MAC address used to identify the device
- managed Boolean
- Whether the device is managed by Mist. Deprecated in favour of mist_configured.
- map
Id String - Map where the device belongs to
- mist
Configured Boolean - whether the device can be configured by Mist or not. This deprecates
managedfor adopted devices. - model String
- Gateway model reported for the device
- msp
Id String - MSP that manages this gateway, when applicable
- name String
- Friendly display name assigned to the gateway
- networks
List<Gateway
Network> - Layer 3 networks configured for use by this gateway
- notes String
- Free-form administrative notes for this gateway
- ntp
Servers List<String> - NTP servers used by this gateway
- oob
Ip GatewayConfig Oob Ip Config - Out-of-band management IP configuration for this gateway
- org
Id String - Organization that owns this gateway
- path
Preferences Map<String,GatewayPath Preferences Args> - Property key is the path name
- port
Config Map<String,GatewayPort Config Args> - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port
Mirroring GatewayPort Mirroring - Port mirroring configuration for this gateway
- router
Id String - Auto assigned if not set
- routing
Policies Map<String,GatewayRouting Policies Args> - Routing policies applied by this gateway
- serial String
- Manufacturer serial number for the gateway
- service
Policies List<GatewayService Policy> - Traffic service policies enforced by this gateway
- site
Id String - Site where this gateway is assigned
- ssr
Additional List<String>Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel
Configs Map<String,GatewayTunnel Configs Args> - Property key is the tunnel name
- tunnel
Provider GatewayOptions Tunnel Provider Options - Provider-specific options for tunnels terminated by this gateway
- type String
- Device type discriminator for gateway records
- url
Filtering StringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- vars Map<String,String>
- Variable values that override site variables for this gateway
- vrf
Config GatewayVrf Config - VRF configuration applied to this gateway
- vrf
Instances Map<String,GatewayVrf Instances Args> - VRF instances configured on this gateway
- x Double
- Horizontal map position of the gateway, in pixels
- y Double
- Vertical map position of the gateway, in pixels
- additional
Config string[]Cmds - Additional CLI configuration commands to apply to this gateway
- bgp
Config {[key: string]: GatewayBgp Config Args} - BGP routing configuration for this gateway. Property key is the BGP session name
- device
Id string - dhcpd
Config GatewayDhcpd Config - DHCP server configuration served by this gateway
- dns
Servers string[] - DNS servers configured for this gateway
- dns
Suffixes string[] - DNS search suffixes configured for this gateway
- extra
Routes {[key: string]: GatewayExtra Routes Args} - Additional IPv4 routes configured on this gateway
- extra
Routes6 {[key: string]: GatewayExtra Routes6Args} - Additional IPv6 routes configured on this gateway
- gateway
Mgmt GatewayGateway Mgmt - Management-plane settings for this gateway
- idp
Profiles {[key: string]: GatewayIdp Profiles Args} - Intrusion detection and prevention profiles configured for this gateway
- image1Url string
- First custom image URL associated with the gateway
- image2Url string
- Second custom image URL associated with the gateway
- image3Url string
- Third custom image URL associated with the gateway
- ip
Configs {[key: string]: GatewayIp Configs Args} - Gateway interface IP configurations by network name
- mac string
- Gateway MAC address used to identify the device
- managed boolean
- Whether the device is managed by Mist. Deprecated in favour of mist_configured.
- map
Id string - Map where the device belongs to
- mist
Configured boolean - whether the device can be configured by Mist or not. This deprecates
managedfor adopted devices. - model string
- Gateway model reported for the device
- msp
Id string - MSP that manages this gateway, when applicable
- name string
- Friendly display name assigned to the gateway
- networks
Gateway
Network[] - Layer 3 networks configured for use by this gateway
- notes string
- Free-form administrative notes for this gateway
- ntp
Servers string[] - NTP servers used by this gateway
- oob
Ip GatewayConfig Oob Ip Config - Out-of-band management IP configuration for this gateway
- org
Id string - Organization that owns this gateway
- path
Preferences {[key: string]: GatewayPath Preferences Args} - Property key is the path name
- port
Config {[key: string]: GatewayPort Config Args} - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port
Mirroring GatewayPort Mirroring - Port mirroring configuration for this gateway
- router
Id string - Auto assigned if not set
- routing
Policies {[key: string]: GatewayRouting Policies Args} - Routing policies applied by this gateway
- serial string
- Manufacturer serial number for the gateway
- service
Policies GatewayService Policy[] - Traffic service policies enforced by this gateway
- site
Id string - Site where this gateway is assigned
- ssr
Additional string[]Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel
Configs {[key: string]: GatewayTunnel Configs Args} - Property key is the tunnel name
- tunnel
Provider GatewayOptions Tunnel Provider Options - Provider-specific options for tunnels terminated by this gateway
- type string
- Device type discriminator for gateway records
- url
Filtering stringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- vars {[key: string]: string}
- Variable values that override site variables for this gateway
- vrf
Config GatewayVrf Config - VRF configuration applied to this gateway
- vrf
Instances {[key: string]: GatewayVrf Instances Args} - VRF instances configured on this gateway
- x number
- Horizontal map position of the gateway, in pixels
- y number
- Vertical map position of the gateway, in pixels
- additional_
config_ Sequence[str]cmds - Additional CLI configuration commands to apply to this gateway
- bgp_
config Mapping[str, GatewayBgp Config Args] - BGP routing configuration for this gateway. Property key is the BGP session name
- device_
id str - dhcpd_
config GatewayDhcpd Config Args - DHCP server configuration served by this gateway
- dns_
servers Sequence[str] - DNS servers configured for this gateway
- dns_
suffixes Sequence[str] - DNS search suffixes configured for this gateway
- extra_
routes Mapping[str, GatewayExtra Routes Args] - Additional IPv4 routes configured on this gateway
- extra_
routes6 Mapping[str, GatewayExtra Routes6Args] - Additional IPv6 routes configured on this gateway
- gateway_
mgmt GatewayGateway Mgmt Args - Management-plane settings for this gateway
- idp_
profiles Mapping[str, GatewayIdp Profiles Args] - Intrusion detection and prevention profiles configured for this gateway
- image1_
url str - First custom image URL associated with the gateway
- image2_
url str - Second custom image URL associated with the gateway
- image3_
url str - Third custom image URL associated with the gateway
- ip_
configs Mapping[str, GatewayIp Configs Args] - Gateway interface IP configurations by network name
- mac str
- Gateway MAC address used to identify the device
- managed bool
- Whether the device is managed by Mist. Deprecated in favour of mist_configured.
- map_
id str - Map where the device belongs to
- mist_
configured bool - whether the device can be configured by Mist or not. This deprecates
managedfor adopted devices. - model str
- Gateway model reported for the device
- msp_
id str - MSP that manages this gateway, when applicable
- name str
- Friendly display name assigned to the gateway
- networks
Sequence[Gateway
Network Args] - Layer 3 networks configured for use by this gateway
- notes str
- Free-form administrative notes for this gateway
- ntp_
servers Sequence[str] - NTP servers used by this gateway
- oob_
ip_ Gatewayconfig Oob Ip Config Args - Out-of-band management IP configuration for this gateway
- org_
id str - Organization that owns this gateway
- path_
preferences Mapping[str, GatewayPath Preferences Args] - Property key is the path name
- port_
config Mapping[str, GatewayPort Config Args] - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port_
mirroring GatewayPort Mirroring Args - Port mirroring configuration for this gateway
- router_
id str - Auto assigned if not set
- routing_
policies Mapping[str, GatewayRouting Policies Args] - Routing policies applied by this gateway
- serial str
- Manufacturer serial number for the gateway
- service_
policies Sequence[GatewayService Policy Args] - Traffic service policies enforced by this gateway
- site_
id str - Site where this gateway is assigned
- ssr_
additional_ Sequence[str]config_ cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel_
configs Mapping[str, GatewayTunnel Configs Args] - Property key is the tunnel name
- tunnel_
provider_ Gatewayoptions Tunnel Provider Options Args - Provider-specific options for tunnels terminated by this gateway
- type str
- Device type discriminator for gateway records
- url_
filtering_ strdeny_ msg - When a service policy denies a app_category, what message to show in user's browser
- vars Mapping[str, str]
- Variable values that override site variables for this gateway
- vrf_
config GatewayVrf Config Args - VRF configuration applied to this gateway
- vrf_
instances Mapping[str, GatewayVrf Instances Args] - VRF instances configured on this gateway
- x float
- Horizontal map position of the gateway, in pixels
- y float
- Vertical map position of the gateway, in pixels
- additional
Config List<String>Cmds - Additional CLI configuration commands to apply to this gateway
- bgp
Config Map<Property Map> - BGP routing configuration for this gateway. Property key is the BGP session name
- device
Id String - dhcpd
Config Property Map - DHCP server configuration served by this gateway
- dns
Servers List<String> - DNS servers configured for this gateway
- dns
Suffixes List<String> - DNS search suffixes configured for this gateway
- extra
Routes Map<Property Map> - Additional IPv4 routes configured on this gateway
- extra
Routes6 Map<Property Map> - Additional IPv6 routes configured on this gateway
- gateway
Mgmt Property Map - Management-plane settings for this gateway
- idp
Profiles Map<Property Map> - Intrusion detection and prevention profiles configured for this gateway
- image1Url String
- First custom image URL associated with the gateway
- image2Url String
- Second custom image URL associated with the gateway
- image3Url String
- Third custom image URL associated with the gateway
- ip
Configs Map<Property Map> - Gateway interface IP configurations by network name
- mac String
- Gateway MAC address used to identify the device
- managed Boolean
- Whether the device is managed by Mist. Deprecated in favour of mist_configured.
- map
Id String - Map where the device belongs to
- mist
Configured Boolean - whether the device can be configured by Mist or not. This deprecates
managedfor adopted devices. - model String
- Gateway model reported for the device
- msp
Id String - MSP that manages this gateway, when applicable
- name String
- Friendly display name assigned to the gateway
- networks List<Property Map>
- Layer 3 networks configured for use by this gateway
- notes String
- Free-form administrative notes for this gateway
- ntp
Servers List<String> - NTP servers used by this gateway
- oob
Ip Property MapConfig - Out-of-band management IP configuration for this gateway
- org
Id String - Organization that owns this gateway
- path
Preferences Map<Property Map> - Property key is the path name
- port
Config Map<Property Map> - Property key is the port name or range (e.g. "ge-0/0/0-10")
- port
Mirroring Property Map - Port mirroring configuration for this gateway
- router
Id String - Auto assigned if not set
- routing
Policies Map<Property Map> - Routing policies applied by this gateway
- serial String
- Manufacturer serial number for the gateway
- service
Policies List<Property Map> - Traffic service policies enforced by this gateway
- site
Id String - Site where this gateway is assigned
- ssr
Additional List<String>Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel
Configs Map<Property Map> - Property key is the tunnel name
- tunnel
Provider Property MapOptions - Provider-specific options for tunnels terminated by this gateway
- type String
- Device type discriminator for gateway records
- url
Filtering StringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- vars Map<String>
- Variable values that override site variables for this gateway
- vrf
Config Property Map - VRF configuration applied to this gateway
- vrf
Instances Map<Property Map> - VRF instances configured on this gateway
- x Number
- Horizontal map position of the gateway, in pixels
- y Number
- Vertical map position of the gateway, in pixels
Supporting Types
GatewayBgpConfig, GatewayBgpConfigArgs
- Via string
- Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
- Auth
Key string - Optional if
via==lan,via==tunnelorvia==wan - Bfd
Minimum intInterval - Optional if
via==lan,via==tunnelorvia==wan, when bfdMultiplier is configured alone. Default:- 1000 if
type==external - 350
type==internal
- 1000 if
- Bfd
Multiplier int - Optional if
via==lan,via==tunnelorvia==wan, when bfdMinimumIntervalIsConfigured alone - Disable
Bfd bool - Optional if
via==lan,via==tunnelorvia==wan. BFD provides faster path failure detection and is enabled by default - Export string
- Routing policy applied to routes exported by this BGP session
- Export
Policy string - Default export policies if no per-neighbor policies defined
- Extended
V4Nexthop bool - Optional if
via==lan,via==tunnelorvia==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this - Graceful
Restart intTime - Optional if
via==lan,via==tunnelorvia==wan.0means disable - Hold
Time int - Optional if
via==lan,via==tunnelorvia==wan. Default is 90. - Import string
- Routing policy applied to routes imported by this BGP session
- Import
Policy string - Optional if
via==lan,via==tunnelorvia==wan. Default import policies if no per-neighbor policies defined - Local
As string - Required if
via==lan,via==tunnelorvia==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - Neighbor
As string - Neighbor AS. If
type==internal, must be equal tolocalAs. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - Neighbors
Dictionary<string, Pulumi.
Juniper Mist. Device. Inputs. Gateway Bgp Config Neighbors> - Required if
via==lan,via==tunnelorvia==wan. If per-neighbor as is desired. Property key is the neighbor address - Networks List<string>
- Optional if
via==lan; networks where BGP neighbors can connect to or from - No
Private boolAs - Optional if
via==lan,via==tunnelorvia==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor - No
Readvertise boolTo Overlay - Optional if
via==lan,via==tunnelorvia==wan. By default, we'll re-advertise all learned BGP routers toward overlay - Tunnel
Name string - Optional if
via==tunnel; tunnel name used for this BGP session - Type string
- Required if
via==lan,via==tunnelorvia==wan; BGP session type, internal or external - Vpn
Name string - Optional if
via==vpn; VPN name used for this BGP session - Wan
Name string - Optional if
via==wan; WAN interface name used for this BGP session
- Via string
- Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
- Auth
Key string - Optional if
via==lan,via==tunnelorvia==wan - Bfd
Minimum intInterval - Optional if
via==lan,via==tunnelorvia==wan, when bfdMultiplier is configured alone. Default:- 1000 if
type==external - 350
type==internal
- 1000 if
- Bfd
Multiplier int - Optional if
via==lan,via==tunnelorvia==wan, when bfdMinimumIntervalIsConfigured alone - Disable
Bfd bool - Optional if
via==lan,via==tunnelorvia==wan. BFD provides faster path failure detection and is enabled by default - Export string
- Routing policy applied to routes exported by this BGP session
- Export
Policy string - Default export policies if no per-neighbor policies defined
- Extended
V4Nexthop bool - Optional if
via==lan,via==tunnelorvia==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this - Graceful
Restart intTime - Optional if
via==lan,via==tunnelorvia==wan.0means disable - Hold
Time int - Optional if
via==lan,via==tunnelorvia==wan. Default is 90. - Import string
- Routing policy applied to routes imported by this BGP session
- Import
Policy string - Optional if
via==lan,via==tunnelorvia==wan. Default import policies if no per-neighbor policies defined - Local
As string - Required if
via==lan,via==tunnelorvia==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - Neighbor
As string - Neighbor AS. If
type==internal, must be equal tolocalAs. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - Neighbors
map[string]Gateway
Bgp Config Neighbors - Required if
via==lan,via==tunnelorvia==wan. If per-neighbor as is desired. Property key is the neighbor address - Networks []string
- Optional if
via==lan; networks where BGP neighbors can connect to or from - No
Private boolAs - Optional if
via==lan,via==tunnelorvia==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor - No
Readvertise boolTo Overlay - Optional if
via==lan,via==tunnelorvia==wan. By default, we'll re-advertise all learned BGP routers toward overlay - Tunnel
Name string - Optional if
via==tunnel; tunnel name used for this BGP session - Type string
- Required if
via==lan,via==tunnelorvia==wan; BGP session type, internal or external - Vpn
Name string - Optional if
via==vpn; VPN name used for this BGP session - Wan
Name string - Optional if
via==wan; WAN interface name used for this BGP session
- via string
- Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
- auth_
key string - Optional if
via==lan,via==tunnelorvia==wan - bfd_
minimum_ numberinterval - Optional if
via==lan,via==tunnelorvia==wan, when bfdMultiplier is configured alone. Default:- 1000 if
type==external - 350
type==internal
- 1000 if
- bfd_
multiplier number - Optional if
via==lan,via==tunnelorvia==wan, when bfdMinimumIntervalIsConfigured alone - disable_
bfd bool - Optional if
via==lan,via==tunnelorvia==wan. BFD provides faster path failure detection and is enabled by default - export string
- Routing policy applied to routes exported by this BGP session
- export_
policy string - Default export policies if no per-neighbor policies defined
- extended_
v4_ boolnexthop - Optional if
via==lan,via==tunnelorvia==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this - graceful_
restart_ numbertime - Optional if
via==lan,via==tunnelorvia==wan.0means disable - hold_
time number - Optional if
via==lan,via==tunnelorvia==wan. Default is 90. - import string
- Routing policy applied to routes imported by this BGP session
- import_
policy string - Optional if
via==lan,via==tunnelorvia==wan. Default import policies if no per-neighbor policies defined - local_
as string - Required if
via==lan,via==tunnelorvia==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbor_
as string - Neighbor AS. If
type==internal, must be equal tolocalAs. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbors map(object)
- Required if
via==lan,via==tunnelorvia==wan. If per-neighbor as is desired. Property key is the neighbor address - networks list(string)
- Optional if
via==lan; networks where BGP neighbors can connect to or from - no_
private_ boolas - Optional if
via==lan,via==tunnelorvia==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor - no_
readvertise_ boolto_ overlay - Optional if
via==lan,via==tunnelorvia==wan. By default, we'll re-advertise all learned BGP routers toward overlay - tunnel_
name string - Optional if
via==tunnel; tunnel name used for this BGP session - type string
- Required if
via==lan,via==tunnelorvia==wan; BGP session type, internal or external - vpn_
name string - Optional if
via==vpn; VPN name used for this BGP session - wan_
name string - Optional if
via==wan; WAN interface name used for this BGP session
- via String
- Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
- auth
Key String - Optional if
via==lan,via==tunnelorvia==wan - bfd
Minimum IntegerInterval - Optional if
via==lan,via==tunnelorvia==wan, when bfdMultiplier is configured alone. Default:- 1000 if
type==external - 350
type==internal
- 1000 if
- bfd
Multiplier Integer - Optional if
via==lan,via==tunnelorvia==wan, when bfdMinimumIntervalIsConfigured alone - disable
Bfd Boolean - Optional if
via==lan,via==tunnelorvia==wan. BFD provides faster path failure detection and is enabled by default - export String
- Routing policy applied to routes exported by this BGP session
- export
Policy String - Default export policies if no per-neighbor policies defined
- extended
V4Nexthop Boolean - Optional if
via==lan,via==tunnelorvia==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this - graceful
Restart IntegerTime - Optional if
via==lan,via==tunnelorvia==wan.0means disable - hold
Time Integer - Optional if
via==lan,via==tunnelorvia==wan. Default is 90. - import
Policy String - Optional if
via==lan,via==tunnelorvia==wan. Default import policies if no per-neighbor policies defined - import_ String
- Routing policy applied to routes imported by this BGP session
- local
As String - Required if
via==lan,via==tunnelorvia==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbor
As String - Neighbor AS. If
type==internal, must be equal tolocalAs. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbors
Map<String,Gateway
Bgp Config Neighbors> - Required if
via==lan,via==tunnelorvia==wan. If per-neighbor as is desired. Property key is the neighbor address - networks List<String>
- Optional if
via==lan; networks where BGP neighbors can connect to or from - no
Private BooleanAs - Optional if
via==lan,via==tunnelorvia==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor - no
Readvertise BooleanTo Overlay - Optional if
via==lan,via==tunnelorvia==wan. By default, we'll re-advertise all learned BGP routers toward overlay - tunnel
Name String - Optional if
via==tunnel; tunnel name used for this BGP session - type String
- Required if
via==lan,via==tunnelorvia==wan; BGP session type, internal or external - vpn
Name String - Optional if
via==vpn; VPN name used for this BGP session - wan
Name String - Optional if
via==wan; WAN interface name used for this BGP session
- via string
- Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
- auth
Key string - Optional if
via==lan,via==tunnelorvia==wan - bfd
Minimum numberInterval - Optional if
via==lan,via==tunnelorvia==wan, when bfdMultiplier is configured alone. Default:- 1000 if
type==external - 350
type==internal
- 1000 if
- bfd
Multiplier number - Optional if
via==lan,via==tunnelorvia==wan, when bfdMinimumIntervalIsConfigured alone - disable
Bfd boolean - Optional if
via==lan,via==tunnelorvia==wan. BFD provides faster path failure detection and is enabled by default - export string
- Routing policy applied to routes exported by this BGP session
- export
Policy string - Default export policies if no per-neighbor policies defined
- extended
V4Nexthop boolean - Optional if
via==lan,via==tunnelorvia==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this - graceful
Restart numberTime - Optional if
via==lan,via==tunnelorvia==wan.0means disable - hold
Time number - Optional if
via==lan,via==tunnelorvia==wan. Default is 90. - import string
- Routing policy applied to routes imported by this BGP session
- import
Policy string - Optional if
via==lan,via==tunnelorvia==wan. Default import policies if no per-neighbor policies defined - local
As string - Required if
via==lan,via==tunnelorvia==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbor
As string - Neighbor AS. If
type==internal, must be equal tolocalAs. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbors
{[key: string]: Gateway
Bgp Config Neighbors} - Required if
via==lan,via==tunnelorvia==wan. If per-neighbor as is desired. Property key is the neighbor address - networks string[]
- Optional if
via==lan; networks where BGP neighbors can connect to or from - no
Private booleanAs - Optional if
via==lan,via==tunnelorvia==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor - no
Readvertise booleanTo Overlay - Optional if
via==lan,via==tunnelorvia==wan. By default, we'll re-advertise all learned BGP routers toward overlay - tunnel
Name string - Optional if
via==tunnel; tunnel name used for this BGP session - type string
- Required if
via==lan,via==tunnelorvia==wan; BGP session type, internal or external - vpn
Name string - Optional if
via==vpn; VPN name used for this BGP session - wan
Name string - Optional if
via==wan; WAN interface name used for this BGP session
- via str
- Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
- auth_
key str - Optional if
via==lan,via==tunnelorvia==wan - bfd_
minimum_ intinterval - Optional if
via==lan,via==tunnelorvia==wan, when bfdMultiplier is configured alone. Default:- 1000 if
type==external - 350
type==internal
- 1000 if
- bfd_
multiplier int - Optional if
via==lan,via==tunnelorvia==wan, when bfdMinimumIntervalIsConfigured alone - disable_
bfd bool - Optional if
via==lan,via==tunnelorvia==wan. BFD provides faster path failure detection and is enabled by default - export str
- Routing policy applied to routes exported by this BGP session
- export_
policy str - Default export policies if no per-neighbor policies defined
- extended_
v4_ boolnexthop - Optional if
via==lan,via==tunnelorvia==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this - graceful_
restart_ inttime - Optional if
via==lan,via==tunnelorvia==wan.0means disable - hold_
time int - Optional if
via==lan,via==tunnelorvia==wan. Default is 90. - import_ str
- Routing policy applied to routes imported by this BGP session
- import_
policy str - Optional if
via==lan,via==tunnelorvia==wan. Default import policies if no per-neighbor policies defined - local_
as str - Required if
via==lan,via==tunnelorvia==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbor_
as str - Neighbor AS. If
type==internal, must be equal tolocalAs. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbors
Mapping[str, Gateway
Bgp Config Neighbors] - Required if
via==lan,via==tunnelorvia==wan. If per-neighbor as is desired. Property key is the neighbor address - networks Sequence[str]
- Optional if
via==lan; networks where BGP neighbors can connect to or from - no_
private_ boolas - Optional if
via==lan,via==tunnelorvia==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor - no_
readvertise_ boolto_ overlay - Optional if
via==lan,via==tunnelorvia==wan. By default, we'll re-advertise all learned BGP routers toward overlay - tunnel_
name str - Optional if
via==tunnel; tunnel name used for this BGP session - type str
- Required if
via==lan,via==tunnelorvia==wan; BGP session type, internal or external - vpn_
name str - Optional if
via==vpn; VPN name used for this BGP session - wan_
name str - Optional if
via==wan; WAN interface name used for this BGP session
- via String
- Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
- auth
Key String - Optional if
via==lan,via==tunnelorvia==wan - bfd
Minimum NumberInterval - Optional if
via==lan,via==tunnelorvia==wan, when bfdMultiplier is configured alone. Default:- 1000 if
type==external - 350
type==internal
- 1000 if
- bfd
Multiplier Number - Optional if
via==lan,via==tunnelorvia==wan, when bfdMinimumIntervalIsConfigured alone - disable
Bfd Boolean - Optional if
via==lan,via==tunnelorvia==wan. BFD provides faster path failure detection and is enabled by default - export String
- Routing policy applied to routes exported by this BGP session
- export
Policy String - Default export policies if no per-neighbor policies defined
- extended
V4Nexthop Boolean - Optional if
via==lan,via==tunnelorvia==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this - graceful
Restart NumberTime - Optional if
via==lan,via==tunnelorvia==wan.0means disable - hold
Time Number - Optional if
via==lan,via==tunnelorvia==wan. Default is 90. - import String
- Routing policy applied to routes imported by this BGP session
- import
Policy String - Optional if
via==lan,via==tunnelorvia==wan. Default import policies if no per-neighbor policies defined - local
As String - Required if
via==lan,via==tunnelorvia==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbor
As String - Neighbor AS. If
type==internal, must be equal tolocalAs. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbors Map<Property Map>
- Required if
via==lan,via==tunnelorvia==wan. If per-neighbor as is desired. Property key is the neighbor address - networks List<String>
- Optional if
via==lan; networks where BGP neighbors can connect to or from - no
Private BooleanAs - Optional if
via==lan,via==tunnelorvia==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor - no
Readvertise BooleanTo Overlay - Optional if
via==lan,via==tunnelorvia==wan. By default, we'll re-advertise all learned BGP routers toward overlay - tunnel
Name String - Optional if
via==tunnel; tunnel name used for this BGP session - type String
- Required if
via==lan,via==tunnelorvia==wan; BGP session type, internal or external - vpn
Name String - Optional if
via==vpn; VPN name used for this BGP session - wan
Name String - Optional if
via==wan; WAN interface name used for this BGP session
GatewayBgpConfigNeighbors, GatewayBgpConfigNeighborsArgs
- Neighbor
As string - Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g.
{{as_variable}}) - Disabled bool
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- Export
Policy string - Export policy applied only to this BGP neighbor
- Hold
Time int - BGP hold time for this neighbor, in seconds
- Import
Policy string - Import policy applied only to this BGP neighbor
- Multihop
Ttl int - Assuming BGP neighbor is directly connected
- Tunnel
Via string - If
via==tunnel, primary or secondary tunnel associated with this BGP neighbor
- Neighbor
As string - Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g.
{{as_variable}}) - Disabled bool
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- Export
Policy string - Export policy applied only to this BGP neighbor
- Hold
Time int - BGP hold time for this neighbor, in seconds
- Import
Policy string - Import policy applied only to this BGP neighbor
- Multihop
Ttl int - Assuming BGP neighbor is directly connected
- Tunnel
Via string - If
via==tunnel, primary or secondary tunnel associated with this BGP neighbor
- neighbor_
as string - Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g.
{{as_variable}}) - disabled bool
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- export_
policy string - Export policy applied only to this BGP neighbor
- hold_
time number - BGP hold time for this neighbor, in seconds
- import_
policy string - Import policy applied only to this BGP neighbor
- multihop_
ttl number - Assuming BGP neighbor is directly connected
- tunnel_
via string - If
via==tunnel, primary or secondary tunnel associated with this BGP neighbor
- neighbor
As String - Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g.
{{as_variable}}) - disabled Boolean
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- export
Policy String - Export policy applied only to this BGP neighbor
- hold
Time Integer - BGP hold time for this neighbor, in seconds
- import
Policy String - Import policy applied only to this BGP neighbor
- multihop
Ttl Integer - Assuming BGP neighbor is directly connected
- tunnel
Via String - If
via==tunnel, primary or secondary tunnel associated with this BGP neighbor
- neighbor
As string - Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g.
{{as_variable}}) - disabled boolean
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- export
Policy string - Export policy applied only to this BGP neighbor
- hold
Time number - BGP hold time for this neighbor, in seconds
- import
Policy string - Import policy applied only to this BGP neighbor
- multihop
Ttl number - Assuming BGP neighbor is directly connected
- tunnel
Via string - If
via==tunnel, primary or secondary tunnel associated with this BGP neighbor
- neighbor_
as str - Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g.
{{as_variable}}) - disabled bool
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- export_
policy str - Export policy applied only to this BGP neighbor
- hold_
time int - BGP hold time for this neighbor, in seconds
- import_
policy str - Import policy applied only to this BGP neighbor
- multihop_
ttl int - Assuming BGP neighbor is directly connected
- tunnel_
via str - If
via==tunnel, primary or secondary tunnel associated with this BGP neighbor
- neighbor
As String - Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g.
{{as_variable}}) - disabled Boolean
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- export
Policy String - Export policy applied only to this BGP neighbor
- hold
Time Number - BGP hold time for this neighbor, in seconds
- import
Policy String - Import policy applied only to this BGP neighbor
- multihop
Ttl Number - Assuming BGP neighbor is directly connected
- tunnel
Via String - If
via==tunnel, primary or secondary tunnel associated with this BGP neighbor
GatewayDhcpdConfig, GatewayDhcpdConfigArgs
GatewayDhcpdConfigConfig, GatewayDhcpdConfigConfigArgs
- Dns
Servers List<string> - If
type==localortype6==local, DNS servers advertised to DHCP clients - Dns
Suffixes List<string> - If
type==localortype6==local, DNS search suffixes advertised to DHCP clients - Fixed
Bindings Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Dhcpd Config Config Fixed Bindings> - If
type==localortype6==local, fixed client bindings for local DHCP service - Gateway string
- If
type==local- optional,ipwill be used if not provided - Ip6End string
- If
type6==local, ending IPv6 address for the DHCP lease pool - Ip6Start string
- If
type6==local, starting IPv6 address for the DHCP lease pool - Ip
End string - If
type==local, ending IPv4 address for the DHCP lease pool - Ip
Start string - If
type==local, starting IPv4 address for the DHCP lease pool - Lease
Time int - In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- Options
Dictionary<string, Pulumi.
Juniper Mist. Device. Inputs. Gateway Dhcpd Config Config Options> - If
type==localortype6==local, custom DHCP options advertised to clients - Server
Id boolOverride serverIdOverride==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- Servers List<string>
- If
type==relay, upstream IPv4 DHCP servers - Serversv6s List<string>
- If
type6==relay, upstream IPv6 DHCP servers - Type string
- IPv4 DHCP mode for this network
- Type6 string
- IPv6 DHCP mode for this network
- Vendor
Encapsulated Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Dhcpd Config Config Vendor Encapsulated> - If
type==localortype6==local, vendor-encapsulated DHCP options advertised to clients
- Dns
Servers []string - If
type==localortype6==local, DNS servers advertised to DHCP clients - Dns
Suffixes []string - If
type==localortype6==local, DNS search suffixes advertised to DHCP clients - Fixed
Bindings map[string]GatewayDhcpd Config Config Fixed Bindings - If
type==localortype6==local, fixed client bindings for local DHCP service - Gateway string
- If
type==local- optional,ipwill be used if not provided - Ip6End string
- If
type6==local, ending IPv6 address for the DHCP lease pool - Ip6Start string
- If
type6==local, starting IPv6 address for the DHCP lease pool - Ip
End string - If
type==local, ending IPv4 address for the DHCP lease pool - Ip
Start string - If
type==local, starting IPv4 address for the DHCP lease pool - Lease
Time int - In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- Options
map[string]Gateway
Dhcpd Config Config Options - If
type==localortype6==local, custom DHCP options advertised to clients - Server
Id boolOverride serverIdOverride==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- Servers []string
- If
type==relay, upstream IPv4 DHCP servers - Serversv6s []string
- If
type6==relay, upstream IPv6 DHCP servers - Type string
- IPv4 DHCP mode for this network
- Type6 string
- IPv6 DHCP mode for this network
- Vendor
Encapsulated map[string]GatewayDhcpd Config Config Vendor Encapsulated - If
type==localortype6==local, vendor-encapsulated DHCP options advertised to clients
- dns_
servers list(string) - If
type==localortype6==local, DNS servers advertised to DHCP clients - dns_
suffixes list(string) - If
type==localortype6==local, DNS search suffixes advertised to DHCP clients - fixed_
bindings map(object) - If
type==localortype6==local, fixed client bindings for local DHCP service - gateway string
- If
type==local- optional,ipwill be used if not provided - ip6_
end string - If
type6==local, ending IPv6 address for the DHCP lease pool - ip6_
start string - If
type6==local, starting IPv6 address for the DHCP lease pool - ip_
end string - If
type==local, ending IPv4 address for the DHCP lease pool - ip_
start string - If
type==local, starting IPv4 address for the DHCP lease pool - lease_
time number - In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options map(object)
- If
type==localortype6==local, custom DHCP options advertised to clients - server_
id_ booloverride serverIdOverride==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers list(string)
- If
type==relay, upstream IPv4 DHCP servers - serversv6s list(string)
- If
type6==relay, upstream IPv6 DHCP servers - type string
- IPv4 DHCP mode for this network
- type6 string
- IPv6 DHCP mode for this network
- vendor_
encapsulated map(object) - If
type==localortype6==local, vendor-encapsulated DHCP options advertised to clients
- dns
Servers List<String> - If
type==localortype6==local, DNS servers advertised to DHCP clients - dns
Suffixes List<String> - If
type==localortype6==local, DNS search suffixes advertised to DHCP clients - fixed
Bindings Map<String,GatewayDhcpd Config Config Fixed Bindings> - If
type==localortype6==local, fixed client bindings for local DHCP service - gateway String
- If
type==local- optional,ipwill be used if not provided - ip6End String
- If
type6==local, ending IPv6 address for the DHCP lease pool - ip6Start String
- If
type6==local, starting IPv6 address for the DHCP lease pool - ip
End String - If
type==local, ending IPv4 address for the DHCP lease pool - ip
Start String - If
type==local, starting IPv4 address for the DHCP lease pool - lease
Time Integer - In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options
Map<String,Gateway
Dhcpd Config Config Options> - If
type==localortype6==local, custom DHCP options advertised to clients - server
Id BooleanOverride serverIdOverride==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers List<String>
- If
type==relay, upstream IPv4 DHCP servers - serversv6s List<String>
- If
type6==relay, upstream IPv6 DHCP servers - type String
- IPv4 DHCP mode for this network
- type6 String
- IPv6 DHCP mode for this network
- vendor
Encapsulated Map<String,GatewayDhcpd Config Config Vendor Encapsulated> - If
type==localortype6==local, vendor-encapsulated DHCP options advertised to clients
- dns
Servers string[] - If
type==localortype6==local, DNS servers advertised to DHCP clients - dns
Suffixes string[] - If
type==localortype6==local, DNS search suffixes advertised to DHCP clients - fixed
Bindings {[key: string]: GatewayDhcpd Config Config Fixed Bindings} - If
type==localortype6==local, fixed client bindings for local DHCP service - gateway string
- If
type==local- optional,ipwill be used if not provided - ip6End string
- If
type6==local, ending IPv6 address for the DHCP lease pool - ip6Start string
- If
type6==local, starting IPv6 address for the DHCP lease pool - ip
End string - If
type==local, ending IPv4 address for the DHCP lease pool - ip
Start string - If
type==local, starting IPv4 address for the DHCP lease pool - lease
Time number - In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options
{[key: string]: Gateway
Dhcpd Config Config Options} - If
type==localortype6==local, custom DHCP options advertised to clients - server
Id booleanOverride serverIdOverride==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers string[]
- If
type==relay, upstream IPv4 DHCP servers - serversv6s string[]
- If
type6==relay, upstream IPv6 DHCP servers - type string
- IPv4 DHCP mode for this network
- type6 string
- IPv6 DHCP mode for this network
- vendor
Encapsulated {[key: string]: GatewayDhcpd Config Config Vendor Encapsulated} - If
type==localortype6==local, vendor-encapsulated DHCP options advertised to clients
- dns_
servers Sequence[str] - If
type==localortype6==local, DNS servers advertised to DHCP clients - dns_
suffixes Sequence[str] - If
type==localortype6==local, DNS search suffixes advertised to DHCP clients - fixed_
bindings Mapping[str, GatewayDhcpd Config Config Fixed Bindings] - If
type==localortype6==local, fixed client bindings for local DHCP service - gateway str
- If
type==local- optional,ipwill be used if not provided - ip6_
end str - If
type6==local, ending IPv6 address for the DHCP lease pool - ip6_
start str - If
type6==local, starting IPv6 address for the DHCP lease pool - ip_
end str - If
type==local, ending IPv4 address for the DHCP lease pool - ip_
start str - If
type==local, starting IPv4 address for the DHCP lease pool - lease_
time int - In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options
Mapping[str, Gateway
Dhcpd Config Config Options] - If
type==localortype6==local, custom DHCP options advertised to clients - server_
id_ booloverride serverIdOverride==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers Sequence[str]
- If
type==relay, upstream IPv4 DHCP servers - serversv6s Sequence[str]
- If
type6==relay, upstream IPv6 DHCP servers - type str
- IPv4 DHCP mode for this network
- type6 str
- IPv6 DHCP mode for this network
- vendor_
encapsulated Mapping[str, GatewayDhcpd Config Config Vendor Encapsulated] - If
type==localortype6==local, vendor-encapsulated DHCP options advertised to clients
- dns
Servers List<String> - If
type==localortype6==local, DNS servers advertised to DHCP clients - dns
Suffixes List<String> - If
type==localortype6==local, DNS search suffixes advertised to DHCP clients - fixed
Bindings Map<Property Map> - If
type==localortype6==local, fixed client bindings for local DHCP service - gateway String
- If
type==local- optional,ipwill be used if not provided - ip6End String
- If
type6==local, ending IPv6 address for the DHCP lease pool - ip6Start String
- If
type6==local, starting IPv6 address for the DHCP lease pool - ip
End String - If
type==local, ending IPv4 address for the DHCP lease pool - ip
Start String - If
type==local, starting IPv4 address for the DHCP lease pool - lease
Time Number - In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options Map<Property Map>
- If
type==localortype6==local, custom DHCP options advertised to clients - server
Id BooleanOverride serverIdOverride==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers List<String>
- If
type==relay, upstream IPv4 DHCP servers - serversv6s List<String>
- If
type6==relay, upstream IPv6 DHCP servers - type String
- IPv4 DHCP mode for this network
- type6 String
- IPv6 DHCP mode for this network
- vendor
Encapsulated Map<Property Map> - If
type==localortype6==local, vendor-encapsulated DHCP options advertised to clients
GatewayDhcpdConfigConfigFixedBindings, GatewayDhcpdConfigConfigFixedBindingsArgs
GatewayDhcpdConfigConfigOptions, GatewayDhcpdConfigConfigOptionsArgs
GatewayDhcpdConfigConfigVendorEncapsulated, GatewayDhcpdConfigConfigVendorEncapsulatedArgs
GatewayExtraRoutes, GatewayExtraRoutesArgs
- Via string
- Next-hop IPv4 address for the gateway extra route
- Via string
- Next-hop IPv4 address for the gateway extra route
- via string
- Next-hop IPv4 address for the gateway extra route
- via String
- Next-hop IPv4 address for the gateway extra route
- via string
- Next-hop IPv4 address for the gateway extra route
- via str
- Next-hop IPv4 address for the gateway extra route
- via String
- Next-hop IPv4 address for the gateway extra route
GatewayExtraRoutes6, GatewayExtraRoutes6Args
- Via string
- Next-hop IPv6 address for the gateway extra route
- Via string
- Next-hop IPv6 address for the gateway extra route
- via string
- Next-hop IPv6 address for the gateway extra route
- via String
- Next-hop IPv6 address for the gateway extra route
- via string
- Next-hop IPv6 address for the gateway extra route
- via str
- Next-hop IPv6 address for the gateway extra route
- via String
- Next-hop IPv6 address for the gateway extra route
GatewayGatewayMgmt, GatewayGatewayMgmtArgs
- Admin
Sshkeys List<string> - SSR-only SSH public keys for administrative access
- App
Probing Pulumi.Juniper Mist. Device. Inputs. Gateway Gateway Mgmt App Probing - Application probing configuration for gateway monitoring
- App
Usage bool - Consumes uplink bandwidth, requires WA license
- Auto
Signature Pulumi.Update Juniper Mist. Device. Inputs. Gateway Gateway Mgmt Auto Signature Update - Schedule for automatic security signature updates
- Config
Revert intTimer - Rollback timer for commit confirmed
- Disable
Console bool - For SSR and SRX, disable console port
- Disable
Oob bool - For SSR and SRX, disable management interface
- Disable
Usb bool - For SSR and SRX, disable usb interface
- Fips
Enabled bool - Whether FIPS mode is enabled on the gateway
- Probe
Hosts List<string> - IPv4 probe targets used for gateway connectivity checks
- Probe
Hostsv6s List<string> - IPv6 probe targets used for gateway connectivity checks
- Protect
Re Pulumi.Juniper Mist. Device. Inputs. Gateway Gateway Mgmt Protect Re - Control-plane protection settings for the gateway
- Root
Password string - SRX only. Root password for local gateway access
- Security
Log stringSource Address - IPv4 source address used for gateway security log traffic
- Security
Log stringSource Interface - Source interface used for gateway security log traffic
- Admin
Sshkeys []string - SSR-only SSH public keys for administrative access
- App
Probing GatewayGateway Mgmt App Probing - Application probing configuration for gateway monitoring
- App
Usage bool - Consumes uplink bandwidth, requires WA license
- Auto
Signature GatewayUpdate Gateway Mgmt Auto Signature Update - Schedule for automatic security signature updates
- Config
Revert intTimer - Rollback timer for commit confirmed
- Disable
Console bool - For SSR and SRX, disable console port
- Disable
Oob bool - For SSR and SRX, disable management interface
- Disable
Usb bool - For SSR and SRX, disable usb interface
- Fips
Enabled bool - Whether FIPS mode is enabled on the gateway
- Probe
Hosts []string - IPv4 probe targets used for gateway connectivity checks
- Probe
Hostsv6s []string - IPv6 probe targets used for gateway connectivity checks
- Protect
Re GatewayGateway Mgmt Protect Re - Control-plane protection settings for the gateway
- Root
Password string - SRX only. Root password for local gateway access
- Security
Log stringSource Address - IPv4 source address used for gateway security log traffic
- Security
Log stringSource Interface - Source interface used for gateway security log traffic
- admin_
sshkeys list(string) - SSR-only SSH public keys for administrative access
- app_
probing object - Application probing configuration for gateway monitoring
- app_
usage bool - Consumes uplink bandwidth, requires WA license
- auto_
signature_ objectupdate - Schedule for automatic security signature updates
- config_
revert_ numbertimer - Rollback timer for commit confirmed
- disable_
console bool - For SSR and SRX, disable console port
- disable_
oob bool - For SSR and SRX, disable management interface
- disable_
usb bool - For SSR and SRX, disable usb interface
- fips_
enabled bool - Whether FIPS mode is enabled on the gateway
- probe_
hosts list(string) - IPv4 probe targets used for gateway connectivity checks
- probe_
hostsv6s list(string) - IPv6 probe targets used for gateway connectivity checks
- protect_
re object - Control-plane protection settings for the gateway
- root_
password string - SRX only. Root password for local gateway access
- security_
log_ stringsource_ address - IPv4 source address used for gateway security log traffic
- security_
log_ stringsource_ interface - Source interface used for gateway security log traffic
- admin
Sshkeys List<String> - SSR-only SSH public keys for administrative access
- app
Probing GatewayGateway Mgmt App Probing - Application probing configuration for gateway monitoring
- app
Usage Boolean - Consumes uplink bandwidth, requires WA license
- auto
Signature GatewayUpdate Gateway Mgmt Auto Signature Update - Schedule for automatic security signature updates
- config
Revert IntegerTimer - Rollback timer for commit confirmed
- disable
Console Boolean - For SSR and SRX, disable console port
- disable
Oob Boolean - For SSR and SRX, disable management interface
- disable
Usb Boolean - For SSR and SRX, disable usb interface
- fips
Enabled Boolean - Whether FIPS mode is enabled on the gateway
- probe
Hosts List<String> - IPv4 probe targets used for gateway connectivity checks
- probe
Hostsv6s List<String> - IPv6 probe targets used for gateway connectivity checks
- protect
Re GatewayGateway Mgmt Protect Re - Control-plane protection settings for the gateway
- root
Password String - SRX only. Root password for local gateway access
- security
Log StringSource Address - IPv4 source address used for gateway security log traffic
- security
Log StringSource Interface - Source interface used for gateway security log traffic
- admin
Sshkeys string[] - SSR-only SSH public keys for administrative access
- app
Probing GatewayGateway Mgmt App Probing - Application probing configuration for gateway monitoring
- app
Usage boolean - Consumes uplink bandwidth, requires WA license
- auto
Signature GatewayUpdate Gateway Mgmt Auto Signature Update - Schedule for automatic security signature updates
- config
Revert numberTimer - Rollback timer for commit confirmed
- disable
Console boolean - For SSR and SRX, disable console port
- disable
Oob boolean - For SSR and SRX, disable management interface
- disable
Usb boolean - For SSR and SRX, disable usb interface
- fips
Enabled boolean - Whether FIPS mode is enabled on the gateway
- probe
Hosts string[] - IPv4 probe targets used for gateway connectivity checks
- probe
Hostsv6s string[] - IPv6 probe targets used for gateway connectivity checks
- protect
Re GatewayGateway Mgmt Protect Re - Control-plane protection settings for the gateway
- root
Password string - SRX only. Root password for local gateway access
- security
Log stringSource Address - IPv4 source address used for gateway security log traffic
- security
Log stringSource Interface - Source interface used for gateway security log traffic
- admin_
sshkeys Sequence[str] - SSR-only SSH public keys for administrative access
- app_
probing GatewayGateway Mgmt App Probing - Application probing configuration for gateway monitoring
- app_
usage bool - Consumes uplink bandwidth, requires WA license
- auto_
signature_ Gatewayupdate Gateway Mgmt Auto Signature Update - Schedule for automatic security signature updates
- config_
revert_ inttimer - Rollback timer for commit confirmed
- disable_
console bool - For SSR and SRX, disable console port
- disable_
oob bool - For SSR and SRX, disable management interface
- disable_
usb bool - For SSR and SRX, disable usb interface
- fips_
enabled bool - Whether FIPS mode is enabled on the gateway
- probe_
hosts Sequence[str] - IPv4 probe targets used for gateway connectivity checks
- probe_
hostsv6s Sequence[str] - IPv6 probe targets used for gateway connectivity checks
- protect_
re GatewayGateway Mgmt Protect Re - Control-plane protection settings for the gateway
- root_
password str - SRX only. Root password for local gateway access
- security_
log_ strsource_ address - IPv4 source address used for gateway security log traffic
- security_
log_ strsource_ interface - Source interface used for gateway security log traffic
- admin
Sshkeys List<String> - SSR-only SSH public keys for administrative access
- app
Probing Property Map - Application probing configuration for gateway monitoring
- app
Usage Boolean - Consumes uplink bandwidth, requires WA license
- auto
Signature Property MapUpdate - Schedule for automatic security signature updates
- config
Revert NumberTimer - Rollback timer for commit confirmed
- disable
Console Boolean - For SSR and SRX, disable console port
- disable
Oob Boolean - For SSR and SRX, disable management interface
- disable
Usb Boolean - For SSR and SRX, disable usb interface
- fips
Enabled Boolean - Whether FIPS mode is enabled on the gateway
- probe
Hosts List<String> - IPv4 probe targets used for gateway connectivity checks
- probe
Hostsv6s List<String> - IPv6 probe targets used for gateway connectivity checks
- protect
Re Property Map - Control-plane protection settings for the gateway
- root
Password String - SRX only. Root password for local gateway access
- security
Log StringSource Address - IPv4 source address used for gateway security log traffic
- security
Log StringSource Interface - Source interface used for gateway security log traffic
GatewayGatewayMgmtAppProbing, GatewayGatewayMgmtAppProbingArgs
- Apps List<string>
- Predefined application keys to probe
- Custom
Apps List<Pulumi.Juniper Mist. Device. Inputs. Gateway Gateway Mgmt App Probing Custom App> - User-defined application probe definitions
- Enabled bool
- Whether gateway application probing is enabled
- Apps []string
- Predefined application keys to probe
- Custom
Apps []GatewayGateway Mgmt App Probing Custom App - User-defined application probe definitions
- Enabled bool
- Whether gateway application probing is enabled
- apps list(string)
- Predefined application keys to probe
- custom_
apps list(object) - User-defined application probe definitions
- enabled bool
- Whether gateway application probing is enabled
- apps List<String>
- Predefined application keys to probe
- custom
Apps List<GatewayGateway Mgmt App Probing Custom App> - User-defined application probe definitions
- enabled Boolean
- Whether gateway application probing is enabled
- apps string[]
- Predefined application keys to probe
- custom
Apps GatewayGateway Mgmt App Probing Custom App[] - User-defined application probe definitions
- enabled boolean
- Whether gateway application probing is enabled
- apps Sequence[str]
- Predefined application keys to probe
- custom_
apps Sequence[GatewayGateway Mgmt App Probing Custom App] - User-defined application probe definitions
- enabled bool
- Whether gateway application probing is enabled
- apps List<String>
- Predefined application keys to probe
- custom
Apps List<Property Map> - User-defined application probe definitions
- enabled Boolean
- Whether gateway application probing is enabled
GatewayGatewayMgmtAppProbingCustomApp, GatewayGatewayMgmtAppProbingCustomAppArgs
- Address string
- Required if
protocol==icmp. IP address probed by the ICMP custom app - App
Type string - Category label used for this custom application probe
- Hostnames List<string>
- If
protocol==http. Hostnames or URLs probed by this custom app - Key string
- Stable key used to identify this custom application probe
- Name string
- Display name for this custom application probe
- Network string
- Gateway network used as the source context for this probe
- Packet
Size int - If
protocol==icmp. ICMP packet size used by this custom app probe - Protocol string
- Probe protocol used by this custom application definition
- Url string
- If
protocol==http. HTTP URL or hostname probed by this custom app - Vrf string
- Gateway VRF used as the source context for this probe
- Address string
- Required if
protocol==icmp. IP address probed by the ICMP custom app - App
Type string - Category label used for this custom application probe
- Hostnames []string
- If
protocol==http. Hostnames or URLs probed by this custom app - Key string
- Stable key used to identify this custom application probe
- Name string
- Display name for this custom application probe
- Network string
- Gateway network used as the source context for this probe
- Packet
Size int - If
protocol==icmp. ICMP packet size used by this custom app probe - Protocol string
- Probe protocol used by this custom application definition
- Url string
- If
protocol==http. HTTP URL or hostname probed by this custom app - Vrf string
- Gateway VRF used as the source context for this probe
- address string
- Required if
protocol==icmp. IP address probed by the ICMP custom app - app_
type string - Category label used for this custom application probe
- hostnames list(string)
- If
protocol==http. Hostnames or URLs probed by this custom app - key string
- Stable key used to identify this custom application probe
- name string
- Display name for this custom application probe
- network string
- Gateway network used as the source context for this probe
- packet_
size number - If
protocol==icmp. ICMP packet size used by this custom app probe - protocol string
- Probe protocol used by this custom application definition
- url string
- If
protocol==http. HTTP URL or hostname probed by this custom app - vrf string
- Gateway VRF used as the source context for this probe
- address String
- Required if
protocol==icmp. IP address probed by the ICMP custom app - app
Type String - Category label used for this custom application probe
- hostnames List<String>
- If
protocol==http. Hostnames or URLs probed by this custom app - key String
- Stable key used to identify this custom application probe
- name String
- Display name for this custom application probe
- network String
- Gateway network used as the source context for this probe
- packet
Size Integer - If
protocol==icmp. ICMP packet size used by this custom app probe - protocol String
- Probe protocol used by this custom application definition
- url String
- If
protocol==http. HTTP URL or hostname probed by this custom app - vrf String
- Gateway VRF used as the source context for this probe
- address string
- Required if
protocol==icmp. IP address probed by the ICMP custom app - app
Type string - Category label used for this custom application probe
- hostnames string[]
- If
protocol==http. Hostnames or URLs probed by this custom app - key string
- Stable key used to identify this custom application probe
- name string
- Display name for this custom application probe
- network string
- Gateway network used as the source context for this probe
- packet
Size number - If
protocol==icmp. ICMP packet size used by this custom app probe - protocol string
- Probe protocol used by this custom application definition
- url string
- If
protocol==http. HTTP URL or hostname probed by this custom app - vrf string
- Gateway VRF used as the source context for this probe
- address str
- Required if
protocol==icmp. IP address probed by the ICMP custom app - app_
type str - Category label used for this custom application probe
- hostnames Sequence[str]
- If
protocol==http. Hostnames or URLs probed by this custom app - key str
- Stable key used to identify this custom application probe
- name str
- Display name for this custom application probe
- network str
- Gateway network used as the source context for this probe
- packet_
size int - If
protocol==icmp. ICMP packet size used by this custom app probe - protocol str
- Probe protocol used by this custom application definition
- url str
- If
protocol==http. HTTP URL or hostname probed by this custom app - vrf str
- Gateway VRF used as the source context for this probe
- address String
- Required if
protocol==icmp. IP address probed by the ICMP custom app - app
Type String - Category label used for this custom application probe
- hostnames List<String>
- If
protocol==http. Hostnames or URLs probed by this custom app - key String
- Stable key used to identify this custom application probe
- name String
- Display name for this custom application probe
- network String
- Gateway network used as the source context for this probe
- packet
Size Number - If
protocol==icmp. ICMP packet size used by this custom app probe - protocol String
- Probe protocol used by this custom application definition
- url String
- If
protocol==http. HTTP URL or hostname probed by this custom app - vrf String
- Gateway VRF used as the source context for this probe
GatewayGatewayMgmtAutoSignatureUpdate, GatewayGatewayMgmtAutoSignatureUpdateArgs
- day_
of_ stringweek - Scheduled weekday for automatic signature updates
- enable bool
- Whether automatic security signature updates are enabled
- time_
of_ stringday - Optional, Mist will decide the timing
- day_
of_ strweek - Scheduled weekday for automatic signature updates
- enable bool
- Whether automatic security signature updates are enabled
- time_
of_ strday - Optional, Mist will decide the timing
GatewayGatewayMgmtProtectRe, GatewayGatewayMgmtProtectReArgs
- Allowed
Services List<string> - Built-in services explicitly allowed by the Protect RE policy
- Customs
List<Pulumi.
Juniper Mist. Device. Inputs. Gateway Gateway Mgmt Protect Re Custom> - Additional ACL entries allowed by the Protect RE policy
- Enabled bool
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- Hit
Count bool - Whether to enable hit count for Protect_RE policy
- Trusted
Hosts List<string> - Trusted host or subnet entries allowed by the Protect RE policy
- Allowed
Services []string - Built-in services explicitly allowed by the Protect RE policy
- Customs
[]Gateway
Gateway Mgmt Protect Re Custom - Additional ACL entries allowed by the Protect RE policy
- Enabled bool
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- Hit
Count bool - Whether to enable hit count for Protect_RE policy
- Trusted
Hosts []string - Trusted host or subnet entries allowed by the Protect RE policy
- allowed_
services list(string) - Built-in services explicitly allowed by the Protect RE policy
- customs list(object)
- Additional ACL entries allowed by the Protect RE policy
- enabled bool
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- hit_
count bool - Whether to enable hit count for Protect_RE policy
- trusted_
hosts list(string) - Trusted host or subnet entries allowed by the Protect RE policy
- allowed
Services List<String> - Built-in services explicitly allowed by the Protect RE policy
- customs
List<Gateway
Gateway Mgmt Protect Re Custom> - Additional ACL entries allowed by the Protect RE policy
- enabled Boolean
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- hit
Count Boolean - Whether to enable hit count for Protect_RE policy
- trusted
Hosts List<String> - Trusted host or subnet entries allowed by the Protect RE policy
- allowed
Services string[] - Built-in services explicitly allowed by the Protect RE policy
- customs
Gateway
Gateway Mgmt Protect Re Custom[] - Additional ACL entries allowed by the Protect RE policy
- enabled boolean
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- hit
Count boolean - Whether to enable hit count for Protect_RE policy
- trusted
Hosts string[] - Trusted host or subnet entries allowed by the Protect RE policy
- allowed_
services Sequence[str] - Built-in services explicitly allowed by the Protect RE policy
- customs
Sequence[Gateway
Gateway Mgmt Protect Re Custom] - Additional ACL entries allowed by the Protect RE policy
- enabled bool
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- hit_
count bool - Whether to enable hit count for Protect_RE policy
- trusted_
hosts Sequence[str] - Trusted host or subnet entries allowed by the Protect RE policy
- allowed
Services List<String> - Built-in services explicitly allowed by the Protect RE policy
- customs List<Property Map>
- Additional ACL entries allowed by the Protect RE policy
- enabled Boolean
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- hit
Count Boolean - Whether to enable hit count for Protect_RE policy
- trusted
Hosts List<String> - Trusted host or subnet entries allowed by the Protect RE policy
GatewayGatewayMgmtProtectReCustom, GatewayGatewayMgmtProtectReCustomArgs
- port_
range string - Matched dst port, "0" means any
- protocol string
- Transport protocol matched by this custom Protect RE ACL
- subnets list(string)
- Source subnets matched by this custom Protect RE ACL
- port_
range str - Matched dst port, "0" means any
- protocol str
- Transport protocol matched by this custom Protect RE ACL
- subnets Sequence[str]
- Source subnets matched by this custom Protect RE ACL
GatewayIdpProfiles, GatewayIdpProfilesArgs
- Base
Profile string - Built-in IDP baseline profile inherited before applying overwrites
- Id string
- Unique identifier of the IDP profile
- Name string
- Display name of the IDP profile
- Org
Id string - Owning organization for the IDP profile
- Overwrites
List<Pulumi.
Juniper Mist. Device. Inputs. Gateway Idp Profiles Overwrite> - IDP signature override rules applied on top of the base profile
- Base
Profile string - Built-in IDP baseline profile inherited before applying overwrites
- Id string
- Unique identifier of the IDP profile
- Name string
- Display name of the IDP profile
- Org
Id string - Owning organization for the IDP profile
- Overwrites
[]Gateway
Idp Profiles Overwrite - IDP signature override rules applied on top of the base profile
- base_
profile string - Built-in IDP baseline profile inherited before applying overwrites
- id string
- Unique identifier of the IDP profile
- name string
- Display name of the IDP profile
- org_
id string - Owning organization for the IDP profile
- overwrites list(object)
- IDP signature override rules applied on top of the base profile
- base
Profile String - Built-in IDP baseline profile inherited before applying overwrites
- id String
- Unique identifier of the IDP profile
- name String
- Display name of the IDP profile
- org
Id String - Owning organization for the IDP profile
- overwrites
List<Gateway
Idp Profiles Overwrite> - IDP signature override rules applied on top of the base profile
- base
Profile string - Built-in IDP baseline profile inherited before applying overwrites
- id string
- Unique identifier of the IDP profile
- name string
- Display name of the IDP profile
- org
Id string - Owning organization for the IDP profile
- overwrites
Gateway
Idp Profiles Overwrite[] - IDP signature override rules applied on top of the base profile
- base_
profile str - Built-in IDP baseline profile inherited before applying overwrites
- id str
- Unique identifier of the IDP profile
- name str
- Display name of the IDP profile
- org_
id str - Owning organization for the IDP profile
- overwrites
Sequence[Gateway
Idp Profiles Overwrite] - IDP signature override rules applied on top of the base profile
- base
Profile String - Built-in IDP baseline profile inherited before applying overwrites
- id String
- Unique identifier of the IDP profile
- name String
- Display name of the IDP profile
- org
Id String - Owning organization for the IDP profile
- overwrites List<Property Map>
- IDP signature override rules applied on top of the base profile
GatewayIdpProfilesOverwrite, GatewayIdpProfilesOverwriteArgs
- Action string
- Enforcement action applied when this overwrite rule matches
- Matching
Pulumi.
Juniper Mist. Device. Inputs. Gateway Idp Profiles Overwrite Matching - Criteria that select signatures for this overwrite rule
- Name string
- Display name for this IDP profile overwrite rule
- Action string
- Enforcement action applied when this overwrite rule matches
- Matching
Gateway
Idp Profiles Overwrite Matching - Criteria that select signatures for this overwrite rule
- Name string
- Display name for this IDP profile overwrite rule
- action String
- Enforcement action applied when this overwrite rule matches
- matching
Gateway
Idp Profiles Overwrite Matching - Criteria that select signatures for this overwrite rule
- name String
- Display name for this IDP profile overwrite rule
- action string
- Enforcement action applied when this overwrite rule matches
- matching
Gateway
Idp Profiles Overwrite Matching - Criteria that select signatures for this overwrite rule
- name string
- Display name for this IDP profile overwrite rule
- action str
- Enforcement action applied when this overwrite rule matches
- matching
Gateway
Idp Profiles Overwrite Matching - Criteria that select signatures for this overwrite rule
- name str
- Display name for this IDP profile overwrite rule
- action String
- Enforcement action applied when this overwrite rule matches
- matching Property Map
- Criteria that select signatures for this overwrite rule
- name String
- Display name for this IDP profile overwrite rule
GatewayIdpProfilesOverwriteMatching, GatewayIdpProfilesOverwriteMatchingArgs
- Attack
Names List<string> - Signature names matched by the IDP profile overwrite
- Dst
Subnets List<string> - Destination subnets matched by the IDP profile overwrite
- Severities List<string>
- Threat levels matched by the IDP profile overwrite
- Attack
Names []string - Signature names matched by the IDP profile overwrite
- Dst
Subnets []string - Destination subnets matched by the IDP profile overwrite
- Severities []string
- Threat levels matched by the IDP profile overwrite
- attack_
names list(string) - Signature names matched by the IDP profile overwrite
- dst_
subnets list(string) - Destination subnets matched by the IDP profile overwrite
- severities list(string)
- Threat levels matched by the IDP profile overwrite
- attack
Names List<String> - Signature names matched by the IDP profile overwrite
- dst
Subnets List<String> - Destination subnets matched by the IDP profile overwrite
- severities List<String>
- Threat levels matched by the IDP profile overwrite
- attack
Names string[] - Signature names matched by the IDP profile overwrite
- dst
Subnets string[] - Destination subnets matched by the IDP profile overwrite
- severities string[]
- Threat levels matched by the IDP profile overwrite
- attack_
names Sequence[str] - Signature names matched by the IDP profile overwrite
- dst_
subnets Sequence[str] - Destination subnets matched by the IDP profile overwrite
- severities Sequence[str]
- Threat levels matched by the IDP profile overwrite
- attack
Names List<String> - Signature names matched by the IDP profile overwrite
- dst
Subnets List<String> - Destination subnets matched by the IDP profile overwrite
- severities List<String>
- Threat levels matched by the IDP profile overwrite
GatewayIpConfigs, GatewayIpConfigsArgs
- Ip string
- Static IPv4 address for the gateway network interface when
type==static - Ip6 string
- Static IPv6 address for the gateway network interface when
type6==static - Netmask string
- IPv4 netmask or prefix length for the gateway network interface when
type==static - Netmask6 string
- IPv6 netmask or prefix length for the gateway network interface when
type6==static - Secondary
Ips List<string> - Additional IPv4 addresses in CIDR notation for this gateway network interface
- Type string
- IPv4 address assignment mode for this gateway network interface
- Type6 string
- IPv6 address assignment mode for this gateway network interface
- Ip string
- Static IPv4 address for the gateway network interface when
type==static - Ip6 string
- Static IPv6 address for the gateway network interface when
type6==static - Netmask string
- IPv4 netmask or prefix length for the gateway network interface when
type==static - Netmask6 string
- IPv6 netmask or prefix length for the gateway network interface when
type6==static - Secondary
Ips []string - Additional IPv4 addresses in CIDR notation for this gateway network interface
- Type string
- IPv4 address assignment mode for this gateway network interface
- Type6 string
- IPv6 address assignment mode for this gateway network interface
- ip string
- Static IPv4 address for the gateway network interface when
type==static - ip6 string
- Static IPv6 address for the gateway network interface when
type6==static - netmask string
- IPv4 netmask or prefix length for the gateway network interface when
type==static - netmask6 string
- IPv6 netmask or prefix length for the gateway network interface when
type6==static - secondary_
ips list(string) - Additional IPv4 addresses in CIDR notation for this gateway network interface
- type string
- IPv4 address assignment mode for this gateway network interface
- type6 string
- IPv6 address assignment mode for this gateway network interface
- ip String
- Static IPv4 address for the gateway network interface when
type==static - ip6 String
- Static IPv6 address for the gateway network interface when
type6==static - netmask String
- IPv4 netmask or prefix length for the gateway network interface when
type==static - netmask6 String
- IPv6 netmask or prefix length for the gateway network interface when
type6==static - secondary
Ips List<String> - Additional IPv4 addresses in CIDR notation for this gateway network interface
- type String
- IPv4 address assignment mode for this gateway network interface
- type6 String
- IPv6 address assignment mode for this gateway network interface
- ip string
- Static IPv4 address for the gateway network interface when
type==static - ip6 string
- Static IPv6 address for the gateway network interface when
type6==static - netmask string
- IPv4 netmask or prefix length for the gateway network interface when
type==static - netmask6 string
- IPv6 netmask or prefix length for the gateway network interface when
type6==static - secondary
Ips string[] - Additional IPv4 addresses in CIDR notation for this gateway network interface
- type string
- IPv4 address assignment mode for this gateway network interface
- type6 string
- IPv6 address assignment mode for this gateway network interface
- ip str
- Static IPv4 address for the gateway network interface when
type==static - ip6 str
- Static IPv6 address for the gateway network interface when
type6==static - netmask str
- IPv4 netmask or prefix length for the gateway network interface when
type==static - netmask6 str
- IPv6 netmask or prefix length for the gateway network interface when
type6==static - secondary_
ips Sequence[str] - Additional IPv4 addresses in CIDR notation for this gateway network interface
- type str
- IPv4 address assignment mode for this gateway network interface
- type6 str
- IPv6 address assignment mode for this gateway network interface
- ip String
- Static IPv4 address for the gateway network interface when
type==static - ip6 String
- Static IPv6 address for the gateway network interface when
type6==static - netmask String
- IPv4 netmask or prefix length for the gateway network interface when
type==static - netmask6 String
- IPv6 netmask or prefix length for the gateway network interface when
type6==static - secondary
Ips List<String> - Additional IPv4 addresses in CIDR notation for this gateway network interface
- type String
- IPv4 address assignment mode for this gateway network interface
- type6 String
- IPv6 address assignment mode for this gateway network interface
GatewayNetwork, GatewayNetworkArgs
- Name string
- Display name of the organization network
- Subnet string
- IPv4 subnet CIDR for this network
- Disallow
Mist boolServices - Whether to disallow Mist Devices in the network
- Gateway string
- IPv4 gateway address for this network
- Gateway6 string
- IPv6 gateway address for this network
- Internal
Access Pulumi.Juniper Mist. Device. Inputs. Gateway Network Internal Access - Internal access settings for this network
- Internet
Access Pulumi.Juniper Mist. Device. Inputs. Gateway Network Internet Access - Direct internet access and NAT settings for this network
- Isolation bool
- Whether to allow clients in the network to talk to each other
- Multicast
Pulumi.
Juniper Mist. Device. Inputs. Gateway Network Multicast - Settings for multicast routing on this network
- Routed
For List<string>Networks - Other network names this network can route to, for example through BGP, OSPF or static routes
- Subnet6 string
- IPv6 subnet CIDR for this network
- Tenants
Dictionary<string, Pulumi.
Juniper Mist. Device. Inputs. Gateway Network Tenants> - Tenant address mappings associated with this network
- Vlan
Id string - VLAN ID or variable associated with this network
- Vpn
Access Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Network Vpn Access> - VPN access settings keyed by VPN name for this network
- Name string
- Display name of the organization network
- Subnet string
- IPv4 subnet CIDR for this network
- Disallow
Mist boolServices - Whether to disallow Mist Devices in the network
- Gateway string
- IPv4 gateway address for this network
- Gateway6 string
- IPv6 gateway address for this network
- Internal
Access GatewayNetwork Internal Access - Internal access settings for this network
- Internet
Access GatewayNetwork Internet Access - Direct internet access and NAT settings for this network
- Isolation bool
- Whether to allow clients in the network to talk to each other
- Multicast
Gateway
Network Multicast - Settings for multicast routing on this network
- Routed
For []stringNetworks - Other network names this network can route to, for example through BGP, OSPF or static routes
- Subnet6 string
- IPv6 subnet CIDR for this network
- Tenants
map[string]Gateway
Network Tenants - Tenant address mappings associated with this network
- Vlan
Id string - VLAN ID or variable associated with this network
- Vpn
Access map[string]GatewayNetwork Vpn Access - VPN access settings keyed by VPN name for this network
- name string
- Display name of the organization network
- subnet string
- IPv4 subnet CIDR for this network
- disallow_
mist_ boolservices - Whether to disallow Mist Devices in the network
- gateway string
- IPv4 gateway address for this network
- gateway6 string
- IPv6 gateway address for this network
- internal_
access object - Internal access settings for this network
- internet_
access object - Direct internet access and NAT settings for this network
- isolation bool
- Whether to allow clients in the network to talk to each other
- multicast object
- Settings for multicast routing on this network
- routed_
for_ list(string)networks - Other network names this network can route to, for example through BGP, OSPF or static routes
- subnet6 string
- IPv6 subnet CIDR for this network
- tenants map(object)
- Tenant address mappings associated with this network
- vlan_
id string - VLAN ID or variable associated with this network
- vpn_
access map(object) - VPN access settings keyed by VPN name for this network
- name String
- Display name of the organization network
- subnet String
- IPv4 subnet CIDR for this network
- disallow
Mist BooleanServices - Whether to disallow Mist Devices in the network
- gateway String
- IPv4 gateway address for this network
- gateway6 String
- IPv6 gateway address for this network
- internal
Access GatewayNetwork Internal Access - Internal access settings for this network
- internet
Access GatewayNetwork Internet Access - Direct internet access and NAT settings for this network
- isolation Boolean
- Whether to allow clients in the network to talk to each other
- multicast
Gateway
Network Multicast - Settings for multicast routing on this network
- routed
For List<String>Networks - Other network names this network can route to, for example through BGP, OSPF or static routes
- subnet6 String
- IPv6 subnet CIDR for this network
- tenants
Map<String,Gateway
Network Tenants> - Tenant address mappings associated with this network
- vlan
Id String - VLAN ID or variable associated with this network
- vpn
Access Map<String,GatewayNetwork Vpn Access> - VPN access settings keyed by VPN name for this network
- name string
- Display name of the organization network
- subnet string
- IPv4 subnet CIDR for this network
- disallow
Mist booleanServices - Whether to disallow Mist Devices in the network
- gateway string
- IPv4 gateway address for this network
- gateway6 string
- IPv6 gateway address for this network
- internal
Access GatewayNetwork Internal Access - Internal access settings for this network
- internet
Access GatewayNetwork Internet Access - Direct internet access and NAT settings for this network
- isolation boolean
- Whether to allow clients in the network to talk to each other
- multicast
Gateway
Network Multicast - Settings for multicast routing on this network
- routed
For string[]Networks - Other network names this network can route to, for example through BGP, OSPF or static routes
- subnet6 string
- IPv6 subnet CIDR for this network
- tenants
{[key: string]: Gateway
Network Tenants} - Tenant address mappings associated with this network
- vlan
Id string - VLAN ID or variable associated with this network
- vpn
Access {[key: string]: GatewayNetwork Vpn Access} - VPN access settings keyed by VPN name for this network
- name str
- Display name of the organization network
- subnet str
- IPv4 subnet CIDR for this network
- disallow_
mist_ boolservices - Whether to disallow Mist Devices in the network
- gateway str
- IPv4 gateway address for this network
- gateway6 str
- IPv6 gateway address for this network
- internal_
access GatewayNetwork Internal Access - Internal access settings for this network
- internet_
access GatewayNetwork Internet Access - Direct internet access and NAT settings for this network
- isolation bool
- Whether to allow clients in the network to talk to each other
- multicast
Gateway
Network Multicast - Settings for multicast routing on this network
- routed_
for_ Sequence[str]networks - Other network names this network can route to, for example through BGP, OSPF or static routes
- subnet6 str
- IPv6 subnet CIDR for this network
- tenants
Mapping[str, Gateway
Network Tenants] - Tenant address mappings associated with this network
- vlan_
id str - VLAN ID or variable associated with this network
- vpn_
access Mapping[str, GatewayNetwork Vpn Access] - VPN access settings keyed by VPN name for this network
- name String
- Display name of the organization network
- subnet String
- IPv4 subnet CIDR for this network
- disallow
Mist BooleanServices - Whether to disallow Mist Devices in the network
- gateway String
- IPv4 gateway address for this network
- gateway6 String
- IPv6 gateway address for this network
- internal
Access Property Map - Internal access settings for this network
- internet
Access Property Map - Direct internet access and NAT settings for this network
- isolation Boolean
- Whether to allow clients in the network to talk to each other
- multicast Property Map
- Settings for multicast routing on this network
- routed
For List<String>Networks - Other network names this network can route to, for example through BGP, OSPF or static routes
- subnet6 String
- IPv6 subnet CIDR for this network
- tenants Map<Property Map>
- Tenant address mappings associated with this network
- vlan
Id String - VLAN ID or variable associated with this network
- vpn
Access Map<Property Map> - VPN access settings keyed by VPN name for this network
GatewayNetworkInternalAccess, GatewayNetworkInternalAccessArgs
- Enabled bool
- Whether internal access is enabled for this network
- Enabled bool
- Whether internal access is enabled for this network
- enabled bool
- Whether internal access is enabled for this network
- enabled Boolean
- Whether internal access is enabled for this network
- enabled boolean
- Whether internal access is enabled for this network
- enabled bool
- Whether internal access is enabled for this network
- enabled Boolean
- Whether internal access is enabled for this network
GatewayNetworkInternetAccess, GatewayNetworkInternetAccessArgs
- Create
Simple boolService Policy - Whether Mist should create simple service policies for restricted internet access
- Destination
Nat Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Network Internet Access Destination Nat> - Destination NAT rules for direct internet access
- Enabled bool
- Whether direct internet access is enabled for this network
- Restricted bool
- By default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - Static
Nat Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Network Internet Access Static Nat> - Static NAT rules for direct internet access
- Create
Simple boolService Policy - Whether Mist should create simple service policies for restricted internet access
- Destination
Nat map[string]GatewayNetwork Internet Access Destination Nat - Destination NAT rules for direct internet access
- Enabled bool
- Whether direct internet access is enabled for this network
- Restricted bool
- By default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - Static
Nat map[string]GatewayNetwork Internet Access Static Nat - Static NAT rules for direct internet access
- create_
simple_ boolservice_ policy - Whether Mist should create simple service policies for restricted internet access
- destination_
nat map(object) - Destination NAT rules for direct internet access
- enabled bool
- Whether direct internet access is enabled for this network
- restricted bool
- By default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - static_
nat map(object) - Static NAT rules for direct internet access
- create
Simple BooleanService Policy - Whether Mist should create simple service policies for restricted internet access
- destination
Nat Map<String,GatewayNetwork Internet Access Destination Nat> - Destination NAT rules for direct internet access
- enabled Boolean
- Whether direct internet access is enabled for this network
- restricted Boolean
- By default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - static
Nat Map<String,GatewayNetwork Internet Access Static Nat> - Static NAT rules for direct internet access
- create
Simple booleanService Policy - Whether Mist should create simple service policies for restricted internet access
- destination
Nat {[key: string]: GatewayNetwork Internet Access Destination Nat} - Destination NAT rules for direct internet access
- enabled boolean
- Whether direct internet access is enabled for this network
- restricted boolean
- By default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - static
Nat {[key: string]: GatewayNetwork Internet Access Static Nat} - Static NAT rules for direct internet access
- create_
simple_ boolservice_ policy - Whether Mist should create simple service policies for restricted internet access
- destination_
nat Mapping[str, GatewayNetwork Internet Access Destination Nat] - Destination NAT rules for direct internet access
- enabled bool
- Whether direct internet access is enabled for this network
- restricted bool
- By default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - static_
nat Mapping[str, GatewayNetwork Internet Access Static Nat] - Static NAT rules for direct internet access
- create
Simple BooleanService Policy - Whether Mist should create simple service policies for restricted internet access
- destination
Nat Map<Property Map> - Destination NAT rules for direct internet access
- enabled Boolean
- Whether direct internet access is enabled for this network
- restricted Boolean
- By default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - static
Nat Map<Property Map> - Static NAT rules for direct internet access
GatewayNetworkInternetAccessDestinationNat, GatewayNetworkInternetAccessDestinationNatArgs
- Internal
Ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this direct internet destination NAT rule
- Port string
- The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
- Wan
Name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
- Internal
Ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this direct internet destination NAT rule
- Port string
- The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
- Wan
Name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
- internal_
ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this direct internet destination NAT rule
- port string
- The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
- wan_
name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
- internal
Ip String - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this direct internet destination NAT rule
- port String
- The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
- wan
Name String - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
- internal
Ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this direct internet destination NAT rule
- port string
- The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
- wan
Name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
- internal_
ip str - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name str
- Label for this direct internet destination NAT rule
- port str
- The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
- wan_
name str - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
- internal
Ip String - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this direct internet destination NAT rule
- port String
- The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
- wan
Name String - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
GatewayNetworkInternetAccessStaticNat, GatewayNetworkInternetAccessStaticNatArgs
- Internal
Ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this direct internet static NAT rule
- Wan
Name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
- Internal
Ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this direct internet static NAT rule
- Wan
Name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
- internal_
ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this direct internet static NAT rule
- wan_
name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
- internal
Ip String - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this direct internet static NAT rule
- wan
Name String - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
- internal
Ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this direct internet static NAT rule
- wan
Name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
- internal_
ip str - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name str
- Label for this direct internet static NAT rule
- wan_
name str - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
- internal
Ip String - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this direct internet static NAT rule
- wan
Name String - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
GatewayNetworkMulticast, GatewayNetworkMulticastArgs
- Disable
Igmp bool - If the network will only be the source of the multicast traffic, IGMP can be disabled
- Enabled bool
- Whether multicast support is enabled for this network
- Groups
Dictionary<string, Pulumi.
Juniper Mist. Device. Inputs. Gateway Network Multicast Groups> - Multicast group-to-RP mappings for this network
- Disable
Igmp bool - If the network will only be the source of the multicast traffic, IGMP can be disabled
- Enabled bool
- Whether multicast support is enabled for this network
- Groups
map[string]Gateway
Network Multicast Groups - Multicast group-to-RP mappings for this network
- disable_
igmp bool - If the network will only be the source of the multicast traffic, IGMP can be disabled
- enabled bool
- Whether multicast support is enabled for this network
- groups map(object)
- Multicast group-to-RP mappings for this network
- disable
Igmp Boolean - If the network will only be the source of the multicast traffic, IGMP can be disabled
- enabled Boolean
- Whether multicast support is enabled for this network
- groups
Map<String,Gateway
Network Multicast Groups> - Multicast group-to-RP mappings for this network
- disable
Igmp boolean - If the network will only be the source of the multicast traffic, IGMP can be disabled
- enabled boolean
- Whether multicast support is enabled for this network
- groups
{[key: string]: Gateway
Network Multicast Groups} - Multicast group-to-RP mappings for this network
- disable_
igmp bool - If the network will only be the source of the multicast traffic, IGMP can be disabled
- enabled bool
- Whether multicast support is enabled for this network
- groups
Mapping[str, Gateway
Network Multicast Groups] - Multicast group-to-RP mappings for this network
- disable
Igmp Boolean - If the network will only be the source of the multicast traffic, IGMP can be disabled
- enabled Boolean
- Whether multicast support is enabled for this network
- groups Map<Property Map>
- Multicast group-to-RP mappings for this network
GatewayNetworkMulticastGroups, GatewayNetworkMulticastGroupsArgs
- Rp
Ip string - RP (rendezvous point) IP address
- Rp
Ip string - RP (rendezvous point) IP address
- rp_
ip string - RP (rendezvous point) IP address
- rp
Ip String - RP (rendezvous point) IP address
- rp
Ip string - RP (rendezvous point) IP address
- rp_
ip str - RP (rendezvous point) IP address
- rp
Ip String - RP (rendezvous point) IP address
GatewayNetworkTenants, GatewayNetworkTenantsArgs
- Addresses List<string>
- IP addresses or subnets assigned to this tenant in the network
- Addresses []string
- IP addresses or subnets assigned to this tenant in the network
- addresses list(string)
- IP addresses or subnets assigned to this tenant in the network
- addresses List<String>
- IP addresses or subnets assigned to this tenant in the network
- addresses string[]
- IP addresses or subnets assigned to this tenant in the network
- addresses Sequence[str]
- IP addresses or subnets assigned to this tenant in the network
- addresses List<String>
- IP addresses or subnets assigned to this tenant in the network
GatewayNetworkVpnAccess, GatewayNetworkVpnAccessArgs
- Advertised
Subnet string - If
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - Allow
Ping bool - Whether to allow ping from vpn into this routed network
- Destination
Nat Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Network Vpn Access Destination Nat> - Destination NAT rules applied for VPN access to this network
- Nat
Pool string - If
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - No
Readvertise boolTo Lan Bgp - toward LAN-side BGP peers
- No
Readvertise boolTo Lan Ospf - toward LAN-side OSPF peers
- No
Readvertise boolTo Overlay - toward overlay, how HUB should deal with routes it received from Spokes
- Other
Vrfs List<string> - Other VRFs that can receive leaked routes from this spoke network
- Routed bool
- Whether this network is routable
- Source
Nat Pulumi.Juniper Mist. Device. Inputs. Gateway Network Vpn Access Source Nat - Source NAT settings used when non-routed spoke hosts must be reachable from the hub
- Static
Nat Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Network Vpn Access Static Nat> - Static NAT rules applied for VPN access to this network
- Summarized
Subnet string - toward overlay, how HUB should deal with routes it received from Spokes
- Summarized
Subnet stringTo Lan Bgp - toward LAN-side BGP peers
- Summarized
Subnet stringTo Lan Ospf - toward LAN-side OSPF peers
- Advertised
Subnet string - If
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - Allow
Ping bool - Whether to allow ping from vpn into this routed network
- Destination
Nat map[string]GatewayNetwork Vpn Access Destination Nat - Destination NAT rules applied for VPN access to this network
- Nat
Pool string - If
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - No
Readvertise boolTo Lan Bgp - toward LAN-side BGP peers
- No
Readvertise boolTo Lan Ospf - toward LAN-side OSPF peers
- No
Readvertise boolTo Overlay - toward overlay, how HUB should deal with routes it received from Spokes
- Other
Vrfs []string - Other VRFs that can receive leaked routes from this spoke network
- Routed bool
- Whether this network is routable
- Source
Nat GatewayNetwork Vpn Access Source Nat - Source NAT settings used when non-routed spoke hosts must be reachable from the hub
- Static
Nat map[string]GatewayNetwork Vpn Access Static Nat - Static NAT rules applied for VPN access to this network
- Summarized
Subnet string - toward overlay, how HUB should deal with routes it received from Spokes
- Summarized
Subnet stringTo Lan Bgp - toward LAN-side BGP peers
- Summarized
Subnet stringTo Lan Ospf - toward LAN-side OSPF peers
- advertised_
subnet string - If
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - allow_
ping bool - Whether to allow ping from vpn into this routed network
- destination_
nat map(object) - Destination NAT rules applied for VPN access to this network
- nat_
pool string - If
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - no_
readvertise_ boolto_ lan_ bgp - toward LAN-side BGP peers
- no_
readvertise_ boolto_ lan_ ospf - toward LAN-side OSPF peers
- no_
readvertise_ boolto_ overlay - toward overlay, how HUB should deal with routes it received from Spokes
- other_
vrfs list(string) - Other VRFs that can receive leaked routes from this spoke network
- routed bool
- Whether this network is routable
- source_
nat object - Source NAT settings used when non-routed spoke hosts must be reachable from the hub
- static_
nat map(object) - Static NAT rules applied for VPN access to this network
- summarized_
subnet string - toward overlay, how HUB should deal with routes it received from Spokes
- summarized_
subnet_ stringto_ lan_ bgp - toward LAN-side BGP peers
- summarized_
subnet_ stringto_ lan_ ospf - toward LAN-side OSPF peers
- advertised
Subnet String - If
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - allow
Ping Boolean - Whether to allow ping from vpn into this routed network
- destination
Nat Map<String,GatewayNetwork Vpn Access Destination Nat> - Destination NAT rules applied for VPN access to this network
- nat
Pool String - If
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - no
Readvertise BooleanTo Lan Bgp - toward LAN-side BGP peers
- no
Readvertise BooleanTo Lan Ospf - toward LAN-side OSPF peers
- no
Readvertise BooleanTo Overlay - toward overlay, how HUB should deal with routes it received from Spokes
- other
Vrfs List<String> - Other VRFs that can receive leaked routes from this spoke network
- routed Boolean
- Whether this network is routable
- source
Nat GatewayNetwork Vpn Access Source Nat - Source NAT settings used when non-routed spoke hosts must be reachable from the hub
- static
Nat Map<String,GatewayNetwork Vpn Access Static Nat> - Static NAT rules applied for VPN access to this network
- summarized
Subnet String - toward overlay, how HUB should deal with routes it received from Spokes
- summarized
Subnet StringTo Lan Bgp - toward LAN-side BGP peers
- summarized
Subnet StringTo Lan Ospf - toward LAN-side OSPF peers
- advertised
Subnet string - If
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - allow
Ping boolean - Whether to allow ping from vpn into this routed network
- destination
Nat {[key: string]: GatewayNetwork Vpn Access Destination Nat} - Destination NAT rules applied for VPN access to this network
- nat
Pool string - If
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - no
Readvertise booleanTo Lan Bgp - toward LAN-side BGP peers
- no
Readvertise booleanTo Lan Ospf - toward LAN-side OSPF peers
- no
Readvertise booleanTo Overlay - toward overlay, how HUB should deal with routes it received from Spokes
- other
Vrfs string[] - Other VRFs that can receive leaked routes from this spoke network
- routed boolean
- Whether this network is routable
- source
Nat GatewayNetwork Vpn Access Source Nat - Source NAT settings used when non-routed spoke hosts must be reachable from the hub
- static
Nat {[key: string]: GatewayNetwork Vpn Access Static Nat} - Static NAT rules applied for VPN access to this network
- summarized
Subnet string - toward overlay, how HUB should deal with routes it received from Spokes
- summarized
Subnet stringTo Lan Bgp - toward LAN-side BGP peers
- summarized
Subnet stringTo Lan Ospf - toward LAN-side OSPF peers
- advertised_
subnet str - If
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - allow_
ping bool - Whether to allow ping from vpn into this routed network
- destination_
nat Mapping[str, GatewayNetwork Vpn Access Destination Nat] - Destination NAT rules applied for VPN access to this network
- nat_
pool str - If
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - no_
readvertise_ boolto_ lan_ bgp - toward LAN-side BGP peers
- no_
readvertise_ boolto_ lan_ ospf - toward LAN-side OSPF peers
- no_
readvertise_ boolto_ overlay - toward overlay, how HUB should deal with routes it received from Spokes
- other_
vrfs Sequence[str] - Other VRFs that can receive leaked routes from this spoke network
- routed bool
- Whether this network is routable
- source_
nat GatewayNetwork Vpn Access Source Nat - Source NAT settings used when non-routed spoke hosts must be reachable from the hub
- static_
nat Mapping[str, GatewayNetwork Vpn Access Static Nat] - Static NAT rules applied for VPN access to this network
- summarized_
subnet str - toward overlay, how HUB should deal with routes it received from Spokes
- summarized_
subnet_ strto_ lan_ bgp - toward LAN-side BGP peers
- summarized_
subnet_ strto_ lan_ ospf - toward LAN-side OSPF peers
- advertised
Subnet String - If
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - allow
Ping Boolean - Whether to allow ping from vpn into this routed network
- destination
Nat Map<Property Map> - Destination NAT rules applied for VPN access to this network
- nat
Pool String - If
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - no
Readvertise BooleanTo Lan Bgp - toward LAN-side BGP peers
- no
Readvertise BooleanTo Lan Ospf - toward LAN-side OSPF peers
- no
Readvertise BooleanTo Overlay - toward overlay, how HUB should deal with routes it received from Spokes
- other
Vrfs List<String> - Other VRFs that can receive leaked routes from this spoke network
- routed Boolean
- Whether this network is routable
- source
Nat Property Map - Source NAT settings used when non-routed spoke hosts must be reachable from the hub
- static
Nat Map<Property Map> - Static NAT rules applied for VPN access to this network
- summarized
Subnet String - toward overlay, how HUB should deal with routes it received from Spokes
- summarized
Subnet StringTo Lan Bgp - toward LAN-side BGP peers
- summarized
Subnet StringTo Lan Ospf - toward LAN-side OSPF peers
GatewayNetworkVpnAccessDestinationNat, GatewayNetworkVpnAccessDestinationNatArgs
- Internal
Ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this VPN destination NAT rule
- Port string
- Destination port or variable for this VPN destination NAT rule
- Internal
Ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this VPN destination NAT rule
- Port string
- Destination port or variable for this VPN destination NAT rule
- internal_
ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this VPN destination NAT rule
- port string
- Destination port or variable for this VPN destination NAT rule
- internal
Ip String - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this VPN destination NAT rule
- port String
- Destination port or variable for this VPN destination NAT rule
- internal
Ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this VPN destination NAT rule
- port string
- Destination port or variable for this VPN destination NAT rule
- internal_
ip str - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name str
- Label for this VPN destination NAT rule
- port str
- Destination port or variable for this VPN destination NAT rule
- internal
Ip String - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this VPN destination NAT rule
- port String
- Destination port or variable for this VPN destination NAT rule
GatewayNetworkVpnAccessSourceNat, GatewayNetworkVpnAccessSourceNatArgs
- External
Ip string - External source NAT IP or subnet used when spoke hosts must be reachable from the hub
- External
Ip string - External source NAT IP or subnet used when spoke hosts must be reachable from the hub
- external_
ip string - External source NAT IP or subnet used when spoke hosts must be reachable from the hub
- external
Ip String - External source NAT IP or subnet used when spoke hosts must be reachable from the hub
- external
Ip string - External source NAT IP or subnet used when spoke hosts must be reachable from the hub
- external_
ip str - External source NAT IP or subnet used when spoke hosts must be reachable from the hub
- external
Ip String - External source NAT IP or subnet used when spoke hosts must be reachable from the hub
GatewayNetworkVpnAccessStaticNat, GatewayNetworkVpnAccessStaticNatArgs
- Internal
Ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this VPN static NAT rule
- Internal
Ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this VPN static NAT rule
- internal_
ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this VPN static NAT rule
- internal
Ip String - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this VPN static NAT rule
- internal
Ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this VPN static NAT rule
- internal_
ip str - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name str
- Label for this VPN static NAT rule
- internal
Ip String - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this VPN static NAT rule
GatewayOobIpConfig, GatewayOobIpConfigArgs
- Gateway string
- Default gateway for the out-of-band management interface when
type==static - Ip string
- Static IPv4 address for the out-of-band management interface when
type==static - Netmask string
- IPv4 netmask or prefix length for the out-of-band management interface when
type==static - Node1
Pulumi.
Juniper Mist. Device. Inputs. Gateway Oob Ip Config Node1 - Out-of-band management IP configuration override for node1 in an HA cluster
- Type string
- IP assignment mode for the out-of-band management interface
- Use
Mgmt boolVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- Use
Mgmt boolVrf For Host Out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- Vlan
Id string - VLAN ID used for out-of-band management traffic
- Gateway string
- Default gateway for the out-of-band management interface when
type==static - Ip string
- Static IPv4 address for the out-of-band management interface when
type==static - Netmask string
- IPv4 netmask or prefix length for the out-of-band management interface when
type==static - Node1
Gateway
Oob Ip Config Node1 - Out-of-band management IP configuration override for node1 in an HA cluster
- Type string
- IP assignment mode for the out-of-band management interface
- Use
Mgmt boolVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- Use
Mgmt boolVrf For Host Out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- Vlan
Id string - VLAN ID used for out-of-band management traffic
- gateway string
- Default gateway for the out-of-band management interface when
type==static - ip string
- Static IPv4 address for the out-of-band management interface when
type==static - netmask string
- IPv4 netmask or prefix length for the out-of-band management interface when
type==static - node1 object
- Out-of-band management IP configuration override for node1 in an HA cluster
- type string
- IP assignment mode for the out-of-band management interface
- use_
mgmt_ boolvrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use_
mgmt_ boolvrf_ for_ host_ out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- vlan_
id string - VLAN ID used for out-of-band management traffic
- gateway String
- Default gateway for the out-of-band management interface when
type==static - ip String
- Static IPv4 address for the out-of-band management interface when
type==static - netmask String
- IPv4 netmask or prefix length for the out-of-band management interface when
type==static - node1
Gateway
Oob Ip Config Node1 - Out-of-band management IP configuration override for node1 in an HA cluster
- type String
- IP assignment mode for the out-of-band management interface
- use
Mgmt BooleanVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt BooleanVrf For Host Out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- vlan
Id String - VLAN ID used for out-of-band management traffic
- gateway string
- Default gateway for the out-of-band management interface when
type==static - ip string
- Static IPv4 address for the out-of-band management interface when
type==static - netmask string
- IPv4 netmask or prefix length for the out-of-band management interface when
type==static - node1
Gateway
Oob Ip Config Node1 - Out-of-band management IP configuration override for node1 in an HA cluster
- type string
- IP assignment mode for the out-of-band management interface
- use
Mgmt booleanVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt booleanVrf For Host Out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- vlan
Id string - VLAN ID used for out-of-band management traffic
- gateway str
- Default gateway for the out-of-band management interface when
type==static - ip str
- Static IPv4 address for the out-of-band management interface when
type==static - netmask str
- IPv4 netmask or prefix length for the out-of-band management interface when
type==static - node1
Gateway
Oob Ip Config Node1 - Out-of-band management IP configuration override for node1 in an HA cluster
- type str
- IP assignment mode for the out-of-band management interface
- use_
mgmt_ boolvrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use_
mgmt_ boolvrf_ for_ host_ out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- vlan_
id str - VLAN ID used for out-of-band management traffic
- gateway String
- Default gateway for the out-of-band management interface when
type==static - ip String
- Static IPv4 address for the out-of-band management interface when
type==static - netmask String
- IPv4 netmask or prefix length for the out-of-band management interface when
type==static - node1 Property Map
- Out-of-band management IP configuration override for node1 in an HA cluster
- type String
- IP assignment mode for the out-of-band management interface
- use
Mgmt BooleanVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt BooleanVrf For Host Out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- vlan
Id String - VLAN ID used for out-of-band management traffic
GatewayOobIpConfigNode1, GatewayOobIpConfigNode1Args
- Gateway string
- Default gateway for the node1 out-of-band management interface when
type==static - Ip string
- Static IPv4 address for the node1 out-of-band management interface when
type==static - Netmask string
- IPv4 netmask or prefix length for the node1 out-of-band management interface when
type==static; used only ifsubnetis not specified innetworks - Type string
- IP assignment mode for the node1 out-of-band management interface
- Use
Mgmt boolVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- Use
Mgmt boolVrf For Host Out - Whether to use
mgmtJunosfor host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired - Vlan
Id string - VLAN ID used for node1 out-of-band management traffic
- Gateway string
- Default gateway for the node1 out-of-band management interface when
type==static - Ip string
- Static IPv4 address for the node1 out-of-band management interface when
type==static - Netmask string
- IPv4 netmask or prefix length for the node1 out-of-band management interface when
type==static; used only ifsubnetis not specified innetworks - Type string
- IP assignment mode for the node1 out-of-band management interface
- Use
Mgmt boolVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- Use
Mgmt boolVrf For Host Out - Whether to use
mgmtJunosfor host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired - Vlan
Id string - VLAN ID used for node1 out-of-band management traffic
- gateway string
- Default gateway for the node1 out-of-band management interface when
type==static - ip string
- Static IPv4 address for the node1 out-of-band management interface when
type==static - netmask string
- IPv4 netmask or prefix length for the node1 out-of-band management interface when
type==static; used only ifsubnetis not specified innetworks - type string
- IP assignment mode for the node1 out-of-band management interface
- use_
mgmt_ boolvrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use_
mgmt_ boolvrf_ for_ host_ out - Whether to use
mgmtJunosfor host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired - vlan_
id string - VLAN ID used for node1 out-of-band management traffic
- gateway String
- Default gateway for the node1 out-of-band management interface when
type==static - ip String
- Static IPv4 address for the node1 out-of-band management interface when
type==static - netmask String
- IPv4 netmask or prefix length for the node1 out-of-band management interface when
type==static; used only ifsubnetis not specified innetworks - type String
- IP assignment mode for the node1 out-of-band management interface
- use
Mgmt BooleanVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt BooleanVrf For Host Out - Whether to use
mgmtJunosfor host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired - vlan
Id String - VLAN ID used for node1 out-of-band management traffic
- gateway string
- Default gateway for the node1 out-of-band management interface when
type==static - ip string
- Static IPv4 address for the node1 out-of-band management interface when
type==static - netmask string
- IPv4 netmask or prefix length for the node1 out-of-band management interface when
type==static; used only ifsubnetis not specified innetworks - type string
- IP assignment mode for the node1 out-of-band management interface
- use
Mgmt booleanVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt booleanVrf For Host Out - Whether to use
mgmtJunosfor host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired - vlan
Id string - VLAN ID used for node1 out-of-band management traffic
- gateway str
- Default gateway for the node1 out-of-band management interface when
type==static - ip str
- Static IPv4 address for the node1 out-of-band management interface when
type==static - netmask str
- IPv4 netmask or prefix length for the node1 out-of-band management interface when
type==static; used only ifsubnetis not specified innetworks - type str
- IP assignment mode for the node1 out-of-band management interface
- use_
mgmt_ boolvrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use_
mgmt_ boolvrf_ for_ host_ out - Whether to use
mgmtJunosfor host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired - vlan_
id str - VLAN ID used for node1 out-of-band management traffic
- gateway String
- Default gateway for the node1 out-of-band management interface when
type==static - ip String
- Static IPv4 address for the node1 out-of-band management interface when
type==static - netmask String
- IPv4 netmask or prefix length for the node1 out-of-band management interface when
type==static; used only ifsubnetis not specified innetworks - type String
- IP assignment mode for the node1 out-of-band management interface
- use
Mgmt BooleanVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt BooleanVrf For Host Out - Whether to use
mgmtJunosfor host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired - vlan
Id String - VLAN ID used for node1 out-of-band management traffic
GatewayPathPreferences, GatewayPathPreferencesArgs
- Paths
List<Pulumi.
Juniper Mist. Device. Inputs. Gateway Path Preferences Path> - Candidate paths evaluated for this gateway path preference
- Strategy string
- Selection strategy used to evaluate the candidate paths
- Paths
[]Gateway
Path Preferences Path - Candidate paths evaluated for this gateway path preference
- Strategy string
- Selection strategy used to evaluate the candidate paths
- paths list(object)
- Candidate paths evaluated for this gateway path preference
- strategy string
- Selection strategy used to evaluate the candidate paths
- paths
List<Gateway
Path Preferences Path> - Candidate paths evaluated for this gateway path preference
- strategy String
- Selection strategy used to evaluate the candidate paths
- paths
Gateway
Path Preferences Path[] - Candidate paths evaluated for this gateway path preference
- strategy string
- Selection strategy used to evaluate the candidate paths
- paths
Sequence[Gateway
Path Preferences Path] - Candidate paths evaluated for this gateway path preference
- strategy str
- Selection strategy used to evaluate the candidate paths
- paths List<Property Map>
- Candidate paths evaluated for this gateway path preference
- strategy String
- Selection strategy used to evaluate the candidate paths
GatewayPathPreferencesPath, GatewayPathPreferencesPathArgs
- Type string
- Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
- Cost int
- Relative cost assigned to this path for gateway path selection
- Disabled bool
- For SSR Only.
true, if this specific path is undesired - Gateway
Ip string - Only if
type==local, if a different gateway is desired - Internet
Access bool - Only if
type==vpn, if this vpn path can be used for internet - Name string
- Required when
type==vpn: the name of the VPN Path to usetype==wan: the name of the WAN interface to use
- Networks List<string>
- List of network names used when
type==local - Target
Ips List<string> - List of destination IP addresses to replace when
type==local - Wan
Name string - Optional if
type==vpn; WAN interface name associated with the VPN path
- Type string
- Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
- Cost int
- Relative cost assigned to this path for gateway path selection
- Disabled bool
- For SSR Only.
true, if this specific path is undesired - Gateway
Ip string - Only if
type==local, if a different gateway is desired - Internet
Access bool - Only if
type==vpn, if this vpn path can be used for internet - Name string
- Required when
type==vpn: the name of the VPN Path to usetype==wan: the name of the WAN interface to use
- Networks []string
- List of network names used when
type==local - Target
Ips []string - List of destination IP addresses to replace when
type==local - Wan
Name string - Optional if
type==vpn; WAN interface name associated with the VPN path
- type string
- Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
- cost number
- Relative cost assigned to this path for gateway path selection
- disabled bool
- For SSR Only.
true, if this specific path is undesired - gateway_
ip string - Only if
type==local, if a different gateway is desired - internet_
access bool - Only if
type==vpn, if this vpn path can be used for internet - name string
- Required when
type==vpn: the name of the VPN Path to usetype==wan: the name of the WAN interface to use
- networks list(string)
- List of network names used when
type==local - target_
ips list(string) - List of destination IP addresses to replace when
type==local - wan_
name string - Optional if
type==vpn; WAN interface name associated with the VPN path
- type String
- Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
- cost Integer
- Relative cost assigned to this path for gateway path selection
- disabled Boolean
- For SSR Only.
true, if this specific path is undesired - gateway
Ip String - Only if
type==local, if a different gateway is desired - internet
Access Boolean - Only if
type==vpn, if this vpn path can be used for internet - name String
- Required when
type==vpn: the name of the VPN Path to usetype==wan: the name of the WAN interface to use
- networks List<String>
- List of network names used when
type==local - target
Ips List<String> - List of destination IP addresses to replace when
type==local - wan
Name String - Optional if
type==vpn; WAN interface name associated with the VPN path
- type string
- Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
- cost number
- Relative cost assigned to this path for gateway path selection
- disabled boolean
- For SSR Only.
true, if this specific path is undesired - gateway
Ip string - Only if
type==local, if a different gateway is desired - internet
Access boolean - Only if
type==vpn, if this vpn path can be used for internet - name string
- Required when
type==vpn: the name of the VPN Path to usetype==wan: the name of the WAN interface to use
- networks string[]
- List of network names used when
type==local - target
Ips string[] - List of destination IP addresses to replace when
type==local - wan
Name string - Optional if
type==vpn; WAN interface name associated with the VPN path
- type str
- Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
- cost int
- Relative cost assigned to this path for gateway path selection
- disabled bool
- For SSR Only.
true, if this specific path is undesired - gateway_
ip str - Only if
type==local, if a different gateway is desired - internet_
access bool - Only if
type==vpn, if this vpn path can be used for internet - name str
- Required when
type==vpn: the name of the VPN Path to usetype==wan: the name of the WAN interface to use
- networks Sequence[str]
- List of network names used when
type==local - target_
ips Sequence[str] - List of destination IP addresses to replace when
type==local - wan_
name str - Optional if
type==vpn; WAN interface name associated with the VPN path
- type String
- Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
- cost Number
- Relative cost assigned to this path for gateway path selection
- disabled Boolean
- For SSR Only.
true, if this specific path is undesired - gateway
Ip String - Only if
type==local, if a different gateway is desired - internet
Access Boolean - Only if
type==vpn, if this vpn path can be used for internet - name String
- Required when
type==vpn: the name of the VPN Path to usetype==wan: the name of the WAN interface to use
- networks List<String>
- List of network names used when
type==local - target
Ips List<String> - List of destination IP addresses to replace when
type==local - wan
Name String - Optional if
type==vpn; WAN interface name associated with the VPN path
GatewayPortConfig, GatewayPortConfigArgs
- Usage string
- Logical usage assigned to the port
- Ae
Disable boolLacp - If
aggregated==true. To disable LCP support for the AE interface - Ae
Idx string - If
aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127) - Ae
Lacp boolForce Up - For SRX only, if
aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - Aggregated bool
- Whether the port participates in an aggregated Ethernet interface
- Critical bool
- To generate port up/down alarm, set it to true
- Description string
- Interface Description. Can be a variable (i.e. "{{myvar}}")
- Disable
Autoneg bool - Whether Ethernet autonegotiation is disabled on the port
- Disabled bool
- Port admin up (true) / down (false)
- Dsl
Type string - If
wanType==dsl. DSL technology used by the WAN port - Dsl
Vci int - If
wanType==dsl, 16 bit int - Dsl
Vpi int - If
wanType==dsl, 8 bit int - Duplex string
- Ethernet duplex mode configured on the port
- Ip
Config Pulumi.Juniper Mist. Device. Inputs. Gateway Port Config Ip Config - Layer 3 IP configuration for the port
- Lte
Apn string - If
wanType==lte. APN used by the LTE uplink - Lte
Auth string - If
wanType==lte. Authentication method used by the LTE uplink - Lte
Backup bool - Whether the LTE uplink is used as a backup WAN connection
- Lte
Password string - If
wanType==lte. Password used for LTE uplink authentication - Lte
Username string - If
wanType==lte. Username used for LTE uplink authentication - Mtu int
- Layer 3 MTU configured on the port
- Name string
- Interface name used to derive device configuration
- Networks List<string>
- if
usage==lan, name of thejunipermist.org.Networkresource - Outer
Vlan intId - For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
- Poe
Disabled bool - Whether PoE output is disabled on the port
- Poe
Keep boolState When Reboot - Whether Perpetual PoE capabilities are enabled for a port
- Port
Network string - Only for SRX and if
usage==lan, the name of the Network to be used as the Untagged VLAN - Preserve
Dscp bool - Whether to preserve dscp when sending traffic over VPN (SSR-only)
- Redundant bool
- If HA mode. Whether the port participates in the redundant Ethernet configuration
- Redundant
Group int - If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
- Reth
Idx string - For SRX only and if HA Mode
- Reth
Node string - If HA mode. Node associated with the redundant Ethernet interface
- Reth
Nodes List<string> - If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
- Speed string
- Link speed configured on the port
- Ssr
No boolVirtual Mac - When SSR is running as VM, this is required on certain hosting platforms
- Svr
Port stringRange - For SSR only. Port range configured on the interface
- Traffic
Shaping Pulumi.Juniper Mist. Device. Inputs. Gateway Port Config Traffic Shaping - Traffic shaping settings applied to the port
- Vlan
Id string - VLAN ID or variable used when the WAN interface is carried on a VLAN
- Vpn
Paths Dictionary<string, Pulumi.Juniper Mist. Device. Inputs. Gateway Port Config Vpn Paths> - Per-VPN path settings for traffic that uses this port
- Wan
Arp stringPolicer - Only when
wanType==broadband. ARP policer profile applied to the WAN port - Wan
Ext stringIp - Only if
usage==wan, optional. If spoke should reach this port by a different IP - Wan
Ext stringIp6 - Only if
usage==wan, optional. If spoke should reach this port by a different IPv6 - Wan
Extra Dictionary<string, Pulumi.Routes Juniper Mist. Device. Inputs. Gateway Port Config Wan Extra Routes> - Only if
usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24") - Wan
Extra Dictionary<string, Pulumi.Routes6 Juniper Mist. Device. Inputs. Gateway Port Config Wan Extra Routes6> - Only if
usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64") - Wan
Networks List<string> - Only if
usage==wan. Networks reachable through this WAN port for policy definition - Wan
Probe Pulumi.Override Juniper Mist. Device. Inputs. Gateway Port Config Wan Probe Override - Optional WAN health probe override settings for this port
- Wan
Source Pulumi.Nat Juniper Mist. Device. Inputs. Gateway Port Config Wan Source Nat - Source NAT settings applied to traffic leaving this WAN port
- Wan
Speedtest stringMode - Controls whether Marvis or the scheduler can run speed tests on this WAN port
- Wan
Type string - Only if
usage==wan. WAN uplink type configured on the port
- Usage string
- Logical usage assigned to the port
- Ae
Disable boolLacp - If
aggregated==true. To disable LCP support for the AE interface - Ae
Idx string - If
aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127) - Ae
Lacp boolForce Up - For SRX only, if
aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - Aggregated bool
- Whether the port participates in an aggregated Ethernet interface
- Critical bool
- To generate port up/down alarm, set it to true
- Description string
- Interface Description. Can be a variable (i.e. "{{myvar}}")
- Disable
Autoneg bool - Whether Ethernet autonegotiation is disabled on the port
- Disabled bool
- Port admin up (true) / down (false)
- Dsl
Type string - If
wanType==dsl. DSL technology used by the WAN port - Dsl
Vci int - If
wanType==dsl, 16 bit int - Dsl
Vpi int - If
wanType==dsl, 8 bit int - Duplex string
- Ethernet duplex mode configured on the port
- Ip
Config GatewayPort Config Ip Config - Layer 3 IP configuration for the port
- Lte
Apn string - If
wanType==lte. APN used by the LTE uplink - Lte
Auth string - If
wanType==lte. Authentication method used by the LTE uplink - Lte
Backup bool - Whether the LTE uplink is used as a backup WAN connection
- Lte
Password string - If
wanType==lte. Password used for LTE uplink authentication - Lte
Username string - If
wanType==lte. Username used for LTE uplink authentication - Mtu int
- Layer 3 MTU configured on the port
- Name string
- Interface name used to derive device configuration
- Networks []string
- if
usage==lan, name of thejunipermist.org.Networkresource - Outer
Vlan intId - For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
- Poe
Disabled bool - Whether PoE output is disabled on the port
- Poe
Keep boolState When Reboot - Whether Perpetual PoE capabilities are enabled for a port
- Port
Network string - Only for SRX and if
usage==lan, the name of the Network to be used as the Untagged VLAN - Preserve
Dscp bool - Whether to preserve dscp when sending traffic over VPN (SSR-only)
- Redundant bool
- If HA mode. Whether the port participates in the redundant Ethernet configuration
- Redundant
Group int - If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
- Reth
Idx string - For SRX only and if HA Mode
- Reth
Node string - If HA mode. Node associated with the redundant Ethernet interface
- Reth
Nodes []string - If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
- Speed string
- Link speed configured on the port
- Ssr
No boolVirtual Mac - When SSR is running as VM, this is required on certain hosting platforms
- Svr
Port stringRange - For SSR only. Port range configured on the interface
- Traffic
Shaping GatewayPort Config Traffic Shaping - Traffic shaping settings applied to the port
- Vlan
Id string - VLAN ID or variable used when the WAN interface is carried on a VLAN
- Vpn
Paths map[string]GatewayPort Config Vpn Paths - Per-VPN path settings for traffic that uses this port
- Wan
Arp stringPolicer - Only when
wanType==broadband. ARP policer profile applied to the WAN port - Wan
Ext stringIp - Only if
usage==wan, optional. If spoke should reach this port by a different IP - Wan
Ext stringIp6 - Only if
usage==wan, optional. If spoke should reach this port by a different IPv6 - Wan
Extra map[string]GatewayRoutes Port Config Wan Extra Routes - Only if
usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24") - Wan
Extra map[string]GatewayRoutes6 Port Config Wan Extra Routes6 - Only if
usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64") - Wan
Networks []string - Only if
usage==wan. Networks reachable through this WAN port for policy definition - Wan
Probe GatewayOverride Port Config Wan Probe Override - Optional WAN health probe override settings for this port
- Wan
Source GatewayNat Port Config Wan Source Nat - Source NAT settings applied to traffic leaving this WAN port
- Wan
Speedtest stringMode - Controls whether Marvis or the scheduler can run speed tests on this WAN port
- Wan
Type string - Only if
usage==wan. WAN uplink type configured on the port
- usage string
- Logical usage assigned to the port
- ae_
disable_ boollacp - If
aggregated==true. To disable LCP support for the AE interface - ae_
idx string - If
aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127) - ae_
lacp_ boolforce_ up - For SRX only, if
aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - aggregated bool
- Whether the port participates in an aggregated Ethernet interface
- critical bool
- To generate port up/down alarm, set it to true
- description string
- Interface Description. Can be a variable (i.e. "{{myvar}}")
- disable_
autoneg bool - Whether Ethernet autonegotiation is disabled on the port
- disabled bool
- Port admin up (true) / down (false)
- dsl_
type string - If
wanType==dsl. DSL technology used by the WAN port - dsl_
vci number - If
wanType==dsl, 16 bit int - dsl_
vpi number - If
wanType==dsl, 8 bit int - duplex string
- Ethernet duplex mode configured on the port
- ip_
config object - Layer 3 IP configuration for the port
- lte_
apn string - If
wanType==lte. APN used by the LTE uplink - lte_
auth string - If
wanType==lte. Authentication method used by the LTE uplink - lte_
backup bool - Whether the LTE uplink is used as a backup WAN connection
- lte_
password string - If
wanType==lte. Password used for LTE uplink authentication - lte_
username string - If
wanType==lte. Username used for LTE uplink authentication - mtu number
- Layer 3 MTU configured on the port
- name string
- Interface name used to derive device configuration
- networks list(string)
- if
usage==lan, name of thejunipermist.org.Networkresource - outer_
vlan_ numberid - For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
- poe_
disabled bool - Whether PoE output is disabled on the port
- poe_
keep_ boolstate_ when_ reboot - Whether Perpetual PoE capabilities are enabled for a port
- port_
network string - Only for SRX and if
usage==lan, the name of the Network to be used as the Untagged VLAN - preserve_
dscp bool - Whether to preserve dscp when sending traffic over VPN (SSR-only)
- redundant bool
- If HA mode. Whether the port participates in the redundant Ethernet configuration
- redundant_
group number - If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
- reth_
idx string - For SRX only and if HA Mode
- reth_
node string - If HA mode. Node associated with the redundant Ethernet interface
- reth_
nodes list(string) - If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
- speed string
- Link speed configured on the port
- ssr_
no_ boolvirtual_ mac - When SSR is running as VM, this is required on certain hosting platforms
- svr_
port_ stringrange - For SSR only. Port range configured on the interface
- traffic_
shaping object - Traffic shaping settings applied to the port
- vlan_
id string - VLAN ID or variable used when the WAN interface is carried on a VLAN
- vpn_
paths map(object) - Per-VPN path settings for traffic that uses this port
- wan_
arp_ stringpolicer - Only when
wanType==broadband. ARP policer profile applied to the WAN port - wan_
ext_ stringip - Only if
usage==wan, optional. If spoke should reach this port by a different IP - wan_
ext_ stringip6 - Only if
usage==wan, optional. If spoke should reach this port by a different IPv6 - wan_
extra_ map(object)routes - Only if
usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24") - wan_
extra_ map(object)routes6 - Only if
usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64") - wan_
networks list(string) - Only if
usage==wan. Networks reachable through this WAN port for policy definition - wan_
probe_ objectoverride - Optional WAN health probe override settings for this port
- wan_
source_ objectnat - Source NAT settings applied to traffic leaving this WAN port
- wan_
speedtest_ stringmode - Controls whether Marvis or the scheduler can run speed tests on this WAN port
- wan_
type string - Only if
usage==wan. WAN uplink type configured on the port
- usage String
- Logical usage assigned to the port
- ae
Disable BooleanLacp - If
aggregated==true. To disable LCP support for the AE interface - ae
Idx String - If
aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127) - ae
Lacp BooleanForce Up - For SRX only, if
aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - aggregated Boolean
- Whether the port participates in an aggregated Ethernet interface
- critical Boolean
- To generate port up/down alarm, set it to true
- description String
- Interface Description. Can be a variable (i.e. "{{myvar}}")
- disable
Autoneg Boolean - Whether Ethernet autonegotiation is disabled on the port
- disabled Boolean
- Port admin up (true) / down (false)
- dsl
Type String - If
wanType==dsl. DSL technology used by the WAN port - dsl
Vci Integer - If
wanType==dsl, 16 bit int - dsl
Vpi Integer - If
wanType==dsl, 8 bit int - duplex String
- Ethernet duplex mode configured on the port
- ip
Config GatewayPort Config Ip Config - Layer 3 IP configuration for the port
- lte
Apn String - If
wanType==lte. APN used by the LTE uplink - lte
Auth String - If
wanType==lte. Authentication method used by the LTE uplink - lte
Backup Boolean - Whether the LTE uplink is used as a backup WAN connection
- lte
Password String - If
wanType==lte. Password used for LTE uplink authentication - lte
Username String - If
wanType==lte. Username used for LTE uplink authentication - mtu Integer
- Layer 3 MTU configured on the port
- name String
- Interface name used to derive device configuration
- networks List<String>
- if
usage==lan, name of thejunipermist.org.Networkresource - outer
Vlan IntegerId - For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
- poe
Disabled Boolean - Whether PoE output is disabled on the port
- poe
Keep BooleanState When Reboot - Whether Perpetual PoE capabilities are enabled for a port
- port
Network String - Only for SRX and if
usage==lan, the name of the Network to be used as the Untagged VLAN - preserve
Dscp Boolean - Whether to preserve dscp when sending traffic over VPN (SSR-only)
- redundant Boolean
- If HA mode. Whether the port participates in the redundant Ethernet configuration
- redundant
Group Integer - If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
- reth
Idx String - For SRX only and if HA Mode
- reth
Node String - If HA mode. Node associated with the redundant Ethernet interface
- reth
Nodes List<String> - If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
- speed String
- Link speed configured on the port
- ssr
No BooleanVirtual Mac - When SSR is running as VM, this is required on certain hosting platforms
- svr
Port StringRange - For SSR only. Port range configured on the interface
- traffic
Shaping GatewayPort Config Traffic Shaping - Traffic shaping settings applied to the port
- vlan
Id String - VLAN ID or variable used when the WAN interface is carried on a VLAN
- vpn
Paths Map<String,GatewayPort Config Vpn Paths> - Per-VPN path settings for traffic that uses this port
- wan
Arp StringPolicer - Only when
wanType==broadband. ARP policer profile applied to the WAN port - wan
Ext StringIp - Only if
usage==wan, optional. If spoke should reach this port by a different IP - wan
Ext StringIp6 - Only if
usage==wan, optional. If spoke should reach this port by a different IPv6 - wan
Extra Map<String,GatewayRoutes Port Config Wan Extra Routes> - Only if
usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24") - wan
Extra Map<String,GatewayRoutes6 Port Config Wan Extra Routes6> - Only if
usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64") - wan
Networks List<String> - Only if
usage==wan. Networks reachable through this WAN port for policy definition - wan
Probe GatewayOverride Port Config Wan Probe Override - Optional WAN health probe override settings for this port
- wan
Source GatewayNat Port Config Wan Source Nat - Source NAT settings applied to traffic leaving this WAN port
- wan
Speedtest StringMode - Controls whether Marvis or the scheduler can run speed tests on this WAN port
- wan
Type String - Only if
usage==wan. WAN uplink type configured on the port
- usage string
- Logical usage assigned to the port
- ae
Disable booleanLacp - If
aggregated==true. To disable LCP support for the AE interface - ae
Idx string - If
aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127) - ae
Lacp booleanForce Up - For SRX only, if
aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - aggregated boolean
- Whether the port participates in an aggregated Ethernet interface
- critical boolean
- To generate port up/down alarm, set it to true
- description string
- Interface Description. Can be a variable (i.e. "{{myvar}}")
- disable
Autoneg boolean - Whether Ethernet autonegotiation is disabled on the port
- disabled boolean
- Port admin up (true) / down (false)
- dsl
Type string - If
wanType==dsl. DSL technology used by the WAN port - dsl
Vci number - If
wanType==dsl, 16 bit int - dsl
Vpi number - If
wanType==dsl, 8 bit int - duplex string
- Ethernet duplex mode configured on the port
- ip
Config GatewayPort Config Ip Config - Layer 3 IP configuration for the port
- lte
Apn string - If
wanType==lte. APN used by the LTE uplink - lte
Auth string - If
wanType==lte. Authentication method used by the LTE uplink - lte
Backup boolean - Whether the LTE uplink is used as a backup WAN connection
- lte
Password string - If
wanType==lte. Password used for LTE uplink authentication - lte
Username string - If
wanType==lte. Username used for LTE uplink authentication - mtu number
- Layer 3 MTU configured on the port
- name string
- Interface name used to derive device configuration
- networks string[]
- if
usage==lan, name of thejunipermist.org.Networkresource - outer
Vlan numberId - For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
- poe
Disabled boolean - Whether PoE output is disabled on the port
- poe
Keep booleanState When Reboot - Whether Perpetual PoE capabilities are enabled for a port
- port
Network string - Only for SRX and if
usage==lan, the name of the Network to be used as the Untagged VLAN - preserve
Dscp boolean - Whether to preserve dscp when sending traffic over VPN (SSR-only)
- redundant boolean
- If HA mode. Whether the port participates in the redundant Ethernet configuration
- redundant
Group number - If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
- reth
Idx string - For SRX only and if HA Mode
- reth
Node string - If HA mode. Node associated with the redundant Ethernet interface
- reth
Nodes string[] - If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
- speed string
- Link speed configured on the port
- ssr
No booleanVirtual Mac - When SSR is running as VM, this is required on certain hosting platforms
- svr
Port stringRange - For SSR only. Port range configured on the interface
- traffic
Shaping GatewayPort Config Traffic Shaping - Traffic shaping settings applied to the port
- vlan
Id string - VLAN ID or variable used when the WAN interface is carried on a VLAN
- vpn
Paths {[key: string]: GatewayPort Config Vpn Paths} - Per-VPN path settings for traffic that uses this port
- wan
Arp stringPolicer - Only when
wanType==broadband. ARP policer profile applied to the WAN port - wan
Ext stringIp - Only if
usage==wan, optional. If spoke should reach this port by a different IP - wan
Ext stringIp6 - Only if
usage==wan, optional. If spoke should reach this port by a different IPv6 - wan
Extra {[key: string]: GatewayRoutes Port Config Wan Extra Routes} - Only if
usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24") - wan
Extra {[key: string]: GatewayRoutes6 Port Config Wan Extra Routes6} - Only if
usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64") - wan
Networks string[] - Only if
usage==wan. Networks reachable through this WAN port for policy definition - wan
Probe GatewayOverride Port Config Wan Probe Override - Optional WAN health probe override settings for this port
- wan
Source GatewayNat Port Config Wan Source Nat - Source NAT settings applied to traffic leaving this WAN port
- wan
Speedtest stringMode - Controls whether Marvis or the scheduler can run speed tests on this WAN port
- wan
Type string - Only if
usage==wan. WAN uplink type configured on the port
- usage str
- Logical usage assigned to the port
- ae_
disable_ boollacp - If
aggregated==true. To disable LCP support for the AE interface - ae_
idx str - If
aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127) - ae_
lacp_ boolforce_ up - For SRX only, if
aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - aggregated bool
- Whether the port participates in an aggregated Ethernet interface
- critical bool
- To generate port up/down alarm, set it to true
- description str
- Interface Description. Can be a variable (i.e. "{{myvar}}")
- disable_
autoneg bool - Whether Ethernet autonegotiation is disabled on the port
- disabled bool
- Port admin up (true) / down (false)
- dsl_
type str - If
wanType==dsl. DSL technology used by the WAN port - dsl_
vci int - If
wanType==dsl, 16 bit int - dsl_
vpi int - If
wanType==dsl, 8 bit int - duplex str
- Ethernet duplex mode configured on the port
- ip_
config GatewayPort Config Ip Config - Layer 3 IP configuration for the port
- lte_
apn str - If
wanType==lte. APN used by the LTE uplink - lte_
auth str - If
wanType==lte. Authentication method used by the LTE uplink - lte_
backup bool - Whether the LTE uplink is used as a backup WAN connection
- lte_
password str - If
wanType==lte. Password used for LTE uplink authentication - lte_
username str - If
wanType==lte. Username used for LTE uplink authentication - mtu int
- Layer 3 MTU configured on the port
- name str
- Interface name used to derive device configuration
- networks Sequence[str]
- if
usage==lan, name of thejunipermist.org.Networkresource - outer_
vlan_ intid - For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
- poe_
disabled bool - Whether PoE output is disabled on the port
- poe_
keep_ boolstate_ when_ reboot - Whether Perpetual PoE capabilities are enabled for a port
- port_
network str - Only for SRX and if
usage==lan, the name of the Network to be used as the Untagged VLAN - preserve_
dscp bool - Whether to preserve dscp when sending traffic over VPN (SSR-only)
- redundant bool
- If HA mode. Whether the port participates in the redundant Ethernet configuration
- redundant_
group int - If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
- reth_
idx str - For SRX only and if HA Mode
- reth_
node str - If HA mode. Node associated with the redundant Ethernet interface
- reth_
nodes Sequence[str] - If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
- speed str
- Link speed configured on the port
- ssr_
no_ boolvirtual_ mac - When SSR is running as VM, this is required on certain hosting platforms
- svr_
port_ strrange - For SSR only. Port range configured on the interface
- traffic_
shaping GatewayPort Config Traffic Shaping - Traffic shaping settings applied to the port
- vlan_
id str - VLAN ID or variable used when the WAN interface is carried on a VLAN
- vpn_
paths Mapping[str, GatewayPort Config Vpn Paths] - Per-VPN path settings for traffic that uses this port
- wan_
arp_ strpolicer - Only when
wanType==broadband. ARP policer profile applied to the WAN port - wan_
ext_ strip - Only if
usage==wan, optional. If spoke should reach this port by a different IP - wan_
ext_ strip6 - Only if
usage==wan, optional. If spoke should reach this port by a different IPv6 - wan_
extra_ Mapping[str, Gatewayroutes Port Config Wan Extra Routes] - Only if
usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24") - wan_
extra_ Mapping[str, Gatewayroutes6 Port Config Wan Extra Routes6] - Only if
usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64") - wan_
networks Sequence[str] - Only if
usage==wan. Networks reachable through this WAN port for policy definition - wan_
probe_ Gatewayoverride Port Config Wan Probe Override - Optional WAN health probe override settings for this port
- wan_
source_ Gatewaynat Port Config Wan Source Nat - Source NAT settings applied to traffic leaving this WAN port
- wan_
speedtest_ strmode - Controls whether Marvis or the scheduler can run speed tests on this WAN port
- wan_
type str - Only if
usage==wan. WAN uplink type configured on the port
- usage String
- Logical usage assigned to the port
- ae
Disable BooleanLacp - If
aggregated==true. To disable LCP support for the AE interface - ae
Idx String - If
aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127) - ae
Lacp BooleanForce Up - For SRX only, if
aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - aggregated Boolean
- Whether the port participates in an aggregated Ethernet interface
- critical Boolean
- To generate port up/down alarm, set it to true
- description String
- Interface Description. Can be a variable (i.e. "{{myvar}}")
- disable
Autoneg Boolean - Whether Ethernet autonegotiation is disabled on the port
- disabled Boolean
- Port admin up (true) / down (false)
- dsl
Type String - If
wanType==dsl. DSL technology used by the WAN port - dsl
Vci Number - If
wanType==dsl, 16 bit int - dsl
Vpi Number - If
wanType==dsl, 8 bit int - duplex String
- Ethernet duplex mode configured on the port
- ip
Config Property Map - Layer 3 IP configuration for the port
- lte
Apn String - If
wanType==lte. APN used by the LTE uplink - lte
Auth String - If
wanType==lte. Authentication method used by the LTE uplink - lte
Backup Boolean - Whether the LTE uplink is used as a backup WAN connection
- lte
Password String - If
wanType==lte. Password used for LTE uplink authentication - lte
Username String - If
wanType==lte. Username used for LTE uplink authentication - mtu Number
- Layer 3 MTU configured on the port
- name String
- Interface name used to derive device configuration
- networks List<String>
- if
usage==lan, name of thejunipermist.org.Networkresource - outer
Vlan NumberId - For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
- poe
Disabled Boolean - Whether PoE output is disabled on the port
- poe
Keep BooleanState When Reboot - Whether Perpetual PoE capabilities are enabled for a port
- port
Network String - Only for SRX and if
usage==lan, the name of the Network to be used as the Untagged VLAN - preserve
Dscp Boolean - Whether to preserve dscp when sending traffic over VPN (SSR-only)
- redundant Boolean
- If HA mode. Whether the port participates in the redundant Ethernet configuration
- redundant
Group Number - If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
- reth
Idx String - For SRX only and if HA Mode
- reth
Node String - If HA mode. Node associated with the redundant Ethernet interface
- reth
Nodes List<String> - If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
- speed String
- Link speed configured on the port
- ssr
No BooleanVirtual Mac - When SSR is running as VM, this is required on certain hosting platforms
- svr
Port StringRange - For SSR only. Port range configured on the interface
- traffic
Shaping Property Map - Traffic shaping settings applied to the port
- vlan
Id String - VLAN ID or variable used when the WAN interface is carried on a VLAN
- vpn
Paths Map<Property Map> - Per-VPN path settings for traffic that uses this port
- wan
Arp StringPolicer - Only when
wanType==broadband. ARP policer profile applied to the WAN port - wan
Ext StringIp - Only if
usage==wan, optional. If spoke should reach this port by a different IP - wan
Ext StringIp6 - Only if
usage==wan, optional. If spoke should reach this port by a different IPv6 - wan
Extra Map<Property Map>Routes - Only if
usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24") - wan
Extra Map<Property Map>Routes6 - Only if
usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64") - wan
Networks List<String> - Only if
usage==wan. Networks reachable through this WAN port for policy definition - wan
Probe Property MapOverride - Optional WAN health probe override settings for this port
- wan
Source Property MapNat - Source NAT settings applied to traffic leaving this WAN port
- wan
Speedtest StringMode - Controls whether Marvis or the scheduler can run speed tests on this WAN port
- wan
Type String - Only if
usage==wan. WAN uplink type configured on the port
GatewayPortConfigIpConfig, GatewayPortConfigIpConfigArgs
- Dns List<string>
- Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- Dns
Suffixes List<string> - DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- Gateway string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
- Gateway6 string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
- Ip string
- Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
- Ip6 string
- Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
- Netmask string
- Used only if
subnetis not specified innetworks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}") - Netmask6 string
- Used only if
subnetis not specified innetworks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}") - Network string
- Optional, the network to be used for mgmt
- Poser
Password string - Password used for PPPoE when
type==pppoe - Pppoe
Auth string - Authentication protocol used for PPPoE when
type==pppoe - Pppoe
Username string - Username used for PPPoE when
type==pppoe - Type string
- IPv4 assignment mode for this gateway port interface
- Type6 string
- IPv6 assignment mode for this gateway port interface
- Dns []string
- Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- Dns
Suffixes []string - DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- Gateway string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
- Gateway6 string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
- Ip string
- Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
- Ip6 string
- Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
- Netmask string
- Used only if
subnetis not specified innetworks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}") - Netmask6 string
- Used only if
subnetis not specified innetworks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}") - Network string
- Optional, the network to be used for mgmt
- Poser
Password string - Password used for PPPoE when
type==pppoe - Pppoe
Auth string - Authentication protocol used for PPPoE when
type==pppoe - Pppoe
Username string - Username used for PPPoE when
type==pppoe - Type string
- IPv4 assignment mode for this gateway port interface
- Type6 string
- IPv6 assignment mode for this gateway port interface
- dns list(string)
- Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- dns_
suffixes list(string) - DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- gateway string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
- gateway6 string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
- ip string
- Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
- ip6 string
- Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
- netmask string
- Used only if
subnetis not specified innetworks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}") - netmask6 string
- Used only if
subnetis not specified innetworks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}") - network string
- Optional, the network to be used for mgmt
- poser_
password string - Password used for PPPoE when
type==pppoe - pppoe_
auth string - Authentication protocol used for PPPoE when
type==pppoe - pppoe_
username string - Username used for PPPoE when
type==pppoe - type string
- IPv4 assignment mode for this gateway port interface
- type6 string
- IPv6 assignment mode for this gateway port interface
- dns List<String>
- Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- dns
Suffixes List<String> - DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- gateway String
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
- gateway6 String
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
- ip String
- Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
- ip6 String
- Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
- netmask String
- Used only if
subnetis not specified innetworks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}") - netmask6 String
- Used only if
subnetis not specified innetworks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}") - network String
- Optional, the network to be used for mgmt
- poser
Password String - Password used for PPPoE when
type==pppoe - pppoe
Auth String - Authentication protocol used for PPPoE when
type==pppoe - pppoe
Username String - Username used for PPPoE when
type==pppoe - type String
- IPv4 assignment mode for this gateway port interface
- type6 String
- IPv6 assignment mode for this gateway port interface
- dns string[]
- Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- dns
Suffixes string[] - DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- gateway string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
- gateway6 string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
- ip string
- Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
- ip6 string
- Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
- netmask string
- Used only if
subnetis not specified innetworks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}") - netmask6 string
- Used only if
subnetis not specified innetworks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}") - network string
- Optional, the network to be used for mgmt
- poser
Password string - Password used for PPPoE when
type==pppoe - pppoe
Auth string - Authentication protocol used for PPPoE when
type==pppoe - pppoe
Username string - Username used for PPPoE when
type==pppoe - type string
- IPv4 assignment mode for this gateway port interface
- type6 string
- IPv6 assignment mode for this gateway port interface
- dns Sequence[str]
- Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- dns_
suffixes Sequence[str] - DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- gateway str
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
- gateway6 str
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
- ip str
- Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
- ip6 str
- Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
- netmask str
- Used only if
subnetis not specified innetworks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}") - netmask6 str
- Used only if
subnetis not specified innetworks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}") - network str
- Optional, the network to be used for mgmt
- poser_
password str - Password used for PPPoE when
type==pppoe - pppoe_
auth str - Authentication protocol used for PPPoE when
type==pppoe - pppoe_
username str - Username used for PPPoE when
type==pppoe - type str
- IPv4 assignment mode for this gateway port interface
- type6 str
- IPv6 assignment mode for this gateway port interface
- dns List<String>
- Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- dns
Suffixes List<String> - DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- gateway String
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
- gateway6 String
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
- ip String
- Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
- ip6 String
- Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
- netmask String
- Used only if
subnetis not specified innetworks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}") - netmask6 String
- Used only if
subnetis not specified innetworks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}") - network String
- Optional, the network to be used for mgmt
- poser
Password String - Password used for PPPoE when
type==pppoe - pppoe
Auth String - Authentication protocol used for PPPoE when
type==pppoe - pppoe
Username String - Username used for PPPoE when
type==pppoe - type String
- IPv4 assignment mode for this gateway port interface
- type6 String
- IPv6 assignment mode for this gateway port interface
GatewayPortConfigTrafficShaping, GatewayPortConfigTrafficShapingArgs
- Class
Percentages List<int> - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- Enabled bool
- Whether traffic shaping is enabled
- Max
Tx intKbps - Maximum transmit bandwidth for the interface, in Kbps
- Class
Percentages []int - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- Enabled bool
- Whether traffic shaping is enabled
- Max
Tx intKbps - Maximum transmit bandwidth for the interface, in Kbps
- class_
percentages list(number) - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled bool
- Whether traffic shaping is enabled
- max_
tx_ numberkbps - Maximum transmit bandwidth for the interface, in Kbps
- class
Percentages List<Integer> - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled Boolean
- Whether traffic shaping is enabled
- max
Tx IntegerKbps - Maximum transmit bandwidth for the interface, in Kbps
- class
Percentages number[] - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled boolean
- Whether traffic shaping is enabled
- max
Tx numberKbps - Maximum transmit bandwidth for the interface, in Kbps
- class_
percentages Sequence[int] - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled bool
- Whether traffic shaping is enabled
- max_
tx_ intkbps - Maximum transmit bandwidth for the interface, in Kbps
- class
Percentages List<Number> - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled Boolean
- Whether traffic shaping is enabled
- max
Tx NumberKbps - Maximum transmit bandwidth for the interface, in Kbps
GatewayPortConfigVpnPaths, GatewayPortConfigVpnPathsArgs
- Bfd
Profile string - BFD profile used for this VPN path when the VPN
type==hubSpoke - Bfd
Use boolTunnel Mode - Only if the VPN
type==hubSpoke. Whether to use tunnel mode. SSR only - Preference int
- Only if the VPN
type==hubSpoke. For a given VPN, whenpath_selection.strategy==simple, the preference for a path (lower is preferred) - Role string
- Gateway role for this VPN path; valid values depend on the VPN
type - Traffic
Shaping Pulumi.Juniper Mist. Device. Inputs. Gateway Port Config Vpn Paths Traffic Shaping - Traffic shaping settings applied to this VPN path
- Bfd
Profile string - BFD profile used for this VPN path when the VPN
type==hubSpoke - Bfd
Use boolTunnel Mode - Only if the VPN
type==hubSpoke. Whether to use tunnel mode. SSR only - Preference int
- Only if the VPN
type==hubSpoke. For a given VPN, whenpath_selection.strategy==simple, the preference for a path (lower is preferred) - Role string
- Gateway role for this VPN path; valid values depend on the VPN
type - Traffic
Shaping GatewayPort Config Vpn Paths Traffic Shaping - Traffic shaping settings applied to this VPN path
- bfd_
profile string - BFD profile used for this VPN path when the VPN
type==hubSpoke - bfd_
use_ booltunnel_ mode - Only if the VPN
type==hubSpoke. Whether to use tunnel mode. SSR only - preference number
- Only if the VPN
type==hubSpoke. For a given VPN, whenpath_selection.strategy==simple, the preference for a path (lower is preferred) - role string
- Gateway role for this VPN path; valid values depend on the VPN
type - traffic_
shaping object - Traffic shaping settings applied to this VPN path
- bfd
Profile String - BFD profile used for this VPN path when the VPN
type==hubSpoke - bfd
Use BooleanTunnel Mode - Only if the VPN
type==hubSpoke. Whether to use tunnel mode. SSR only - preference Integer
- Only if the VPN
type==hubSpoke. For a given VPN, whenpath_selection.strategy==simple, the preference for a path (lower is preferred) - role String
- Gateway role for this VPN path; valid values depend on the VPN
type - traffic
Shaping GatewayPort Config Vpn Paths Traffic Shaping - Traffic shaping settings applied to this VPN path
- bfd
Profile string - BFD profile used for this VPN path when the VPN
type==hubSpoke - bfd
Use booleanTunnel Mode - Only if the VPN
type==hubSpoke. Whether to use tunnel mode. SSR only - preference number
- Only if the VPN
type==hubSpoke. For a given VPN, whenpath_selection.strategy==simple, the preference for a path (lower is preferred) - role string
- Gateway role for this VPN path; valid values depend on the VPN
type - traffic
Shaping GatewayPort Config Vpn Paths Traffic Shaping - Traffic shaping settings applied to this VPN path
- bfd_
profile str - BFD profile used for this VPN path when the VPN
type==hubSpoke - bfd_
use_ booltunnel_ mode - Only if the VPN
type==hubSpoke. Whether to use tunnel mode. SSR only - preference int
- Only if the VPN
type==hubSpoke. For a given VPN, whenpath_selection.strategy==simple, the preference for a path (lower is preferred) - role str
- Gateway role for this VPN path; valid values depend on the VPN
type - traffic_
shaping GatewayPort Config Vpn Paths Traffic Shaping - Traffic shaping settings applied to this VPN path
- bfd
Profile String - BFD profile used for this VPN path when the VPN
type==hubSpoke - bfd
Use BooleanTunnel Mode - Only if the VPN
type==hubSpoke. Whether to use tunnel mode. SSR only - preference Number
- Only if the VPN
type==hubSpoke. For a given VPN, whenpath_selection.strategy==simple, the preference for a path (lower is preferred) - role String
- Gateway role for this VPN path; valid values depend on the VPN
type - traffic
Shaping Property Map - Traffic shaping settings applied to this VPN path
GatewayPortConfigVpnPathsTrafficShaping, GatewayPortConfigVpnPathsTrafficShapingArgs
- Class
Percentages List<int> - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- Enabled bool
- Whether traffic shaping is enabled
- Max
Tx intKbps - Maximum transmit bandwidth for the interface, in Kbps
- Class
Percentages []int - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- Enabled bool
- Whether traffic shaping is enabled
- Max
Tx intKbps - Maximum transmit bandwidth for the interface, in Kbps
- class_
percentages list(number) - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled bool
- Whether traffic shaping is enabled
- max_
tx_ numberkbps - Maximum transmit bandwidth for the interface, in Kbps
- class
Percentages List<Integer> - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled Boolean
- Whether traffic shaping is enabled
- max
Tx IntegerKbps - Maximum transmit bandwidth for the interface, in Kbps
- class
Percentages number[] - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled boolean
- Whether traffic shaping is enabled
- max
Tx numberKbps - Maximum transmit bandwidth for the interface, in Kbps
- class_
percentages Sequence[int] - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled bool
- Whether traffic shaping is enabled
- max_
tx_ intkbps - Maximum transmit bandwidth for the interface, in Kbps
- class
Percentages List<Number> - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled Boolean
- Whether traffic shaping is enabled
- max
Tx NumberKbps - Maximum transmit bandwidth for the interface, in Kbps
GatewayPortConfigWanExtraRoutes, GatewayPortConfigWanExtraRoutesArgs
- Via string
- IPv4 next-hop address for this WAN extra route
- Via string
- IPv4 next-hop address for this WAN extra route
- via string
- IPv4 next-hop address for this WAN extra route
- via String
- IPv4 next-hop address for this WAN extra route
- via string
- IPv4 next-hop address for this WAN extra route
- via str
- IPv4 next-hop address for this WAN extra route
- via String
- IPv4 next-hop address for this WAN extra route
GatewayPortConfigWanExtraRoutes6, GatewayPortConfigWanExtraRoutes6Args
- Via string
- IPv6 next-hop address for this WAN extra route
- Via string
- IPv6 next-hop address for this WAN extra route
- via string
- IPv6 next-hop address for this WAN extra route
- via String
- IPv6 next-hop address for this WAN extra route
- via string
- IPv6 next-hop address for this WAN extra route
- via str
- IPv6 next-hop address for this WAN extra route
- via String
- IPv6 next-hop address for this WAN extra route
GatewayPortConfigWanProbeOverride, GatewayPortConfigWanProbeOverrideArgs
- Ip6s List<string>
- List of IPv6 probe host addresses used by this WAN override
- Ips List<string>
- List of IPv4 probe host addresses used by this WAN override
- Probe
Profile string - WAN probe profile used for health checks on this port
- Ip6s []string
- List of IPv6 probe host addresses used by this WAN override
- Ips []string
- List of IPv4 probe host addresses used by this WAN override
- Probe
Profile string - WAN probe profile used for health checks on this port
- ip6s list(string)
- List of IPv6 probe host addresses used by this WAN override
- ips list(string)
- List of IPv4 probe host addresses used by this WAN override
- probe_
profile string - WAN probe profile used for health checks on this port
- ip6s List<String>
- List of IPv6 probe host addresses used by this WAN override
- ips List<String>
- List of IPv4 probe host addresses used by this WAN override
- probe
Profile String - WAN probe profile used for health checks on this port
- ip6s string[]
- List of IPv6 probe host addresses used by this WAN override
- ips string[]
- List of IPv4 probe host addresses used by this WAN override
- probe
Profile string - WAN probe profile used for health checks on this port
- ip6s Sequence[str]
- List of IPv6 probe host addresses used by this WAN override
- ips Sequence[str]
- List of IPv4 probe host addresses used by this WAN override
- probe_
profile str - WAN probe profile used for health checks on this port
- ip6s List<String>
- List of IPv6 probe host addresses used by this WAN override
- ips List<String>
- List of IPv4 probe host addresses used by this WAN override
- probe
Profile String - WAN probe profile used for health checks on this port
GatewayPortConfigWanSourceNat, GatewayPortConfigWanSourceNatArgs
GatewayPortMirroring, GatewayPortMirroringArgs
- Port
Mirror Pulumi.Juniper Mist. Device. Inputs. Gateway Port Mirroring Port Mirror - Mirroring rule that copies ingress traffic from source ports to an output port
- Port
Mirror GatewayPort Mirroring Port Mirror - Mirroring rule that copies ingress traffic from source ports to an output port
- port_
mirror object - Mirroring rule that copies ingress traffic from source ports to an output port
- port
Mirror GatewayPort Mirroring Port Mirror - Mirroring rule that copies ingress traffic from source ports to an output port
- port
Mirror GatewayPort Mirroring Port Mirror - Mirroring rule that copies ingress traffic from source ports to an output port
- port_
mirror GatewayPort Mirroring Port Mirror - Mirroring rule that copies ingress traffic from source ports to an output port
- port
Mirror Property Map - Mirroring rule that copies ingress traffic from source ports to an output port
GatewayPortMirroringPortMirror, GatewayPortMirroringPortMirrorArgs
- Family
Type string - Packet family used for this port mirroring rule
- Ingress
Port List<string>Ids - Source gateway port IDs whose ingress traffic is mirrored
- Output
Port stringId - Destination gateway port ID that receives mirrored traffic
- Rate int
- Sampling rate applied to mirrored traffic
- Run
Length int - Number of bytes copied from each mirrored packet
- Family
Type string - Packet family used for this port mirroring rule
- Ingress
Port []stringIds - Source gateway port IDs whose ingress traffic is mirrored
- Output
Port stringId - Destination gateway port ID that receives mirrored traffic
- Rate int
- Sampling rate applied to mirrored traffic
- Run
Length int - Number of bytes copied from each mirrored packet
- family_
type string - Packet family used for this port mirroring rule
- ingress_
port_ list(string)ids - Source gateway port IDs whose ingress traffic is mirrored
- output_
port_ stringid - Destination gateway port ID that receives mirrored traffic
- rate number
- Sampling rate applied to mirrored traffic
- run_
length number - Number of bytes copied from each mirrored packet
- family
Type String - Packet family used for this port mirroring rule
- ingress
Port List<String>Ids - Source gateway port IDs whose ingress traffic is mirrored
- output
Port StringId - Destination gateway port ID that receives mirrored traffic
- rate Integer
- Sampling rate applied to mirrored traffic
- run
Length Integer - Number of bytes copied from each mirrored packet
- family
Type string - Packet family used for this port mirroring rule
- ingress
Port string[]Ids - Source gateway port IDs whose ingress traffic is mirrored
- output
Port stringId - Destination gateway port ID that receives mirrored traffic
- rate number
- Sampling rate applied to mirrored traffic
- run
Length number - Number of bytes copied from each mirrored packet
- family_
type str - Packet family used for this port mirroring rule
- ingress_
port_ Sequence[str]ids - Source gateway port IDs whose ingress traffic is mirrored
- output_
port_ strid - Destination gateway port ID that receives mirrored traffic
- rate int
- Sampling rate applied to mirrored traffic
- run_
length int - Number of bytes copied from each mirrored packet
- family
Type String - Packet family used for this port mirroring rule
- ingress
Port List<String>Ids - Source gateway port IDs whose ingress traffic is mirrored
- output
Port StringId - Destination gateway port ID that receives mirrored traffic
- rate Number
- Sampling rate applied to mirrored traffic
- run
Length Number - Number of bytes copied from each mirrored packet
GatewayRoutingPolicies, GatewayRoutingPoliciesArgs
- Terms
List<Pulumi.
Juniper Mist. Device. Inputs. Gateway Routing Policies Term> - Ordered terms evaluated by this gateway routing policy
- Terms
[]Gateway
Routing Policies Term - Ordered terms evaluated by this gateway routing policy
- terms list(object)
- Ordered terms evaluated by this gateway routing policy
- terms
List<Gateway
Routing Policies Term> - Ordered terms evaluated by this gateway routing policy
- terms
Gateway
Routing Policies Term[] - Ordered terms evaluated by this gateway routing policy
- terms
Sequence[Gateway
Routing Policies Term] - Ordered terms evaluated by this gateway routing policy
- terms List<Property Map>
- Ordered terms evaluated by this gateway routing policy
GatewayRoutingPoliciesTerm, GatewayRoutingPoliciesTermArgs
- Actions
Pulumi.
Juniper Mist. Device. Inputs. Gateway Routing Policies Term Actions - Policy actions applied when this routing policy term matches
- Matching
Pulumi.
Juniper Mist. Device. Inputs. Gateway Routing Policies Term Matching - Route match criteria that must be satisfied before actions are applied
- Actions
Gateway
Routing Policies Term Actions - Policy actions applied when this routing policy term matches
- Matching
Gateway
Routing Policies Term Matching - Route match criteria that must be satisfied before actions are applied
- actions
Gateway
Routing Policies Term Actions - Policy actions applied when this routing policy term matches
- matching
Gateway
Routing Policies Term Matching - Route match criteria that must be satisfied before actions are applied
- actions
Gateway
Routing Policies Term Actions - Policy actions applied when this routing policy term matches
- matching
Gateway
Routing Policies Term Matching - Route match criteria that must be satisfied before actions are applied
- actions
Gateway
Routing Policies Term Actions - Policy actions applied when this routing policy term matches
- matching
Gateway
Routing Policies Term Matching - Route match criteria that must be satisfied before actions are applied
- actions Property Map
- Policy actions applied when this routing policy term matches
- matching Property Map
- Route match criteria that must be satisfied before actions are applied
GatewayRoutingPoliciesTermActions, GatewayRoutingPoliciesTermActionsArgs
- Accept bool
- Whether to accept routes that match this term
- Add
Communities List<string> - BGP communities to add to routes that match this term
- Add
Target List<string>Vrfs - SSR target VRFs to add when leaking routes from hub to spoke
- Communities List<string>
- BGP communities to set when this term is used as an export policy
- Exclude
As List<string>Paths - AS path values to exclude when this term is used as an export policy
- Exclude
Communities List<string> - BGP communities to exclude from routes that match this term
- Export
Communities List<string> - BGP communities allowed for export when this term is used as an export policy
- Local
Preference string - Preference value to set when this term is used as an import policy
- Prepend
As List<string>Paths - AS path values to prepend when this term is used as an export policy
- Accept bool
- Whether to accept routes that match this term
- Add
Communities []string - BGP communities to add to routes that match this term
- Add
Target []stringVrfs - SSR target VRFs to add when leaking routes from hub to spoke
- Communities []string
- BGP communities to set when this term is used as an export policy
- Exclude
As []stringPaths - AS path values to exclude when this term is used as an export policy
- Exclude
Communities []string - BGP communities to exclude from routes that match this term
- Export
Communities []string - BGP communities allowed for export when this term is used as an export policy
- Local
Preference string - Preference value to set when this term is used as an import policy
- Prepend
As []stringPaths - AS path values to prepend when this term is used as an export policy
- accept bool
- Whether to accept routes that match this term
- add_
communities list(string) - BGP communities to add to routes that match this term
- add_
target_ list(string)vrfs - SSR target VRFs to add when leaking routes from hub to spoke
- communities list(string)
- BGP communities to set when this term is used as an export policy
- exclude_
as_ list(string)paths - AS path values to exclude when this term is used as an export policy
- exclude_
communities list(string) - BGP communities to exclude from routes that match this term
- export_
communities list(string) - BGP communities allowed for export when this term is used as an export policy
- local_
preference string - Preference value to set when this term is used as an import policy
- prepend_
as_ list(string)paths - AS path values to prepend when this term is used as an export policy
- accept Boolean
- Whether to accept routes that match this term
- add
Communities List<String> - BGP communities to add to routes that match this term
- add
Target List<String>Vrfs - SSR target VRFs to add when leaking routes from hub to spoke
- communities List<String>
- BGP communities to set when this term is used as an export policy
- exclude
As List<String>Paths - AS path values to exclude when this term is used as an export policy
- exclude
Communities List<String> - BGP communities to exclude from routes that match this term
- export
Communities List<String> - BGP communities allowed for export when this term is used as an export policy
- local
Preference String - Preference value to set when this term is used as an import policy
- prepend
As List<String>Paths - AS path values to prepend when this term is used as an export policy
- accept boolean
- Whether to accept routes that match this term
- add
Communities string[] - BGP communities to add to routes that match this term
- add
Target string[]Vrfs - SSR target VRFs to add when leaking routes from hub to spoke
- communities string[]
- BGP communities to set when this term is used as an export policy
- exclude
As string[]Paths - AS path values to exclude when this term is used as an export policy
- exclude
Communities string[] - BGP communities to exclude from routes that match this term
- export
Communities string[] - BGP communities allowed for export when this term is used as an export policy
- local
Preference string - Preference value to set when this term is used as an import policy
- prepend
As string[]Paths - AS path values to prepend when this term is used as an export policy
- accept bool
- Whether to accept routes that match this term
- add_
communities Sequence[str] - BGP communities to add to routes that match this term
- add_
target_ Sequence[str]vrfs - SSR target VRFs to add when leaking routes from hub to spoke
- communities Sequence[str]
- BGP communities to set when this term is used as an export policy
- exclude_
as_ Sequence[str]paths - AS path values to exclude when this term is used as an export policy
- exclude_
communities Sequence[str] - BGP communities to exclude from routes that match this term
- export_
communities Sequence[str] - BGP communities allowed for export when this term is used as an export policy
- local_
preference str - Preference value to set when this term is used as an import policy
- prepend_
as_ Sequence[str]paths - AS path values to prepend when this term is used as an export policy
- accept Boolean
- Whether to accept routes that match this term
- add
Communities List<String> - BGP communities to add to routes that match this term
- add
Target List<String>Vrfs - SSR target VRFs to add when leaking routes from hub to spoke
- communities List<String>
- BGP communities to set when this term is used as an export policy
- exclude
As List<String>Paths - AS path values to exclude when this term is used as an export policy
- exclude
Communities List<String> - BGP communities to exclude from routes that match this term
- export
Communities List<String> - BGP communities allowed for export when this term is used as an export policy
- local
Preference String - Preference value to set when this term is used as an import policy
- prepend
As List<String>Paths - AS path values to prepend when this term is used as an export policy
GatewayRoutingPoliciesTermMatching, GatewayRoutingPoliciesTermMatchingArgs
- As
Paths List<string> - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - Communities List<string>
- BGP communities that routes must match
- Networks List<string>
- Configured network names that routes must match
- Prefixes List<string>
- Route prefixes that routes must match
- Protocols List<string>
- enum:
aggregate,bgp,direct,ospf,static(SRX Only) - Route
Exists Pulumi.Juniper Mist. Device. Inputs. Gateway Routing Policies Term Matching Route Exists - Existing route condition that must be satisfied before this term matches
- Vpn
Neighbor List<string>Macs - Overlay neighbor MAC addresses used as match criteria for BGP sessions with
via==vpn - Vpn
Path Pulumi.Sla Juniper Mist. Device. Inputs. Gateway Routing Policies Term Matching Vpn Path Sla - SLA thresholds used when matching a VPN path
- Vpn
Paths List<string> - Overlay path names used as match criteria for BGP sessions with
via==vpn
- As
Paths []string - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - Communities []string
- BGP communities that routes must match
- Networks []string
- Configured network names that routes must match
- Prefixes []string
- Route prefixes that routes must match
- Protocols []string
- enum:
aggregate,bgp,direct,ospf,static(SRX Only) - Route
Exists GatewayRouting Policies Term Matching Route Exists - Existing route condition that must be satisfied before this term matches
- Vpn
Neighbor []stringMacs - Overlay neighbor MAC addresses used as match criteria for BGP sessions with
via==vpn - Vpn
Path GatewaySla Routing Policies Term Matching Vpn Path Sla - SLA thresholds used when matching a VPN path
- Vpn
Paths []string - Overlay path names used as match criteria for BGP sessions with
via==vpn
- as_
paths list(string) - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - communities list(string)
- BGP communities that routes must match
- networks list(string)
- Configured network names that routes must match
- prefixes list(string)
- Route prefixes that routes must match
- protocols list(string)
- enum:
aggregate,bgp,direct,ospf,static(SRX Only) - route_
exists object - Existing route condition that must be satisfied before this term matches
- vpn_
neighbor_ list(string)macs - Overlay neighbor MAC addresses used as match criteria for BGP sessions with
via==vpn - vpn_
path_ objectsla - SLA thresholds used when matching a VPN path
- vpn_
paths list(string) - Overlay path names used as match criteria for BGP sessions with
via==vpn
- as
Paths List<String> - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - communities List<String>
- BGP communities that routes must match
- networks List<String>
- Configured network names that routes must match
- prefixes List<String>
- Route prefixes that routes must match
- protocols List<String>
- enum:
aggregate,bgp,direct,ospf,static(SRX Only) - route
Exists GatewayRouting Policies Term Matching Route Exists - Existing route condition that must be satisfied before this term matches
- vpn
Neighbor List<String>Macs - Overlay neighbor MAC addresses used as match criteria for BGP sessions with
via==vpn - vpn
Path GatewaySla Routing Policies Term Matching Vpn Path Sla - SLA thresholds used when matching a VPN path
- vpn
Paths List<String> - Overlay path names used as match criteria for BGP sessions with
via==vpn
- as
Paths string[] - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - communities string[]
- BGP communities that routes must match
- networks string[]
- Configured network names that routes must match
- prefixes string[]
- Route prefixes that routes must match
- protocols string[]
- enum:
aggregate,bgp,direct,ospf,static(SRX Only) - route
Exists GatewayRouting Policies Term Matching Route Exists - Existing route condition that must be satisfied before this term matches
- vpn
Neighbor string[]Macs - Overlay neighbor MAC addresses used as match criteria for BGP sessions with
via==vpn - vpn
Path GatewaySla Routing Policies Term Matching Vpn Path Sla - SLA thresholds used when matching a VPN path
- vpn
Paths string[] - Overlay path names used as match criteria for BGP sessions with
via==vpn
- as_
paths Sequence[str] - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - communities Sequence[str]
- BGP communities that routes must match
- networks Sequence[str]
- Configured network names that routes must match
- prefixes Sequence[str]
- Route prefixes that routes must match
- protocols Sequence[str]
- enum:
aggregate,bgp,direct,ospf,static(SRX Only) - route_
exists GatewayRouting Policies Term Matching Route Exists - Existing route condition that must be satisfied before this term matches
- vpn_
neighbor_ Sequence[str]macs - Overlay neighbor MAC addresses used as match criteria for BGP sessions with
via==vpn - vpn_
path_ Gatewaysla Routing Policies Term Matching Vpn Path Sla - SLA thresholds used when matching a VPN path
- vpn_
paths Sequence[str] - Overlay path names used as match criteria for BGP sessions with
via==vpn
- as
Paths List<String> - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - communities List<String>
- BGP communities that routes must match
- networks List<String>
- Configured network names that routes must match
- prefixes List<String>
- Route prefixes that routes must match
- protocols List<String>
- enum:
aggregate,bgp,direct,ospf,static(SRX Only) - route
Exists Property Map - Existing route condition that must be satisfied before this term matches
- vpn
Neighbor List<String>Macs - Overlay neighbor MAC addresses used as match criteria for BGP sessions with
via==vpn - vpn
Path Property MapSla - SLA thresholds used when matching a VPN path
- vpn
Paths List<String> - Overlay path names used as match criteria for BGP sessions with
via==vpn
GatewayRoutingPoliciesTermMatchingRouteExists, GatewayRoutingPoliciesTermMatchingRouteExistsArgs
GatewayRoutingPoliciesTermMatchingVpnPathSla, GatewayRoutingPoliciesTermMatchingVpnPathSlaArgs
- Max
Jitter int - Maximum jitter threshold allowed for the VPN path
- Max
Latency int - Maximum latency threshold allowed for the VPN path
- Max
Loss int - Maximum packet-loss threshold allowed for the VPN path
- Max
Jitter int - Maximum jitter threshold allowed for the VPN path
- Max
Latency int - Maximum latency threshold allowed for the VPN path
- Max
Loss int - Maximum packet-loss threshold allowed for the VPN path
- max_
jitter number - Maximum jitter threshold allowed for the VPN path
- max_
latency number - Maximum latency threshold allowed for the VPN path
- max_
loss number - Maximum packet-loss threshold allowed for the VPN path
- max
Jitter Integer - Maximum jitter threshold allowed for the VPN path
- max
Latency Integer - Maximum latency threshold allowed for the VPN path
- max
Loss Integer - Maximum packet-loss threshold allowed for the VPN path
- max
Jitter number - Maximum jitter threshold allowed for the VPN path
- max
Latency number - Maximum latency threshold allowed for the VPN path
- max
Loss number - Maximum packet-loss threshold allowed for the VPN path
- max_
jitter int - Maximum jitter threshold allowed for the VPN path
- max_
latency int - Maximum latency threshold allowed for the VPN path
- max_
loss int - Maximum packet-loss threshold allowed for the VPN path
- max
Jitter Number - Maximum jitter threshold allowed for the VPN path
- max
Latency Number - Maximum latency threshold allowed for the VPN path
- max
Loss Number - Maximum packet-loss threshold allowed for the VPN path
GatewayServicePolicy, GatewayServicePolicyArgs
- Action string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy action). enum:allow,deny - Antivirus
Pulumi.
Juniper Mist. Device. Inputs. Gateway Service Policy Antivirus - Malware and virus inspection settings applied by this service policy
- Appqoe
Pulumi.
Juniper Mist. Device. Inputs. Gateway Service Policy Appqoe - Application QoE settings applied by this service policy
- Ewfs
List<Pulumi.
Juniper Mist. Device. Inputs. Gateway Service Policy Ewf> - Enhanced web filtering rules applied by this service policy
- Idp
Pulumi.
Juniper Mist. Device. Inputs. Gateway Service Policy Idp - Intrusion detection and prevention settings applied by this service policy
- Local
Routing bool - Whether the policy permits access within the same VRF
- Name string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy name) - Path
Preference string - By default, we derive all paths available and use them. Optionally, you can customize by using
pathPreference - Servicepolicy
Id string - Organization-level service policy identifier used to link and override selected attributes
- Services List<string>
- Required when
servicepolicyIdis not defined. List of Applications / Destinations - Skyatp
Pulumi.
Juniper Mist. Device. Inputs. Gateway Service Policy Skyatp - Threat inspection settings provided by Sky ATP for this service policy
- Ssl
Proxy Pulumi.Juniper Mist. Device. Inputs. Gateway Service Policy Ssl Proxy - TLS inspection settings applied by this service policy
- Syslog
Pulumi.
Juniper Mist. Device. Inputs. Gateway Service Policy Syslog - Remote logging settings applied by this service policy
- Tenants List<string>
- Required when
servicepolicyIdis not defined. List of Networks / Users
- Action string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy action). enum:allow,deny - Antivirus
Gateway
Service Policy Antivirus - Malware and virus inspection settings applied by this service policy
- Appqoe
Gateway
Service Policy Appqoe - Application QoE settings applied by this service policy
- Ewfs
[]Gateway
Service Policy Ewf - Enhanced web filtering rules applied by this service policy
- Idp
Gateway
Service Policy Idp - Intrusion detection and prevention settings applied by this service policy
- Local
Routing bool - Whether the policy permits access within the same VRF
- Name string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy name) - Path
Preference string - By default, we derive all paths available and use them. Optionally, you can customize by using
pathPreference - Servicepolicy
Id string - Organization-level service policy identifier used to link and override selected attributes
- Services []string
- Required when
servicepolicyIdis not defined. List of Applications / Destinations - Skyatp
Gateway
Service Policy Skyatp - Threat inspection settings provided by Sky ATP for this service policy
- Ssl
Proxy GatewayService Policy Ssl Proxy - TLS inspection settings applied by this service policy
- Syslog
Gateway
Service Policy Syslog - Remote logging settings applied by this service policy
- Tenants []string
- Required when
servicepolicyIdis not defined. List of Networks / Users
- action string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy action). enum:allow,deny - antivirus object
- Malware and virus inspection settings applied by this service policy
- appqoe object
- Application QoE settings applied by this service policy
- ewfs list(object)
- Enhanced web filtering rules applied by this service policy
- idp object
- Intrusion detection and prevention settings applied by this service policy
- local_
routing bool - Whether the policy permits access within the same VRF
- name string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy name) - path_
preference string - By default, we derive all paths available and use them. Optionally, you can customize by using
pathPreference - servicepolicy_
id string - Organization-level service policy identifier used to link and override selected attributes
- services list(string)
- Required when
servicepolicyIdis not defined. List of Applications / Destinations - skyatp object
- Threat inspection settings provided by Sky ATP for this service policy
- ssl_
proxy object - TLS inspection settings applied by this service policy
- syslog object
- Remote logging settings applied by this service policy
- tenants list(string)
- Required when
servicepolicyIdis not defined. List of Networks / Users
- action String
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy action). enum:allow,deny - antivirus
Gateway
Service Policy Antivirus - Malware and virus inspection settings applied by this service policy
- appqoe
Gateway
Service Policy Appqoe - Application QoE settings applied by this service policy
- ewfs
List<Gateway
Service Policy Ewf> - Enhanced web filtering rules applied by this service policy
- idp
Gateway
Service Policy Idp - Intrusion detection and prevention settings applied by this service policy
- local
Routing Boolean - Whether the policy permits access within the same VRF
- name String
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy name) - path
Preference String - By default, we derive all paths available and use them. Optionally, you can customize by using
pathPreference - servicepolicy
Id String - Organization-level service policy identifier used to link and override selected attributes
- services List<String>
- Required when
servicepolicyIdis not defined. List of Applications / Destinations - skyatp
Gateway
Service Policy Skyatp - Threat inspection settings provided by Sky ATP for this service policy
- ssl
Proxy GatewayService Policy Ssl Proxy - TLS inspection settings applied by this service policy
- syslog
Gateway
Service Policy Syslog - Remote logging settings applied by this service policy
- tenants List<String>
- Required when
servicepolicyIdis not defined. List of Networks / Users
- action string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy action). enum:allow,deny - antivirus
Gateway
Service Policy Antivirus - Malware and virus inspection settings applied by this service policy
- appqoe
Gateway
Service Policy Appqoe - Application QoE settings applied by this service policy
- ewfs
Gateway
Service Policy Ewf[] - Enhanced web filtering rules applied by this service policy
- idp
Gateway
Service Policy Idp - Intrusion detection and prevention settings applied by this service policy
- local
Routing boolean - Whether the policy permits access within the same VRF
- name string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy name) - path
Preference string - By default, we derive all paths available and use them. Optionally, you can customize by using
pathPreference - servicepolicy
Id string - Organization-level service policy identifier used to link and override selected attributes
- services string[]
- Required when
servicepolicyIdis not defined. List of Applications / Destinations - skyatp
Gateway
Service Policy Skyatp - Threat inspection settings provided by Sky ATP for this service policy
- ssl
Proxy GatewayService Policy Ssl Proxy - TLS inspection settings applied by this service policy
- syslog
Gateway
Service Policy Syslog - Remote logging settings applied by this service policy
- tenants string[]
- Required when
servicepolicyIdis not defined. List of Networks / Users
- action str
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy action). enum:allow,deny - antivirus
Gateway
Service Policy Antivirus - Malware and virus inspection settings applied by this service policy
- appqoe
Gateway
Service Policy Appqoe - Application QoE settings applied by this service policy
- ewfs
Sequence[Gateway
Service Policy Ewf] - Enhanced web filtering rules applied by this service policy
- idp
Gateway
Service Policy Idp - Intrusion detection and prevention settings applied by this service policy
- local_
routing bool - Whether the policy permits access within the same VRF
- name str
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy name) - path_
preference str - By default, we derive all paths available and use them. Optionally, you can customize by using
pathPreference - servicepolicy_
id str - Organization-level service policy identifier used to link and override selected attributes
- services Sequence[str]
- Required when
servicepolicyIdis not defined. List of Applications / Destinations - skyatp
Gateway
Service Policy Skyatp - Threat inspection settings provided by Sky ATP for this service policy
- ssl_
proxy GatewayService Policy Ssl Proxy - TLS inspection settings applied by this service policy
- syslog
Gateway
Service Policy Syslog - Remote logging settings applied by this service policy
- tenants Sequence[str]
- Required when
servicepolicyIdis not defined. List of Networks / Users
- action String
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy action). enum:allow,deny - antivirus Property Map
- Malware and virus inspection settings applied by this service policy
- appqoe Property Map
- Application QoE settings applied by this service policy
- ewfs List<Property Map>
- Enhanced web filtering rules applied by this service policy
- idp Property Map
- Intrusion detection and prevention settings applied by this service policy
- local
Routing Boolean - Whether the policy permits access within the same VRF
- name String
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy name) - path
Preference String - By default, we derive all paths available and use them. Optionally, you can customize by using
pathPreference - servicepolicy
Id String - Organization-level service policy identifier used to link and override selected attributes
- services List<String>
- Required when
servicepolicyIdis not defined. List of Applications / Destinations - skyatp Property Map
- Threat inspection settings provided by Sky ATP for this service policy
- ssl
Proxy Property Map - TLS inspection settings applied by this service policy
- syslog Property Map
- Remote logging settings applied by this service policy
- tenants List<String>
- Required when
servicepolicyIdis not defined. List of Networks / Users
GatewayServicePolicyAntivirus, GatewayServicePolicyAntivirusArgs
- Avprofile
Id string - Organization-level antivirus profile ID; takes precedence over inline
profilesettings - Enabled bool
- Whether antivirus inspection is enabled for the service policy
- Profile string
- Antivirus profile name to apply, such as
default,noftp,httponly, or an AV profile key
- Avprofile
Id string - Organization-level antivirus profile ID; takes precedence over inline
profilesettings - Enabled bool
- Whether antivirus inspection is enabled for the service policy
- Profile string
- Antivirus profile name to apply, such as
default,noftp,httponly, or an AV profile key
- avprofile_
id string - Organization-level antivirus profile ID; takes precedence over inline
profilesettings - enabled bool
- Whether antivirus inspection is enabled for the service policy
- profile string
- Antivirus profile name to apply, such as
default,noftp,httponly, or an AV profile key
- avprofile
Id String - Organization-level antivirus profile ID; takes precedence over inline
profilesettings - enabled Boolean
- Whether antivirus inspection is enabled for the service policy
- profile String
- Antivirus profile name to apply, such as
default,noftp,httponly, or an AV profile key
- avprofile
Id string - Organization-level antivirus profile ID; takes precedence over inline
profilesettings - enabled boolean
- Whether antivirus inspection is enabled for the service policy
- profile string
- Antivirus profile name to apply, such as
default,noftp,httponly, or an AV profile key
- avprofile_
id str - Organization-level antivirus profile ID; takes precedence over inline
profilesettings - enabled bool
- Whether antivirus inspection is enabled for the service policy
- profile str
- Antivirus profile name to apply, such as
default,noftp,httponly, or an AV profile key
- avprofile
Id String - Organization-level antivirus profile ID; takes precedence over inline
profilesettings - enabled Boolean
- Whether antivirus inspection is enabled for the service policy
- profile String
- Antivirus profile name to apply, such as
default,noftp,httponly, or an AV profile key
GatewayServicePolicyAppqoe, GatewayServicePolicyAppqoeArgs
- Enabled bool
- Whether application QoE is enabled for the service policy
- Enabled bool
- Whether application QoE is enabled for the service policy
- enabled bool
- Whether application QoE is enabled for the service policy
- enabled Boolean
- Whether application QoE is enabled for the service policy
- enabled boolean
- Whether application QoE is enabled for the service policy
- enabled bool
- Whether application QoE is enabled for the service policy
- enabled Boolean
- Whether application QoE is enabled for the service policy
GatewayServicePolicyEwf, GatewayServicePolicyEwfArgs
- Alert
Only bool - Whether matching enhanced web filtering traffic is logged without being blocked
- Block
Message string - Message returned when enhanced web filtering blocks a request
- Enabled bool
- Whether this enhanced web filtering rule is enabled
- Profile string
- Enhanced web filtering profile applied by this rule
- Alert
Only bool - Whether matching enhanced web filtering traffic is logged without being blocked
- Block
Message string - Message returned when enhanced web filtering blocks a request
- Enabled bool
- Whether this enhanced web filtering rule is enabled
- Profile string
- Enhanced web filtering profile applied by this rule
- alert_
only bool - Whether matching enhanced web filtering traffic is logged without being blocked
- block_
message string - Message returned when enhanced web filtering blocks a request
- enabled bool
- Whether this enhanced web filtering rule is enabled
- profile string
- Enhanced web filtering profile applied by this rule
- alert
Only Boolean - Whether matching enhanced web filtering traffic is logged without being blocked
- block
Message String - Message returned when enhanced web filtering blocks a request
- enabled Boolean
- Whether this enhanced web filtering rule is enabled
- profile String
- Enhanced web filtering profile applied by this rule
- alert
Only boolean - Whether matching enhanced web filtering traffic is logged without being blocked
- block
Message string - Message returned when enhanced web filtering blocks a request
- enabled boolean
- Whether this enhanced web filtering rule is enabled
- profile string
- Enhanced web filtering profile applied by this rule
- alert_
only bool - Whether matching enhanced web filtering traffic is logged without being blocked
- block_
message str - Message returned when enhanced web filtering blocks a request
- enabled bool
- Whether this enhanced web filtering rule is enabled
- profile str
- Enhanced web filtering profile applied by this rule
- alert
Only Boolean - Whether matching enhanced web filtering traffic is logged without being blocked
- block
Message String - Message returned when enhanced web filtering blocks a request
- enabled Boolean
- Whether this enhanced web filtering rule is enabled
- profile String
- Enhanced web filtering profile applied by this rule
GatewayServicePolicyIdp, GatewayServicePolicyIdpArgs
- Alert
Only bool - Whether to alert without enforcing IDP prevention actions
- Enabled bool
- Whether IDP inspection is enabled for the policy
- Idpprofile
Id string - org_level IDP Profile can be used, this takes precedence over
profile - Profile string
- enum:
Custom,strict(default),standardor keys from idp_profiles
- Alert
Only bool - Whether to alert without enforcing IDP prevention actions
- Enabled bool
- Whether IDP inspection is enabled for the policy
- Idpprofile
Id string - org_level IDP Profile can be used, this takes precedence over
profile - Profile string
- enum:
Custom,strict(default),standardor keys from idp_profiles
- alert_
only bool - Whether to alert without enforcing IDP prevention actions
- enabled bool
- Whether IDP inspection is enabled for the policy
- idpprofile_
id string - org_level IDP Profile can be used, this takes precedence over
profile - profile string
- enum:
Custom,strict(default),standardor keys from idp_profiles
- alert
Only Boolean - Whether to alert without enforcing IDP prevention actions
- enabled Boolean
- Whether IDP inspection is enabled for the policy
- idpprofile
Id String - org_level IDP Profile can be used, this takes precedence over
profile - profile String
- enum:
Custom,strict(default),standardor keys from idp_profiles
- alert
Only boolean - Whether to alert without enforcing IDP prevention actions
- enabled boolean
- Whether IDP inspection is enabled for the policy
- idpprofile
Id string - org_level IDP Profile can be used, this takes precedence over
profile - profile string
- enum:
Custom,strict(default),standardor keys from idp_profiles
- alert_
only bool - Whether to alert without enforcing IDP prevention actions
- enabled bool
- Whether IDP inspection is enabled for the policy
- idpprofile_
id str - org_level IDP Profile can be used, this takes precedence over
profile - profile str
- enum:
Custom,strict(default),standardor keys from idp_profiles
- alert
Only Boolean - Whether to alert without enforcing IDP prevention actions
- enabled Boolean
- Whether IDP inspection is enabled for the policy
- idpprofile
Id String - org_level IDP Profile can be used, this takes precedence over
profile - profile String
- enum:
Custom,strict(default),standardor keys from idp_profiles
GatewayServicePolicySkyatp, GatewayServicePolicySkyatpArgs
- Dns
Dga Pulumi.Detection Juniper Mist. Device. Inputs. Gateway Service Policy Skyatp Dns Dga Detection - Detection settings for DNS DGA threats provided by Sky ATP
- Dns
Tunnel Pulumi.Detection Juniper Mist. Device. Inputs. Gateway Service Policy Skyatp Dns Tunnel Detection - Detection settings for DNS tunneling threats provided by Sky ATP
- Http
Inspection Pulumi.Juniper Mist. Device. Inputs. Gateway Service Policy Skyatp Http Inspection - Web traffic inspection settings provided by Sky ATP
- Iot
Device Pulumi.Policy Juniper Mist. Device. Inputs. Gateway Service Policy Skyatp Iot Device Policy - Device threat policy settings provided by Sky ATP for IoT clients
- Dns
Dga GatewayDetection Service Policy Skyatp Dns Dga Detection - Detection settings for DNS DGA threats provided by Sky ATP
- Dns
Tunnel GatewayDetection Service Policy Skyatp Dns Tunnel Detection - Detection settings for DNS tunneling threats provided by Sky ATP
- Http
Inspection GatewayService Policy Skyatp Http Inspection - Web traffic inspection settings provided by Sky ATP
- Iot
Device GatewayPolicy Service Policy Skyatp Iot Device Policy - Device threat policy settings provided by Sky ATP for IoT clients
- dns_
dga_ objectdetection - Detection settings for DNS DGA threats provided by Sky ATP
- dns_
tunnel_ objectdetection - Detection settings for DNS tunneling threats provided by Sky ATP
- http_
inspection object - Web traffic inspection settings provided by Sky ATP
- iot_
device_ objectpolicy - Device threat policy settings provided by Sky ATP for IoT clients
- dns
Dga GatewayDetection Service Policy Skyatp Dns Dga Detection - Detection settings for DNS DGA threats provided by Sky ATP
- dns
Tunnel GatewayDetection Service Policy Skyatp Dns Tunnel Detection - Detection settings for DNS tunneling threats provided by Sky ATP
- http
Inspection GatewayService Policy Skyatp Http Inspection - Web traffic inspection settings provided by Sky ATP
- iot
Device GatewayPolicy Service Policy Skyatp Iot Device Policy - Device threat policy settings provided by Sky ATP for IoT clients
- dns
Dga GatewayDetection Service Policy Skyatp Dns Dga Detection - Detection settings for DNS DGA threats provided by Sky ATP
- dns
Tunnel GatewayDetection Service Policy Skyatp Dns Tunnel Detection - Detection settings for DNS tunneling threats provided by Sky ATP
- http
Inspection GatewayService Policy Skyatp Http Inspection - Web traffic inspection settings provided by Sky ATP
- iot
Device GatewayPolicy Service Policy Skyatp Iot Device Policy - Device threat policy settings provided by Sky ATP for IoT clients
- dns_
dga_ Gatewaydetection Service Policy Skyatp Dns Dga Detection - Detection settings for DNS DGA threats provided by Sky ATP
- dns_
tunnel_ Gatewaydetection Service Policy Skyatp Dns Tunnel Detection - Detection settings for DNS tunneling threats provided by Sky ATP
- http_
inspection GatewayService Policy Skyatp Http Inspection - Web traffic inspection settings provided by Sky ATP
- iot_
device_ Gatewaypolicy Service Policy Skyatp Iot Device Policy - Device threat policy settings provided by Sky ATP for IoT clients
- dns
Dga Property MapDetection - Detection settings for DNS DGA threats provided by Sky ATP
- dns
Tunnel Property MapDetection - Detection settings for DNS tunneling threats provided by Sky ATP
- http
Inspection Property Map - Web traffic inspection settings provided by Sky ATP
- iot
Device Property MapPolicy - Device threat policy settings provided by Sky ATP for IoT clients
GatewayServicePolicySkyatpDnsDgaDetection, GatewayServicePolicySkyatpDnsDgaDetectionArgs
GatewayServicePolicySkyatpDnsTunnelDetection, GatewayServicePolicySkyatpDnsTunnelDetectionArgs
GatewayServicePolicySkyatpHttpInspection, GatewayServicePolicySkyatpHttpInspectionArgs
GatewayServicePolicySkyatpIotDevicePolicy, GatewayServicePolicySkyatpIotDevicePolicyArgs
- Enabled bool
- Whether Sky ATP IoT device policy inspection is enabled
- Enabled bool
- Whether Sky ATP IoT device policy inspection is enabled
- enabled bool
- Whether Sky ATP IoT device policy inspection is enabled
- enabled Boolean
- Whether Sky ATP IoT device policy inspection is enabled
- enabled boolean
- Whether Sky ATP IoT device policy inspection is enabled
- enabled bool
- Whether Sky ATP IoT device policy inspection is enabled
- enabled Boolean
- Whether Sky ATP IoT device policy inspection is enabled
GatewayServicePolicySslProxy, GatewayServicePolicySslProxyArgs
- Ciphers
Category string - Allowed cipher strength category for SSL proxy inspection
- Enabled bool
- Whether SSL proxy inspection is enabled for the service policy
- Ciphers
Category string - Allowed cipher strength category for SSL proxy inspection
- Enabled bool
- Whether SSL proxy inspection is enabled for the service policy
- ciphers_
category string - Allowed cipher strength category for SSL proxy inspection
- enabled bool
- Whether SSL proxy inspection is enabled for the service policy
- ciphers
Category String - Allowed cipher strength category for SSL proxy inspection
- enabled Boolean
- Whether SSL proxy inspection is enabled for the service policy
- ciphers
Category string - Allowed cipher strength category for SSL proxy inspection
- enabled boolean
- Whether SSL proxy inspection is enabled for the service policy
- ciphers_
category str - Allowed cipher strength category for SSL proxy inspection
- enabled bool
- Whether SSL proxy inspection is enabled for the service policy
- ciphers
Category String - Allowed cipher strength category for SSL proxy inspection
- enabled Boolean
- Whether SSL proxy inspection is enabled for the service policy
GatewayServicePolicySyslog, GatewayServicePolicySyslogArgs
- Enabled bool
- Whether syslog logging is enabled for the service policy
- Server
Names List<string> - Names of syslog servers that receive logs for this service policy
- Enabled bool
- Whether syslog logging is enabled for the service policy
- Server
Names []string - Names of syslog servers that receive logs for this service policy
- enabled bool
- Whether syslog logging is enabled for the service policy
- server_
names list(string) - Names of syslog servers that receive logs for this service policy
- enabled Boolean
- Whether syslog logging is enabled for the service policy
- server
Names List<String> - Names of syslog servers that receive logs for this service policy
- enabled boolean
- Whether syslog logging is enabled for the service policy
- server
Names string[] - Names of syslog servers that receive logs for this service policy
- enabled bool
- Whether syslog logging is enabled for the service policy
- server_
names Sequence[str] - Names of syslog servers that receive logs for this service policy
- enabled Boolean
- Whether syslog logging is enabled for the service policy
- server
Names List<String> - Names of syslog servers that receive logs for this service policy
GatewayTunnelConfigs, GatewayTunnelConfigsArgs
- Auto
Provision Pulumi.Juniper Mist. Device. Inputs. Gateway Tunnel Configs Auto Provision - Provider auto-provisioning settings for tunnel endpoints
- Ike
Lifetime int - Only if
provider==custom-ipsec. Must be between 180 and 86400 - Ike
Mode string - Only if
provider==custom-ipsec. IKE negotiation mode for the tunnel - Ike
Proposals List<Pulumi.Juniper Mist. Device. Inputs. Gateway Tunnel Configs Ike Proposal> - If
provider==custom-ipsec, IKE proposals used for custom IPsec negotiation - Ipsec
Lifetime int - Only if
provider==custom-ipsec. Must be between 180 and 86400 - Ipsec
Proposals List<Pulumi.Juniper Mist. Device. Inputs. Gateway Tunnel Configs Ipsec Proposal> - Only if
provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation - Local
Id string - Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - Local
Subnets List<string> - Local protected subnets advertised by this tunnel
- Mode string
- Tunnel failover mode used for primary and secondary endpoints
- Networks List<string>
- Destination networks reachable through this tunnel
- Primary
Pulumi.
Juniper Mist. Device. Inputs. Gateway Tunnel Configs Primary - Main remote tunnel endpoint settings
- Probe
Pulumi.
Juniper Mist. Device. Inputs. Gateway Tunnel Configs Probe - Tunnel health probe settings
- Protocol string
- Only if
provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation - Provider string
- Tunnel provider used when auto provisioning is disabled
- Psk string
- Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - Remote
Subnets List<string> - Remote protected subnets reached through policy-based IPsec
- Secondary
Pulumi.
Juniper Mist. Device. Inputs. Gateway Tunnel Configs Secondary - Backup remote tunnel endpoint settings
- Version string
- Only if
provider==custom-greorprovider==custom-ipsec. Tunnel version value for custom tunnel configuration
- Auto
Provision GatewayTunnel Configs Auto Provision - Provider auto-provisioning settings for tunnel endpoints
- Ike
Lifetime int - Only if
provider==custom-ipsec. Must be between 180 and 86400 - Ike
Mode string - Only if
provider==custom-ipsec. IKE negotiation mode for the tunnel - Ike
Proposals []GatewayTunnel Configs Ike Proposal - If
provider==custom-ipsec, IKE proposals used for custom IPsec negotiation - Ipsec
Lifetime int - Only if
provider==custom-ipsec. Must be between 180 and 86400 - Ipsec
Proposals []GatewayTunnel Configs Ipsec Proposal - Only if
provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation - Local
Id string - Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - Local
Subnets []string - Local protected subnets advertised by this tunnel
- Mode string
- Tunnel failover mode used for primary and secondary endpoints
- Networks []string
- Destination networks reachable through this tunnel
- Primary
Gateway
Tunnel Configs Primary - Main remote tunnel endpoint settings
- Probe
Gateway
Tunnel Configs Probe - Tunnel health probe settings
- Protocol string
- Only if
provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation - Provider string
- Tunnel provider used when auto provisioning is disabled
- Psk string
- Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - Remote
Subnets []string - Remote protected subnets reached through policy-based IPsec
- Secondary
Gateway
Tunnel Configs Secondary - Backup remote tunnel endpoint settings
- Version string
- Only if
provider==custom-greorprovider==custom-ipsec. Tunnel version value for custom tunnel configuration
- auto_
provision object - Provider auto-provisioning settings for tunnel endpoints
- ike_
lifetime number - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ike_
mode string - Only if
provider==custom-ipsec. IKE negotiation mode for the tunnel - ike_
proposals list(object) - If
provider==custom-ipsec, IKE proposals used for custom IPsec negotiation - ipsec_
lifetime number - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ipsec_
proposals list(object) - Only if
provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation - local_
id string - Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - local_
subnets list(string) - Local protected subnets advertised by this tunnel
- mode string
- Tunnel failover mode used for primary and secondary endpoints
- networks list(string)
- Destination networks reachable through this tunnel
- primary object
- Main remote tunnel endpoint settings
- probe object
- Tunnel health probe settings
- protocol string
- Only if
provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation - provider string
- Tunnel provider used when auto provisioning is disabled
- psk string
- Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - remote_
subnets list(string) - Remote protected subnets reached through policy-based IPsec
- secondary object
- Backup remote tunnel endpoint settings
- version string
- Only if
provider==custom-greorprovider==custom-ipsec. Tunnel version value for custom tunnel configuration
- auto
Provision GatewayTunnel Configs Auto Provision - Provider auto-provisioning settings for tunnel endpoints
- ike
Lifetime Integer - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ike
Mode String - Only if
provider==custom-ipsec. IKE negotiation mode for the tunnel - ike
Proposals List<GatewayTunnel Configs Ike Proposal> - If
provider==custom-ipsec, IKE proposals used for custom IPsec negotiation - ipsec
Lifetime Integer - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ipsec
Proposals List<GatewayTunnel Configs Ipsec Proposal> - Only if
provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation - local
Id String - Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - local
Subnets List<String> - Local protected subnets advertised by this tunnel
- mode String
- Tunnel failover mode used for primary and secondary endpoints
- networks List<String>
- Destination networks reachable through this tunnel
- primary
Gateway
Tunnel Configs Primary - Main remote tunnel endpoint settings
- probe
Gateway
Tunnel Configs Probe - Tunnel health probe settings
- protocol String
- Only if
provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation - provider String
- Tunnel provider used when auto provisioning is disabled
- psk String
- Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - remote
Subnets List<String> - Remote protected subnets reached through policy-based IPsec
- secondary
Gateway
Tunnel Configs Secondary - Backup remote tunnel endpoint settings
- version String
- Only if
provider==custom-greorprovider==custom-ipsec. Tunnel version value for custom tunnel configuration
- auto
Provision GatewayTunnel Configs Auto Provision - Provider auto-provisioning settings for tunnel endpoints
- ike
Lifetime number - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ike
Mode string - Only if
provider==custom-ipsec. IKE negotiation mode for the tunnel - ike
Proposals GatewayTunnel Configs Ike Proposal[] - If
provider==custom-ipsec, IKE proposals used for custom IPsec negotiation - ipsec
Lifetime number - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ipsec
Proposals GatewayTunnel Configs Ipsec Proposal[] - Only if
provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation - local
Id string - Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - local
Subnets string[] - Local protected subnets advertised by this tunnel
- mode string
- Tunnel failover mode used for primary and secondary endpoints
- networks string[]
- Destination networks reachable through this tunnel
- primary
Gateway
Tunnel Configs Primary - Main remote tunnel endpoint settings
- probe
Gateway
Tunnel Configs Probe - Tunnel health probe settings
- protocol string
- Only if
provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation - provider string
- Tunnel provider used when auto provisioning is disabled
- psk string
- Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - remote
Subnets string[] - Remote protected subnets reached through policy-based IPsec
- secondary
Gateway
Tunnel Configs Secondary - Backup remote tunnel endpoint settings
- version string
- Only if
provider==custom-greorprovider==custom-ipsec. Tunnel version value for custom tunnel configuration
- auto_
provision GatewayTunnel Configs Auto Provision - Provider auto-provisioning settings for tunnel endpoints
- ike_
lifetime int - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ike_
mode str - Only if
provider==custom-ipsec. IKE negotiation mode for the tunnel - ike_
proposals Sequence[GatewayTunnel Configs Ike Proposal] - If
provider==custom-ipsec, IKE proposals used for custom IPsec negotiation - ipsec_
lifetime int - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ipsec_
proposals Sequence[GatewayTunnel Configs Ipsec Proposal] - Only if
provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation - local_
id str - Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - local_
subnets Sequence[str] - Local protected subnets advertised by this tunnel
- mode str
- Tunnel failover mode used for primary and secondary endpoints
- networks Sequence[str]
- Destination networks reachable through this tunnel
- primary
Gateway
Tunnel Configs Primary - Main remote tunnel endpoint settings
- probe
Gateway
Tunnel Configs Probe - Tunnel health probe settings
- protocol str
- Only if
provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation - provider str
- Tunnel provider used when auto provisioning is disabled
- psk str
- Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - remote_
subnets Sequence[str] - Remote protected subnets reached through policy-based IPsec
- secondary
Gateway
Tunnel Configs Secondary - Backup remote tunnel endpoint settings
- version str
- Only if
provider==custom-greorprovider==custom-ipsec. Tunnel version value for custom tunnel configuration
- auto
Provision Property Map - Provider auto-provisioning settings for tunnel endpoints
- ike
Lifetime Number - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ike
Mode String - Only if
provider==custom-ipsec. IKE negotiation mode for the tunnel - ike
Proposals List<Property Map> - If
provider==custom-ipsec, IKE proposals used for custom IPsec negotiation - ipsec
Lifetime Number - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ipsec
Proposals List<Property Map> - Only if
provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation - local
Id String - Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - local
Subnets List<String> - Local protected subnets advertised by this tunnel
- mode String
- Tunnel failover mode used for primary and secondary endpoints
- networks List<String>
- Destination networks reachable through this tunnel
- primary Property Map
- Main remote tunnel endpoint settings
- probe Property Map
- Tunnel health probe settings
- protocol String
- Only if
provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation - provider String
- Tunnel provider used when auto provisioning is disabled
- psk String
- Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - remote
Subnets List<String> - Remote protected subnets reached through policy-based IPsec
- secondary Property Map
- Backup remote tunnel endpoint settings
- version String
- Only if
provider==custom-greorprovider==custom-ipsec. Tunnel version value for custom tunnel configuration
GatewayTunnelConfigsAutoProvision, GatewayTunnelConfigsAutoProvisionArgs
- Provider string
- Tunnel provider used for automatic endpoint provisioning
- Enabled bool
- Enable auto provisioning for the tunnel. If enabled, the
primaryandsecondarynodes will be ignored. - Latlng
Pulumi.
Juniper Mist. Device. Inputs. Gateway Tunnel Configs Auto Provision Latlng - Geographic coordinate override used for tunnel POP selection
- Primary
Pulumi.
Juniper Mist. Device. Inputs. Gateway Tunnel Configs Auto Provision Primary - Main auto-provisioned tunnel endpoint settings
- Region string
- API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
- Secondary
Pulumi.
Juniper Mist. Device. Inputs. Gateway Tunnel Configs Auto Provision Secondary - Backup auto-provisioned tunnel endpoint settings
- Service
Connection string - if
provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
- Provider string
- Tunnel provider used for automatic endpoint provisioning
- Enabled bool
- Enable auto provisioning for the tunnel. If enabled, the
primaryandsecondarynodes will be ignored. - Latlng
Gateway
Tunnel Configs Auto Provision Latlng - Geographic coordinate override used for tunnel POP selection
- Primary
Gateway
Tunnel Configs Auto Provision Primary - Main auto-provisioned tunnel endpoint settings
- Region string
- API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
- Secondary
Gateway
Tunnel Configs Auto Provision Secondary - Backup auto-provisioned tunnel endpoint settings
- Service
Connection string - if
provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
- provider string
- Tunnel provider used for automatic endpoint provisioning
- enabled bool
- Enable auto provisioning for the tunnel. If enabled, the
primaryandsecondarynodes will be ignored. - latlng object
- Geographic coordinate override used for tunnel POP selection
- primary object
- Main auto-provisioned tunnel endpoint settings
- region string
- API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
- secondary object
- Backup auto-provisioned tunnel endpoint settings
- service_
connection string - if
provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
- provider String
- Tunnel provider used for automatic endpoint provisioning
- enabled Boolean
- Enable auto provisioning for the tunnel. If enabled, the
primaryandsecondarynodes will be ignored. - latlng
Gateway
Tunnel Configs Auto Provision Latlng - Geographic coordinate override used for tunnel POP selection
- primary
Gateway
Tunnel Configs Auto Provision Primary - Main auto-provisioned tunnel endpoint settings
- region String
- API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
- secondary
Gateway
Tunnel Configs Auto Provision Secondary - Backup auto-provisioned tunnel endpoint settings
- service
Connection String - if
provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
- provider string
- Tunnel provider used for automatic endpoint provisioning
- enabled boolean
- Enable auto provisioning for the tunnel. If enabled, the
primaryandsecondarynodes will be ignored. - latlng
Gateway
Tunnel Configs Auto Provision Latlng - Geographic coordinate override used for tunnel POP selection
- primary
Gateway
Tunnel Configs Auto Provision Primary - Main auto-provisioned tunnel endpoint settings
- region string
- API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
- secondary
Gateway
Tunnel Configs Auto Provision Secondary - Backup auto-provisioned tunnel endpoint settings
- service
Connection string - if
provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
- provider str
- Tunnel provider used for automatic endpoint provisioning
- enabled bool
- Enable auto provisioning for the tunnel. If enabled, the
primaryandsecondarynodes will be ignored. - latlng
Gateway
Tunnel Configs Auto Provision Latlng - Geographic coordinate override used for tunnel POP selection
- primary
Gateway
Tunnel Configs Auto Provision Primary - Main auto-provisioned tunnel endpoint settings
- region str
- API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
- secondary
Gateway
Tunnel Configs Auto Provision Secondary - Backup auto-provisioned tunnel endpoint settings
- service_
connection str - if
provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
- provider String
- Tunnel provider used for automatic endpoint provisioning
- enabled Boolean
- Enable auto provisioning for the tunnel. If enabled, the
primaryandsecondarynodes will be ignored. - latlng Property Map
- Geographic coordinate override used for tunnel POP selection
- primary Property Map
- Main auto-provisioned tunnel endpoint settings
- region String
- API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
- secondary Property Map
- Backup auto-provisioned tunnel endpoint settings
- service
Connection String - if
provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
GatewayTunnelConfigsAutoProvisionLatlng, GatewayTunnelConfigsAutoProvisionLatlngArgs
GatewayTunnelConfigsAutoProvisionPrimary, GatewayTunnelConfigsAutoProvisionPrimaryArgs
GatewayTunnelConfigsAutoProvisionSecondary, GatewayTunnelConfigsAutoProvisionSecondaryArgs
GatewayTunnelConfigsIkeProposal, GatewayTunnelConfigsIkeProposalArgs
GatewayTunnelConfigsIpsecProposal, GatewayTunnelConfigsIpsecProposalArgs
GatewayTunnelConfigsPrimary, GatewayTunnelConfigsPrimaryArgs
- Hosts List<string>
- Remote gateway host addresses for this tunnel node
- Wan
Names List<string> - Interface names that source tunnel traffic for this node
- Internal
Ips List<string> - Internal IP addresses configured on this tunnel node
- Probe
Ips List<string> - Health-check IP addresses used to monitor this tunnel node
- Remote
Ids List<string> - IKE identities expected from this tunnel node
- Hosts []string
- Remote gateway host addresses for this tunnel node
- Wan
Names []string - Interface names that source tunnel traffic for this node
- Internal
Ips []string - Internal IP addresses configured on this tunnel node
- Probe
Ips []string - Health-check IP addresses used to monitor this tunnel node
- Remote
Ids []string - IKE identities expected from this tunnel node
- hosts list(string)
- Remote gateway host addresses for this tunnel node
- wan_
names list(string) - Interface names that source tunnel traffic for this node
- internal_
ips list(string) - Internal IP addresses configured on this tunnel node
- probe_
ips list(string) - Health-check IP addresses used to monitor this tunnel node
- remote_
ids list(string) - IKE identities expected from this tunnel node
- hosts List<String>
- Remote gateway host addresses for this tunnel node
- wan
Names List<String> - Interface names that source tunnel traffic for this node
- internal
Ips List<String> - Internal IP addresses configured on this tunnel node
- probe
Ips List<String> - Health-check IP addresses used to monitor this tunnel node
- remote
Ids List<String> - IKE identities expected from this tunnel node
- hosts string[]
- Remote gateway host addresses for this tunnel node
- wan
Names string[] - Interface names that source tunnel traffic for this node
- internal
Ips string[] - Internal IP addresses configured on this tunnel node
- probe
Ips string[] - Health-check IP addresses used to monitor this tunnel node
- remote
Ids string[] - IKE identities expected from this tunnel node
- hosts Sequence[str]
- Remote gateway host addresses for this tunnel node
- wan_
names Sequence[str] - Interface names that source tunnel traffic for this node
- internal_
ips Sequence[str] - Internal IP addresses configured on this tunnel node
- probe_
ips Sequence[str] - Health-check IP addresses used to monitor this tunnel node
- remote_
ids Sequence[str] - IKE identities expected from this tunnel node
- hosts List<String>
- Remote gateway host addresses for this tunnel node
- wan
Names List<String> - Interface names that source tunnel traffic for this node
- internal
Ips List<String> - Internal IP addresses configured on this tunnel node
- probe
Ips List<String> - Health-check IP addresses used to monitor this tunnel node
- remote
Ids List<String> - IKE identities expected from this tunnel node
GatewayTunnelConfigsProbe, GatewayTunnelConfigsProbeArgs
GatewayTunnelConfigsSecondary, GatewayTunnelConfigsSecondaryArgs
- Hosts List<string>
- Remote gateway host addresses for this tunnel node
- Wan
Names List<string> - Interface names that source tunnel traffic for this node
- Internal
Ips List<string> - Internal IP addresses configured on this tunnel node
- Probe
Ips List<string> - Health-check IP addresses used to monitor this tunnel node
- Remote
Ids List<string> - IKE identities expected from this tunnel node
- Hosts []string
- Remote gateway host addresses for this tunnel node
- Wan
Names []string - Interface names that source tunnel traffic for this node
- Internal
Ips []string - Internal IP addresses configured on this tunnel node
- Probe
Ips []string - Health-check IP addresses used to monitor this tunnel node
- Remote
Ids []string - IKE identities expected from this tunnel node
- hosts list(string)
- Remote gateway host addresses for this tunnel node
- wan_
names list(string) - Interface names that source tunnel traffic for this node
- internal_
ips list(string) - Internal IP addresses configured on this tunnel node
- probe_
ips list(string) - Health-check IP addresses used to monitor this tunnel node
- remote_
ids list(string) - IKE identities expected from this tunnel node
- hosts List<String>
- Remote gateway host addresses for this tunnel node
- wan
Names List<String> - Interface names that source tunnel traffic for this node
- internal
Ips List<String> - Internal IP addresses configured on this tunnel node
- probe
Ips List<String> - Health-check IP addresses used to monitor this tunnel node
- remote
Ids List<String> - IKE identities expected from this tunnel node
- hosts string[]
- Remote gateway host addresses for this tunnel node
- wan
Names string[] - Interface names that source tunnel traffic for this node
- internal
Ips string[] - Internal IP addresses configured on this tunnel node
- probe
Ips string[] - Health-check IP addresses used to monitor this tunnel node
- remote
Ids string[] - IKE identities expected from this tunnel node
- hosts Sequence[str]
- Remote gateway host addresses for this tunnel node
- wan_
names Sequence[str] - Interface names that source tunnel traffic for this node
- internal_
ips Sequence[str] - Internal IP addresses configured on this tunnel node
- probe_
ips Sequence[str] - Health-check IP addresses used to monitor this tunnel node
- remote_
ids Sequence[str] - IKE identities expected from this tunnel node
- hosts List<String>
- Remote gateway host addresses for this tunnel node
- wan
Names List<String> - Interface names that source tunnel traffic for this node
- internal
Ips List<String> - Internal IP addresses configured on this tunnel node
- probe
Ips List<String> - Health-check IP addresses used to monitor this tunnel node
- remote
Ids List<String> - IKE identities expected from this tunnel node
GatewayTunnelProviderOptions, GatewayTunnelProviderOptionsArgs
- Jse
Pulumi.
Juniper Mist. Device. Inputs. Gateway Tunnel Provider Options Jse - Juniper Secure Edge provisioning options for tunnel endpoints
- Prisma
Pulumi.
Juniper Mist. Device. Inputs. Gateway Tunnel Provider Options Prisma - Palo Alto Prisma Access provisioning options for tunnel endpoints
- Zscaler
Pulumi.
Juniper Mist. Device. Inputs. Gateway Tunnel Provider Options Zscaler - Provider settings for Zscaler tunnel endpoints
- Jse
Gateway
Tunnel Provider Options Jse - Juniper Secure Edge provisioning options for tunnel endpoints
- Prisma
Gateway
Tunnel Provider Options Prisma - Palo Alto Prisma Access provisioning options for tunnel endpoints
- Zscaler
Gateway
Tunnel Provider Options Zscaler - Provider settings for Zscaler tunnel endpoints
- jse
Gateway
Tunnel Provider Options Jse - Juniper Secure Edge provisioning options for tunnel endpoints
- prisma
Gateway
Tunnel Provider Options Prisma - Palo Alto Prisma Access provisioning options for tunnel endpoints
- zscaler
Gateway
Tunnel Provider Options Zscaler - Provider settings for Zscaler tunnel endpoints
- jse
Gateway
Tunnel Provider Options Jse - Juniper Secure Edge provisioning options for tunnel endpoints
- prisma
Gateway
Tunnel Provider Options Prisma - Palo Alto Prisma Access provisioning options for tunnel endpoints
- zscaler
Gateway
Tunnel Provider Options Zscaler - Provider settings for Zscaler tunnel endpoints
- jse
Gateway
Tunnel Provider Options Jse - Juniper Secure Edge provisioning options for tunnel endpoints
- prisma
Gateway
Tunnel Provider Options Prisma - Palo Alto Prisma Access provisioning options for tunnel endpoints
- zscaler
Gateway
Tunnel Provider Options Zscaler - Provider settings for Zscaler tunnel endpoints
- jse Property Map
- Juniper Secure Edge provisioning options for tunnel endpoints
- prisma Property Map
- Palo Alto Prisma Access provisioning options for tunnel endpoints
- zscaler Property Map
- Provider settings for Zscaler tunnel endpoints
GatewayTunnelProviderOptionsJse, GatewayTunnelProviderOptionsJseArgs
GatewayTunnelProviderOptionsPrisma, GatewayTunnelProviderOptionsPrismaArgs
- Service
Account stringName - For prisma-ipsec, service account name to used for tunnel auto provisioning
- Service
Account stringName - For prisma-ipsec, service account name to used for tunnel auto provisioning
- service_
account_ stringname - For prisma-ipsec, service account name to used for tunnel auto provisioning
- service
Account StringName - For prisma-ipsec, service account name to used for tunnel auto provisioning
- service
Account stringName - For prisma-ipsec, service account name to used for tunnel auto provisioning
- service_
account_ strname - For prisma-ipsec, service account name to used for tunnel auto provisioning
- service
Account StringName - For prisma-ipsec, service account name to used for tunnel auto provisioning
GatewayTunnelProviderOptionsZscaler, GatewayTunnelProviderOptionsZscalerArgs
- Aup
Block boolInternet Until Accepted - Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
- Aup
Enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - Aup
Force boolSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- Aup
Timeout intIn Days - Required if
aupEnabled==true. Days before AUP is requested again - Auth
Required bool - Enable this option to enforce user authentication
- Caution
Enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - Dn
Bandwidth double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- Idle
Time intIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - Ofw
Enabled bool - If
true, enable the firewall control option - Sub
Locations List<Pulumi.Juniper Mist. Device. Inputs. Gateway Tunnel Provider Options Zscaler Sub Location> - Per-network Zscaler sub-location settings
- Surrogate
Ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - Surrogate
Ip boolEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - Surrogate
Refresh intTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - Up
Bandwidth double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- Xff
Forward boolEnabled - Location uses proxy chaining to forward traffic
- Aup
Block boolInternet Until Accepted - Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
- Aup
Enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - Aup
Force boolSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- Aup
Timeout intIn Days - Required if
aupEnabled==true. Days before AUP is requested again - Auth
Required bool - Enable this option to enforce user authentication
- Caution
Enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - Dn
Bandwidth float64 - Download bandwidth cap of the link, in Mbps. Disabled if not set
- Idle
Time intIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - Ofw
Enabled bool - If
true, enable the firewall control option - Sub
Locations []GatewayTunnel Provider Options Zscaler Sub Location - Per-network Zscaler sub-location settings
- Surrogate
Ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - Surrogate
Ip boolEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - Surrogate
Refresh intTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - Up
Bandwidth float64 - Download bandwidth cap of the link, in Mbps. Disabled if not set
- Xff
Forward boolEnabled - Location uses proxy chaining to forward traffic
- aup_
block_ boolinternet_ until_ accepted - Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
- aup_
enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup_
force_ boolssl_ inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup_
timeout_ numberin_ days - Required if
aupEnabled==true. Days before AUP is requested again - auth_
required bool - Enable this option to enforce user authentication
- caution_
enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn_
bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle_
time_ numberin_ minutes - Required if
surrogate_IP==true, idle Time to Disassociation - ofw_
enabled bool - If
true, enable the firewall control option - sub_
locations list(object) - Per-network Zscaler sub-location settings
- surrogate_
ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate_
ip_ boolenforced_ for_ known_ browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate_
refresh_ numbertime_ in_ minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up_
bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- xff_
forward_ boolenabled - Location uses proxy chaining to forward traffic
- aup
Block BooleanInternet Until Accepted - Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
- aup
Enabled Boolean - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup
Force BooleanSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup
Timeout IntegerIn Days - Required if
aupEnabled==true. Days before AUP is requested again - auth
Required Boolean - Enable this option to enforce user authentication
- caution
Enabled Boolean - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn
Bandwidth Double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle
Time IntegerIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - ofw
Enabled Boolean - If
true, enable the firewall control option - sub
Locations List<GatewayTunnel Provider Options Zscaler Sub Location> - Per-network Zscaler sub-location settings
- surrogate
Ip Boolean - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate
Ip BooleanEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate
Refresh IntegerTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up
Bandwidth Double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- xff
Forward BooleanEnabled - Location uses proxy chaining to forward traffic
- aup
Block booleanInternet Until Accepted - Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
- aup
Enabled boolean - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup
Force booleanSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup
Timeout numberIn Days - Required if
aupEnabled==true. Days before AUP is requested again - auth
Required boolean - Enable this option to enforce user authentication
- caution
Enabled boolean - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn
Bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle
Time numberIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - ofw
Enabled boolean - If
true, enable the firewall control option - sub
Locations GatewayTunnel Provider Options Zscaler Sub Location[] - Per-network Zscaler sub-location settings
- surrogate
Ip boolean - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate
Ip booleanEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate
Refresh numberTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up
Bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- xff
Forward booleanEnabled - Location uses proxy chaining to forward traffic
- aup_
block_ boolinternet_ until_ accepted - Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
- aup_
enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup_
force_ boolssl_ inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup_
timeout_ intin_ days - Required if
aupEnabled==true. Days before AUP is requested again - auth_
required bool - Enable this option to enforce user authentication
- caution_
enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn_
bandwidth float - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle_
time_ intin_ minutes - Required if
surrogate_IP==true, idle Time to Disassociation - ofw_
enabled bool - If
true, enable the firewall control option - sub_
locations Sequence[GatewayTunnel Provider Options Zscaler Sub Location] - Per-network Zscaler sub-location settings
- surrogate_
ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate_
ip_ boolenforced_ for_ known_ browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate_
refresh_ inttime_ in_ minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up_
bandwidth float - Download bandwidth cap of the link, in Mbps. Disabled if not set
- xff_
forward_ boolenabled - Location uses proxy chaining to forward traffic
- aup
Block BooleanInternet Until Accepted - Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
- aup
Enabled Boolean - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup
Force BooleanSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup
Timeout NumberIn Days - Required if
aupEnabled==true. Days before AUP is requested again - auth
Required Boolean - Enable this option to enforce user authentication
- caution
Enabled Boolean - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn
Bandwidth Number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle
Time NumberIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - ofw
Enabled Boolean - If
true, enable the firewall control option - sub
Locations List<Property Map> - Per-network Zscaler sub-location settings
- surrogate
Ip Boolean - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate
Ip BooleanEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate
Refresh NumberTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up
Bandwidth Number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- xff
Forward BooleanEnabled - Location uses proxy chaining to forward traffic
GatewayTunnelProviderOptionsZscalerSubLocation, GatewayTunnelProviderOptionsZscalerSubLocationArgs
- Aup
Block boolInternet Until Accepted - Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
- Aup
Enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - Aup
Force boolSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- Aup
Timeout intIn Days - Required if
aupEnabled==true. Days before AUP is requested again - Auth
Required bool - Enable this option to authenticate users
- Caution
Enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - Dn
Bandwidth double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- Idle
Time intIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - Name string
- Network name
- Ofw
Enabled bool - If
true, enable the firewall control option - Surrogate
Ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - Surrogate
Ip boolEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - Surrogate
Refresh intTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - Up
Bandwidth double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- Aup
Block boolInternet Until Accepted - Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
- Aup
Enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - Aup
Force boolSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- Aup
Timeout intIn Days - Required if
aupEnabled==true. Days before AUP is requested again - Auth
Required bool - Enable this option to authenticate users
- Caution
Enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - Dn
Bandwidth float64 - Download bandwidth cap of the link, in Mbps. Disabled if not set
- Idle
Time intIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - Name string
- Network name
- Ofw
Enabled bool - If
true, enable the firewall control option - Surrogate
Ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - Surrogate
Ip boolEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - Surrogate
Refresh intTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - Up
Bandwidth float64 - Download bandwidth cap of the link, in Mbps. Disabled if not set
- aup_
block_ boolinternet_ until_ accepted - Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
- aup_
enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup_
force_ boolssl_ inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup_
timeout_ numberin_ days - Required if
aupEnabled==true. Days before AUP is requested again - auth_
required bool - Enable this option to authenticate users
- caution_
enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn_
bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle_
time_ numberin_ minutes - Required if
surrogate_IP==true, idle Time to Disassociation - name string
- Network name
- ofw_
enabled bool - If
true, enable the firewall control option - surrogate_
ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate_
ip_ boolenforced_ for_ known_ browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate_
refresh_ numbertime_ in_ minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up_
bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- aup
Block BooleanInternet Until Accepted - Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
- aup
Enabled Boolean - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup
Force BooleanSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup
Timeout IntegerIn Days - Required if
aupEnabled==true. Days before AUP is requested again - auth
Required Boolean - Enable this option to authenticate users
- caution
Enabled Boolean - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn
Bandwidth Double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle
Time IntegerIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - name String
- Network name
- ofw
Enabled Boolean - If
true, enable the firewall control option - surrogate
Ip Boolean - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate
Ip BooleanEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate
Refresh IntegerTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up
Bandwidth Double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- aup
Block booleanInternet Until Accepted - Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
- aup
Enabled boolean - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup
Force booleanSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup
Timeout numberIn Days - Required if
aupEnabled==true. Days before AUP is requested again - auth
Required boolean - Enable this option to authenticate users
- caution
Enabled boolean - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn
Bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle
Time numberIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - name string
- Network name
- ofw
Enabled boolean - If
true, enable the firewall control option - surrogate
Ip boolean - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate
Ip booleanEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate
Refresh numberTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up
Bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- aup_
block_ boolinternet_ until_ accepted - Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
- aup_
enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup_
force_ boolssl_ inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup_
timeout_ intin_ days - Required if
aupEnabled==true. Days before AUP is requested again - auth_
required bool - Enable this option to authenticate users
- caution_
enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn_
bandwidth float - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle_
time_ intin_ minutes - Required if
surrogate_IP==true, idle Time to Disassociation - name str
- Network name
- ofw_
enabled bool - If
true, enable the firewall control option - surrogate_
ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate_
ip_ boolenforced_ for_ known_ browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate_
refresh_ inttime_ in_ minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up_
bandwidth float - Download bandwidth cap of the link, in Mbps. Disabled if not set
- aup
Block BooleanInternet Until Accepted - Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
- aup
Enabled Boolean - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup
Force BooleanSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup
Timeout NumberIn Days - Required if
aupEnabled==true. Days before AUP is requested again - auth
Required Boolean - Enable this option to authenticate users
- caution
Enabled Boolean - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn
Bandwidth Number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle
Time NumberIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - name String
- Network name
- ofw
Enabled Boolean - If
true, enable the firewall control option - surrogate
Ip Boolean - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate
Ip BooleanEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate
Refresh NumberTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up
Bandwidth Number - Download bandwidth cap of the link, in Mbps. Disabled if not set
GatewayVrfConfig, GatewayVrfConfigArgs
- Enabled bool
- Whether to enable VRF (when supported on the device)
- Enabled bool
- Whether to enable VRF (when supported on the device)
- enabled bool
- Whether to enable VRF (when supported on the device)
- enabled Boolean
- Whether to enable VRF (when supported on the device)
- enabled boolean
- Whether to enable VRF (when supported on the device)
- enabled bool
- Whether to enable VRF (when supported on the device)
- enabled Boolean
- Whether to enable VRF (when supported on the device)
GatewayVrfInstances, GatewayVrfInstancesArgs
- Networks List<string>
- Network names included in this gateway VRF instance
- Networks []string
- Network names included in this gateway VRF instance
- networks list(string)
- Network names included in this gateway VRF instance
- networks List<String>
- Network names included in this gateway VRF instance
- networks string[]
- Network names included in this gateway VRF instance
- networks Sequence[str]
- Network names included in this gateway VRF instance
- networks List<String>
- Network names included in this gateway VRF instance
Import
Using pulumi import, import junipermist.device.Gateway with:
Gateway Configuration can be imported by specifying the siteId and the deviceId
$ pulumi import junipermist:device/gateway:Gateway gateway_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- junipermist pulumi/pulumi-junipermist
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
mistTerraform Provider.
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
published on Saturday, Jul 11, 2026 by Pulumi