Docs Home
Juniper Mist v0.1.3 published on Wednesday, Dec 4, 2024 by Pulumi
junipermist.org.DeviceprofileGateway
Explore with Pulumi AI
This resource manages the Gateway Device Profiles (HUB Profiles). A HUB profile is a configuration profile that automates the creation of overlay networks and defines the attributes of a hub device in a network. It includes settings for wan interfaces, lan interfaces, dns servers, traffic steering preferences, application policies, and routing options. HUB profiles are used to create consistent configurations for hub devices and ensure efficient connectivity between hubs and spokes in a network.
The Gateway Devide Profile can be assigned to a gateway with the junipermist.org.DeviceprofileAssign resource.
Example Usage
Coming soon!
Coming soon!
Coming soon!
Coming soon!
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.org.DeviceprofileGateway;
import com.pulumi.junipermist.org.DeviceprofileGatewayArgs;
import com.pulumi.junipermist.org.inputs.DeviceprofileGatewayServicePolicyArgs;
import com.pulumi.junipermist.org.inputs.DeviceprofileGatewayServicePolicyIdpArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var deviceprofileGwOne = new DeviceprofileGateway("deviceprofileGwOne", DeviceprofileGatewayArgs.builder()
.name("deviceprofile_gw_one")
.orgId(terraformTest.id())
.portConfig(Map.ofEntries(
Map.entry("ge-0/0/3", Map.ofEntries(
Map.entry("name", "FTTH"),
Map.entry("usage", "wan"),
Map.entry("aggregated", false),
Map.entry("redundant", false),
Map.entry("critical", false),
Map.entry("wanType", "broadband"),
Map.entry("ipConfig", Map.ofEntries(
Map.entry("type", "static"),
Map.entry("ip", "192.168.1.8"),
Map.entry("netmask", "/24"),
Map.entry("gateway", "192.168.1.1")
)),
Map.entry("disableAutoneg", false),
Map.entry("speed", "auto"),
Map.entry("duplex", "auto"),
Map.entry("wanSourceNat", Map.of("disabled", false)),
Map.entry("vpnPaths", Map.of("SSR_HUB_DC-MPLS.OrgOverlay", Map.ofEntries(
Map.entry("key", 0),
Map.entry("role", "spoke"),
Map.entry("bfdProfile", "broadband")
)))
)),
Map.entry("ge-0/0/5", Map.ofEntries(
Map.entry("usage", "lan"),
Map.entry("critical", false),
Map.entry("aggregated", true),
Map.entry("aeDisableLacp", false),
Map.entry("aeLacpForceUp", true),
Map.entry("aeIdx", 0),
Map.entry("redundant", false),
Map.entry("networks",
"PRD-Core",
"PRD-Mgmt",
"PRD-Lab")
))
))
.ipConfigs(Map.ofEntries(
Map.entry("PRD-Core", Map.ofEntries(
Map.entry("type", "static"),
Map.entry("ip", "10.3.100.9"),
Map.entry("netmask", "/24")
)),
Map.entry("PRD-Mgmt", Map.ofEntries(
Map.entry("type", "static"),
Map.entry("ip", "10.3.172.1"),
Map.entry("netmask", "/24")
)),
Map.entry("PRD-Lab", Map.ofEntries(
Map.entry("type", "static"),
Map.entry("ip", "10.3.171.1"),
Map.entry("netmask", "/24")
))
))
.servicePolicies(DeviceprofileGatewayServicePolicyArgs.builder()
.name("Policy-14")
.tenants("PRD-Core")
.services("any")
.action("allow")
.path_preference("HUB")
.idp(DeviceprofileGatewayServicePolicyIdpArgs.builder()
.enabled(true)
.profile("critical")
.alertOnly(false)
.build())
.build())
.build());
}
}
resources:
deviceprofileGwOne:
type: junipermist:org:DeviceprofileGateway
name: deviceprofile_gw_one
properties:
name: deviceprofile_gw_one
orgId: ${terraformTest.id}
portConfig:
ge-0/0/3:
name: FTTH
usage: wan
aggregated: false
redundant: false
critical: false
wanType: broadband
ipConfig:
type: static
ip: 192.168.1.8
netmask: /24
gateway: 192.168.1.1
disableAutoneg: false
speed: auto
duplex: auto
wanSourceNat:
disabled: false
vpnPaths:
SSR_HUB_DC-MPLS.OrgOverlay:
key: 0
role: spoke
bfdProfile: broadband
ge-0/0/5:
usage: lan
critical: false
aggregated: true
aeDisableLacp: false
aeLacpForceUp: true
aeIdx: 0
redundant: false
networks:
- PRD-Core
- PRD-Mgmt
- PRD-Lab
ipConfigs:
PRD-Core:
type: static
ip: 10.3.100.9
netmask: /24
PRD-Mgmt:
type: static
ip: 10.3.172.1
netmask: /24
PRD-Lab:
type: static
ip: 10.3.171.1
netmask: /24
servicePolicies:
- name: Policy-14
tenants:
- PRD-Core
services:
- any
action: allow
path_preference: HUB
idp:
enabled: true
profile: critical
alertOnly: false
Create DeviceprofileGateway Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new DeviceprofileGateway(name: string, args: DeviceprofileGatewayArgs, opts?: CustomResourceOptions);@overload
def DeviceprofileGateway(resource_name: str,
args: DeviceprofileGatewayArgs,
opts: Optional[ResourceOptions] = None)
@overload
def DeviceprofileGateway(resource_name: str,
opts: Optional[ResourceOptions] = None,
org_id: Optional[str] = None,
ntp_override: Optional[bool] = None,
tunnel_provider_options: Optional[DeviceprofileGatewayTunnelProviderOptionsArgs] = None,
dns_override: Optional[bool] = None,
dns_servers: Optional[Sequence[str]] = None,
dns_suffixes: Optional[Sequence[str]] = None,
extra_routes: Optional[Mapping[str, DeviceprofileGatewayExtraRoutesArgs]] = None,
extra_routes6: Optional[Mapping[str, DeviceprofileGatewayExtraRoutes6Args]] = None,
idp_profiles: Optional[Mapping[str, DeviceprofileGatewayIdpProfilesArgs]] = None,
ip_configs: Optional[Mapping[str, DeviceprofileGatewayIpConfigsArgs]] = None,
name: Optional[str] = None,
vrf_instances: Optional[Mapping[str, DeviceprofileGatewayVrfInstancesArgs]] = None,
dhcpd_config: Optional[DeviceprofileGatewayDhcpdConfigArgs] = None,
bgp_config: Optional[Mapping[str, DeviceprofileGatewayBgpConfigArgs]] = None,
oob_ip_config: Optional[DeviceprofileGatewayOobIpConfigArgs] = None,
ntp_servers: Optional[Sequence[str]] = None,
path_preferences: Optional[Mapping[str, DeviceprofileGatewayPathPreferencesArgs]] = None,
port_config: Optional[Mapping[str, DeviceprofileGatewayPortConfigArgs]] = None,
router_id: Optional[str] = None,
routing_policies: Optional[Mapping[str, DeviceprofileGatewayRoutingPoliciesArgs]] = None,
service_policies: Optional[Sequence[DeviceprofileGatewayServicePolicyArgs]] = None,
tunnel_configs: Optional[Mapping[str, DeviceprofileGatewayTunnelConfigsArgs]] = None,
additional_config_cmds: Optional[Sequence[str]] = None,
vrf_config: Optional[DeviceprofileGatewayVrfConfigArgs] = None,
networks: Optional[Sequence[DeviceprofileGatewayNetworkArgs]] = None)func NewDeviceprofileGateway(ctx *Context, name string, args DeviceprofileGatewayArgs, opts ...ResourceOption) (*DeviceprofileGateway, error)public DeviceprofileGateway(string name, DeviceprofileGatewayArgs args, CustomResourceOptions? opts = null)
public DeviceprofileGateway(String name, DeviceprofileGatewayArgs args)
public DeviceprofileGateway(String name, DeviceprofileGatewayArgs args, CustomResourceOptions options)
type: junipermist:org:DeviceprofileGateway
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args DeviceprofileGatewayArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args DeviceprofileGatewayArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args DeviceprofileGatewayArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args DeviceprofileGatewayArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args DeviceprofileGatewayArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var deviceprofileGatewayResource = new JuniperMist.Org.DeviceprofileGateway("deviceprofileGatewayResource", new()
{
OrgId = "string",
NtpOverride = false,
TunnelProviderOptions = new JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelProviderOptionsArgs
{
Jse = new JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelProviderOptionsJseArgs
{
Name = "string",
NumUsers = 0,
},
Zscaler = new JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelProviderOptionsZscalerArgs
{
AupAcceptanceRequired = false,
AupExpire = 0,
AupSslProxy = false,
DownloadMbps = 0,
EnableAup = false,
EnableCaution = false,
EnforceAuthentication = false,
Name = "string",
SubLocations = new[]
{
new JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelProviderOptionsZscalerSubLocationArgs
{
AupAcceptanceRequired = false,
AupExpire = 0,
AupSslProxy = false,
DownloadMbps = 0,
EnableAup = false,
EnableCaution = false,
EnforceAuthentication = false,
Subnets = new[]
{
"string",
},
UploadMbps = 0,
},
},
UploadMbps = 0,
UseXff = false,
},
},
DnsOverride = false,
DnsServers = new[]
{
"string",
},
DnsSuffixes = new[]
{
"string",
},
ExtraRoutes =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayExtraRoutesArgs
{
Via = "string",
} },
},
ExtraRoutes6 =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayExtraRoutes6Args
{
Via = "string",
} },
},
IdpProfiles =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayIdpProfilesArgs
{
BaseProfile = "string",
Name = "string",
OrgId = "string",
Overwrites = new[]
{
new JuniperMist.Org.Inputs.DeviceprofileGatewayIdpProfilesOverwriteArgs
{
Action = "string",
Matching = new JuniperMist.Org.Inputs.DeviceprofileGatewayIdpProfilesOverwriteMatchingArgs
{
AttackNames = new[]
{
"string",
},
DstSubnets = new[]
{
"string",
},
Severities = new[]
{
"string",
},
},
Name = "string",
},
},
} },
},
IpConfigs =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayIpConfigsArgs
{
Ip = "string",
Netmask = "string",
SecondaryIps = new[]
{
"string",
},
Type = "string",
} },
},
Name = "string",
VrfInstances =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayVrfInstancesArgs
{
Networks = new[]
{
"string",
},
} },
},
DhcpdConfig = new JuniperMist.Org.Inputs.DeviceprofileGatewayDhcpdConfigArgs
{
Config =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayDhcpdConfigConfigArgs
{
DnsServers = new[]
{
"string",
},
DnsSuffixes = new[]
{
"string",
},
FixedBindings =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayDhcpdConfigConfigFixedBindingsArgs
{
Ip = "string",
Name = "string",
} },
},
Gateway = "string",
IpEnd = "string",
IpEnd6 = "string",
IpStart = "string",
IpStart6 = "string",
LeaseTime = 0,
Options =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayDhcpdConfigConfigOptionsArgs
{
Type = "string",
Value = "string",
} },
},
ServerIdOverride = false,
Servers = new[]
{
"string",
},
Servers6s = new[]
{
"string",
},
Type = "string",
Type6 = "string",
VendorEncapsulated =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayDhcpdConfigConfigVendorEncapsulatedArgs
{
Type = "string",
Value = "string",
} },
},
} },
},
Enabled = false,
},
BgpConfig =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayBgpConfigArgs
{
AuthKey = "string",
BfdMinimumInterval = 0,
BfdMultiplier = 0,
DisableBfd = false,
Export = "string",
ExportPolicy = "string",
ExtendedV4Nexthop = false,
GracefulRestartTime = 0,
HoldTime = 0,
Import = "string",
ImportPolicy = "string",
LocalAs = 0,
NeighborAs = 0,
Neighbors =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayBgpConfigNeighborsArgs
{
Disabled = false,
ExportPolicy = "string",
HoldTime = 0,
ImportPolicy = "string",
MultihopTtl = 0,
NeighborAs = 0,
} },
},
Networks = new[]
{
"string",
},
NoReadvertiseToOverlay = false,
TunnelName = "string",
Type = "string",
Via = "string",
VpnName = "string",
WanName = "string",
} },
},
OobIpConfig = new JuniperMist.Org.Inputs.DeviceprofileGatewayOobIpConfigArgs
{
Gateway = "string",
Ip = "string",
Netmask = "string",
Node1 = new JuniperMist.Org.Inputs.DeviceprofileGatewayOobIpConfigNode1Args
{
Gateway = "string",
Ip = "string",
Netmask = "string",
Type = "string",
UseMgmtVrf = false,
UseMgmtVrfForHostOut = false,
VlanId = "string",
},
Type = "string",
UseMgmtVrf = false,
UseMgmtVrfForHostOut = false,
VlanId = "string",
},
NtpServers = new[]
{
"string",
},
PathPreferences =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayPathPreferencesArgs
{
Paths = new[]
{
new JuniperMist.Org.Inputs.DeviceprofileGatewayPathPreferencesPathArgs
{
Cost = 0,
Disabled = false,
GatewayIp = "string",
InternetAccess = false,
Name = "string",
Networks = new[]
{
"string",
},
TargetIps = new[]
{
"string",
},
Type = "string",
WanName = "string",
},
},
Strategy = "string",
} },
},
PortConfig =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigArgs
{
Usage = "string",
Networks = new[]
{
"string",
},
DslType = "string",
Aggregated = false,
OuterVlanId = 0,
Description = "string",
PortNetwork = "string",
Disabled = false,
PoeDisabled = false,
DslVci = 0,
DslVpi = 0,
Duplex = "string",
IpConfig = new JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigIpConfigArgs
{
Dns = new[]
{
"string",
},
DnsSuffixes = new[]
{
"string",
},
Gateway = "string",
Ip = "string",
Netmask = "string",
Network = "string",
PoserPassword = "string",
PppoeAuth = "string",
PppoeUsername = "string",
Type = "string",
},
LteApn = "string",
LteAuth = "string",
LteBackup = false,
LtePassword = "string",
LteUsername = "string",
Mtu = 0,
Name = "string",
AeDisableLacp = false,
Critical = false,
AeLacpForceUp = false,
DisableAutoneg = false,
PreserveDscp = false,
Redundant = false,
RethIdx = 0,
RethNode = "string",
RethNodes = new[]
{
"string",
},
Speed = "string",
SsrNoVirtualMac = false,
SvrPortRange = "string",
TrafficShaping = new JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigTrafficShapingArgs
{
ClassPercentages = new[]
{
0,
},
Enabled = false,
},
AeIdx = "string",
VlanId = 0,
VpnPaths =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigVpnPathsArgs
{
BfdProfile = "string",
BfdUseTunnelMode = false,
LinkName = "string",
Preference = 0,
Role = "string",
TrafficShaping = new JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigVpnPathsTrafficShapingArgs
{
ClassPercentages = new[]
{
0,
},
Enabled = false,
},
} },
},
WanArpPolicer = "string",
WanExtIp = "string",
WanExtraRoutes =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigWanExtraRoutesArgs
{
Via = "string",
} },
},
WanProbeOverride = new JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigWanProbeOverrideArgs
{
Ips = new[]
{
"string",
},
ProbeProfile = "string",
},
WanSourceNat = new JuniperMist.Org.Inputs.DeviceprofileGatewayPortConfigWanSourceNatArgs
{
Disabled = false,
NatPool = "string",
},
WanType = "string",
} },
},
RouterId = "string",
RoutingPolicies =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayRoutingPoliciesArgs
{
Terms = new[]
{
new JuniperMist.Org.Inputs.DeviceprofileGatewayRoutingPoliciesTermArgs
{
Action = new JuniperMist.Org.Inputs.DeviceprofileGatewayRoutingPoliciesTermActionArgs
{
Accept = false,
AddCommunities = new[]
{
"string",
},
AddTargetVrfs = new[]
{
"string",
},
Communities = new[]
{
"string",
},
ExcludeAsPaths = new[]
{
"string",
},
ExcludeCommunities = new[]
{
"string",
},
ExportCommunitites = new[]
{
"string",
},
LocalPreference = "string",
PrependAsPaths = new[]
{
"string",
},
},
Matching = new JuniperMist.Org.Inputs.DeviceprofileGatewayRoutingPoliciesTermMatchingArgs
{
AsPaths = new[]
{
"string",
},
Communities = new[]
{
"string",
},
Networks = new[]
{
"string",
},
Prefixes = new[]
{
"string",
},
Protocols = new[]
{
"string",
},
RouteExists = new JuniperMist.Org.Inputs.DeviceprofileGatewayRoutingPoliciesTermMatchingRouteExistsArgs
{
Route = "string",
VrfName = "string",
},
VpnNeighborMacs = new[]
{
"string",
},
VpnPathSla = new JuniperMist.Org.Inputs.DeviceprofileGatewayRoutingPoliciesTermMatchingVpnPathSlaArgs
{
MaxJitter = 0,
MaxLatency = 0,
MaxLoss = 0,
},
VpnPaths = new[]
{
"string",
},
},
},
},
} },
},
ServicePolicies = new[]
{
new JuniperMist.Org.Inputs.DeviceprofileGatewayServicePolicyArgs
{
Action = "string",
Appqoe = new JuniperMist.Org.Inputs.DeviceprofileGatewayServicePolicyAppqoeArgs
{
Enabled = false,
},
Ewfs = new[]
{
new JuniperMist.Org.Inputs.DeviceprofileGatewayServicePolicyEwfArgs
{
AlertOnly = false,
BlockMessage = "string",
Enabled = false,
Profile = "string",
},
},
Idp = new JuniperMist.Org.Inputs.DeviceprofileGatewayServicePolicyIdpArgs
{
AlertOnly = false,
Enabled = false,
IdpprofileId = "string",
Profile = "string",
},
LocalRouting = false,
Name = "string",
PathPreference = "string",
ServicepolicyId = "string",
Services = new[]
{
"string",
},
Tenants = new[]
{
"string",
},
},
},
TunnelConfigs =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsArgs
{
AutoProvision = new JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsAutoProvisionArgs
{
Enable = false,
Latlng = new JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsAutoProvisionLatlngArgs
{
Lat = 0,
Lng = 0,
},
Primary = new JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsAutoProvisionPrimaryArgs
{
NumHosts = "string",
WanNames = new[]
{
"string",
},
},
Secondary = new JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsAutoProvisionSecondaryArgs
{
NumHosts = "string",
WanNames = new[]
{
"string",
},
},
},
IkeLifetime = 0,
IkeMode = "string",
IkeProposals = new[]
{
new JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsIkeProposalArgs
{
AuthAlgo = "string",
DhGroup = "string",
EncAlgo = "string",
},
},
IpsecLifetime = 0,
IpsecProposals = new[]
{
new JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsIpsecProposalArgs
{
AuthAlgo = "string",
DhGroup = "string",
EncAlgo = "string",
},
},
LocalId = "string",
Mode = "string",
Networks = new[]
{
"string",
},
Primary = new JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsPrimaryArgs
{
Hosts = new[]
{
"string",
},
InternalIps = new[]
{
"string",
},
ProbeIps = new[]
{
"string",
},
RemoteIds = new[]
{
"string",
},
WanNames = new[]
{
"string",
},
},
Probe = new JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsProbeArgs
{
Interval = 0,
Threshold = 0,
Timeout = 0,
Type = "string",
},
Protocol = "string",
Provider = "string",
Psk = "string",
Secondary = new JuniperMist.Org.Inputs.DeviceprofileGatewayTunnelConfigsSecondaryArgs
{
Hosts = new[]
{
"string",
},
InternalIps = new[]
{
"string",
},
ProbeIps = new[]
{
"string",
},
RemoteIds = new[]
{
"string",
},
WanNames = new[]
{
"string",
},
},
Version = "string",
} },
},
AdditionalConfigCmds = new[]
{
"string",
},
VrfConfig = new JuniperMist.Org.Inputs.DeviceprofileGatewayVrfConfigArgs
{
Enabled = false,
},
Networks = new[]
{
new JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkArgs
{
Name = "string",
Subnet = "string",
InternalAccess = new JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkInternalAccessArgs
{
Enabled = false,
},
DisallowMistServices = false,
InternetAccess = new JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkInternetAccessArgs
{
CreateSimpleServicePolicy = false,
DestinationNat =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkInternetAccessDestinationNatArgs
{
InternalIp = "string",
Name = "string",
Port = 0,
} },
},
Enabled = false,
Restricted = false,
StaticNat =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkInternetAccessStaticNatArgs
{
InternalIp = "string",
Name = "string",
WanName = "string",
} },
},
},
Isolation = false,
Multicast = new JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkMulticastArgs
{
DisableIgmp = false,
Enabled = false,
Groups =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkMulticastGroupsArgs
{
RpIp = "string",
} },
},
},
Gateway6 = "string",
RoutedForNetworks = new[]
{
"string",
},
Gateway = "string",
Subnet6 = "string",
Tenants =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkTenantsArgs
{
Addresses = new[]
{
"string",
},
} },
},
VlanId = "string",
VpnAccess =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkVpnAccessArgs
{
AdvertisedSubnet = "string",
AllowPing = false,
DestinationNat =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkVpnAccessDestinationNatArgs
{
InternalIp = "string",
Name = "string",
Port = 0,
} },
},
NatPool = "string",
NoReadvertiseToLanBgp = false,
NoReadvertiseToLanOspf = false,
NoReadvertiseToOverlay = false,
OtherVrfs = new[]
{
"string",
},
Routed = false,
SourceNat = new JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkVpnAccessSourceNatArgs
{
ExternalIp = "string",
},
StaticNat =
{
{ "string", new JuniperMist.Org.Inputs.DeviceprofileGatewayNetworkVpnAccessStaticNatArgs
{
InternalIp = "string",
Name = "string",
WanName = "string",
} },
},
SummarizedSubnet = "string",
SummarizedSubnetToLanBgp = "string",
SummarizedSubnetToLanOspf = "string",
} },
},
},
},
});
example, err := org.NewDeviceprofileGateway(ctx, "deviceprofileGatewayResource", &org.DeviceprofileGatewayArgs{
OrgId: pulumi.String("string"),
NtpOverride: pulumi.Bool(false),
TunnelProviderOptions: &org.DeviceprofileGatewayTunnelProviderOptionsArgs{
Jse: &org.DeviceprofileGatewayTunnelProviderOptionsJseArgs{
Name: pulumi.String("string"),
NumUsers: pulumi.Int(0),
},
Zscaler: &org.DeviceprofileGatewayTunnelProviderOptionsZscalerArgs{
AupAcceptanceRequired: pulumi.Bool(false),
AupExpire: pulumi.Int(0),
AupSslProxy: pulumi.Bool(false),
DownloadMbps: pulumi.Int(0),
EnableAup: pulumi.Bool(false),
EnableCaution: pulumi.Bool(false),
EnforceAuthentication: pulumi.Bool(false),
Name: pulumi.String("string"),
SubLocations: org.DeviceprofileGatewayTunnelProviderOptionsZscalerSubLocationArray{
&org.DeviceprofileGatewayTunnelProviderOptionsZscalerSubLocationArgs{
AupAcceptanceRequired: pulumi.Bool(false),
AupExpire: pulumi.Int(0),
AupSslProxy: pulumi.Bool(false),
DownloadMbps: pulumi.Int(0),
EnableAup: pulumi.Bool(false),
EnableCaution: pulumi.Bool(false),
EnforceAuthentication: pulumi.Bool(false),
Subnets: pulumi.StringArray{
pulumi.String("string"),
},
UploadMbps: pulumi.Int(0),
},
},
UploadMbps: pulumi.Int(0),
UseXff: pulumi.Bool(false),
},
},
DnsOverride: pulumi.Bool(false),
DnsServers: pulumi.StringArray{
pulumi.String("string"),
},
DnsSuffixes: pulumi.StringArray{
pulumi.String("string"),
},
ExtraRoutes: org.DeviceprofileGatewayExtraRoutesMap{
"string": &org.DeviceprofileGatewayExtraRoutesArgs{
Via: pulumi.String("string"),
},
},
ExtraRoutes6: org.DeviceprofileGatewayExtraRoutes6Map{
"string": &org.DeviceprofileGatewayExtraRoutes6Args{
Via: pulumi.String("string"),
},
},
IdpProfiles: org.DeviceprofileGatewayIdpProfilesMap{
"string": &org.DeviceprofileGatewayIdpProfilesArgs{
BaseProfile: pulumi.String("string"),
Name: pulumi.String("string"),
OrgId: pulumi.String("string"),
Overwrites: org.DeviceprofileGatewayIdpProfilesOverwriteArray{
&org.DeviceprofileGatewayIdpProfilesOverwriteArgs{
Action: pulumi.String("string"),
Matching: &org.DeviceprofileGatewayIdpProfilesOverwriteMatchingArgs{
AttackNames: pulumi.StringArray{
pulumi.String("string"),
},
DstSubnets: pulumi.StringArray{
pulumi.String("string"),
},
Severities: pulumi.StringArray{
pulumi.String("string"),
},
},
Name: pulumi.String("string"),
},
},
},
},
IpConfigs: org.DeviceprofileGatewayIpConfigsMap{
"string": &org.DeviceprofileGatewayIpConfigsArgs{
Ip: pulumi.String("string"),
Netmask: pulumi.String("string"),
SecondaryIps: pulumi.StringArray{
pulumi.String("string"),
},
Type: pulumi.String("string"),
},
},
Name: pulumi.String("string"),
VrfInstances: org.DeviceprofileGatewayVrfInstancesMap{
"string": &org.DeviceprofileGatewayVrfInstancesArgs{
Networks: pulumi.StringArray{
pulumi.String("string"),
},
},
},
DhcpdConfig: &org.DeviceprofileGatewayDhcpdConfigArgs{
Config: org.DeviceprofileGatewayDhcpdConfigConfigMap{
"string": &org.DeviceprofileGatewayDhcpdConfigConfigArgs{
DnsServers: pulumi.StringArray{
pulumi.String("string"),
},
DnsSuffixes: pulumi.StringArray{
pulumi.String("string"),
},
FixedBindings: org.DeviceprofileGatewayDhcpdConfigConfigFixedBindingsMap{
"string": &org.DeviceprofileGatewayDhcpdConfigConfigFixedBindingsArgs{
Ip: pulumi.String("string"),
Name: pulumi.String("string"),
},
},
Gateway: pulumi.String("string"),
IpEnd: pulumi.String("string"),
IpEnd6: pulumi.String("string"),
IpStart: pulumi.String("string"),
IpStart6: pulumi.String("string"),
LeaseTime: pulumi.Int(0),
Options: org.DeviceprofileGatewayDhcpdConfigConfigOptionsMap{
"string": &org.DeviceprofileGatewayDhcpdConfigConfigOptionsArgs{
Type: pulumi.String("string"),
Value: pulumi.String("string"),
},
},
ServerIdOverride: pulumi.Bool(false),
Servers: pulumi.StringArray{
pulumi.String("string"),
},
Servers6s: pulumi.StringArray{
pulumi.String("string"),
},
Type: pulumi.String("string"),
Type6: pulumi.String("string"),
VendorEncapsulated: org.DeviceprofileGatewayDhcpdConfigConfigVendorEncapsulatedMap{
"string": &org.DeviceprofileGatewayDhcpdConfigConfigVendorEncapsulatedArgs{
Type: pulumi.String("string"),
Value: pulumi.String("string"),
},
},
},
},
Enabled: pulumi.Bool(false),
},
BgpConfig: org.DeviceprofileGatewayBgpConfigMap{
"string": &org.DeviceprofileGatewayBgpConfigArgs{
AuthKey: pulumi.String("string"),
BfdMinimumInterval: pulumi.Int(0),
BfdMultiplier: pulumi.Int(0),
DisableBfd: pulumi.Bool(false),
Export: pulumi.String("string"),
ExportPolicy: pulumi.String("string"),
ExtendedV4Nexthop: pulumi.Bool(false),
GracefulRestartTime: pulumi.Int(0),
HoldTime: pulumi.Int(0),
Import: pulumi.String("string"),
ImportPolicy: pulumi.String("string"),
LocalAs: pulumi.Int(0),
NeighborAs: pulumi.Int(0),
Neighbors: org.DeviceprofileGatewayBgpConfigNeighborsMap{
"string": &org.DeviceprofileGatewayBgpConfigNeighborsArgs{
Disabled: pulumi.Bool(false),
ExportPolicy: pulumi.String("string"),
HoldTime: pulumi.Int(0),
ImportPolicy: pulumi.String("string"),
MultihopTtl: pulumi.Int(0),
NeighborAs: pulumi.Int(0),
},
},
Networks: pulumi.StringArray{
pulumi.String("string"),
},
NoReadvertiseToOverlay: pulumi.Bool(false),
TunnelName: pulumi.String("string"),
Type: pulumi.String("string"),
Via: pulumi.String("string"),
VpnName: pulumi.String("string"),
WanName: pulumi.String("string"),
},
},
OobIpConfig: &org.DeviceprofileGatewayOobIpConfigArgs{
Gateway: pulumi.String("string"),
Ip: pulumi.String("string"),
Netmask: pulumi.String("string"),
Node1: &org.DeviceprofileGatewayOobIpConfigNode1Args{
Gateway: pulumi.String("string"),
Ip: pulumi.String("string"),
Netmask: pulumi.String("string"),
Type: pulumi.String("string"),
UseMgmtVrf: pulumi.Bool(false),
UseMgmtVrfForHostOut: pulumi.Bool(false),
VlanId: pulumi.String("string"),
},
Type: pulumi.String("string"),
UseMgmtVrf: pulumi.Bool(false),
UseMgmtVrfForHostOut: pulumi.Bool(false),
VlanId: pulumi.String("string"),
},
NtpServers: pulumi.StringArray{
pulumi.String("string"),
},
PathPreferences: org.DeviceprofileGatewayPathPreferencesMap{
"string": &org.DeviceprofileGatewayPathPreferencesArgs{
Paths: org.DeviceprofileGatewayPathPreferencesPathArray{
&org.DeviceprofileGatewayPathPreferencesPathArgs{
Cost: pulumi.Int(0),
Disabled: pulumi.Bool(false),
GatewayIp: pulumi.String("string"),
InternetAccess: pulumi.Bool(false),
Name: pulumi.String("string"),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
TargetIps: pulumi.StringArray{
pulumi.String("string"),
},
Type: pulumi.String("string"),
WanName: pulumi.String("string"),
},
},
Strategy: pulumi.String("string"),
},
},
PortConfig: org.DeviceprofileGatewayPortConfigMap{
"string": &org.DeviceprofileGatewayPortConfigArgs{
Usage: pulumi.String("string"),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
DslType: pulumi.String("string"),
Aggregated: pulumi.Bool(false),
OuterVlanId: pulumi.Int(0),
Description: pulumi.String("string"),
PortNetwork: pulumi.String("string"),
Disabled: pulumi.Bool(false),
PoeDisabled: pulumi.Bool(false),
DslVci: pulumi.Int(0),
DslVpi: pulumi.Int(0),
Duplex: pulumi.String("string"),
IpConfig: &org.DeviceprofileGatewayPortConfigIpConfigArgs{
Dns: pulumi.StringArray{
pulumi.String("string"),
},
DnsSuffixes: pulumi.StringArray{
pulumi.String("string"),
},
Gateway: pulumi.String("string"),
Ip: pulumi.String("string"),
Netmask: pulumi.String("string"),
Network: pulumi.String("string"),
PoserPassword: pulumi.String("string"),
PppoeAuth: pulumi.String("string"),
PppoeUsername: pulumi.String("string"),
Type: pulumi.String("string"),
},
LteApn: pulumi.String("string"),
LteAuth: pulumi.String("string"),
LteBackup: pulumi.Bool(false),
LtePassword: pulumi.String("string"),
LteUsername: pulumi.String("string"),
Mtu: pulumi.Int(0),
Name: pulumi.String("string"),
AeDisableLacp: pulumi.Bool(false),
Critical: pulumi.Bool(false),
AeLacpForceUp: pulumi.Bool(false),
DisableAutoneg: pulumi.Bool(false),
PreserveDscp: pulumi.Bool(false),
Redundant: pulumi.Bool(false),
RethIdx: pulumi.Int(0),
RethNode: pulumi.String("string"),
RethNodes: pulumi.StringArray{
pulumi.String("string"),
},
Speed: pulumi.String("string"),
SsrNoVirtualMac: pulumi.Bool(false),
SvrPortRange: pulumi.String("string"),
TrafficShaping: &org.DeviceprofileGatewayPortConfigTrafficShapingArgs{
ClassPercentages: pulumi.IntArray{
pulumi.Int(0),
},
Enabled: pulumi.Bool(false),
},
AeIdx: pulumi.String("string"),
VlanId: pulumi.Int(0),
VpnPaths: org.DeviceprofileGatewayPortConfigVpnPathsMap{
"string": &org.DeviceprofileGatewayPortConfigVpnPathsArgs{
BfdProfile: pulumi.String("string"),
BfdUseTunnelMode: pulumi.Bool(false),
LinkName: pulumi.String("string"),
Preference: pulumi.Int(0),
Role: pulumi.String("string"),
TrafficShaping: &org.DeviceprofileGatewayPortConfigVpnPathsTrafficShapingArgs{
ClassPercentages: pulumi.IntArray{
pulumi.Int(0),
},
Enabled: pulumi.Bool(false),
},
},
},
WanArpPolicer: pulumi.String("string"),
WanExtIp: pulumi.String("string"),
WanExtraRoutes: org.DeviceprofileGatewayPortConfigWanExtraRoutesMap{
"string": &org.DeviceprofileGatewayPortConfigWanExtraRoutesArgs{
Via: pulumi.String("string"),
},
},
WanProbeOverride: &org.DeviceprofileGatewayPortConfigWanProbeOverrideArgs{
Ips: pulumi.StringArray{
pulumi.String("string"),
},
ProbeProfile: pulumi.String("string"),
},
WanSourceNat: &org.DeviceprofileGatewayPortConfigWanSourceNatArgs{
Disabled: pulumi.Bool(false),
NatPool: pulumi.String("string"),
},
WanType: pulumi.String("string"),
},
},
RouterId: pulumi.String("string"),
RoutingPolicies: org.DeviceprofileGatewayRoutingPoliciesMap{
"string": &org.DeviceprofileGatewayRoutingPoliciesArgs{
Terms: org.DeviceprofileGatewayRoutingPoliciesTermArray{
&org.DeviceprofileGatewayRoutingPoliciesTermArgs{
Action: &org.DeviceprofileGatewayRoutingPoliciesTermActionArgs{
Accept: pulumi.Bool(false),
AddCommunities: pulumi.StringArray{
pulumi.String("string"),
},
AddTargetVrfs: pulumi.StringArray{
pulumi.String("string"),
},
Communities: pulumi.StringArray{
pulumi.String("string"),
},
ExcludeAsPaths: pulumi.StringArray{
pulumi.String("string"),
},
ExcludeCommunities: pulumi.StringArray{
pulumi.String("string"),
},
ExportCommunitites: pulumi.StringArray{
pulumi.String("string"),
},
LocalPreference: pulumi.String("string"),
PrependAsPaths: pulumi.StringArray{
pulumi.String("string"),
},
},
Matching: &org.DeviceprofileGatewayRoutingPoliciesTermMatchingArgs{
AsPaths: pulumi.StringArray{
pulumi.String("string"),
},
Communities: pulumi.StringArray{
pulumi.String("string"),
},
Networks: pulumi.StringArray{
pulumi.String("string"),
},
Prefixes: pulumi.StringArray{
pulumi.String("string"),
},
Protocols: pulumi.StringArray{
pulumi.String("string"),
},
RouteExists: &org.DeviceprofileGatewayRoutingPoliciesTermMatchingRouteExistsArgs{
Route: pulumi.String("string"),
VrfName: pulumi.String("string"),
},
VpnNeighborMacs: pulumi.StringArray{
pulumi.String("string"),
},
VpnPathSla: &org.DeviceprofileGatewayRoutingPoliciesTermMatchingVpnPathSlaArgs{
MaxJitter: pulumi.Int(0),
MaxLatency: pulumi.Int(0),
MaxLoss: pulumi.Int(0),
},
VpnPaths: pulumi.StringArray{
pulumi.String("string"),
},
},
},
},
},
},
ServicePolicies: org.DeviceprofileGatewayServicePolicyArray{
&org.DeviceprofileGatewayServicePolicyArgs{
Action: pulumi.String("string"),
Appqoe: &org.DeviceprofileGatewayServicePolicyAppqoeArgs{
Enabled: pulumi.Bool(false),
},
Ewfs: org.DeviceprofileGatewayServicePolicyEwfArray{
&org.DeviceprofileGatewayServicePolicyEwfArgs{
AlertOnly: pulumi.Bool(false),
BlockMessage: pulumi.String("string"),
Enabled: pulumi.Bool(false),
Profile: pulumi.String("string"),
},
},
Idp: &org.DeviceprofileGatewayServicePolicyIdpArgs{
AlertOnly: pulumi.Bool(false),
Enabled: pulumi.Bool(false),
IdpprofileId: pulumi.String("string"),
Profile: pulumi.String("string"),
},
LocalRouting: pulumi.Bool(false),
Name: pulumi.String("string"),
PathPreference: pulumi.String("string"),
ServicepolicyId: pulumi.String("string"),
Services: pulumi.StringArray{
pulumi.String("string"),
},
Tenants: pulumi.StringArray{
pulumi.String("string"),
},
},
},
TunnelConfigs: org.DeviceprofileGatewayTunnelConfigsMap{
"string": &org.DeviceprofileGatewayTunnelConfigsArgs{
AutoProvision: &org.DeviceprofileGatewayTunnelConfigsAutoProvisionArgs{
Enable: pulumi.Bool(false),
Latlng: &org.DeviceprofileGatewayTunnelConfigsAutoProvisionLatlngArgs{
Lat: pulumi.Float64(0),
Lng: pulumi.Float64(0),
},
Primary: &org.DeviceprofileGatewayTunnelConfigsAutoProvisionPrimaryArgs{
NumHosts: pulumi.String("string"),
WanNames: pulumi.StringArray{
pulumi.String("string"),
},
},
Secondary: &org.DeviceprofileGatewayTunnelConfigsAutoProvisionSecondaryArgs{
NumHosts: pulumi.String("string"),
WanNames: pulumi.StringArray{
pulumi.String("string"),
},
},
},
IkeLifetime: pulumi.Int(0),
IkeMode: pulumi.String("string"),
IkeProposals: org.DeviceprofileGatewayTunnelConfigsIkeProposalArray{
&org.DeviceprofileGatewayTunnelConfigsIkeProposalArgs{
AuthAlgo: pulumi.String("string"),
DhGroup: pulumi.String("string"),
EncAlgo: pulumi.String("string"),
},
},
IpsecLifetime: pulumi.Int(0),
IpsecProposals: org.DeviceprofileGatewayTunnelConfigsIpsecProposalArray{
&org.DeviceprofileGatewayTunnelConfigsIpsecProposalArgs{
AuthAlgo: pulumi.String("string"),
DhGroup: pulumi.String("string"),
EncAlgo: pulumi.String("string"),
},
},
LocalId: pulumi.String("string"),
Mode: pulumi.String("string"),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
Primary: &org.DeviceprofileGatewayTunnelConfigsPrimaryArgs{
Hosts: pulumi.StringArray{
pulumi.String("string"),
},
InternalIps: pulumi.StringArray{
pulumi.String("string"),
},
ProbeIps: pulumi.StringArray{
pulumi.String("string"),
},
RemoteIds: pulumi.StringArray{
pulumi.String("string"),
},
WanNames: pulumi.StringArray{
pulumi.String("string"),
},
},
Probe: &org.DeviceprofileGatewayTunnelConfigsProbeArgs{
Interval: pulumi.Int(0),
Threshold: pulumi.Int(0),
Timeout: pulumi.Int(0),
Type: pulumi.String("string"),
},
Protocol: pulumi.String("string"),
Provider: pulumi.String("string"),
Psk: pulumi.String("string"),
Secondary: &org.DeviceprofileGatewayTunnelConfigsSecondaryArgs{
Hosts: pulumi.StringArray{
pulumi.String("string"),
},
InternalIps: pulumi.StringArray{
pulumi.String("string"),
},
ProbeIps: pulumi.StringArray{
pulumi.String("string"),
},
RemoteIds: pulumi.StringArray{
pulumi.String("string"),
},
WanNames: pulumi.StringArray{
pulumi.String("string"),
},
},
Version: pulumi.String("string"),
},
},
AdditionalConfigCmds: pulumi.StringArray{
pulumi.String("string"),
},
VrfConfig: &org.DeviceprofileGatewayVrfConfigArgs{
Enabled: pulumi.Bool(false),
},
Networks: org.DeviceprofileGatewayNetworkArray{
&org.DeviceprofileGatewayNetworkArgs{
Name: pulumi.String("string"),
Subnet: pulumi.String("string"),
InternalAccess: &org.DeviceprofileGatewayNetworkInternalAccessArgs{
Enabled: pulumi.Bool(false),
},
DisallowMistServices: pulumi.Bool(false),
InternetAccess: &org.DeviceprofileGatewayNetworkInternetAccessArgs{
CreateSimpleServicePolicy: pulumi.Bool(false),
DestinationNat: org.DeviceprofileGatewayNetworkInternetAccessDestinationNatMap{
"string": &org.DeviceprofileGatewayNetworkInternetAccessDestinationNatArgs{
InternalIp: pulumi.String("string"),
Name: pulumi.String("string"),
Port: pulumi.Int(0),
},
},
Enabled: pulumi.Bool(false),
Restricted: pulumi.Bool(false),
StaticNat: org.DeviceprofileGatewayNetworkInternetAccessStaticNatMap{
"string": &org.DeviceprofileGatewayNetworkInternetAccessStaticNatArgs{
InternalIp: pulumi.String("string"),
Name: pulumi.String("string"),
WanName: pulumi.String("string"),
},
},
},
Isolation: pulumi.Bool(false),
Multicast: &org.DeviceprofileGatewayNetworkMulticastArgs{
DisableIgmp: pulumi.Bool(false),
Enabled: pulumi.Bool(false),
Groups: org.DeviceprofileGatewayNetworkMulticastGroupsMap{
"string": &org.DeviceprofileGatewayNetworkMulticastGroupsArgs{
RpIp: pulumi.String("string"),
},
},
},
Gateway6: pulumi.String("string"),
RoutedForNetworks: pulumi.StringArray{
pulumi.String("string"),
},
Gateway: pulumi.String("string"),
Subnet6: pulumi.String("string"),
Tenants: org.DeviceprofileGatewayNetworkTenantsMap{
"string": &org.DeviceprofileGatewayNetworkTenantsArgs{
Addresses: pulumi.StringArray{
pulumi.String("string"),
},
},
},
VlanId: pulumi.String("string"),
VpnAccess: org.DeviceprofileGatewayNetworkVpnAccessMap{
"string": &org.DeviceprofileGatewayNetworkVpnAccessArgs{
AdvertisedSubnet: pulumi.String("string"),
AllowPing: pulumi.Bool(false),
DestinationNat: org.DeviceprofileGatewayNetworkVpnAccessDestinationNatMap{
"string": &org.DeviceprofileGatewayNetworkVpnAccessDestinationNatArgs{
InternalIp: pulumi.String("string"),
Name: pulumi.String("string"),
Port: pulumi.Int(0),
},
},
NatPool: pulumi.String("string"),
NoReadvertiseToLanBgp: pulumi.Bool(false),
NoReadvertiseToLanOspf: pulumi.Bool(false),
NoReadvertiseToOverlay: pulumi.Bool(false),
OtherVrfs: pulumi.StringArray{
pulumi.String("string"),
},
Routed: pulumi.Bool(false),
SourceNat: &org.DeviceprofileGatewayNetworkVpnAccessSourceNatArgs{
ExternalIp: pulumi.String("string"),
},
StaticNat: org.DeviceprofileGatewayNetworkVpnAccessStaticNatMap{
"string": &org.DeviceprofileGatewayNetworkVpnAccessStaticNatArgs{
InternalIp: pulumi.String("string"),
Name: pulumi.String("string"),
WanName: pulumi.String("string"),
},
},
SummarizedSubnet: pulumi.String("string"),
SummarizedSubnetToLanBgp: pulumi.String("string"),
SummarizedSubnetToLanOspf: pulumi.String("string"),
},
},
},
},
})
var deviceprofileGatewayResource = new DeviceprofileGateway("deviceprofileGatewayResource", DeviceprofileGatewayArgs.builder()
.orgId("string")
.ntpOverride(false)
.tunnelProviderOptions(DeviceprofileGatewayTunnelProviderOptionsArgs.builder()
.jse(DeviceprofileGatewayTunnelProviderOptionsJseArgs.builder()
.name("string")
.numUsers(0)
.build())
.zscaler(DeviceprofileGatewayTunnelProviderOptionsZscalerArgs.builder()
.aupAcceptanceRequired(false)
.aupExpire(0)
.aupSslProxy(false)
.downloadMbps(0)
.enableAup(false)
.enableCaution(false)
.enforceAuthentication(false)
.name("string")
.subLocations(DeviceprofileGatewayTunnelProviderOptionsZscalerSubLocationArgs.builder()
.aupAcceptanceRequired(false)
.aupExpire(0)
.aupSslProxy(false)
.downloadMbps(0)
.enableAup(false)
.enableCaution(false)
.enforceAuthentication(false)
.subnets("string")
.uploadMbps(0)
.build())
.uploadMbps(0)
.useXff(false)
.build())
.build())
.dnsOverride(false)
.dnsServers("string")
.dnsSuffixes("string")
.extraRoutes(Map.of("string", Map.of("via", "string")))
.extraRoutes6(Map.of("string", Map.of("via", "string")))
.idpProfiles(Map.of("string", Map.ofEntries(
Map.entry("baseProfile", "string"),
Map.entry("name", "string"),
Map.entry("orgId", "string"),
Map.entry("overwrites", Map.ofEntries(
Map.entry("action", "string"),
Map.entry("matching", Map.ofEntries(
Map.entry("attackNames", "string"),
Map.entry("dstSubnets", "string"),
Map.entry("severities", "string")
)),
Map.entry("name", "string")
))
)))
.ipConfigs(Map.of("string", Map.ofEntries(
Map.entry("ip", "string"),
Map.entry("netmask", "string"),
Map.entry("secondaryIps", "string"),
Map.entry("type", "string")
)))
.name("string")
.vrfInstances(Map.of("string", Map.of("networks", "string")))
.dhcpdConfig(DeviceprofileGatewayDhcpdConfigArgs.builder()
.config(Map.of("string", Map.ofEntries(
Map.entry("dnsServers", "string"),
Map.entry("dnsSuffixes", "string"),
Map.entry("fixedBindings", Map.of("string", Map.ofEntries(
Map.entry("ip", "string"),
Map.entry("name", "string")
))),
Map.entry("gateway", "string"),
Map.entry("ipEnd", "string"),
Map.entry("ipEnd6", "string"),
Map.entry("ipStart", "string"),
Map.entry("ipStart6", "string"),
Map.entry("leaseTime", 0),
Map.entry("options", Map.of("string", Map.ofEntries(
Map.entry("type", "string"),
Map.entry("value", "string")
))),
Map.entry("serverIdOverride", false),
Map.entry("servers", "string"),
Map.entry("servers6s", "string"),
Map.entry("type", "string"),
Map.entry("type6", "string"),
Map.entry("vendorEncapsulated", Map.of("string", Map.ofEntries(
Map.entry("type", "string"),
Map.entry("value", "string")
)))
)))
.enabled(false)
.build())
.bgpConfig(Map.of("string", Map.ofEntries(
Map.entry("authKey", "string"),
Map.entry("bfdMinimumInterval", 0),
Map.entry("bfdMultiplier", 0),
Map.entry("disableBfd", false),
Map.entry("export", "string"),
Map.entry("exportPolicy", "string"),
Map.entry("extendedV4Nexthop", false),
Map.entry("gracefulRestartTime", 0),
Map.entry("holdTime", 0),
Map.entry("import", "string"),
Map.entry("importPolicy", "string"),
Map.entry("localAs", 0),
Map.entry("neighborAs", 0),
Map.entry("neighbors", Map.of("string", Map.ofEntries(
Map.entry("disabled", false),
Map.entry("exportPolicy", "string"),
Map.entry("holdTime", 0),
Map.entry("importPolicy", "string"),
Map.entry("multihopTtl", 0),
Map.entry("neighborAs", 0)
))),
Map.entry("networks", "string"),
Map.entry("noReadvertiseToOverlay", false),
Map.entry("tunnelName", "string"),
Map.entry("type", "string"),
Map.entry("via", "string"),
Map.entry("vpnName", "string"),
Map.entry("wanName", "string")
)))
.oobIpConfig(DeviceprofileGatewayOobIpConfigArgs.builder()
.gateway("string")
.ip("string")
.netmask("string")
.node1(DeviceprofileGatewayOobIpConfigNode1Args.builder()
.gateway("string")
.ip("string")
.netmask("string")
.type("string")
.useMgmtVrf(false)
.useMgmtVrfForHostOut(false)
.vlanId("string")
.build())
.type("string")
.useMgmtVrf(false)
.useMgmtVrfForHostOut(false)
.vlanId("string")
.build())
.ntpServers("string")
.pathPreferences(Map.of("string", Map.ofEntries(
Map.entry("paths", Map.ofEntries(
Map.entry("cost", 0),
Map.entry("disabled", false),
Map.entry("gatewayIp", "string"),
Map.entry("internetAccess", false),
Map.entry("name", "string"),
Map.entry("networks", "string"),
Map.entry("targetIps", "string"),
Map.entry("type", "string"),
Map.entry("wanName", "string")
)),
Map.entry("strategy", "string")
)))
.portConfig(Map.of("string", Map.ofEntries(
Map.entry("usage", "string"),
Map.entry("networks", "string"),
Map.entry("dslType", "string"),
Map.entry("aggregated", false),
Map.entry("outerVlanId", 0),
Map.entry("description", "string"),
Map.entry("portNetwork", "string"),
Map.entry("disabled", false),
Map.entry("poeDisabled", false),
Map.entry("dslVci", 0),
Map.entry("dslVpi", 0),
Map.entry("duplex", "string"),
Map.entry("ipConfig", Map.ofEntries(
Map.entry("dns", "string"),
Map.entry("dnsSuffixes", "string"),
Map.entry("gateway", "string"),
Map.entry("ip", "string"),
Map.entry("netmask", "string"),
Map.entry("network", "string"),
Map.entry("poserPassword", "string"),
Map.entry("pppoeAuth", "string"),
Map.entry("pppoeUsername", "string"),
Map.entry("type", "string")
)),
Map.entry("lteApn", "string"),
Map.entry("lteAuth", "string"),
Map.entry("lteBackup", false),
Map.entry("ltePassword", "string"),
Map.entry("lteUsername", "string"),
Map.entry("mtu", 0),
Map.entry("name", "string"),
Map.entry("aeDisableLacp", false),
Map.entry("critical", false),
Map.entry("aeLacpForceUp", false),
Map.entry("disableAutoneg", false),
Map.entry("preserveDscp", false),
Map.entry("redundant", false),
Map.entry("rethIdx", 0),
Map.entry("rethNode", "string"),
Map.entry("rethNodes", "string"),
Map.entry("speed", "string"),
Map.entry("ssrNoVirtualMac", false),
Map.entry("svrPortRange", "string"),
Map.entry("trafficShaping", Map.ofEntries(
Map.entry("classPercentages", 0),
Map.entry("enabled", false)
)),
Map.entry("aeIdx", "string"),
Map.entry("vlanId", 0),
Map.entry("vpnPaths", Map.of("string", Map.ofEntries(
Map.entry("bfdProfile", "string"),
Map.entry("bfdUseTunnelMode", false),
Map.entry("linkName", "string"),
Map.entry("preference", 0),
Map.entry("role", "string"),
Map.entry("trafficShaping", Map.ofEntries(
Map.entry("classPercentages", 0),
Map.entry("enabled", false)
))
))),
Map.entry("wanArpPolicer", "string"),
Map.entry("wanExtIp", "string"),
Map.entry("wanExtraRoutes", Map.of("string", Map.of("via", "string"))),
Map.entry("wanProbeOverride", Map.ofEntries(
Map.entry("ips", "string"),
Map.entry("probeProfile", "string")
)),
Map.entry("wanSourceNat", Map.ofEntries(
Map.entry("disabled", false),
Map.entry("natPool", "string")
)),
Map.entry("wanType", "string")
)))
.routerId("string")
.routingPolicies(Map.of("string", Map.of("terms", Map.ofEntries(
Map.entry("action", Map.ofEntries(
Map.entry("accept", false),
Map.entry("addCommunities", "string"),
Map.entry("addTargetVrfs", "string"),
Map.entry("communities", "string"),
Map.entry("excludeAsPaths", "string"),
Map.entry("excludeCommunities", "string"),
Map.entry("exportCommunitites", "string"),
Map.entry("localPreference", "string"),
Map.entry("prependAsPaths", "string")
)),
Map.entry("matching", Map.ofEntries(
Map.entry("asPaths", "string"),
Map.entry("communities", "string"),
Map.entry("networks", "string"),
Map.entry("prefixes", "string"),
Map.entry("protocols", "string"),
Map.entry("routeExists", Map.ofEntries(
Map.entry("route", "string"),
Map.entry("vrfName", "string")
)),
Map.entry("vpnNeighborMacs", "string"),
Map.entry("vpnPathSla", Map.ofEntries(
Map.entry("maxJitter", 0),
Map.entry("maxLatency", 0),
Map.entry("maxLoss", 0)
)),
Map.entry("vpnPaths", "string")
))
))))
.servicePolicies(DeviceprofileGatewayServicePolicyArgs.builder()
.action("string")
.appqoe(DeviceprofileGatewayServicePolicyAppqoeArgs.builder()
.enabled(false)
.build())
.ewfs(DeviceprofileGatewayServicePolicyEwfArgs.builder()
.alertOnly(false)
.blockMessage("string")
.enabled(false)
.profile("string")
.build())
.idp(DeviceprofileGatewayServicePolicyIdpArgs.builder()
.alertOnly(false)
.enabled(false)
.idpprofileId("string")
.profile("string")
.build())
.localRouting(false)
.name("string")
.pathPreference("string")
.servicepolicyId("string")
.services("string")
.tenants("string")
.build())
.tunnelConfigs(Map.of("string", Map.ofEntries(
Map.entry("autoProvision", Map.ofEntries(
Map.entry("enable", false),
Map.entry("latlng", Map.ofEntries(
Map.entry("lat", 0),
Map.entry("lng", 0)
)),
Map.entry("primary", Map.ofEntries(
Map.entry("numHosts", "string"),
Map.entry("wanNames", "string")
)),
Map.entry("secondary", Map.ofEntries(
Map.entry("numHosts", "string"),
Map.entry("wanNames", "string")
))
)),
Map.entry("ikeLifetime", 0),
Map.entry("ikeMode", "string"),
Map.entry("ikeProposals", Map.ofEntries(
Map.entry("authAlgo", "string"),
Map.entry("dhGroup", "string"),
Map.entry("encAlgo", "string")
)),
Map.entry("ipsecLifetime", 0),
Map.entry("ipsecProposals", Map.ofEntries(
Map.entry("authAlgo", "string"),
Map.entry("dhGroup", "string"),
Map.entry("encAlgo", "string")
)),
Map.entry("localId", "string"),
Map.entry("mode", "string"),
Map.entry("networks", "string"),
Map.entry("primary", Map.ofEntries(
Map.entry("hosts", "string"),
Map.entry("internalIps", "string"),
Map.entry("probeIps", "string"),
Map.entry("remoteIds", "string"),
Map.entry("wanNames", "string")
)),
Map.entry("probe", Map.ofEntries(
Map.entry("interval", 0),
Map.entry("threshold", 0),
Map.entry("timeout", 0),
Map.entry("type", "string")
)),
Map.entry("protocol", "string"),
Map.entry("provider", "string"),
Map.entry("psk", "string"),
Map.entry("secondary", Map.ofEntries(
Map.entry("hosts", "string"),
Map.entry("internalIps", "string"),
Map.entry("probeIps", "string"),
Map.entry("remoteIds", "string"),
Map.entry("wanNames", "string")
)),
Map.entry("version", "string")
)))
.additionalConfigCmds("string")
.vrfConfig(DeviceprofileGatewayVrfConfigArgs.builder()
.enabled(false)
.build())
.networks(DeviceprofileGatewayNetworkArgs.builder()
.name("string")
.subnet("string")
.internalAccess(DeviceprofileGatewayNetworkInternalAccessArgs.builder()
.enabled(false)
.build())
.disallowMistServices(false)
.internetAccess(DeviceprofileGatewayNetworkInternetAccessArgs.builder()
.createSimpleServicePolicy(false)
.destinationNat(Map.of("string", Map.ofEntries(
Map.entry("internalIp", "string"),
Map.entry("name", "string"),
Map.entry("port", 0)
)))
.enabled(false)
.restricted(false)
.staticNat(Map.of("string", Map.ofEntries(
Map.entry("internalIp", "string"),
Map.entry("name", "string"),
Map.entry("wanName", "string")
)))
.build())
.isolation(false)
.multicast(DeviceprofileGatewayNetworkMulticastArgs.builder()
.disableIgmp(false)
.enabled(false)
.groups(Map.of("string", Map.of("rpIp", "string")))
.build())
.gateway6("string")
.routedForNetworks("string")
.gateway("string")
.subnet6("string")
.tenants(Map.of("string", Map.of("addresses", "string")))
.vlanId("string")
.vpnAccess(Map.of("string", Map.ofEntries(
Map.entry("advertisedSubnet", "string"),
Map.entry("allowPing", false),
Map.entry("destinationNat", Map.of("string", Map.ofEntries(
Map.entry("internalIp", "string"),
Map.entry("name", "string"),
Map.entry("port", 0)
))),
Map.entry("natPool", "string"),
Map.entry("noReadvertiseToLanBgp", false),
Map.entry("noReadvertiseToLanOspf", false),
Map.entry("noReadvertiseToOverlay", false),
Map.entry("otherVrfs", "string"),
Map.entry("routed", false),
Map.entry("sourceNat", Map.of("externalIp", "string")),
Map.entry("staticNat", Map.of("string", Map.ofEntries(
Map.entry("internalIp", "string"),
Map.entry("name", "string"),
Map.entry("wanName", "string")
))),
Map.entry("summarizedSubnet", "string"),
Map.entry("summarizedSubnetToLanBgp", "string"),
Map.entry("summarizedSubnetToLanOspf", "string")
)))
.build())
.build());
deviceprofile_gateway_resource = junipermist.org.DeviceprofileGateway("deviceprofileGatewayResource",
org_id="string",
ntp_override=False,
tunnel_provider_options={
"jse": {
"name": "string",
"num_users": 0,
},
"zscaler": {
"aup_acceptance_required": False,
"aup_expire": 0,
"aup_ssl_proxy": False,
"download_mbps": 0,
"enable_aup": False,
"enable_caution": False,
"enforce_authentication": False,
"name": "string",
"sub_locations": [{
"aup_acceptance_required": False,
"aup_expire": 0,
"aup_ssl_proxy": False,
"download_mbps": 0,
"enable_aup": False,
"enable_caution": False,
"enforce_authentication": False,
"subnets": ["string"],
"upload_mbps": 0,
}],
"upload_mbps": 0,
"use_xff": False,
},
},
dns_override=False,
dns_servers=["string"],
dns_suffixes=["string"],
extra_routes={
"string": {
"via": "string",
},
},
extra_routes6={
"string": {
"via": "string",
},
},
idp_profiles={
"string": {
"base_profile": "string",
"name": "string",
"org_id": "string",
"overwrites": [{
"action": "string",
"matching": {
"attack_names": ["string"],
"dst_subnets": ["string"],
"severities": ["string"],
},
"name": "string",
}],
},
},
ip_configs={
"string": {
"ip": "string",
"netmask": "string",
"secondary_ips": ["string"],
"type": "string",
},
},
name="string",
vrf_instances={
"string": {
"networks": ["string"],
},
},
dhcpd_config={
"config": {
"string": {
"dns_servers": ["string"],
"dns_suffixes": ["string"],
"fixed_bindings": {
"string": {
"ip": "string",
"name": "string",
},
},
"gateway": "string",
"ip_end": "string",
"ip_end6": "string",
"ip_start": "string",
"ip_start6": "string",
"lease_time": 0,
"options": {
"string": {
"type": "string",
"value": "string",
},
},
"server_id_override": False,
"servers": ["string"],
"servers6s": ["string"],
"type": "string",
"type6": "string",
"vendor_encapsulated": {
"string": {
"type": "string",
"value": "string",
},
},
},
},
"enabled": False,
},
bgp_config={
"string": {
"auth_key": "string",
"bfd_minimum_interval": 0,
"bfd_multiplier": 0,
"disable_bfd": False,
"export": "string",
"export_policy": "string",
"extended_v4_nexthop": False,
"graceful_restart_time": 0,
"hold_time": 0,
"import_": "string",
"import_policy": "string",
"local_as": 0,
"neighbor_as": 0,
"neighbors": {
"string": {
"disabled": False,
"export_policy": "string",
"hold_time": 0,
"import_policy": "string",
"multihop_ttl": 0,
"neighbor_as": 0,
},
},
"networks": ["string"],
"no_readvertise_to_overlay": False,
"tunnel_name": "string",
"type": "string",
"via": "string",
"vpn_name": "string",
"wan_name": "string",
},
},
oob_ip_config={
"gateway": "string",
"ip": "string",
"netmask": "string",
"node1": {
"gateway": "string",
"ip": "string",
"netmask": "string",
"type": "string",
"use_mgmt_vrf": False,
"use_mgmt_vrf_for_host_out": False,
"vlan_id": "string",
},
"type": "string",
"use_mgmt_vrf": False,
"use_mgmt_vrf_for_host_out": False,
"vlan_id": "string",
},
ntp_servers=["string"],
path_preferences={
"string": {
"paths": [{
"cost": 0,
"disabled": False,
"gateway_ip": "string",
"internet_access": False,
"name": "string",
"networks": ["string"],
"target_ips": ["string"],
"type": "string",
"wan_name": "string",
}],
"strategy": "string",
},
},
port_config={
"string": {
"usage": "string",
"networks": ["string"],
"dsl_type": "string",
"aggregated": False,
"outer_vlan_id": 0,
"description": "string",
"port_network": "string",
"disabled": False,
"poe_disabled": False,
"dsl_vci": 0,
"dsl_vpi": 0,
"duplex": "string",
"ip_config": {
"dns": ["string"],
"dns_suffixes": ["string"],
"gateway": "string",
"ip": "string",
"netmask": "string",
"network": "string",
"poser_password": "string",
"pppoe_auth": "string",
"pppoe_username": "string",
"type": "string",
},
"lte_apn": "string",
"lte_auth": "string",
"lte_backup": False,
"lte_password": "string",
"lte_username": "string",
"mtu": 0,
"name": "string",
"ae_disable_lacp": False,
"critical": False,
"ae_lacp_force_up": False,
"disable_autoneg": False,
"preserve_dscp": False,
"redundant": False,
"reth_idx": 0,
"reth_node": "string",
"reth_nodes": ["string"],
"speed": "string",
"ssr_no_virtual_mac": False,
"svr_port_range": "string",
"traffic_shaping": {
"class_percentages": [0],
"enabled": False,
},
"ae_idx": "string",
"vlan_id": 0,
"vpn_paths": {
"string": {
"bfd_profile": "string",
"bfd_use_tunnel_mode": False,
"link_name": "string",
"preference": 0,
"role": "string",
"traffic_shaping": {
"class_percentages": [0],
"enabled": False,
},
},
},
"wan_arp_policer": "string",
"wan_ext_ip": "string",
"wan_extra_routes": {
"string": {
"via": "string",
},
},
"wan_probe_override": {
"ips": ["string"],
"probe_profile": "string",
},
"wan_source_nat": {
"disabled": False,
"nat_pool": "string",
},
"wan_type": "string",
},
},
router_id="string",
routing_policies={
"string": {
"terms": [{
"action": {
"accept": False,
"add_communities": ["string"],
"add_target_vrfs": ["string"],
"communities": ["string"],
"exclude_as_paths": ["string"],
"exclude_communities": ["string"],
"export_communitites": ["string"],
"local_preference": "string",
"prepend_as_paths": ["string"],
},
"matching": {
"as_paths": ["string"],
"communities": ["string"],
"networks": ["string"],
"prefixes": ["string"],
"protocols": ["string"],
"route_exists": {
"route": "string",
"vrf_name": "string",
},
"vpn_neighbor_macs": ["string"],
"vpn_path_sla": {
"max_jitter": 0,
"max_latency": 0,
"max_loss": 0,
},
"vpn_paths": ["string"],
},
}],
},
},
service_policies=[{
"action": "string",
"appqoe": {
"enabled": False,
},
"ewfs": [{
"alert_only": False,
"block_message": "string",
"enabled": False,
"profile": "string",
}],
"idp": {
"alert_only": False,
"enabled": False,
"idpprofile_id": "string",
"profile": "string",
},
"local_routing": False,
"name": "string",
"path_preference": "string",
"servicepolicy_id": "string",
"services": ["string"],
"tenants": ["string"],
}],
tunnel_configs={
"string": {
"auto_provision": {
"enable": False,
"latlng": {
"lat": 0,
"lng": 0,
},
"primary": {
"num_hosts": "string",
"wan_names": ["string"],
},
"secondary": {
"num_hosts": "string",
"wan_names": ["string"],
},
},
"ike_lifetime": 0,
"ike_mode": "string",
"ike_proposals": [{
"auth_algo": "string",
"dh_group": "string",
"enc_algo": "string",
}],
"ipsec_lifetime": 0,
"ipsec_proposals": [{
"auth_algo": "string",
"dh_group": "string",
"enc_algo": "string",
}],
"local_id": "string",
"mode": "string",
"networks": ["string"],
"primary": {
"hosts": ["string"],
"internal_ips": ["string"],
"probe_ips": ["string"],
"remote_ids": ["string"],
"wan_names": ["string"],
},
"probe": {
"interval": 0,
"threshold": 0,
"timeout": 0,
"type": "string",
},
"protocol": "string",
"provider": "string",
"psk": "string",
"secondary": {
"hosts": ["string"],
"internal_ips": ["string"],
"probe_ips": ["string"],
"remote_ids": ["string"],
"wan_names": ["string"],
},
"version": "string",
},
},
additional_config_cmds=["string"],
vrf_config={
"enabled": False,
},
networks=[{
"name": "string",
"subnet": "string",
"internal_access": {
"enabled": False,
},
"disallow_mist_services": False,
"internet_access": {
"create_simple_service_policy": False,
"destination_nat": {
"string": {
"internal_ip": "string",
"name": "string",
"port": 0,
},
},
"enabled": False,
"restricted": False,
"static_nat": {
"string": {
"internal_ip": "string",
"name": "string",
"wan_name": "string",
},
},
},
"isolation": False,
"multicast": {
"disable_igmp": False,
"enabled": False,
"groups": {
"string": {
"rp_ip": "string",
},
},
},
"gateway6": "string",
"routed_for_networks": ["string"],
"gateway": "string",
"subnet6": "string",
"tenants": {
"string": {
"addresses": ["string"],
},
},
"vlan_id": "string",
"vpn_access": {
"string": {
"advertised_subnet": "string",
"allow_ping": False,
"destination_nat": {
"string": {
"internal_ip": "string",
"name": "string",
"port": 0,
},
},
"nat_pool": "string",
"no_readvertise_to_lan_bgp": False,
"no_readvertise_to_lan_ospf": False,
"no_readvertise_to_overlay": False,
"other_vrfs": ["string"],
"routed": False,
"source_nat": {
"external_ip": "string",
},
"static_nat": {
"string": {
"internal_ip": "string",
"name": "string",
"wan_name": "string",
},
},
"summarized_subnet": "string",
"summarized_subnet_to_lan_bgp": "string",
"summarized_subnet_to_lan_ospf": "string",
},
},
}])
const deviceprofileGatewayResource = new junipermist.org.DeviceprofileGateway("deviceprofileGatewayResource", {
orgId: "string",
ntpOverride: false,
tunnelProviderOptions: {
jse: {
name: "string",
numUsers: 0,
},
zscaler: {
aupAcceptanceRequired: false,
aupExpire: 0,
aupSslProxy: false,
downloadMbps: 0,
enableAup: false,
enableCaution: false,
enforceAuthentication: false,
name: "string",
subLocations: [{
aupAcceptanceRequired: false,
aupExpire: 0,
aupSslProxy: false,
downloadMbps: 0,
enableAup: false,
enableCaution: false,
enforceAuthentication: false,
subnets: ["string"],
uploadMbps: 0,
}],
uploadMbps: 0,
useXff: false,
},
},
dnsOverride: false,
dnsServers: ["string"],
dnsSuffixes: ["string"],
extraRoutes: {
string: {
via: "string",
},
},
extraRoutes6: {
string: {
via: "string",
},
},
idpProfiles: {
string: {
baseProfile: "string",
name: "string",
orgId: "string",
overwrites: [{
action: "string",
matching: {
attackNames: ["string"],
dstSubnets: ["string"],
severities: ["string"],
},
name: "string",
}],
},
},
ipConfigs: {
string: {
ip: "string",
netmask: "string",
secondaryIps: ["string"],
type: "string",
},
},
name: "string",
vrfInstances: {
string: {
networks: ["string"],
},
},
dhcpdConfig: {
config: {
string: {
dnsServers: ["string"],
dnsSuffixes: ["string"],
fixedBindings: {
string: {
ip: "string",
name: "string",
},
},
gateway: "string",
ipEnd: "string",
ipEnd6: "string",
ipStart: "string",
ipStart6: "string",
leaseTime: 0,
options: {
string: {
type: "string",
value: "string",
},
},
serverIdOverride: false,
servers: ["string"],
servers6s: ["string"],
type: "string",
type6: "string",
vendorEncapsulated: {
string: {
type: "string",
value: "string",
},
},
},
},
enabled: false,
},
bgpConfig: {
string: {
authKey: "string",
bfdMinimumInterval: 0,
bfdMultiplier: 0,
disableBfd: false,
"export": "string",
exportPolicy: "string",
extendedV4Nexthop: false,
gracefulRestartTime: 0,
holdTime: 0,
"import": "string",
importPolicy: "string",
localAs: 0,
neighborAs: 0,
neighbors: {
string: {
disabled: false,
exportPolicy: "string",
holdTime: 0,
importPolicy: "string",
multihopTtl: 0,
neighborAs: 0,
},
},
networks: ["string"],
noReadvertiseToOverlay: false,
tunnelName: "string",
type: "string",
via: "string",
vpnName: "string",
wanName: "string",
},
},
oobIpConfig: {
gateway: "string",
ip: "string",
netmask: "string",
node1: {
gateway: "string",
ip: "string",
netmask: "string",
type: "string",
useMgmtVrf: false,
useMgmtVrfForHostOut: false,
vlanId: "string",
},
type: "string",
useMgmtVrf: false,
useMgmtVrfForHostOut: false,
vlanId: "string",
},
ntpServers: ["string"],
pathPreferences: {
string: {
paths: [{
cost: 0,
disabled: false,
gatewayIp: "string",
internetAccess: false,
name: "string",
networks: ["string"],
targetIps: ["string"],
type: "string",
wanName: "string",
}],
strategy: "string",
},
},
portConfig: {
string: {
usage: "string",
networks: ["string"],
dslType: "string",
aggregated: false,
outerVlanId: 0,
description: "string",
portNetwork: "string",
disabled: false,
poeDisabled: false,
dslVci: 0,
dslVpi: 0,
duplex: "string",
ipConfig: {
dns: ["string"],
dnsSuffixes: ["string"],
gateway: "string",
ip: "string",
netmask: "string",
network: "string",
poserPassword: "string",
pppoeAuth: "string",
pppoeUsername: "string",
type: "string",
},
lteApn: "string",
lteAuth: "string",
lteBackup: false,
ltePassword: "string",
lteUsername: "string",
mtu: 0,
name: "string",
aeDisableLacp: false,
critical: false,
aeLacpForceUp: false,
disableAutoneg: false,
preserveDscp: false,
redundant: false,
rethIdx: 0,
rethNode: "string",
rethNodes: ["string"],
speed: "string",
ssrNoVirtualMac: false,
svrPortRange: "string",
trafficShaping: {
classPercentages: [0],
enabled: false,
},
aeIdx: "string",
vlanId: 0,
vpnPaths: {
string: {
bfdProfile: "string",
bfdUseTunnelMode: false,
linkName: "string",
preference: 0,
role: "string",
trafficShaping: {
classPercentages: [0],
enabled: false,
},
},
},
wanArpPolicer: "string",
wanExtIp: "string",
wanExtraRoutes: {
string: {
via: "string",
},
},
wanProbeOverride: {
ips: ["string"],
probeProfile: "string",
},
wanSourceNat: {
disabled: false,
natPool: "string",
},
wanType: "string",
},
},
routerId: "string",
routingPolicies: {
string: {
terms: [{
action: {
accept: false,
addCommunities: ["string"],
addTargetVrfs: ["string"],
communities: ["string"],
excludeAsPaths: ["string"],
excludeCommunities: ["string"],
exportCommunitites: ["string"],
localPreference: "string",
prependAsPaths: ["string"],
},
matching: {
asPaths: ["string"],
communities: ["string"],
networks: ["string"],
prefixes: ["string"],
protocols: ["string"],
routeExists: {
route: "string",
vrfName: "string",
},
vpnNeighborMacs: ["string"],
vpnPathSla: {
maxJitter: 0,
maxLatency: 0,
maxLoss: 0,
},
vpnPaths: ["string"],
},
}],
},
},
servicePolicies: [{
action: "string",
appqoe: {
enabled: false,
},
ewfs: [{
alertOnly: false,
blockMessage: "string",
enabled: false,
profile: "string",
}],
idp: {
alertOnly: false,
enabled: false,
idpprofileId: "string",
profile: "string",
},
localRouting: false,
name: "string",
pathPreference: "string",
servicepolicyId: "string",
services: ["string"],
tenants: ["string"],
}],
tunnelConfigs: {
string: {
autoProvision: {
enable: false,
latlng: {
lat: 0,
lng: 0,
},
primary: {
numHosts: "string",
wanNames: ["string"],
},
secondary: {
numHosts: "string",
wanNames: ["string"],
},
},
ikeLifetime: 0,
ikeMode: "string",
ikeProposals: [{
authAlgo: "string",
dhGroup: "string",
encAlgo: "string",
}],
ipsecLifetime: 0,
ipsecProposals: [{
authAlgo: "string",
dhGroup: "string",
encAlgo: "string",
}],
localId: "string",
mode: "string",
networks: ["string"],
primary: {
hosts: ["string"],
internalIps: ["string"],
probeIps: ["string"],
remoteIds: ["string"],
wanNames: ["string"],
},
probe: {
interval: 0,
threshold: 0,
timeout: 0,
type: "string",
},
protocol: "string",
provider: "string",
psk: "string",
secondary: {
hosts: ["string"],
internalIps: ["string"],
probeIps: ["string"],
remoteIds: ["string"],
wanNames: ["string"],
},
version: "string",
},
},
additionalConfigCmds: ["string"],
vrfConfig: {
enabled: false,
},
networks: [{
name: "string",
subnet: "string",
internalAccess: {
enabled: false,
},
disallowMistServices: false,
internetAccess: {
createSimpleServicePolicy: false,
destinationNat: {
string: {
internalIp: "string",
name: "string",
port: 0,
},
},
enabled: false,
restricted: false,
staticNat: {
string: {
internalIp: "string",
name: "string",
wanName: "string",
},
},
},
isolation: false,
multicast: {
disableIgmp: false,
enabled: false,
groups: {
string: {
rpIp: "string",
},
},
},
gateway6: "string",
routedForNetworks: ["string"],
gateway: "string",
subnet6: "string",
tenants: {
string: {
addresses: ["string"],
},
},
vlanId: "string",
vpnAccess: {
string: {
advertisedSubnet: "string",
allowPing: false,
destinationNat: {
string: {
internalIp: "string",
name: "string",
port: 0,
},
},
natPool: "string",
noReadvertiseToLanBgp: false,
noReadvertiseToLanOspf: false,
noReadvertiseToOverlay: false,
otherVrfs: ["string"],
routed: false,
sourceNat: {
externalIp: "string",
},
staticNat: {
string: {
internalIp: "string",
name: "string",
wanName: "string",
},
},
summarizedSubnet: "string",
summarizedSubnetToLanBgp: "string",
summarizedSubnetToLanOspf: "string",
},
},
}],
});
type: junipermist:org:DeviceprofileGateway
properties:
additionalConfigCmds:
- string
bgpConfig:
string:
authKey: string
bfdMinimumInterval: 0
bfdMultiplier: 0
disableBfd: false
export: string
exportPolicy: string
extendedV4Nexthop: false
gracefulRestartTime: 0
holdTime: 0
import: string
importPolicy: string
localAs: 0
neighborAs: 0
neighbors:
string:
disabled: false
exportPolicy: string
holdTime: 0
importPolicy: string
multihopTtl: 0
neighborAs: 0
networks:
- string
noReadvertiseToOverlay: false
tunnelName: string
type: string
via: string
vpnName: string
wanName: string
dhcpdConfig:
config:
string:
dnsServers:
- string
dnsSuffixes:
- string
fixedBindings:
string:
ip: string
name: string
gateway: string
ipEnd: string
ipEnd6: string
ipStart: string
ipStart6: string
leaseTime: 0
options:
string:
type: string
value: string
serverIdOverride: false
servers:
- string
servers6s:
- string
type: string
type6: string
vendorEncapsulated:
string:
type: string
value: string
enabled: false
dnsOverride: false
dnsServers:
- string
dnsSuffixes:
- string
extraRoutes:
string:
via: string
extraRoutes6:
string:
via: string
idpProfiles:
string:
baseProfile: string
name: string
orgId: string
overwrites:
- action: string
matching:
attackNames:
- string
dstSubnets:
- string
severities:
- string
name: string
ipConfigs:
string:
ip: string
netmask: string
secondaryIps:
- string
type: string
name: string
networks:
- disallowMistServices: false
gateway: string
gateway6: string
internalAccess:
enabled: false
internetAccess:
createSimpleServicePolicy: false
destinationNat:
string:
internalIp: string
name: string
port: 0
enabled: false
restricted: false
staticNat:
string:
internalIp: string
name: string
wanName: string
isolation: false
multicast:
disableIgmp: false
enabled: false
groups:
string:
rpIp: string
name: string
routedForNetworks:
- string
subnet: string
subnet6: string
tenants:
string:
addresses:
- string
vlanId: string
vpnAccess:
string:
advertisedSubnet: string
allowPing: false
destinationNat:
string:
internalIp: string
name: string
port: 0
natPool: string
noReadvertiseToLanBgp: false
noReadvertiseToLanOspf: false
noReadvertiseToOverlay: false
otherVrfs:
- string
routed: false
sourceNat:
externalIp: string
staticNat:
string:
internalIp: string
name: string
wanName: string
summarizedSubnet: string
summarizedSubnetToLanBgp: string
summarizedSubnetToLanOspf: string
ntpOverride: false
ntpServers:
- string
oobIpConfig:
gateway: string
ip: string
netmask: string
node1:
gateway: string
ip: string
netmask: string
type: string
useMgmtVrf: false
useMgmtVrfForHostOut: false
vlanId: string
type: string
useMgmtVrf: false
useMgmtVrfForHostOut: false
vlanId: string
orgId: string
pathPreferences:
string:
paths:
- cost: 0
disabled: false
gatewayIp: string
internetAccess: false
name: string
networks:
- string
targetIps:
- string
type: string
wanName: string
strategy: string
portConfig:
string:
aeDisableLacp: false
aeIdx: string
aeLacpForceUp: false
aggregated: false
critical: false
description: string
disableAutoneg: false
disabled: false
dslType: string
dslVci: 0
dslVpi: 0
duplex: string
ipConfig:
dns:
- string
dnsSuffixes:
- string
gateway: string
ip: string
netmask: string
network: string
poserPassword: string
pppoeAuth: string
pppoeUsername: string
type: string
lteApn: string
lteAuth: string
lteBackup: false
ltePassword: string
lteUsername: string
mtu: 0
name: string
networks:
- string
outerVlanId: 0
poeDisabled: false
portNetwork: string
preserveDscp: false
redundant: false
rethIdx: 0
rethNode: string
rethNodes:
- string
speed: string
ssrNoVirtualMac: false
svrPortRange: string
trafficShaping:
classPercentages:
- 0
enabled: false
usage: string
vlanId: 0
vpnPaths:
string:
bfdProfile: string
bfdUseTunnelMode: false
linkName: string
preference: 0
role: string
trafficShaping:
classPercentages:
- 0
enabled: false
wanArpPolicer: string
wanExtIp: string
wanExtraRoutes:
string:
via: string
wanProbeOverride:
ips:
- string
probeProfile: string
wanSourceNat:
disabled: false
natPool: string
wanType: string
routerId: string
routingPolicies:
string:
terms:
- action:
accept: false
addCommunities:
- string
addTargetVrfs:
- string
communities:
- string
excludeAsPaths:
- string
excludeCommunities:
- string
exportCommunitites:
- string
localPreference: string
prependAsPaths:
- string
matching:
asPaths:
- string
communities:
- string
networks:
- string
prefixes:
- string
protocols:
- string
routeExists:
route: string
vrfName: string
vpnNeighborMacs:
- string
vpnPathSla:
maxJitter: 0
maxLatency: 0
maxLoss: 0
vpnPaths:
- string
servicePolicies:
- action: string
appqoe:
enabled: false
ewfs:
- alertOnly: false
blockMessage: string
enabled: false
profile: string
idp:
alertOnly: false
enabled: false
idpprofileId: string
profile: string
localRouting: false
name: string
pathPreference: string
servicepolicyId: string
services:
- string
tenants:
- string
tunnelConfigs:
string:
autoProvision:
enable: false
latlng:
lat: 0
lng: 0
primary:
numHosts: string
wanNames:
- string
secondary:
numHosts: string
wanNames:
- string
ikeLifetime: 0
ikeMode: string
ikeProposals:
- authAlgo: string
dhGroup: string
encAlgo: string
ipsecLifetime: 0
ipsecProposals:
- authAlgo: string
dhGroup: string
encAlgo: string
localId: string
mode: string
networks:
- string
primary:
hosts:
- string
internalIps:
- string
probeIps:
- string
remoteIds:
- string
wanNames:
- string
probe:
interval: 0
threshold: 0
timeout: 0
type: string
protocol: string
provider: string
psk: string
secondary:
hosts:
- string
internalIps:
- string
probeIps:
- string
remoteIds:
- string
wanNames:
- string
version: string
tunnelProviderOptions:
jse:
name: string
numUsers: 0
zscaler:
aupAcceptanceRequired: false
aupExpire: 0
aupSslProxy: false
downloadMbps: 0
enableAup: false
enableCaution: false
enforceAuthentication: false
name: string
subLocations:
- aupAcceptanceRequired: false
aupExpire: 0
aupSslProxy: false
downloadMbps: 0
enableAup: false
enableCaution: false
enforceAuthentication: false
subnets:
- string
uploadMbps: 0
uploadMbps: 0
useXff: false
vrfConfig:
enabled: false
vrfInstances:
string:
networks:
- string
DeviceprofileGateway Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The DeviceprofileGateway resource accepts the following input properties:
- Org
Id string - Additional
Config List<string>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- Bgp
Config Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Bgp Config Args> - Dhcpd
Config Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Dhcpd Config - Dns
Override bool - Dns
Servers List<string> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Dns
Suffixes List<string> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Extra
Routes Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Extra Routes Args> - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- Extra
Routes6 Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Extra Routes6Args> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- Idp
Profiles Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Idp Profiles Args> - Property key is the profile name
- Ip
Configs Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Ip Configs Args> - Property key is the network name
- Name string
- Networks
List<Pulumi.
Juniper Mist. Org. Inputs. Deviceprofile Gateway Network> - Ntp
Override bool - Ntp
Servers List<string> - list of NTP servers specific to this device. By default, those in Site Settings will be used
- Oob
Ip Pulumi.Config Juniper Mist. Org. Inputs. Deviceprofile Gateway Oob Ip Config - out-of-band (vme/em0/fxp0) IP config
- Path
Preferences Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Path Preferences Args> - Property key is the path name
- Port
Config Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Port Config Args> - Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
- Router
Id string - auto assigned if not set
- Routing
Policies Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Routing Policies Args> - Property key is the routing policy name
- Service
Policies List<Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Service Policy> - Tunnel
Configs Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Tunnel Configs Args> - Property key is the tunnel name
- Tunnel
Provider Pulumi.Options Juniper Mist. Org. Inputs. Deviceprofile Gateway Tunnel Provider Options - Vrf
Config Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Vrf Config - Vrf
Instances Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Vrf Instances Args> - Property key is the network name
- Org
Id string - Additional
Config []stringCmds - additional CLI commands to append to the generated Junos config Note: no check is done
- Bgp
Config map[string]DeviceprofileGateway Bgp Config Args - Dhcpd
Config DeviceprofileGateway Dhcpd Config Args - Dns
Override bool - Dns
Servers []string - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Dns
Suffixes []string - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Extra
Routes map[string]DeviceprofileGateway Extra Routes Args - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- Extra
Routes6 map[string]DeviceprofileGateway Extra Routes6Args - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- Idp
Profiles map[string]DeviceprofileGateway Idp Profiles Args - Property key is the profile name
- Ip
Configs map[string]DeviceprofileGateway Ip Configs Args - Property key is the network name
- Name string
- Networks
[]Deviceprofile
Gateway Network Args - Ntp
Override bool - Ntp
Servers []string - list of NTP servers specific to this device. By default, those in Site Settings will be used
- Oob
Ip DeviceprofileConfig Gateway Oob Ip Config Args - out-of-band (vme/em0/fxp0) IP config
- Path
Preferences map[string]DeviceprofileGateway Path Preferences Args - Property key is the path name
- Port
Config map[string]DeviceprofileGateway Port Config Args - Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
- Router
Id string - auto assigned if not set
- Routing
Policies map[string]DeviceprofileGateway Routing Policies Args - Property key is the routing policy name
- Service
Policies []DeviceprofileGateway Service Policy Args - Tunnel
Configs map[string]DeviceprofileGateway Tunnel Configs Args - Property key is the tunnel name
- Tunnel
Provider DeviceprofileOptions Gateway Tunnel Provider Options Args - Vrf
Config DeviceprofileGateway Vrf Config Args - Vrf
Instances map[string]DeviceprofileGateway Vrf Instances Args - Property key is the network name
- org
Id String - additional
Config List<String>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- bgp
Config Map<String,DeviceprofileGateway Bgp Config Args> - dhcpd
Config DeviceprofileGateway Dhcpd Config - dns
Override Boolean - dns
Servers List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns
Suffixes List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra
Routes Map<String,DeviceprofileGateway Extra Routes Args> - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- extra
Routes6 Map<String,DeviceprofileGateway Extra Routes6Args> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- idp
Profiles Map<String,DeviceprofileGateway Idp Profiles Args> - Property key is the profile name
- ip
Configs Map<String,DeviceprofileGateway Ip Configs Args> - Property key is the network name
- name String
- networks
List<Deviceprofile
Gateway Network> - ntp
Override Boolean - ntp
Servers List<String> - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob
Ip DeviceprofileConfig Gateway Oob Ip Config - out-of-band (vme/em0/fxp0) IP config
- path
Preferences Map<String,DeviceprofileGateway Path Preferences Args> - Property key is the path name
- port
Config Map<String,DeviceprofileGateway Port Config Args> - Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
- router
Id String - auto assigned if not set
- routing
Policies Map<String,DeviceprofileGateway Routing Policies Args> - Property key is the routing policy name
- service
Policies List<DeviceprofileGateway Service Policy> - tunnel
Configs Map<String,DeviceprofileGateway Tunnel Configs Args> - Property key is the tunnel name
- tunnel
Provider DeviceprofileOptions Gateway Tunnel Provider Options - vrf
Config DeviceprofileGateway Vrf Config - vrf
Instances Map<String,DeviceprofileGateway Vrf Instances Args> - Property key is the network name
- org
Id string - additional
Config string[]Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- bgp
Config {[key: string]: DeviceprofileGateway Bgp Config Args} - dhcpd
Config DeviceprofileGateway Dhcpd Config - dns
Override boolean - dns
Servers string[] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns
Suffixes string[] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra
Routes {[key: string]: DeviceprofileGateway Extra Routes Args} - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- extra
Routes6 {[key: string]: DeviceprofileGateway Extra Routes6Args} - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- idp
Profiles {[key: string]: DeviceprofileGateway Idp Profiles Args} - Property key is the profile name
- ip
Configs {[key: string]: DeviceprofileGateway Ip Configs Args} - Property key is the network name
- name string
- networks
Deviceprofile
Gateway Network[] - ntp
Override boolean - ntp
Servers string[] - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob
Ip DeviceprofileConfig Gateway Oob Ip Config - out-of-band (vme/em0/fxp0) IP config
- path
Preferences {[key: string]: DeviceprofileGateway Path Preferences Args} - Property key is the path name
- port
Config {[key: string]: DeviceprofileGateway Port Config Args} - Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
- router
Id string - auto assigned if not set
- routing
Policies {[key: string]: DeviceprofileGateway Routing Policies Args} - Property key is the routing policy name
- service
Policies DeviceprofileGateway Service Policy[] - tunnel
Configs {[key: string]: DeviceprofileGateway Tunnel Configs Args} - Property key is the tunnel name
- tunnel
Provider DeviceprofileOptions Gateway Tunnel Provider Options - vrf
Config DeviceprofileGateway Vrf Config - vrf
Instances {[key: string]: DeviceprofileGateway Vrf Instances Args} - Property key is the network name
- org_
id str - additional_
config_ Sequence[str]cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- bgp_
config Mapping[str, DeviceprofileGateway Bgp Config Args] - dhcpd_
config DeviceprofileGateway Dhcpd Config Args - dns_
override bool - dns_
servers Sequence[str] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns_
suffixes Sequence[str] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra_
routes Mapping[str, DeviceprofileGateway Extra Routes Args] - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- extra_
routes6 Mapping[str, DeviceprofileGateway Extra Routes6Args] - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- idp_
profiles Mapping[str, DeviceprofileGateway Idp Profiles Args] - Property key is the profile name
- ip_
configs Mapping[str, DeviceprofileGateway Ip Configs Args] - Property key is the network name
- name str
- networks
Sequence[Deviceprofile
Gateway Network Args] - ntp_
override bool - ntp_
servers Sequence[str] - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob_
ip_ Deviceprofileconfig Gateway Oob Ip Config Args - out-of-band (vme/em0/fxp0) IP config
- path_
preferences Mapping[str, DeviceprofileGateway Path Preferences Args] - Property key is the path name
- port_
config Mapping[str, DeviceprofileGateway Port Config Args] - Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
- router_
id str - auto assigned if not set
- routing_
policies Mapping[str, DeviceprofileGateway Routing Policies Args] - Property key is the routing policy name
- service_
policies Sequence[DeviceprofileGateway Service Policy Args] - tunnel_
configs Mapping[str, DeviceprofileGateway Tunnel Configs Args] - Property key is the tunnel name
- tunnel_
provider_ Deviceprofileoptions Gateway Tunnel Provider Options Args - vrf_
config DeviceprofileGateway Vrf Config Args - vrf_
instances Mapping[str, DeviceprofileGateway Vrf Instances Args] - Property key is the network name
- org
Id String - additional
Config List<String>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- bgp
Config Map<Property Map> - dhcpd
Config Property Map - dns
Override Boolean - dns
Servers List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns
Suffixes List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra
Routes Map<Property Map> - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- extra
Routes6 Map<Property Map> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- idp
Profiles Map<Property Map> - Property key is the profile name
- ip
Configs Map<Property Map> - Property key is the network name
- name String
- networks List<Property Map>
- ntp
Override Boolean - ntp
Servers List<String> - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob
Ip Property MapConfig - out-of-band (vme/em0/fxp0) IP config
- path
Preferences Map<Property Map> - Property key is the path name
- port
Config Map<Property Map> - Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
- router
Id String - auto assigned if not set
- routing
Policies Map<Property Map> - Property key is the routing policy name
- service
Policies List<Property Map> - tunnel
Configs Map<Property Map> - Property key is the tunnel name
- tunnel
Provider Property MapOptions - vrf
Config Property Map - vrf
Instances Map<Property Map> - Property key is the network name
Outputs
All input properties are implicitly available as output properties. Additionally, the DeviceprofileGateway resource produces the following output properties:
Look up Existing DeviceprofileGateway Resource
Get an existing DeviceprofileGateway resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: DeviceprofileGatewayState, opts?: CustomResourceOptions): DeviceprofileGateway@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
additional_config_cmds: Optional[Sequence[str]] = None,
bgp_config: Optional[Mapping[str, DeviceprofileGatewayBgpConfigArgs]] = None,
dhcpd_config: Optional[DeviceprofileGatewayDhcpdConfigArgs] = None,
dns_override: Optional[bool] = None,
dns_servers: Optional[Sequence[str]] = None,
dns_suffixes: Optional[Sequence[str]] = None,
extra_routes: Optional[Mapping[str, DeviceprofileGatewayExtraRoutesArgs]] = None,
extra_routes6: Optional[Mapping[str, DeviceprofileGatewayExtraRoutes6Args]] = None,
idp_profiles: Optional[Mapping[str, DeviceprofileGatewayIdpProfilesArgs]] = None,
ip_configs: Optional[Mapping[str, DeviceprofileGatewayIpConfigsArgs]] = None,
name: Optional[str] = None,
networks: Optional[Sequence[DeviceprofileGatewayNetworkArgs]] = None,
ntp_override: Optional[bool] = None,
ntp_servers: Optional[Sequence[str]] = None,
oob_ip_config: Optional[DeviceprofileGatewayOobIpConfigArgs] = None,
org_id: Optional[str] = None,
path_preferences: Optional[Mapping[str, DeviceprofileGatewayPathPreferencesArgs]] = None,
port_config: Optional[Mapping[str, DeviceprofileGatewayPortConfigArgs]] = None,
router_id: Optional[str] = None,
routing_policies: Optional[Mapping[str, DeviceprofileGatewayRoutingPoliciesArgs]] = None,
service_policies: Optional[Sequence[DeviceprofileGatewayServicePolicyArgs]] = None,
tunnel_configs: Optional[Mapping[str, DeviceprofileGatewayTunnelConfigsArgs]] = None,
tunnel_provider_options: Optional[DeviceprofileGatewayTunnelProviderOptionsArgs] = None,
type: Optional[str] = None,
vrf_config: Optional[DeviceprofileGatewayVrfConfigArgs] = None,
vrf_instances: Optional[Mapping[str, DeviceprofileGatewayVrfInstancesArgs]] = None) -> DeviceprofileGatewayfunc GetDeviceprofileGateway(ctx *Context, name string, id IDInput, state *DeviceprofileGatewayState, opts ...ResourceOption) (*DeviceprofileGateway, error)public static DeviceprofileGateway Get(string name, Input<string> id, DeviceprofileGatewayState? state, CustomResourceOptions? opts = null)public static DeviceprofileGateway get(String name, Output<String> id, DeviceprofileGatewayState state, CustomResourceOptions options)Resource lookup is not supported in YAML- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Additional
Config List<string>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- Bgp
Config Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Bgp Config Args> - Dhcpd
Config Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Dhcpd Config - Dns
Override bool - Dns
Servers List<string> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Dns
Suffixes List<string> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Extra
Routes Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Extra Routes Args> - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- Extra
Routes6 Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Extra Routes6Args> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- Idp
Profiles Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Idp Profiles Args> - Property key is the profile name
- Ip
Configs Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Ip Configs Args> - Property key is the network name
- Name string
- Networks
List<Pulumi.
Juniper Mist. Org. Inputs. Deviceprofile Gateway Network> - Ntp
Override bool - Ntp
Servers List<string> - list of NTP servers specific to this device. By default, those in Site Settings will be used
- Oob
Ip Pulumi.Config Juniper Mist. Org. Inputs. Deviceprofile Gateway Oob Ip Config - out-of-band (vme/em0/fxp0) IP config
- Org
Id string - Path
Preferences Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Path Preferences Args> - Property key is the path name
- Port
Config Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Port Config Args> - Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
- Router
Id string - auto assigned if not set
- Routing
Policies Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Routing Policies Args> - Property key is the routing policy name
- Service
Policies List<Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Service Policy> - Tunnel
Configs Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Tunnel Configs Args> - Property key is the tunnel name
- Tunnel
Provider Pulumi.Options Juniper Mist. Org. Inputs. Deviceprofile Gateway Tunnel Provider Options - Type string
- Device Type. enum:
gateway - Vrf
Config Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Vrf Config - Vrf
Instances Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Vrf Instances Args> - Property key is the network name
- Additional
Config []stringCmds - additional CLI commands to append to the generated Junos config Note: no check is done
- Bgp
Config map[string]DeviceprofileGateway Bgp Config Args - Dhcpd
Config DeviceprofileGateway Dhcpd Config Args - Dns
Override bool - Dns
Servers []string - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Dns
Suffixes []string - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - Extra
Routes map[string]DeviceprofileGateway Extra Routes Args - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- Extra
Routes6 map[string]DeviceprofileGateway Extra Routes6Args - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- Idp
Profiles map[string]DeviceprofileGateway Idp Profiles Args - Property key is the profile name
- Ip
Configs map[string]DeviceprofileGateway Ip Configs Args - Property key is the network name
- Name string
- Networks
[]Deviceprofile
Gateway Network Args - Ntp
Override bool - Ntp
Servers []string - list of NTP servers specific to this device. By default, those in Site Settings will be used
- Oob
Ip DeviceprofileConfig Gateway Oob Ip Config Args - out-of-band (vme/em0/fxp0) IP config
- Org
Id string - Path
Preferences map[string]DeviceprofileGateway Path Preferences Args - Property key is the path name
- Port
Config map[string]DeviceprofileGateway Port Config Args - Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
- Router
Id string - auto assigned if not set
- Routing
Policies map[string]DeviceprofileGateway Routing Policies Args - Property key is the routing policy name
- Service
Policies []DeviceprofileGateway Service Policy Args - Tunnel
Configs map[string]DeviceprofileGateway Tunnel Configs Args - Property key is the tunnel name
- Tunnel
Provider DeviceprofileOptions Gateway Tunnel Provider Options Args - Type string
- Device Type. enum:
gateway - Vrf
Config DeviceprofileGateway Vrf Config Args - Vrf
Instances map[string]DeviceprofileGateway Vrf Instances Args - Property key is the network name
- additional
Config List<String>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- bgp
Config Map<String,DeviceprofileGateway Bgp Config Args> - dhcpd
Config DeviceprofileGateway Dhcpd Config - dns
Override Boolean - dns
Servers List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns
Suffixes List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra
Routes Map<String,DeviceprofileGateway Extra Routes Args> - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- extra
Routes6 Map<String,DeviceprofileGateway Extra Routes6Args> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- idp
Profiles Map<String,DeviceprofileGateway Idp Profiles Args> - Property key is the profile name
- ip
Configs Map<String,DeviceprofileGateway Ip Configs Args> - Property key is the network name
- name String
- networks
List<Deviceprofile
Gateway Network> - ntp
Override Boolean - ntp
Servers List<String> - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob
Ip DeviceprofileConfig Gateway Oob Ip Config - out-of-band (vme/em0/fxp0) IP config
- org
Id String - path
Preferences Map<String,DeviceprofileGateway Path Preferences Args> - Property key is the path name
- port
Config Map<String,DeviceprofileGateway Port Config Args> - Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
- router
Id String - auto assigned if not set
- routing
Policies Map<String,DeviceprofileGateway Routing Policies Args> - Property key is the routing policy name
- service
Policies List<DeviceprofileGateway Service Policy> - tunnel
Configs Map<String,DeviceprofileGateway Tunnel Configs Args> - Property key is the tunnel name
- tunnel
Provider DeviceprofileOptions Gateway Tunnel Provider Options - type String
- Device Type. enum:
gateway - vrf
Config DeviceprofileGateway Vrf Config - vrf
Instances Map<String,DeviceprofileGateway Vrf Instances Args> - Property key is the network name
- additional
Config string[]Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- bgp
Config {[key: string]: DeviceprofileGateway Bgp Config Args} - dhcpd
Config DeviceprofileGateway Dhcpd Config - dns
Override boolean - dns
Servers string[] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns
Suffixes string[] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra
Routes {[key: string]: DeviceprofileGateway Extra Routes Args} - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- extra
Routes6 {[key: string]: DeviceprofileGateway Extra Routes6Args} - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- idp
Profiles {[key: string]: DeviceprofileGateway Idp Profiles Args} - Property key is the profile name
- ip
Configs {[key: string]: DeviceprofileGateway Ip Configs Args} - Property key is the network name
- name string
- networks
Deviceprofile
Gateway Network[] - ntp
Override boolean - ntp
Servers string[] - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob
Ip DeviceprofileConfig Gateway Oob Ip Config - out-of-band (vme/em0/fxp0) IP config
- org
Id string - path
Preferences {[key: string]: DeviceprofileGateway Path Preferences Args} - Property key is the path name
- port
Config {[key: string]: DeviceprofileGateway Port Config Args} - Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
- router
Id string - auto assigned if not set
- routing
Policies {[key: string]: DeviceprofileGateway Routing Policies Args} - Property key is the routing policy name
- service
Policies DeviceprofileGateway Service Policy[] - tunnel
Configs {[key: string]: DeviceprofileGateway Tunnel Configs Args} - Property key is the tunnel name
- tunnel
Provider DeviceprofileOptions Gateway Tunnel Provider Options - type string
- Device Type. enum:
gateway - vrf
Config DeviceprofileGateway Vrf Config - vrf
Instances {[key: string]: DeviceprofileGateway Vrf Instances Args} - Property key is the network name
- additional_
config_ Sequence[str]cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- bgp_
config Mapping[str, DeviceprofileGateway Bgp Config Args] - dhcpd_
config DeviceprofileGateway Dhcpd Config Args - dns_
override bool - dns_
servers Sequence[str] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns_
suffixes Sequence[str] - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra_
routes Mapping[str, DeviceprofileGateway Extra Routes Args] - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- extra_
routes6 Mapping[str, DeviceprofileGateway Extra Routes6Args] - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- idp_
profiles Mapping[str, DeviceprofileGateway Idp Profiles Args] - Property key is the profile name
- ip_
configs Mapping[str, DeviceprofileGateway Ip Configs Args] - Property key is the network name
- name str
- networks
Sequence[Deviceprofile
Gateway Network Args] - ntp_
override bool - ntp_
servers Sequence[str] - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob_
ip_ Deviceprofileconfig Gateway Oob Ip Config Args - out-of-band (vme/em0/fxp0) IP config
- org_
id str - path_
preferences Mapping[str, DeviceprofileGateway Path Preferences Args] - Property key is the path name
- port_
config Mapping[str, DeviceprofileGateway Port Config Args] - Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
- router_
id str - auto assigned if not set
- routing_
policies Mapping[str, DeviceprofileGateway Routing Policies Args] - Property key is the routing policy name
- service_
policies Sequence[DeviceprofileGateway Service Policy Args] - tunnel_
configs Mapping[str, DeviceprofileGateway Tunnel Configs Args] - Property key is the tunnel name
- tunnel_
provider_ Deviceprofileoptions Gateway Tunnel Provider Options Args - type str
- Device Type. enum:
gateway - vrf_
config DeviceprofileGateway Vrf Config Args - vrf_
instances Mapping[str, DeviceprofileGateway Vrf Instances Args] - Property key is the network name
- additional
Config List<String>Cmds - additional CLI commands to append to the generated Junos config Note: no check is done
- bgp
Config Map<Property Map> - dhcpd
Config Property Map - dns
Override Boolean - dns
Servers List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - dns
Suffixes List<String> - Global dns settings. To keep compatibility, dns settings in
ip_configandoob_ip_configwill overwrite this setting - extra
Routes Map<Property Map> - Property key is the destination CIDR (e.g. "10.0.0.0/8")
- extra
Routes6 Map<Property Map> - Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
- idp
Profiles Map<Property Map> - Property key is the profile name
- ip
Configs Map<Property Map> - Property key is the network name
- name String
- networks List<Property Map>
- ntp
Override Boolean - ntp
Servers List<String> - list of NTP servers specific to this device. By default, those in Site Settings will be used
- oob
Ip Property MapConfig - out-of-band (vme/em0/fxp0) IP config
- org
Id String - path
Preferences Map<Property Map> - Property key is the path name
- port
Config Map<Property Map> - Property key is the port(s) name or range (e.g. "ge-0/0/0-10")
- router
Id String - auto assigned if not set
- routing
Policies Map<Property Map> - Property key is the routing policy name
- service
Policies List<Property Map> - tunnel
Configs Map<Property Map> - Property key is the tunnel name
- tunnel
Provider Property MapOptions - type String
- Device Type. enum:
gateway - vrf
Config Property Map - vrf
Instances Map<Property Map> - Property key is the network name
Supporting Types
DeviceprofileGatewayBgpConfig, DeviceprofileGatewayBgpConfigArgs
- Auth
Key string - Bfd
Minimum intInterval - when bfd_multiplier is configured alone. Default:
- 1000 if
type==external - 350
type==internal
- 1000 if
- Bfd
Multiplier int - when bfd_minimum_interval_is_configured alone
- Disable
Bfd bool - BFD provides faster path failure detection and is enabled by default
- Export string
- Export
Policy string - default export policies if no per-neighbor policies defined
- Extended
V4Nexthop bool - by default, either inet/net6 unicast depending on neighbor IP family (v4 or v6) for v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this
- Graceful
Restart intTime 0means disable- Hold
Time int - Import string
- Import
Policy string - default import policies if no per-neighbor policies defined
- Local
As int - Neighbor
As int - Neighbors
Dictionary<string, Pulumi.
Juniper Mist. Org. Inputs. Deviceprofile Gateway Bgp Config Neighbors> - if per-neighbor as is desired. Property key is the neighbor address
- Networks List<string>
- if
type!=externalorvia==wannetworks where we expect BGP neighbor to connect to/from - No
Readvertise boolTo Overlay - by default, we'll re-advertise all learned BGP routers toward overlay
- Tunnel
Name string - if
type==tunnel - Type string
- enum:
external,internal - Via string
- network name. enum:
lan,tunnel,vpn,wan - Vpn
Name string - Wan
Name string - if
via==wan
- Auth
Key string - Bfd
Minimum intInterval - when bfd_multiplier is configured alone. Default:
- 1000 if
type==external - 350
type==internal
- 1000 if
- Bfd
Multiplier int - when bfd_minimum_interval_is_configured alone
- Disable
Bfd bool - BFD provides faster path failure detection and is enabled by default
- Export string
- Export
Policy string - default export policies if no per-neighbor policies defined
- Extended
V4Nexthop bool - by default, either inet/net6 unicast depending on neighbor IP family (v4 or v6) for v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this
- Graceful
Restart intTime 0means disable- Hold
Time int - Import string
- Import
Policy string - default import policies if no per-neighbor policies defined
- Local
As int - Neighbor
As int - Neighbors
map[string]Deviceprofile
Gateway Bgp Config Neighbors - if per-neighbor as is desired. Property key is the neighbor address
- Networks []string
- if
type!=externalorvia==wannetworks where we expect BGP neighbor to connect to/from - No
Readvertise boolTo Overlay - by default, we'll re-advertise all learned BGP routers toward overlay
- Tunnel
Name string - if
type==tunnel - Type string
- enum:
external,internal - Via string
- network name. enum:
lan,tunnel,vpn,wan - Vpn
Name string - Wan
Name string - if
via==wan
- auth
Key String - bfd
Minimum IntegerInterval - when bfd_multiplier is configured alone. Default:
- 1000 if
type==external - 350
type==internal
- 1000 if
- bfd
Multiplier Integer - when bfd_minimum_interval_is_configured alone
- disable
Bfd Boolean - BFD provides faster path failure detection and is enabled by default
- export String
- export
Policy String - default export policies if no per-neighbor policies defined
- extended
V4Nexthop Boolean - by default, either inet/net6 unicast depending on neighbor IP family (v4 or v6) for v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this
- graceful
Restart IntegerTime 0means disable- hold
Time Integer - import
Policy String - default import policies if no per-neighbor policies defined
- import_ String
- local
As Integer - neighbor
As Integer - neighbors
Map<String,Deviceprofile
Gateway Bgp Config Neighbors> - if per-neighbor as is desired. Property key is the neighbor address
- networks List<String>
- if
type!=externalorvia==wannetworks where we expect BGP neighbor to connect to/from - no
Readvertise BooleanTo Overlay - by default, we'll re-advertise all learned BGP routers toward overlay
- tunnel
Name String - if
type==tunnel - type String
- enum:
external,internal - via String
- network name. enum:
lan,tunnel,vpn,wan - vpn
Name String - wan
Name String - if
via==wan
- auth
Key string - bfd
Minimum numberInterval - when bfd_multiplier is configured alone. Default:
- 1000 if
type==external - 350
type==internal
- 1000 if
- bfd
Multiplier number - when bfd_minimum_interval_is_configured alone
- disable
Bfd boolean - BFD provides faster path failure detection and is enabled by default
- export string
- export
Policy string - default export policies if no per-neighbor policies defined
- extended
V4Nexthop boolean - by default, either inet/net6 unicast depending on neighbor IP family (v4 or v6) for v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this
- graceful
Restart numberTime 0means disable- hold
Time number - import string
- import
Policy string - default import policies if no per-neighbor policies defined
- local
As number - neighbor
As number - neighbors
{[key: string]: Deviceprofile
Gateway Bgp Config Neighbors} - if per-neighbor as is desired. Property key is the neighbor address
- networks string[]
- if
type!=externalorvia==wannetworks where we expect BGP neighbor to connect to/from - no
Readvertise booleanTo Overlay - by default, we'll re-advertise all learned BGP routers toward overlay
- tunnel
Name string - if
type==tunnel - type string
- enum:
external,internal - via string
- network name. enum:
lan,tunnel,vpn,wan - vpn
Name string - wan
Name string - if
via==wan
- auth_
key str - bfd_
minimum_ intinterval - when bfd_multiplier is configured alone. Default:
- 1000 if
type==external - 350
type==internal
- 1000 if
- bfd_
multiplier int - when bfd_minimum_interval_is_configured alone
- disable_
bfd bool - BFD provides faster path failure detection and is enabled by default
- export str
- export_
policy str - default export policies if no per-neighbor policies defined
- extended_
v4_ boolnexthop - by default, either inet/net6 unicast depending on neighbor IP family (v4 or v6) for v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this
- graceful_
restart_ inttime 0means disable- hold_
time int - import_ str
- import_
policy str - default import policies if no per-neighbor policies defined
- local_
as int - neighbor_
as int - neighbors
Mapping[str, Deviceprofile
Gateway Bgp Config Neighbors] - if per-neighbor as is desired. Property key is the neighbor address
- networks Sequence[str]
- if
type!=externalorvia==wannetworks where we expect BGP neighbor to connect to/from - no_
readvertise_ boolto_ overlay - by default, we'll re-advertise all learned BGP routers toward overlay
- tunnel_
name str - if
type==tunnel - type str
- enum:
external,internal - via str
- network name. enum:
lan,tunnel,vpn,wan - vpn_
name str - wan_
name str - if
via==wan
- auth
Key String - bfd
Minimum NumberInterval - when bfd_multiplier is configured alone. Default:
- 1000 if
type==external - 350
type==internal
- 1000 if
- bfd
Multiplier Number - when bfd_minimum_interval_is_configured alone
- disable
Bfd Boolean - BFD provides faster path failure detection and is enabled by default
- export String
- export
Policy String - default export policies if no per-neighbor policies defined
- extended
V4Nexthop Boolean - by default, either inet/net6 unicast depending on neighbor IP family (v4 or v6) for v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this
- graceful
Restart NumberTime 0means disable- hold
Time Number - import String
- import
Policy String - default import policies if no per-neighbor policies defined
- local
As Number - neighbor
As Number - neighbors Map<Property Map>
- if per-neighbor as is desired. Property key is the neighbor address
- networks List<String>
- if
type!=externalorvia==wannetworks where we expect BGP neighbor to connect to/from - no
Readvertise BooleanTo Overlay - by default, we'll re-advertise all learned BGP routers toward overlay
- tunnel
Name String - if
type==tunnel - type String
- enum:
external,internal - via String
- network name. enum:
lan,tunnel,vpn,wan - vpn
Name String - wan
Name String - if
via==wan
DeviceprofileGatewayBgpConfigNeighbors, DeviceprofileGatewayBgpConfigNeighborsArgs
- Disabled bool
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- Export
Policy string - Hold
Time int - Import
Policy string - Multihop
Ttl int - assuming BGP neighbor is directly connected
- Neighbor
As int
- Disabled bool
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- Export
Policy string - Hold
Time int - Import
Policy string - Multihop
Ttl int - assuming BGP neighbor is directly connected
- Neighbor
As int
- disabled Boolean
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- export
Policy String - hold
Time Integer - import
Policy String - multihop
Ttl Integer - assuming BGP neighbor is directly connected
- neighbor
As Integer
- disabled boolean
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- export
Policy string - hold
Time number - import
Policy string - multihop
Ttl number - assuming BGP neighbor is directly connected
- neighbor
As number
- disabled bool
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- export_
policy str - hold_
time int - import_
policy str - multihop_
ttl int - assuming BGP neighbor is directly connected
- neighbor_
as int
- disabled Boolean
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- export
Policy String - hold
Time Number - import
Policy String - multihop
Ttl Number - assuming BGP neighbor is directly connected
- neighbor
As Number
DeviceprofileGatewayDhcpdConfig, DeviceprofileGatewayDhcpdConfigArgs
DeviceprofileGatewayDhcpdConfigConfig, DeviceprofileGatewayDhcpdConfigConfigArgs
- Dns
Servers List<string> - if
type==localortype6==local- optional, if not defined, system one will be used - Dns
Suffixes List<string> - if
type==localortype6==local- optional, if not defined, system one will be used - Fixed
Bindings Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Dhcpd Config Config Fixed Bindings> - if
type==localortype6==local. Property key is the MAC Address. Format is[0-9a-f]{12}(e.g "5684dae9ac8b") - Gateway string
- if
type==local- optional,ipwill be used if not provided - Ip
End string - if
type==local - Ip
End6 string - if
type6==local - Ip
Start string - if
type==local - Ip
Start6 string - if
type6==local - Lease
Time int - in seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- Options
Dictionary<string, Pulumi.
Juniper Mist. Org. Inputs. Deviceprofile Gateway Dhcpd Config Config Options> - if
type==localortype6==local. Property key is the DHCP option number - Server
Id boolOverride server_id_override==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- Servers List<string>
- if
type==relay - Servers6s List<string>
- if
type6==relay - Type string
- enum:
local(DHCP Server),none,relay(DHCP Relay) - Type6 string
- enum:
local(DHCP Server),none,relay(DHCP Relay) - Vendor
Encapsulated Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Dhcpd Config Config Vendor Encapsulated> - if
type==localortype6==local. Property key is :, with- enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
- sub option code: 1-255, sub-option code'
- Dns
Servers []string - if
type==localortype6==local- optional, if not defined, system one will be used - Dns
Suffixes []string - if
type==localortype6==local- optional, if not defined, system one will be used - Fixed
Bindings map[string]DeviceprofileGateway Dhcpd Config Config Fixed Bindings - if
type==localortype6==local. Property key is the MAC Address. Format is[0-9a-f]{12}(e.g "5684dae9ac8b") - Gateway string
- if
type==local- optional,ipwill be used if not provided - Ip
End string - if
type==local - Ip
End6 string - if
type6==local - Ip
Start string - if
type==local - Ip
Start6 string - if
type6==local - Lease
Time int - in seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- Options
map[string]Deviceprofile
Gateway Dhcpd Config Config Options - if
type==localortype6==local. Property key is the DHCP option number - Server
Id boolOverride server_id_override==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- Servers []string
- if
type==relay - Servers6s []string
- if
type6==relay - Type string
- enum:
local(DHCP Server),none,relay(DHCP Relay) - Type6 string
- enum:
local(DHCP Server),none,relay(DHCP Relay) - Vendor
Encapsulated map[string]DeviceprofileGateway Dhcpd Config Config Vendor Encapsulated - if
type==localortype6==local. Property key is :, with- enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
- sub option code: 1-255, sub-option code'
- dns
Servers List<String> - if
type==localortype6==local- optional, if not defined, system one will be used - dns
Suffixes List<String> - if
type==localortype6==local- optional, if not defined, system one will be used - fixed
Bindings Map<String,DeviceprofileGateway Dhcpd Config Config Fixed Bindings> - if
type==localortype6==local. Property key is the MAC Address. Format is[0-9a-f]{12}(e.g "5684dae9ac8b") - gateway String
- if
type==local- optional,ipwill be used if not provided - ip
End String - if
type==local - ip
End6 String - if
type6==local - ip
Start String - if
type==local - ip
Start6 String - if
type6==local - lease
Time Integer - in seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options
Map<String,Deviceprofile
Gateway Dhcpd Config Config Options> - if
type==localortype6==local. Property key is the DHCP option number - server
Id BooleanOverride server_id_override==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers List<String>
- if
type==relay - servers6s List<String>
- if
type6==relay - type String
- enum:
local(DHCP Server),none,relay(DHCP Relay) - type6 String
- enum:
local(DHCP Server),none,relay(DHCP Relay) - vendor
Encapsulated Map<String,DeviceprofileGateway Dhcpd Config Config Vendor Encapsulated> - if
type==localortype6==local. Property key is :, with- enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
- sub option code: 1-255, sub-option code'
- dns
Servers string[] - if
type==localortype6==local- optional, if not defined, system one will be used - dns
Suffixes string[] - if
type==localortype6==local- optional, if not defined, system one will be used - fixed
Bindings {[key: string]: DeviceprofileGateway Dhcpd Config Config Fixed Bindings} - if
type==localortype6==local. Property key is the MAC Address. Format is[0-9a-f]{12}(e.g "5684dae9ac8b") - gateway string
- if
type==local- optional,ipwill be used if not provided - ip
End string - if
type==local - ip
End6 string - if
type6==local - ip
Start string - if
type==local - ip
Start6 string - if
type6==local - lease
Time number - in seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options
{[key: string]: Deviceprofile
Gateway Dhcpd Config Config Options} - if
type==localortype6==local. Property key is the DHCP option number - server
Id booleanOverride server_id_override==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers string[]
- if
type==relay - servers6s string[]
- if
type6==relay - type string
- enum:
local(DHCP Server),none,relay(DHCP Relay) - type6 string
- enum:
local(DHCP Server),none,relay(DHCP Relay) - vendor
Encapsulated {[key: string]: DeviceprofileGateway Dhcpd Config Config Vendor Encapsulated} - if
type==localortype6==local. Property key is :, with- enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
- sub option code: 1-255, sub-option code'
- dns_
servers Sequence[str] - if
type==localortype6==local- optional, if not defined, system one will be used - dns_
suffixes Sequence[str] - if
type==localortype6==local- optional, if not defined, system one will be used - fixed_
bindings Mapping[str, DeviceprofileGateway Dhcpd Config Config Fixed Bindings] - if
type==localortype6==local. Property key is the MAC Address. Format is[0-9a-f]{12}(e.g "5684dae9ac8b") - gateway str
- if
type==local- optional,ipwill be used if not provided - ip_
end str - if
type==local - ip_
end6 str - if
type6==local - ip_
start str - if
type==local - ip_
start6 str - if
type6==local - lease_
time int - in seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options
Mapping[str, Deviceprofile
Gateway Dhcpd Config Config Options] - if
type==localortype6==local. Property key is the DHCP option number - server_
id_ booloverride server_id_override==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers Sequence[str]
- if
type==relay - servers6s Sequence[str]
- if
type6==relay - type str
- enum:
local(DHCP Server),none,relay(DHCP Relay) - type6 str
- enum:
local(DHCP Server),none,relay(DHCP Relay) - vendor_
encapsulated Mapping[str, DeviceprofileGateway Dhcpd Config Config Vendor Encapsulated] - if
type==localortype6==local. Property key is :, with- enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
- sub option code: 1-255, sub-option code'
- dns
Servers List<String> - if
type==localortype6==local- optional, if not defined, system one will be used - dns
Suffixes List<String> - if
type==localortype6==local- optional, if not defined, system one will be used - fixed
Bindings Map<Property Map> - if
type==localortype6==local. Property key is the MAC Address. Format is[0-9a-f]{12}(e.g "5684dae9ac8b") - gateway String
- if
type==local- optional,ipwill be used if not provided - ip
End String - if
type==local - ip
End6 String - if
type6==local - ip
Start String - if
type==local - ip
Start6 String - if
type6==local - lease
Time Number - in seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options Map<Property Map>
- if
type==localortype6==local. Property key is the DHCP option number - server
Id BooleanOverride server_id_override==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers List<String>
- if
type==relay - servers6s List<String>
- if
type6==relay - type String
- enum:
local(DHCP Server),none,relay(DHCP Relay) - type6 String
- enum:
local(DHCP Server),none,relay(DHCP Relay) - vendor
Encapsulated Map<Property Map> - if
type==localortype6==local. Property key is :, with- enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
- sub option code: 1-255, sub-option code'
DeviceprofileGatewayDhcpdConfigConfigFixedBindings, DeviceprofileGatewayDhcpdConfigConfigFixedBindingsArgs
DeviceprofileGatewayDhcpdConfigConfigOptions, DeviceprofileGatewayDhcpdConfigConfigOptionsArgs
DeviceprofileGatewayDhcpdConfigConfigVendorEncapsulated, DeviceprofileGatewayDhcpdConfigConfigVendorEncapsulatedArgs
DeviceprofileGatewayExtraRoutes, DeviceprofileGatewayExtraRoutesArgs
- Via string
- Via string
- via String
- via string
- via str
- via String
DeviceprofileGatewayExtraRoutes6, DeviceprofileGatewayExtraRoutes6Args
- Via string
- Via string
- via String
- via string
- via str
- via String
DeviceprofileGatewayIdpProfiles, DeviceprofileGatewayIdpProfilesArgs
- Base
Profile string - enum:
critical,standard,strict - Name string
- Org
Id string - Overwrites
List<Pulumi.
Juniper Mist. Org. Inputs. Deviceprofile Gateway Idp Profiles Overwrite>
- Base
Profile string - enum:
critical,standard,strict - Name string
- Org
Id string - Overwrites
[]Deviceprofile
Gateway Idp Profiles Overwrite
- base
Profile String - enum:
critical,standard,strict - name String
- org
Id String - overwrites
List<Deviceprofile
Gateway Idp Profiles Overwrite>
- base
Profile string - enum:
critical,standard,strict - name string
- org
Id string - overwrites
Deviceprofile
Gateway Idp Profiles Overwrite[]
- base_
profile str - enum:
critical,standard,strict - name str
- org_
id str - overwrites
Sequence[Deviceprofile
Gateway Idp Profiles Overwrite]
- base
Profile String - enum:
critical,standard,strict - name String
- org
Id String - overwrites List<Property Map>
DeviceprofileGatewayIdpProfilesOverwrite, DeviceprofileGatewayIdpProfilesOverwriteArgs
- Action string
- enum:
- alert (default)
- drop: siliently dropping packets
- close: notify client/server to close connection
- Matching
Pulumi.
Juniper Mist. Org. Inputs. Deviceprofile Gateway Idp Profiles Overwrite Matching - Name string
- Action string
- enum:
- alert (default)
- drop: siliently dropping packets
- close: notify client/server to close connection
- Matching
Deviceprofile
Gateway Idp Profiles Overwrite Matching - Name string
- action String
- enum:
- alert (default)
- drop: siliently dropping packets
- close: notify client/server to close connection
- matching
Deviceprofile
Gateway Idp Profiles Overwrite Matching - name String
- action string
- enum:
- alert (default)
- drop: siliently dropping packets
- close: notify client/server to close connection
- matching
Deviceprofile
Gateway Idp Profiles Overwrite Matching - name string
- action str
- enum:
- alert (default)
- drop: siliently dropping packets
- close: notify client/server to close connection
- matching
Deviceprofile
Gateway Idp Profiles Overwrite Matching - name str
- action String
- enum:
- alert (default)
- drop: siliently dropping packets
- close: notify client/server to close connection
- matching Property Map
- name String
DeviceprofileGatewayIdpProfilesOverwriteMatching, DeviceprofileGatewayIdpProfilesOverwriteMatchingArgs
- Attack
Names List<string> - Dst
Subnets List<string> - Severities List<string>
- Attack
Names []string - Dst
Subnets []string - Severities []string
- attack
Names List<String> - dst
Subnets List<String> - severities List<String>
- attack
Names string[] - dst
Subnets string[] - severities string[]
- attack_
names Sequence[str] - dst_
subnets Sequence[str] - severities Sequence[str]
- attack
Names List<String> - dst
Subnets List<String> - severities List<String>
DeviceprofileGatewayIpConfigs, DeviceprofileGatewayIpConfigsArgs
- Ip string
- Netmask string
- Secondary
Ips List<string> - optional list of secondary IPs in CIDR format
- Type string
- enum:
dhcp,static
- Ip string
- Netmask string
- Secondary
Ips []string - optional list of secondary IPs in CIDR format
- Type string
- enum:
dhcp,static
- ip String
- netmask String
- secondary
Ips List<String> - optional list of secondary IPs in CIDR format
- type String
- enum:
dhcp,static
- ip string
- netmask string
- secondary
Ips string[] - optional list of secondary IPs in CIDR format
- type string
- enum:
dhcp,static
- ip str
- netmask str
- secondary_
ips Sequence[str] - optional list of secondary IPs in CIDR format
- type str
- enum:
dhcp,static
- ip String
- netmask String
- secondary
Ips List<String> - optional list of secondary IPs in CIDR format
- type String
- enum:
dhcp,static
DeviceprofileGatewayNetwork, DeviceprofileGatewayNetworkArgs
- Name string
- Subnet string
- Disallow
Mist boolServices - whether to disallow Mist Devices in the network
- Gateway string
- Gateway6 string
- Internal
Access Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Network Internal Access - Internet
Access Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Network Internet Access - whether this network has direct internet access
- Isolation bool
- whether to allow clients in the network to talk to each other
- Multicast
Pulumi.
Juniper Mist. Org. Inputs. Deviceprofile Gateway Network Multicast - whether to enable multicast support (only PIM-sparse mode is supported)
- Routed
For List<string>Networks - for a Network (usually LAN), it can be routable to other networks (e.g. OSPF)
- Subnet6 string
- Tenants
Dictionary<string, Pulumi.
Juniper Mist. Org. Inputs. Deviceprofile Gateway Network Tenants> - Vlan
Id string - Vpn
Access Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Network Vpn Access> - Property key is the VPN name. Whether this network can be accessed from vpn
- Name string
- Subnet string
- Disallow
Mist boolServices - whether to disallow Mist Devices in the network
- Gateway string
- Gateway6 string
- Internal
Access DeviceprofileGateway Network Internal Access - Internet
Access DeviceprofileGateway Network Internet Access - whether this network has direct internet access
- Isolation bool
- whether to allow clients in the network to talk to each other
- Multicast
Deviceprofile
Gateway Network Multicast - whether to enable multicast support (only PIM-sparse mode is supported)
- Routed
For []stringNetworks - for a Network (usually LAN), it can be routable to other networks (e.g. OSPF)
- Subnet6 string
- Tenants
map[string]Deviceprofile
Gateway Network Tenants - Vlan
Id string - Vpn
Access map[string]DeviceprofileGateway Network Vpn Access - Property key is the VPN name. Whether this network can be accessed from vpn
- name String
- subnet String
- disallow
Mist BooleanServices - whether to disallow Mist Devices in the network
- gateway String
- gateway6 String
- internal
Access DeviceprofileGateway Network Internal Access - internet
Access DeviceprofileGateway Network Internet Access - whether this network has direct internet access
- isolation Boolean
- whether to allow clients in the network to talk to each other
- multicast
Deviceprofile
Gateway Network Multicast - whether to enable multicast support (only PIM-sparse mode is supported)
- routed
For List<String>Networks - for a Network (usually LAN), it can be routable to other networks (e.g. OSPF)
- subnet6 String
- tenants
Map<String,Deviceprofile
Gateway Network Tenants> - vlan
Id String - vpn
Access Map<String,DeviceprofileGateway Network Vpn Access> - Property key is the VPN name. Whether this network can be accessed from vpn
- name string
- subnet string
- disallow
Mist booleanServices - whether to disallow Mist Devices in the network
- gateway string
- gateway6 string
- internal
Access DeviceprofileGateway Network Internal Access - internet
Access DeviceprofileGateway Network Internet Access - whether this network has direct internet access
- isolation boolean
- whether to allow clients in the network to talk to each other
- multicast
Deviceprofile
Gateway Network Multicast - whether to enable multicast support (only PIM-sparse mode is supported)
- routed
For string[]Networks - for a Network (usually LAN), it can be routable to other networks (e.g. OSPF)
- subnet6 string
- tenants
{[key: string]: Deviceprofile
Gateway Network Tenants} - vlan
Id string - vpn
Access {[key: string]: DeviceprofileGateway Network Vpn Access} - Property key is the VPN name. Whether this network can be accessed from vpn
- name str
- subnet str
- disallow_
mist_ boolservices - whether to disallow Mist Devices in the network
- gateway str
- gateway6 str
- internal_
access DeviceprofileGateway Network Internal Access - internet_
access DeviceprofileGateway Network Internet Access - whether this network has direct internet access
- isolation bool
- whether to allow clients in the network to talk to each other
- multicast
Deviceprofile
Gateway Network Multicast - whether to enable multicast support (only PIM-sparse mode is supported)
- routed_
for_ Sequence[str]networks - for a Network (usually LAN), it can be routable to other networks (e.g. OSPF)
- subnet6 str
- tenants
Mapping[str, Deviceprofile
Gateway Network Tenants] - vlan_
id str - vpn_
access Mapping[str, DeviceprofileGateway Network Vpn Access] - Property key is the VPN name. Whether this network can be accessed from vpn
- name String
- subnet String
- disallow
Mist BooleanServices - whether to disallow Mist Devices in the network
- gateway String
- gateway6 String
- internal
Access Property Map - internet
Access Property Map - whether this network has direct internet access
- isolation Boolean
- whether to allow clients in the network to talk to each other
- multicast Property Map
- whether to enable multicast support (only PIM-sparse mode is supported)
- routed
For List<String>Networks - for a Network (usually LAN), it can be routable to other networks (e.g. OSPF)
- subnet6 String
- tenants Map<Property Map>
- vlan
Id String - vpn
Access Map<Property Map> - Property key is the VPN name. Whether this network can be accessed from vpn
DeviceprofileGatewayNetworkInternalAccess, DeviceprofileGatewayNetworkInternalAccessArgs
- Enabled bool
- Enabled bool
- enabled Boolean
- enabled boolean
- enabled bool
- enabled Boolean
DeviceprofileGatewayNetworkInternetAccess, DeviceprofileGatewayNetworkInternetAccessArgs
- Create
Simple boolService Policy - Destination
Nat Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Network Internet Access Destination Nat> - Property key may be an IP/Port (i.e. "63.16.0.3:443"), or a port (i.e. ":2222")
- Enabled bool
- Restricted bool
- by default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - Static
Nat Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Network Internet Access Static Nat> - Property key may be an IP Address (i.e. "172.16.0.1"), and IP Address and Port (i.e. "172.16.0.1:8443") or a CIDR (i.e. "172.16.0.12/20")
- Create
Simple boolService Policy - Destination
Nat map[string]DeviceprofileGateway Network Internet Access Destination Nat - Property key may be an IP/Port (i.e. "63.16.0.3:443"), or a port (i.e. ":2222")
- Enabled bool
- Restricted bool
- by default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - Static
Nat map[string]DeviceprofileGateway Network Internet Access Static Nat - Property key may be an IP Address (i.e. "172.16.0.1"), and IP Address and Port (i.e. "172.16.0.1:8443") or a CIDR (i.e. "172.16.0.12/20")
- create
Simple BooleanService Policy - destination
Nat Map<String,DeviceprofileGateway Network Internet Access Destination Nat> - Property key may be an IP/Port (i.e. "63.16.0.3:443"), or a port (i.e. ":2222")
- enabled Boolean
- restricted Boolean
- by default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - static
Nat Map<String,DeviceprofileGateway Network Internet Access Static Nat> - Property key may be an IP Address (i.e. "172.16.0.1"), and IP Address and Port (i.e. "172.16.0.1:8443") or a CIDR (i.e. "172.16.0.12/20")
- create
Simple booleanService Policy - destination
Nat {[key: string]: DeviceprofileGateway Network Internet Access Destination Nat} - Property key may be an IP/Port (i.e. "63.16.0.3:443"), or a port (i.e. ":2222")
- enabled boolean
- restricted boolean
- by default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - static
Nat {[key: string]: DeviceprofileGateway Network Internet Access Static Nat} - Property key may be an IP Address (i.e. "172.16.0.1"), and IP Address and Port (i.e. "172.16.0.1:8443") or a CIDR (i.e. "172.16.0.12/20")
- create_
simple_ boolservice_ policy - destination_
nat Mapping[str, DeviceprofileGateway Network Internet Access Destination Nat] - Property key may be an IP/Port (i.e. "63.16.0.3:443"), or a port (i.e. ":2222")
- enabled bool
- restricted bool
- by default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - static_
nat Mapping[str, DeviceprofileGateway Network Internet Access Static Nat] - Property key may be an IP Address (i.e. "172.16.0.1"), and IP Address and Port (i.e. "172.16.0.1:8443") or a CIDR (i.e. "172.16.0.12/20")
- create
Simple BooleanService Policy - destination
Nat Map<Property Map> - Property key may be an IP/Port (i.e. "63.16.0.3:443"), or a port (i.e. ":2222")
- enabled Boolean
- restricted Boolean
- by default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - static
Nat Map<Property Map> - Property key may be an IP Address (i.e. "172.16.0.1"), and IP Address and Port (i.e. "172.16.0.1:8443") or a CIDR (i.e. "172.16.0.12/20")
DeviceprofileGatewayNetworkInternetAccessDestinationNat, DeviceprofileGatewayNetworkInternetAccessDestinationNatArgs
- Internal
Ip string - Name string
- Port int
- Internal
Ip string - Name string
- Port int
- internal
Ip String - name String
- port Integer
- internal
Ip string - name string
- port number
- internal_
ip str - name str
- port int
- internal
Ip String - name String
- port Number
DeviceprofileGatewayNetworkInternetAccessStaticNat, DeviceprofileGatewayNetworkInternetAccessStaticNatArgs
- Internal
Ip string - Name string
- Wan
Name string - If not set, we configure the nat policies against all WAN ports for simplicity
- Internal
Ip string - Name string
- Wan
Name string - If not set, we configure the nat policies against all WAN ports for simplicity
- internal
Ip String - name String
- wan
Name String - If not set, we configure the nat policies against all WAN ports for simplicity
- internal
Ip string - name string
- wan
Name string - If not set, we configure the nat policies against all WAN ports for simplicity
- internal_
ip str - name str
- wan_
name str - If not set, we configure the nat policies against all WAN ports for simplicity
- internal
Ip String - name String
- wan
Name String - If not set, we configure the nat policies against all WAN ports for simplicity
DeviceprofileGatewayNetworkMulticast, DeviceprofileGatewayNetworkMulticastArgs
- Disable
Igmp bool - if the network will only be the soruce of the multicast traffic, IGMP can be disabled
- Enabled bool
- Groups
Dictionary<string, Pulumi.
Juniper Mist. Org. Inputs. Deviceprofile Gateway Network Multicast Groups> - Group address to RP (rendezvous point) mapping. Property Key is the CIDR (example "225.1.0.3/32")
- Disable
Igmp bool - if the network will only be the soruce of the multicast traffic, IGMP can be disabled
- Enabled bool
- Groups
map[string]Deviceprofile
Gateway Network Multicast Groups - Group address to RP (rendezvous point) mapping. Property Key is the CIDR (example "225.1.0.3/32")
- disable
Igmp Boolean - if the network will only be the soruce of the multicast traffic, IGMP can be disabled
- enabled Boolean
- groups
Map<String,Deviceprofile
Gateway Network Multicast Groups> - Group address to RP (rendezvous point) mapping. Property Key is the CIDR (example "225.1.0.3/32")
- disable
Igmp boolean - if the network will only be the soruce of the multicast traffic, IGMP can be disabled
- enabled boolean
- groups
{[key: string]: Deviceprofile
Gateway Network Multicast Groups} - Group address to RP (rendezvous point) mapping. Property Key is the CIDR (example "225.1.0.3/32")
- disable_
igmp bool - if the network will only be the soruce of the multicast traffic, IGMP can be disabled
- enabled bool
- groups
Mapping[str, Deviceprofile
Gateway Network Multicast Groups] - Group address to RP (rendezvous point) mapping. Property Key is the CIDR (example "225.1.0.3/32")
- disable
Igmp Boolean - if the network will only be the soruce of the multicast traffic, IGMP can be disabled
- enabled Boolean
- groups Map<Property Map>
- Group address to RP (rendezvous point) mapping. Property Key is the CIDR (example "225.1.0.3/32")
DeviceprofileGatewayNetworkMulticastGroups, DeviceprofileGatewayNetworkMulticastGroupsArgs
- Rp
Ip string - RP (rendezvous point) IP Address
- Rp
Ip string - RP (rendezvous point) IP Address
- rp
Ip String - RP (rendezvous point) IP Address
- rp
Ip string - RP (rendezvous point) IP Address
- rp_
ip str - RP (rendezvous point) IP Address
- rp
Ip String - RP (rendezvous point) IP Address
DeviceprofileGatewayNetworkTenants, DeviceprofileGatewayNetworkTenantsArgs
- Addresses List<string>
- Addresses []string
- addresses List<String>
- addresses string[]
- addresses Sequence[str]
- addresses List<String>
DeviceprofileGatewayNetworkVpnAccess, DeviceprofileGatewayNetworkVpnAccessArgs
- Advertised
Subnet string - if
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - Allow
Ping bool - whether to allow ping from vpn into this routed network
- Destination
Nat Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Network Vpn Access Destination Nat> - Property key may be an IP/Port (i.e. "63.16.0.3:443"), or a port (i.e. ":2222")
- Nat
Pool string - if
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - No
Readvertise boolTo Lan Bgp - toward LAN-side BGP peers
- No
Readvertise boolTo Lan Ospf - toward LAN-side OSPF peers
- No
Readvertise boolTo Overlay - toward overlay how HUB should deal with routes it received from Spokes
- Other
Vrfs List<string> - by default, the routes are only readvertised toward the same vrf on spoke to allow it to be leaked to other vrfs
- Routed bool
- whether this network is routable
- Source
Nat Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Network Vpn Access Source Nat - if
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub - Static
Nat Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Deviceprofile Gateway Network Vpn Access Static Nat> - Property key may be an IP Address (i.e. "172.16.0.1"), and IP Address and Port (i.e. "172.16.0.1:8443") or a CIDR (i.e. "172.16.0.12/20")
- Summarized
Subnet string - toward overlay how HUB should deal with routes it received from Spokes
- Summarized
Subnet stringTo Lan Bgp - toward LAN-side BGP peers
- Summarized
Subnet stringTo Lan Ospf - toward LAN-side OSPF peers
- Advertised
Subnet string - if
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - Allow
Ping bool - whether to allow ping from vpn into this routed network
- Destination
Nat map[string]DeviceprofileGateway Network Vpn Access Destination Nat - Property key may be an IP/Port (i.e. "63.16.0.3:443"), or a port (i.e. ":2222")
- Nat
Pool string - if
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - No
Readvertise boolTo Lan Bgp - toward LAN-side BGP peers
- No
Readvertise boolTo Lan Ospf - toward LAN-side OSPF peers
- No
Readvertise boolTo Overlay - toward overlay how HUB should deal with routes it received from Spokes
- Other
Vrfs []string - by default, the routes are only readvertised toward the same vrf on spoke to allow it to be leaked to other vrfs
- Routed bool
- whether this network is routable
- Source
Nat DeviceprofileGateway Network Vpn Access Source Nat - if
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub - Static
Nat map[string]DeviceprofileGateway Network Vpn Access Static Nat - Property key may be an IP Address (i.e. "172.16.0.1"), and IP Address and Port (i.e. "172.16.0.1:8443") or a CIDR (i.e. "172.16.0.12/20")
- Summarized
Subnet string - toward overlay how HUB should deal with routes it received from Spokes
- Summarized
Subnet stringTo Lan Bgp - toward LAN-side BGP peers
- Summarized
Subnet stringTo Lan Ospf - toward LAN-side OSPF peers
- advertised
Subnet String - if
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - allow
Ping Boolean - whether to allow ping from vpn into this routed network
- destination
Nat Map<String,DeviceprofileGateway Network Vpn Access Destination Nat> - Property key may be an IP/Port (i.e. "63.16.0.3:443"), or a port (i.e. ":2222")
- nat
Pool String - if
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - no
Readvertise BooleanTo Lan Bgp - toward LAN-side BGP peers
- no
Readvertise BooleanTo Lan Ospf - toward LAN-side OSPF peers
- no
Readvertise BooleanTo Overlay - toward overlay how HUB should deal with routes it received from Spokes
- other
Vrfs List<String> - by default, the routes are only readvertised toward the same vrf on spoke to allow it to be leaked to other vrfs
- routed Boolean
- whether this network is routable
- source
Nat DeviceprofileGateway Network Vpn Access Source Nat - if
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub - static
Nat Map<String,DeviceprofileGateway Network Vpn Access Static Nat> - Property key may be an IP Address (i.e. "172.16.0.1"), and IP Address and Port (i.e. "172.16.0.1:8443") or a CIDR (i.e. "172.16.0.12/20")