Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Juniper Mist Provider
  4. API Docs
  5. org
  6. DeviceprofileGateway
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-junipermist

junipermist.org.DeviceprofileGateway

junipermist logo
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-junipermist

    This resource manages the Gateway Device Profiles (HUB Profiles).

    A HUB profile is a configuration profile that automates the creation of overlay networks and defines the attributes of a hub device in a network. It includes settings for wan interfaces, lan interfaces, dns servers, traffic steering preferences, application policies, and routing options. HUB profiles are used to create consistent configurations for hub devices and ensure efficient connectivity between hubs and spokes in a network.

    The Gateway Device Profile can be assigned to a gateway with the junipermist.org.DeviceprofileAssign resource.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as junipermist from "@pulumi/juniper-mist";

const deviceprofileGwOne = new junipermist.org.DeviceprofileGateway("deviceprofile_gw_one", {
    name: "deviceprofile_gw_one",
    orgId: terraformTest.id,
    portConfig: {
        "ge-0/0/3": {
            name: "FTTH",
            usage: "wan",
            aggregated: false,
            redundant: false,
            critical: false,
            wanType: "broadband",
            ipConfig: {
                type: "static",
                ip: "192.168.1.8",
                netmask: "/24",
                gateway: "192.168.1.1",
            },
            disableAutoneg: false,
            speed: "auto",
            duplex: "auto",
            wanSourceNat: {
                disabled: false,
            },
            vpnPaths: {
                "SSR_HUB_DC-MPLS.OrgOverlay": {
                    key: 0,
                    role: "spoke",
                    bfdProfile: "broadband",
                },
            },
        },
        "ge-0/0/5": {
            usage: "lan",
            critical: false,
            aggregated: true,
            aeDisableLacp: false,
            aeLacpForceUp: true,
            aeIdx: "0",
            redundant: false,
            networks: [
                "PRD-Core",
                "PRD-Mgmt",
                "PRD-Lab",
            ],
        },
    },
    ipConfigs: {
        "PRD-Core": {
            type: "static",
            ip: "10.3.100.9",
            netmask: "/24",
        },
        "PRD-Mgmt": {
            type: "static",
            ip: "10.3.172.1",
            netmask: "/24",
        },
        "PRD-Lab": {
            type: "static",
            ip: "10.3.171.1",
            netmask: "/24",
        },
    },
    servicePolicies: [{
        name: "Policy-14",
        tenants: ["PRD-Core"],
        services: ["any"],
        action: "allow",
        pathPreference: "HUB",
        idp: {
            enabled: true,
            profile: "critical",
            alertOnly: false,
        },
    }],
});

    import pulumi
import pulumi_juniper_mist as junipermist

deviceprofile_gw_one = junipermist.org.DeviceprofileGateway("deviceprofile_gw_one",
    name="deviceprofile_gw_one",
    org_id=terraform_test["id"],
    port_config={
        "ge-0/0/3": {
            "name": "FTTH",
            "usage": "wan",
            "aggregated": False,
            "redundant": False,
            "critical": False,
            "wan_type": "broadband",
            "ip_config": {
                "type": "static",
                "ip": "192.168.1.8",
                "netmask": "/24",
                "gateway": "192.168.1.1",
            },
            "disable_autoneg": False,
            "speed": "auto",
            "duplex": "auto",
            "wan_source_nat": {
                "disabled": False,
            },
            "vpn_paths": {
                "SSR_HUB_DC-MPLS.OrgOverlay": {
                    "key": 0,
                    "role": "spoke",
                    "bfd_profile": "broadband",
                },
            },
        },
        "ge-0/0/5": {
            "usage": "lan",
            "critical": False,
            "aggregated": True,
            "ae_disable_lacp": False,
            "ae_lacp_force_up": True,
            "ae_idx": "0",
            "redundant": False,
            "networks": [
                "PRD-Core",
                "PRD-Mgmt",
                "PRD-Lab",
            ],
        },
    },
    ip_configs={
        "PRD-Core": {
            "type": "static",
            "ip": "10.3.100.9",
            "netmask": "/24",
        },
        "PRD-Mgmt": {
            "type": "static",
            "ip": "10.3.172.1",
            "netmask": "/24",
        },
        "PRD-Lab": {
            "type": "static",
            "ip": "10.3.171.1",
            "netmask": "/24",
        },
    },
    service_policies=[{
        "name": "Policy-14",
        "tenants": ["PRD-Core"],
        "services": ["any"],
        "action": "allow",
        "path_preference": "HUB",
        "idp": {
            "enabled": True,
            "profile": "critical",
            "alert_only": False,
        },
    }])

    package main

import (
	"github.com/pulumi/pulumi-junipermist/sdk/go/junipermist/org"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := org.NewDeviceprofileGateway(ctx, "deviceprofile_gw_one", &org.DeviceprofileGatewayArgs{
			Name:  pulumi.String("deviceprofile_gw_one"),
			OrgId: pulumi.Any(terraformTest.Id),
			PortConfig: org.DeviceprofileGatewayPortConfigMap{
				"ge-0/0/3": &org.DeviceprofileGatewayPortConfigArgs{
					Name:       pulumi.String("FTTH"),
					Usage:      pulumi.String("wan"),
					Aggregated: pulumi.Bool(false),
					Redundant:  pulumi.Bool(false),
					Critical:   pulumi.Bool(false),
					WanType:    pulumi.String("broadband"),
					IpConfig: &org.DeviceprofileGatewayPortConfigIpConfigArgs{
						Type:    pulumi.String("static"),
						Ip:      pulumi.String("192.168.1.8"),
						Netmask: pulumi.String("/24"),
						Gateway: pulumi.String("192.168.1.1"),
					},
					DisableAutoneg: pulumi.Bool(false),
					Speed:          pulumi.String("auto"),
					Duplex:         pulumi.String("auto"),
					WanSourceNat: &org.DeviceprofileGatewayPortConfigWanSourceNatArgs{
						Disabled: pulumi.Bool(false),
					},
					VpnPaths: org.DeviceprofileGatewayPortConfigVpnPathsMap{
						"SSR_HUB_DC-MPLS.OrgOverlay": &org.DeviceprofileGatewayPortConfigVpnPathsArgs{
							Key:        0,
							Role:       pulumi.String("spoke"),
							BfdProfile: pulumi.String("broadband"),
						},
					},
				},
				"ge-0/0/5": &org.DeviceprofileGatewayPortConfigArgs{
					Usage:         pulumi.String("lan"),
					Critical:      pulumi.Bool(false),
					Aggregated:    pulumi.Bool(true),
					AeDisableLacp: pulumi.Bool(false),
					AeLacpForceUp: pulumi.Bool(true),
					AeIdx:         pulumi.String("0"),
					Redundant:     pulumi.Bool(false),
					Networks: pulumi.StringArray{
						pulumi.String("PRD-Core"),
						pulumi.String("PRD-Mgmt"),
						pulumi.String("PRD-Lab"),
					},
				},
			},
			IpConfigs: org.DeviceprofileGatewayIpConfigsMap{
				"PRD-Core": &org.DeviceprofileGatewayIpConfigsArgs{
					Type:    pulumi.String("static"),
					Ip:      pulumi.String("10.3.100.9"),
					Netmask: pulumi.String("/24"),
				},
				"PRD-Mgmt": &org.DeviceprofileGatewayIpConfigsArgs{
					Type:    pulumi.String("static"),
					Ip:      pulumi.String("10.3.172.1"),
					Netmask: pulumi.String("/24"),
				},
				"PRD-Lab": &org.DeviceprofileGatewayIpConfigsArgs{
					Type:    pulumi.String("static"),
					Ip:      pulumi.String("10.3.171.1"),
					Netmask: pulumi.String("/24"),
				},
			},
			ServicePolicies: org.DeviceprofileGatewayServicePolicyArray{
				&org.DeviceprofileGatewayServicePolicyArgs{
					Name: pulumi.String("Policy-14"),
					Tenants: pulumi.StringArray{
						pulumi.String("PRD-Core"),
					},
					Services: pulumi.StringArray{
						pulumi.String("any"),
					},
					Action:         pulumi.String("allow"),
					PathPreference: pulumi.String("HUB"),
					Idp: &org.DeviceprofileGatewayServicePolicyIdpArgs{
						Enabled:   pulumi.Bool(true),
						Profile:   pulumi.String("critical"),
						AlertOnly: pulumi.Bool(false),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using JuniperMist = Pulumi.JuniperMist;

return await Deployment.RunAsync(() => 
{
    var deviceprofileGwOne = new JuniperMist.Org.DeviceprofileGateway("deviceprofile_gw_one", new()
    {
        Name = "deviceprofile_gw_one",
        OrgId = terraformTest.Id,
        PortConfig = 
        {
            { "ge-0/0/3", new JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigArgs
            {
                Name = "FTTH",
                Usage = "wan",
                Aggregated = false,
                Redundant = false,
                Critical = false,
                WanType = "broadband",
                IpConfig = new JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigIpConfigArgs
                {
                    Type = "static",
                    Ip = "192.168.1.8",
                    Netmask = "/24",
                    Gateway = "192.168.1.1",
                },
                DisableAutoneg = false,
                Speed = "auto",
                Duplex = "auto",
                WanSourceNat = new JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigWanSourceNatArgs
                {
                    Disabled = false,
                },
                VpnPaths = 
                {
                    { "SSR_HUB_DC-MPLS.OrgOverlay", new JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigVpnPathsArgs
                    {
                        Key = 0,
                        Role = "spoke",
                        BfdProfile = "broadband",
                    } },
                },
            } },
            { "ge-0/0/5", new JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigArgs
            {
                Usage = "lan",
                Critical = false,
                Aggregated = true,
                AeDisableLacp = false,
                AeLacpForceUp = true,
                AeIdx = "0",
                Redundant = false,
                Networks = new[]
                {
                    "PRD-Core",
                    "PRD-Mgmt",
                    "PRD-Lab",
                },
            } },
        },
        IpConfigs = 
        {
            { "PRD-Core", new JuniperMist.Org.Inputs.DeviceprofileGatewayIpConfigsArgs
            {
                Type = "static",
                Ip = "10.3.100.9",
                Netmask = "/24",
            } },
            { "PRD-Mgmt", new JuniperMist.Org.Inputs.DeviceprofileGatewayIpConfigsArgs
            {
                Type = "static",
                Ip = "10.3.172.1",
                Netmask = "/24",
            } },
            { "PRD-Lab", new JuniperMist.Org.Inputs.DeviceprofileGatewayIpConfigsArgs
            {
                Type = "static",
                Ip = "10.3.171.1",
                Netmask = "/24",
            } },
        },
        ServicePolicies = new[]
        {
            new JuniperMist.Org.Inputs.DeviceprofileGatewayServicePolicyArgs
            {
                Name = "Policy-14",
                Tenants = new[]
                {
                    "PRD-Core",
                },
                Services = new[]
                {
                    "any",
                },
                Action = "allow",
                PathPreference = "HUB",
                Idp = new JuniperMist.Org.Inputs.DeviceprofileGatewayServicePolicyIdpArgs
                {
                    Enabled = true,
                    Profile = "critical",
                    AlertOnly = false,
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.org.DeviceprofileGateway;
import com.pulumi.junipermist.org.DeviceprofileGatewayArgs;
import com.pulumi.junipermist.org.inputs.DeviceprofileGatewayPortConfigArgs;
import com.pulumi.junipermist.org.inputs.DeviceprofileGatewayPortConfigIpConfigArgs;
import com.pulumi.junipermist.org.inputs.DeviceprofileGatewayPortConfigWanSourceNatArgs;
import com.pulumi.junipermist.org.inputs.DeviceprofileGatewayPortConfigVpnPathsArgs;
import com.pulumi.junipermist.org.inputs.DeviceprofileGatewayIpConfigsArgs;
import com.pulumi.junipermist.org.inputs.DeviceprofileGatewayServicePolicyArgs;
import com.pulumi.junipermist.org.inputs.DeviceprofileGatewayServicePolicyIdpArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var deviceprofileGwOne = new DeviceprofileGateway("deviceprofileGwOne", DeviceprofileGatewayArgs.builder()
            .name("deviceprofile_gw_one")
            .orgId(terraformTest.id())
            .portConfig(Map.ofEntries(
                Map.entry("ge-0/0/3", DeviceprofileGatewayPortConfigArgs.builder()
                    .name("FTTH")
                    .usage("wan")
                    .aggregated(false)
                    .redundant(false)
                    .critical(false)
                    .wanType("broadband")
                    .ipConfig(DeviceprofileGatewayPortConfigIpConfigArgs.builder()
                        .type("static")
                        .ip("192.168.1.8")
                        .netmask("/24")
                        .gateway("192.168.1.1")
                        .build())
                    .disableAutoneg(false)
                    .speed("auto")
                    .duplex("auto")
                    .wanSourceNat(DeviceprofileGatewayPortConfigWanSourceNatArgs.builder()
                        .disabled(false)
                        .build())
                    .vpnPaths(Map.of("SSR_HUB_DC-MPLS.OrgOverlay", DeviceprofileGatewayPortConfigVpnPathsArgs.builder()
                        .key(0)
                        .role("spoke")
                        .bfdProfile("broadband")
                        .build()))
                    .build()),
                Map.entry("ge-0/0/5", DeviceprofileGatewayPortConfigArgs.builder()
                    .usage("lan")
                    .critical(false)
                    .aggregated(true)
                    .aeDisableLacp(false)
                    .aeLacpForceUp(true)
                    .aeIdx("0")
                    .redundant(false)
                    .networks(                    
                        "PRD-Core",
                        "PRD-Mgmt",
                        "PRD-Lab")
                    .build())
            ))
            .ipConfigs(Map.ofEntries(
                Map.entry("PRD-Core", DeviceprofileGatewayIpConfigsArgs.builder()
                    .type("static")
                    .ip("10.3.100.9")
                    .netmask("/24")
                    .build()),
                Map.entry("PRD-Mgmt", DeviceprofileGatewayIpConfigsArgs.builder()
                    .type("static")
                    .ip("10.3.172.1")
                    .netmask("/24")
                    .build()),
                Map.entry("PRD-Lab", DeviceprofileGatewayIpConfigsArgs.builder()
                    .type("static")
                    .ip("10.3.171.1")
                    .netmask("/24")
                    .build())
            ))
            .servicePolicies(DeviceprofileGatewayServicePolicyArgs.builder()
                .name("Policy-14")
                .tenants("PRD-Core")
                .services("any")
                .action("allow")
                .pathPreference("HUB")
                .idp(DeviceprofileGatewayServicePolicyIdpArgs.builder()
                    .enabled(true)
                    .profile("critical")
                    .alertOnly(false)
                    .build())
                .build())
            .build());

    }
}

    resources:
  deviceprofileGwOne:
    type: junipermist:org:DeviceprofileGateway
    name: deviceprofile_gw_one
    properties:
      name: deviceprofile_gw_one
      orgId: ${terraformTest.id}
      portConfig:
        ge-0/0/3:
          name: FTTH
          usage: wan
          aggregated: false
          redundant: false
          critical: false
          wanType: broadband
          ipConfig:
            type: static
            ip: 192.168.1.8
            netmask: /24
            gateway: 192.168.1.1
          disableAutoneg: false
          speed: auto
          duplex: auto
          wanSourceNat:
            disabled: false
          vpnPaths:
            SSR_HUB_DC-MPLS.OrgOverlay:
              key: 0
              role: spoke
              bfdProfile: broadband
        ge-0/0/5:
          usage: lan
          critical: false
          aggregated: true
          aeDisableLacp: false
          aeLacpForceUp: true
          aeIdx: 0
          redundant: false
          networks:
            - PRD-Core
            - PRD-Mgmt
            - PRD-Lab
      ipConfigs:
        PRD-Core:
          type: static
          ip: 10.3.100.9
          netmask: /24
        PRD-Mgmt:
          type: static
          ip: 10.3.172.1
          netmask: /24
        PRD-Lab:
          type: static
          ip: 10.3.171.1
          netmask: /24
      servicePolicies:
        - name: Policy-14
          tenants:
            - PRD-Core
          services:
            - any
          action: allow
          pathPreference: HUB
          idp:
            enabled: true
            profile: critical
            alertOnly: false

    pulumi {
  required_providers {
    junipermist = {
      source = "pulumi/junipermist"
    }
  }
}

resource "junipermist_org_deviceprofilegateway" "deviceprofile_gw_one" {
  name   = "deviceprofile_gw_one"
  org_id = terraformTest.id
  port_config = {
    "ge-0/0/3" = {
      name       = "FTTH"
      usage      = "wan"
      aggregated = false
      redundant  = false
      critical   = false
      wan_type   = "broadband"
      ip_config = {
        type    = "static"
        ip      = "192.168.1.8"
        netmask = "/24"
        gateway = "192.168.1.1"
      }
      disable_autoneg = false
      speed           = "auto"
      duplex          = "auto"
      wan_source_nat = {
        disabled = false
      }
      vpn_paths = {
        "SSR_HUB_DC-MPLS.OrgOverlay" = {
          key         = 0
          role        = "spoke"
          bfd_profile = "broadband"
        }
      }
    }
    "ge-0/0/5" = {
      usage            = "lan"
      critical         = false
      aggregated       = true
      ae_disable_lacp  = false
      ae_lacp_force_up = true
      ae_idx           = 0
      redundant        = false
      networks         = ["PRD-Core", "PRD-Mgmt", "PRD-Lab"]
    }
  }
  ip_configs = {
    "PRD-Core" = {
      type    = "static"
      ip      = "10.3.100.9"
      netmask = "/24"
    }
    "PRD-Mgmt" = {
      type    = "static"
      ip      = "10.3.172.1"
      netmask = "/24"
    }
    "PRD-Lab" = {
      type    = "static"
      ip      = "10.3.171.1"
      netmask = "/24"
    }
  }
  service_policies {
    name            = "Policy-14"
    tenants         = ["PRD-Core"]
    services        = ["any"]
    action          = "allow"
    path_preference = "HUB"
    idp = {
      enabled    = true
      profile    = "critical"
      alert_only = false
    }
  }
}

    Create DeviceprofileGateway Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new DeviceprofileGateway(name: string, args: DeviceprofileGatewayArgs, opts?: CustomResourceOptions);
    @overload
def DeviceprofileGateway(resource_name: str,
                         args: DeviceprofileGatewayArgs,
                         opts: Optional[ResourceOptions] = None)

@overload
def DeviceprofileGateway(resource_name: str,
                         opts: Optional[ResourceOptions] = None,
                         org_id: Optional[str] = None,
                         ntp_override: Optional[bool] = None,
                         tunnel_provider_options: Optional[DeviceprofileGatewayTunnelProviderOptionsArgs] = None,
                         dns_override: Optional[bool] = None,
                         dns_servers: Optional[Sequence[str]] = None,
                         dns_suffixes: Optional[Sequence[str]] = None,
                         extra_routes: Optional[Mapping[str, DeviceprofileGatewayExtraRoutesArgs]] = None,
                         extra_routes6: Optional[Mapping[str, DeviceprofileGatewayExtraRoutes6Args]] = None,
                         idp_profiles: Optional[Mapping[str, DeviceprofileGatewayIdpProfilesArgs]] = None,
                         ip_configs: Optional[Mapping[str, DeviceprofileGatewayIpConfigsArgs]] = None,
                         name: Optional[str] = None,
                         networks: Optional[Sequence[DeviceprofileGatewayNetworkArgs]] = None,
                         additional_config_cmds: Optional[Sequence[str]] = None,
                         dhcpd_config: Optional[DeviceprofileGatewayDhcpdConfigArgs] = None,
                         ntp_servers: Optional[Sequence[str]] = None,
                         routing_policies: Optional[Mapping[str, DeviceprofileGatewayRoutingPoliciesArgs]] = None,
                         path_preferences: Optional[Mapping[str, DeviceprofileGatewayPathPreferencesArgs]] = None,
                         port_config: Optional[Mapping[str, DeviceprofileGatewayPortConfigArgs]] = None,
                         router_id: Optional[str] = None,
                         bgp_config: Optional[Mapping[str, DeviceprofileGatewayBgpConfigArgs]] = None,
                         service_policies: Optional[Sequence[DeviceprofileGatewayServicePolicyArgs]] = None,
                         ssr_additional_config_cmds: Optional[Sequence[str]] = None,
                         tunnel_configs: Optional[Mapping[str, DeviceprofileGatewayTunnelConfigsArgs]] = None,
                         oob_ip_config: Optional[DeviceprofileGatewayOobIpConfigArgs] = None,
                         url_filtering_deny_msg: Optional[str] = None,
                         vrf_config: Optional[DeviceprofileGatewayVrfConfigArgs] = None,
                         vrf_instances: Optional[Mapping[str, DeviceprofileGatewayVrfInstancesArgs]] = None)
    func NewDeviceprofileGateway(ctx *Context, name string, args DeviceprofileGatewayArgs, opts ...ResourceOption) (*DeviceprofileGateway, error)
    public DeviceprofileGateway(string name, DeviceprofileGatewayArgs args, CustomResourceOptions? opts = null)
    public DeviceprofileGateway(String name, DeviceprofileGatewayArgs args)
public DeviceprofileGateway(String name, DeviceprofileGatewayArgs args, CustomResourceOptions options)

    type: junipermist:org:DeviceprofileGateway
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "junipermist_org_deviceprofile_gateway" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args DeviceprofileGatewayArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DeviceprofileGatewayArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DeviceprofileGatewayArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DeviceprofileGatewayArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DeviceprofileGatewayArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    DeviceprofileGateway Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The DeviceprofileGateway resource accepts the following input properties:

    OrgId string
    Organization that owns this gateway profile
    AdditionalConfigCmds List<string>
    Additional CLI configuration commands provided by this gateway profile
    BgpConfig Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayBgpConfigArgs>
    BGP routing defaults for this gateway profile. Property key is the BGP session name
    DhcpdConfig Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayDhcpdConfig
    DHCP server defaults provided by this gateway profile
    DnsOverride bool
    Whether DNS server and suffix settings in this profile override inherited values
    DnsServers List<string>
    DNS servers provided by this gateway profile
    DnsSuffixes List<string>
    DNS search suffixes provided by this gateway profile
    ExtraRoutes Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayExtraRoutesArgs>
    Additional IPv4 route defaults in this gateway profile
    ExtraRoutes6 Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayExtraRoutes6Args>
    Additional IPv6 route defaults in this gateway profile
    IdpProfiles Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayIdpProfilesArgs>
    Intrusion detection and prevention profile defaults in this gateway profile
    IpConfigs Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayIpConfigsArgs>
    Gateway interface IP configuration defaults by network name
    Name string
    Display name of the gateway profile
    Networks List<Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayNetwork>
    Layer 3 networks configured by this gateway profile
    NtpOverride bool
    Whether NTP servers in this profile override inherited values
    NtpServers List<string>
    NTP servers provided by this gateway profile
    OobIpConfig Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayOobIpConfig
    Out-of-band management IP defaults in this gateway profile
    PathPreferences Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayPathPreferencesArgs>
    Property key is the path name
    PortConfig Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigArgs>
    Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
    RouterId string
    Auto assigned if not set
    RoutingPolicies Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayRoutingPoliciesArgs>
    Routing policy defaults applied by this gateway profile
    ServicePolicies List<Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayServicePolicy>
    Traffic service policy defaults enforced by this gateway profile
    SsrAdditionalConfigCmds List<string>
    additional CLI commands to append to the generated SSR config. Note: no check is done
    TunnelConfigs Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsArgs>
    Property key is the tunnel name
    TunnelProviderOptions Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelProviderOptions
    Provider-specific tunnel options defined by this gateway profile
    UrlFilteringDenyMsg string
    When a service policy denies a app_category, what message to show in user's browser
    VrfConfig Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayVrfConfig
    VRF defaults applied by this gateway profile
    VrfInstances Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayVrfInstancesArgs>
    VRF instances configured by this gateway profile
    OrgId string
    Organization that owns this gateway profile
    AdditionalConfigCmds []string
    Additional CLI configuration commands provided by this gateway profile
    BgpConfig map[string]DeviceprofileGatewayBgpConfigArgs
    BGP routing defaults for this gateway profile. Property key is the BGP session name
    DhcpdConfig DeviceprofileGatewayDhcpdConfigArgs
    DHCP server defaults provided by this gateway profile
    DnsOverride bool
    Whether DNS server and suffix settings in this profile override inherited values
    DnsServers []string
    DNS servers provided by this gateway profile
    DnsSuffixes []string
    DNS search suffixes provided by this gateway profile
    ExtraRoutes map[string]DeviceprofileGatewayExtraRoutesArgs
    Additional IPv4 route defaults in this gateway profile
    ExtraRoutes6 map[string]DeviceprofileGatewayExtraRoutes6Args
    Additional IPv6 route defaults in this gateway profile
    IdpProfiles map[string]DeviceprofileGatewayIdpProfilesArgs
    Intrusion detection and prevention profile defaults in this gateway profile
    IpConfigs map[string]DeviceprofileGatewayIpConfigsArgs
    Gateway interface IP configuration defaults by network name
    Name string
    Display name of the gateway profile
    Networks []DeviceprofileGatewayNetworkArgs
    Layer 3 networks configured by this gateway profile
    NtpOverride bool
    Whether NTP servers in this profile override inherited values
    NtpServers []string
    NTP servers provided by this gateway profile
    OobIpConfig DeviceprofileGatewayOobIpConfigArgs
    Out-of-band management IP defaults in this gateway profile
    PathPreferences map[string]DeviceprofileGatewayPathPreferencesArgs
    Property key is the path name
    PortConfig map[string]DeviceprofileGatewayPortConfigArgs
    Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
    RouterId string
    Auto assigned if not set
    RoutingPolicies map[string]DeviceprofileGatewayRoutingPoliciesArgs
    Routing policy defaults applied by this gateway profile
    ServicePolicies []DeviceprofileGatewayServicePolicyArgs
    Traffic service policy defaults enforced by this gateway profile
    SsrAdditionalConfigCmds []string
    additional CLI commands to append to the generated SSR config. Note: no check is done
    TunnelConfigs map[string]DeviceprofileGatewayTunnelConfigsArgs
    Property key is the tunnel name
    TunnelProviderOptions DeviceprofileGatewayTunnelProviderOptionsArgs
    Provider-specific tunnel options defined by this gateway profile
    UrlFilteringDenyMsg string
    When a service policy denies a app_category, what message to show in user's browser
    VrfConfig DeviceprofileGatewayVrfConfigArgs
    VRF defaults applied by this gateway profile
    VrfInstances map[string]DeviceprofileGatewayVrfInstancesArgs
    VRF instances configured by this gateway profile
    org_id string
    Organization that owns this gateway profile
    additional_config_cmds list(string)
    Additional CLI configuration commands provided by this gateway profile
    bgp_config map(object)
    BGP routing defaults for this gateway profile. Property key is the BGP session name
    dhcpd_config object
    DHCP server defaults provided by this gateway profile
    dns_override bool
    Whether DNS server and suffix settings in this profile override inherited values
    dns_servers list(string)
    DNS servers provided by this gateway profile
    dns_suffixes list(string)
    DNS search suffixes provided by this gateway profile
    extra_routes map(object)
    Additional IPv4 route defaults in this gateway profile
    extra_routes6 map(object)
    Additional IPv6 route defaults in this gateway profile
    idp_profiles map(object)
    Intrusion detection and prevention profile defaults in this gateway profile
    ip_configs map(object)
    Gateway interface IP configuration defaults by network name
    name string
    Display name of the gateway profile
    networks list(object)
    Layer 3 networks configured by this gateway profile
    ntp_override bool
    Whether NTP servers in this profile override inherited values
    ntp_servers list(string)
    NTP servers provided by this gateway profile
    oob_ip_config object
    Out-of-band management IP defaults in this gateway profile
    path_preferences map(object)
    Property key is the path name
    port_config map(object)
    Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
    router_id string
    Auto assigned if not set
    routing_policies map(object)
    Routing policy defaults applied by this gateway profile
    service_policies list(object)
    Traffic service policy defaults enforced by this gateway profile
    ssr_additional_config_cmds list(string)
    additional CLI commands to append to the generated SSR config. Note: no check is done
    tunnel_configs map(object)
    Property key is the tunnel name
    tunnel_provider_options object
    Provider-specific tunnel options defined by this gateway profile
    url_filtering_deny_msg string
    When a service policy denies a app_category, what message to show in user's browser
    vrf_config object
    VRF defaults applied by this gateway profile
    vrf_instances map(object)
    VRF instances configured by this gateway profile
    orgId String
    Organization that owns this gateway profile
    additionalConfigCmds List<String>
    Additional CLI configuration commands provided by this gateway profile
    bgpConfig Map<String,DeviceprofileGatewayBgpConfigArgs>
    BGP routing defaults for this gateway profile. Property key is the BGP session name
    dhcpdConfig DeviceprofileGatewayDhcpdConfig
    DHCP server defaults provided by this gateway profile
    dnsOverride Boolean
    Whether DNS server and suffix settings in this profile override inherited values
    dnsServers List<String>
    DNS servers provided by this gateway profile
    dnsSuffixes List<String>
    DNS search suffixes provided by this gateway profile
    extraRoutes Map<String,DeviceprofileGatewayExtraRoutesArgs>
    Additional IPv4 route defaults in this gateway profile
    extraRoutes6 Map<String,DeviceprofileGatewayExtraRoutes6Args>
    Additional IPv6 route defaults in this gateway profile
    idpProfiles Map<String,DeviceprofileGatewayIdpProfilesArgs>
    Intrusion detection and prevention profile defaults in this gateway profile
    ipConfigs Map<String,DeviceprofileGatewayIpConfigsArgs>
    Gateway interface IP configuration defaults by network name
    name String
    Display name of the gateway profile
    networks List<DeviceprofileGatewayNetwork>
    Layer 3 networks configured by this gateway profile
    ntpOverride Boolean
    Whether NTP servers in this profile override inherited values
    ntpServers List<String>
    NTP servers provided by this gateway profile
    oobIpConfig DeviceprofileGatewayOobIpConfig
    Out-of-band management IP defaults in this gateway profile
    pathPreferences Map<String,DeviceprofileGatewayPathPreferencesArgs>
    Property key is the path name
    portConfig Map<String,DeviceprofileGatewayPortConfigArgs>
    Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
    routerId String
    Auto assigned if not set
    routingPolicies Map<String,DeviceprofileGatewayRoutingPoliciesArgs>
    Routing policy defaults applied by this gateway profile
    servicePolicies List<DeviceprofileGatewayServicePolicy>
    Traffic service policy defaults enforced by this gateway profile
    ssrAdditionalConfigCmds List<String>
    additional CLI commands to append to the generated SSR config. Note: no check is done
    tunnelConfigs Map<String,DeviceprofileGatewayTunnelConfigsArgs>
    Property key is the tunnel name
    tunnelProviderOptions DeviceprofileGatewayTunnelProviderOptions
    Provider-specific tunnel options defined by this gateway profile
    urlFilteringDenyMsg String
    When a service policy denies a app_category, what message to show in user's browser
    vrfConfig DeviceprofileGatewayVrfConfig
    VRF defaults applied by this gateway profile
    vrfInstances Map<String,DeviceprofileGatewayVrfInstancesArgs>
    VRF instances configured by this gateway profile
    orgId string
    Organization that owns this gateway profile
    additionalConfigCmds string[]
    Additional CLI configuration commands provided by this gateway profile
    bgpConfig {[key: string]: DeviceprofileGatewayBgpConfigArgs}
    BGP routing defaults for this gateway profile. Property key is the BGP session name
    dhcpdConfig DeviceprofileGatewayDhcpdConfig
    DHCP server defaults provided by this gateway profile
    dnsOverride boolean
    Whether DNS server and suffix settings in this profile override inherited values
    dnsServers string[]
    DNS servers provided by this gateway profile
    dnsSuffixes string[]
    DNS search suffixes provided by this gateway profile
    extraRoutes {[key: string]: DeviceprofileGatewayExtraRoutesArgs}
    Additional IPv4 route defaults in this gateway profile
    extraRoutes6 {[key: string]: DeviceprofileGatewayExtraRoutes6Args}
    Additional IPv6 route defaults in this gateway profile
    idpProfiles {[key: string]: DeviceprofileGatewayIdpProfilesArgs}
    Intrusion detection and prevention profile defaults in this gateway profile
    ipConfigs {[key: string]: DeviceprofileGatewayIpConfigsArgs}
    Gateway interface IP configuration defaults by network name
    name string
    Display name of the gateway profile
    networks DeviceprofileGatewayNetwork[]
    Layer 3 networks configured by this gateway profile
    ntpOverride boolean
    Whether NTP servers in this profile override inherited values
    ntpServers string[]
    NTP servers provided by this gateway profile
    oobIpConfig DeviceprofileGatewayOobIpConfig
    Out-of-band management IP defaults in this gateway profile
    pathPreferences {[key: string]: DeviceprofileGatewayPathPreferencesArgs}
    Property key is the path name
    portConfig {[key: string]: DeviceprofileGatewayPortConfigArgs}
    Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
    routerId string
    Auto assigned if not set
    routingPolicies {[key: string]: DeviceprofileGatewayRoutingPoliciesArgs}
    Routing policy defaults applied by this gateway profile
    servicePolicies DeviceprofileGatewayServicePolicy[]
    Traffic service policy defaults enforced by this gateway profile
    ssrAdditionalConfigCmds string[]
    additional CLI commands to append to the generated SSR config. Note: no check is done
    tunnelConfigs {[key: string]: DeviceprofileGatewayTunnelConfigsArgs}
    Property key is the tunnel name
    tunnelProviderOptions DeviceprofileGatewayTunnelProviderOptions
    Provider-specific tunnel options defined by this gateway profile
    urlFilteringDenyMsg string
    When a service policy denies a app_category, what message to show in user's browser
    vrfConfig DeviceprofileGatewayVrfConfig
    VRF defaults applied by this gateway profile
    vrfInstances {[key: string]: DeviceprofileGatewayVrfInstancesArgs}
    VRF instances configured by this gateway profile
    org_id str
    Organization that owns this gateway profile
    additional_config_cmds Sequence[str]
    Additional CLI configuration commands provided by this gateway profile
    bgp_config Mapping[str, DeviceprofileGatewayBgpConfigArgs]
    BGP routing defaults for this gateway profile. Property key is the BGP session name
    dhcpd_config DeviceprofileGatewayDhcpdConfigArgs
    DHCP server defaults provided by this gateway profile
    dns_override bool
    Whether DNS server and suffix settings in this profile override inherited values
    dns_servers Sequence[str]
    DNS servers provided by this gateway profile
    dns_suffixes Sequence[str]
    DNS search suffixes provided by this gateway profile
    extra_routes Mapping[str, DeviceprofileGatewayExtraRoutesArgs]
    Additional IPv4 route defaults in this gateway profile
    extra_routes6 Mapping[str, DeviceprofileGatewayExtraRoutes6Args]
    Additional IPv6 route defaults in this gateway profile
    idp_profiles Mapping[str, DeviceprofileGatewayIdpProfilesArgs]
    Intrusion detection and prevention profile defaults in this gateway profile
    ip_configs Mapping[str, DeviceprofileGatewayIpConfigsArgs]
    Gateway interface IP configuration defaults by network name
    name str
    Display name of the gateway profile
    networks Sequence[DeviceprofileGatewayNetworkArgs]
    Layer 3 networks configured by this gateway profile
    ntp_override bool
    Whether NTP servers in this profile override inherited values
    ntp_servers Sequence[str]
    NTP servers provided by this gateway profile
    oob_ip_config DeviceprofileGatewayOobIpConfigArgs
    Out-of-band management IP defaults in this gateway profile
    path_preferences Mapping[str, DeviceprofileGatewayPathPreferencesArgs]
    Property key is the path name
    port_config Mapping[str, DeviceprofileGatewayPortConfigArgs]
    Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
    router_id str
    Auto assigned if not set
    routing_policies Mapping[str, DeviceprofileGatewayRoutingPoliciesArgs]
    Routing policy defaults applied by this gateway profile
    service_policies Sequence[DeviceprofileGatewayServicePolicyArgs]
    Traffic service policy defaults enforced by this gateway profile
    ssr_additional_config_cmds Sequence[str]
    additional CLI commands to append to the generated SSR config. Note: no check is done
    tunnel_configs Mapping[str, DeviceprofileGatewayTunnelConfigsArgs]
    Property key is the tunnel name
    tunnel_provider_options DeviceprofileGatewayTunnelProviderOptionsArgs
    Provider-specific tunnel options defined by this gateway profile
    url_filtering_deny_msg str
    When a service policy denies a app_category, what message to show in user's browser
    vrf_config DeviceprofileGatewayVrfConfigArgs
    VRF defaults applied by this gateway profile
    vrf_instances Mapping[str, DeviceprofileGatewayVrfInstancesArgs]
    VRF instances configured by this gateway profile
    orgId String
    Organization that owns this gateway profile
    additionalConfigCmds List<String>
    Additional CLI configuration commands provided by this gateway profile
    bgpConfig Map<Property Map>
    BGP routing defaults for this gateway profile. Property key is the BGP session name
    dhcpdConfig Property Map
    DHCP server defaults provided by this gateway profile
    dnsOverride Boolean
    Whether DNS server and suffix settings in this profile override inherited values
    dnsServers List<String>
    DNS servers provided by this gateway profile
    dnsSuffixes List<String>
    DNS search suffixes provided by this gateway profile
    extraRoutes Map<Property Map>
    Additional IPv4 route defaults in this gateway profile
    extraRoutes6 Map<Property Map>
    Additional IPv6 route defaults in this gateway profile
    idpProfiles Map<Property Map>
    Intrusion detection and prevention profile defaults in this gateway profile
    ipConfigs Map<Property Map>
    Gateway interface IP configuration defaults by network name
    name String
    Display name of the gateway profile
    networks List<Property Map>
    Layer 3 networks configured by this gateway profile
    ntpOverride Boolean
    Whether NTP servers in this profile override inherited values
    ntpServers List<String>
    NTP servers provided by this gateway profile
    oobIpConfig Property Map
    Out-of-band management IP defaults in this gateway profile
    pathPreferences Map<Property Map>
    Property key is the path name
    portConfig Map<Property Map>
    Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
    routerId String
    Auto assigned if not set
    routingPolicies Map<Property Map>
    Routing policy defaults applied by this gateway profile
    servicePolicies List<Property Map>
    Traffic service policy defaults enforced by this gateway profile
    ssrAdditionalConfigCmds List<String>
    additional CLI commands to append to the generated SSR config. Note: no check is done
    tunnelConfigs Map<Property Map>
    Property key is the tunnel name
    tunnelProviderOptions Property Map
    Provider-specific tunnel options defined by this gateway profile
    urlFilteringDenyMsg String
    When a service policy denies a app_category, what message to show in user's browser
    vrfConfig Property Map
    VRF defaults applied by this gateway profile
    vrfInstances Map<Property Map>
    VRF instances configured by this gateway profile

    Outputs

    All input properties are implicitly available as output properties. Additionally, the DeviceprofileGateway resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Type string
    Device type discriminator for gateway profiles
    Id string
    The provider-assigned unique ID for this managed resource.
    Type string
    Device type discriminator for gateway profiles
    id string
    The provider-assigned unique ID for this managed resource.
    type string
    Device type discriminator for gateway profiles
    id String
    The provider-assigned unique ID for this managed resource.
    type String
    Device type discriminator for gateway profiles
    id string
    The provider-assigned unique ID for this managed resource.
    type string
    Device type discriminator for gateway profiles
    id str
    The provider-assigned unique ID for this managed resource.
    type str
    Device type discriminator for gateway profiles
    id String
    The provider-assigned unique ID for this managed resource.
    type String
    Device type discriminator for gateway profiles

    Look up Existing DeviceprofileGateway Resource

    Get an existing DeviceprofileGateway resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: DeviceprofileGatewayState, opts?: CustomResourceOptions): DeviceprofileGateway
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        additional_config_cmds: Optional[Sequence[str]] = None,
        bgp_config: Optional[Mapping[str, DeviceprofileGatewayBgpConfigArgs]] = None,
        dhcpd_config: Optional[DeviceprofileGatewayDhcpdConfigArgs] = None,
        dns_override: Optional[bool] = None,
        dns_servers: Optional[Sequence[str]] = None,
        dns_suffixes: Optional[Sequence[str]] = None,
        extra_routes: Optional[Mapping[str, DeviceprofileGatewayExtraRoutesArgs]] = None,
        extra_routes6: Optional[Mapping[str, DeviceprofileGatewayExtraRoutes6Args]] = None,
        idp_profiles: Optional[Mapping[str, DeviceprofileGatewayIdpProfilesArgs]] = None,
        ip_configs: Optional[Mapping[str, DeviceprofileGatewayIpConfigsArgs]] = None,
        name: Optional[str] = None,
        networks: Optional[Sequence[DeviceprofileGatewayNetworkArgs]] = None,
        ntp_override: Optional[bool] = None,
        ntp_servers: Optional[Sequence[str]] = None,
        oob_ip_config: Optional[DeviceprofileGatewayOobIpConfigArgs] = None,
        org_id: Optional[str] = None,
        path_preferences: Optional[Mapping[str, DeviceprofileGatewayPathPreferencesArgs]] = None,
        port_config: Optional[Mapping[str, DeviceprofileGatewayPortConfigArgs]] = None,
        router_id: Optional[str] = None,
        routing_policies: Optional[Mapping[str, DeviceprofileGatewayRoutingPoliciesArgs]] = None,
        service_policies: Optional[Sequence[DeviceprofileGatewayServicePolicyArgs]] = None,
        ssr_additional_config_cmds: Optional[Sequence[str]] = None,
        tunnel_configs: Optional[Mapping[str, DeviceprofileGatewayTunnelConfigsArgs]] = None,
        tunnel_provider_options: Optional[DeviceprofileGatewayTunnelProviderOptionsArgs] = None,
        type: Optional[str] = None,
        url_filtering_deny_msg: Optional[str] = None,
        vrf_config: Optional[DeviceprofileGatewayVrfConfigArgs] = None,
        vrf_instances: Optional[Mapping[str, DeviceprofileGatewayVrfInstancesArgs]] = None) -> DeviceprofileGateway
    func GetDeviceprofileGateway(ctx *Context, name string, id IDInput, state *DeviceprofileGatewayState, opts ...ResourceOption) (*DeviceprofileGateway, error)
    public static DeviceprofileGateway Get(string name, Input<string> id, DeviceprofileGatewayState? state, CustomResourceOptions? opts = null)
    public static DeviceprofileGateway get(String name, Output<String> id, DeviceprofileGatewayState state, CustomResourceOptions options)
    resources:  _:    type: junipermist:org:DeviceprofileGateway    get:      id: ${id}
    import {
  to = junipermist_org_deviceprofile_gateway.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AdditionalConfigCmds List<string>
    Additional CLI configuration commands provided by this gateway profile
    BgpConfig Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayBgpConfigArgs>
    BGP routing defaults for this gateway profile. Property key is the BGP session name
    DhcpdConfig Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayDhcpdConfig
    DHCP server defaults provided by this gateway profile
    DnsOverride bool
    Whether DNS server and suffix settings in this profile override inherited values
    DnsServers List<string>
    DNS servers provided by this gateway profile
    DnsSuffixes List<string>
    DNS search suffixes provided by this gateway profile
    ExtraRoutes Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayExtraRoutesArgs>
    Additional IPv4 route defaults in this gateway profile
    ExtraRoutes6 Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayExtraRoutes6Args>
    Additional IPv6 route defaults in this gateway profile
    IdpProfiles Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayIdpProfilesArgs>
    Intrusion detection and prevention profile defaults in this gateway profile
    IpConfigs Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayIpConfigsArgs>
    Gateway interface IP configuration defaults by network name
    Name string
    Display name of the gateway profile
    Networks List<Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayNetwork>
    Layer 3 networks configured by this gateway profile
    NtpOverride bool
    Whether NTP servers in this profile override inherited values
    NtpServers List<string>
    NTP servers provided by this gateway profile
    OobIpConfig Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayOobIpConfig
    Out-of-band management IP defaults in this gateway profile
    OrgId string
    Organization that owns this gateway profile
    PathPreferences Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayPathPreferencesArgs>
    Property key is the path name
    PortConfig Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigArgs>
    Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
    RouterId string
    Auto assigned if not set
    RoutingPolicies Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayRoutingPoliciesArgs>
    Routing policy defaults applied by this gateway profile
    ServicePolicies List<Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayServicePolicy>
    Traffic service policy defaults enforced by this gateway profile
    SsrAdditionalConfigCmds List<string>
    additional CLI commands to append to the generated SSR config. Note: no check is done
    TunnelConfigs Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsArgs>
    Property key is the tunnel name
    TunnelProviderOptions Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelProviderOptions
    Provider-specific tunnel options defined by this gateway profile
    Type string
    Device type discriminator for gateway profiles
    UrlFilteringDenyMsg string
    When a service policy denies a app_category, what message to show in user's browser
    VrfConfig Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayVrfConfig
    VRF defaults applied by this gateway profile
    VrfInstances Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayVrfInstancesArgs>
    VRF instances configured by this gateway profile
    AdditionalConfigCmds []string
    Additional CLI configuration commands provided by this gateway profile
    BgpConfig map[string]DeviceprofileGatewayBgpConfigArgs
    BGP routing defaults for this gateway profile. Property key is the BGP session name
    DhcpdConfig DeviceprofileGatewayDhcpdConfigArgs
    DHCP server defaults provided by this gateway profile
    DnsOverride bool
    Whether DNS server and suffix settings in this profile override inherited values
    DnsServers []string
    DNS servers provided by this gateway profile
    DnsSuffixes []string
    DNS search suffixes provided by this gateway profile
    ExtraRoutes map[string]DeviceprofileGatewayExtraRoutesArgs
    Additional IPv4 route defaults in this gateway profile
    ExtraRoutes6 map[string]DeviceprofileGatewayExtraRoutes6Args
    Additional IPv6 route defaults in this gateway profile
    IdpProfiles map[string]DeviceprofileGatewayIdpProfilesArgs
    Intrusion detection and prevention profile defaults in this gateway profile
    IpConfigs map[string]DeviceprofileGatewayIpConfigsArgs
    Gateway interface IP configuration defaults by network name
    Name string
    Display name of the gateway profile
    Networks []DeviceprofileGatewayNetworkArgs
    Layer 3 networks configured by this gateway profile
    NtpOverride bool
    Whether NTP servers in this profile override inherited values
    NtpServers []string
    NTP servers provided by this gateway profile
    OobIpConfig DeviceprofileGatewayOobIpConfigArgs
    Out-of-band management IP defaults in this gateway profile
    OrgId string
    Organization that owns this gateway profile
    PathPreferences map[string]DeviceprofileGatewayPathPreferencesArgs
    Property key is the path name
    PortConfig map[string]DeviceprofileGatewayPortConfigArgs
    Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
    RouterId string
    Auto assigned if not set
    RoutingPolicies map[string]DeviceprofileGatewayRoutingPoliciesArgs
    Routing policy defaults applied by this gateway profile
    ServicePolicies []DeviceprofileGatewayServicePolicyArgs
    Traffic service policy defaults enforced by this gateway profile
    SsrAdditionalConfigCmds []string
    additional CLI commands to append to the generated SSR config. Note: no check is done
    TunnelConfigs map[string]DeviceprofileGatewayTunnelConfigsArgs
    Property key is the tunnel name
    TunnelProviderOptions DeviceprofileGatewayTunnelProviderOptionsArgs
    Provider-specific tunnel options defined by this gateway profile
    Type string
    Device type discriminator for gateway profiles
    UrlFilteringDenyMsg string
    When a service policy denies a app_category, what message to show in user's browser
    VrfConfig DeviceprofileGatewayVrfConfigArgs
    VRF defaults applied by this gateway profile
    VrfInstances map[string]DeviceprofileGatewayVrfInstancesArgs
    VRF instances configured by this gateway profile
    additional_config_cmds list(string)
    Additional CLI configuration commands provided by this gateway profile
    bgp_config map(object)
    BGP routing defaults for this gateway profile. Property key is the BGP session name
    dhcpd_config object
    DHCP server defaults provided by this gateway profile
    dns_override bool
    Whether DNS server and suffix settings in this profile override inherited values
    dns_servers list(string)
    DNS servers provided by this gateway profile
    dns_suffixes list(string)
    DNS search suffixes provided by this gateway profile
    extra_routes map(object)
    Additional IPv4 route defaults in this gateway profile
    extra_routes6 map(object)
    Additional IPv6 route defaults in this gateway profile
    idp_profiles map(object)
    Intrusion detection and prevention profile defaults in this gateway profile
    ip_configs map(object)
    Gateway interface IP configuration defaults by network name
    name string
    Display name of the gateway profile
    networks list(object)
    Layer 3 networks configured by this gateway profile
    ntp_override bool
    Whether NTP servers in this profile override inherited values
    ntp_servers list(string)
    NTP servers provided by this gateway profile
    oob_ip_config object
    Out-of-band management IP defaults in this gateway profile
    org_id string
    Organization that owns this gateway profile
    path_preferences map(object)
    Property key is the path name
    port_config map(object)
    Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
    router_id string
    Auto assigned if not set
    routing_policies map(object)
    Routing policy defaults applied by this gateway profile
    service_policies list(object)
    Traffic service policy defaults enforced by this gateway profile
    ssr_additional_config_cmds list(string)
    additional CLI commands to append to the generated SSR config. Note: no check is done
    tunnel_configs map(object)
    Property key is the tunnel name
    tunnel_provider_options object
    Provider-specific tunnel options defined by this gateway profile
    type string
    Device type discriminator for gateway profiles
    url_filtering_deny_msg string
    When a service policy denies a app_category, what message to show in user's browser
    vrf_config object
    VRF defaults applied by this gateway profile
    vrf_instances map(object)
    VRF instances configured by this gateway profile
    additionalConfigCmds List<String>
    Additional CLI configuration commands provided by this gateway profile
    bgpConfig Map<String,DeviceprofileGatewayBgpConfigArgs>
    BGP routing defaults for this gateway profile. Property key is the BGP session name
    dhcpdConfig DeviceprofileGatewayDhcpdConfig
    DHCP server defaults provided by this gateway profile
    dnsOverride Boolean
    Whether DNS server and suffix settings in this profile override inherited values
    dnsServers List<String>
    DNS servers provided by this gateway profile
    dnsSuffixes List<String>
    DNS search suffixes provided by this gateway profile
    extraRoutes Map<String,DeviceprofileGatewayExtraRoutesArgs>
    Additional IPv4 route defaults in this gateway profile
    extraRoutes6 Map<String,DeviceprofileGatewayExtraRoutes6Args>
    Additional IPv6 route defaults in this gateway profile
    idpProfiles Map<String,DeviceprofileGatewayIdpProfilesArgs>
    Intrusion detection and prevention profile defaults in this gateway profile
    ipConfigs Map<String,DeviceprofileGatewayIpConfigsArgs>
    Gateway interface IP configuration defaults by network name
    name String
    Display name of the gateway profile
    networks List<DeviceprofileGatewayNetwork>
    Layer 3 networks configured by this gateway profile
    ntpOverride Boolean
    Whether NTP servers in this profile override inherited values
    ntpServers List<String>
    NTP servers provided by this gateway profile
    oobIpConfig DeviceprofileGatewayOobIpConfig
    Out-of-band management IP defaults in this gateway profile
    orgId String
    Organization that owns this gateway profile
    pathPreferences Map<String,DeviceprofileGatewayPathPreferencesArgs>
    Property key is the path name
    portConfig Map<String,DeviceprofileGatewayPortConfigArgs>
    Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
    routerId String
    Auto assigned if not set
    routingPolicies Map<String,DeviceprofileGatewayRoutingPoliciesArgs>
    Routing policy defaults applied by this gateway profile
    servicePolicies List<DeviceprofileGatewayServicePolicy>
    Traffic service policy defaults enforced by this gateway profile
    ssrAdditionalConfigCmds List<String>
    additional CLI commands to append to the generated SSR config. Note: no check is done
    tunnelConfigs Map<String,DeviceprofileGatewayTunnelConfigsArgs>
    Property key is the tunnel name
    tunnelProviderOptions DeviceprofileGatewayTunnelProviderOptions
    Provider-specific tunnel options defined by this gateway profile
    type String
    Device type discriminator for gateway profiles
    urlFilteringDenyMsg String
    When a service policy denies a app_category, what message to show in user's browser
    vrfConfig DeviceprofileGatewayVrfConfig
    VRF defaults applied by this gateway profile
    vrfInstances Map<String,DeviceprofileGatewayVrfInstancesArgs>
    VRF instances configured by this gateway profile
    additionalConfigCmds string[]
    Additional CLI configuration commands provided by this gateway profile
    bgpConfig {[key: string]: DeviceprofileGatewayBgpConfigArgs}
    BGP routing defaults for this gateway profile. Property key is the BGP session name
    dhcpdConfig DeviceprofileGatewayDhcpdConfig
    DHCP server defaults provided by this gateway profile
    dnsOverride boolean
    Whether DNS server and suffix settings in this profile override inherited values
    dnsServers string[]
    DNS servers provided by this gateway profile
    dnsSuffixes string[]
    DNS search suffixes provided by this gateway profile
    extraRoutes {[key: string]: DeviceprofileGatewayExtraRoutesArgs}
    Additional IPv4 route defaults in this gateway profile
    extraRoutes6 {[key: string]: DeviceprofileGatewayExtraRoutes6Args}
    Additional IPv6 route defaults in this gateway profile
    idpProfiles {[key: string]: DeviceprofileGatewayIdpProfilesArgs}
    Intrusion detection and prevention profile defaults in this gateway profile
    ipConfigs {[key: string]: DeviceprofileGatewayIpConfigsArgs}
    Gateway interface IP configuration defaults by network name
    name string
    Display name of the gateway profile
    networks DeviceprofileGatewayNetwork[]
    Layer 3 networks configured by this gateway profile
    ntpOverride boolean
    Whether NTP servers in this profile override inherited values
    ntpServers string[]
    NTP servers provided by this gateway profile
    oobIpConfig DeviceprofileGatewayOobIpConfig
    Out-of-band management IP defaults in this gateway profile
    orgId string
    Organization that owns this gateway profile
    pathPreferences {[key: string]: DeviceprofileGatewayPathPreferencesArgs}
    Property key is the path name
    portConfig {[key: string]: DeviceprofileGatewayPortConfigArgs}
    Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
    routerId string
    Auto assigned if not set
    routingPolicies {[key: string]: DeviceprofileGatewayRoutingPoliciesArgs}
    Routing policy defaults applied by this gateway profile
    servicePolicies DeviceprofileGatewayServicePolicy[]
    Traffic service policy defaults enforced by this gateway profile
    ssrAdditionalConfigCmds string[]
    additional CLI commands to append to the generated SSR config. Note: no check is done
    tunnelConfigs {[key: string]: DeviceprofileGatewayTunnelConfigsArgs}
    Property key is the tunnel name
    tunnelProviderOptions DeviceprofileGatewayTunnelProviderOptions
    Provider-specific tunnel options defined by this gateway profile
    type string
    Device type discriminator for gateway profiles
    urlFilteringDenyMsg string
    When a service policy denies a app_category, what message to show in user's browser
    vrfConfig DeviceprofileGatewayVrfConfig
    VRF defaults applied by this gateway profile
    vrfInstances {[key: string]: DeviceprofileGatewayVrfInstancesArgs}
    VRF instances configured by this gateway profile
    additional_config_cmds Sequence[str]
    Additional CLI configuration commands provided by this gateway profile
    bgp_config Mapping[str, DeviceprofileGatewayBgpConfigArgs]
    BGP routing defaults for this gateway profile. Property key is the BGP session name
    dhcpd_config DeviceprofileGatewayDhcpdConfigArgs
    DHCP server defaults provided by this gateway profile
    dns_override bool
    Whether DNS server and suffix settings in this profile override inherited values
    dns_servers Sequence[str]
    DNS servers provided by this gateway profile
    dns_suffixes Sequence[str]
    DNS search suffixes provided by this gateway profile
    extra_routes Mapping[str, DeviceprofileGatewayExtraRoutesArgs]
    Additional IPv4 route defaults in this gateway profile
    extra_routes6 Mapping[str, DeviceprofileGatewayExtraRoutes6Args]
    Additional IPv6 route defaults in this gateway profile
    idp_profiles Mapping[str, DeviceprofileGatewayIdpProfilesArgs]
    Intrusion detection and prevention profile defaults in this gateway profile
    ip_configs Mapping[str, DeviceprofileGatewayIpConfigsArgs]
    Gateway interface IP configuration defaults by network name
    name str
    Display name of the gateway profile
    networks Sequence[DeviceprofileGatewayNetworkArgs]
    Layer 3 networks configured by this gateway profile
    ntp_override bool
    Whether NTP servers in this profile override inherited values
    ntp_servers Sequence[str]
    NTP servers provided by this gateway profile
    oob_ip_config DeviceprofileGatewayOobIpConfigArgs
    Out-of-band management IP defaults in this gateway profile
    org_id str
    Organization that owns this gateway profile
    path_preferences Mapping[str, DeviceprofileGatewayPathPreferencesArgs]
    Property key is the path name
    port_config Mapping[str, DeviceprofileGatewayPortConfigArgs]
    Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
    router_id str
    Auto assigned if not set
    routing_policies Mapping[str, DeviceprofileGatewayRoutingPoliciesArgs]
    Routing policy defaults applied by this gateway profile
    service_policies Sequence[DeviceprofileGatewayServicePolicyArgs]
    Traffic service policy defaults enforced by this gateway profile
    ssr_additional_config_cmds Sequence[str]
    additional CLI commands to append to the generated SSR config. Note: no check is done
    tunnel_configs Mapping[str, DeviceprofileGatewayTunnelConfigsArgs]
    Property key is the tunnel name
    tunnel_provider_options DeviceprofileGatewayTunnelProviderOptionsArgs
    Provider-specific tunnel options defined by this gateway profile
    type str
    Device type discriminator for gateway profiles
    url_filtering_deny_msg str
    When a service policy denies a app_category, what message to show in user's browser
    vrf_config DeviceprofileGatewayVrfConfigArgs
    VRF defaults applied by this gateway profile
    vrf_instances Mapping[str, DeviceprofileGatewayVrfInstancesArgs]
    VRF instances configured by this gateway profile
    additionalConfigCmds List<String>
    Additional CLI configuration commands provided by this gateway profile
    bgpConfig Map<Property Map>
    BGP routing defaults for this gateway profile. Property key is the BGP session name
    dhcpdConfig Property Map
    DHCP server defaults provided by this gateway profile
    dnsOverride Boolean
    Whether DNS server and suffix settings in this profile override inherited values
    dnsServers List<String>
    DNS servers provided by this gateway profile
    dnsSuffixes List<String>
    DNS search suffixes provided by this gateway profile
    extraRoutes Map<Property Map>
    Additional IPv4 route defaults in this gateway profile
    extraRoutes6 Map<Property Map>
    Additional IPv6 route defaults in this gateway profile
    idpProfiles Map<Property Map>
    Intrusion detection and prevention profile defaults in this gateway profile
    ipConfigs Map<Property Map>
    Gateway interface IP configuration defaults by network name
    name String
    Display name of the gateway profile
    networks List<Property Map>
    Layer 3 networks configured by this gateway profile
    ntpOverride Boolean
    Whether NTP servers in this profile override inherited values
    ntpServers List<String>
    NTP servers provided by this gateway profile
    oobIpConfig Property Map
    Out-of-band management IP defaults in this gateway profile
    orgId String
    Organization that owns this gateway profile
    pathPreferences Map<Property Map>
    Property key is the path name
    portConfig Map<Property Map>
    Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
    routerId String
    Auto assigned if not set
    routingPolicies Map<Property Map>
    Routing policy defaults applied by this gateway profile
    servicePolicies List<Property Map>
    Traffic service policy defaults enforced by this gateway profile
    ssrAdditionalConfigCmds List<String>
    additional CLI commands to append to the generated SSR config. Note: no check is done
    tunnelConfigs Map<Property Map>
    Property key is the tunnel name
    tunnelProviderOptions Property Map
    Provider-specific tunnel options defined by this gateway profile
    type String
    Device type discriminator for gateway profiles
    urlFilteringDenyMsg String
    When a service policy denies a app_category, what message to show in user's browser
    vrfConfig Property Map
    VRF defaults applied by this gateway profile
    vrfInstances Map<Property Map>
    VRF instances configured by this gateway profile

    Supporting Types

    DeviceprofileGatewayBgpConfig, DeviceprofileGatewayBgpConfigArgs

    Via string
    Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
    AuthKey string
    Optional if via==lan, via==tunnel or via==wan
    BfdMinimumInterval int
    Optional if via==lan, via==tunnel or via==wan, when bfdMultiplier is configured alone. Default:

    • 1000 if type==external
    • 350 type==internal
    BfdMultiplier int
    Optional if via==lan, via==tunnel or via==wan, when bfdMinimumIntervalIsConfigured alone
    DisableBfd bool
    Optional if via==lan, via==tunnel or via==wan. BFD provides faster path failure detection and is enabled by default
    Export string
    Routing policy applied to routes exported by this BGP session
    ExportPolicy string
    Default export policies if no per-neighbor policies defined
    ExtendedV4Nexthop bool
    Optional if via==lan, via==tunnel or via==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this
    GracefulRestartTime int
    Optional if via==lan, via==tunnel or via==wan. 0 means disable
    HoldTime int
    Optional if via==lan, via==tunnel or via==wan. Default is 90.
    Import string
    Routing policy applied to routes imported by this BGP session
    ImportPolicy string
    Optional if via==lan, via==tunnel or via==wan. Default import policies if no per-neighbor policies defined
    LocalAs string
    Required if via==lan, via==tunnel or via==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    NeighborAs string
    Neighbor AS. If type==internal, must be equal to localAs. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    Neighbors Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayBgpConfigNeighbors>
    Required if via==lan, via==tunnel or via==wan. If per-neighbor as is desired. Property key is the neighbor address
    Networks List<string>
    Optional if via==lan; networks where BGP neighbors can connect to or from
    NoPrivateAs bool
    Optional if via==lan, via==tunnel or via==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor
    NoReadvertiseToOverlay bool
    Optional if via==lan, via==tunnel or via==wan. By default, we'll re-advertise all learned BGP routers toward overlay
    TunnelName string
    Optional if via==tunnel; tunnel name used for this BGP session
    Type string
    Required if via==lan, via==tunnel or via==wan; BGP session type, internal or external
    VpnName string
    Optional if via==vpn; VPN name used for this BGP session
    WanName string
    Optional if via==wan; WAN interface name used for this BGP session
    Via string
    Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
    AuthKey string
    Optional if via==lan, via==tunnel or via==wan
    BfdMinimumInterval int
    Optional if via==lan, via==tunnel or via==wan, when bfdMultiplier is configured alone. Default:

    • 1000 if type==external
    • 350 type==internal
    BfdMultiplier int
    Optional if via==lan, via==tunnel or via==wan, when bfdMinimumIntervalIsConfigured alone
    DisableBfd bool
    Optional if via==lan, via==tunnel or via==wan. BFD provides faster path failure detection and is enabled by default
    Export string
    Routing policy applied to routes exported by this BGP session
    ExportPolicy string
    Default export policies if no per-neighbor policies defined
    ExtendedV4Nexthop bool
    Optional if via==lan, via==tunnel or via==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this
    GracefulRestartTime int
    Optional if via==lan, via==tunnel or via==wan. 0 means disable
    HoldTime int
    Optional if via==lan, via==tunnel or via==wan. Default is 90.
    Import string
    Routing policy applied to routes imported by this BGP session
    ImportPolicy string
    Optional if via==lan, via==tunnel or via==wan. Default import policies if no per-neighbor policies defined
    LocalAs string
    Required if via==lan, via==tunnel or via==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    NeighborAs string
    Neighbor AS. If type==internal, must be equal to localAs. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    Neighbors map[string]DeviceprofileGatewayBgpConfigNeighbors
    Required if via==lan, via==tunnel or via==wan. If per-neighbor as is desired. Property key is the neighbor address
    Networks []string
    Optional if via==lan; networks where BGP neighbors can connect to or from
    NoPrivateAs bool
    Optional if via==lan, via==tunnel or via==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor
    NoReadvertiseToOverlay bool
    Optional if via==lan, via==tunnel or via==wan. By default, we'll re-advertise all learned BGP routers toward overlay
    TunnelName string
    Optional if via==tunnel; tunnel name used for this BGP session
    Type string
    Required if via==lan, via==tunnel or via==wan; BGP session type, internal or external
    VpnName string
    Optional if via==vpn; VPN name used for this BGP session
    WanName string
    Optional if via==wan; WAN interface name used for this BGP session
    via string
    Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
    auth_key string
    Optional if via==lan, via==tunnel or via==wan
    bfd_minimum_interval number
    Optional if via==lan, via==tunnel or via==wan, when bfdMultiplier is configured alone. Default:

    • 1000 if type==external
    • 350 type==internal
    bfd_multiplier number
    Optional if via==lan, via==tunnel or via==wan, when bfdMinimumIntervalIsConfigured alone
    disable_bfd bool
    Optional if via==lan, via==tunnel or via==wan. BFD provides faster path failure detection and is enabled by default
    export string
    Routing policy applied to routes exported by this BGP session
    export_policy string
    Default export policies if no per-neighbor policies defined
    extended_v4_nexthop bool
    Optional if via==lan, via==tunnel or via==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this
    graceful_restart_time number
    Optional if via==lan, via==tunnel or via==wan. 0 means disable
    hold_time number
    Optional if via==lan, via==tunnel or via==wan. Default is 90.
    import string
    Routing policy applied to routes imported by this BGP session
    import_policy string
    Optional if via==lan, via==tunnel or via==wan. Default import policies if no per-neighbor policies defined
    local_as string
    Required if via==lan, via==tunnel or via==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    neighbor_as string
    Neighbor AS. If type==internal, must be equal to localAs. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    neighbors map(object)
    Required if via==lan, via==tunnel or via==wan. If per-neighbor as is desired. Property key is the neighbor address
    networks list(string)
    Optional if via==lan; networks where BGP neighbors can connect to or from
    no_private_as bool
    Optional if via==lan, via==tunnel or via==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor
    no_readvertise_to_overlay bool
    Optional if via==lan, via==tunnel or via==wan. By default, we'll re-advertise all learned BGP routers toward overlay
    tunnel_name string
    Optional if via==tunnel; tunnel name used for this BGP session
    type string
    Required if via==lan, via==tunnel or via==wan; BGP session type, internal or external
    vpn_name string
    Optional if via==vpn; VPN name used for this BGP session
    wan_name string
    Optional if via==wan; WAN interface name used for this BGP session
    via String
    Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
    authKey String
    Optional if via==lan, via==tunnel or via==wan
    bfdMinimumInterval Integer
    Optional if via==lan, via==tunnel or via==wan, when bfdMultiplier is configured alone. Default:

    • 1000 if type==external
    • 350 type==internal
    bfdMultiplier Integer
    Optional if via==lan, via==tunnel or via==wan, when bfdMinimumIntervalIsConfigured alone
    disableBfd Boolean
    Optional if via==lan, via==tunnel or via==wan. BFD provides faster path failure detection and is enabled by default
    export String
    Routing policy applied to routes exported by this BGP session
    exportPolicy String
    Default export policies if no per-neighbor policies defined
    extendedV4Nexthop Boolean
    Optional if via==lan, via==tunnel or via==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this
    gracefulRestartTime Integer
    Optional if via==lan, via==tunnel or via==wan. 0 means disable
    holdTime Integer
    Optional if via==lan, via==tunnel or via==wan. Default is 90.
    importPolicy String
    Optional if via==lan, via==tunnel or via==wan. Default import policies if no per-neighbor policies defined
    import_ String
    Routing policy applied to routes imported by this BGP session
    localAs String
    Required if via==lan, via==tunnel or via==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    neighborAs String
    Neighbor AS. If type==internal, must be equal to localAs. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    neighbors Map<String,DeviceprofileGatewayBgpConfigNeighbors>
    Required if via==lan, via==tunnel or via==wan. If per-neighbor as is desired. Property key is the neighbor address
    networks List<String>
    Optional if via==lan; networks where BGP neighbors can connect to or from
    noPrivateAs Boolean
    Optional if via==lan, via==tunnel or via==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor
    noReadvertiseToOverlay Boolean
    Optional if via==lan, via==tunnel or via==wan. By default, we'll re-advertise all learned BGP routers toward overlay
    tunnelName String
    Optional if via==tunnel; tunnel name used for this BGP session
    type String
    Required if via==lan, via==tunnel or via==wan; BGP session type, internal or external
    vpnName String
    Optional if via==vpn; VPN name used for this BGP session
    wanName String
    Optional if via==wan; WAN interface name used for this BGP session
    via string
    Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
    authKey string
    Optional if via==lan, via==tunnel or via==wan
    bfdMinimumInterval number
    Optional if via==lan, via==tunnel or via==wan, when bfdMultiplier is configured alone. Default:

    • 1000 if type==external
    • 350 type==internal
    bfdMultiplier number
    Optional if via==lan, via==tunnel or via==wan, when bfdMinimumIntervalIsConfigured alone
    disableBfd boolean
    Optional if via==lan, via==tunnel or via==wan. BFD provides faster path failure detection and is enabled by default
    export string
    Routing policy applied to routes exported by this BGP session
    exportPolicy string
    Default export policies if no per-neighbor policies defined
    extendedV4Nexthop boolean
    Optional if via==lan, via==tunnel or via==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this
    gracefulRestartTime number
    Optional if via==lan, via==tunnel or via==wan. 0 means disable
    holdTime number
    Optional if via==lan, via==tunnel or via==wan. Default is 90.
    import string
    Routing policy applied to routes imported by this BGP session
    importPolicy string
    Optional if via==lan, via==tunnel or via==wan. Default import policies if no per-neighbor policies defined
    localAs string
    Required if via==lan, via==tunnel or via==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    neighborAs string
    Neighbor AS. If type==internal, must be equal to localAs. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    neighbors {[key: string]: DeviceprofileGatewayBgpConfigNeighbors}
    Required if via==lan, via==tunnel or via==wan. If per-neighbor as is desired. Property key is the neighbor address
    networks string[]
    Optional if via==lan; networks where BGP neighbors can connect to or from
    noPrivateAs boolean
    Optional if via==lan, via==tunnel or via==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor
    noReadvertiseToOverlay boolean
    Optional if via==lan, via==tunnel or via==wan. By default, we'll re-advertise all learned BGP routers toward overlay
    tunnelName string
    Optional if via==tunnel; tunnel name used for this BGP session
    type string
    Required if via==lan, via==tunnel or via==wan; BGP session type, internal or external
    vpnName string
    Optional if via==vpn; VPN name used for this BGP session
    wanName string
    Optional if via==wan; WAN interface name used for this BGP session
    via str
    Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
    auth_key str
    Optional if via==lan, via==tunnel or via==wan
    bfd_minimum_interval int
    Optional if via==lan, via==tunnel or via==wan, when bfdMultiplier is configured alone. Default:

    • 1000 if type==external
    • 350 type==internal
    bfd_multiplier int
    Optional if via==lan, via==tunnel or via==wan, when bfdMinimumIntervalIsConfigured alone
    disable_bfd bool
    Optional if via==lan, via==tunnel or via==wan. BFD provides faster path failure detection and is enabled by default
    export str
    Routing policy applied to routes exported by this BGP session
    export_policy str
    Default export policies if no per-neighbor policies defined
    extended_v4_nexthop bool
    Optional if via==lan, via==tunnel or via==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this
    graceful_restart_time int
    Optional if via==lan, via==tunnel or via==wan. 0 means disable
    hold_time int
    Optional if via==lan, via==tunnel or via==wan. Default is 90.
    import_ str
    Routing policy applied to routes imported by this BGP session
    import_policy str
    Optional if via==lan, via==tunnel or via==wan. Default import policies if no per-neighbor policies defined
    local_as str
    Required if via==lan, via==tunnel or via==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    neighbor_as str
    Neighbor AS. If type==internal, must be equal to localAs. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    neighbors Mapping[str, DeviceprofileGatewayBgpConfigNeighbors]
    Required if via==lan, via==tunnel or via==wan. If per-neighbor as is desired. Property key is the neighbor address
    networks Sequence[str]
    Optional if via==lan; networks where BGP neighbors can connect to or from
    no_private_as bool
    Optional if via==lan, via==tunnel or via==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor
    no_readvertise_to_overlay bool
    Optional if via==lan, via==tunnel or via==wan. By default, we'll re-advertise all learned BGP routers toward overlay
    tunnel_name str
    Optional if via==tunnel; tunnel name used for this BGP session
    type str
    Required if via==lan, via==tunnel or via==wan; BGP session type, internal or external
    vpn_name str
    Optional if via==vpn; VPN name used for this BGP session
    wan_name str
    Optional if via==wan; WAN interface name used for this BGP session
    via String
    Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
    authKey String
    Optional if via==lan, via==tunnel or via==wan
    bfdMinimumInterval Number
    Optional if via==lan, via==tunnel or via==wan, when bfdMultiplier is configured alone. Default:

    • 1000 if type==external
    • 350 type==internal
    bfdMultiplier Number
    Optional if via==lan, via==tunnel or via==wan, when bfdMinimumIntervalIsConfigured alone
    disableBfd Boolean
    Optional if via==lan, via==tunnel or via==wan. BFD provides faster path failure detection and is enabled by default
    export String
    Routing policy applied to routes exported by this BGP session
    exportPolicy String
    Default export policies if no per-neighbor policies defined
    extendedV4Nexthop Boolean
    Optional if via==lan, via==tunnel or via==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this
    gracefulRestartTime Number
    Optional if via==lan, via==tunnel or via==wan. 0 means disable
    holdTime Number
    Optional if via==lan, via==tunnel or via==wan. Default is 90.
    import String
    Routing policy applied to routes imported by this BGP session
    importPolicy String
    Optional if via==lan, via==tunnel or via==wan. Default import policies if no per-neighbor policies defined
    localAs String
    Required if via==lan, via==tunnel or via==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    neighborAs String
    Neighbor AS. If type==internal, must be equal to localAs. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    neighbors Map<Property Map>
    Required if via==lan, via==tunnel or via==wan. If per-neighbor as is desired. Property key is the neighbor address
    networks List<String>
    Optional if via==lan; networks where BGP neighbors can connect to or from
    noPrivateAs Boolean
    Optional if via==lan, via==tunnel or via==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor
    noReadvertiseToOverlay Boolean
    Optional if via==lan, via==tunnel or via==wan. By default, we'll re-advertise all learned BGP routers toward overlay
    tunnelName String
    Optional if via==tunnel; tunnel name used for this BGP session
    type String
    Required if via==lan, via==tunnel or via==wan; BGP session type, internal or external
    vpnName String
    Optional if via==vpn; VPN name used for this BGP session
    wanName String
    Optional if via==wan; WAN interface name used for this BGP session

    DeviceprofileGatewayBgpConfigNeighbors, DeviceprofileGatewayBgpConfigNeighborsArgs

    NeighborAs string
    Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    Disabled bool
    If true, the BGP session to this neighbor will be administratively disabled/shutdown
    ExportPolicy string
    Export policy applied only to this BGP neighbor
    HoldTime int
    BGP hold time for this neighbor, in seconds
    ImportPolicy string
    Import policy applied only to this BGP neighbor
    MultihopTtl int
    Assuming BGP neighbor is directly connected
    TunnelVia string
    If via==tunnel, primary or secondary tunnel associated with this BGP neighbor
    NeighborAs string
    Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    Disabled bool
    If true, the BGP session to this neighbor will be administratively disabled/shutdown
    ExportPolicy string
    Export policy applied only to this BGP neighbor
    HoldTime int
    BGP hold time for this neighbor, in seconds
    ImportPolicy string
    Import policy applied only to this BGP neighbor
    MultihopTtl int
    Assuming BGP neighbor is directly connected
    TunnelVia string
    If via==tunnel, primary or secondary tunnel associated with this BGP neighbor
    neighbor_as string
    Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    disabled bool
    If true, the BGP session to this neighbor will be administratively disabled/shutdown
    export_policy string
    Export policy applied only to this BGP neighbor
    hold_time number
    BGP hold time for this neighbor, in seconds
    import_policy string
    Import policy applied only to this BGP neighbor
    multihop_ttl number
    Assuming BGP neighbor is directly connected
    tunnel_via string
    If via==tunnel, primary or secondary tunnel associated with this BGP neighbor
    neighborAs String
    Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    disabled Boolean
    If true, the BGP session to this neighbor will be administratively disabled/shutdown
    exportPolicy String
    Export policy applied only to this BGP neighbor
    holdTime Integer
    BGP hold time for this neighbor, in seconds
    importPolicy String
    Import policy applied only to this BGP neighbor
    multihopTtl Integer
    Assuming BGP neighbor is directly connected
    tunnelVia String
    If via==tunnel, primary or secondary tunnel associated with this BGP neighbor
    neighborAs string
    Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    disabled boolean
    If true, the BGP session to this neighbor will be administratively disabled/shutdown
    exportPolicy string
    Export policy applied only to this BGP neighbor
    holdTime number
    BGP hold time for this neighbor, in seconds
    importPolicy string
    Import policy applied only to this BGP neighbor
    multihopTtl number
    Assuming BGP neighbor is directly connected
    tunnelVia string
    If via==tunnel, primary or secondary tunnel associated with this BGP neighbor
    neighbor_as str
    Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    disabled bool
    If true, the BGP session to this neighbor will be administratively disabled/shutdown
    export_policy str
    Export policy applied only to this BGP neighbor
    hold_time int
    BGP hold time for this neighbor, in seconds
    import_policy str
    Import policy applied only to this BGP neighbor
    multihop_ttl int
    Assuming BGP neighbor is directly connected
    tunnel_via str
    If via==tunnel, primary or secondary tunnel associated with this BGP neighbor
    neighborAs String
    Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g. {{as_variable}})
    disabled Boolean
    If true, the BGP session to this neighbor will be administratively disabled/shutdown
    exportPolicy String
    Export policy applied only to this BGP neighbor
    holdTime Number
    BGP hold time for this neighbor, in seconds
    importPolicy String
    Import policy applied only to this BGP neighbor
    multihopTtl Number
    Assuming BGP neighbor is directly connected
    tunnelVia String
    If via==tunnel, primary or secondary tunnel associated with this BGP neighbor

    DeviceprofileGatewayDhcpdConfig, DeviceprofileGatewayDhcpdConfigArgs

    Config Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayDhcpdConfigConfig>
    Property key is the network name
    Enabled bool
    If set to false, disable the DHCP server
    Config map[string]DeviceprofileGatewayDhcpdConfigConfig
    Property key is the network name
    Enabled bool
    If set to false, disable the DHCP server
    config map(object)
    Property key is the network name
    enabled bool
    If set to false, disable the DHCP server
    config Map<String,DeviceprofileGatewayDhcpdConfigConfig>
    Property key is the network name
    enabled Boolean
    If set to false, disable the DHCP server
    config {[key: string]: DeviceprofileGatewayDhcpdConfigConfig}
    Property key is the network name
    enabled boolean
    If set to false, disable the DHCP server
    config Mapping[str, DeviceprofileGatewayDhcpdConfigConfig]
    Property key is the network name
    enabled bool
    If set to false, disable the DHCP server
    config Map<Property Map>
    Property key is the network name
    enabled Boolean
    If set to false, disable the DHCP server

    DeviceprofileGatewayDhcpdConfigConfig, DeviceprofileGatewayDhcpdConfigConfigArgs

    DnsServers List<string>
    If type==local or type6==local, DNS servers advertised to DHCP clients
    DnsSuffixes List<string>
    If type==local or type6==local, DNS search suffixes advertised to DHCP clients

    Deprecated: Configuring dnsSuffix is deprecated and will not be supported in the future, please configure Code 15 or Code 119 in Server options instead

    FixedBindings Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayDhcpdConfigConfigFixedBindings>
    If type==local or type6==local, fixed client bindings for local DHCP service
    Gateway string
    If type==local - optional, ip will be used if not provided
    Ip6End string
    If type6==local, ending IPv6 address for the DHCP lease pool
    Ip6Start string
    If type6==local, starting IPv6 address for the DHCP lease pool
    IpEnd string
    If type==local, ending IPv4 address for the DHCP lease pool
    IpStart string
    If type==local, starting IPv4 address for the DHCP lease pool
    LeaseTime int
    In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
    Options Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayDhcpdConfigConfigOptions>
    If type==local or type6==local, custom DHCP options advertised to clients
    ServerIdOverride bool
    serverIdOverride==true means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.
    Servers List<string>
    If type==relay, upstream IPv4 DHCP servers
    Serversv6s List<string>
    If type6==relay, upstream IPv6 DHCP servers
    Type string
    IPv4 DHCP mode for this network
    Type6 string
    IPv6 DHCP mode for this network
    VendorEncapsulated Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayDhcpdConfigConfigVendorEncapsulated>
    If type==local or type6==local, vendor-encapsulated DHCP options advertised to clients
    DnsServers []string
    If type==local or type6==local, DNS servers advertised to DHCP clients
    DnsSuffixes []string
    If type==local or type6==local, DNS search suffixes advertised to DHCP clients

    Deprecated: Configuring dnsSuffix is deprecated and will not be supported in the future, please configure Code 15 or Code 119 in Server options instead

    FixedBindings map[string]DeviceprofileGatewayDhcpdConfigConfigFixedBindings
    If type==local or type6==local, fixed client bindings for local DHCP service
    Gateway string
    If type==local - optional, ip will be used if not provided
    Ip6End string
    If type6==local, ending IPv6 address for the DHCP lease pool
    Ip6Start string
    If type6==local, starting IPv6 address for the DHCP lease pool
    IpEnd string
    If type==local, ending IPv4 address for the DHCP lease pool
    IpStart string
    If type==local, starting IPv4 address for the DHCP lease pool
    LeaseTime int
    In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
    Options map[string]DeviceprofileGatewayDhcpdConfigConfigOptions
    If type==local or type6==local, custom DHCP options advertised to clients
    ServerIdOverride bool
    serverIdOverride==true means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.
    Servers []string
    If type==relay, upstream IPv4 DHCP servers
    Serversv6s []string
    If type6==relay, upstream IPv6 DHCP servers
    Type string
    IPv4 DHCP mode for this network
    Type6 string
    IPv6 DHCP mode for this network
    VendorEncapsulated map[string]DeviceprofileGatewayDhcpdConfigConfigVendorEncapsulated
    If type==local or type6==local, vendor-encapsulated DHCP options advertised to clients
    dns_servers list(string)
    If type==local or type6==local, DNS servers advertised to DHCP clients
    dns_suffixes list(string)
    If type==local or type6==local, DNS search suffixes advertised to DHCP clients

    Deprecated: Configuring dnsSuffix is deprecated and will not be supported in the future, please configure Code 15 or Code 119 in Server options instead

    fixed_bindings map(object)
    If type==local or type6==local, fixed client bindings for local DHCP service
    gateway string
    If type==local - optional, ip will be used if not provided
    ip6_end string
    If type6==local, ending IPv6 address for the DHCP lease pool
    ip6_start string
    If type6==local, starting IPv6 address for the DHCP lease pool
    ip_end string
    If type==local, ending IPv4 address for the DHCP lease pool
    ip_start string
    If type==local, starting IPv4 address for the DHCP lease pool
    lease_time number
    In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
    options map(object)
    If type==local or type6==local, custom DHCP options advertised to clients
    server_id_override bool
    serverIdOverride==true means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.
    servers list(string)
    If type==relay, upstream IPv4 DHCP servers
    serversv6s list(string)
    If type6==relay, upstream IPv6 DHCP servers
    type string
    IPv4 DHCP mode for this network
    type6 string
    IPv6 DHCP mode for this network
    vendor_encapsulated map(object)
    If type==local or type6==local, vendor-encapsulated DHCP options advertised to clients
    dnsServers List<String>
    If type==local or type6==local, DNS servers advertised to DHCP clients
    dnsSuffixes List<String>
    If type==local or type6==local, DNS search suffixes advertised to DHCP clients

    Deprecated: Configuring dnsSuffix is deprecated and will not be supported in the future, please configure Code 15 or Code 119 in Server options instead

    fixedBindings Map<String,DeviceprofileGatewayDhcpdConfigConfigFixedBindings>
    If type==local or type6==local, fixed client bindings for local DHCP service
    gateway String
    If type==local - optional, ip will be used if not provided
    ip6End String
    If type6==local, ending IPv6 address for the DHCP lease pool
    ip6Start String
    If type6==local, starting IPv6 address for the DHCP lease pool
    ipEnd String
    If type==local, ending IPv4 address for the DHCP lease pool
    ipStart String
    If type==local, starting IPv4 address for the DHCP lease pool
    leaseTime Integer
    In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
    options Map<String,DeviceprofileGatewayDhcpdConfigConfigOptions>
    If type==local or type6==local, custom DHCP options advertised to clients
    serverIdOverride Boolean
    serverIdOverride==true means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.
    servers List<String>
    If type==relay, upstream IPv4 DHCP servers
    serversv6s List<String>
    If type6==relay, upstream IPv6 DHCP servers
    type String
    IPv4 DHCP mode for this network
    type6 String
    IPv6 DHCP mode for this network
    vendorEncapsulated Map<String,DeviceprofileGatewayDhcpdConfigConfigVendorEncapsulated>
    If type==local or type6==local, vendor-encapsulated DHCP options advertised to clients
    dnsServers string[]
    If type==local or type6==local, DNS servers advertised to DHCP clients
    dnsSuffixes string[]
    If type==local or type6==local, DNS search suffixes advertised to DHCP clients

    Deprecated: Configuring dnsSuffix is deprecated and will not be supported in the future, please configure Code 15 or Code 119 in Server options instead

    fixedBindings {[key: string]: DeviceprofileGatewayDhcpdConfigConfigFixedBindings}
    If type==local or type6==local, fixed client bindings for local DHCP service
    gateway string
    If type==local - optional, ip will be used if not provided
    ip6End string
    If type6==local, ending IPv6 address for the DHCP lease pool
    ip6Start string
    If type6==local, starting IPv6 address for the DHCP lease pool
    ipEnd string
    If type==local, ending IPv4 address for the DHCP lease pool
    ipStart string
    If type==local, starting IPv4 address for the DHCP lease pool
    leaseTime number
    In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
    options {[key: string]: DeviceprofileGatewayDhcpdConfigConfigOptions}
    If type==local or type6==local, custom DHCP options advertised to clients
    serverIdOverride boolean
    serverIdOverride==true means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.
    servers string[]
    If type==relay, upstream IPv4 DHCP servers
    serversv6s string[]
    If type6==relay, upstream IPv6 DHCP servers
    type string
    IPv4 DHCP mode for this network
    type6 string
    IPv6 DHCP mode for this network
    vendorEncapsulated {[key: string]: DeviceprofileGatewayDhcpdConfigConfigVendorEncapsulated}
    If type==local or type6==local, vendor-encapsulated DHCP options advertised to clients
    dns_servers Sequence[str]
    If type==local or type6==local, DNS servers advertised to DHCP clients
    dns_suffixes Sequence[str]
    If type==local or type6==local, DNS search suffixes advertised to DHCP clients

    Deprecated: Configuring dnsSuffix is deprecated and will not be supported in the future, please configure Code 15 or Code 119 in Server options instead

    fixed_bindings Mapping[str, DeviceprofileGatewayDhcpdConfigConfigFixedBindings]
    If type==local or type6==local, fixed client bindings for local DHCP service
    gateway str
    If type==local - optional, ip will be used if not provided
    ip6_end str
    If type6==local, ending IPv6 address for the DHCP lease pool
    ip6_start str
    If type6==local, starting IPv6 address for the DHCP lease pool
    ip_end str
    If type==local, ending IPv4 address for the DHCP lease pool
    ip_start str
    If type==local, starting IPv4 address for the DHCP lease pool
    lease_time int
    In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
    options Mapping[str, DeviceprofileGatewayDhcpdConfigConfigOptions]
    If type==local or type6==local, custom DHCP options advertised to clients
    server_id_override bool
    serverIdOverride==true means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.
    servers Sequence[str]
    If type==relay, upstream IPv4 DHCP servers
    serversv6s Sequence[str]
    If type6==relay, upstream IPv6 DHCP servers
    type str
    IPv4 DHCP mode for this network
    type6 str
    IPv6 DHCP mode for this network
    vendor_encapsulated Mapping[str, DeviceprofileGatewayDhcpdConfigConfigVendorEncapsulated]
    If type==local or type6==local, vendor-encapsulated DHCP options advertised to clients
    dnsServers List<String>
    If type==local or type6==local, DNS servers advertised to DHCP clients
    dnsSuffixes List<String>
    If type==local or type6==local, DNS search suffixes advertised to DHCP clients

    Deprecated: Configuring dnsSuffix is deprecated and will not be supported in the future, please configure Code 15 or Code 119 in Server options instead

    fixedBindings Map<Property Map>
    If type==local or type6==local, fixed client bindings for local DHCP service
    gateway String
    If type==local - optional, ip will be used if not provided
    ip6End String
    If type6==local, ending IPv6 address for the DHCP lease pool
    ip6Start String
    If type6==local, starting IPv6 address for the DHCP lease pool
    ipEnd String
    If type==local, ending IPv4 address for the DHCP lease pool
    ipStart String
    If type==local, starting IPv4 address for the DHCP lease pool
    leaseTime Number
    In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
    options Map<Property Map>
    If type==local or type6==local, custom DHCP options advertised to clients
    serverIdOverride Boolean
    serverIdOverride==true means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.
    servers List<String>
    If type==relay, upstream IPv4 DHCP servers
    serversv6s List<String>
    If type6==relay, upstream IPv6 DHCP servers
    type String
    IPv4 DHCP mode for this network
    type6 String
    IPv6 DHCP mode for this network
    vendorEncapsulated Map<Property Map>
    If type==local or type6==local, vendor-encapsulated DHCP options advertised to clients

    DeviceprofileGatewayDhcpdConfigConfigFixedBindings, DeviceprofileGatewayDhcpdConfigConfigFixedBindingsArgs

    Ip string
    Reserved IPv4 address for this fixed DHCP binding
    Ip6 string
    Reserved IPv6 address for this fixed DHCP binding
    Name string
    Friendly name for this fixed DHCP binding
    Ip string
    Reserved IPv4 address for this fixed DHCP binding
    Ip6 string
    Reserved IPv6 address for this fixed DHCP binding
    Name string
    Friendly name for this fixed DHCP binding
    ip string
    Reserved IPv4 address for this fixed DHCP binding
    ip6 string
    Reserved IPv6 address for this fixed DHCP binding
    name string
    Friendly name for this fixed DHCP binding
    ip String
    Reserved IPv4 address for this fixed DHCP binding
    ip6 String
    Reserved IPv6 address for this fixed DHCP binding
    name String
    Friendly name for this fixed DHCP binding
    ip string
    Reserved IPv4 address for this fixed DHCP binding
    ip6 string
    Reserved IPv6 address for this fixed DHCP binding
    name string
    Friendly name for this fixed DHCP binding
    ip str
    Reserved IPv4 address for this fixed DHCP binding
    ip6 str
    Reserved IPv6 address for this fixed DHCP binding
    name str
    Friendly name for this fixed DHCP binding
    ip String
    Reserved IPv4 address for this fixed DHCP binding
    ip6 String
    Reserved IPv6 address for this fixed DHCP binding
    name String
    Friendly name for this fixed DHCP binding

    DeviceprofileGatewayDhcpdConfigConfigOptions, DeviceprofileGatewayDhcpdConfigConfigOptionsArgs

    Type string
    Data type used to encode this DHCP option value
    Value string
    Option value to send for this DHCP option
    Type string
    Data type used to encode this DHCP option value
    Value string
    Option value to send for this DHCP option
    type string
    Data type used to encode this DHCP option value
    value string
    Option value to send for this DHCP option
    type String
    Data type used to encode this DHCP option value
    value String
    Option value to send for this DHCP option
    type string
    Data type used to encode this DHCP option value
    value string
    Option value to send for this DHCP option
    type str
    Data type used to encode this DHCP option value
    value str
    Option value to send for this DHCP option
    type String
    Data type used to encode this DHCP option value
    value String
    Option value to send for this DHCP option

    DeviceprofileGatewayDhcpdConfigConfigVendorEncapsulated, DeviceprofileGatewayDhcpdConfigConfigVendorEncapsulatedArgs

    Type string
    Data type used to encode this vendor option value
    Value string
    Option value to send for this vendor option
    Type string
    Data type used to encode this vendor option value
    Value string
    Option value to send for this vendor option
    type string
    Data type used to encode this vendor option value
    value string
    Option value to send for this vendor option
    type String
    Data type used to encode this vendor option value
    value String
    Option value to send for this vendor option
    type string
    Data type used to encode this vendor option value
    value string
    Option value to send for this vendor option
    type str
    Data type used to encode this vendor option value
    value str
    Option value to send for this vendor option
    type String
    Data type used to encode this vendor option value
    value String
    Option value to send for this vendor option

    DeviceprofileGatewayExtraRoutes, DeviceprofileGatewayExtraRoutesArgs

    Via string
    Next-hop IPv4 address for the gateway extra route
    Via string
    Next-hop IPv4 address for the gateway extra route
    via string
    Next-hop IPv4 address for the gateway extra route
    via String
    Next-hop IPv4 address for the gateway extra route
    via string
    Next-hop IPv4 address for the gateway extra route
    via str
    Next-hop IPv4 address for the gateway extra route
    via String
    Next-hop IPv4 address for the gateway extra route

    DeviceprofileGatewayExtraRoutes6, DeviceprofileGatewayExtraRoutes6Args

    Via string
    Next-hop IPv6 address for the gateway extra route
    Via string
    Next-hop IPv6 address for the gateway extra route
    via string
    Next-hop IPv6 address for the gateway extra route
    via String
    Next-hop IPv6 address for the gateway extra route
    via string
    Next-hop IPv6 address for the gateway extra route
    via str
    Next-hop IPv6 address for the gateway extra route
    via String
    Next-hop IPv6 address for the gateway extra route

    DeviceprofileGatewayIdpProfiles, DeviceprofileGatewayIdpProfilesArgs

    BaseProfile string
    Built-in IDP baseline profile inherited before applying overwrites
    Name string
    Display name of the IDP profile
    OrgId string
    Owning organization for the IDP profile
    Overwrites List<Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayIdpProfilesOverwrite>
    IDP signature override rules applied on top of the base profile
    BaseProfile string
    Built-in IDP baseline profile inherited before applying overwrites
    Name string
    Display name of the IDP profile
    OrgId string
    Owning organization for the IDP profile
    Overwrites []DeviceprofileGatewayIdpProfilesOverwrite
    IDP signature override rules applied on top of the base profile
    base_profile string
    Built-in IDP baseline profile inherited before applying overwrites
    name string
    Display name of the IDP profile
    org_id string
    Owning organization for the IDP profile
    overwrites list(object)
    IDP signature override rules applied on top of the base profile
    baseProfile String
    Built-in IDP baseline profile inherited before applying overwrites
    name String
    Display name of the IDP profile
    orgId String
    Owning organization for the IDP profile
    overwrites List<DeviceprofileGatewayIdpProfilesOverwrite>
    IDP signature override rules applied on top of the base profile
    baseProfile string
    Built-in IDP baseline profile inherited before applying overwrites
    name string
    Display name of the IDP profile
    orgId string
    Owning organization for the IDP profile
    overwrites DeviceprofileGatewayIdpProfilesOverwrite[]
    IDP signature override rules applied on top of the base profile
    base_profile str
    Built-in IDP baseline profile inherited before applying overwrites
    name str
    Display name of the IDP profile
    org_id str
    Owning organization for the IDP profile
    overwrites Sequence[DeviceprofileGatewayIdpProfilesOverwrite]
    IDP signature override rules applied on top of the base profile
    baseProfile String
    Built-in IDP baseline profile inherited before applying overwrites
    name String
    Display name of the IDP profile
    orgId String
    Owning organization for the IDP profile
    overwrites List<Property Map>
    IDP signature override rules applied on top of the base profile

    DeviceprofileGatewayIdpProfilesOverwrite, DeviceprofileGatewayIdpProfilesOverwriteArgs

    Action string
    Enforcement action applied when this overwrite rule matches
    Matching Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayIdpProfilesOverwriteMatching
    Criteria that select signatures for this overwrite rule
    Name string
    Display name for this IDP profile overwrite rule
    Action string
    Enforcement action applied when this overwrite rule matches
    Matching DeviceprofileGatewayIdpProfilesOverwriteMatching
    Criteria that select signatures for this overwrite rule
    Name string
    Display name for this IDP profile overwrite rule
    action string
    Enforcement action applied when this overwrite rule matches
    matching object
    Criteria that select signatures for this overwrite rule
    name string
    Display name for this IDP profile overwrite rule
    action String
    Enforcement action applied when this overwrite rule matches
    matching DeviceprofileGatewayIdpProfilesOverwriteMatching
    Criteria that select signatures for this overwrite rule
    name String
    Display name for this IDP profile overwrite rule
    action string
    Enforcement action applied when this overwrite rule matches
    matching DeviceprofileGatewayIdpProfilesOverwriteMatching
    Criteria that select signatures for this overwrite rule
    name string
    Display name for this IDP profile overwrite rule
    action str
    Enforcement action applied when this overwrite rule matches
    matching DeviceprofileGatewayIdpProfilesOverwriteMatching
    Criteria that select signatures for this overwrite rule
    name str
    Display name for this IDP profile overwrite rule
    action String
    Enforcement action applied when this overwrite rule matches
    matching Property Map
    Criteria that select signatures for this overwrite rule
    name String
    Display name for this IDP profile overwrite rule

    DeviceprofileGatewayIdpProfilesOverwriteMatching, DeviceprofileGatewayIdpProfilesOverwriteMatchingArgs

    AttackNames List<string>
    Signature names matched by the IDP profile overwrite
    DstSubnets List<string>
    Destination subnets matched by the IDP profile overwrite
    Severities List<string>
    Threat levels matched by the IDP profile overwrite
    AttackNames []string
    Signature names matched by the IDP profile overwrite
    DstSubnets []string
    Destination subnets matched by the IDP profile overwrite
    Severities []string
    Threat levels matched by the IDP profile overwrite
    attack_names list(string)
    Signature names matched by the IDP profile overwrite
    dst_subnets list(string)
    Destination subnets matched by the IDP profile overwrite
    severities list(string)
    Threat levels matched by the IDP profile overwrite
    attackNames List<String>
    Signature names matched by the IDP profile overwrite
    dstSubnets List<String>
    Destination subnets matched by the IDP profile overwrite
    severities List<String>
    Threat levels matched by the IDP profile overwrite
    attackNames string[]
    Signature names matched by the IDP profile overwrite
    dstSubnets string[]
    Destination subnets matched by the IDP profile overwrite
    severities string[]
    Threat levels matched by the IDP profile overwrite
    attack_names Sequence[str]
    Signature names matched by the IDP profile overwrite
    dst_subnets Sequence[str]
    Destination subnets matched by the IDP profile overwrite
    severities Sequence[str]
    Threat levels matched by the IDP profile overwrite
    attackNames List<String>
    Signature names matched by the IDP profile overwrite
    dstSubnets List<String>
    Destination subnets matched by the IDP profile overwrite
    severities List<String>
    Threat levels matched by the IDP profile overwrite

    DeviceprofileGatewayIpConfigs, DeviceprofileGatewayIpConfigsArgs

    Ip string
    Static IPv4 address for the gateway network interface when type==static
    Ip6 string
    Static IPv6 address for the gateway network interface when type6==static
    Netmask string
    IPv4 netmask or prefix length for the gateway network interface when type==static
    Netmask6 string
    IPv6 netmask or prefix length for the gateway network interface when type6==static
    SecondaryIps List<string>
    Additional IPv4 addresses in CIDR notation for this gateway network interface
    Type string
    IPv4 address assignment mode for this gateway network interface
    Type6 string
    IPv6 address assignment mode for this gateway network interface
    Ip string
    Static IPv4 address for the gateway network interface when type==static
    Ip6 string
    Static IPv6 address for the gateway network interface when type6==static
    Netmask string
    IPv4 netmask or prefix length for the gateway network interface when type==static
    Netmask6 string
    IPv6 netmask or prefix length for the gateway network interface when type6==static
    SecondaryIps []string
    Additional IPv4 addresses in CIDR notation for this gateway network interface
    Type string
    IPv4 address assignment mode for this gateway network interface
    Type6 string
    IPv6 address assignment mode for this gateway network interface
    ip string
    Static IPv4 address for the gateway network interface when type==static
    ip6 string
    Static IPv6 address for the gateway network interface when type6==static
    netmask string
    IPv4 netmask or prefix length for the gateway network interface when type==static
    netmask6 string
    IPv6 netmask or prefix length for the gateway network interface when type6==static
    secondary_ips list(string)
    Additional IPv4 addresses in CIDR notation for this gateway network interface
    type string
    IPv4 address assignment mode for this gateway network interface
    type6 string
    IPv6 address assignment mode for this gateway network interface
    ip String
    Static IPv4 address for the gateway network interface when type==static
    ip6 String
    Static IPv6 address for the gateway network interface when type6==static
    netmask String
    IPv4 netmask or prefix length for the gateway network interface when type==static
    netmask6 String
    IPv6 netmask or prefix length for the gateway network interface when type6==static
    secondaryIps List<String>
    Additional IPv4 addresses in CIDR notation for this gateway network interface
    type String
    IPv4 address assignment mode for this gateway network interface
    type6 String
    IPv6 address assignment mode for this gateway network interface
    ip string
    Static IPv4 address for the gateway network interface when type==static
    ip6 string
    Static IPv6 address for the gateway network interface when type6==static
    netmask string
    IPv4 netmask or prefix length for the gateway network interface when type==static
    netmask6 string
    IPv6 netmask or prefix length for the gateway network interface when type6==static
    secondaryIps string[]
    Additional IPv4 addresses in CIDR notation for this gateway network interface
    type string
    IPv4 address assignment mode for this gateway network interface
    type6 string
    IPv6 address assignment mode for this gateway network interface
    ip str
    Static IPv4 address for the gateway network interface when type==static
    ip6 str
    Static IPv6 address for the gateway network interface when type6==static
    netmask str
    IPv4 netmask or prefix length for the gateway network interface when type==static
    netmask6 str
    IPv6 netmask or prefix length for the gateway network interface when type6==static
    secondary_ips Sequence[str]
    Additional IPv4 addresses in CIDR notation for this gateway network interface
    type str
    IPv4 address assignment mode for this gateway network interface
    type6 str
    IPv6 address assignment mode for this gateway network interface
    ip String
    Static IPv4 address for the gateway network interface when type==static
    ip6 String
    Static IPv6 address for the gateway network interface when type6==static
    netmask String
    IPv4 netmask or prefix length for the gateway network interface when type==static
    netmask6 String
    IPv6 netmask or prefix length for the gateway network interface when type6==static
    secondaryIps List<String>
    Additional IPv4 addresses in CIDR notation for this gateway network interface
    type String
    IPv4 address assignment mode for this gateway network interface
    type6 String
    IPv6 address assignment mode for this gateway network interface

    DeviceprofileGatewayNetwork, DeviceprofileGatewayNetworkArgs

    Name string
    Display name of the organization network
    Subnet string
    IPv4 subnet CIDR for this network
    DisallowMistServices bool
    Whether to disallow Mist Devices in the network
    Gateway string
    IPv4 gateway address for this network
    Gateway6 string
    IPv6 gateway address for this network
    InternalAccess Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkInternalAccess
    Internal access settings for this network
    InternetAccess Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkInternetAccess
    Direct internet access and NAT settings for this network
    Isolation bool
    Whether to allow clients in the network to talk to each other
    Multicast Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkMulticast
    Settings for multicast routing on this network
    RoutedForNetworks List<string>
    Other network names this network can route to, for example through BGP, OSPF or static routes
    Subnet6 string
    IPv6 subnet CIDR for this network
    Tenants Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkTenants>
    Tenant address mappings associated with this network
    VlanId string
    VLAN ID or variable associated with this network
    VpnAccess Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkVpnAccess>
    VPN access settings keyed by VPN name for this network
    Name string
    Display name of the organization network
    Subnet string
    IPv4 subnet CIDR for this network
    DisallowMistServices bool
    Whether to disallow Mist Devices in the network
    Gateway string
    IPv4 gateway address for this network
    Gateway6 string
    IPv6 gateway address for this network
    InternalAccess DeviceprofileGatewayNetworkInternalAccess
    Internal access settings for this network
    InternetAccess DeviceprofileGatewayNetworkInternetAccess
    Direct internet access and NAT settings for this network
    Isolation bool
    Whether to allow clients in the network to talk to each other
    Multicast DeviceprofileGatewayNetworkMulticast
    Settings for multicast routing on this network
    RoutedForNetworks []string
    Other network names this network can route to, for example through BGP, OSPF or static routes
    Subnet6 string
    IPv6 subnet CIDR for this network
    Tenants map[string]DeviceprofileGatewayNetworkTenants
    Tenant address mappings associated with this network
    VlanId string
    VLAN ID or variable associated with this network
    VpnAccess map[string]DeviceprofileGatewayNetworkVpnAccess
    VPN access settings keyed by VPN name for this network
    name string
    Display name of the organization network
    subnet string
    IPv4 subnet CIDR for this network
    disallow_mist_services bool
    Whether to disallow Mist Devices in the network
    gateway string
    IPv4 gateway address for this network
    gateway6 string
    IPv6 gateway address for this network
    internal_access object
    Internal access settings for this network
    internet_access object
    Direct internet access and NAT settings for this network
    isolation bool
    Whether to allow clients in the network to talk to each other
    multicast object
    Settings for multicast routing on this network
    routed_for_networks list(string)
    Other network names this network can route to, for example through BGP, OSPF or static routes
    subnet6 string
    IPv6 subnet CIDR for this network
    tenants map(object)
    Tenant address mappings associated with this network
    vlan_id string
    VLAN ID or variable associated with this network
    vpn_access map(object)
    VPN access settings keyed by VPN name for this network
    name String
    Display name of the organization network
    subnet String
    IPv4 subnet CIDR for this network
    disallowMistServices Boolean
    Whether to disallow Mist Devices in the network
    gateway String
    IPv4 gateway address for this network
    gateway6 String
    IPv6 gateway address for this network
    internalAccess DeviceprofileGatewayNetworkInternalAccess
    Internal access settings for this network
    internetAccess DeviceprofileGatewayNetworkInternetAccess
    Direct internet access and NAT settings for this network
    isolation Boolean
    Whether to allow clients in the network to talk to each other
    multicast DeviceprofileGatewayNetworkMulticast
    Settings for multicast routing on this network
    routedForNetworks List<String>
    Other network names this network can route to, for example through BGP, OSPF or static routes
    subnet6 String
    IPv6 subnet CIDR for this network
    tenants Map<String,DeviceprofileGatewayNetworkTenants>
    Tenant address mappings associated with this network
    vlanId String
    VLAN ID or variable associated with this network
    vpnAccess Map<String,DeviceprofileGatewayNetworkVpnAccess>
    VPN access settings keyed by VPN name for this network
    name string
    Display name of the organization network
    subnet string
    IPv4 subnet CIDR for this network
    disallowMistServices boolean
    Whether to disallow Mist Devices in the network
    gateway string
    IPv4 gateway address for this network
    gateway6 string
    IPv6 gateway address for this network
    internalAccess DeviceprofileGatewayNetworkInternalAccess
    Internal access settings for this network
    internetAccess DeviceprofileGatewayNetworkInternetAccess
    Direct internet access and NAT settings for this network
    isolation boolean
    Whether to allow clients in the network to talk to each other
    multicast DeviceprofileGatewayNetworkMulticast
    Settings for multicast routing on this network
    routedForNetworks string[]
    Other network names this network can route to, for example through BGP, OSPF or static routes
    subnet6 string
    IPv6 subnet CIDR for this network
    tenants {[key: string]: DeviceprofileGatewayNetworkTenants}
    Tenant address mappings associated with this network
    vlanId string
    VLAN ID or variable associated with this network
    vpnAccess {[key: string]: DeviceprofileGatewayNetworkVpnAccess}
    VPN access settings keyed by VPN name for this network
    name str
    Display name of the organization network
    subnet str
    IPv4 subnet CIDR for this network
    disallow_mist_services bool
    Whether to disallow Mist Devices in the network
    gateway str
    IPv4 gateway address for this network
    gateway6 str
    IPv6 gateway address for this network
    internal_access DeviceprofileGatewayNetworkInternalAccess
    Internal access settings for this network
    internet_access DeviceprofileGatewayNetworkInternetAccess
    Direct internet access and NAT settings for this network
    isolation bool
    Whether to allow clients in the network to talk to each other
    multicast DeviceprofileGatewayNetworkMulticast
    Settings for multicast routing on this network
    routed_for_networks Sequence[str]
    Other network names this network can route to, for example through BGP, OSPF or static routes
    subnet6 str
    IPv6 subnet CIDR for this network
    tenants Mapping[str, DeviceprofileGatewayNetworkTenants]
    Tenant address mappings associated with this network
    vlan_id str
    VLAN ID or variable associated with this network
    vpn_access Mapping[str, DeviceprofileGatewayNetworkVpnAccess]
    VPN access settings keyed by VPN name for this network
    name String
    Display name of the organization network
    subnet String
    IPv4 subnet CIDR for this network
    disallowMistServices Boolean
    Whether to disallow Mist Devices in the network
    gateway String
    IPv4 gateway address for this network
    gateway6 String
    IPv6 gateway address for this network
    internalAccess Property Map
    Internal access settings for this network
    internetAccess Property Map
    Direct internet access and NAT settings for this network
    isolation Boolean
    Whether to allow clients in the network to talk to each other
    multicast Property Map
    Settings for multicast routing on this network
    routedForNetworks List<String>
    Other network names this network can route to, for example through BGP, OSPF or static routes
    subnet6 String
    IPv6 subnet CIDR for this network
    tenants Map<Property Map>
    Tenant address mappings associated with this network
    vlanId String
    VLAN ID or variable associated with this network
    vpnAccess Map<Property Map>
    VPN access settings keyed by VPN name for this network

    DeviceprofileGatewayNetworkInternalAccess, DeviceprofileGatewayNetworkInternalAccessArgs

    Enabled bool
    Whether internal access is enabled for this network
    Enabled bool
    Whether internal access is enabled for this network
    enabled bool
    Whether internal access is enabled for this network
    enabled Boolean
    Whether internal access is enabled for this network
    enabled boolean
    Whether internal access is enabled for this network
    enabled bool
    Whether internal access is enabled for this network
    enabled Boolean
    Whether internal access is enabled for this network

    DeviceprofileGatewayNetworkInternetAccess, DeviceprofileGatewayNetworkInternetAccessArgs

    CreateSimpleServicePolicy bool
    Whether Mist should create simple service policies for restricted internet access
    DestinationNat Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkInternetAccessDestinationNat>
    Destination NAT rules for direct internet access
    Enabled bool
    Whether direct internet access is enabled for this network
    Restricted bool
    By default, all access is allowed, to only allow certain traffic, make restricted=true and define service_policies
    StaticNat Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkInternetAccessStaticNat>
    Static NAT rules for direct internet access
    CreateSimpleServicePolicy bool
    Whether Mist should create simple service policies for restricted internet access
    DestinationNat map[string]DeviceprofileGatewayNetworkInternetAccessDestinationNat
    Destination NAT rules for direct internet access
    Enabled bool
    Whether direct internet access is enabled for this network
    Restricted bool
    By default, all access is allowed, to only allow certain traffic, make restricted=true and define service_policies
    StaticNat map[string]DeviceprofileGatewayNetworkInternetAccessStaticNat
    Static NAT rules for direct internet access
    create_simple_service_policy bool
    Whether Mist should create simple service policies for restricted internet access
    destination_nat map(object)
    Destination NAT rules for direct internet access
    enabled bool
    Whether direct internet access is enabled for this network
    restricted bool
    By default, all access is allowed, to only allow certain traffic, make restricted=true and define service_policies
    static_nat map(object)
    Static NAT rules for direct internet access
    createSimpleServicePolicy Boolean
    Whether Mist should create simple service policies for restricted internet access
    destinationNat Map<String,DeviceprofileGatewayNetworkInternetAccessDestinationNat>
    Destination NAT rules for direct internet access
    enabled Boolean
    Whether direct internet access is enabled for this network
    restricted Boolean
    By default, all access is allowed, to only allow certain traffic, make restricted=true and define service_policies
    staticNat Map<String,DeviceprofileGatewayNetworkInternetAccessStaticNat>
    Static NAT rules for direct internet access
    createSimpleServicePolicy boolean
    Whether Mist should create simple service policies for restricted internet access
    destinationNat {[key: string]: DeviceprofileGatewayNetworkInternetAccessDestinationNat}
    Destination NAT rules for direct internet access
    enabled boolean
    Whether direct internet access is enabled for this network
    restricted boolean
    By default, all access is allowed, to only allow certain traffic, make restricted=true and define service_policies
    staticNat {[key: string]: DeviceprofileGatewayNetworkInternetAccessStaticNat}
    Static NAT rules for direct internet access
    create_simple_service_policy bool
    Whether Mist should create simple service policies for restricted internet access
    destination_nat Mapping[str, DeviceprofileGatewayNetworkInternetAccessDestinationNat]
    Destination NAT rules for direct internet access
    enabled bool
    Whether direct internet access is enabled for this network
    restricted bool
    By default, all access is allowed, to only allow certain traffic, make restricted=true and define service_policies
    static_nat Mapping[str, DeviceprofileGatewayNetworkInternetAccessStaticNat]
    Static NAT rules for direct internet access
    createSimpleServicePolicy Boolean
    Whether Mist should create simple service policies for restricted internet access
    destinationNat Map<Property Map>
    Destination NAT rules for direct internet access
    enabled Boolean
    Whether direct internet access is enabled for this network
    restricted Boolean
    By default, all access is allowed, to only allow certain traffic, make restricted=true and define service_policies
    staticNat Map<Property Map>
    Static NAT rules for direct internet access

    DeviceprofileGatewayNetworkInternetAccessDestinationNat, DeviceprofileGatewayNetworkInternetAccessDestinationNatArgs

    InternalIp string
    The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
    Name string
    Label for this direct internet destination NAT rule
    Port string
    The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
    WanName string
    SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
    InternalIp string
    The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
    Name string
    Label for this direct internet destination NAT rule
    Port string
    The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
    WanName string
    SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
    internal_ip string
    The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
    name string
    Label for this direct internet destination NAT rule
    port string
    The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
    wan_name string
    SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
    internalIp String
    The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
    name String
    Label for this direct internet destination NAT rule
    port String
    The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
    wanName String
    SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
    internalIp string
    The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
    name string
    Label for this direct internet destination NAT rule
    port string
    The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
    wanName string
    SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
    internal_ip str
    The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
    name str
    Label for this direct internet destination NAT rule
    port str
    The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
    wan_name str
    SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
    internalIp String
    The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
    name String
    Label for this direct internet destination NAT rule
    port String
    The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
    wanName String
    SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity

    DeviceprofileGatewayNetworkInternetAccessStaticNat, DeviceprofileGatewayNetworkInternetAccessStaticNatArgs

    InternalIp string
    The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
    Name string
    Label for this direct internet static NAT rule
    WanName string
    SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
    InternalIp string
    The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
    Name string
    Label for this direct internet static NAT rule
    WanName string
    SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
    internal_ip string
    The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
    name string
    Label for this direct internet static NAT rule
    wan_name string
    SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
    internalIp String
    The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
    name String
    Label for this direct internet static NAT rule
    wanName String
    SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
    internalIp string
    The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
    name string
    Label for this direct internet static NAT rule
    wanName string
    SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
    internal_ip str
    The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
    name str
    Label for this direct internet static NAT rule
    wan_name str
    SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
    internalIp String
    The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
    name String
    Label for this direct internet static NAT rule
    wanName String
    SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")

    DeviceprofileGatewayNetworkMulticast, DeviceprofileGatewayNetworkMulticastArgs

    DisableIgmp bool
    If the network will only be the source of the multicast traffic, IGMP can be disabled
    Enabled bool
    Whether multicast support is enabled for this network
    Groups Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkMulticastGroups>
    Multicast group-to-RP mappings for this network
    DisableIgmp bool
    If the network will only be the source of the multicast traffic, IGMP can be disabled
    Enabled bool
    Whether multicast support is enabled for this network
    Groups map[string]DeviceprofileGatewayNetworkMulticastGroups
    Multicast group-to-RP mappings for this network
    disable_igmp bool
    If the network will only be the source of the multicast traffic, IGMP can be disabled
    enabled bool
    Whether multicast support is enabled for this network
    groups map(object)
    Multicast group-to-RP mappings for this network
    disableIgmp Boolean
    If the network will only be the source of the multicast traffic, IGMP can be disabled
    enabled Boolean
    Whether multicast support is enabled for this network
    groups Map<String,DeviceprofileGatewayNetworkMulticastGroups>
    Multicast group-to-RP mappings for this network
    disableIgmp boolean
    If the network will only be the source of the multicast traffic, IGMP can be disabled
    enabled boolean
    Whether multicast support is enabled for this network
    groups {[key: string]: DeviceprofileGatewayNetworkMulticastGroups}
    Multicast group-to-RP mappings for this network
    disable_igmp bool
    If the network will only be the source of the multicast traffic, IGMP can be disabled
    enabled bool
    Whether multicast support is enabled for this network
    groups Mapping[str, DeviceprofileGatewayNetworkMulticastGroups]
    Multicast group-to-RP mappings for this network
    disableIgmp Boolean
    If the network will only be the source of the multicast traffic, IGMP can be disabled
    enabled Boolean
    Whether multicast support is enabled for this network
    groups Map<Property Map>
    Multicast group-to-RP mappings for this network

    DeviceprofileGatewayNetworkMulticastGroups, DeviceprofileGatewayNetworkMulticastGroupsArgs

    RpIp string
    RP (rendezvous point) IP address
    RpIp string
    RP (rendezvous point) IP address
    rp_ip string
    RP (rendezvous point) IP address
    rpIp String
    RP (rendezvous point) IP address
    rpIp string
    RP (rendezvous point) IP address
    rp_ip str
    RP (rendezvous point) IP address
    rpIp String
    RP (rendezvous point) IP address

    DeviceprofileGatewayNetworkTenants, DeviceprofileGatewayNetworkTenantsArgs

    Addresses List<string>
    IP addresses or subnets assigned to this tenant in the network
    Addresses []string
    IP addresses or subnets assigned to this tenant in the network
    addresses list(string)
    IP addresses or subnets assigned to this tenant in the network
    addresses List<String>
    IP addresses or subnets assigned to this tenant in the network
    addresses string[]
    IP addresses or subnets assigned to this tenant in the network
    addresses Sequence[str]
    IP addresses or subnets assigned to this tenant in the network
    addresses List<String>
    IP addresses or subnets assigned to this tenant in the network

    DeviceprofileGatewayNetworkVpnAccess, DeviceprofileGatewayNetworkVpnAccessArgs

    AdvertisedSubnet string
    If routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side
    AllowPing bool
    Whether to allow ping from vpn into this routed network
    DestinationNat Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkVpnAccessDestinationNat>
    Destination NAT rules applied for VPN access to this network
    NatPool string
    If routed==false (usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub
    NoReadvertiseToLanBgp bool
    toward LAN-side BGP peers
    NoReadvertiseToLanOspf bool
    toward LAN-side OSPF peers
    NoReadvertiseToOverlay bool
    toward overlay, how HUB should deal with routes it received from Spokes
    OtherVrfs List<string>
    Other VRFs that can receive leaked routes from this spoke network
    Routed bool
    Whether this network is routable
    SourceNat Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkVpnAccessSourceNat
    Source NAT settings used when non-routed spoke hosts must be reachable from the hub
    StaticNat Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkVpnAccessStaticNat>
    Static NAT rules applied for VPN access to this network
    SummarizedSubnet string
    toward overlay, how HUB should deal with routes it received from Spokes
    SummarizedSubnetToLanBgp string
    toward LAN-side BGP peers
    SummarizedSubnetToLanOspf string
    toward LAN-side OSPF peers
    AdvertisedSubnet string
    If routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side
    AllowPing bool
    Whether to allow ping from vpn into this routed network
    DestinationNat map[string]DeviceprofileGatewayNetworkVpnAccessDestinationNat
    Destination NAT rules applied for VPN access to this network
    NatPool string
    If routed==false (usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub
    NoReadvertiseToLanBgp bool
    toward LAN-side BGP peers
    NoReadvertiseToLanOspf bool
    toward LAN-side OSPF peers
    NoReadvertiseToOverlay bool
    toward overlay, how HUB should deal with routes it received from Spokes
    OtherVrfs []string
    Other VRFs that can receive leaked routes from this spoke network
    Routed bool
    Whether this network is routable
    SourceNat DeviceprofileGatewayNetworkVpnAccessSourceNat
    Source NAT settings used when non-routed spoke hosts must be reachable from the hub
    StaticNat map[string]DeviceprofileGatewayNetworkVpnAccessStaticNat
    Static NAT rules applied for VPN access to this network
    SummarizedSubnet string
    toward overlay, how HUB should deal with routes it received from Spokes
    SummarizedSubnetToLanBgp string
    toward LAN-side BGP peers
    SummarizedSubnetToLanOspf string
    toward LAN-side OSPF peers
    advertised_subnet string
    If routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side
    allow_ping bool
    Whether to allow ping from vpn into this routed network
    destination_nat map(object)
    Destination NAT rules applied for VPN access to this network
    nat_pool string
    If routed==false (usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub
    no_readvertise_to_lan_bgp bool
    toward LAN-side BGP peers
    no_readvertise_to_lan_ospf bool
    toward LAN-side OSPF peers
    no_readvertise_to_overlay bool
    toward overlay, how HUB should deal with routes it received from Spokes
    other_vrfs list(string)
    Other VRFs that can receive leaked routes from this spoke network
    routed bool
    Whether this network is routable
    source_nat object
    Source NAT settings used when non-routed spoke hosts must be reachable from the hub
    static_nat map(object)
    Static NAT rules applied for VPN access to this network
    summarized_subnet string
    toward overlay, how HUB should deal with routes it received from Spokes
    summarized_subnet_to_lan_bgp string
    toward LAN-side BGP peers
    summarized_subnet_to_lan_ospf string
    toward LAN-side OSPF peers
    advertisedSubnet String
    If routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side
    allowPing Boolean
    Whether to allow ping from vpn into this routed network
    destinationNat Map<String,DeviceprofileGatewayNetworkVpnAccessDestinationNat>
    Destination NAT rules applied for VPN access to this network
    natPool String
    If routed==false (usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub
    noReadvertiseToLanBgp Boolean
    toward LAN-side BGP peers
    noReadvertiseToLanOspf Boolean
    toward LAN-side OSPF peers
    noReadvertiseToOverlay Boolean
    toward overlay, how HUB should deal with routes it received from Spokes
    otherVrfs List<String>
    Other VRFs that can receive leaked routes from this spoke network
    routed Boolean
    Whether this network is routable
    sourceNat DeviceprofileGatewayNetworkVpnAccessSourceNat
    Source NAT settings used when non-routed spoke hosts must be reachable from the hub
    staticNat Map<String,DeviceprofileGatewayNetworkVpnAccessStaticNat>
    Static NAT rules applied for VPN access to this network
    summarizedSubnet String
    toward overlay, how HUB should deal with routes it received from Spokes
    summarizedSubnetToLanBgp String
    toward LAN-side BGP peers
    summarizedSubnetToLanOspf String
    toward LAN-side OSPF peers
    advertisedSubnet string
    If routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side
    allowPing boolean
    Whether to allow ping from vpn into this routed network
    destinationNat {[key: string]: DeviceprofileGatewayNetworkVpnAccessDestinationNat}
    Destination NAT rules applied for VPN access to this network
    natPool string
    If routed==false (usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub
    noReadvertiseToLanBgp boolean
    toward LAN-side BGP peers
    noReadvertiseToLanOspf boolean
    toward LAN-side OSPF peers
    noReadvertiseToOverlay boolean
    toward overlay, how HUB should deal with routes it received from Spokes
    otherVrfs string[]
    Other VRFs that can receive leaked routes from this spoke network
    routed boolean
    Whether this network is routable
    sourceNat DeviceprofileGatewayNetworkVpnAccessSourceNat
    Source NAT settings used when non-routed spoke hosts must be reachable from the hub
    staticNat {[key: string]: DeviceprofileGatewayNetworkVpnAccessStaticNat}
    Static NAT rules applied for VPN access to this network
    summarizedSubnet string
    toward overlay, how HUB should deal with routes it received from Spokes
    summarizedSubnetToLanBgp string
    toward LAN-side BGP peers
    summarizedSubnetToLanOspf string
    toward LAN-side OSPF peers
    advertised_subnet str
    If routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side
    allow_ping bool
    Whether to allow ping from vpn into this routed network
    destination_nat Mapping[str, DeviceprofileGatewayNetworkVpnAccessDestinationNat]
    Destination NAT rules applied for VPN access to this network
    nat_pool str
    If routed==false (usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub
    no_readvertise_to_lan_bgp bool
    toward LAN-side BGP peers
    no_readvertise_to_lan_ospf bool
    toward LAN-side OSPF peers
    no_readvertise_to_overlay bool
    toward overlay, how HUB should deal with routes it received from Spokes
    other_vrfs Sequence[str]
    Other VRFs that can receive leaked routes from this spoke network
    routed bool
    Whether this network is routable
    source_nat DeviceprofileGatewayNetworkVpnAccessSourceNat
    Source NAT settings used when non-routed spoke hosts must be reachable from the hub
    static_nat Mapping[str, DeviceprofileGatewayNetworkVpnAccessStaticNat]
    Static NAT rules applied for VPN access to this network
    summarized_subnet str
    toward overlay, how HUB should deal with routes it received from Spokes
    summarized_subnet_to_lan_bgp str
    toward LAN-side BGP peers
    summarized_subnet_to_lan_ospf str
    toward LAN-side OSPF peers
    advertisedSubnet String
    If routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side
    allowPing Boolean
    Whether to allow ping from vpn into this routed network
    destinationNat Map<Property Map>
    Destination NAT rules applied for VPN access to this network
    natPool String
    If routed==false (usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub
    noReadvertiseToLanBgp Boolean
    toward LAN-side BGP peers
    noReadvertiseToLanOspf Boolean
    toward LAN-side OSPF peers
    noReadvertiseToOverlay Boolean
    toward overlay, how HUB should deal with routes it received from Spokes
    otherVrfs List<String>
    Other VRFs that can receive leaked routes from this spoke network
    routed Boolean
    Whether this network is routable
    sourceNat Property Map
    Source NAT settings used when non-routed spoke hosts must be reachable from the hub
    staticNat Map<Property Map>
    Static NAT rules applied for VPN access to this network
    summarizedSubnet String
    toward overlay, how HUB should deal with routes it received from Spokes
    summarizedSubnetToLanBgp String
    toward LAN-side BGP peers
    summarizedSubnetToLanOspf String
    toward LAN-side OSPF peers

    DeviceprofileGatewayNetworkVpnAccessDestinationNat, DeviceprofileGatewayNetworkVpnAccessDestinationNatArgs

    InternalIp string
    The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
    Name string
    Label for this VPN destination NAT rule
    Port string
    Destination port or variable for this VPN destination NAT rule
    InternalIp string
    The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
    Name string
    Label for this VPN destination NAT rule
    Port string
    Destination port or variable for this VPN destination NAT rule
    internal_ip string
    The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
    name string
    Label for this VPN destination NAT rule
    port string
    Destination port or variable for this VPN destination NAT rule
    internalIp String
    The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
    name String
    Label for this VPN destination NAT rule
    port String
    Destination port or variable for this VPN destination NAT rule
    internalIp string
    The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
    name string
    Label for this VPN destination NAT rule
    port string
    Destination port or variable for this VPN destination NAT rule
    internal_ip str
    The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
    name str
    Label for this VPN destination NAT rule
    port str
    Destination port or variable for this VPN destination NAT rule
    internalIp String
    The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
    name String
    Label for this VPN destination NAT rule
    port String
    Destination port or variable for this VPN destination NAT rule

    DeviceprofileGatewayNetworkVpnAccessSourceNat, DeviceprofileGatewayNetworkVpnAccessSourceNatArgs

    ExternalIp string
    External source NAT IP or subnet used when spoke hosts must be reachable from the hub
    ExternalIp string
    External source NAT IP or subnet used when spoke hosts must be reachable from the hub
    external_ip string
    External source NAT IP or subnet used when spoke hosts must be reachable from the hub
    externalIp String
    External source NAT IP or subnet used when spoke hosts must be reachable from the hub
    externalIp string
    External source NAT IP or subnet used when spoke hosts must be reachable from the hub
    external_ip str
    External source NAT IP or subnet used when spoke hosts must be reachable from the hub
    externalIp String
    External source NAT IP or subnet used when spoke hosts must be reachable from the hub

    DeviceprofileGatewayNetworkVpnAccessStaticNat, DeviceprofileGatewayNetworkVpnAccessStaticNatArgs

    InternalIp string
    The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
    Name string
    Label for this VPN static NAT rule
    InternalIp string
    The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
    Name string
    Label for this VPN static NAT rule
    internal_ip string
    The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
    name string
    Label for this VPN static NAT rule
    internalIp String
    The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
    name String
    Label for this VPN static NAT rule
    internalIp string
    The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
    name string
    Label for this VPN static NAT rule
    internal_ip str
    The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
    name str
    Label for this VPN static NAT rule
    internalIp String
    The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
    name String
    Label for this VPN static NAT rule

    DeviceprofileGatewayOobIpConfig, DeviceprofileGatewayOobIpConfigArgs

    Gateway string
    Default gateway for the out-of-band management interface when type==static
    Ip string
    Static IPv4 address for the out-of-band management interface when type==static
    Netmask string
    IPv4 netmask or prefix length for the out-of-band management interface when type==static
    Node1 Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayOobIpConfigNode1
    Out-of-band management IP configuration override for node1 in an HA cluster
    Type string
    IP assignment mode for the out-of-band management interface
    UseMgmtVrf bool
    If supported on the platform. If enabled, DNS will be using this routing-instance, too
    UseMgmtVrfForHostOut bool
    For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
    VlanId string
    VLAN ID used for out-of-band management traffic
    Gateway string
    Default gateway for the out-of-band management interface when type==static
    Ip string
    Static IPv4 address for the out-of-band management interface when type==static
    Netmask string
    IPv4 netmask or prefix length for the out-of-band management interface when type==static
    Node1 DeviceprofileGatewayOobIpConfigNode1
    Out-of-band management IP configuration override for node1 in an HA cluster
    Type string
    IP assignment mode for the out-of-band management interface
    UseMgmtVrf bool
    If supported on the platform. If enabled, DNS will be using this routing-instance, too
    UseMgmtVrfForHostOut bool
    For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
    VlanId string
    VLAN ID used for out-of-band management traffic
    gateway string
    Default gateway for the out-of-band management interface when type==static
    ip string
    Static IPv4 address for the out-of-band management interface when type==static
    netmask string
    IPv4 netmask or prefix length for the out-of-band management interface when type==static
    node1 object
    Out-of-band management IP configuration override for node1 in an HA cluster
    type string
    IP assignment mode for the out-of-band management interface
    use_mgmt_vrf bool
    If supported on the platform. If enabled, DNS will be using this routing-instance, too
    use_mgmt_vrf_for_host_out bool
    For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
    vlan_id string
    VLAN ID used for out-of-band management traffic
    gateway String
    Default gateway for the out-of-band management interface when type==static
    ip String
    Static IPv4 address for the out-of-band management interface when type==static
    netmask String
    IPv4 netmask or prefix length for the out-of-band management interface when type==static
    node1 DeviceprofileGatewayOobIpConfigNode1
    Out-of-band management IP configuration override for node1 in an HA cluster
    type String
    IP assignment mode for the out-of-band management interface
    useMgmtVrf Boolean
    If supported on the platform. If enabled, DNS will be using this routing-instance, too
    useMgmtVrfForHostOut Boolean
    For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
    vlanId String
    VLAN ID used for out-of-band management traffic
    gateway string
    Default gateway for the out-of-band management interface when type==static
    ip string
    Static IPv4 address for the out-of-band management interface when type==static
    netmask string
    IPv4 netmask or prefix length for the out-of-band management interface when type==static
    node1 DeviceprofileGatewayOobIpConfigNode1
    Out-of-band management IP configuration override for node1 in an HA cluster
    type string
    IP assignment mode for the out-of-band management interface
    useMgmtVrf boolean
    If supported on the platform. If enabled, DNS will be using this routing-instance, too
    useMgmtVrfForHostOut boolean
    For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
    vlanId string
    VLAN ID used for out-of-band management traffic
    gateway str
    Default gateway for the out-of-band management interface when type==static
    ip str
    Static IPv4 address for the out-of-band management interface when type==static
    netmask str
    IPv4 netmask or prefix length for the out-of-band management interface when type==static
    node1 DeviceprofileGatewayOobIpConfigNode1
    Out-of-band management IP configuration override for node1 in an HA cluster
    type str
    IP assignment mode for the out-of-band management interface
    use_mgmt_vrf bool
    If supported on the platform. If enabled, DNS will be using this routing-instance, too
    use_mgmt_vrf_for_host_out bool
    For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
    vlan_id str
    VLAN ID used for out-of-band management traffic
    gateway String
    Default gateway for the out-of-band management interface when type==static
    ip String
    Static IPv4 address for the out-of-band management interface when type==static
    netmask String
    IPv4 netmask or prefix length for the out-of-band management interface when type==static
    node1 Property Map
    Out-of-band management IP configuration override for node1 in an HA cluster
    type String
    IP assignment mode for the out-of-band management interface
    useMgmtVrf Boolean
    If supported on the platform. If enabled, DNS will be using this routing-instance, too
    useMgmtVrfForHostOut Boolean
    For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
    vlanId String
    VLAN ID used for out-of-band management traffic

    DeviceprofileGatewayOobIpConfigNode1, DeviceprofileGatewayOobIpConfigNode1Args

    Gateway string
    Default gateway for the node1 out-of-band management interface when type==static
    Ip string
    Static IPv4 address for the node1 out-of-band management interface when type==static
    Netmask string
    IPv4 netmask or prefix length for the node1 out-of-band management interface when type==static; used only if subnet is not specified in networks
    Type string
    IP assignment mode for the node1 out-of-band management interface
    UseMgmtVrf bool
    If supported on the platform. If enabled, DNS will be using this routing-instance, too
    UseMgmtVrfForHostOut bool
    Whether to use mgmtJunos for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
    VlanId string
    VLAN ID used for node1 out-of-band management traffic
    Gateway string
    Default gateway for the node1 out-of-band management interface when type==static
    Ip string
    Static IPv4 address for the node1 out-of-band management interface when type==static
    Netmask string
    IPv4 netmask or prefix length for the node1 out-of-band management interface when type==static; used only if subnet is not specified in networks
    Type string
    IP assignment mode for the node1 out-of-band management interface
    UseMgmtVrf bool
    If supported on the platform. If enabled, DNS will be using this routing-instance, too
    UseMgmtVrfForHostOut bool
    Whether to use mgmtJunos for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
    VlanId string
    VLAN ID used for node1 out-of-band management traffic
    gateway string
    Default gateway for the node1 out-of-band management interface when type==static
    ip string
    Static IPv4 address for the node1 out-of-band management interface when type==static
    netmask string
    IPv4 netmask or prefix length for the node1 out-of-band management interface when type==static; used only if subnet is not specified in networks
    type string
    IP assignment mode for the node1 out-of-band management interface
    use_mgmt_vrf bool
    If supported on the platform. If enabled, DNS will be using this routing-instance, too
    use_mgmt_vrf_for_host_out bool
    Whether to use mgmtJunos for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
    vlan_id string
    VLAN ID used for node1 out-of-band management traffic
    gateway String
    Default gateway for the node1 out-of-band management interface when type==static
    ip String
    Static IPv4 address for the node1 out-of-band management interface when type==static
    netmask String
    IPv4 netmask or prefix length for the node1 out-of-band management interface when type==static; used only if subnet is not specified in networks
    type String
    IP assignment mode for the node1 out-of-band management interface
    useMgmtVrf Boolean
    If supported on the platform. If enabled, DNS will be using this routing-instance, too
    useMgmtVrfForHostOut Boolean
    Whether to use mgmtJunos for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
    vlanId String
    VLAN ID used for node1 out-of-band management traffic
    gateway string
    Default gateway for the node1 out-of-band management interface when type==static
    ip string
    Static IPv4 address for the node1 out-of-band management interface when type==static
    netmask string
    IPv4 netmask or prefix length for the node1 out-of-band management interface when type==static; used only if subnet is not specified in networks
    type string
    IP assignment mode for the node1 out-of-band management interface
    useMgmtVrf boolean
    If supported on the platform. If enabled, DNS will be using this routing-instance, too
    useMgmtVrfForHostOut boolean
    Whether to use mgmtJunos for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
    vlanId string
    VLAN ID used for node1 out-of-band management traffic
    gateway str
    Default gateway for the node1 out-of-band management interface when type==static
    ip str
    Static IPv4 address for the node1 out-of-band management interface when type==static
    netmask str
    IPv4 netmask or prefix length for the node1 out-of-band management interface when type==static; used only if subnet is not specified in networks
    type str
    IP assignment mode for the node1 out-of-band management interface
    use_mgmt_vrf bool
    If supported on the platform. If enabled, DNS will be using this routing-instance, too
    use_mgmt_vrf_for_host_out bool
    Whether to use mgmtJunos for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
    vlan_id str
    VLAN ID used for node1 out-of-band management traffic
    gateway String
    Default gateway for the node1 out-of-band management interface when type==static
    ip String
    Static IPv4 address for the node1 out-of-band management interface when type==static
    netmask String
    IPv4 netmask or prefix length for the node1 out-of-band management interface when type==static; used only if subnet is not specified in networks
    type String
    IP assignment mode for the node1 out-of-band management interface
    useMgmtVrf Boolean
    If supported on the platform. If enabled, DNS will be using this routing-instance, too
    useMgmtVrfForHostOut Boolean
    Whether to use mgmtJunos for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
    vlanId String
    VLAN ID used for node1 out-of-band management traffic

    DeviceprofileGatewayPathPreferences, DeviceprofileGatewayPathPreferencesArgs

    Paths List<Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayPathPreferencesPath>
    Candidate paths evaluated for this gateway path preference
    Strategy string
    Selection strategy used to evaluate the candidate paths
    Paths []DeviceprofileGatewayPathPreferencesPath
    Candidate paths evaluated for this gateway path preference
    Strategy string
    Selection strategy used to evaluate the candidate paths
    paths list(object)
    Candidate paths evaluated for this gateway path preference
    strategy string
    Selection strategy used to evaluate the candidate paths
    paths List<DeviceprofileGatewayPathPreferencesPath>
    Candidate paths evaluated for this gateway path preference
    strategy String
    Selection strategy used to evaluate the candidate paths
    paths DeviceprofileGatewayPathPreferencesPath[]
    Candidate paths evaluated for this gateway path preference
    strategy string
    Selection strategy used to evaluate the candidate paths
    paths Sequence[DeviceprofileGatewayPathPreferencesPath]
    Candidate paths evaluated for this gateway path preference
    strategy str
    Selection strategy used to evaluate the candidate paths
    paths List<Property Map>
    Candidate paths evaluated for this gateway path preference
    strategy String
    Selection strategy used to evaluate the candidate paths

    DeviceprofileGatewayPathPreferencesPath, DeviceprofileGatewayPathPreferencesPathArgs

    Type string
    Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
    Cost int
    Relative cost assigned to this path for gateway path selection
    Disabled bool
    For SSR Only. true, if this specific path is undesired
    GatewayIp string
    Only if type==local, if a different gateway is desired
    InternetAccess bool
    Only if type==vpn, if this vpn path can be used for internet
    Name string
    Required when

    • type==vpn: the name of the VPN Path to use
    • type==wan: the name of the WAN interface to use
    Networks List<string>
    List of network names used when type==local
    TargetIps List<string>
    List of destination IP addresses to replace when type==local
    WanName string
    Optional if type==vpn; WAN interface name associated with the VPN path
    Type string
    Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
    Cost int
    Relative cost assigned to this path for gateway path selection
    Disabled bool
    For SSR Only. true, if this specific path is undesired
    GatewayIp string
    Only if type==local, if a different gateway is desired
    InternetAccess bool
    Only if type==vpn, if this vpn path can be used for internet
    Name string
    Required when

    • type==vpn: the name of the VPN Path to use
    • type==wan: the name of the WAN interface to use
    Networks []string
    List of network names used when type==local
    TargetIps []string
    List of destination IP addresses to replace when type==local
    WanName string
    Optional if type==vpn; WAN interface name associated with the VPN path
    type string
    Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
    cost number
    Relative cost assigned to this path for gateway path selection
    disabled bool
    For SSR Only. true, if this specific path is undesired
    gateway_ip string
    Only if type==local, if a different gateway is desired
    internet_access bool
    Only if type==vpn, if this vpn path can be used for internet
    name string
    Required when

    • type==vpn: the name of the VPN Path to use
    • type==wan: the name of the WAN interface to use
    networks list(string)
    List of network names used when type==local
    target_ips list(string)
    List of destination IP addresses to replace when type==local
    wan_name string
    Optional if type==vpn; WAN interface name associated with the VPN path
    type String
    Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
    cost Integer
    Relative cost assigned to this path for gateway path selection
    disabled Boolean
    For SSR Only. true, if this specific path is undesired
    gatewayIp String
    Only if type==local, if a different gateway is desired
    internetAccess Boolean
    Only if type==vpn, if this vpn path can be used for internet
    name String
    Required when

    • type==vpn: the name of the VPN Path to use
    • type==wan: the name of the WAN interface to use
    networks List<String>
    List of network names used when type==local
    targetIps List<String>
    List of destination IP addresses to replace when type==local
    wanName String
    Optional if type==vpn; WAN interface name associated with the VPN path
    type string
    Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
    cost number
    Relative cost assigned to this path for gateway path selection
    disabled boolean
    For SSR Only. true, if this specific path is undesired
    gatewayIp string
    Only if type==local, if a different gateway is desired
    internetAccess boolean
    Only if type==vpn, if this vpn path can be used for internet
    name string
    Required when

    • type==vpn: the name of the VPN Path to use
    • type==wan: the name of the WAN interface to use
    networks string[]
    List of network names used when type==local
    targetIps string[]
    List of destination IP addresses to replace when type==local
    wanName string
    Optional if type==vpn; WAN interface name associated with the VPN path
    type str
    Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
    cost int
    Relative cost assigned to this path for gateway path selection
    disabled bool
    For SSR Only. true, if this specific path is undesired
    gateway_ip str
    Only if type==local, if a different gateway is desired
    internet_access bool
    Only if type==vpn, if this vpn path can be used for internet
    name str
    Required when

    • type==vpn: the name of the VPN Path to use
    • type==wan: the name of the WAN interface to use
    networks Sequence[str]
    List of network names used when type==local
    target_ips Sequence[str]
    List of destination IP addresses to replace when type==local
    wan_name str
    Optional if type==vpn; WAN interface name associated with the VPN path
    type String
    Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
    cost Number
    Relative cost assigned to this path for gateway path selection
    disabled Boolean
    For SSR Only. true, if this specific path is undesired
    gatewayIp String
    Only if type==local, if a different gateway is desired
    internetAccess Boolean
    Only if type==vpn, if this vpn path can be used for internet
    name String
    Required when

    • type==vpn: the name of the VPN Path to use
    • type==wan: the name of the WAN interface to use
    networks List<String>
    List of network names used when type==local
    targetIps List<String>
    List of destination IP addresses to replace when type==local
    wanName String
    Optional if type==vpn; WAN interface name associated with the VPN path

    DeviceprofileGatewayPortConfig, DeviceprofileGatewayPortConfigArgs

    Usage string
    Logical usage assigned to the port
    AeDisableLacp bool
    If aggregated==true. To disable LCP support for the AE interface
    AeIdx string
    If aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127)
    AeLacpForceUp bool
    For SRX only, if aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only
    Aggregated bool
    Whether the port participates in an aggregated Ethernet interface
    Critical bool
    To generate port up/down alarm, set it to true
    Description string
    Interface Description. Can be a variable (i.e. "{{myvar}}")
    DisableAutoneg bool
    Whether Ethernet autonegotiation is disabled on the port
    Disabled bool
    Port admin up (true) / down (false)
    DslType string
    If wanType==dsl. DSL technology used by the WAN port
    DslVci int
    If wanType==dsl, 16 bit int
    DslVpi int
    If wanType==dsl, 8 bit int
    Duplex string
    Ethernet duplex mode configured on the port
    IpConfig Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigIpConfig
    Layer 3 IP configuration for the port
    LteApn string
    If wanType==lte. APN used by the LTE uplink
    LteAuth string
    If wanType==lte. Authentication method used by the LTE uplink
    LteBackup bool
    Whether the LTE uplink is used as a backup WAN connection
    LtePassword string
    If wanType==lte. Password used for LTE uplink authentication
    LteUsername string
    If wanType==lte. Username used for LTE uplink authentication
    Mtu int
    Layer 3 MTU configured on the port
    Name string
    Interface name used to derive device configuration
    Networks List<string>
    if usage==lan, name of the junipermist.org.Network resource
    OuterVlanId int
    For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
    PoeDisabled bool
    Whether PoE output is disabled on the port
    PoeKeepStateWhenReboot bool
    Whether Perpetual PoE capabilities are enabled for a port
    PortNetwork string
    Only for SRX and if usage==lan, the name of the Network to be used as the Untagged VLAN
    PreserveDscp bool
    Whether to preserve dscp when sending traffic over VPN (SSR-only)
    Redundant bool
    If HA mode. Whether the port participates in the redundant Ethernet configuration
    RedundantGroup int
    If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
    RethIdx string
    For SRX only and if HA Mode
    RethNode string
    If HA mode. Node associated with the redundant Ethernet interface
    RethNodes List<string>
    If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
    Speed string
    Link speed configured on the port
    SsrNoVirtualMac bool
    When SSR is running as VM, this is required on certain hosting platforms
    SvrPortRange string
    For SSR only. Port range configured on the interface
    TrafficShaping Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigTrafficShaping
    Traffic shaping settings applied to the port
    VlanId string
    VLAN ID or variable used when the WAN interface is carried on a VLAN
    VpnPaths Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigVpnPaths>
    Per-VPN path settings for traffic that uses this port
    WanArpPolicer string
    Only when wanType==broadband. ARP policer profile applied to the WAN port
    WanExtIp string
    Only if usage==wan, optional. If spoke should reach this port by a different IP
    WanExtIp6 string
    Only if usage==wan, optional. If spoke should reach this port by a different IPv6
    WanExtraRoutes Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigWanExtraRoutes>
    Only if usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24")
    WanExtraRoutes6 Dictionary<string, Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigWanExtraRoutes6>
    Only if usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
    WanNetworks List<string>
    Only if usage==wan. Networks reachable through this WAN port for policy definition
    WanProbeOverride Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigWanProbeOverride
    Optional WAN health probe override settings for this port
    WanSourceNat Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigWanSourceNat
    Source NAT settings applied to traffic leaving this WAN port
    WanSpeedtestMode string
    Controls whether Marvis or the scheduler can run speed tests on this WAN port
    WanType string
    Only if usage==wan. WAN uplink type configured on the port
    Usage string
    Logical usage assigned to the port
    AeDisableLacp bool
    If aggregated==true. To disable LCP support for the AE interface
    AeIdx string
    If aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127)
    AeLacpForceUp bool
    For SRX only, if aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only
    Aggregated bool
    Whether the port participates in an aggregated Ethernet interface
    Critical bool
    To generate port up/down alarm, set it to true
    Description string
    Interface Description. Can be a variable (i.e. "{{myvar}}")
    DisableAutoneg bool
    Whether Ethernet autonegotiation is disabled on the port
    Disabled bool
    Port admin up (true) / down (false)
    DslType string
    If wanType==dsl. DSL technology used by the WAN port
    DslVci int
    If wanType==dsl, 16 bit int
    DslVpi int
    If wanType==dsl, 8 bit int
    Duplex string
    Ethernet duplex mode configured on the port
    IpConfig DeviceprofileGatewayPortConfigIpConfig
    Layer 3 IP configuration for the port
    LteApn string
    If wanType==lte. APN used by the LTE uplink
    LteAuth string
    If wanType==lte. Authentication method used by the LTE uplink
    LteBackup bool
    Whether the LTE uplink is used as a backup WAN connection
    LtePassword string
    If wanType==lte. Password used for LTE uplink authentication
    LteUsername string
    If wanType==lte. Username used for LTE uplink authentication
    Mtu int
    Layer 3 MTU configured on the port
    Name string
    Interface name used to derive device configuration
    Networks []string
    if usage==lan, name of the junipermist.org.Network resource
    OuterVlanId int
    For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
    PoeDisabled bool
    Whether PoE output is disabled on the port
    PoeKeepStateWhenReboot bool
    Whether Perpetual PoE capabilities are enabled for a port
    PortNetwork string
    Only for SRX and if usage==lan, the name of the Network to be used as the Untagged VLAN
    PreserveDscp bool
    Whether to preserve dscp when sending traffic over VPN (SSR-only)
    Redundant bool
    If HA mode. Whether the port participates in the redundant Ethernet configuration
    RedundantGroup int
    If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
    RethIdx string
    For SRX only and if HA Mode
    RethNode string
    If HA mode. Node associated with the redundant Ethernet interface
    RethNodes []string
    If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
    Speed string
    Link speed configured on the port
    SsrNoVirtualMac bool
    When SSR is running as VM, this is required on certain hosting platforms
    SvrPortRange string
    For SSR only. Port range configured on the interface
    TrafficShaping DeviceprofileGatewayPortConfigTrafficShaping
    Traffic shaping settings applied to the port
    VlanId string
    VLAN ID or variable used when the WAN interface is carried on a VLAN
    VpnPaths map[string]DeviceprofileGatewayPortConfigVpnPaths
    Per-VPN path settings for traffic that uses this port
    WanArpPolicer string
    Only when wanType==broadband. ARP policer profile applied to the WAN port
    WanExtIp string
    Only if usage==wan, optional. If spoke should reach this port by a different IP
    WanExtIp6 string
    Only if usage==wan, optional. If spoke should reach this port by a different IPv6
    WanExtraRoutes map[string]DeviceprofileGatewayPortConfigWanExtraRoutes
    Only if usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24")
    WanExtraRoutes6 map[string]DeviceprofileGatewayPortConfigWanExtraRoutes6
    Only if usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
    WanNetworks []string
    Only if usage==wan. Networks reachable through this WAN port for policy definition
    WanProbeOverride DeviceprofileGatewayPortConfigWanProbeOverride
    Optional WAN health probe override settings for this port
    WanSourceNat DeviceprofileGatewayPortConfigWanSourceNat
    Source NAT settings applied to traffic leaving this WAN port
    WanSpeedtestMode string
    Controls whether Marvis or the scheduler can run speed tests on this WAN port
    WanType string
    Only if usage==wan. WAN uplink type configured on the port
    usage string
    Logical usage assigned to the port
    ae_disable_lacp bool
    If aggregated==true. To disable LCP support for the AE interface
    ae_idx string
    If aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127)
    ae_lacp_force_up bool
    For SRX only, if aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only
    aggregated bool
    Whether the port participates in an aggregated Ethernet interface
    critical bool
    To generate port up/down alarm, set it to true
    description string
    Interface Description. Can be a variable (i.e. "{{myvar}}")
    disable_autoneg bool
    Whether Ethernet autonegotiation is disabled on the port
    disabled bool
    Port admin up (true) / down (false)
    dsl_type string
    If wanType==dsl. DSL technology used by the WAN port
    dsl_vci number
    If wanType==dsl, 16 bit int
    dsl_vpi number
    If wanType==dsl, 8 bit int
    duplex string
    Ethernet duplex mode configured on the port
    ip_config object
    Layer 3 IP configuration for the port
    lte_apn string
    If wanType==lte. APN used by the LTE uplink
    lte_auth string
    If wanType==lte. Authentication method used by the LTE uplink
    lte_backup bool
    Whether the LTE uplink is used as a backup WAN connection
    lte_password string
    If wanType==lte. Password used for LTE uplink authentication
    lte_username string
    If wanType==lte. Username used for LTE uplink authentication
    mtu number
    Layer 3 MTU configured on the port
    name string
    Interface name used to derive device configuration
    networks list(string)
    if usage==lan, name of the junipermist.org.Network resource
    outer_vlan_id number
    For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
    poe_disabled bool
    Whether PoE output is disabled on the port
    poe_keep_state_when_reboot bool
    Whether Perpetual PoE capabilities are enabled for a port
    port_network string
    Only for SRX and if usage==lan, the name of the Network to be used as the Untagged VLAN
    preserve_dscp bool
    Whether to preserve dscp when sending traffic over VPN (SSR-only)
    redundant bool
    If HA mode. Whether the port participates in the redundant Ethernet configuration
    redundant_group number
    If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
    reth_idx string
    For SRX only and if HA Mode
    reth_node string
    If HA mode. Node associated with the redundant Ethernet interface
    reth_nodes list(string)
    If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
    speed string
    Link speed configured on the port
    ssr_no_virtual_mac bool
    When SSR is running as VM, this is required on certain hosting platforms
    svr_port_range string
    For SSR only. Port range configured on the interface
    traffic_shaping object
    Traffic shaping settings applied to the port
    vlan_id string
    VLAN ID or variable used when the WAN interface is carried on a VLAN
    vpn_paths map(object)
    Per-VPN path settings for traffic that uses this port
    wan_arp_policer string
    Only when wanType==broadband. ARP policer profile applied to the WAN port
    wan_ext_ip string
    Only if usage==wan, optional. If spoke should reach this port by a different IP
    wan_ext_ip6 string
    Only if usage==wan, optional. If spoke should reach this port by a different IPv6
    wan_extra_routes map(object)
    Only if usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24")
    wan_extra_routes6 map(object)
    Only if usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
    wan_networks list(string)
    Only if usage==wan. Networks reachable through this WAN port for policy definition
    wan_probe_override object
    Optional WAN health probe override settings for this port
    wan_source_nat object
    Source NAT settings applied to traffic leaving this WAN port
    wan_speedtest_mode string
    Controls whether Marvis or the scheduler can run speed tests on this WAN port
    wan_type string
    Only if usage==wan. WAN uplink type configured on the port
    usage String
    Logical usage assigned to the port
    aeDisableLacp Boolean
    If aggregated==true. To disable LCP support for the AE interface
    aeIdx String
    If aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127)
    aeLacpForceUp Boolean
    For SRX only, if aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only
    aggregated Boolean
    Whether the port participates in an aggregated Ethernet interface
    critical Boolean
    To generate port up/down alarm, set it to true
    description String
    Interface Description. Can be a variable (i.e. "{{myvar}}")
    disableAutoneg Boolean
    Whether Ethernet autonegotiation is disabled on the port
    disabled Boolean
    Port admin up (true) / down (false)
    dslType String
    If wanType==dsl. DSL technology used by the WAN port
    dslVci Integer
    If wanType==dsl, 16 bit int
    dslVpi Integer
    If wanType==dsl, 8 bit int
    duplex String
    Ethernet duplex mode configured on the port
    ipConfig DeviceprofileGatewayPortConfigIpConfig
    Layer 3 IP configuration for the port
    lteApn String
    If wanType==lte. APN used by the LTE uplink
    lteAuth String
    If wanType==lte. Authentication method used by the LTE uplink
    lteBackup Boolean
    Whether the LTE uplink is used as a backup WAN connection
    ltePassword String
    If wanType==lte. Password used for LTE uplink authentication
    lteUsername String
    If wanType==lte. Username used for LTE uplink authentication
    mtu Integer
    Layer 3 MTU configured on the port
    name String
    Interface name used to derive device configuration
    networks List<String>
    if usage==lan, name of the junipermist.org.Network resource
    outerVlanId Integer
    For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
    poeDisabled Boolean
    Whether PoE output is disabled on the port
    poeKeepStateWhenReboot Boolean
    Whether Perpetual PoE capabilities are enabled for a port
    portNetwork String
    Only for SRX and if usage==lan, the name of the Network to be used as the Untagged VLAN
    preserveDscp Boolean
    Whether to preserve dscp when sending traffic over VPN (SSR-only)
    redundant Boolean
    If HA mode. Whether the port participates in the redundant Ethernet configuration
    redundantGroup Integer
    If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
    rethIdx String
    For SRX only and if HA Mode
    rethNode String
    If HA mode. Node associated with the redundant Ethernet interface
    rethNodes List<String>
    If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
    speed String
    Link speed configured on the port
    ssrNoVirtualMac Boolean
    When SSR is running as VM, this is required on certain hosting platforms
    svrPortRange String
    For SSR only. Port range configured on the interface
    trafficShaping DeviceprofileGatewayPortConfigTrafficShaping
    Traffic shaping settings applied to the port
    vlanId String
    VLAN ID or variable used when the WAN interface is carried on a VLAN
    vpnPaths Map<String,DeviceprofileGatewayPortConfigVpnPaths>
    Per-VPN path settings for traffic that uses this port
    wanArpPolicer String
    Only when wanType==broadband. ARP policer profile applied to the WAN port
    wanExtIp String
    Only if usage==wan, optional. If spoke should reach this port by a different IP
    wanExtIp6 String
    Only if usage==wan, optional. If spoke should reach this port by a different IPv6
    wanExtraRoutes Map<String,DeviceprofileGatewayPortConfigWanExtraRoutes>
    Only if usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24")
    wanExtraRoutes6 Map<String,DeviceprofileGatewayPortConfigWanExtraRoutes6>
    Only if usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
    wanNetworks List<String>
    Only if usage==wan. Networks reachable through this WAN port for policy definition
    wanProbeOverride DeviceprofileGatewayPortConfigWanProbeOverride
    Optional WAN health probe override settings for this port
    wanSourceNat DeviceprofileGatewayPortConfigWanSourceNat
    Source NAT settings applied to traffic leaving this WAN port
    wanSpeedtestMode String
    Controls whether Marvis or the scheduler can run speed tests on this WAN port
    wanType String
    Only if usage==wan. WAN uplink type configured on the port
    usage string
    Logical usage assigned to the port
    aeDisableLacp boolean
    If aggregated==true. To disable LCP support for the AE interface
    aeIdx string
    If aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127)
    aeLacpForceUp boolean
    For SRX only, if aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only
    aggregated boolean
    Whether the port participates in an aggregated Ethernet interface
    critical boolean
    To generate port up/down alarm, set it to true
    description string
    Interface Description. Can be a variable (i.e. "{{myvar}}")
    disableAutoneg boolean
    Whether Ethernet autonegotiation is disabled on the port
    disabled boolean
    Port admin up (true) / down (false)
    dslType string
    If wanType==dsl. DSL technology used by the WAN port
    dslVci number
    If wanType==dsl, 16 bit int
    dslVpi number
    If wanType==dsl, 8 bit int
    duplex string
    Ethernet duplex mode configured on the port
    ipConfig DeviceprofileGatewayPortConfigIpConfig
    Layer 3 IP configuration for the port
    lteApn string
    If wanType==lte. APN used by the LTE uplink
    lteAuth string
    If wanType==lte. Authentication method used by the LTE uplink
    lteBackup boolean
    Whether the LTE uplink is used as a backup WAN connection
    ltePassword string
    If wanType==lte. Password used for LTE uplink authentication
    lteUsername string
    If wanType==lte. Username used for LTE uplink authentication
    mtu number
    Layer 3 MTU configured on the port
    name string
    Interface name used to derive device configuration
    networks string[]
    if usage==lan, name of the junipermist.org.Network resource
    outerVlanId number
    For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
    poeDisabled boolean
    Whether PoE output is disabled on the port
    poeKeepStateWhenReboot boolean
    Whether Perpetual PoE capabilities are enabled for a port
    portNetwork string
    Only for SRX and if usage==lan, the name of the Network to be used as the Untagged VLAN
    preserveDscp boolean
    Whether to preserve dscp when sending traffic over VPN (SSR-only)
    redundant boolean
    If HA mode. Whether the port participates in the redundant Ethernet configuration
    redundantGroup number
    If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
    rethIdx string
    For SRX only and if HA Mode
    rethNode string
    If HA mode. Node associated with the redundant Ethernet interface
    rethNodes string[]
    If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
    speed string
    Link speed configured on the port
    ssrNoVirtualMac boolean
    When SSR is running as VM, this is required on certain hosting platforms
    svrPortRange string
    For SSR only. Port range configured on the interface
    trafficShaping DeviceprofileGatewayPortConfigTrafficShaping
    Traffic shaping settings applied to the port
    vlanId string
    VLAN ID or variable used when the WAN interface is carried on a VLAN
    vpnPaths {[key: string]: DeviceprofileGatewayPortConfigVpnPaths}
    Per-VPN path settings for traffic that uses this port
    wanArpPolicer string
    Only when wanType==broadband. ARP policer profile applied to the WAN port
    wanExtIp string
    Only if usage==wan, optional. If spoke should reach this port by a different IP
    wanExtIp6 string
    Only if usage==wan, optional. If spoke should reach this port by a different IPv6
    wanExtraRoutes {[key: string]: DeviceprofileGatewayPortConfigWanExtraRoutes}
    Only if usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24")
    wanExtraRoutes6 {[key: string]: DeviceprofileGatewayPortConfigWanExtraRoutes6}
    Only if usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
    wanNetworks string[]
    Only if usage==wan. Networks reachable through this WAN port for policy definition
    wanProbeOverride DeviceprofileGatewayPortConfigWanProbeOverride
    Optional WAN health probe override settings for this port
    wanSourceNat DeviceprofileGatewayPortConfigWanSourceNat
    Source NAT settings applied to traffic leaving this WAN port
    wanSpeedtestMode string
    Controls whether Marvis or the scheduler can run speed tests on this WAN port
    wanType string
    Only if usage==wan. WAN uplink type configured on the port
    usage str
    Logical usage assigned to the port
    ae_disable_lacp bool
    If aggregated==true. To disable LCP support for the AE interface
    ae_idx str
    If aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127)
    ae_lacp_force_up bool
    For SRX only, if aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only
    aggregated bool
    Whether the port participates in an aggregated Ethernet interface
    critical bool
    To generate port up/down alarm, set it to true
    description str
    Interface Description. Can be a variable (i.e. "{{myvar}}")
    disable_autoneg bool
    Whether Ethernet autonegotiation is disabled on the port
    disabled bool
    Port admin up (true) / down (false)
    dsl_type str
    If wanType==dsl. DSL technology used by the WAN port
    dsl_vci int
    If wanType==dsl, 16 bit int
    dsl_vpi int
    If wanType==dsl, 8 bit int
    duplex str
    Ethernet duplex mode configured on the port
    ip_config DeviceprofileGatewayPortConfigIpConfig
    Layer 3 IP configuration for the port
    lte_apn str
    If wanType==lte. APN used by the LTE uplink
    lte_auth str
    If wanType==lte. Authentication method used by the LTE uplink
    lte_backup bool
    Whether the LTE uplink is used as a backup WAN connection
    lte_password str
    If wanType==lte. Password used for LTE uplink authentication
    lte_username str
    If wanType==lte. Username used for LTE uplink authentication
    mtu int
    Layer 3 MTU configured on the port
    name str
    Interface name used to derive device configuration
    networks Sequence[str]
    if usage==lan, name of the junipermist.org.Network resource
    outer_vlan_id int
    For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
    poe_disabled bool
    Whether PoE output is disabled on the port
    poe_keep_state_when_reboot bool
    Whether Perpetual PoE capabilities are enabled for a port
    port_network str
    Only for SRX and if usage==lan, the name of the Network to be used as the Untagged VLAN
    preserve_dscp bool
    Whether to preserve dscp when sending traffic over VPN (SSR-only)
    redundant bool
    If HA mode. Whether the port participates in the redundant Ethernet configuration
    redundant_group int
    If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
    reth_idx str
    For SRX only and if HA Mode
    reth_node str
    If HA mode. Node associated with the redundant Ethernet interface
    reth_nodes Sequence[str]
    If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
    speed str
    Link speed configured on the port
    ssr_no_virtual_mac bool
    When SSR is running as VM, this is required on certain hosting platforms
    svr_port_range str
    For SSR only. Port range configured on the interface
    traffic_shaping DeviceprofileGatewayPortConfigTrafficShaping
    Traffic shaping settings applied to the port
    vlan_id str
    VLAN ID or variable used when the WAN interface is carried on a VLAN
    vpn_paths Mapping[str, DeviceprofileGatewayPortConfigVpnPaths]
    Per-VPN path settings for traffic that uses this port
    wan_arp_policer str
    Only when wanType==broadband. ARP policer profile applied to the WAN port
    wan_ext_ip str
    Only if usage==wan, optional. If spoke should reach this port by a different IP
    wan_ext_ip6 str
    Only if usage==wan, optional. If spoke should reach this port by a different IPv6
    wan_extra_routes Mapping[str, DeviceprofileGatewayPortConfigWanExtraRoutes]
    Only if usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24")
    wan_extra_routes6 Mapping[str, DeviceprofileGatewayPortConfigWanExtraRoutes6]
    Only if usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
    wan_networks Sequence[str]
    Only if usage==wan. Networks reachable through this WAN port for policy definition
    wan_probe_override DeviceprofileGatewayPortConfigWanProbeOverride
    Optional WAN health probe override settings for this port
    wan_source_nat DeviceprofileGatewayPortConfigWanSourceNat
    Source NAT settings applied to traffic leaving this WAN port
    wan_speedtest_mode str
    Controls whether Marvis or the scheduler can run speed tests on this WAN port
    wan_type str
    Only if usage==wan. WAN uplink type configured on the port
    usage String
    Logical usage assigned to the port
    aeDisableLacp Boolean
    If aggregated==true. To disable LCP support for the AE interface
    aeIdx String
    If aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127)
    aeLacpForceUp Boolean
    For SRX only, if aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only
    aggregated Boolean
    Whether the port participates in an aggregated Ethernet interface
    critical Boolean
    To generate port up/down alarm, set it to true
    description String
    Interface Description. Can be a variable (i.e. "{{myvar}}")
    disableAutoneg Boolean
    Whether Ethernet autonegotiation is disabled on the port
    disabled Boolean
    Port admin up (true) / down (false)
    dslType String
    If wanType==dsl. DSL technology used by the WAN port
    dslVci Number
    If wanType==dsl, 16 bit int
    dslVpi Number
    If wanType==dsl, 8 bit int
    duplex String
    Ethernet duplex mode configured on the port
    ipConfig Property Map
    Layer 3 IP configuration for the port
    lteApn String
    If wanType==lte. APN used by the LTE uplink
    lteAuth String
    If wanType==lte. Authentication method used by the LTE uplink
    lteBackup Boolean
    Whether the LTE uplink is used as a backup WAN connection
    ltePassword String
    If wanType==lte. Password used for LTE uplink authentication
    lteUsername String
    If wanType==lte. Username used for LTE uplink authentication
    mtu Number
    Layer 3 MTU configured on the port
    name String
    Interface name used to derive device configuration
    networks List<String>
    if usage==lan, name of the junipermist.org.Network resource
    outerVlanId Number
    For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
    poeDisabled Boolean
    Whether PoE output is disabled on the port
    poeKeepStateWhenReboot Boolean
    Whether Perpetual PoE capabilities are enabled for a port
    portNetwork String
    Only for SRX and if usage==lan, the name of the Network to be used as the Untagged VLAN
    preserveDscp Boolean
    Whether to preserve dscp when sending traffic over VPN (SSR-only)
    redundant Boolean
    If HA mode. Whether the port participates in the redundant Ethernet configuration
    redundantGroup Number
    If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
    rethIdx String
    For SRX only and if HA Mode
    rethNode String
    If HA mode. Node associated with the redundant Ethernet interface
    rethNodes List<String>
    If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
    speed String
    Link speed configured on the port
    ssrNoVirtualMac Boolean
    When SSR is running as VM, this is required on certain hosting platforms
    svrPortRange String
    For SSR only. Port range configured on the interface
    trafficShaping Property Map
    Traffic shaping settings applied to the port
    vlanId String
    VLAN ID or variable used when the WAN interface is carried on a VLAN
    vpnPaths Map<Property Map>
    Per-VPN path settings for traffic that uses this port
    wanArpPolicer String
    Only when wanType==broadband. ARP policer profile applied to the WAN port
    wanExtIp String
    Only if usage==wan, optional. If spoke should reach this port by a different IP
    wanExtIp6 String
    Only if usage==wan, optional. If spoke should reach this port by a different IPv6
    wanExtraRoutes Map<Property Map>
    Only if usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24")
    wanExtraRoutes6 Map<Property Map>
    Only if usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
    wanNetworks List<String>
    Only if usage==wan. Networks reachable through this WAN port for policy definition
    wanProbeOverride Property Map
    Optional WAN health probe override settings for this port
    wanSourceNat Property Map
    Source NAT settings applied to traffic leaving this WAN port
    wanSpeedtestMode String
    Controls whether Marvis or the scheduler can run speed tests on this WAN port
    wanType String
    Only if usage==wan. WAN uplink type configured on the port

    DeviceprofileGatewayPortConfigIpConfig, DeviceprofileGatewayPortConfigIpConfigArgs

    Dns List<string>
    Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
    DnsSuffixes List<string>
    DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
    Gateway string
    Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
    Gateway6 string
    Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
    Ip string
    Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
    Ip6 string
    Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
    Netmask string
    Used only if subnet is not specified in networks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}")
    Netmask6 string
    Used only if subnet is not specified in networks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}")
    Network string
    Optional, the network to be used for mgmt
    PoserPassword string
    Password used for PPPoE when type==pppoe
    PppoeAuth string
    Authentication protocol used for PPPoE when type==pppoe
    PppoeUsername string
    Username used for PPPoE when type==pppoe
    Type string
    IPv4 assignment mode for this gateway port interface
    Type6 string
    IPv6 assignment mode for this gateway port interface
    Dns []string
    Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
    DnsSuffixes []string
    DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
    Gateway string
    Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
    Gateway6 string
    Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
    Ip string
    Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
    Ip6 string
    Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
    Netmask string
    Used only if subnet is not specified in networks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}")
    Netmask6 string
    Used only if subnet is not specified in networks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}")
    Network string
    Optional, the network to be used for mgmt
    PoserPassword string
    Password used for PPPoE when type==pppoe
    PppoeAuth string
    Authentication protocol used for PPPoE when type==pppoe
    PppoeUsername string
    Username used for PPPoE when type==pppoe
    Type string
    IPv4 assignment mode for this gateway port interface
    Type6 string
    IPv6 assignment mode for this gateway port interface
    dns list(string)
    Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
    dns_suffixes list(string)
    DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
    gateway string
    Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
    gateway6 string
    Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
    ip string
    Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
    ip6 string
    Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
    netmask string
    Used only if subnet is not specified in networks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}")
    netmask6 string
    Used only if subnet is not specified in networks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}")
    network string
    Optional, the network to be used for mgmt
    poser_password string
    Password used for PPPoE when type==pppoe
    pppoe_auth string
    Authentication protocol used for PPPoE when type==pppoe
    pppoe_username string
    Username used for PPPoE when type==pppoe
    type string
    IPv4 assignment mode for this gateway port interface
    type6 string
    IPv6 assignment mode for this gateway port interface
    dns List<String>
    Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
    dnsSuffixes List<String>
    DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
    gateway String
    Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
    gateway6 String
    Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
    ip String
    Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
    ip6 String
    Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
    netmask String
    Used only if subnet is not specified in networks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}")
    netmask6 String
    Used only if subnet is not specified in networks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}")
    network String
    Optional, the network to be used for mgmt
    poserPassword String
    Password used for PPPoE when type==pppoe
    pppoeAuth String
    Authentication protocol used for PPPoE when type==pppoe
    pppoeUsername String
    Username used for PPPoE when type==pppoe
    type String
    IPv4 assignment mode for this gateway port interface
    type6 String
    IPv6 assignment mode for this gateway port interface
    dns string[]
    Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
    dnsSuffixes string[]
    DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
    gateway string
    Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
    gateway6 string
    Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
    ip string
    Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
    ip6 string
    Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
    netmask string
    Used only if subnet is not specified in networks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}")
    netmask6 string
    Used only if subnet is not specified in networks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}")
    network string
    Optional, the network to be used for mgmt
    poserPassword string
    Password used for PPPoE when type==pppoe
    pppoeAuth string
    Authentication protocol used for PPPoE when type==pppoe
    pppoeUsername string
    Username used for PPPoE when type==pppoe
    type string
    IPv4 assignment mode for this gateway port interface
    type6 string
    IPv6 assignment mode for this gateway port interface
    dns Sequence[str]
    Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
    dns_suffixes Sequence[str]
    DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
    gateway str
    Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
    gateway6 str
    Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
    ip str
    Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
    ip6 str
    Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
    netmask str
    Used only if subnet is not specified in networks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}")
    netmask6 str
    Used only if subnet is not specified in networks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}")
    network str
    Optional, the network to be used for mgmt
    poser_password str
    Password used for PPPoE when type==pppoe
    pppoe_auth str
    Authentication protocol used for PPPoE when type==pppoe
    pppoe_username str
    Username used for PPPoE when type==pppoe
    type str
    IPv4 assignment mode for this gateway port interface
    type6 str
    IPv6 assignment mode for this gateway port interface
    dns List<String>
    Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
    dnsSuffixes List<String>
    DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
    gateway String
    Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
    gateway6 String
    Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
    ip String
    Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
    ip6 String
    Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
    netmask String
    Used only if subnet is not specified in networks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}")
    netmask6 String
    Used only if subnet is not specified in networks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}")
    network String
    Optional, the network to be used for mgmt
    poserPassword String
    Password used for PPPoE when type==pppoe
    pppoeAuth String
    Authentication protocol used for PPPoE when type==pppoe
    pppoeUsername String
    Username used for PPPoE when type==pppoe
    type String
    IPv4 assignment mode for this gateway port interface
    type6 String
    IPv6 assignment mode for this gateway port interface

    DeviceprofileGatewayPortConfigTrafficShaping, DeviceprofileGatewayPortConfigTrafficShapingArgs

    ClassPercentages List<int>
    Traffic class bandwidth percentages for high, medium, low, and best-effort queues
    Enabled bool
    Whether traffic shaping is enabled
    MaxTxKbps int
    Maximum transmit bandwidth for the interface, in Kbps
    ClassPercentages []int
    Traffic class bandwidth percentages for high, medium, low, and best-effort queues
    Enabled bool
    Whether traffic shaping is enabled
    MaxTxKbps int
    Maximum transmit bandwidth for the interface, in Kbps
    class_percentages list(number)
    Traffic class bandwidth percentages for high, medium, low, and best-effort queues
    enabled bool
    Whether traffic shaping is enabled
    max_tx_kbps number
    Maximum transmit bandwidth for the interface, in Kbps
    classPercentages List<Integer>
    Traffic class bandwidth percentages for high, medium, low, and best-effort queues
    enabled Boolean
    Whether traffic shaping is enabled
    maxTxKbps Integer
    Maximum transmit bandwidth for the interface, in Kbps
    classPercentages number[]
    Traffic class bandwidth percentages for high, medium, low, and best-effort queues
    enabled boolean
    Whether traffic shaping is enabled
    maxTxKbps number
    Maximum transmit bandwidth for the interface, in Kbps
    class_percentages Sequence[int]
    Traffic class bandwidth percentages for high, medium, low, and best-effort queues
    enabled bool
    Whether traffic shaping is enabled
    max_tx_kbps int
    Maximum transmit bandwidth for the interface, in Kbps
    classPercentages List<Number>
    Traffic class bandwidth percentages for high, medium, low, and best-effort queues
    enabled Boolean
    Whether traffic shaping is enabled
    maxTxKbps Number
    Maximum transmit bandwidth for the interface, in Kbps

    DeviceprofileGatewayPortConfigVpnPaths, DeviceprofileGatewayPortConfigVpnPathsArgs

    BfdProfile string
    BFD profile used for this VPN path when the VPN type==hubSpoke
    BfdUseTunnelMode bool
    Only if the VPN type==hubSpoke. Whether to use tunnel mode. SSR only
    Preference int
    Only if the VPN type==hubSpoke. For a given VPN, when path_selection.strategy==simple, the preference for a path (lower is preferred)
    Role string
    Gateway role for this VPN path; valid values depend on the VPN type
    TrafficShaping Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigVpnPathsTrafficShaping
    Traffic shaping settings applied to this VPN path
    BfdProfile string
    BFD profile used for this VPN path when the VPN type==hubSpoke
    BfdUseTunnelMode bool
    Only if the VPN type==hubSpoke. Whether to use tunnel mode. SSR only
    Preference int
    Only if the VPN type==hubSpoke. For a given VPN, when path_selection.strategy==simple, the preference for a path (lower is preferred)
    Role string
    Gateway role for this VPN path; valid values depend on the VPN type
    TrafficShaping DeviceprofileGatewayPortConfigVpnPathsTrafficShaping
    Traffic shaping settings applied to this VPN path
    bfd_profile string
    BFD profile used for this VPN path when the VPN type==hubSpoke
    bfd_use_tunnel_mode bool
    Only if the VPN type==hubSpoke. Whether to use tunnel mode. SSR only
    preference number
    Only if the VPN type==hubSpoke. For a given VPN, when path_selection.strategy==simple, the preference for a path (lower is preferred)
    role string
    Gateway role for this VPN path; valid values depend on the VPN type
    traffic_shaping object
    Traffic shaping settings applied to this VPN path
    bfdProfile String
    BFD profile used for this VPN path when the VPN type==hubSpoke
    bfdUseTunnelMode Boolean
    Only if the VPN type==hubSpoke. Whether to use tunnel mode. SSR only
    preference Integer
    Only if the VPN type==hubSpoke. For a given VPN, when path_selection.strategy==simple, the preference for a path (lower is preferred)
    role String
    Gateway role for this VPN path; valid values depend on the VPN type
    trafficShaping DeviceprofileGatewayPortConfigVpnPathsTrafficShaping
    Traffic shaping settings applied to this VPN path
    bfdProfile string
    BFD profile used for this VPN path when the VPN type==hubSpoke
    bfdUseTunnelMode boolean
    Only if the VPN type==hubSpoke. Whether to use tunnel mode. SSR only
    preference number
    Only if the VPN type==hubSpoke. For a given VPN, when path_selection.strategy==simple, the preference for a path (lower is preferred)
    role string
    Gateway role for this VPN path; valid values depend on the VPN type
    trafficShaping DeviceprofileGatewayPortConfigVpnPathsTrafficShaping
    Traffic shaping settings applied to this VPN path
    bfd_profile str
    BFD profile used for this VPN path when the VPN type==hubSpoke
    bfd_use_tunnel_mode bool
    Only if the VPN type==hubSpoke. Whether to use tunnel mode. SSR only
    preference int
    Only if the VPN type==hubSpoke. For a given VPN, when path_selection.strategy==simple, the preference for a path (lower is preferred)
    role str
    Gateway role for this VPN path; valid values depend on the VPN type
    traffic_shaping DeviceprofileGatewayPortConfigVpnPathsTrafficShaping
    Traffic shaping settings applied to this VPN path
    bfdProfile String
    BFD profile used for this VPN path when the VPN type==hubSpoke
    bfdUseTunnelMode Boolean
    Only if the VPN type==hubSpoke. Whether to use tunnel mode. SSR only
    preference Number
    Only if the VPN type==hubSpoke. For a given VPN, when path_selection.strategy==simple, the preference for a path (lower is preferred)
    role String
    Gateway role for this VPN path; valid values depend on the VPN type
    trafficShaping Property Map
    Traffic shaping settings applied to this VPN path

    DeviceprofileGatewayPortConfigVpnPathsTrafficShaping, DeviceprofileGatewayPortConfigVpnPathsTrafficShapingArgs

    ClassPercentages List<int>
    Traffic class bandwidth percentages for high, medium, low, and best-effort queues
    Enabled bool
    Whether traffic shaping is enabled
    MaxTxKbps int
    Maximum transmit bandwidth for the interface, in Kbps
    ClassPercentages []int
    Traffic class bandwidth percentages for high, medium, low, and best-effort queues
    Enabled bool
    Whether traffic shaping is enabled
    MaxTxKbps int
    Maximum transmit bandwidth for the interface, in Kbps
    class_percentages list(number)
    Traffic class bandwidth percentages for high, medium, low, and best-effort queues
    enabled bool
    Whether traffic shaping is enabled
    max_tx_kbps number
    Maximum transmit bandwidth for the interface, in Kbps
    classPercentages List<Integer>
    Traffic class bandwidth percentages for high, medium, low, and best-effort queues
    enabled Boolean
    Whether traffic shaping is enabled
    maxTxKbps Integer
    Maximum transmit bandwidth for the interface, in Kbps
    classPercentages number[]
    Traffic class bandwidth percentages for high, medium, low, and best-effort queues
    enabled boolean
    Whether traffic shaping is enabled
    maxTxKbps number
    Maximum transmit bandwidth for the interface, in Kbps
    class_percentages Sequence[int]
    Traffic class bandwidth percentages for high, medium, low, and best-effort queues
    enabled bool
    Whether traffic shaping is enabled
    max_tx_kbps int
    Maximum transmit bandwidth for the interface, in Kbps
    classPercentages List<Number>
    Traffic class bandwidth percentages for high, medium, low, and best-effort queues
    enabled Boolean
    Whether traffic shaping is enabled
    maxTxKbps Number
    Maximum transmit bandwidth for the interface, in Kbps

    DeviceprofileGatewayPortConfigWanExtraRoutes, DeviceprofileGatewayPortConfigWanExtraRoutesArgs

    Via string
    IPv4 next-hop address for this WAN extra route
    Via string
    IPv4 next-hop address for this WAN extra route
    via string
    IPv4 next-hop address for this WAN extra route
    via String
    IPv4 next-hop address for this WAN extra route
    via string
    IPv4 next-hop address for this WAN extra route
    via str
    IPv4 next-hop address for this WAN extra route
    via String
    IPv4 next-hop address for this WAN extra route

    DeviceprofileGatewayPortConfigWanExtraRoutes6, DeviceprofileGatewayPortConfigWanExtraRoutes6Args

    Via string
    IPv6 next-hop address for this WAN extra route
    Via string
    IPv6 next-hop address for this WAN extra route
    via string
    IPv6 next-hop address for this WAN extra route
    via String
    IPv6 next-hop address for this WAN extra route
    via string
    IPv6 next-hop address for this WAN extra route
    via str
    IPv6 next-hop address for this WAN extra route
    via String
    IPv6 next-hop address for this WAN extra route

    DeviceprofileGatewayPortConfigWanProbeOverride, DeviceprofileGatewayPortConfigWanProbeOverrideArgs

    Ip6s List<string>
    List of IPv6 probe host addresses used by this WAN override
    Ips List<string>
    List of IPv4 probe host addresses used by this WAN override
    ProbeProfile string
    WAN probe profile used for health checks on this port
    Ip6s []string
    List of IPv6 probe host addresses used by this WAN override
    Ips []string
    List of IPv4 probe host addresses used by this WAN override
    ProbeProfile string
    WAN probe profile used for health checks on this port
    ip6s list(string)
    List of IPv6 probe host addresses used by this WAN override
    ips list(string)
    List of IPv4 probe host addresses used by this WAN override
    probe_profile string
    WAN probe profile used for health checks on this port
    ip6s List<String>
    List of IPv6 probe host addresses used by this WAN override
    ips List<String>
    List of IPv4 probe host addresses used by this WAN override
    probeProfile String
    WAN probe profile used for health checks on this port
    ip6s string[]
    List of IPv6 probe host addresses used by this WAN override
    ips string[]
    List of IPv4 probe host addresses used by this WAN override
    probeProfile string
    WAN probe profile used for health checks on this port
    ip6s Sequence[str]
    List of IPv6 probe host addresses used by this WAN override
    ips Sequence[str]
    List of IPv4 probe host addresses used by this WAN override
    probe_profile str
    WAN probe profile used for health checks on this port
    ip6s List<String>
    List of IPv6 probe host addresses used by this WAN override
    ips List<String>
    List of IPv4 probe host addresses used by this WAN override
    probeProfile String
    WAN probe profile used for health checks on this port

    DeviceprofileGatewayPortConfigWanSourceNat, DeviceprofileGatewayPortConfigWanSourceNatArgs

    Disabled bool
    Or to disable the source-nat
    Nat6Pool string
    If alternative natPool is desired
    NatPool string
    If alternative natPool is desired
    Disabled bool
    Or to disable the source-nat
    Nat6Pool string
    If alternative natPool is desired
    NatPool string
    If alternative natPool is desired
    disabled bool
    Or to disable the source-nat
    nat6_pool string
    If alternative natPool is desired
    nat_pool string
    If alternative natPool is desired
    disabled Boolean
    Or to disable the source-nat
    nat6Pool String
    If alternative natPool is desired
    natPool String
    If alternative natPool is desired
    disabled boolean
    Or to disable the source-nat
    nat6Pool string
    If alternative natPool is desired
    natPool string
    If alternative natPool is desired
    disabled bool
    Or to disable the source-nat
    nat6_pool str
    If alternative natPool is desired
    nat_pool str
    If alternative natPool is desired
    disabled Boolean
    Or to disable the source-nat
    nat6Pool String
    If alternative natPool is desired
    natPool String
    If alternative natPool is desired

    DeviceprofileGatewayRoutingPolicies, DeviceprofileGatewayRoutingPoliciesArgs

    Terms List<Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayRoutingPoliciesTerm>
    Ordered terms evaluated by this gateway routing policy
    Terms []DeviceprofileGatewayRoutingPoliciesTerm
    Ordered terms evaluated by this gateway routing policy
    terms list(object)
    Ordered terms evaluated by this gateway routing policy
    terms List<DeviceprofileGatewayRoutingPoliciesTerm>
    Ordered terms evaluated by this gateway routing policy
    terms DeviceprofileGatewayRoutingPoliciesTerm[]
    Ordered terms evaluated by this gateway routing policy
    terms Sequence[DeviceprofileGatewayRoutingPoliciesTerm]
    Ordered terms evaluated by this gateway routing policy
    terms List<Property Map>
    Ordered terms evaluated by this gateway routing policy

    DeviceprofileGatewayRoutingPoliciesTerm, DeviceprofileGatewayRoutingPoliciesTermArgs

    Actions Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayRoutingPoliciesTermActions
    Policy actions applied when this routing policy term matches
    Matching Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayRoutingPoliciesTermMatching
    Route match criteria that must be satisfied before actions are applied
    Actions DeviceprofileGatewayRoutingPoliciesTermActions
    Policy actions applied when this routing policy term matches
    Matching DeviceprofileGatewayRoutingPoliciesTermMatching
    Route match criteria that must be satisfied before actions are applied
    actions object
    Policy actions applied when this routing policy term matches
    matching object
    Route match criteria that must be satisfied before actions are applied
    actions DeviceprofileGatewayRoutingPoliciesTermActions
    Policy actions applied when this routing policy term matches
    matching DeviceprofileGatewayRoutingPoliciesTermMatching
    Route match criteria that must be satisfied before actions are applied
    actions DeviceprofileGatewayRoutingPoliciesTermActions
    Policy actions applied when this routing policy term matches
    matching DeviceprofileGatewayRoutingPoliciesTermMatching
    Route match criteria that must be satisfied before actions are applied
    actions DeviceprofileGatewayRoutingPoliciesTermActions
    Policy actions applied when this routing policy term matches
    matching DeviceprofileGatewayRoutingPoliciesTermMatching
    Route match criteria that must be satisfied before actions are applied
    actions Property Map
    Policy actions applied when this routing policy term matches
    matching Property Map
    Route match criteria that must be satisfied before actions are applied

    DeviceprofileGatewayRoutingPoliciesTermActions, DeviceprofileGatewayRoutingPoliciesTermActionsArgs

    Accept bool
    Whether to accept routes that match this term
    AddCommunities List<string>
    BGP communities to add to routes that match this term
    AddTargetVrfs List<string>
    SSR target VRFs to add when leaking routes from hub to spoke
    Communities List<string>
    BGP communities to set when this term is used as an export policy
    ExcludeAsPaths List<string>
    AS path values to exclude when this term is used as an export policy
    ExcludeCommunities List<string>
    BGP communities to exclude from routes that match this term
    ExportCommunities List<string>
    BGP communities allowed for export when this term is used as an export policy
    LocalPreference string
    Preference value to set when this term is used as an import policy
    PrependAsPaths List<string>
    AS path values to prepend when this term is used as an export policy
    Accept bool
    Whether to accept routes that match this term
    AddCommunities []string
    BGP communities to add to routes that match this term
    AddTargetVrfs []string
    SSR target VRFs to add when leaking routes from hub to spoke
    Communities []string
    BGP communities to set when this term is used as an export policy
    ExcludeAsPaths []string
    AS path values to exclude when this term is used as an export policy
    ExcludeCommunities []string
    BGP communities to exclude from routes that match this term
    ExportCommunities []string
    BGP communities allowed for export when this term is used as an export policy
    LocalPreference string
    Preference value to set when this term is used as an import policy
    PrependAsPaths []string
    AS path values to prepend when this term is used as an export policy
    accept bool
    Whether to accept routes that match this term
    add_communities list(string)
    BGP communities to add to routes that match this term
    add_target_vrfs list(string)
    SSR target VRFs to add when leaking routes from hub to spoke
    communities list(string)
    BGP communities to set when this term is used as an export policy
    exclude_as_paths list(string)
    AS path values to exclude when this term is used as an export policy
    exclude_communities list(string)
    BGP communities to exclude from routes that match this term
    export_communities list(string)
    BGP communities allowed for export when this term is used as an export policy
    local_preference string
    Preference value to set when this term is used as an import policy
    prepend_as_paths list(string)
    AS path values to prepend when this term is used as an export policy
    accept Boolean
    Whether to accept routes that match this term
    addCommunities List<String>
    BGP communities to add to routes that match this term
    addTargetVrfs List<String>
    SSR target VRFs to add when leaking routes from hub to spoke
    communities List<String>
    BGP communities to set when this term is used as an export policy
    excludeAsPaths List<String>
    AS path values to exclude when this term is used as an export policy
    excludeCommunities List<String>
    BGP communities to exclude from routes that match this term
    exportCommunities List<String>
    BGP communities allowed for export when this term is used as an export policy
    localPreference String
    Preference value to set when this term is used as an import policy
    prependAsPaths List<String>
    AS path values to prepend when this term is used as an export policy
    accept boolean
    Whether to accept routes that match this term
    addCommunities string[]
    BGP communities to add to routes that match this term
    addTargetVrfs string[]
    SSR target VRFs to add when leaking routes from hub to spoke
    communities string[]
    BGP communities to set when this term is used as an export policy
    excludeAsPaths string[]
    AS path values to exclude when this term is used as an export policy
    excludeCommunities string[]
    BGP communities to exclude from routes that match this term
    exportCommunities string[]
    BGP communities allowed for export when this term is used as an export policy
    localPreference string
    Preference value to set when this term is used as an import policy
    prependAsPaths string[]
    AS path values to prepend when this term is used as an export policy
    accept bool
    Whether to accept routes that match this term
    add_communities Sequence[str]
    BGP communities to add to routes that match this term
    add_target_vrfs Sequence[str]
    SSR target VRFs to add when leaking routes from hub to spoke
    communities Sequence[str]
    BGP communities to set when this term is used as an export policy
    exclude_as_paths Sequence[str]
    AS path values to exclude when this term is used as an export policy
    exclude_communities Sequence[str]
    BGP communities to exclude from routes that match this term
    export_communities Sequence[str]
    BGP communities allowed for export when this term is used as an export policy
    local_preference str
    Preference value to set when this term is used as an import policy
    prepend_as_paths Sequence[str]
    AS path values to prepend when this term is used as an export policy
    accept Boolean
    Whether to accept routes that match this term
    addCommunities List<String>
    BGP communities to add to routes that match this term
    addTargetVrfs List<String>
    SSR target VRFs to add when leaking routes from hub to spoke
    communities List<String>
    BGP communities to set when this term is used as an export policy
    excludeAsPaths List<String>
    AS path values to exclude when this term is used as an export policy
    excludeCommunities List<String>
    BGP communities to exclude from routes that match this term
    exportCommunities List<String>
    BGP communities allowed for export when this term is used as an export policy
    localPreference String
    Preference value to set when this term is used as an import policy
    prependAsPaths List<String>
    AS path values to prepend when this term is used as an export policy

    DeviceprofileGatewayRoutingPoliciesTermMatching, DeviceprofileGatewayRoutingPoliciesTermMatchingArgs

    AsPaths List<string>
    BGP AS, value in range 1-4294967294. Can be a Variable (e.g. {{bgp_as}})
    Communities List<string>
    BGP communities that routes must match
    Networks List<string>
    Configured network names that routes must match
    Prefixes List<string>
    Route prefixes that routes must match
    Protocols List<string>
    enum: aggregate, bgp, direct, ospf, static (SRX Only)
    RouteExists Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayRoutingPoliciesTermMatchingRouteExists
    Existing route condition that must be satisfied before this term matches
    VpnNeighborMacs List<string>
    Overlay neighbor MAC addresses used as match criteria for BGP sessions with via==vpn
    VpnPathSla Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayRoutingPoliciesTermMatchingVpnPathSla
    SLA thresholds used when matching a VPN path
    VpnPaths List<string>
    Overlay path names used as match criteria for BGP sessions with via==vpn
    AsPaths []string
    BGP AS, value in range 1-4294967294. Can be a Variable (e.g. {{bgp_as}})
    Communities []string
    BGP communities that routes must match
    Networks []string
    Configured network names that routes must match
    Prefixes []string
    Route prefixes that routes must match
    Protocols []string
    enum: aggregate, bgp, direct, ospf, static (SRX Only)
    RouteExists DeviceprofileGatewayRoutingPoliciesTermMatchingRouteExists
    Existing route condition that must be satisfied before this term matches
    VpnNeighborMacs []string
    Overlay neighbor MAC addresses used as match criteria for BGP sessions with via==vpn
    VpnPathSla DeviceprofileGatewayRoutingPoliciesTermMatchingVpnPathSla
    SLA thresholds used when matching a VPN path
    VpnPaths []string
    Overlay path names used as match criteria for BGP sessions with via==vpn
    as_paths list(string)
    BGP AS, value in range 1-4294967294. Can be a Variable (e.g. {{bgp_as}})
    communities list(string)
    BGP communities that routes must match
    networks list(string)
    Configured network names that routes must match
    prefixes list(string)
    Route prefixes that routes must match
    protocols list(string)
    enum: aggregate, bgp, direct, ospf, static (SRX Only)
    route_exists object
    Existing route condition that must be satisfied before this term matches
    vpn_neighbor_macs list(string)
    Overlay neighbor MAC addresses used as match criteria for BGP sessions with via==vpn
    vpn_path_sla object
    SLA thresholds used when matching a VPN path
    vpn_paths list(string)
    Overlay path names used as match criteria for BGP sessions with via==vpn
    asPaths List<String>
    BGP AS, value in range 1-4294967294. Can be a Variable (e.g. {{bgp_as}})
    communities List<String>
    BGP communities that routes must match
    networks List<String>
    Configured network names that routes must match
    prefixes List<String>
    Route prefixes that routes must match
    protocols List<String>
    enum: aggregate, bgp, direct, ospf, static (SRX Only)
    routeExists DeviceprofileGatewayRoutingPoliciesTermMatchingRouteExists
    Existing route condition that must be satisfied before this term matches
    vpnNeighborMacs List<String>
    Overlay neighbor MAC addresses used as match criteria for BGP sessions with via==vpn
    vpnPathSla DeviceprofileGatewayRoutingPoliciesTermMatchingVpnPathSla
    SLA thresholds used when matching a VPN path
    vpnPaths List<String>
    Overlay path names used as match criteria for BGP sessions with via==vpn
    asPaths string[]
    BGP AS, value in range 1-4294967294. Can be a Variable (e.g. {{bgp_as}})
    communities string[]
    BGP communities that routes must match
    networks string[]
    Configured network names that routes must match
    prefixes string[]
    Route prefixes that routes must match
    protocols string[]
    enum: aggregate, bgp, direct, ospf, static (SRX Only)
    routeExists DeviceprofileGatewayRoutingPoliciesTermMatchingRouteExists
    Existing route condition that must be satisfied before this term matches
    vpnNeighborMacs string[]
    Overlay neighbor MAC addresses used as match criteria for BGP sessions with via==vpn
    vpnPathSla DeviceprofileGatewayRoutingPoliciesTermMatchingVpnPathSla
    SLA thresholds used when matching a VPN path
    vpnPaths string[]
    Overlay path names used as match criteria for BGP sessions with via==vpn
    as_paths Sequence[str]
    BGP AS, value in range 1-4294967294. Can be a Variable (e.g. {{bgp_as}})
    communities Sequence[str]
    BGP communities that routes must match
    networks Sequence[str]
    Configured network names that routes must match
    prefixes Sequence[str]
    Route prefixes that routes must match
    protocols Sequence[str]
    enum: aggregate, bgp, direct, ospf, static (SRX Only)
    route_exists DeviceprofileGatewayRoutingPoliciesTermMatchingRouteExists
    Existing route condition that must be satisfied before this term matches
    vpn_neighbor_macs Sequence[str]
    Overlay neighbor MAC addresses used as match criteria for BGP sessions with via==vpn
    vpn_path_sla DeviceprofileGatewayRoutingPoliciesTermMatchingVpnPathSla
    SLA thresholds used when matching a VPN path
    vpn_paths Sequence[str]
    Overlay path names used as match criteria for BGP sessions with via==vpn
    asPaths List<String>
    BGP AS, value in range 1-4294967294. Can be a Variable (e.g. {{bgp_as}})
    communities List<String>
    BGP communities that routes must match
    networks List<String>
    Configured network names that routes must match
    prefixes List<String>
    Route prefixes that routes must match
    protocols List<String>
    enum: aggregate, bgp, direct, ospf, static (SRX Only)
    routeExists Property Map
    Existing route condition that must be satisfied before this term matches
    vpnNeighborMacs List<String>
    Overlay neighbor MAC addresses used as match criteria for BGP sessions with via==vpn
    vpnPathSla Property Map
    SLA thresholds used when matching a VPN path
    vpnPaths List<String>
    Overlay path names used as match criteria for BGP sessions with via==vpn

    DeviceprofileGatewayRoutingPoliciesTermMatchingRouteExists, DeviceprofileGatewayRoutingPoliciesTermMatchingRouteExistsArgs

    Route string
    Prefix that must exist for this condition to match
    VrfName string
    Name of the VRF instance where the route is checked; can also be a VPN or WAN name when applicable
    Route string
    Prefix that must exist for this condition to match
    VrfName string
    Name of the VRF instance where the route is checked; can also be a VPN or WAN name when applicable
    route string
    Prefix that must exist for this condition to match
    vrf_name string
    Name of the VRF instance where the route is checked; can also be a VPN or WAN name when applicable
    route String
    Prefix that must exist for this condition to match
    vrfName String
    Name of the VRF instance where the route is checked; can also be a VPN or WAN name when applicable
    route string
    Prefix that must exist for this condition to match
    vrfName string
    Name of the VRF instance where the route is checked; can also be a VPN or WAN name when applicable
    route str
    Prefix that must exist for this condition to match
    vrf_name str
    Name of the VRF instance where the route is checked; can also be a VPN or WAN name when applicable
    route String
    Prefix that must exist for this condition to match
    vrfName String
    Name of the VRF instance where the route is checked; can also be a VPN or WAN name when applicable

    DeviceprofileGatewayRoutingPoliciesTermMatchingVpnPathSla, DeviceprofileGatewayRoutingPoliciesTermMatchingVpnPathSlaArgs

    MaxJitter int
    Maximum jitter threshold allowed for the VPN path
    MaxLatency int
    Maximum latency threshold allowed for the VPN path
    MaxLoss int
    Maximum packet-loss threshold allowed for the VPN path
    MaxJitter int
    Maximum jitter threshold allowed for the VPN path
    MaxLatency int
    Maximum latency threshold allowed for the VPN path
    MaxLoss int
    Maximum packet-loss threshold allowed for the VPN path
    max_jitter number
    Maximum jitter threshold allowed for the VPN path
    max_latency number
    Maximum latency threshold allowed for the VPN path
    max_loss number
    Maximum packet-loss threshold allowed for the VPN path
    maxJitter Integer
    Maximum jitter threshold allowed for the VPN path
    maxLatency Integer
    Maximum latency threshold allowed for the VPN path
    maxLoss Integer
    Maximum packet-loss threshold allowed for the VPN path
    maxJitter number
    Maximum jitter threshold allowed for the VPN path
    maxLatency number
    Maximum latency threshold allowed for the VPN path
    maxLoss number
    Maximum packet-loss threshold allowed for the VPN path
    max_jitter int
    Maximum jitter threshold allowed for the VPN path
    max_latency int
    Maximum latency threshold allowed for the VPN path
    max_loss int
    Maximum packet-loss threshold allowed for the VPN path
    maxJitter Number
    Maximum jitter threshold allowed for the VPN path
    maxLatency Number
    Maximum latency threshold allowed for the VPN path
    maxLoss Number
    Maximum packet-loss threshold allowed for the VPN path

    DeviceprofileGatewayServicePolicy, DeviceprofileGatewayServicePolicyArgs

    Action string
    Required when servicepolicyId is not defined, optional otherwise (override the servicepolicy action). enum: allow, deny
    Antivirus Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayServicePolicyAntivirus
    Malware and virus inspection settings applied by this service policy
    Appqoe Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayServicePolicyAppqoe
    Application QoE settings applied by this service policy
    Ewfs List<Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayServicePolicyEwf>
    Enhanced web filtering rules applied by this service policy
    Idp Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayServicePolicyIdp
    Intrusion detection and prevention settings applied by this service policy
    LocalRouting bool
    Whether the policy permits access within the same VRF
    Name string
    Required when servicepolicyId is not defined, optional otherwise (override the servicepolicy name)
    PathPreference string
    By default, we derive all paths available and use them. Optionally, you can customize by using pathPreference
    ServicepolicyId string
    Organization-level service policy identifier used to link and override selected attributes
    Services List<string>
    Required when servicepolicyId is not defined. List of Applications / Destinations
    Skyatp Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayServicePolicySkyatp
    Threat inspection settings provided by Sky ATP for this service policy
    SslProxy Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayServicePolicySslProxy
    TLS inspection settings applied by this service policy
    Syslog Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayServicePolicySyslog
    Remote logging settings applied by this service policy
    Tenants List<string>
    Required when servicepolicyId is not defined. List of Networks / Users
    Action string
    Required when servicepolicyId is not defined, optional otherwise (override the servicepolicy action). enum: allow, deny
    Antivirus DeviceprofileGatewayServicePolicyAntivirus
    Malware and virus inspection settings applied by this service policy
    Appqoe DeviceprofileGatewayServicePolicyAppqoe
    Application QoE settings applied by this service policy
    Ewfs []DeviceprofileGatewayServicePolicyEwf
    Enhanced web filtering rules applied by this service policy
    Idp DeviceprofileGatewayServicePolicyIdp
    Intrusion detection and prevention settings applied by this service policy
    LocalRouting bool
    Whether the policy permits access within the same VRF
    Name string
    Required when servicepolicyId is not defined, optional otherwise (override the servicepolicy name)
    PathPreference string
    By default, we derive all paths available and use them. Optionally, you can customize by using pathPreference
    ServicepolicyId string
    Organization-level service policy identifier used to link and override selected attributes
    Services []string
    Required when servicepolicyId is not defined. List of Applications / Destinations
    Skyatp DeviceprofileGatewayServicePolicySkyatp
    Threat inspection settings provided by Sky ATP for this service policy
    SslProxy DeviceprofileGatewayServicePolicySslProxy
    TLS inspection settings applied by this service policy
    Syslog DeviceprofileGatewayServicePolicySyslog
    Remote logging settings applied by this service policy
    Tenants []string
    Required when servicepolicyId is not defined. List of Networks / Users
    action string
    Required when servicepolicyId is not defined, optional otherwise (override the servicepolicy action). enum: allow, deny
    antivirus object
    Malware and virus inspection settings applied by this service policy
    appqoe object
    Application QoE settings applied by this service policy
    ewfs list(object)
    Enhanced web filtering rules applied by this service policy
    idp object
    Intrusion detection and prevention settings applied by this service policy
    local_routing bool
    Whether the policy permits access within the same VRF
    name string
    Required when servicepolicyId is not defined, optional otherwise (override the servicepolicy name)
    path_preference string
    By default, we derive all paths available and use them. Optionally, you can customize by using pathPreference
    servicepolicy_id string
    Organization-level service policy identifier used to link and override selected attributes
    services list(string)
    Required when servicepolicyId is not defined. List of Applications / Destinations
    skyatp object
    Threat inspection settings provided by Sky ATP for this service policy
    ssl_proxy object
    TLS inspection settings applied by this service policy
    syslog object
    Remote logging settings applied by this service policy
    tenants list(string)
    Required when servicepolicyId is not defined. List of Networks / Users
    action String
    Required when servicepolicyId is not defined, optional otherwise (override the servicepolicy action). enum: allow, deny
    antivirus DeviceprofileGatewayServicePolicyAntivirus
    Malware and virus inspection settings applied by this service policy
    appqoe DeviceprofileGatewayServicePolicyAppqoe
    Application QoE settings applied by this service policy
    ewfs List<DeviceprofileGatewayServicePolicyEwf>
    Enhanced web filtering rules applied by this service policy
    idp DeviceprofileGatewayServicePolicyIdp
    Intrusion detection and prevention settings applied by this service policy
    localRouting Boolean
    Whether the policy permits access within the same VRF
    name String
    Required when servicepolicyId is not defined, optional otherwise (override the servicepolicy name)
    pathPreference String
    By default, we derive all paths available and use them. Optionally, you can customize by using pathPreference
    servicepolicyId String
    Organization-level service policy identifier used to link and override selected attributes
    services List<String>
    Required when servicepolicyId is not defined. List of Applications / Destinations
    skyatp DeviceprofileGatewayServicePolicySkyatp
    Threat inspection settings provided by Sky ATP for this service policy
    sslProxy DeviceprofileGatewayServicePolicySslProxy
    TLS inspection settings applied by this service policy
    syslog DeviceprofileGatewayServicePolicySyslog
    Remote logging settings applied by this service policy
    tenants List<String>
    Required when servicepolicyId is not defined. List of Networks / Users
    action string
    Required when servicepolicyId is not defined, optional otherwise (override the servicepolicy action). enum: allow, deny
    antivirus DeviceprofileGatewayServicePolicyAntivirus
    Malware and virus inspection settings applied by this service policy
    appqoe DeviceprofileGatewayServicePolicyAppqoe
    Application QoE settings applied by this service policy
    ewfs DeviceprofileGatewayServicePolicyEwf[]
    Enhanced web filtering rules applied by this service policy
    idp DeviceprofileGatewayServicePolicyIdp
    Intrusion detection and prevention settings applied by this service policy
    localRouting boolean
    Whether the policy permits access within the same VRF
    name string
    Required when servicepolicyId is not defined, optional otherwise (override the servicepolicy name)
    pathPreference string
    By default, we derive all paths available and use them. Optionally, you can customize by using pathPreference
    servicepolicyId string
    Organization-level service policy identifier used to link and override selected attributes
    services string[]
    Required when servicepolicyId is not defined. List of Applications / Destinations
    skyatp DeviceprofileGatewayServicePolicySkyatp
    Threat inspection settings provided by Sky ATP for this service policy
    sslProxy DeviceprofileGatewayServicePolicySslProxy
    TLS inspection settings applied by this service policy
    syslog DeviceprofileGatewayServicePolicySyslog
    Remote logging settings applied by this service policy
    tenants string[]
    Required when servicepolicyId is not defined. List of Networks / Users
    action str
    Required when servicepolicyId is not defined, optional otherwise (override the servicepolicy action). enum: allow, deny
    antivirus DeviceprofileGatewayServicePolicyAntivirus
    Malware and virus inspection settings applied by this service policy
    appqoe DeviceprofileGatewayServicePolicyAppqoe
    Application QoE settings applied by this service policy
    ewfs Sequence[DeviceprofileGatewayServicePolicyEwf]
    Enhanced web filtering rules applied by this service policy
    idp DeviceprofileGatewayServicePolicyIdp
    Intrusion detection and prevention settings applied by this service policy
    local_routing bool
    Whether the policy permits access within the same VRF
    name str
    Required when servicepolicyId is not defined, optional otherwise (override the servicepolicy name)
    path_preference str
    By default, we derive all paths available and use them. Optionally, you can customize by using pathPreference
    servicepolicy_id str
    Organization-level service policy identifier used to link and override selected attributes
    services Sequence[str]
    Required when servicepolicyId is not defined. List of Applications / Destinations
    skyatp DeviceprofileGatewayServicePolicySkyatp
    Threat inspection settings provided by Sky ATP for this service policy
    ssl_proxy DeviceprofileGatewayServicePolicySslProxy
    TLS inspection settings applied by this service policy
    syslog DeviceprofileGatewayServicePolicySyslog
    Remote logging settings applied by this service policy
    tenants Sequence[str]
    Required when servicepolicyId is not defined. List of Networks / Users
    action String
    Required when servicepolicyId is not defined, optional otherwise (override the servicepolicy action). enum: allow, deny
    antivirus Property Map
    Malware and virus inspection settings applied by this service policy
    appqoe Property Map
    Application QoE settings applied by this service policy
    ewfs List<Property Map>
    Enhanced web filtering rules applied by this service policy
    idp Property Map
    Intrusion detection and prevention settings applied by this service policy
    localRouting Boolean
    Whether the policy permits access within the same VRF
    name String
    Required when servicepolicyId is not defined, optional otherwise (override the servicepolicy name)
    pathPreference String
    By default, we derive all paths available and use them. Optionally, you can customize by using pathPreference
    servicepolicyId String
    Organization-level service policy identifier used to link and override selected attributes
    services List<String>
    Required when servicepolicyId is not defined. List of Applications / Destinations
    skyatp Property Map
    Threat inspection settings provided by Sky ATP for this service policy
    sslProxy Property Map
    TLS inspection settings applied by this service policy
    syslog Property Map
    Remote logging settings applied by this service policy
    tenants List<String>
    Required when servicepolicyId is not defined. List of Networks / Users

    DeviceprofileGatewayServicePolicyAntivirus, DeviceprofileGatewayServicePolicyAntivirusArgs

    AvprofileId string
    Organization-level antivirus profile ID; takes precedence over inline profile settings
    Enabled bool
    Whether antivirus inspection is enabled for the service policy
    Profile string
    Antivirus profile name to apply, such as default, noftp, httponly, or an AV profile key
    AvprofileId string
    Organization-level antivirus profile ID; takes precedence over inline profile settings
    Enabled bool
    Whether antivirus inspection is enabled for the service policy
    Profile string
    Antivirus profile name to apply, such as default, noftp, httponly, or an AV profile key
    avprofile_id string
    Organization-level antivirus profile ID; takes precedence over inline profile settings
    enabled bool
    Whether antivirus inspection is enabled for the service policy
    profile string
    Antivirus profile name to apply, such as default, noftp, httponly, or an AV profile key
    avprofileId String
    Organization-level antivirus profile ID; takes precedence over inline profile settings
    enabled Boolean
    Whether antivirus inspection is enabled for the service policy
    profile String
    Antivirus profile name to apply, such as default, noftp, httponly, or an AV profile key
    avprofileId string
    Organization-level antivirus profile ID; takes precedence over inline profile settings
    enabled boolean
    Whether antivirus inspection is enabled for the service policy
    profile string
    Antivirus profile name to apply, such as default, noftp, httponly, or an AV profile key
    avprofile_id str
    Organization-level antivirus profile ID; takes precedence over inline profile settings
    enabled bool
    Whether antivirus inspection is enabled for the service policy
    profile str
    Antivirus profile name to apply, such as default, noftp, httponly, or an AV profile key
    avprofileId String
    Organization-level antivirus profile ID; takes precedence over inline profile settings
    enabled Boolean
    Whether antivirus inspection is enabled for the service policy
    profile String
    Antivirus profile name to apply, such as default, noftp, httponly, or an AV profile key

    DeviceprofileGatewayServicePolicyAppqoe, DeviceprofileGatewayServicePolicyAppqoeArgs

    Enabled bool
    Whether application QoE is enabled for the service policy
    Enabled bool
    Whether application QoE is enabled for the service policy
    enabled bool
    Whether application QoE is enabled for the service policy
    enabled Boolean
    Whether application QoE is enabled for the service policy
    enabled boolean
    Whether application QoE is enabled for the service policy
    enabled bool
    Whether application QoE is enabled for the service policy
    enabled Boolean
    Whether application QoE is enabled for the service policy

    DeviceprofileGatewayServicePolicyEwf, DeviceprofileGatewayServicePolicyEwfArgs

    AlertOnly bool
    Whether matching enhanced web filtering traffic is logged without being blocked
    BlockMessage string
    Message returned when enhanced web filtering blocks a request
    Enabled bool
    Whether this enhanced web filtering rule is enabled
    Profile string
    Enhanced web filtering profile applied by this rule
    AlertOnly bool
    Whether matching enhanced web filtering traffic is logged without being blocked
    BlockMessage string
    Message returned when enhanced web filtering blocks a request
    Enabled bool
    Whether this enhanced web filtering rule is enabled
    Profile string
    Enhanced web filtering profile applied by this rule
    alert_only bool
    Whether matching enhanced web filtering traffic is logged without being blocked
    block_message string
    Message returned when enhanced web filtering blocks a request
    enabled bool
    Whether this enhanced web filtering rule is enabled
    profile string
    Enhanced web filtering profile applied by this rule
    alertOnly Boolean
    Whether matching enhanced web filtering traffic is logged without being blocked
    blockMessage String
    Message returned when enhanced web filtering blocks a request
    enabled Boolean
    Whether this enhanced web filtering rule is enabled
    profile String
    Enhanced web filtering profile applied by this rule
    alertOnly boolean
    Whether matching enhanced web filtering traffic is logged without being blocked
    blockMessage string
    Message returned when enhanced web filtering blocks a request
    enabled boolean
    Whether this enhanced web filtering rule is enabled
    profile string
    Enhanced web filtering profile applied by this rule
    alert_only bool
    Whether matching enhanced web filtering traffic is logged without being blocked
    block_message str
    Message returned when enhanced web filtering blocks a request
    enabled bool
    Whether this enhanced web filtering rule is enabled
    profile str
    Enhanced web filtering profile applied by this rule
    alertOnly Boolean
    Whether matching enhanced web filtering traffic is logged without being blocked
    blockMessage String
    Message returned when enhanced web filtering blocks a request
    enabled Boolean
    Whether this enhanced web filtering rule is enabled
    profile String
    Enhanced web filtering profile applied by this rule

    DeviceprofileGatewayServicePolicyIdp, DeviceprofileGatewayServicePolicyIdpArgs

    AlertOnly bool
    Whether to alert without enforcing IDP prevention actions
    Enabled bool
    Whether IDP inspection is enabled for the policy
    IdpprofileId string
    org_level IDP Profile can be used, this takes precedence over profile
    Profile string
    enum: Custom, strict (default), standard or keys from idp_profiles
    AlertOnly bool
    Whether to alert without enforcing IDP prevention actions
    Enabled bool
    Whether IDP inspection is enabled for the policy
    IdpprofileId string
    org_level IDP Profile can be used, this takes precedence over profile
    Profile string
    enum: Custom, strict (default), standard or keys from idp_profiles
    alert_only bool
    Whether to alert without enforcing IDP prevention actions
    enabled bool
    Whether IDP inspection is enabled for the policy
    idpprofile_id string
    org_level IDP Profile can be used, this takes precedence over profile
    profile string
    enum: Custom, strict (default), standard or keys from idp_profiles
    alertOnly Boolean
    Whether to alert without enforcing IDP prevention actions
    enabled Boolean
    Whether IDP inspection is enabled for the policy
    idpprofileId String
    org_level IDP Profile can be used, this takes precedence over profile
    profile String
    enum: Custom, strict (default), standard or keys from idp_profiles
    alertOnly boolean
    Whether to alert without enforcing IDP prevention actions
    enabled boolean
    Whether IDP inspection is enabled for the policy
    idpprofileId string
    org_level IDP Profile can be used, this takes precedence over profile
    profile string
    enum: Custom, strict (default), standard or keys from idp_profiles
    alert_only bool
    Whether to alert without enforcing IDP prevention actions
    enabled bool
    Whether IDP inspection is enabled for the policy
    idpprofile_id str
    org_level IDP Profile can be used, this takes precedence over profile
    profile str
    enum: Custom, strict (default), standard or keys from idp_profiles
    alertOnly Boolean
    Whether to alert without enforcing IDP prevention actions
    enabled Boolean
    Whether IDP inspection is enabled for the policy
    idpprofileId String
    org_level IDP Profile can be used, this takes precedence over profile
    profile String
    enum: Custom, strict (default), standard or keys from idp_profiles

    DeviceprofileGatewayServicePolicySkyatp, DeviceprofileGatewayServicePolicySkyatpArgs

    DnsDgaDetection DeviceprofileGatewayServicePolicySkyatpDnsDgaDetection
    Detection settings for DNS DGA threats provided by Sky ATP
    DnsTunnelDetection DeviceprofileGatewayServicePolicySkyatpDnsTunnelDetection
    Detection settings for DNS tunneling threats provided by Sky ATP
    HttpInspection DeviceprofileGatewayServicePolicySkyatpHttpInspection
    Web traffic inspection settings provided by Sky ATP
    IotDevicePolicy DeviceprofileGatewayServicePolicySkyatpIotDevicePolicy
    Device threat policy settings provided by Sky ATP for IoT clients
    dns_dga_detection object
    Detection settings for DNS DGA threats provided by Sky ATP
    dns_tunnel_detection object
    Detection settings for DNS tunneling threats provided by Sky ATP
    http_inspection object
    Web traffic inspection settings provided by Sky ATP
    iot_device_policy object
    Device threat policy settings provided by Sky ATP for IoT clients
    dnsDgaDetection DeviceprofileGatewayServicePolicySkyatpDnsDgaDetection
    Detection settings for DNS DGA threats provided by Sky ATP
    dnsTunnelDetection DeviceprofileGatewayServicePolicySkyatpDnsTunnelDetection
    Detection settings for DNS tunneling threats provided by Sky ATP
    httpInspection DeviceprofileGatewayServicePolicySkyatpHttpInspection
    Web traffic inspection settings provided by Sky ATP
    iotDevicePolicy DeviceprofileGatewayServicePolicySkyatpIotDevicePolicy
    Device threat policy settings provided by Sky ATP for IoT clients
    dnsDgaDetection DeviceprofileGatewayServicePolicySkyatpDnsDgaDetection
    Detection settings for DNS DGA threats provided by Sky ATP
    dnsTunnelDetection DeviceprofileGatewayServicePolicySkyatpDnsTunnelDetection
    Detection settings for DNS tunneling threats provided by Sky ATP
    httpInspection DeviceprofileGatewayServicePolicySkyatpHttpInspection
    Web traffic inspection settings provided by Sky ATP
    iotDevicePolicy DeviceprofileGatewayServicePolicySkyatpIotDevicePolicy
    Device threat policy settings provided by Sky ATP for IoT clients
    dns_dga_detection DeviceprofileGatewayServicePolicySkyatpDnsDgaDetection
    Detection settings for DNS DGA threats provided by Sky ATP
    dns_tunnel_detection DeviceprofileGatewayServicePolicySkyatpDnsTunnelDetection
    Detection settings for DNS tunneling threats provided by Sky ATP
    http_inspection DeviceprofileGatewayServicePolicySkyatpHttpInspection
    Web traffic inspection settings provided by Sky ATP
    iot_device_policy DeviceprofileGatewayServicePolicySkyatpIotDevicePolicy
    Device threat policy settings provided by Sky ATP for IoT clients
    dnsDgaDetection Property Map
    Detection settings for DNS DGA threats provided by Sky ATP
    dnsTunnelDetection Property Map
    Detection settings for DNS tunneling threats provided by Sky ATP
    httpInspection Property Map
    Web traffic inspection settings provided by Sky ATP
    iotDevicePolicy Property Map
    Device threat policy settings provided by Sky ATP for IoT clients

    DeviceprofileGatewayServicePolicySkyatpDnsDgaDetection, DeviceprofileGatewayServicePolicySkyatpDnsDgaDetectionArgs

    Enabled bool
    Whether Sky ATP DNS DGA detection is enabled
    Profile string
    Sky ATP DNS DGA detection profile to apply
    Enabled bool
    Whether Sky ATP DNS DGA detection is enabled
    Profile string
    Sky ATP DNS DGA detection profile to apply
    enabled bool
    Whether Sky ATP DNS DGA detection is enabled
    profile string
    Sky ATP DNS DGA detection profile to apply
    enabled Boolean
    Whether Sky ATP DNS DGA detection is enabled
    profile String
    Sky ATP DNS DGA detection profile to apply
    enabled boolean
    Whether Sky ATP DNS DGA detection is enabled
    profile string
    Sky ATP DNS DGA detection profile to apply
    enabled bool
    Whether Sky ATP DNS DGA detection is enabled
    profile str
    Sky ATP DNS DGA detection profile to apply
    enabled Boolean
    Whether Sky ATP DNS DGA detection is enabled
    profile String
    Sky ATP DNS DGA detection profile to apply

    DeviceprofileGatewayServicePolicySkyatpDnsTunnelDetection, DeviceprofileGatewayServicePolicySkyatpDnsTunnelDetectionArgs

    Enabled bool
    Whether Sky ATP DNS tunneling detection is enabled
    Profile string
    Sky ATP DNS tunneling detection profile to apply
    Enabled bool
    Whether Sky ATP DNS tunneling detection is enabled
    Profile string
    Sky ATP DNS tunneling detection profile to apply
    enabled bool
    Whether Sky ATP DNS tunneling detection is enabled
    profile string
    Sky ATP DNS tunneling detection profile to apply
    enabled Boolean
    Whether Sky ATP DNS tunneling detection is enabled
    profile String
    Sky ATP DNS tunneling detection profile to apply
    enabled boolean
    Whether Sky ATP DNS tunneling detection is enabled
    profile string
    Sky ATP DNS tunneling detection profile to apply
    enabled bool
    Whether Sky ATP DNS tunneling detection is enabled
    profile str
    Sky ATP DNS tunneling detection profile to apply
    enabled Boolean
    Whether Sky ATP DNS tunneling detection is enabled
    profile String
    Sky ATP DNS tunneling detection profile to apply

    DeviceprofileGatewayServicePolicySkyatpHttpInspection, DeviceprofileGatewayServicePolicySkyatpHttpInspectionArgs

    Enabled bool
    Whether Sky ATP HTTP inspection is enabled
    Profile string
    Sky ATP HTTP inspection profile to apply
    Enabled bool
    Whether Sky ATP HTTP inspection is enabled
    Profile string
    Sky ATP HTTP inspection profile to apply
    enabled bool
    Whether Sky ATP HTTP inspection is enabled
    profile string
    Sky ATP HTTP inspection profile to apply
    enabled Boolean
    Whether Sky ATP HTTP inspection is enabled
    profile String
    Sky ATP HTTP inspection profile to apply
    enabled boolean
    Whether Sky ATP HTTP inspection is enabled
    profile string
    Sky ATP HTTP inspection profile to apply
    enabled bool
    Whether Sky ATP HTTP inspection is enabled
    profile str
    Sky ATP HTTP inspection profile to apply
    enabled Boolean
    Whether Sky ATP HTTP inspection is enabled
    profile String
    Sky ATP HTTP inspection profile to apply

    DeviceprofileGatewayServicePolicySkyatpIotDevicePolicy, DeviceprofileGatewayServicePolicySkyatpIotDevicePolicyArgs

    Enabled bool
    Whether Sky ATP IoT device policy inspection is enabled
    Enabled bool
    Whether Sky ATP IoT device policy inspection is enabled
    enabled bool
    Whether Sky ATP IoT device policy inspection is enabled
    enabled Boolean
    Whether Sky ATP IoT device policy inspection is enabled
    enabled boolean
    Whether Sky ATP IoT device policy inspection is enabled
    enabled bool
    Whether Sky ATP IoT device policy inspection is enabled
    enabled Boolean
    Whether Sky ATP IoT device policy inspection is enabled

    DeviceprofileGatewayServicePolicySslProxy, DeviceprofileGatewayServicePolicySslProxyArgs

    CiphersCategory string
    Allowed cipher strength category for SSL proxy inspection
    Enabled bool
    Whether SSL proxy inspection is enabled for the service policy
    CiphersCategory string
    Allowed cipher strength category for SSL proxy inspection
    Enabled bool
    Whether SSL proxy inspection is enabled for the service policy
    ciphers_category string
    Allowed cipher strength category for SSL proxy inspection
    enabled bool
    Whether SSL proxy inspection is enabled for the service policy
    ciphersCategory String
    Allowed cipher strength category for SSL proxy inspection
    enabled Boolean
    Whether SSL proxy inspection is enabled for the service policy
    ciphersCategory string
    Allowed cipher strength category for SSL proxy inspection
    enabled boolean
    Whether SSL proxy inspection is enabled for the service policy
    ciphers_category str
    Allowed cipher strength category for SSL proxy inspection
    enabled bool
    Whether SSL proxy inspection is enabled for the service policy
    ciphersCategory String
    Allowed cipher strength category for SSL proxy inspection
    enabled Boolean
    Whether SSL proxy inspection is enabled for the service policy

    DeviceprofileGatewayServicePolicySyslog, DeviceprofileGatewayServicePolicySyslogArgs

    Enabled bool
    Whether syslog logging is enabled for the service policy
    ServerNames List<string>
    Names of syslog servers that receive logs for this service policy
    Enabled bool
    Whether syslog logging is enabled for the service policy
    ServerNames []string
    Names of syslog servers that receive logs for this service policy
    enabled bool
    Whether syslog logging is enabled for the service policy
    server_names list(string)
    Names of syslog servers that receive logs for this service policy
    enabled Boolean
    Whether syslog logging is enabled for the service policy
    serverNames List<String>
    Names of syslog servers that receive logs for this service policy
    enabled boolean
    Whether syslog logging is enabled for the service policy
    serverNames string[]
    Names of syslog servers that receive logs for this service policy
    enabled bool
    Whether syslog logging is enabled for the service policy
    server_names Sequence[str]
    Names of syslog servers that receive logs for this service policy
    enabled Boolean
    Whether syslog logging is enabled for the service policy
    serverNames List<String>
    Names of syslog servers that receive logs for this service policy

    DeviceprofileGatewayTunnelConfigs, DeviceprofileGatewayTunnelConfigsArgs

    AutoProvision Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsAutoProvision
    Provider auto-provisioning settings for tunnel endpoints
    IkeLifetime int
    Only if provider==custom-ipsec. Must be between 180 and 86400
    IkeMode string
    Only if provider==custom-ipsec. IKE negotiation mode for the tunnel
    IkeProposals List<Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsIkeProposal>
    If provider==custom-ipsec, IKE proposals used for custom IPsec negotiation
    IpsecLifetime int
    Only if provider==custom-ipsec. Must be between 180 and 86400
    IpsecProposals List<Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsIpsecProposal>
    Only if provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation
    LocalId string
    Required if provider==zscaler-ipsec, provider==jse-ipsec or provider==custom-ipsec
    LocalSubnets List<string>
    Local protected subnets advertised by this tunnel
    Mode string
    Tunnel failover mode used for primary and secondary endpoints
    Networks List<string>
    Destination networks reachable through this tunnel
    Primary Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsPrimary
    Main remote tunnel endpoint settings
    Probe Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsProbe
    Tunnel health probe settings
    Protocol string
    Only if provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation
    Provider string
    Tunnel provider used when auto provisioning is disabled
    Psk string
    Required if provider==zscaler-ipsec, provider==jse-ipsec or provider==custom-ipsec
    RemoteSubnets List<string>
    Remote protected subnets reached through policy-based IPsec
    Secondary Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsSecondary
    Backup remote tunnel endpoint settings
    Version string
    Only if provider==custom-gre or provider==custom-ipsec. Tunnel version value for custom tunnel configuration
    AutoProvision DeviceprofileGatewayTunnelConfigsAutoProvision
    Provider auto-provisioning settings for tunnel endpoints
    IkeLifetime int
    Only if provider==custom-ipsec. Must be between 180 and 86400
    IkeMode string
    Only if provider==custom-ipsec. IKE negotiation mode for the tunnel
    IkeProposals []DeviceprofileGatewayTunnelConfigsIkeProposal
    If provider==custom-ipsec, IKE proposals used for custom IPsec negotiation
    IpsecLifetime int
    Only if provider==custom-ipsec. Must be between 180 and 86400
    IpsecProposals []DeviceprofileGatewayTunnelConfigsIpsecProposal
    Only if provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation
    LocalId string
    Required if provider==zscaler-ipsec, provider==jse-ipsec or provider==custom-ipsec
    LocalSubnets []string
    Local protected subnets advertised by this tunnel
    Mode string
    Tunnel failover mode used for primary and secondary endpoints
    Networks []string
    Destination networks reachable through this tunnel
    Primary DeviceprofileGatewayTunnelConfigsPrimary
    Main remote tunnel endpoint settings
    Probe DeviceprofileGatewayTunnelConfigsProbe
    Tunnel health probe settings
    Protocol string
    Only if provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation
    Provider string
    Tunnel provider used when auto provisioning is disabled
    Psk string
    Required if provider==zscaler-ipsec, provider==jse-ipsec or provider==custom-ipsec
    RemoteSubnets []string
    Remote protected subnets reached through policy-based IPsec
    Secondary DeviceprofileGatewayTunnelConfigsSecondary
    Backup remote tunnel endpoint settings
    Version string
    Only if provider==custom-gre or provider==custom-ipsec. Tunnel version value for custom tunnel configuration
    auto_provision object
    Provider auto-provisioning settings for tunnel endpoints
    ike_lifetime number
    Only if provider==custom-ipsec. Must be between 180 and 86400
    ike_mode string
    Only if provider==custom-ipsec. IKE negotiation mode for the tunnel
    ike_proposals list(object)
    If provider==custom-ipsec, IKE proposals used for custom IPsec negotiation
    ipsec_lifetime number
    Only if provider==custom-ipsec. Must be between 180 and 86400
    ipsec_proposals list(object)
    Only if provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation
    local_id string
    Required if provider==zscaler-ipsec, provider==jse-ipsec or provider==custom-ipsec
    local_subnets list(string)
    Local protected subnets advertised by this tunnel
    mode string
    Tunnel failover mode used for primary and secondary endpoints
    networks list(string)
    Destination networks reachable through this tunnel
    primary object
    Main remote tunnel endpoint settings
    probe object
    Tunnel health probe settings
    protocol string
    Only if provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation
    provider string
    Tunnel provider used when auto provisioning is disabled
    psk string
    Required if provider==zscaler-ipsec, provider==jse-ipsec or provider==custom-ipsec
    remote_subnets list(string)
    Remote protected subnets reached through policy-based IPsec
    secondary object
    Backup remote tunnel endpoint settings
    version string
    Only if provider==custom-gre or provider==custom-ipsec. Tunnel version value for custom tunnel configuration
    autoProvision DeviceprofileGatewayTunnelConfigsAutoProvision
    Provider auto-provisioning settings for tunnel endpoints
    ikeLifetime Integer
    Only if provider==custom-ipsec. Must be between 180 and 86400
    ikeMode String
    Only if provider==custom-ipsec. IKE negotiation mode for the tunnel
    ikeProposals List<DeviceprofileGatewayTunnelConfigsIkeProposal>
    If provider==custom-ipsec, IKE proposals used for custom IPsec negotiation
    ipsecLifetime Integer
    Only if provider==custom-ipsec. Must be between 180 and 86400
    ipsecProposals List<DeviceprofileGatewayTunnelConfigsIpsecProposal>
    Only if provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation
    localId String
    Required if provider==zscaler-ipsec, provider==jse-ipsec or provider==custom-ipsec
    localSubnets List<String>
    Local protected subnets advertised by this tunnel
    mode String
    Tunnel failover mode used for primary and secondary endpoints
    networks List<String>
    Destination networks reachable through this tunnel
    primary DeviceprofileGatewayTunnelConfigsPrimary
    Main remote tunnel endpoint settings
    probe DeviceprofileGatewayTunnelConfigsProbe
    Tunnel health probe settings
    protocol String
    Only if provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation
    provider String
    Tunnel provider used when auto provisioning is disabled
    psk String
    Required if provider==zscaler-ipsec, provider==jse-ipsec or provider==custom-ipsec
    remoteSubnets List<String>
    Remote protected subnets reached through policy-based IPsec
    secondary DeviceprofileGatewayTunnelConfigsSecondary
    Backup remote tunnel endpoint settings
    version String
    Only if provider==custom-gre or provider==custom-ipsec. Tunnel version value for custom tunnel configuration
    autoProvision DeviceprofileGatewayTunnelConfigsAutoProvision
    Provider auto-provisioning settings for tunnel endpoints
    ikeLifetime number
    Only if provider==custom-ipsec. Must be between 180 and 86400
    ikeMode string
    Only if provider==custom-ipsec. IKE negotiation mode for the tunnel
    ikeProposals DeviceprofileGatewayTunnelConfigsIkeProposal[]
    If provider==custom-ipsec, IKE proposals used for custom IPsec negotiation
    ipsecLifetime number
    Only if provider==custom-ipsec. Must be between 180 and 86400
    ipsecProposals DeviceprofileGatewayTunnelConfigsIpsecProposal[]
    Only if provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation
    localId string
    Required if provider==zscaler-ipsec, provider==jse-ipsec or provider==custom-ipsec
    localSubnets string[]
    Local protected subnets advertised by this tunnel
    mode string
    Tunnel failover mode used for primary and secondary endpoints
    networks string[]
    Destination networks reachable through this tunnel
    primary DeviceprofileGatewayTunnelConfigsPrimary
    Main remote tunnel endpoint settings
    probe DeviceprofileGatewayTunnelConfigsProbe
    Tunnel health probe settings
    protocol string
    Only if provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation
    provider string
    Tunnel provider used when auto provisioning is disabled
    psk string
    Required if provider==zscaler-ipsec, provider==jse-ipsec or provider==custom-ipsec
    remoteSubnets string[]
    Remote protected subnets reached through policy-based IPsec
    secondary DeviceprofileGatewayTunnelConfigsSecondary
    Backup remote tunnel endpoint settings
    version string
    Only if provider==custom-gre or provider==custom-ipsec. Tunnel version value for custom tunnel configuration
    auto_provision DeviceprofileGatewayTunnelConfigsAutoProvision
    Provider auto-provisioning settings for tunnel endpoints
    ike_lifetime int
    Only if provider==custom-ipsec. Must be between 180 and 86400
    ike_mode str
    Only if provider==custom-ipsec. IKE negotiation mode for the tunnel
    ike_proposals Sequence[DeviceprofileGatewayTunnelConfigsIkeProposal]
    If provider==custom-ipsec, IKE proposals used for custom IPsec negotiation
    ipsec_lifetime int
    Only if provider==custom-ipsec. Must be between 180 and 86400
    ipsec_proposals Sequence[DeviceprofileGatewayTunnelConfigsIpsecProposal]
    Only if provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation
    local_id str
    Required if provider==zscaler-ipsec, provider==jse-ipsec or provider==custom-ipsec
    local_subnets Sequence[str]
    Local protected subnets advertised by this tunnel
    mode str
    Tunnel failover mode used for primary and secondary endpoints
    networks Sequence[str]
    Destination networks reachable through this tunnel
    primary DeviceprofileGatewayTunnelConfigsPrimary
    Main remote tunnel endpoint settings
    probe DeviceprofileGatewayTunnelConfigsProbe
    Tunnel health probe settings
    protocol str
    Only if provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation
    provider str
    Tunnel provider used when auto provisioning is disabled
    psk str
    Required if provider==zscaler-ipsec, provider==jse-ipsec or provider==custom-ipsec
    remote_subnets Sequence[str]
    Remote protected subnets reached through policy-based IPsec
    secondary DeviceprofileGatewayTunnelConfigsSecondary
    Backup remote tunnel endpoint settings
    version str
    Only if provider==custom-gre or provider==custom-ipsec. Tunnel version value for custom tunnel configuration
    autoProvision Property Map
    Provider auto-provisioning settings for tunnel endpoints
    ikeLifetime Number
    Only if provider==custom-ipsec. Must be between 180 and 86400
    ikeMode String
    Only if provider==custom-ipsec. IKE negotiation mode for the tunnel
    ikeProposals List<Property Map>
    If provider==custom-ipsec, IKE proposals used for custom IPsec negotiation
    ipsecLifetime Number
    Only if provider==custom-ipsec. Must be between 180 and 86400
    ipsecProposals List<Property Map>
    Only if provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation
    localId String
    Required if provider==zscaler-ipsec, provider==jse-ipsec or provider==custom-ipsec
    localSubnets List<String>
    Local protected subnets advertised by this tunnel
    mode String
    Tunnel failover mode used for primary and secondary endpoints
    networks List<String>
    Destination networks reachable through this tunnel
    primary Property Map
    Main remote tunnel endpoint settings
    probe Property Map
    Tunnel health probe settings
    protocol String
    Only if provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation
    provider String
    Tunnel provider used when auto provisioning is disabled
    psk String
    Required if provider==zscaler-ipsec, provider==jse-ipsec or provider==custom-ipsec
    remoteSubnets List<String>
    Remote protected subnets reached through policy-based IPsec
    secondary Property Map
    Backup remote tunnel endpoint settings
    version String
    Only if provider==custom-gre or provider==custom-ipsec. Tunnel version value for custom tunnel configuration

    DeviceprofileGatewayTunnelConfigsAutoProvision, DeviceprofileGatewayTunnelConfigsAutoProvisionArgs

    Provider string
    Tunnel provider used for automatic endpoint provisioning
    Enabled bool
    Enable auto provisioning for the tunnel. If enabled, the primary and secondary nodes will be ignored.
    Latlng Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsAutoProvisionLatlng
    Geographic coordinate override used for tunnel POP selection
    Primary Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsAutoProvisionPrimary
    Main auto-provisioned tunnel endpoint settings
    Region string
    API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
    Secondary Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsAutoProvisionSecondary
    Backup auto-provisioned tunnel endpoint settings
    ServiceConnection string
    if provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
    Provider string
    Tunnel provider used for automatic endpoint provisioning
    Enabled bool
    Enable auto provisioning for the tunnel. If enabled, the primary and secondary nodes will be ignored.
    Latlng DeviceprofileGatewayTunnelConfigsAutoProvisionLatlng
    Geographic coordinate override used for tunnel POP selection
    Primary DeviceprofileGatewayTunnelConfigsAutoProvisionPrimary
    Main auto-provisioned tunnel endpoint settings
    Region string
    API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
    Secondary DeviceprofileGatewayTunnelConfigsAutoProvisionSecondary
    Backup auto-provisioned tunnel endpoint settings
    ServiceConnection string
    if provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
    provider string
    Tunnel provider used for automatic endpoint provisioning
    enabled bool
    Enable auto provisioning for the tunnel. If enabled, the primary and secondary nodes will be ignored.
    latlng object
    Geographic coordinate override used for tunnel POP selection
    primary object
    Main auto-provisioned tunnel endpoint settings
    region string
    API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
    secondary object
    Backup auto-provisioned tunnel endpoint settings
    service_connection string
    if provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
    provider String
    Tunnel provider used for automatic endpoint provisioning
    enabled Boolean
    Enable auto provisioning for the tunnel. If enabled, the primary and secondary nodes will be ignored.
    latlng DeviceprofileGatewayTunnelConfigsAutoProvisionLatlng
    Geographic coordinate override used for tunnel POP selection
    primary DeviceprofileGatewayTunnelConfigsAutoProvisionPrimary
    Main auto-provisioned tunnel endpoint settings
    region String
    API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
    secondary DeviceprofileGatewayTunnelConfigsAutoProvisionSecondary
    Backup auto-provisioned tunnel endpoint settings
    serviceConnection String
    if provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
    provider string
    Tunnel provider used for automatic endpoint provisioning
    enabled boolean
    Enable auto provisioning for the tunnel. If enabled, the primary and secondary nodes will be ignored.
    latlng DeviceprofileGatewayTunnelConfigsAutoProvisionLatlng
    Geographic coordinate override used for tunnel POP selection
    primary DeviceprofileGatewayTunnelConfigsAutoProvisionPrimary
    Main auto-provisioned tunnel endpoint settings
    region string
    API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
    secondary DeviceprofileGatewayTunnelConfigsAutoProvisionSecondary
    Backup auto-provisioned tunnel endpoint settings
    serviceConnection string
    if provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
    provider str
    Tunnel provider used for automatic endpoint provisioning
    enabled bool
    Enable auto provisioning for the tunnel. If enabled, the primary and secondary nodes will be ignored.
    latlng DeviceprofileGatewayTunnelConfigsAutoProvisionLatlng
    Geographic coordinate override used for tunnel POP selection
    primary DeviceprofileGatewayTunnelConfigsAutoProvisionPrimary
    Main auto-provisioned tunnel endpoint settings
    region str
    API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
    secondary DeviceprofileGatewayTunnelConfigsAutoProvisionSecondary
    Backup auto-provisioned tunnel endpoint settings
    service_connection str
    if provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
    provider String
    Tunnel provider used for automatic endpoint provisioning
    enabled Boolean
    Enable auto provisioning for the tunnel. If enabled, the primary and secondary nodes will be ignored.
    latlng Property Map
    Geographic coordinate override used for tunnel POP selection
    primary Property Map
    Main auto-provisioned tunnel endpoint settings
    region String
    API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
    secondary Property Map
    Backup auto-provisioned tunnel endpoint settings
    serviceConnection String
    if provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.

    DeviceprofileGatewayTunnelConfigsAutoProvisionLatlng, DeviceprofileGatewayTunnelConfigsAutoProvisionLatlngArgs

    Lat double
    Geographic latitude used for POP selection override
    Lng double
    Geographic longitude used for POP selection override
    Lat float64
    Geographic latitude used for POP selection override
    Lng float64
    Geographic longitude used for POP selection override
    lat number
    Geographic latitude used for POP selection override
    lng number
    Geographic longitude used for POP selection override
    lat Double
    Geographic latitude used for POP selection override
    lng Double
    Geographic longitude used for POP selection override
    lat number
    Geographic latitude used for POP selection override
    lng number
    Geographic longitude used for POP selection override
    lat float
    Geographic latitude used for POP selection override
    lng float
    Geographic longitude used for POP selection override
    lat Number
    Geographic latitude used for POP selection override
    lng Number
    Geographic longitude used for POP selection override

    DeviceprofileGatewayTunnelConfigsAutoProvisionPrimary, DeviceprofileGatewayTunnelConfigsAutoProvisionPrimaryArgs

    ProbeIps List<string>
    Probe IP addresses used to monitor auto-provisioned tunnel reachability
    WanNames List<string>
    WAN interface names used by the auto-provisioned tunnel endpoint
    ProbeIps []string
    Probe IP addresses used to monitor auto-provisioned tunnel reachability
    WanNames []string
    WAN interface names used by the auto-provisioned tunnel endpoint
    probe_ips list(string)
    Probe IP addresses used to monitor auto-provisioned tunnel reachability
    wan_names list(string)
    WAN interface names used by the auto-provisioned tunnel endpoint
    probeIps List<String>
    Probe IP addresses used to monitor auto-provisioned tunnel reachability
    wanNames List<String>
    WAN interface names used by the auto-provisioned tunnel endpoint
    probeIps string[]
    Probe IP addresses used to monitor auto-provisioned tunnel reachability
    wanNames string[]
    WAN interface names used by the auto-provisioned tunnel endpoint
    probe_ips Sequence[str]
    Probe IP addresses used to monitor auto-provisioned tunnel reachability
    wan_names Sequence[str]
    WAN interface names used by the auto-provisioned tunnel endpoint
    probeIps List<String>
    Probe IP addresses used to monitor auto-provisioned tunnel reachability
    wanNames List<String>
    WAN interface names used by the auto-provisioned tunnel endpoint

    DeviceprofileGatewayTunnelConfigsAutoProvisionSecondary, DeviceprofileGatewayTunnelConfigsAutoProvisionSecondaryArgs

    ProbeIps List<string>
    Probe IP addresses used to monitor auto-provisioned tunnel reachability
    WanNames List<string>
    WAN interface names used by the auto-provisioned tunnel endpoint
    ProbeIps []string
    Probe IP addresses used to monitor auto-provisioned tunnel reachability
    WanNames []string
    WAN interface names used by the auto-provisioned tunnel endpoint
    probe_ips list(string)
    Probe IP addresses used to monitor auto-provisioned tunnel reachability
    wan_names list(string)
    WAN interface names used by the auto-provisioned tunnel endpoint
    probeIps List<String>
    Probe IP addresses used to monitor auto-provisioned tunnel reachability
    wanNames List<String>
    WAN interface names used by the auto-provisioned tunnel endpoint
    probeIps string[]
    Probe IP addresses used to monitor auto-provisioned tunnel reachability
    wanNames string[]
    WAN interface names used by the auto-provisioned tunnel endpoint
    probe_ips Sequence[str]
    Probe IP addresses used to monitor auto-provisioned tunnel reachability
    wan_names Sequence[str]
    WAN interface names used by the auto-provisioned tunnel endpoint
    probeIps List<String>
    Probe IP addresses used to monitor auto-provisioned tunnel reachability
    wanNames List<String>
    WAN interface names used by the auto-provisioned tunnel endpoint

    DeviceprofileGatewayTunnelConfigsIkeProposal, DeviceprofileGatewayTunnelConfigsIkeProposalArgs

    AuthAlgo string
    Integrity algorithm used by this IKE proposal
    DhGroup string
    Diffie-Hellman group used by this IKE proposal
    EncAlgo string
    Cipher algorithm used by this IKE proposal
    AuthAlgo string
    Integrity algorithm used by this IKE proposal
    DhGroup string
    Diffie-Hellman group used by this IKE proposal
    EncAlgo string
    Cipher algorithm used by this IKE proposal
    auth_algo string
    Integrity algorithm used by this IKE proposal
    dh_group string
    Diffie-Hellman group used by this IKE proposal
    enc_algo string
    Cipher algorithm used by this IKE proposal
    authAlgo String
    Integrity algorithm used by this IKE proposal
    dhGroup String
    Diffie-Hellman group used by this IKE proposal
    encAlgo String
    Cipher algorithm used by this IKE proposal
    authAlgo string
    Integrity algorithm used by this IKE proposal
    dhGroup string
    Diffie-Hellman group used by this IKE proposal
    encAlgo string
    Cipher algorithm used by this IKE proposal
    auth_algo str
    Integrity algorithm used by this IKE proposal
    dh_group str
    Diffie-Hellman group used by this IKE proposal
    enc_algo str
    Cipher algorithm used by this IKE proposal
    authAlgo String
    Integrity algorithm used by this IKE proposal
    dhGroup String
    Diffie-Hellman group used by this IKE proposal
    encAlgo String
    Cipher algorithm used by this IKE proposal

    DeviceprofileGatewayTunnelConfigsIpsecProposal, DeviceprofileGatewayTunnelConfigsIpsecProposalArgs

    AuthAlgo string
    Integrity algorithm used by this IPsec proposal
    DhGroup string
    Diffie-Hellman group used by this IPsec proposal
    EncAlgo string
    Cipher algorithm used by this IPsec proposal
    AuthAlgo string
    Integrity algorithm used by this IPsec proposal
    DhGroup string
    Diffie-Hellman group used by this IPsec proposal
    EncAlgo string
    Cipher algorithm used by this IPsec proposal
    auth_algo string
    Integrity algorithm used by this IPsec proposal
    dh_group string
    Diffie-Hellman group used by this IPsec proposal
    enc_algo string
    Cipher algorithm used by this IPsec proposal
    authAlgo String
    Integrity algorithm used by this IPsec proposal
    dhGroup String
    Diffie-Hellman group used by this IPsec proposal
    encAlgo String
    Cipher algorithm used by this IPsec proposal
    authAlgo string
    Integrity algorithm used by this IPsec proposal
    dhGroup string
    Diffie-Hellman group used by this IPsec proposal
    encAlgo string
    Cipher algorithm used by this IPsec proposal
    auth_algo str
    Integrity algorithm used by this IPsec proposal
    dh_group str
    Diffie-Hellman group used by this IPsec proposal
    enc_algo str
    Cipher algorithm used by this IPsec proposal
    authAlgo String
    Integrity algorithm used by this IPsec proposal
    dhGroup String
    Diffie-Hellman group used by this IPsec proposal
    encAlgo String
    Cipher algorithm used by this IPsec proposal

    DeviceprofileGatewayTunnelConfigsPrimary, DeviceprofileGatewayTunnelConfigsPrimaryArgs

    Hosts List<string>
    Remote gateway host addresses for this tunnel node
    WanNames List<string>
    Interface names that source tunnel traffic for this node
    InternalIps List<string>
    Internal IP addresses configured on this tunnel node
    ProbeIps List<string>
    Health-check IP addresses used to monitor this tunnel node
    RemoteIds List<string>
    IKE identities expected from this tunnel node
    Hosts []string
    Remote gateway host addresses for this tunnel node
    WanNames []string
    Interface names that source tunnel traffic for this node
    InternalIps []string
    Internal IP addresses configured on this tunnel node
    ProbeIps []string
    Health-check IP addresses used to monitor this tunnel node
    RemoteIds []string
    IKE identities expected from this tunnel node
    hosts list(string)
    Remote gateway host addresses for this tunnel node
    wan_names list(string)
    Interface names that source tunnel traffic for this node
    internal_ips list(string)
    Internal IP addresses configured on this tunnel node
    probe_ips list(string)
    Health-check IP addresses used to monitor this tunnel node
    remote_ids list(string)
    IKE identities expected from this tunnel node
    hosts List<String>
    Remote gateway host addresses for this tunnel node
    wanNames List<String>
    Interface names that source tunnel traffic for this node
    internalIps List<String>
    Internal IP addresses configured on this tunnel node
    probeIps List<String>
    Health-check IP addresses used to monitor this tunnel node
    remoteIds List<String>
    IKE identities expected from this tunnel node
    hosts string[]
    Remote gateway host addresses for this tunnel node
    wanNames string[]
    Interface names that source tunnel traffic for this node
    internalIps string[]
    Internal IP addresses configured on this tunnel node
    probeIps string[]
    Health-check IP addresses used to monitor this tunnel node
    remoteIds string[]
    IKE identities expected from this tunnel node
    hosts Sequence[str]
    Remote gateway host addresses for this tunnel node
    wan_names Sequence[str]
    Interface names that source tunnel traffic for this node
    internal_ips Sequence[str]
    Internal IP addresses configured on this tunnel node
    probe_ips Sequence[str]
    Health-check IP addresses used to monitor this tunnel node
    remote_ids Sequence[str]
    IKE identities expected from this tunnel node
    hosts List<String>
    Remote gateway host addresses for this tunnel node
    wanNames List<String>
    Interface names that source tunnel traffic for this node
    internalIps List<String>
    Internal IP addresses configured on this tunnel node
    probeIps List<String>
    Health-check IP addresses used to monitor this tunnel node
    remoteIds List<String>
    IKE identities expected from this tunnel node

    DeviceprofileGatewayTunnelConfigsProbe, DeviceprofileGatewayTunnelConfigsProbeArgs

    Interval int
    How often to trigger the probe
    Threshold int
    Number of consecutive misses before declaring the tunnel down
    Timeout int
    Time within which to complete the connectivity check
    Type string
    Protocol used by the custom IPsec tunnel health probe
    Interval int
    How often to trigger the probe
    Threshold int
    Number of consecutive misses before declaring the tunnel down
    Timeout int
    Time within which to complete the connectivity check
    Type string
    Protocol used by the custom IPsec tunnel health probe
    interval number
    How often to trigger the probe
    threshold number
    Number of consecutive misses before declaring the tunnel down
    timeout number
    Time within which to complete the connectivity check
    type string
    Protocol used by the custom IPsec tunnel health probe
    interval Integer
    How often to trigger the probe
    threshold Integer
    Number of consecutive misses before declaring the tunnel down
    timeout Integer
    Time within which to complete the connectivity check
    type String
    Protocol used by the custom IPsec tunnel health probe
    interval number
    How often to trigger the probe
    threshold number
    Number of consecutive misses before declaring the tunnel down
    timeout number
    Time within which to complete the connectivity check
    type string
    Protocol used by the custom IPsec tunnel health probe
    interval int
    How often to trigger the probe
    threshold int
    Number of consecutive misses before declaring the tunnel down
    timeout int
    Time within which to complete the connectivity check
    type str
    Protocol used by the custom IPsec tunnel health probe
    interval Number
    How often to trigger the probe
    threshold Number
    Number of consecutive misses before declaring the tunnel down
    timeout Number
    Time within which to complete the connectivity check
    type String
    Protocol used by the custom IPsec tunnel health probe

    DeviceprofileGatewayTunnelConfigsSecondary, DeviceprofileGatewayTunnelConfigsSecondaryArgs

    Hosts List<string>
    Remote gateway host addresses for this tunnel node
    WanNames List<string>
    Interface names that source tunnel traffic for this node
    InternalIps List<string>
    Internal IP addresses configured on this tunnel node
    ProbeIps List<string>
    Health-check IP addresses used to monitor this tunnel node
    RemoteIds List<string>
    IKE identities expected from this tunnel node
    Hosts []string
    Remote gateway host addresses for this tunnel node
    WanNames []string
    Interface names that source tunnel traffic for this node
    InternalIps []string
    Internal IP addresses configured on this tunnel node
    ProbeIps []string
    Health-check IP addresses used to monitor this tunnel node
    RemoteIds []string
    IKE identities expected from this tunnel node
    hosts list(string)
    Remote gateway host addresses for this tunnel node
    wan_names list(string)
    Interface names that source tunnel traffic for this node
    internal_ips list(string)
    Internal IP addresses configured on this tunnel node
    probe_ips list(string)
    Health-check IP addresses used to monitor this tunnel node
    remote_ids list(string)
    IKE identities expected from this tunnel node
    hosts List<String>
    Remote gateway host addresses for this tunnel node
    wanNames List<String>
    Interface names that source tunnel traffic for this node
    internalIps List<String>
    Internal IP addresses configured on this tunnel node
    probeIps List<String>
    Health-check IP addresses used to monitor this tunnel node
    remoteIds List<String>
    IKE identities expected from this tunnel node
    hosts string[]
    Remote gateway host addresses for this tunnel node
    wanNames string[]
    Interface names that source tunnel traffic for this node
    internalIps string[]
    Internal IP addresses configured on this tunnel node
    probeIps string[]
    Health-check IP addresses used to monitor this tunnel node
    remoteIds string[]
    IKE identities expected from this tunnel node
    hosts Sequence[str]
    Remote gateway host addresses for this tunnel node
    wan_names Sequence[str]
    Interface names that source tunnel traffic for this node
    internal_ips Sequence[str]
    Internal IP addresses configured on this tunnel node
    probe_ips Sequence[str]
    Health-check IP addresses used to monitor this tunnel node
    remote_ids Sequence[str]
    IKE identities expected from this tunnel node
    hosts List<String>
    Remote gateway host addresses for this tunnel node
    wanNames List<String>
    Interface names that source tunnel traffic for this node
    internalIps List<String>
    Internal IP addresses configured on this tunnel node
    probeIps List<String>
    Health-check IP addresses used to monitor this tunnel node
    remoteIds List<String>
    IKE identities expected from this tunnel node

    DeviceprofileGatewayTunnelProviderOptions, DeviceprofileGatewayTunnelProviderOptionsArgs

    Jse Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelProviderOptionsJse
    Juniper Secure Edge provisioning options for tunnel endpoints
    Prisma Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelProviderOptionsPrisma
    Palo Alto Prisma Access provisioning options for tunnel endpoints
    Zscaler Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelProviderOptionsZscaler
    Provider settings for Zscaler tunnel endpoints
    Jse DeviceprofileGatewayTunnelProviderOptionsJse
    Juniper Secure Edge provisioning options for tunnel endpoints
    Prisma DeviceprofileGatewayTunnelProviderOptionsPrisma
    Palo Alto Prisma Access provisioning options for tunnel endpoints
    Zscaler DeviceprofileGatewayTunnelProviderOptionsZscaler
    Provider settings for Zscaler tunnel endpoints
    jse object
    Juniper Secure Edge provisioning options for tunnel endpoints
    prisma object
    Palo Alto Prisma Access provisioning options for tunnel endpoints
    zscaler object
    Provider settings for Zscaler tunnel endpoints
    jse DeviceprofileGatewayTunnelProviderOptionsJse
    Juniper Secure Edge provisioning options for tunnel endpoints
    prisma DeviceprofileGatewayTunnelProviderOptionsPrisma
    Palo Alto Prisma Access provisioning options for tunnel endpoints
    zscaler DeviceprofileGatewayTunnelProviderOptionsZscaler
    Provider settings for Zscaler tunnel endpoints
    jse DeviceprofileGatewayTunnelProviderOptionsJse
    Juniper Secure Edge provisioning options for tunnel endpoints
    prisma DeviceprofileGatewayTunnelProviderOptionsPrisma
    Palo Alto Prisma Access provisioning options for tunnel endpoints
    zscaler DeviceprofileGatewayTunnelProviderOptionsZscaler
    Provider settings for Zscaler tunnel endpoints
    jse DeviceprofileGatewayTunnelProviderOptionsJse
    Juniper Secure Edge provisioning options for tunnel endpoints
    prisma DeviceprofileGatewayTunnelProviderOptionsPrisma
    Palo Alto Prisma Access provisioning options for tunnel endpoints
    zscaler DeviceprofileGatewayTunnelProviderOptionsZscaler
    Provider settings for Zscaler tunnel endpoints
    jse Property Map
    Juniper Secure Edge provisioning options for tunnel endpoints
    prisma Property Map
    Palo Alto Prisma Access provisioning options for tunnel endpoints
    zscaler Property Map
    Provider settings for Zscaler tunnel endpoints

    DeviceprofileGatewayTunnelProviderOptionsJse, DeviceprofileGatewayTunnelProviderOptionsJseArgs

    NumUsers int
    User capacity to provision on Juniper Secure Edge
    OrgName string
    JSE Organization name
    NumUsers int
    User capacity to provision on Juniper Secure Edge
    OrgName string
    JSE Organization name
    num_users number
    User capacity to provision on Juniper Secure Edge
    org_name string
    JSE Organization name
    numUsers Integer
    User capacity to provision on Juniper Secure Edge
    orgName String
    JSE Organization name
    numUsers number
    User capacity to provision on Juniper Secure Edge
    orgName string
    JSE Organization name
    num_users int
    User capacity to provision on Juniper Secure Edge
    org_name str
    JSE Organization name
    numUsers Number
    User capacity to provision on Juniper Secure Edge
    orgName String
    JSE Organization name

    DeviceprofileGatewayTunnelProviderOptionsPrisma, DeviceprofileGatewayTunnelProviderOptionsPrismaArgs

    ServiceAccountName string
    For prisma-ipsec, service account name to used for tunnel auto provisioning
    ServiceAccountName string
    For prisma-ipsec, service account name to used for tunnel auto provisioning
    service_account_name string
    For prisma-ipsec, service account name to used for tunnel auto provisioning
    serviceAccountName String
    For prisma-ipsec, service account name to used for tunnel auto provisioning
    serviceAccountName string
    For prisma-ipsec, service account name to used for tunnel auto provisioning
    service_account_name str
    For prisma-ipsec, service account name to used for tunnel auto provisioning
    serviceAccountName String
    For prisma-ipsec, service account name to used for tunnel auto provisioning

    DeviceprofileGatewayTunnelProviderOptionsZscaler, DeviceprofileGatewayTunnelProviderOptionsZscalerArgs

    AupBlockInternetUntilAccepted bool
    Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
    AupEnabled bool
    Can only be true when authRequired==false, display Acceptable Use Policy (AUP)
    AupForceSslInspection bool
    Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
    AupTimeoutInDays int
    Required if aupEnabled==true. Days before AUP is requested again
    AuthRequired bool
    Enable this option to enforce user authentication
    CautionEnabled bool
    Can only be true when authRequired==false, display caution notification for non-authenticated users
    DnBandwidth double
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    IdleTimeInMinutes int
    Required if surrogate_IP==true, idle Time to Disassociation
    OfwEnabled bool
    If true, enable the firewall control option
    SubLocations List<Pulumi.JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelProviderOptionsZscalerSubLocation>
    Per-network Zscaler sub-location settings
    SurrogateIp bool
    Can only be true when authRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies
    SurrogateIpEnforcedForKnownBrowsers bool
    Can only be true when surrogate_IP==true, enforce surrogate IP for known browsers
    SurrogateRefreshTimeInMinutes int
    Required if surrogate_IP_enforced_for_known_browsers==true, must be lower or equal than idleTimeInMinutes, refresh Time for re-validation of Surrogacy
    UpBandwidth double
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    XffForwardEnabled bool
    Location uses proxy chaining to forward traffic
    AupBlockInternetUntilAccepted bool
    Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
    AupEnabled bool
    Can only be true when authRequired==false, display Acceptable Use Policy (AUP)
    AupForceSslInspection bool
    Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
    AupTimeoutInDays int
    Required if aupEnabled==true. Days before AUP is requested again
    AuthRequired bool
    Enable this option to enforce user authentication
    CautionEnabled bool
    Can only be true when authRequired==false, display caution notification for non-authenticated users
    DnBandwidth float64
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    IdleTimeInMinutes int
    Required if surrogate_IP==true, idle Time to Disassociation
    OfwEnabled bool
    If true, enable the firewall control option
    SubLocations []DeviceprofileGatewayTunnelProviderOptionsZscalerSubLocation
    Per-network Zscaler sub-location settings
    SurrogateIp bool
    Can only be true when authRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies
    SurrogateIpEnforcedForKnownBrowsers bool
    Can only be true when surrogate_IP==true, enforce surrogate IP for known browsers
    SurrogateRefreshTimeInMinutes int
    Required if surrogate_IP_enforced_for_known_browsers==true, must be lower or equal than idleTimeInMinutes, refresh Time for re-validation of Surrogacy
    UpBandwidth float64
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    XffForwardEnabled bool
    Location uses proxy chaining to forward traffic
    aup_block_internet_until_accepted bool
    Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
    aup_enabled bool
    Can only be true when authRequired==false, display Acceptable Use Policy (AUP)
    aup_force_ssl_inspection bool
    Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
    aup_timeout_in_days number
    Required if aupEnabled==true. Days before AUP is requested again
    auth_required bool
    Enable this option to enforce user authentication
    caution_enabled bool
    Can only be true when authRequired==false, display caution notification for non-authenticated users
    dn_bandwidth number
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    idle_time_in_minutes number
    Required if surrogate_IP==true, idle Time to Disassociation
    ofw_enabled bool
    If true, enable the firewall control option
    sub_locations list(object)
    Per-network Zscaler sub-location settings
    surrogate_ip bool
    Can only be true when authRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies
    surrogate_ip_enforced_for_known_browsers bool
    Can only be true when surrogate_IP==true, enforce surrogate IP for known browsers
    surrogate_refresh_time_in_minutes number
    Required if surrogate_IP_enforced_for_known_browsers==true, must be lower or equal than idleTimeInMinutes, refresh Time for re-validation of Surrogacy
    up_bandwidth number
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    xff_forward_enabled bool
    Location uses proxy chaining to forward traffic
    aupBlockInternetUntilAccepted Boolean
    Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
    aupEnabled Boolean
    Can only be true when authRequired==false, display Acceptable Use Policy (AUP)
    aupForceSslInspection Boolean
    Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
    aupTimeoutInDays Integer
    Required if aupEnabled==true. Days before AUP is requested again
    authRequired Boolean
    Enable this option to enforce user authentication
    cautionEnabled Boolean
    Can only be true when authRequired==false, display caution notification for non-authenticated users
    dnBandwidth Double
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    idleTimeInMinutes Integer
    Required if surrogate_IP==true, idle Time to Disassociation
    ofwEnabled Boolean
    If true, enable the firewall control option
    subLocations List<DeviceprofileGatewayTunnelProviderOptionsZscalerSubLocation>
    Per-network Zscaler sub-location settings
    surrogateIp Boolean
    Can only be true when authRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies
    surrogateIpEnforcedForKnownBrowsers Boolean
    Can only be true when surrogate_IP==true, enforce surrogate IP for known browsers
    surrogateRefreshTimeInMinutes Integer
    Required if surrogate_IP_enforced_for_known_browsers==true, must be lower or equal than idleTimeInMinutes, refresh Time for re-validation of Surrogacy
    upBandwidth Double
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    xffForwardEnabled Boolean
    Location uses proxy chaining to forward traffic
    aupBlockInternetUntilAccepted boolean
    Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
    aupEnabled boolean
    Can only be true when authRequired==false, display Acceptable Use Policy (AUP)
    aupForceSslInspection boolean
    Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
    aupTimeoutInDays number
    Required if aupEnabled==true. Days before AUP is requested again
    authRequired boolean
    Enable this option to enforce user authentication
    cautionEnabled boolean
    Can only be true when authRequired==false, display caution notification for non-authenticated users
    dnBandwidth number
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    idleTimeInMinutes number
    Required if surrogate_IP==true, idle Time to Disassociation
    ofwEnabled boolean
    If true, enable the firewall control option
    subLocations DeviceprofileGatewayTunnelProviderOptionsZscalerSubLocation[]
    Per-network Zscaler sub-location settings
    surrogateIp boolean
    Can only be true when authRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies
    surrogateIpEnforcedForKnownBrowsers boolean
    Can only be true when surrogate_IP==true, enforce surrogate IP for known browsers
    surrogateRefreshTimeInMinutes number
    Required if surrogate_IP_enforced_for_known_browsers==true, must be lower or equal than idleTimeInMinutes, refresh Time for re-validation of Surrogacy
    upBandwidth number
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    xffForwardEnabled boolean
    Location uses proxy chaining to forward traffic
    aup_block_internet_until_accepted bool
    Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
    aup_enabled bool
    Can only be true when authRequired==false, display Acceptable Use Policy (AUP)
    aup_force_ssl_inspection bool
    Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
    aup_timeout_in_days int
    Required if aupEnabled==true. Days before AUP is requested again
    auth_required bool
    Enable this option to enforce user authentication
    caution_enabled bool
    Can only be true when authRequired==false, display caution notification for non-authenticated users
    dn_bandwidth float
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    idle_time_in_minutes int
    Required if surrogate_IP==true, idle Time to Disassociation
    ofw_enabled bool
    If true, enable the firewall control option
    sub_locations Sequence[DeviceprofileGatewayTunnelProviderOptionsZscalerSubLocation]
    Per-network Zscaler sub-location settings
    surrogate_ip bool
    Can only be true when authRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies
    surrogate_ip_enforced_for_known_browsers bool
    Can only be true when surrogate_IP==true, enforce surrogate IP for known browsers
    surrogate_refresh_time_in_minutes int
    Required if surrogate_IP_enforced_for_known_browsers==true, must be lower or equal than idleTimeInMinutes, refresh Time for re-validation of Surrogacy
    up_bandwidth float
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    xff_forward_enabled bool
    Location uses proxy chaining to forward traffic
    aupBlockInternetUntilAccepted Boolean
    Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
    aupEnabled Boolean
    Can only be true when authRequired==false, display Acceptable Use Policy (AUP)
    aupForceSslInspection Boolean
    Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
    aupTimeoutInDays Number
    Required if aupEnabled==true. Days before AUP is requested again
    authRequired Boolean
    Enable this option to enforce user authentication
    cautionEnabled Boolean
    Can only be true when authRequired==false, display caution notification for non-authenticated users
    dnBandwidth Number
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    idleTimeInMinutes Number
    Required if surrogate_IP==true, idle Time to Disassociation
    ofwEnabled Boolean
    If true, enable the firewall control option
    subLocations List<Property Map>
    Per-network Zscaler sub-location settings
    surrogateIp Boolean
    Can only be true when authRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies
    surrogateIpEnforcedForKnownBrowsers Boolean
    Can only be true when surrogate_IP==true, enforce surrogate IP for known browsers
    surrogateRefreshTimeInMinutes Number
    Required if surrogate_IP_enforced_for_known_browsers==true, must be lower or equal than idleTimeInMinutes, refresh Time for re-validation of Surrogacy
    upBandwidth Number
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    xffForwardEnabled Boolean
    Location uses proxy chaining to forward traffic

    DeviceprofileGatewayTunnelProviderOptionsZscalerSubLocation, DeviceprofileGatewayTunnelProviderOptionsZscalerSubLocationArgs

    AupBlockInternetUntilAccepted bool
    Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
    AupEnabled bool
    Can only be true when authRequired==false, display Acceptable Use Policy (AUP)
    AupForceSslInspection bool
    Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
    AupTimeoutInDays int
    Required if aupEnabled==true. Days before AUP is requested again
    AuthRequired bool
    Enable this option to authenticate users
    CautionEnabled bool
    Can only be true when authRequired==false, display caution notification for non-authenticated users
    DnBandwidth double
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    IdleTimeInMinutes int
    Required if surrogate_IP==true, idle Time to Disassociation
    Name string
    Network name
    OfwEnabled bool
    If true, enable the firewall control option
    SurrogateIp bool
    Can only be true when authRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies
    SurrogateIpEnforcedForKnownBrowsers bool
    Can only be true when surrogate_IP==true, enforce surrogate IP for known browsers
    SurrogateRefreshTimeInMinutes int
    Required if surrogate_IP_enforced_for_known_browsers==true, must be lower or equal than idleTimeInMinutes, refresh Time for re-validation of Surrogacy
    UpBandwidth double
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    AupBlockInternetUntilAccepted bool
    Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
    AupEnabled bool
    Can only be true when authRequired==false, display Acceptable Use Policy (AUP)
    AupForceSslInspection bool
    Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
    AupTimeoutInDays int
    Required if aupEnabled==true. Days before AUP is requested again
    AuthRequired bool
    Enable this option to authenticate users
    CautionEnabled bool
    Can only be true when authRequired==false, display caution notification for non-authenticated users
    DnBandwidth float64
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    IdleTimeInMinutes int
    Required if surrogate_IP==true, idle Time to Disassociation
    Name string
    Network name
    OfwEnabled bool
    If true, enable the firewall control option
    SurrogateIp bool
    Can only be true when authRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies
    SurrogateIpEnforcedForKnownBrowsers bool
    Can only be true when surrogate_IP==true, enforce surrogate IP for known browsers
    SurrogateRefreshTimeInMinutes int
    Required if surrogate_IP_enforced_for_known_browsers==true, must be lower or equal than idleTimeInMinutes, refresh Time for re-validation of Surrogacy
    UpBandwidth float64
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    aup_block_internet_until_accepted bool
    Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
    aup_enabled bool
    Can only be true when authRequired==false, display Acceptable Use Policy (AUP)
    aup_force_ssl_inspection bool
    Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
    aup_timeout_in_days number
    Required if aupEnabled==true. Days before AUP is requested again
    auth_required bool
    Enable this option to authenticate users
    caution_enabled bool
    Can only be true when authRequired==false, display caution notification for non-authenticated users
    dn_bandwidth number
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    idle_time_in_minutes number
    Required if surrogate_IP==true, idle Time to Disassociation
    name string
    Network name
    ofw_enabled bool
    If true, enable the firewall control option
    surrogate_ip bool
    Can only be true when authRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies
    surrogate_ip_enforced_for_known_browsers bool
    Can only be true when surrogate_IP==true, enforce surrogate IP for known browsers
    surrogate_refresh_time_in_minutes number
    Required if surrogate_IP_enforced_for_known_browsers==true, must be lower or equal than idleTimeInMinutes, refresh Time for re-validation of Surrogacy
    up_bandwidth number
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    aupBlockInternetUntilAccepted Boolean
    Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
    aupEnabled Boolean
    Can only be true when authRequired==false, display Acceptable Use Policy (AUP)
    aupForceSslInspection Boolean
    Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
    aupTimeoutInDays Integer
    Required if aupEnabled==true. Days before AUP is requested again
    authRequired Boolean
    Enable this option to authenticate users
    cautionEnabled Boolean
    Can only be true when authRequired==false, display caution notification for non-authenticated users
    dnBandwidth Double
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    idleTimeInMinutes Integer
    Required if surrogate_IP==true, idle Time to Disassociation
    name String
    Network name
    ofwEnabled Boolean
    If true, enable the firewall control option
    surrogateIp Boolean
    Can only be true when authRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies
    surrogateIpEnforcedForKnownBrowsers Boolean
    Can only be true when surrogate_IP==true, enforce surrogate IP for known browsers
    surrogateRefreshTimeInMinutes Integer
    Required if surrogate_IP_enforced_for_known_browsers==true, must be lower or equal than idleTimeInMinutes, refresh Time for re-validation of Surrogacy
    upBandwidth Double
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    aupBlockInternetUntilAccepted boolean
    Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
    aupEnabled boolean
    Can only be true when authRequired==false, display Acceptable Use Policy (AUP)
    aupForceSslInspection boolean
    Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
    aupTimeoutInDays number
    Required if aupEnabled==true. Days before AUP is requested again
    authRequired boolean
    Enable this option to authenticate users
    cautionEnabled boolean
    Can only be true when authRequired==false, display caution notification for non-authenticated users
    dnBandwidth number
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    idleTimeInMinutes number
    Required if surrogate_IP==true, idle Time to Disassociation
    name string
    Network name
    ofwEnabled boolean
    If true, enable the firewall control option
    surrogateIp boolean
    Can only be true when authRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies
    surrogateIpEnforcedForKnownBrowsers boolean
    Can only be true when surrogate_IP==true, enforce surrogate IP for known browsers
    surrogateRefreshTimeInMinutes number
    Required if surrogate_IP_enforced_for_known_browsers==true, must be lower or equal than idleTimeInMinutes, refresh Time for re-validation of Surrogacy
    upBandwidth number
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    aup_block_internet_until_accepted bool
    Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
    aup_enabled bool
    Can only be true when authRequired==false, display Acceptable Use Policy (AUP)
    aup_force_ssl_inspection bool
    Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
    aup_timeout_in_days int
    Required if aupEnabled==true. Days before AUP is requested again
    auth_required bool
    Enable this option to authenticate users
    caution_enabled bool
    Can only be true when authRequired==false, display caution notification for non-authenticated users
    dn_bandwidth float
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    idle_time_in_minutes int
    Required if surrogate_IP==true, idle Time to Disassociation
    name str
    Network name
    ofw_enabled bool
    If true, enable the firewall control option
    surrogate_ip bool
    Can only be true when authRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies
    surrogate_ip_enforced_for_known_browsers bool
    Can only be true when surrogate_IP==true, enforce surrogate IP for known browsers
    surrogate_refresh_time_in_minutes int
    Required if surrogate_IP_enforced_for_known_browsers==true, must be lower or equal than idleTimeInMinutes, refresh Time for re-validation of Surrogacy
    up_bandwidth float
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    aupBlockInternetUntilAccepted Boolean
    Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
    aupEnabled Boolean
    Can only be true when authRequired==false, display Acceptable Use Policy (AUP)
    aupForceSslInspection Boolean
    Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
    aupTimeoutInDays Number
    Required if aupEnabled==true. Days before AUP is requested again
    authRequired Boolean
    Enable this option to authenticate users
    cautionEnabled Boolean
    Can only be true when authRequired==false, display caution notification for non-authenticated users
    dnBandwidth Number
    Download bandwidth cap of the link, in Mbps. Disabled if not set
    idleTimeInMinutes Number
    Required if surrogate_IP==true, idle Time to Disassociation
    name String
    Network name
    ofwEnabled Boolean
    If true, enable the firewall control option
    surrogateIp Boolean
    Can only be true when authRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies
    surrogateIpEnforcedForKnownBrowsers Boolean
    Can only be true when surrogate_IP==true, enforce surrogate IP for known browsers
    surrogateRefreshTimeInMinutes Number
    Required if surrogate_IP_enforced_for_known_browsers==true, must be lower or equal than idleTimeInMinutes, refresh Time for re-validation of Surrogacy
    upBandwidth Number
    Download bandwidth cap of the link, in Mbps. Disabled if not set

    DeviceprofileGatewayVrfConfig, DeviceprofileGatewayVrfConfigArgs

    Enabled bool
    Whether to enable VRF (when supported on the device)
    Enabled bool
    Whether to enable VRF (when supported on the device)
    enabled bool
    Whether to enable VRF (when supported on the device)
    enabled Boolean
    Whether to enable VRF (when supported on the device)
    enabled boolean
    Whether to enable VRF (when supported on the device)
    enabled bool
    Whether to enable VRF (when supported on the device)
    enabled Boolean
    Whether to enable VRF (when supported on the device)

    DeviceprofileGatewayVrfInstances, DeviceprofileGatewayVrfInstancesArgs

    Networks List<string>
    Network names included in this gateway VRF instance
    Networks []string
    Network names included in this gateway VRF instance
    networks list(string)
    Network names included in this gateway VRF instance
    networks List<String>
    Network names included in this gateway VRF instance
    networks string[]
    Network names included in this gateway VRF instance
    networks Sequence[str]
    Network names included in this gateway VRF instance
    networks List<String>
    Network names included in this gateway VRF instance

    Import

    Using pulumi import, import junipermist.org.DeviceprofileGateway with: Device Profile can be imported by specifying the orgId and the deviceprofileId

    $ pulumi import junipermist:org/deviceprofileGateway:DeviceprofileGateway deviceprofile_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    junipermist pulumi/pulumi-junipermist
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the mist Terraform Provider.
    junipermist logo
    Viewing docs for Juniper Mist v0.11.2
    published on Saturday, Jul 11, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-junipermist

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial