Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
published on Saturday, Jul 11, 2026 by Pulumi
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
published on Saturday, Jul 11, 2026 by Pulumi
This resource manages the Gateway Templates.
A Gateway template is used to define the static ip address and subnet mask of the hub device, along with the gateway. It also allows for the selection of options such as enabling source nat and overriding the public ip for the hub if needed. the endpoint selected in the gateway template ties the hub and spoke devices together and creates the auto-vpn tunnel.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as junipermist from "@pulumi/juniper-mist";
const gatewaytemplateOne = new junipermist.org.Gatewaytemplate("gatewaytemplate_one", {
type: "spoke",
name: "gatewaytemplate_one",
orgId: terraformTest.id,
portConfig: {
"ge-0/0/3": {
name: "FTTH",
usage: "wan",
aggregated: false,
redundant: false,
critical: false,
wanType: "broadband",
ipConfig: {
type: "static",
ip: "192.168.1.8",
netmask: "/24",
gateway: "192.168.1.1",
},
disableAutoneg: false,
speed: "auto",
duplex: "auto",
wanSourceNat: {
disabled: false,
},
vpnPaths: {
"SSR_HUB_DC-MPLS.OrgOverlay": {
key: 0,
role: "spoke",
bfdProfile: "broadband",
},
},
},
"ge-0/0/5": {
usage: "lan",
critical: false,
aggregated: true,
aeDisableLacp: false,
aeLacpForceUp: true,
aeIdx: "0",
redundant: false,
networks: [
"PRD-Core",
"PRD-Mgmt",
"PRD-Lab",
],
},
},
ipConfigs: {
"PRD-Core": {
type: "static",
ip: "10.3.100.9",
netmask: "/24",
},
"PRD-Mgmt": {
type: "static",
ip: "10.3.172.1",
netmask: "/24",
},
"PRD-Lab": {
type: "static",
ip: "10.3.171.1",
netmask: "/24",
},
},
servicePolicies: [{
name: "Policy-14",
tenants: ["PRD-Core"],
services: ["any"],
action: "allow",
pathPreference: "HUB",
idp: {
enabled: true,
profile: "critical",
alertOnly: false,
},
}],
});
import pulumi
import pulumi_juniper_mist as junipermist
gatewaytemplate_one = junipermist.org.Gatewaytemplate("gatewaytemplate_one",
type="spoke",
name="gatewaytemplate_one",
org_id=terraform_test["id"],
port_config={
"ge-0/0/3": {
"name": "FTTH",
"usage": "wan",
"aggregated": False,
"redundant": False,
"critical": False,
"wan_type": "broadband",
"ip_config": {
"type": "static",
"ip": "192.168.1.8",
"netmask": "/24",
"gateway": "192.168.1.1",
},
"disable_autoneg": False,
"speed": "auto",
"duplex": "auto",
"wan_source_nat": {
"disabled": False,
},
"vpn_paths": {
"SSR_HUB_DC-MPLS.OrgOverlay": {
"key": 0,
"role": "spoke",
"bfd_profile": "broadband",
},
},
},
"ge-0/0/5": {
"usage": "lan",
"critical": False,
"aggregated": True,
"ae_disable_lacp": False,
"ae_lacp_force_up": True,
"ae_idx": "0",
"redundant": False,
"networks": [
"PRD-Core",
"PRD-Mgmt",
"PRD-Lab",
],
},
},
ip_configs={
"PRD-Core": {
"type": "static",
"ip": "10.3.100.9",
"netmask": "/24",
},
"PRD-Mgmt": {
"type": "static",
"ip": "10.3.172.1",
"netmask": "/24",
},
"PRD-Lab": {
"type": "static",
"ip": "10.3.171.1",
"netmask": "/24",
},
},
service_policies=[{
"name": "Policy-14",
"tenants": ["PRD-Core"],
"services": ["any"],
"action": "allow",
"path_preference": "HUB",
"idp": {
"enabled": True,
"profile": "critical",
"alert_only": False,
},
}])
package main
import (
"github.com/pulumi/pulumi-junipermist/sdk/go/junipermist/org"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := org.NewGatewaytemplate(ctx, "gatewaytemplate_one", &org.GatewaytemplateArgs{
Type: pulumi.String("spoke"),
Name: pulumi.String("gatewaytemplate_one"),
OrgId: pulumi.Any(terraformTest.Id),
PortConfig: org.GatewaytemplatePortConfigMap{
"ge-0/0/3": &org.GatewaytemplatePortConfigArgs{
Name: pulumi.String("FTTH"),
Usage: pulumi.String("wan"),
Aggregated: pulumi.Bool(false),
Redundant: pulumi.Bool(false),
Critical: pulumi.Bool(false),
WanType: pulumi.String("broadband"),
IpConfig: &org.GatewaytemplatePortConfigIpConfigArgs{
Type: pulumi.String("static"),
Ip: pulumi.String("192.168.1.8"),
Netmask: pulumi.String("/24"),
Gateway: pulumi.String("192.168.1.1"),
},
DisableAutoneg: pulumi.Bool(false),
Speed: pulumi.String("auto"),
Duplex: pulumi.String("auto"),
WanSourceNat: &org.GatewaytemplatePortConfigWanSourceNatArgs{
Disabled: pulumi.Bool(false),
},
VpnPaths: org.GatewaytemplatePortConfigVpnPathsMap{
"SSR_HUB_DC-MPLS.OrgOverlay": &org.GatewaytemplatePortConfigVpnPathsArgs{
Key: 0,
Role: pulumi.String("spoke"),
BfdProfile: pulumi.String("broadband"),
},
},
},
"ge-0/0/5": &org.GatewaytemplatePortConfigArgs{
Usage: pulumi.String("lan"),
Critical: pulumi.Bool(false),
Aggregated: pulumi.Bool(true),
AeDisableLacp: pulumi.Bool(false),
AeLacpForceUp: pulumi.Bool(true),
AeIdx: pulumi.String("0"),
Redundant: pulumi.Bool(false),
Networks: pulumi.StringArray{
pulumi.String("PRD-Core"),
pulumi.String("PRD-Mgmt"),
pulumi.String("PRD-Lab"),
},
},
},
IpConfigs: org.GatewaytemplateIpConfigsMap{
"PRD-Core": &org.GatewaytemplateIpConfigsArgs{
Type: pulumi.String("static"),
Ip: pulumi.String("10.3.100.9"),
Netmask: pulumi.String("/24"),
},
"PRD-Mgmt": &org.GatewaytemplateIpConfigsArgs{
Type: pulumi.String("static"),
Ip: pulumi.String("10.3.172.1"),
Netmask: pulumi.String("/24"),
},
"PRD-Lab": &org.GatewaytemplateIpConfigsArgs{
Type: pulumi.String("static"),
Ip: pulumi.String("10.3.171.1"),
Netmask: pulumi.String("/24"),
},
},
ServicePolicies: org.GatewaytemplateServicePolicyArray{
&org.GatewaytemplateServicePolicyArgs{
Name: pulumi.String("Policy-14"),
Tenants: pulumi.StringArray{
pulumi.String("PRD-Core"),
},
Services: pulumi.StringArray{
pulumi.String("any"),
},
Action: pulumi.String("allow"),
PathPreference: pulumi.String("HUB"),
Idp: &org.GatewaytemplateServicePolicyIdpArgs{
Enabled: pulumi.Bool(true),
Profile: pulumi.String("critical"),
AlertOnly: pulumi.Bool(false),
},
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using JuniperMist = Pulumi.JuniperMist;
return await Deployment.RunAsync(() =>
{
var gatewaytemplateOne = new JuniperMist.Org.Gatewaytemplate("gatewaytemplate_one", new()
{
Type = "spoke",
Name = "gatewaytemplate_one",
OrgId = terraformTest.Id,
PortConfig =
{
{ "ge-0/0/3", new JuniperMist.Org.Inputs.GatewaytemplatePortConfigArgs
{
Name = "FTTH",
Usage = "wan",
Aggregated = false,
Redundant = false,
Critical = false,
WanType = "broadband",
IpConfig = new JuniperMist.Org.Inputs.GatewaytemplatePortConfigIpConfigArgs
{
Type = "static",
Ip = "192.168.1.8",
Netmask = "/24",
Gateway = "192.168.1.1",
},
DisableAutoneg = false,
Speed = "auto",
Duplex = "auto",
WanSourceNat = new JuniperMist.Org.Inputs.GatewaytemplatePortConfigWanSourceNatArgs
{
Disabled = false,
},
VpnPaths =
{
{ "SSR_HUB_DC-MPLS.OrgOverlay", new JuniperMist.Org.Inputs.GatewaytemplatePortConfigVpnPathsArgs
{
Key = 0,
Role = "spoke",
BfdProfile = "broadband",
} },
},
} },
{ "ge-0/0/5", new JuniperMist.Org.Inputs.GatewaytemplatePortConfigArgs
{
Usage = "lan",
Critical = false,
Aggregated = true,
AeDisableLacp = false,
AeLacpForceUp = true,
AeIdx = "0",
Redundant = false,
Networks = new[]
{
"PRD-Core",
"PRD-Mgmt",
"PRD-Lab",
},
} },
},
IpConfigs =
{
{ "PRD-Core", new JuniperMist.Org.Inputs.GatewaytemplateIpConfigsArgs
{
Type = "static",
Ip = "10.3.100.9",
Netmask = "/24",
} },
{ "PRD-Mgmt", new JuniperMist.Org.Inputs.GatewaytemplateIpConfigsArgs
{
Type = "static",
Ip = "10.3.172.1",
Netmask = "/24",
} },
{ "PRD-Lab", new JuniperMist.Org.Inputs.GatewaytemplateIpConfigsArgs
{
Type = "static",
Ip = "10.3.171.1",
Netmask = "/24",
} },
},
ServicePolicies = new[]
{
new JuniperMist.Org.Inputs.GatewaytemplateServicePolicyArgs
{
Name = "Policy-14",
Tenants = new[]
{
"PRD-Core",
},
Services = new[]
{
"any",
},
Action = "allow",
PathPreference = "HUB",
Idp = new JuniperMist.Org.Inputs.GatewaytemplateServicePolicyIdpArgs
{
Enabled = true,
Profile = "critical",
AlertOnly = false,
},
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.org.Gatewaytemplate;
import com.pulumi.junipermist.org.GatewaytemplateArgs;
import com.pulumi.junipermist.org.inputs.GatewaytemplatePortConfigArgs;
import com.pulumi.junipermist.org.inputs.GatewaytemplatePortConfigIpConfigArgs;
import com.pulumi.junipermist.org.inputs.GatewaytemplatePortConfigWanSourceNatArgs;
import com.pulumi.junipermist.org.inputs.GatewaytemplatePortConfigVpnPathsArgs;
import com.pulumi.junipermist.org.inputs.GatewaytemplateIpConfigsArgs;
import com.pulumi.junipermist.org.inputs.GatewaytemplateServicePolicyArgs;
import com.pulumi.junipermist.org.inputs.GatewaytemplateServicePolicyIdpArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var gatewaytemplateOne = new Gatewaytemplate("gatewaytemplateOne", GatewaytemplateArgs.builder()
.type("spoke")
.name("gatewaytemplate_one")
.orgId(terraformTest.id())
.portConfig(Map.ofEntries(
Map.entry("ge-0/0/3", GatewaytemplatePortConfigArgs.builder()
.name("FTTH")
.usage("wan")
.aggregated(false)
.redundant(false)
.critical(false)
.wanType("broadband")
.ipConfig(GatewaytemplatePortConfigIpConfigArgs.builder()
.type("static")
.ip("192.168.1.8")
.netmask("/24")
.gateway("192.168.1.1")
.build())
.disableAutoneg(false)
.speed("auto")
.duplex("auto")
.wanSourceNat(GatewaytemplatePortConfigWanSourceNatArgs.builder()
.disabled(false)
.build())
.vpnPaths(Map.of("SSR_HUB_DC-MPLS.OrgOverlay", GatewaytemplatePortConfigVpnPathsArgs.builder()
.key(0)
.role("spoke")
.bfdProfile("broadband")
.build()))
.build()),
Map.entry("ge-0/0/5", GatewaytemplatePortConfigArgs.builder()
.usage("lan")
.critical(false)
.aggregated(true)
.aeDisableLacp(false)
.aeLacpForceUp(true)
.aeIdx("0")
.redundant(false)
.networks(
"PRD-Core",
"PRD-Mgmt",
"PRD-Lab")
.build())
))
.ipConfigs(Map.ofEntries(
Map.entry("PRD-Core", GatewaytemplateIpConfigsArgs.builder()
.type("static")
.ip("10.3.100.9")
.netmask("/24")
.build()),
Map.entry("PRD-Mgmt", GatewaytemplateIpConfigsArgs.builder()
.type("static")
.ip("10.3.172.1")
.netmask("/24")
.build()),
Map.entry("PRD-Lab", GatewaytemplateIpConfigsArgs.builder()
.type("static")
.ip("10.3.171.1")
.netmask("/24")
.build())
))
.servicePolicies(GatewaytemplateServicePolicyArgs.builder()
.name("Policy-14")
.tenants("PRD-Core")
.services("any")
.action("allow")
.pathPreference("HUB")
.idp(GatewaytemplateServicePolicyIdpArgs.builder()
.enabled(true)
.profile("critical")
.alertOnly(false)
.build())
.build())
.build());
}
}
resources:
gatewaytemplateOne:
type: junipermist:org:Gatewaytemplate
name: gatewaytemplate_one
properties:
type: spoke
name: gatewaytemplate_one
orgId: ${terraformTest.id}
portConfig:
ge-0/0/3:
name: FTTH
usage: wan
aggregated: false
redundant: false
critical: false
wanType: broadband
ipConfig:
type: static
ip: 192.168.1.8
netmask: /24
gateway: 192.168.1.1
disableAutoneg: false
speed: auto
duplex: auto
wanSourceNat:
disabled: false
vpnPaths:
SSR_HUB_DC-MPLS.OrgOverlay:
key: 0
role: spoke
bfdProfile: broadband
ge-0/0/5:
usage: lan
critical: false
aggregated: true
aeDisableLacp: false
aeLacpForceUp: true
aeIdx: 0
redundant: false
networks:
- PRD-Core
- PRD-Mgmt
- PRD-Lab
ipConfigs:
PRD-Core:
type: static
ip: 10.3.100.9
netmask: /24
PRD-Mgmt:
type: static
ip: 10.3.172.1
netmask: /24
PRD-Lab:
type: static
ip: 10.3.171.1
netmask: /24
servicePolicies:
- name: Policy-14
tenants:
- PRD-Core
services:
- any
action: allow
pathPreference: HUB
idp:
enabled: true
profile: critical
alertOnly: false
pulumi {
required_providers {
junipermist = {
source = "pulumi/junipermist"
}
}
}
resource "junipermist_org_gatewaytemplate" "gatewaytemplate_one" {
type = "spoke"
name = "gatewaytemplate_one"
org_id = terraformTest.id
port_config = {
"ge-0/0/3" = {
name = "FTTH"
usage = "wan"
aggregated = false
redundant = false
critical = false
wan_type = "broadband"
ip_config = {
type = "static"
ip = "192.168.1.8"
netmask = "/24"
gateway = "192.168.1.1"
}
disable_autoneg = false
speed = "auto"
duplex = "auto"
wan_source_nat = {
disabled = false
}
vpn_paths = {
"SSR_HUB_DC-MPLS.OrgOverlay" = {
key = 0
role = "spoke"
bfd_profile = "broadband"
}
}
}
"ge-0/0/5" = {
usage = "lan"
critical = false
aggregated = true
ae_disable_lacp = false
ae_lacp_force_up = true
ae_idx = 0
redundant = false
networks = ["PRD-Core", "PRD-Mgmt", "PRD-Lab"]
}
}
ip_configs = {
"PRD-Core" = {
type = "static"
ip = "10.3.100.9"
netmask = "/24"
}
"PRD-Mgmt" = {
type = "static"
ip = "10.3.172.1"
netmask = "/24"
}
"PRD-Lab" = {
type = "static"
ip = "10.3.171.1"
netmask = "/24"
}
}
service_policies {
name = "Policy-14"
tenants = ["PRD-Core"]
services = ["any"]
action = "allow"
path_preference = "HUB"
idp = {
enabled = true
profile = "critical"
alert_only = false
}
}
}
Create Gatewaytemplate Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Gatewaytemplate(name: string, args: GatewaytemplateArgs, opts?: CustomResourceOptions);@overload
def Gatewaytemplate(resource_name: str,
args: GatewaytemplateArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Gatewaytemplate(resource_name: str,
opts: Optional[ResourceOptions] = None,
org_id: Optional[str] = None,
ntp_servers: Optional[Sequence[str]] = None,
tunnel_provider_options: Optional[GatewaytemplateTunnelProviderOptionsArgs] = None,
dns_override: Optional[bool] = None,
dns_servers: Optional[Sequence[str]] = None,
oob_ip_config: Optional[GatewaytemplateOobIpConfigArgs] = None,
extra_routes: Optional[Mapping[str, GatewaytemplateExtraRoutesArgs]] = None,
extra_routes6: Optional[Mapping[str, GatewaytemplateExtraRoutes6Args]] = None,
gateway_mgmt: Optional[GatewaytemplateGatewayMgmtArgs] = None,
idp_profiles: Optional[Mapping[str, GatewaytemplateIdpProfilesArgs]] = None,
ip_configs: Optional[Mapping[str, GatewaytemplateIpConfigsArgs]] = None,
name: Optional[str] = None,
networks: Optional[Sequence[GatewaytemplateNetworkArgs]] = None,
dhcpd_config: Optional[GatewaytemplateDhcpdConfigArgs] = None,
ntp_override: Optional[bool] = None,
dns_suffixes: Optional[Sequence[str]] = None,
bgp_config: Optional[Mapping[str, GatewaytemplateBgpConfigArgs]] = None,
path_preferences: Optional[Mapping[str, GatewaytemplatePathPreferencesArgs]] = None,
port_config: Optional[Mapping[str, GatewaytemplatePortConfigArgs]] = None,
router_id: Optional[str] = None,
routing_policies: Optional[Mapping[str, GatewaytemplateRoutingPoliciesArgs]] = None,
service_policies: Optional[Sequence[GatewaytemplateServicePolicyArgs]] = None,
ssr_additional_config_cmds: Optional[Sequence[str]] = None,
tunnel_configs: Optional[Mapping[str, GatewaytemplateTunnelConfigsArgs]] = None,
additional_config_cmds: Optional[Sequence[str]] = None,
type: Optional[str] = None,
url_filtering_deny_msg: Optional[str] = None,
vrf_config: Optional[GatewaytemplateVrfConfigArgs] = None,
vrf_instances: Optional[Mapping[str, GatewaytemplateVrfInstancesArgs]] = None)func NewGatewaytemplate(ctx *Context, name string, args GatewaytemplateArgs, opts ...ResourceOption) (*Gatewaytemplate, error)public Gatewaytemplate(string name, GatewaytemplateArgs args, CustomResourceOptions? opts = null)
public Gatewaytemplate(String name, GatewaytemplateArgs args)
public Gatewaytemplate(String name, GatewaytemplateArgs args, CustomResourceOptions options)
type: junipermist:org:Gatewaytemplate
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "junipermist_org_gatewaytemplate" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args GatewaytemplateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args GatewaytemplateArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args GatewaytemplateArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args GatewaytemplateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args GatewaytemplateArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var gatewaytemplateResource = new JuniperMist.Org.Gatewaytemplate("gatewaytemplateResource", new()
{
OrgId = "string",
NtpServers = new[]
{
"string",
},
TunnelProviderOptions = new JuniperMist.Org.Inputs.GatewaytemplateTunnelProviderOptionsArgs
{
Jse = new JuniperMist.Org.Inputs.GatewaytemplateTunnelProviderOptionsJseArgs
{
NumUsers = 0,
OrgName = "string",
},
Prisma = new JuniperMist.Org.Inputs.GatewaytemplateTunnelProviderOptionsPrismaArgs
{
ServiceAccountName = "string",
},
Zscaler = new JuniperMist.Org.Inputs.GatewaytemplateTunnelProviderOptionsZscalerArgs
{
AupBlockInternetUntilAccepted = false,
AupEnabled = false,
AupForceSslInspection = false,
AupTimeoutInDays = 0,
AuthRequired = false,
CautionEnabled = false,
DnBandwidth = 0,
IdleTimeInMinutes = 0,
OfwEnabled = false,
SubLocations = new[]
{
new JuniperMist.Org.Inputs.GatewaytemplateTunnelProviderOptionsZscalerSubLocationArgs
{
AupBlockInternetUntilAccepted = false,
AupEnabled = false,
AupForceSslInspection = false,
AupTimeoutInDays = 0,
AuthRequired = false,
CautionEnabled = false,
DnBandwidth = 0,
IdleTimeInMinutes = 0,
Name = "string",
OfwEnabled = false,
SurrogateIp = false,
SurrogateIpEnforcedForKnownBrowsers = false,
SurrogateRefreshTimeInMinutes = 0,
UpBandwidth = 0,
},
},
SurrogateIp = false,
SurrogateIpEnforcedForKnownBrowsers = false,
SurrogateRefreshTimeInMinutes = 0,
UpBandwidth = 0,
XffForwardEnabled = false,
},
},
DnsOverride = false,
DnsServers = new[]
{
"string",
},
OobIpConfig = new JuniperMist.Org.Inputs.GatewaytemplateOobIpConfigArgs
{
Gateway = "string",
Ip = "string",
Netmask = "string",
Node1 = new JuniperMist.Org.Inputs.GatewaytemplateOobIpConfigNode1Args
{
Gateway = "string",
Ip = "string",
Netmask = "string",
Type = "string",
UseMgmtVrf = false,
UseMgmtVrfForHostOut = false,
VlanId = "string",
},
Type = "string",
UseMgmtVrf = false,
UseMgmtVrfForHostOut = false,
VlanId = "string",
},
ExtraRoutes =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateExtraRoutesArgs
{
Via = "string",
} },
},
ExtraRoutes6 =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateExtraRoutes6Args
{
Via = "string",
} },
},
GatewayMgmt = new JuniperMist.Org.Inputs.GatewaytemplateGatewayMgmtArgs
{
AdminSshkeys = new[]
{
"string",
},
AppProbing = new JuniperMist.Org.Inputs.GatewaytemplateGatewayMgmtAppProbingArgs
{
Apps = new[]
{
"string",
},
CustomApps = new[]
{
new JuniperMist.Org.Inputs.GatewaytemplateGatewayMgmtAppProbingCustomAppArgs
{
Address = "string",
AppType = "string",
Hostnames = new[]
{
"string",
},
Key = "string",
Name = "string",
Network = "string",
PacketSize = 0,
Protocol = "string",
Url = "string",
Vrf = "string",
},
},
Enabled = false,
},
AppUsage = false,
AutoSignatureUpdate = new JuniperMist.Org.Inputs.GatewaytemplateGatewayMgmtAutoSignatureUpdateArgs
{
DayOfWeek = "string",
Enable = false,
TimeOfDay = "string",
},
ConfigRevertTimer = 0,
DisableConsole = false,
DisableOob = false,
DisableUsb = false,
FipsEnabled = false,
ProbeHosts = new[]
{
"string",
},
ProbeHostsv6s = new[]
{
"string",
},
ProtectRe = new JuniperMist.Org.Inputs.GatewaytemplateGatewayMgmtProtectReArgs
{
AllowedServices = new[]
{
"string",
},
Customs = new[]
{
new JuniperMist.Org.Inputs.GatewaytemplateGatewayMgmtProtectReCustomArgs
{
PortRange = "string",
Protocol = "string",
Subnets = new[]
{
"string",
},
},
},
Enabled = false,
HitCount = false,
TrustedHosts = new[]
{
"string",
},
},
RootPassword = "string",
SecurityLogSourceAddress = "string",
SecurityLogSourceInterface = "string",
},
IdpProfiles =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateIdpProfilesArgs
{
BaseProfile = "string",
Name = "string",
OrgId = "string",
Overwrites = new[]
{
new JuniperMist.Org.Inputs.GatewaytemplateIdpProfilesOverwriteArgs
{
Action = "string",
Matching = new JuniperMist.Org.Inputs.GatewaytemplateIdpProfilesOverwriteMatchingArgs
{
AttackNames = new[]
{
"string",
},
DstSubnets = new[]
{
"string",
},
Severities = new[]
{
"string",
},
},
Name = "string",
},
},
} },
},
IpConfigs =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateIpConfigsArgs
{
Ip = "string",
Ip6 = "string",
Netmask = "string",
Netmask6 = "string",
SecondaryIps = new[]
{
"string",
},
Type = "string",
Type6 = "string",
} },
},
Name = "string",
Networks = new[]
{
new JuniperMist.Org.Inputs.GatewaytemplateNetworkArgs
{
Name = "string",
Subnet = "string",
InternalAccess = new JuniperMist.Org.Inputs.GatewaytemplateNetworkInternalAccessArgs
{
Enabled = false,
},
DisallowMistServices = false,
InternetAccess = new JuniperMist.Org.Inputs.GatewaytemplateNetworkInternetAccessArgs
{
CreateSimpleServicePolicy = false,
DestinationNat =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateNetworkInternetAccessDestinationNatArgs
{
InternalIp = "string",
Name = "string",
Port = "string",
WanName = "string",
} },
},
Enabled = false,
Restricted = false,
StaticNat =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateNetworkInternetAccessStaticNatArgs
{
InternalIp = "string",
Name = "string",
WanName = "string",
} },
},
},
Isolation = false,
Multicast = new JuniperMist.Org.Inputs.GatewaytemplateNetworkMulticastArgs
{
DisableIgmp = false,
Enabled = false,
Groups =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateNetworkMulticastGroupsArgs
{
RpIp = "string",
} },
},
},
Gateway6 = "string",
RoutedForNetworks = new[]
{
"string",
},
Gateway = "string",
Subnet6 = "string",
Tenants =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateNetworkTenantsArgs
{
Addresses = new[]
{
"string",
},
} },
},
VlanId = "string",
VpnAccess =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateNetworkVpnAccessArgs
{
AdvertisedSubnet = "string",
AllowPing = false,
DestinationNat =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateNetworkVpnAccessDestinationNatArgs
{
InternalIp = "string",
Name = "string",
Port = "string",
} },
},
NatPool = "string",
NoReadvertiseToLanBgp = false,
NoReadvertiseToLanOspf = false,
NoReadvertiseToOverlay = false,
OtherVrfs = new[]
{
"string",
},
Routed = false,
SourceNat = new JuniperMist.Org.Inputs.GatewaytemplateNetworkVpnAccessSourceNatArgs
{
ExternalIp = "string",
},
StaticNat =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateNetworkVpnAccessStaticNatArgs
{
InternalIp = "string",
Name = "string",
} },
},
SummarizedSubnet = "string",
SummarizedSubnetToLanBgp = "string",
SummarizedSubnetToLanOspf = "string",
} },
},
},
},
DhcpdConfig = new JuniperMist.Org.Inputs.GatewaytemplateDhcpdConfigArgs
{
Config =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateDhcpdConfigConfigArgs
{
DnsServers = new[]
{
"string",
},
FixedBindings =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateDhcpdConfigConfigFixedBindingsArgs
{
Ip = "string",
Ip6 = "string",
Name = "string",
} },
},
Gateway = "string",
Ip6End = "string",
Ip6Start = "string",
IpEnd = "string",
IpStart = "string",
LeaseTime = 0,
Options =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateDhcpdConfigConfigOptionsArgs
{
Type = "string",
Value = "string",
} },
},
ServerIdOverride = false,
Servers = new[]
{
"string",
},
Serversv6s = new[]
{
"string",
},
Type = "string",
Type6 = "string",
VendorEncapsulated =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateDhcpdConfigConfigVendorEncapsulatedArgs
{
Type = "string",
Value = "string",
} },
},
} },
},
Enabled = false,
},
NtpOverride = false,
DnsSuffixes = new[]
{
"string",
},
BgpConfig =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateBgpConfigArgs
{
Via = "string",
ImportPolicy = "string",
NeighborAs = "string",
DisableBfd = false,
Export = "string",
ExportPolicy = "string",
ExtendedV4Nexthop = false,
GracefulRestartTime = 0,
HoldTime = 0,
Import = "string",
AuthKey = "string",
BfdMultiplier = 0,
Neighbors =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateBgpConfigNeighborsArgs
{
NeighborAs = "string",
Disabled = false,
ExportPolicy = "string",
HoldTime = 0,
ImportPolicy = "string",
MultihopTtl = 0,
TunnelVia = "string",
} },
},
LocalAs = "string",
Networks = new[]
{
"string",
},
NoPrivateAs = false,
NoReadvertiseToOverlay = false,
TunnelName = "string",
Type = "string",
BfdMinimumInterval = 0,
VpnName = "string",
WanName = "string",
} },
},
PathPreferences =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplatePathPreferencesArgs
{
Paths = new[]
{
new JuniperMist.Org.Inputs.GatewaytemplatePathPreferencesPathArgs
{
Type = "string",
Cost = 0,
Disabled = false,
GatewayIp = "string",
InternetAccess = false,
Name = "string",
Networks = new[]
{
"string",
},
TargetIps = new[]
{
"string",
},
WanName = "string",
},
},
Strategy = "string",
} },
},
PortConfig =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplatePortConfigArgs
{
Usage = "string",
PortNetwork = "string",
LteApn = "string",
Aggregated = false,
Critical = false,
Description = "string",
DisableAutoneg = false,
Disabled = false,
DslType = "string",
DslVci = 0,
DslVpi = 0,
Duplex = "string",
IpConfig = new JuniperMist.Org.Inputs.GatewaytemplatePortConfigIpConfigArgs
{
Dns = new[]
{
"string",
},
DnsSuffixes = new[]
{
"string",
},
Gateway = "string",
Gateway6 = "string",
Ip = "string",
Ip6 = "string",
Netmask = "string",
Netmask6 = "string",
Network = "string",
PoserPassword = "string",
PppoeAuth = "string",
PppoeUsername = "string",
Type = "string",
Type6 = "string",
},
AeDisableLacp = false,
LteAuth = "string",
LteBackup = false,
LtePassword = "string",
LteUsername = "string",
Mtu = 0,
Name = "string",
Networks = new[]
{
"string",
},
OuterVlanId = 0,
PoeDisabled = false,
AeLacpForceUp = false,
PoeKeepStateWhenReboot = false,
SsrNoVirtualMac = false,
Redundant = false,
RedundantGroup = 0,
RethIdx = "string",
RethNode = "string",
RethNodes = new[]
{
"string",
},
Speed = "string",
PreserveDscp = false,
SvrPortRange = "string",
TrafficShaping = new JuniperMist.Org.Inputs.GatewaytemplatePortConfigTrafficShapingArgs
{
ClassPercentages = new[]
{
0,
},
Enabled = false,
MaxTxKbps = 0,
},
AeIdx = "string",
VlanId = "string",
VpnPaths =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplatePortConfigVpnPathsArgs
{
BfdProfile = "string",
BfdUseTunnelMode = false,
Preference = 0,
Role = "string",
TrafficShaping = new JuniperMist.Org.Inputs.GatewaytemplatePortConfigVpnPathsTrafficShapingArgs
{
ClassPercentages = new[]
{
0,
},
Enabled = false,
MaxTxKbps = 0,
},
} },
},
WanArpPolicer = "string",
WanExtIp = "string",
WanExtIp6 = "string",
WanExtraRoutes =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplatePortConfigWanExtraRoutesArgs
{
Via = "string",
} },
},
WanExtraRoutes6 =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplatePortConfigWanExtraRoutes6Args
{
Via = "string",
} },
},
WanNetworks = new[]
{
"string",
},
WanProbeOverride = new JuniperMist.Org.Inputs.GatewaytemplatePortConfigWanProbeOverrideArgs
{
Ip6s = new[]
{
"string",
},
Ips = new[]
{
"string",
},
ProbeProfile = "string",
},
WanSourceNat = new JuniperMist.Org.Inputs.GatewaytemplatePortConfigWanSourceNatArgs
{
Disabled = false,
Nat6Pool = "string",
NatPool = "string",
},
WanSpeedtestMode = "string",
WanType = "string",
} },
},
RouterId = "string",
RoutingPolicies =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateRoutingPoliciesArgs
{
Terms = new[]
{
new JuniperMist.Org.Inputs.GatewaytemplateRoutingPoliciesTermArgs
{
Actions = new JuniperMist.Org.Inputs.GatewaytemplateRoutingPoliciesTermActionsArgs
{
Accept = false,
AddCommunities = new[]
{
"string",
},
AddTargetVrfs = new[]
{
"string",
},
Communities = new[]
{
"string",
},
ExcludeAsPaths = new[]
{
"string",
},
ExcludeCommunities = new[]
{
"string",
},
ExportCommunities = new[]
{
"string",
},
LocalPreference = "string",
PrependAsPaths = new[]
{
"string",
},
},
Matching = new JuniperMist.Org.Inputs.GatewaytemplateRoutingPoliciesTermMatchingArgs
{
AsPaths = new[]
{
"string",
},
Communities = new[]
{
"string",
},
Networks = new[]
{
"string",
},
Prefixes = new[]
{
"string",
},
Protocols = new[]
{
"string",
},
RouteExists = new JuniperMist.Org.Inputs.GatewaytemplateRoutingPoliciesTermMatchingRouteExistsArgs
{
Route = "string",
VrfName = "string",
},
VpnNeighborMacs = new[]
{
"string",
},
VpnPathSla = new JuniperMist.Org.Inputs.GatewaytemplateRoutingPoliciesTermMatchingVpnPathSlaArgs
{
MaxJitter = 0,
MaxLatency = 0,
MaxLoss = 0,
},
VpnPaths = new[]
{
"string",
},
},
},
},
} },
},
ServicePolicies = new[]
{
new JuniperMist.Org.Inputs.GatewaytemplateServicePolicyArgs
{
Action = "string",
Antivirus = new JuniperMist.Org.Inputs.GatewaytemplateServicePolicyAntivirusArgs
{
AvprofileId = "string",
Enabled = false,
Profile = "string",
},
Appqoe = new JuniperMist.Org.Inputs.GatewaytemplateServicePolicyAppqoeArgs
{
Enabled = false,
},
Ewfs = new[]
{
new JuniperMist.Org.Inputs.GatewaytemplateServicePolicyEwfArgs
{
AlertOnly = false,
BlockMessage = "string",
Enabled = false,
Profile = "string",
},
},
Idp = new JuniperMist.Org.Inputs.GatewaytemplateServicePolicyIdpArgs
{
AlertOnly = false,
Enabled = false,
IdpprofileId = "string",
Profile = "string",
},
LocalRouting = false,
Name = "string",
PathPreference = "string",
ServicepolicyId = "string",
Services = new[]
{
"string",
},
Skyatp = new JuniperMist.Org.Inputs.GatewaytemplateServicePolicySkyatpArgs
{
DnsDgaDetection = new JuniperMist.Org.Inputs.GatewaytemplateServicePolicySkyatpDnsDgaDetectionArgs
{
Enabled = false,
Profile = "string",
},
DnsTunnelDetection = new JuniperMist.Org.Inputs.GatewaytemplateServicePolicySkyatpDnsTunnelDetectionArgs
{
Enabled = false,
Profile = "string",
},
HttpInspection = new JuniperMist.Org.Inputs.GatewaytemplateServicePolicySkyatpHttpInspectionArgs
{
Enabled = false,
Profile = "string",
},
IotDevicePolicy = new JuniperMist.Org.Inputs.GatewaytemplateServicePolicySkyatpIotDevicePolicyArgs
{
Enabled = false,
},
},
SslProxy = new JuniperMist.Org.Inputs.GatewaytemplateServicePolicySslProxyArgs
{
CiphersCategory = "string",
Enabled = false,
},
Syslog = new JuniperMist.Org.Inputs.GatewaytemplateServicePolicySyslogArgs
{
Enabled = false,
ServerNames = new[]
{
"string",
},
},
Tenants = new[]
{
"string",
},
},
},
SsrAdditionalConfigCmds = new[]
{
"string",
},
TunnelConfigs =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateTunnelConfigsArgs
{
AutoProvision = new JuniperMist.Org.Inputs.GatewaytemplateTunnelConfigsAutoProvisionArgs
{
Provider = "string",
Enabled = false,
Latlng = new JuniperMist.Org.Inputs.GatewaytemplateTunnelConfigsAutoProvisionLatlngArgs
{
Lat = 0,
Lng = 0,
},
Primary = new JuniperMist.Org.Inputs.GatewaytemplateTunnelConfigsAutoProvisionPrimaryArgs
{
ProbeIps = new[]
{
"string",
},
WanNames = new[]
{
"string",
},
},
Region = "string",
Secondary = new JuniperMist.Org.Inputs.GatewaytemplateTunnelConfigsAutoProvisionSecondaryArgs
{
ProbeIps = new[]
{
"string",
},
WanNames = new[]
{
"string",
},
},
ServiceConnection = "string",
},
IkeLifetime = 0,
IkeMode = "string",
IkeProposals = new[]
{
new JuniperMist.Org.Inputs.GatewaytemplateTunnelConfigsIkeProposalArgs
{
AuthAlgo = "string",
DhGroup = "string",
EncAlgo = "string",
},
},
IpsecLifetime = 0,
IpsecProposals = new[]
{
new JuniperMist.Org.Inputs.GatewaytemplateTunnelConfigsIpsecProposalArgs
{
AuthAlgo = "string",
DhGroup = "string",
EncAlgo = "string",
},
},
LocalId = "string",
LocalSubnets = new[]
{
"string",
},
Mode = "string",
Networks = new[]
{
"string",
},
Primary = new JuniperMist.Org.Inputs.GatewaytemplateTunnelConfigsPrimaryArgs
{
Hosts = new[]
{
"string",
},
WanNames = new[]
{
"string",
},
InternalIps = new[]
{
"string",
},
ProbeIps = new[]
{
"string",
},
RemoteIds = new[]
{
"string",
},
},
Probe = new JuniperMist.Org.Inputs.GatewaytemplateTunnelConfigsProbeArgs
{
Interval = 0,
Threshold = 0,
Timeout = 0,
Type = "string",
},
Protocol = "string",
Provider = "string",
Psk = "string",
RemoteSubnets = new[]
{
"string",
},
Secondary = new JuniperMist.Org.Inputs.GatewaytemplateTunnelConfigsSecondaryArgs
{
Hosts = new[]
{
"string",
},
WanNames = new[]
{
"string",
},
InternalIps = new[]
{
"string",
},
ProbeIps = new[]
{
"string",
},
RemoteIds = new[]
{
"string",
},
},
Version = "string",
} },
},
AdditionalConfigCmds = new[]
{
"string",
},
Type = "string",
UrlFilteringDenyMsg = "string",
VrfConfig = new JuniperMist.Org.Inputs.GatewaytemplateVrfConfigArgs
{
Enabled = false,
},
VrfInstances =
{
{ "string", new JuniperMist.Org.Inputs.GatewaytemplateVrfInstancesArgs
{
Networks = new[]
{
"string",
},
} },
},
});
example, err := org.NewGatewaytemplate(ctx, "gatewaytemplateResource", &org.GatewaytemplateArgs{
OrgId: pulumi.String("string"),
NtpServers: pulumi.StringArray{
pulumi.String("string"),
},
TunnelProviderOptions: &org.GatewaytemplateTunnelProviderOptionsArgs{
Jse: &org.GatewaytemplateTunnelProviderOptionsJseArgs{
NumUsers: pulumi.Int(0),
OrgName: pulumi.String("string"),
},
Prisma: &org.GatewaytemplateTunnelProviderOptionsPrismaArgs{
ServiceAccountName: pulumi.String("string"),
},
Zscaler: &org.GatewaytemplateTunnelProviderOptionsZscalerArgs{
AupBlockInternetUntilAccepted: pulumi.Bool(false),
AupEnabled: pulumi.Bool(false),
AupForceSslInspection: pulumi.Bool(false),
AupTimeoutInDays: pulumi.Int(0),
AuthRequired: pulumi.Bool(false),
CautionEnabled: pulumi.Bool(false),
DnBandwidth: pulumi.Float64(0),
IdleTimeInMinutes: pulumi.Int(0),
OfwEnabled: pulumi.Bool(false),
SubLocations: org.GatewaytemplateTunnelProviderOptionsZscalerSubLocationArray{
&org.GatewaytemplateTunnelProviderOptionsZscalerSubLocationArgs{
AupBlockInternetUntilAccepted: pulumi.Bool(false),
AupEnabled: pulumi.Bool(false),
AupForceSslInspection: pulumi.Bool(false),
AupTimeoutInDays: pulumi.Int(0),
AuthRequired: pulumi.Bool(false),
CautionEnabled: pulumi.Bool(false),
DnBandwidth: pulumi.Float64(0),
IdleTimeInMinutes: pulumi.Int(0),
Name: pulumi.String("string"),
OfwEnabled: pulumi.Bool(false),
SurrogateIp: pulumi.Bool(false),
SurrogateIpEnforcedForKnownBrowsers: pulumi.Bool(false),
SurrogateRefreshTimeInMinutes: pulumi.Int(0),
UpBandwidth: pulumi.Float64(0),
},
},
SurrogateIp: pulumi.Bool(false),
SurrogateIpEnforcedForKnownBrowsers: pulumi.Bool(false),
SurrogateRefreshTimeInMinutes: pulumi.Int(0),
UpBandwidth: pulumi.Float64(0),
XffForwardEnabled: pulumi.Bool(false),
},
},
DnsOverride: pulumi.Bool(false),
DnsServers: pulumi.StringArray{
pulumi.String("string"),
},
OobIpConfig: &org.GatewaytemplateOobIpConfigArgs{
Gateway: pulumi.String("string"),
Ip: pulumi.String("string"),
Netmask: pulumi.String("string"),
Node1: &org.GatewaytemplateOobIpConfigNode1Args{
Gateway: pulumi.String("string"),
Ip: pulumi.String("string"),
Netmask: pulumi.String("string"),
Type: pulumi.String("string"),
UseMgmtVrf: pulumi.Bool(false),
UseMgmtVrfForHostOut: pulumi.Bool(false),
VlanId: pulumi.String("string"),
},
Type: pulumi.String("string"),
UseMgmtVrf: pulumi.Bool(false),
UseMgmtVrfForHostOut: pulumi.Bool(false),
VlanId: pulumi.String("string"),
},
ExtraRoutes: org.GatewaytemplateExtraRoutesMap{
"string": &org.GatewaytemplateExtraRoutesArgs{
Via: pulumi.String("string"),
},
},
ExtraRoutes6: org.GatewaytemplateExtraRoutes6Map{
"string": &org.GatewaytemplateExtraRoutes6Args{
Via: pulumi.String("string"),
},
},
GatewayMgmt: &org.GatewaytemplateGatewayMgmtArgs{
AdminSshkeys: pulumi.StringArray{
pulumi.String("string"),
},
AppProbing: &org.GatewaytemplateGatewayMgmtAppProbingArgs{
Apps: pulumi.StringArray{
pulumi.String("string"),
},
CustomApps: org.GatewaytemplateGatewayMgmtAppProbingCustomAppArray{
&org.GatewaytemplateGatewayMgmtAppProbingCustomAppArgs{
Address: pulumi.String("string"),
AppType: pulumi.String("string"),
Hostnames: pulumi.StringArray{
pulumi.String("string"),
},
Key: pulumi.String("string"),
Name: pulumi.String("string"),
Network: pulumi.String("string"),
PacketSize: pulumi.Int(0),
Protocol: pulumi.String("string"),
Url: pulumi.String("string"),
Vrf: pulumi.String("string"),
},
},
Enabled: pulumi.Bool(false),
},
AppUsage: pulumi.Bool(false),
AutoSignatureUpdate: &org.GatewaytemplateGatewayMgmtAutoSignatureUpdateArgs{
DayOfWeek: pulumi.String("string"),
Enable: pulumi.Bool(false),
TimeOfDay: pulumi.String("string"),
},
ConfigRevertTimer: pulumi.Int(0),
DisableConsole: pulumi.Bool(false),
DisableOob: pulumi.Bool(false),
DisableUsb: pulumi.Bool(false),
FipsEnabled: pulumi.Bool(false),
ProbeHosts: pulumi.StringArray{
pulumi.String("string"),
},
ProbeHostsv6s: pulumi.StringArray{
pulumi.String("string"),
},
ProtectRe: &org.GatewaytemplateGatewayMgmtProtectReArgs{
AllowedServices: pulumi.StringArray{
pulumi.String("string"),
},
Customs: org.GatewaytemplateGatewayMgmtProtectReCustomArray{
&org.GatewaytemplateGatewayMgmtProtectReCustomArgs{
PortRange: pulumi.String("string"),
Protocol: pulumi.String("string"),
Subnets: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Enabled: pulumi.Bool(false),
HitCount: pulumi.Bool(false),
TrustedHosts: pulumi.StringArray{
pulumi.String("string"),
},
},
RootPassword: pulumi.String("string"),
SecurityLogSourceAddress: pulumi.String("string"),
SecurityLogSourceInterface: pulumi.String("string"),
},
IdpProfiles: org.GatewaytemplateIdpProfilesMap{
"string": &org.GatewaytemplateIdpProfilesArgs{
BaseProfile: pulumi.String("string"),
Name: pulumi.String("string"),
OrgId: pulumi.String("string"),
Overwrites: org.GatewaytemplateIdpProfilesOverwriteArray{
&org.GatewaytemplateIdpProfilesOverwriteArgs{
Action: pulumi.String("string"),
Matching: &org.GatewaytemplateIdpProfilesOverwriteMatchingArgs{
AttackNames: pulumi.StringArray{
pulumi.String("string"),
},
DstSubnets: pulumi.StringArray{
pulumi.String("string"),
},
Severities: pulumi.StringArray{
pulumi.String("string"),
},
},
Name: pulumi.String("string"),
},
},
},
},
IpConfigs: org.GatewaytemplateIpConfigsMap{
"string": &org.GatewaytemplateIpConfigsArgs{
Ip: pulumi.String("string"),
Ip6: pulumi.String("string"),
Netmask: pulumi.String("string"),
Netmask6: pulumi.String("string"),
SecondaryIps: pulumi.StringArray{
pulumi.String("string"),
},
Type: pulumi.String("string"),
Type6: pulumi.String("string"),
},
},
Name: pulumi.String("string"),
Networks: org.GatewaytemplateNetworkArray{
&org.GatewaytemplateNetworkArgs{
Name: pulumi.String("string"),
Subnet: pulumi.String("string"),
InternalAccess: &org.GatewaytemplateNetworkInternalAccessArgs{
Enabled: pulumi.Bool(false),
},
DisallowMistServices: pulumi.Bool(false),
InternetAccess: &org.GatewaytemplateNetworkInternetAccessArgs{
CreateSimpleServicePolicy: pulumi.Bool(false),
DestinationNat: org.GatewaytemplateNetworkInternetAccessDestinationNatMap{
"string": &org.GatewaytemplateNetworkInternetAccessDestinationNatArgs{
InternalIp: pulumi.String("string"),
Name: pulumi.String("string"),
Port: pulumi.String("string"),
WanName: pulumi.String("string"),
},
},
Enabled: pulumi.Bool(false),
Restricted: pulumi.Bool(false),
StaticNat: org.GatewaytemplateNetworkInternetAccessStaticNatMap{
"string": &org.GatewaytemplateNetworkInternetAccessStaticNatArgs{
InternalIp: pulumi.String("string"),
Name: pulumi.String("string"),
WanName: pulumi.String("string"),
},
},
},
Isolation: pulumi.Bool(false),
Multicast: &org.GatewaytemplateNetworkMulticastArgs{
DisableIgmp: pulumi.Bool(false),
Enabled: pulumi.Bool(false),
Groups: org.GatewaytemplateNetworkMulticastGroupsMap{
"string": &org.GatewaytemplateNetworkMulticastGroupsArgs{
RpIp: pulumi.String("string"),
},
},
},
Gateway6: pulumi.String("string"),
RoutedForNetworks: pulumi.StringArray{
pulumi.String("string"),
},
Gateway: pulumi.String("string"),
Subnet6: pulumi.String("string"),
Tenants: org.GatewaytemplateNetworkTenantsMap{
"string": &org.GatewaytemplateNetworkTenantsArgs{
Addresses: pulumi.StringArray{
pulumi.String("string"),
},
},
},
VlanId: pulumi.String("string"),
VpnAccess: org.GatewaytemplateNetworkVpnAccessMap{
"string": &org.GatewaytemplateNetworkVpnAccessArgs{
AdvertisedSubnet: pulumi.String("string"),
AllowPing: pulumi.Bool(false),
DestinationNat: org.GatewaytemplateNetworkVpnAccessDestinationNatMap{
"string": &org.GatewaytemplateNetworkVpnAccessDestinationNatArgs{
InternalIp: pulumi.String("string"),
Name: pulumi.String("string"),
Port: pulumi.String("string"),
},
},
NatPool: pulumi.String("string"),
NoReadvertiseToLanBgp: pulumi.Bool(false),
NoReadvertiseToLanOspf: pulumi.Bool(false),
NoReadvertiseToOverlay: pulumi.Bool(false),
OtherVrfs: pulumi.StringArray{
pulumi.String("string"),
},
Routed: pulumi.Bool(false),
SourceNat: &org.GatewaytemplateNetworkVpnAccessSourceNatArgs{
ExternalIp: pulumi.String("string"),
},
StaticNat: org.GatewaytemplateNetworkVpnAccessStaticNatMap{
"string": &org.GatewaytemplateNetworkVpnAccessStaticNatArgs{
InternalIp: pulumi.String("string"),
Name: pulumi.String("string"),
},
},
SummarizedSubnet: pulumi.String("string"),
SummarizedSubnetToLanBgp: pulumi.String("string"),
SummarizedSubnetToLanOspf: pulumi.String("string"),
},
},
},
},
DhcpdConfig: &org.GatewaytemplateDhcpdConfigArgs{
Config: org.GatewaytemplateDhcpdConfigConfigMap{
"string": &org.GatewaytemplateDhcpdConfigConfigArgs{
DnsServers: pulumi.StringArray{
pulumi.String("string"),
},
FixedBindings: org.GatewaytemplateDhcpdConfigConfigFixedBindingsMap{
"string": &org.GatewaytemplateDhcpdConfigConfigFixedBindingsArgs{
Ip: pulumi.String("string"),
Ip6: pulumi.String("string"),
Name: pulumi.String("string"),
},
},
Gateway: pulumi.String("string"),
Ip6End: pulumi.String("string"),
Ip6Start: pulumi.String("string"),
IpEnd: pulumi.String("string"),
IpStart: pulumi.String("string"),
LeaseTime: pulumi.Int(0),
Options: org.GatewaytemplateDhcpdConfigConfigOptionsMap{
"string": &org.GatewaytemplateDhcpdConfigConfigOptionsArgs{
Type: pulumi.String("string"),
Value: pulumi.String("string"),
},
},
ServerIdOverride: pulumi.Bool(false),
Servers: pulumi.StringArray{
pulumi.String("string"),
},
Serversv6s: pulumi.StringArray{
pulumi.String("string"),
},
Type: pulumi.String("string"),
Type6: pulumi.String("string"),
VendorEncapsulated: org.GatewaytemplateDhcpdConfigConfigVendorEncapsulatedMap{
"string": &org.GatewaytemplateDhcpdConfigConfigVendorEncapsulatedArgs{
Type: pulumi.String("string"),
Value: pulumi.String("string"),
},
},
},
},
Enabled: pulumi.Bool(false),
},
NtpOverride: pulumi.Bool(false),
DnsSuffixes: pulumi.StringArray{
pulumi.String("string"),
},
BgpConfig: org.GatewaytemplateBgpConfigMap{
"string": &org.GatewaytemplateBgpConfigArgs{
Via: pulumi.String("string"),
ImportPolicy: pulumi.String("string"),
NeighborAs: pulumi.String("string"),
DisableBfd: pulumi.Bool(false),
Export: pulumi.String("string"),
ExportPolicy: pulumi.String("string"),
ExtendedV4Nexthop: pulumi.Bool(false),
GracefulRestartTime: pulumi.Int(0),
HoldTime: pulumi.Int(0),
Import: pulumi.String("string"),
AuthKey: pulumi.String("string"),
BfdMultiplier: pulumi.Int(0),
Neighbors: org.GatewaytemplateBgpConfigNeighborsMap{
"string": &org.GatewaytemplateBgpConfigNeighborsArgs{
NeighborAs: pulumi.String("string"),
Disabled: pulumi.Bool(false),
ExportPolicy: pulumi.String("string"),
HoldTime: pulumi.Int(0),
ImportPolicy: pulumi.String("string"),
MultihopTtl: pulumi.Int(0),
TunnelVia: pulumi.String("string"),
},
},
LocalAs: pulumi.String("string"),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
NoPrivateAs: pulumi.Bool(false),
NoReadvertiseToOverlay: pulumi.Bool(false),
TunnelName: pulumi.String("string"),
Type: pulumi.String("string"),
BfdMinimumInterval: pulumi.Int(0),
VpnName: pulumi.String("string"),
WanName: pulumi.String("string"),
},
},
PathPreferences: org.GatewaytemplatePathPreferencesMap{
"string": &org.GatewaytemplatePathPreferencesArgs{
Paths: org.GatewaytemplatePathPreferencesPathArray{
&org.GatewaytemplatePathPreferencesPathArgs{
Type: pulumi.String("string"),
Cost: pulumi.Int(0),
Disabled: pulumi.Bool(false),
GatewayIp: pulumi.String("string"),
InternetAccess: pulumi.Bool(false),
Name: pulumi.String("string"),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
TargetIps: pulumi.StringArray{
pulumi.String("string"),
},
WanName: pulumi.String("string"),
},
},
Strategy: pulumi.String("string"),
},
},
PortConfig: org.GatewaytemplatePortConfigMap{
"string": &org.GatewaytemplatePortConfigArgs{
Usage: pulumi.String("string"),
PortNetwork: pulumi.String("string"),
LteApn: pulumi.String("string"),
Aggregated: pulumi.Bool(false),
Critical: pulumi.Bool(false),
Description: pulumi.String("string"),
DisableAutoneg: pulumi.Bool(false),
Disabled: pulumi.Bool(false),
DslType: pulumi.String("string"),
DslVci: pulumi.Int(0),
DslVpi: pulumi.Int(0),
Duplex: pulumi.String("string"),
IpConfig: &org.GatewaytemplatePortConfigIpConfigArgs{
Dns: pulumi.StringArray{
pulumi.String("string"),
},
DnsSuffixes: pulumi.StringArray{
pulumi.String("string"),
},
Gateway: pulumi.String("string"),
Gateway6: pulumi.String("string"),
Ip: pulumi.String("string"),
Ip6: pulumi.String("string"),
Netmask: pulumi.String("string"),
Netmask6: pulumi.String("string"),
Network: pulumi.String("string"),
PoserPassword: pulumi.String("string"),
PppoeAuth: pulumi.String("string"),
PppoeUsername: pulumi.String("string"),
Type: pulumi.String("string"),
Type6: pulumi.String("string"),
},
AeDisableLacp: pulumi.Bool(false),
LteAuth: pulumi.String("string"),
LteBackup: pulumi.Bool(false),
LtePassword: pulumi.String("string"),
LteUsername: pulumi.String("string"),
Mtu: pulumi.Int(0),
Name: pulumi.String("string"),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
OuterVlanId: pulumi.Int(0),
PoeDisabled: pulumi.Bool(false),
AeLacpForceUp: pulumi.Bool(false),
PoeKeepStateWhenReboot: pulumi.Bool(false),
SsrNoVirtualMac: pulumi.Bool(false),
Redundant: pulumi.Bool(false),
RedundantGroup: pulumi.Int(0),
RethIdx: pulumi.String("string"),
RethNode: pulumi.String("string"),
RethNodes: pulumi.StringArray{
pulumi.String("string"),
},
Speed: pulumi.String("string"),
PreserveDscp: pulumi.Bool(false),
SvrPortRange: pulumi.String("string"),
TrafficShaping: &org.GatewaytemplatePortConfigTrafficShapingArgs{
ClassPercentages: pulumi.IntArray{
pulumi.Int(0),
},
Enabled: pulumi.Bool(false),
MaxTxKbps: pulumi.Int(0),
},
AeIdx: pulumi.String("string"),
VlanId: pulumi.String("string"),
VpnPaths: org.GatewaytemplatePortConfigVpnPathsMap{
"string": &org.GatewaytemplatePortConfigVpnPathsArgs{
BfdProfile: pulumi.String("string"),
BfdUseTunnelMode: pulumi.Bool(false),
Preference: pulumi.Int(0),
Role: pulumi.String("string"),
TrafficShaping: &org.GatewaytemplatePortConfigVpnPathsTrafficShapingArgs{
ClassPercentages: pulumi.IntArray{
pulumi.Int(0),
},
Enabled: pulumi.Bool(false),
MaxTxKbps: pulumi.Int(0),
},
},
},
WanArpPolicer: pulumi.String("string"),
WanExtIp: pulumi.String("string"),
WanExtIp6: pulumi.String("string"),
WanExtraRoutes: org.GatewaytemplatePortConfigWanExtraRoutesMap{
"string": &org.GatewaytemplatePortConfigWanExtraRoutesArgs{
Via: pulumi.String("string"),
},
},
WanExtraRoutes6: org.GatewaytemplatePortConfigWanExtraRoutes6Map{
"string": &org.GatewaytemplatePortConfigWanExtraRoutes6Args{
Via: pulumi.String("string"),
},
},
WanNetworks: pulumi.StringArray{
pulumi.String("string"),
},
WanProbeOverride: &org.GatewaytemplatePortConfigWanProbeOverrideArgs{
Ip6s: pulumi.StringArray{
pulumi.String("string"),
},
Ips: pulumi.StringArray{
pulumi.String("string"),
},
ProbeProfile: pulumi.String("string"),
},
WanSourceNat: &org.GatewaytemplatePortConfigWanSourceNatArgs{
Disabled: pulumi.Bool(false),
Nat6Pool: pulumi.String("string"),
NatPool: pulumi.String("string"),
},
WanSpeedtestMode: pulumi.String("string"),
WanType: pulumi.String("string"),
},
},
RouterId: pulumi.String("string"),
RoutingPolicies: org.GatewaytemplateRoutingPoliciesMap{
"string": &org.GatewaytemplateRoutingPoliciesArgs{
Terms: org.GatewaytemplateRoutingPoliciesTermArray{
&org.GatewaytemplateRoutingPoliciesTermArgs{
Actions: &org.GatewaytemplateRoutingPoliciesTermActionsArgs{
Accept: pulumi.Bool(false),
AddCommunities: pulumi.StringArray{
pulumi.String("string"),
},
AddTargetVrfs: pulumi.StringArray{
pulumi.String("string"),
},
Communities: pulumi.StringArray{
pulumi.String("string"),
},
ExcludeAsPaths: pulumi.StringArray{
pulumi.String("string"),
},
ExcludeCommunities: pulumi.StringArray{
pulumi.String("string"),
},
ExportCommunities: pulumi.StringArray{
pulumi.String("string"),
},
LocalPreference: pulumi.String("string"),
PrependAsPaths: pulumi.StringArray{
pulumi.String("string"),
},
},
Matching: &org.GatewaytemplateRoutingPoliciesTermMatchingArgs{
AsPaths: pulumi.StringArray{
pulumi.String("string"),
},
Communities: pulumi.StringArray{
pulumi.String("string"),
},
Networks: pulumi.StringArray{
pulumi.String("string"),
},
Prefixes: pulumi.StringArray{
pulumi.String("string"),
},
Protocols: pulumi.StringArray{
pulumi.String("string"),
},
RouteExists: &org.GatewaytemplateRoutingPoliciesTermMatchingRouteExistsArgs{
Route: pulumi.String("string"),
VrfName: pulumi.String("string"),
},
VpnNeighborMacs: pulumi.StringArray{
pulumi.String("string"),
},
VpnPathSla: &org.GatewaytemplateRoutingPoliciesTermMatchingVpnPathSlaArgs{
MaxJitter: pulumi.Int(0),
MaxLatency: pulumi.Int(0),
MaxLoss: pulumi.Int(0),
},
VpnPaths: pulumi.StringArray{
pulumi.String("string"),
},
},
},
},
},
},
ServicePolicies: org.GatewaytemplateServicePolicyArray{
&org.GatewaytemplateServicePolicyArgs{
Action: pulumi.String("string"),
Antivirus: &org.GatewaytemplateServicePolicyAntivirusArgs{
AvprofileId: pulumi.String("string"),
Enabled: pulumi.Bool(false),
Profile: pulumi.String("string"),
},
Appqoe: &org.GatewaytemplateServicePolicyAppqoeArgs{
Enabled: pulumi.Bool(false),
},
Ewfs: org.GatewaytemplateServicePolicyEwfArray{
&org.GatewaytemplateServicePolicyEwfArgs{
AlertOnly: pulumi.Bool(false),
BlockMessage: pulumi.String("string"),
Enabled: pulumi.Bool(false),
Profile: pulumi.String("string"),
},
},
Idp: &org.GatewaytemplateServicePolicyIdpArgs{
AlertOnly: pulumi.Bool(false),
Enabled: pulumi.Bool(false),
IdpprofileId: pulumi.String("string"),
Profile: pulumi.String("string"),
},
LocalRouting: pulumi.Bool(false),
Name: pulumi.String("string"),
PathPreference: pulumi.String("string"),
ServicepolicyId: pulumi.String("string"),
Services: pulumi.StringArray{
pulumi.String("string"),
},
Skyatp: &org.GatewaytemplateServicePolicySkyatpArgs{
DnsDgaDetection: &org.GatewaytemplateServicePolicySkyatpDnsDgaDetectionArgs{
Enabled: pulumi.Bool(false),
Profile: pulumi.String("string"),
},
DnsTunnelDetection: &org.GatewaytemplateServicePolicySkyatpDnsTunnelDetectionArgs{
Enabled: pulumi.Bool(false),
Profile: pulumi.String("string"),
},
HttpInspection: &org.GatewaytemplateServicePolicySkyatpHttpInspectionArgs{
Enabled: pulumi.Bool(false),
Profile: pulumi.String("string"),
},
IotDevicePolicy: &org.GatewaytemplateServicePolicySkyatpIotDevicePolicyArgs{
Enabled: pulumi.Bool(false),
},
},
SslProxy: &org.GatewaytemplateServicePolicySslProxyArgs{
CiphersCategory: pulumi.String("string"),
Enabled: pulumi.Bool(false),
},
Syslog: &org.GatewaytemplateServicePolicySyslogArgs{
Enabled: pulumi.Bool(false),
ServerNames: pulumi.StringArray{
pulumi.String("string"),
},
},
Tenants: pulumi.StringArray{
pulumi.String("string"),
},
},
},
SsrAdditionalConfigCmds: pulumi.StringArray{
pulumi.String("string"),
},
TunnelConfigs: org.GatewaytemplateTunnelConfigsMap{
"string": &org.GatewaytemplateTunnelConfigsArgs{
AutoProvision: &org.GatewaytemplateTunnelConfigsAutoProvisionArgs{
Provider: pulumi.String("string"),
Enabled: pulumi.Bool(false),
Latlng: &org.GatewaytemplateTunnelConfigsAutoProvisionLatlngArgs{
Lat: pulumi.Float64(0),
Lng: pulumi.Float64(0),
},
Primary: &org.GatewaytemplateTunnelConfigsAutoProvisionPrimaryArgs{
ProbeIps: pulumi.StringArray{
pulumi.String("string"),
},
WanNames: pulumi.StringArray{
pulumi.String("string"),
},
},
Region: pulumi.String("string"),
Secondary: &org.GatewaytemplateTunnelConfigsAutoProvisionSecondaryArgs{
ProbeIps: pulumi.StringArray{
pulumi.String("string"),
},
WanNames: pulumi.StringArray{
pulumi.String("string"),
},
},
ServiceConnection: pulumi.String("string"),
},
IkeLifetime: pulumi.Int(0),
IkeMode: pulumi.String("string"),
IkeProposals: org.GatewaytemplateTunnelConfigsIkeProposalArray{
&org.GatewaytemplateTunnelConfigsIkeProposalArgs{
AuthAlgo: pulumi.String("string"),
DhGroup: pulumi.String("string"),
EncAlgo: pulumi.String("string"),
},
},
IpsecLifetime: pulumi.Int(0),
IpsecProposals: org.GatewaytemplateTunnelConfigsIpsecProposalArray{
&org.GatewaytemplateTunnelConfigsIpsecProposalArgs{
AuthAlgo: pulumi.String("string"),
DhGroup: pulumi.String("string"),
EncAlgo: pulumi.String("string"),
},
},
LocalId: pulumi.String("string"),
LocalSubnets: pulumi.StringArray{
pulumi.String("string"),
},
Mode: pulumi.String("string"),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
Primary: &org.GatewaytemplateTunnelConfigsPrimaryArgs{
Hosts: pulumi.StringArray{
pulumi.String("string"),
},
WanNames: pulumi.StringArray{
pulumi.String("string"),
},
InternalIps: pulumi.StringArray{
pulumi.String("string"),
},
ProbeIps: pulumi.StringArray{
pulumi.String("string"),
},
RemoteIds: pulumi.StringArray{
pulumi.String("string"),
},
},
Probe: &org.GatewaytemplateTunnelConfigsProbeArgs{
Interval: pulumi.Int(0),
Threshold: pulumi.Int(0),
Timeout: pulumi.Int(0),
Type: pulumi.String("string"),
},
Protocol: pulumi.String("string"),
Provider: pulumi.String("string"),
Psk: pulumi.String("string"),
RemoteSubnets: pulumi.StringArray{
pulumi.String("string"),
},
Secondary: &org.GatewaytemplateTunnelConfigsSecondaryArgs{
Hosts: pulumi.StringArray{
pulumi.String("string"),
},
WanNames: pulumi.StringArray{
pulumi.String("string"),
},
InternalIps: pulumi.StringArray{
pulumi.String("string"),
},
ProbeIps: pulumi.StringArray{
pulumi.String("string"),
},
RemoteIds: pulumi.StringArray{
pulumi.String("string"),
},
},
Version: pulumi.String("string"),
},
},
AdditionalConfigCmds: pulumi.StringArray{
pulumi.String("string"),
},
Type: pulumi.String("string"),
UrlFilteringDenyMsg: pulumi.String("string"),
VrfConfig: &org.GatewaytemplateVrfConfigArgs{
Enabled: pulumi.Bool(false),
},
VrfInstances: org.GatewaytemplateVrfInstancesMap{
"string": &org.GatewaytemplateVrfInstancesArgs{
Networks: pulumi.StringArray{
pulumi.String("string"),
},
},
},
})
resource "junipermist_org_gatewaytemplate" "gatewaytemplateResource" {
org_id = "string"
ntp_servers = ["string"]
tunnel_provider_options = {
jse = {
num_users = 0
org_name = "string"
}
prisma = {
service_account_name = "string"
}
zscaler = {
aup_block_internet_until_accepted = false
aup_enabled = false
aup_force_ssl_inspection = false
aup_timeout_in_days = 0
auth_required = false
caution_enabled = false
dn_bandwidth = 0
idle_time_in_minutes = 0
ofw_enabled = false
sub_locations = [{
"aupBlockInternetUntilAccepted" = false
"aupEnabled" = false
"aupForceSslInspection" = false
"aupTimeoutInDays" = 0
"authRequired" = false
"cautionEnabled" = false
"dnBandwidth" = 0
"idleTimeInMinutes" = 0
"name" = "string"
"ofwEnabled" = false
"surrogateIp" = false
"surrogateIpEnforcedForKnownBrowsers" = false
"surrogateRefreshTimeInMinutes" = 0
"upBandwidth" = 0
}]
surrogate_ip = false
surrogate_ip_enforced_for_known_browsers = false
surrogate_refresh_time_in_minutes = 0
up_bandwidth = 0
xff_forward_enabled = false
}
}
dns_override = false
dns_servers = ["string"]
oob_ip_config = {
gateway = "string"
ip = "string"
netmask = "string"
node1 = {
gateway = "string"
ip = "string"
netmask = "string"
type = "string"
use_mgmt_vrf = false
use_mgmt_vrf_for_host_out = false
vlan_id = "string"
}
type = "string"
use_mgmt_vrf = false
use_mgmt_vrf_for_host_out = false
vlan_id = "string"
}
extra_routes = {
"string" = {
via = "string"
}
}
extra_routes6 = {
"string" = {
via = "string"
}
}
gateway_mgmt = {
admin_sshkeys = ["string"]
app_probing = {
apps = ["string"]
custom_apps = [{
"address" = "string"
"appType" = "string"
"hostnames" = ["string"]
"key" = "string"
"name" = "string"
"network" = "string"
"packetSize" = 0
"protocol" = "string"
"url" = "string"
"vrf" = "string"
}]
enabled = false
}
app_usage = false
auto_signature_update = {
day_of_week = "string"
enable = false
time_of_day = "string"
}
config_revert_timer = 0
disable_console = false
disable_oob = false
disable_usb = false
fips_enabled = false
probe_hosts = ["string"]
probe_hostsv6s = ["string"]
protect_re = {
allowed_services = ["string"]
customs = [{
"portRange" = "string"
"protocol" = "string"
"subnets" = ["string"]
}]
enabled = false
hit_count = false
trusted_hosts = ["string"]
}
root_password = "string"
security_log_source_address = "string"
security_log_source_interface = "string"
}
idp_profiles = {
"string" = {
base_profile = "string"
name = "string"
org_id = "string"
overwrites = [{
"action" = "string"
"matching" = {
"attackNames" = ["string"]
"dstSubnets" = ["string"]
"severities" = ["string"]
}
"name" = "string"
}]
}
}
ip_configs = {
"string" = {
ip = "string"
ip6 = "string"
netmask = "string"
netmask6 = "string"
secondary_ips = ["string"]
type = "string"
type6 = "string"
}
}
name = "string"
networks {
name = "string"
subnet = "string"
internal_access = {
enabled = false
}
disallow_mist_services = false
internet_access = {
create_simple_service_policy = false
destination_nat = {
"string" = {
internal_ip = "string"
name = "string"
port = "string"
wan_name = "string"
}
}
enabled = false
restricted = false
static_nat = {
"string" = {
internal_ip = "string"
name = "string"
wan_name = "string"
}
}
}
isolation = false
multicast = {
disable_igmp = false
enabled = false
groups = {
"string" = {
rp_ip = "string"
}
}
}
gateway6 = "string"
routed_for_networks = ["string"]
gateway = "string"
subnet6 = "string"
tenants = {
"string" = {
addresses = ["string"]
}
}
vlan_id = "string"
vpn_access = {
"string" = {
advertised_subnet = "string"
allow_ping = false
destination_nat = {
"string" = {
internal_ip = "string"
name = "string"
port = "string"
}
}
nat_pool = "string"
no_readvertise_to_lan_bgp = false
no_readvertise_to_lan_ospf = false
no_readvertise_to_overlay = false
other_vrfs = ["string"]
routed = false
source_nat = {
external_ip = "string"
}
static_nat = {
"string" = {
internal_ip = "string"
name = "string"
}
}
summarized_subnet = "string"
summarized_subnet_to_lan_bgp = "string"
summarized_subnet_to_lan_ospf = "string"
}
}
}
dhcpd_config = {
config = {
"string" = {
dns_servers = ["string"]
fixed_bindings = {
"string" = {
ip = "string"
ip6 = "string"
name = "string"
}
}
gateway = "string"
ip6_end = "string"
ip6_start = "string"
ip_end = "string"
ip_start = "string"
lease_time = 0
options = {
"string" = {
type = "string"
value = "string"
}
}
server_id_override = false
servers = ["string"]
serversv6s = ["string"]
type = "string"
type6 = "string"
vendor_encapsulated = {
"string" = {
type = "string"
value = "string"
}
}
}
}
enabled = false
}
ntp_override = false
dns_suffixes = ["string"]
bgp_config = {
"string" = {
via = "string"
import_policy = "string"
neighbor_as = "string"
disable_bfd = false
export = "string"
export_policy = "string"
extended_v4_nexthop = false
graceful_restart_time = 0
hold_time = 0
import = "string"
auth_key = "string"
bfd_multiplier = 0
neighbors = {
"string" = {
neighbor_as = "string"
disabled = false
export_policy = "string"
hold_time = 0
import_policy = "string"
multihop_ttl = 0
tunnel_via = "string"
}
}
local_as = "string"
networks = ["string"]
no_private_as = false
no_readvertise_to_overlay = false
tunnel_name = "string"
type = "string"
bfd_minimum_interval = 0
vpn_name = "string"
wan_name = "string"
}
}
path_preferences = {
"string" = {
paths = [{
"type" = "string"
"cost" = 0
"disabled" = false
"gatewayIp" = "string"
"internetAccess" = false
"name" = "string"
"networks" = ["string"]
"targetIps" = ["string"]
"wanName" = "string"
}]
strategy = "string"
}
}
port_config = {
"string" = {
usage = "string"
port_network = "string"
lte_apn = "string"
aggregated = false
critical = false
description = "string"
disable_autoneg = false
disabled = false
dsl_type = "string"
dsl_vci = 0
dsl_vpi = 0
duplex = "string"
ip_config = {
dns = ["string"]
dns_suffixes = ["string"]
gateway = "string"
gateway6 = "string"
ip = "string"
ip6 = "string"
netmask = "string"
netmask6 = "string"
network = "string"
poser_password = "string"
pppoe_auth = "string"
pppoe_username = "string"
type = "string"
type6 = "string"
}
ae_disable_lacp = false
lte_auth = "string"
lte_backup = false
lte_password = "string"
lte_username = "string"
mtu = 0
name = "string"
networks = ["string"]
outer_vlan_id = 0
poe_disabled = false
ae_lacp_force_up = false
poe_keep_state_when_reboot = false
ssr_no_virtual_mac = false
redundant = false
redundant_group = 0
reth_idx = "string"
reth_node = "string"
reth_nodes = ["string"]
speed = "string"
preserve_dscp = false
svr_port_range = "string"
traffic_shaping = {
class_percentages = [0]
enabled = false
max_tx_kbps = 0
}
ae_idx = "string"
vlan_id = "string"
vpn_paths = {
"string" = {
bfd_profile = "string"
bfd_use_tunnel_mode = false
preference = 0
role = "string"
traffic_shaping = {
class_percentages = [0]
enabled = false
max_tx_kbps = 0
}
}
}
wan_arp_policer = "string"
wan_ext_ip = "string"
wan_ext_ip6 = "string"
wan_extra_routes = {
"string" = {
via = "string"
}
}
wan_extra_routes6 = {
"string" = {
via = "string"
}
}
wan_networks = ["string"]
wan_probe_override = {
ip6s = ["string"]
ips = ["string"]
probe_profile = "string"
}
wan_source_nat = {
disabled = false
nat6_pool = "string"
nat_pool = "string"
}
wan_speedtest_mode = "string"
wan_type = "string"
}
}
router_id = "string"
routing_policies = {
"string" = {
terms = [{
"actions" = {
"accept" = false
"addCommunities" = ["string"]
"addTargetVrfs" = ["string"]
"communities" = ["string"]
"excludeAsPaths" = ["string"]
"excludeCommunities" = ["string"]
"exportCommunities" = ["string"]
"localPreference" = "string"
"prependAsPaths" = ["string"]
}
"matching" = {
"asPaths" = ["string"]
"communities" = ["string"]
"networks" = ["string"]
"prefixes" = ["string"]
"protocols" = ["string"]
"routeExists" = {
"route" = "string"
"vrfName" = "string"
}
"vpnNeighborMacs" = ["string"]
"vpnPathSla" = {
"maxJitter" = 0
"maxLatency" = 0
"maxLoss" = 0
}
"vpnPaths" = ["string"]
}
}]
}
}
service_policies {
action = "string"
antivirus = {
avprofile_id = "string"
enabled = false
profile = "string"
}
appqoe = {
enabled = false
}
ewfs {
alert_only = false
block_message = "string"
enabled = false
profile = "string"
}
idp = {
alert_only = false
enabled = false
idpprofile_id = "string"
profile = "string"
}
local_routing = false
name = "string"
path_preference = "string"
servicepolicy_id = "string"
services = ["string"]
skyatp = {
dns_dga_detection = {
enabled = false
profile = "string"
}
dns_tunnel_detection = {
enabled = false
profile = "string"
}
http_inspection = {
enabled = false
profile = "string"
}
iot_device_policy = {
enabled = false
}
}
ssl_proxy = {
ciphers_category = "string"
enabled = false
}
syslog = {
enabled = false
server_names = ["string"]
}
tenants = ["string"]
}
ssr_additional_config_cmds = ["string"]
tunnel_configs = {
"string" = {
auto_provision = {
provider = "string"
enabled = false
latlng = {
lat = 0
lng = 0
}
primary = {
probe_ips = ["string"]
wan_names = ["string"]
}
region = "string"
secondary = {
probe_ips = ["string"]
wan_names = ["string"]
}
service_connection = "string"
}
ike_lifetime = 0
ike_mode = "string"
ike_proposals = [{
"authAlgo" = "string"
"dhGroup" = "string"
"encAlgo" = "string"
}]
ipsec_lifetime = 0
ipsec_proposals = [{
"authAlgo" = "string"
"dhGroup" = "string"
"encAlgo" = "string"
}]
local_id = "string"
local_subnets = ["string"]
mode = "string"
networks = ["string"]
primary = {
hosts = ["string"]
wan_names = ["string"]
internal_ips = ["string"]
probe_ips = ["string"]
remote_ids = ["string"]
}
probe = {
interval = 0
threshold = 0
timeout = 0
type = "string"
}
protocol = "string"
provider = "string"
psk = "string"
remote_subnets = ["string"]
secondary = {
hosts = ["string"]
wan_names = ["string"]
internal_ips = ["string"]
probe_ips = ["string"]
remote_ids = ["string"]
}
version = "string"
}
}
additional_config_cmds = ["string"]
type = "string"
url_filtering_deny_msg = "string"
vrf_config = {
enabled = false
}
vrf_instances = {
"string" = {
networks = ["string"]
}
}
}
var gatewaytemplateResource = new Gatewaytemplate("gatewaytemplateResource", GatewaytemplateArgs.builder()
.orgId("string")
.ntpServers("string")
.tunnelProviderOptions(GatewaytemplateTunnelProviderOptionsArgs.builder()
.jse(GatewaytemplateTunnelProviderOptionsJseArgs.builder()
.numUsers(0)
.orgName("string")
.build())
.prisma(GatewaytemplateTunnelProviderOptionsPrismaArgs.builder()
.serviceAccountName("string")
.build())
.zscaler(GatewaytemplateTunnelProviderOptionsZscalerArgs.builder()
.aupBlockInternetUntilAccepted(false)
.aupEnabled(false)
.aupForceSslInspection(false)
.aupTimeoutInDays(0)
.authRequired(false)
.cautionEnabled(false)
.dnBandwidth(0.0)
.idleTimeInMinutes(0)
.ofwEnabled(false)
.subLocations(GatewaytemplateTunnelProviderOptionsZscalerSubLocationArgs.builder()
.aupBlockInternetUntilAccepted(false)
.aupEnabled(false)
.aupForceSslInspection(false)
.aupTimeoutInDays(0)
.authRequired(false)
.cautionEnabled(false)
.dnBandwidth(0.0)
.idleTimeInMinutes(0)
.name("string")
.ofwEnabled(false)
.surrogateIp(false)
.surrogateIpEnforcedForKnownBrowsers(false)
.surrogateRefreshTimeInMinutes(0)
.upBandwidth(0.0)
.build())
.surrogateIp(false)
.surrogateIpEnforcedForKnownBrowsers(false)
.surrogateRefreshTimeInMinutes(0)
.upBandwidth(0.0)
.xffForwardEnabled(false)
.build())
.build())
.dnsOverride(false)
.dnsServers("string")
.oobIpConfig(GatewaytemplateOobIpConfigArgs.builder()
.gateway("string")
.ip("string")
.netmask("string")
.node1(GatewaytemplateOobIpConfigNode1Args.builder()
.gateway("string")
.ip("string")
.netmask("string")
.type("string")
.useMgmtVrf(false)
.useMgmtVrfForHostOut(false)
.vlanId("string")
.build())
.type("string")
.useMgmtVrf(false)
.useMgmtVrfForHostOut(false)
.vlanId("string")
.build())
.extraRoutes(Map.of("string", GatewaytemplateExtraRoutesArgs.builder()
.via("string")
.build()))
.extraRoutes6(Map.of("string", GatewaytemplateExtraRoutes6Args.builder()
.via("string")
.build()))
.gatewayMgmt(GatewaytemplateGatewayMgmtArgs.builder()
.adminSshkeys("string")
.appProbing(GatewaytemplateGatewayMgmtAppProbingArgs.builder()
.apps("string")
.customApps(GatewaytemplateGatewayMgmtAppProbingCustomAppArgs.builder()
.address("string")
.appType("string")
.hostnames("string")
.key("string")
.name("string")
.network("string")
.packetSize(0)
.protocol("string")
.url("string")
.vrf("string")
.build())
.enabled(false)
.build())
.appUsage(false)
.autoSignatureUpdate(GatewaytemplateGatewayMgmtAutoSignatureUpdateArgs.builder()
.dayOfWeek("string")
.enable(false)
.timeOfDay("string")
.build())
.configRevertTimer(0)
.disableConsole(false)
.disableOob(false)
.disableUsb(false)
.fipsEnabled(false)
.probeHosts("string")
.probeHostsv6s("string")
.protectRe(GatewaytemplateGatewayMgmtProtectReArgs.builder()
.allowedServices("string")
.customs(GatewaytemplateGatewayMgmtProtectReCustomArgs.builder()
.portRange("string")
.protocol("string")
.subnets("string")
.build())
.enabled(false)
.hitCount(false)
.trustedHosts("string")
.build())
.rootPassword("string")
.securityLogSourceAddress("string")
.securityLogSourceInterface("string")
.build())
.idpProfiles(Map.of("string", GatewaytemplateIdpProfilesArgs.builder()
.baseProfile("string")
.name("string")
.orgId("string")
.overwrites(GatewaytemplateIdpProfilesOverwriteArgs.builder()
.action("string")
.matching(GatewaytemplateIdpProfilesOverwriteMatchingArgs.builder()
.attackNames("string")
.dstSubnets("string")
.severities("string")
.build())
.name("string")
.build())
.build()))
.ipConfigs(Map.of("string", GatewaytemplateIpConfigsArgs.builder()
.ip("string")
.ip6("string")
.netmask("string")
.netmask6("string")
.secondaryIps("string")
.type("string")
.type6("string")
.build()))
.name("string")
.networks(GatewaytemplateNetworkArgs.builder()
.name("string")
.subnet("string")
.internalAccess(GatewaytemplateNetworkInternalAccessArgs.builder()
.enabled(false)
.build())
.disallowMistServices(false)
.internetAccess(GatewaytemplateNetworkInternetAccessArgs.builder()
.createSimpleServicePolicy(false)
.destinationNat(Map.of("string", GatewaytemplateNetworkInternetAccessDestinationNatArgs.builder()
.internalIp("string")
.name("string")
.port("string")
.wanName("string")
.build()))
.enabled(false)
.restricted(false)
.staticNat(Map.of("string", GatewaytemplateNetworkInternetAccessStaticNatArgs.builder()
.internalIp("string")
.name("string")
.wanName("string")
.build()))
.build())
.isolation(false)
.multicast(GatewaytemplateNetworkMulticastArgs.builder()
.disableIgmp(false)
.enabled(false)
.groups(Map.of("string", GatewaytemplateNetworkMulticastGroupsArgs.builder()
.rpIp("string")
.build()))
.build())
.gateway6("string")
.routedForNetworks("string")
.gateway("string")
.subnet6("string")
.tenants(Map.of("string", GatewaytemplateNetworkTenantsArgs.builder()
.addresses("string")
.build()))
.vlanId("string")
.vpnAccess(Map.of("string", GatewaytemplateNetworkVpnAccessArgs.builder()
.advertisedSubnet("string")
.allowPing(false)
.destinationNat(Map.of("string", GatewaytemplateNetworkVpnAccessDestinationNatArgs.builder()
.internalIp("string")
.name("string")
.port("string")
.build()))
.natPool("string")
.noReadvertiseToLanBgp(false)
.noReadvertiseToLanOspf(false)
.noReadvertiseToOverlay(false)
.otherVrfs("string")
.routed(false)
.sourceNat(GatewaytemplateNetworkVpnAccessSourceNatArgs.builder()
.externalIp("string")
.build())
.staticNat(Map.of("string", GatewaytemplateNetworkVpnAccessStaticNatArgs.builder()
.internalIp("string")
.name("string")
.build()))
.summarizedSubnet("string")
.summarizedSubnetToLanBgp("string")
.summarizedSubnetToLanOspf("string")
.build()))
.build())
.dhcpdConfig(GatewaytemplateDhcpdConfigArgs.builder()
.config(Map.of("string", GatewaytemplateDhcpdConfigConfigArgs.builder()
.dnsServers("string")
.fixedBindings(Map.of("string", GatewaytemplateDhcpdConfigConfigFixedBindingsArgs.builder()
.ip("string")
.ip6("string")
.name("string")
.build()))
.gateway("string")
.ip6End("string")
.ip6Start("string")
.ipEnd("string")
.ipStart("string")
.leaseTime(0)
.options(Map.of("string", GatewaytemplateDhcpdConfigConfigOptionsArgs.builder()
.type("string")
.value("string")
.build()))
.serverIdOverride(false)
.servers("string")
.serversv6s("string")
.type("string")
.type6("string")
.vendorEncapsulated(Map.of("string", GatewaytemplateDhcpdConfigConfigVendorEncapsulatedArgs.builder()
.type("string")
.value("string")
.build()))
.build()))
.enabled(false)
.build())
.ntpOverride(false)
.dnsSuffixes("string")
.bgpConfig(Map.of("string", GatewaytemplateBgpConfigArgs.builder()
.via("string")
.importPolicy("string")
.neighborAs("string")
.disableBfd(false)
.export("string")
.exportPolicy("string")
.extendedV4Nexthop(false)
.gracefulRestartTime(0)
.holdTime(0)
.import_("string")
.authKey("string")
.bfdMultiplier(0)
.neighbors(Map.of("string", GatewaytemplateBgpConfigNeighborsArgs.builder()
.neighborAs("string")
.disabled(false)
.exportPolicy("string")
.holdTime(0)
.importPolicy("string")
.multihopTtl(0)
.tunnelVia("string")
.build()))
.localAs("string")
.networks("string")
.noPrivateAs(false)
.noReadvertiseToOverlay(false)
.tunnelName("string")
.type("string")
.bfdMinimumInterval(0)
.vpnName("string")
.wanName("string")
.build()))
.pathPreferences(Map.of("string", GatewaytemplatePathPreferencesArgs.builder()
.paths(GatewaytemplatePathPreferencesPathArgs.builder()
.type("string")
.cost(0)
.disabled(false)
.gatewayIp("string")
.internetAccess(false)
.name("string")
.networks("string")
.targetIps("string")
.wanName("string")
.build())
.strategy("string")
.build()))
.portConfig(Map.of("string", GatewaytemplatePortConfigArgs.builder()
.usage("string")
.portNetwork("string")
.lteApn("string")
.aggregated(false)
.critical(false)
.description("string")
.disableAutoneg(false)
.disabled(false)
.dslType("string")
.dslVci(0)
.dslVpi(0)
.duplex("string")
.ipConfig(GatewaytemplatePortConfigIpConfigArgs.builder()
.dns("string")
.dnsSuffixes("string")
.gateway("string")
.gateway6("string")
.ip("string")
.ip6("string")
.netmask("string")
.netmask6("string")
.network("string")
.poserPassword("string")
.pppoeAuth("string")
.pppoeUsername("string")
.type("string")
.type6("string")
.build())
.aeDisableLacp(false)
.lteAuth("string")
.lteBackup(false)
.ltePassword("string")
.lteUsername("string")
.mtu(0)
.name("string")
.networks("string")
.outerVlanId(0)
.poeDisabled(false)
.aeLacpForceUp(false)
.poeKeepStateWhenReboot(false)
.ssrNoVirtualMac(false)
.redundant(false)
.redundantGroup(0)
.rethIdx("string")
.rethNode("string")
.rethNodes("string")
.speed("string")
.preserveDscp(false)
.svrPortRange("string")
.trafficShaping(GatewaytemplatePortConfigTrafficShapingArgs.builder()
.classPercentages(0)
.enabled(false)
.maxTxKbps(0)
.build())
.aeIdx("string")
.vlanId("string")
.vpnPaths(Map.of("string", GatewaytemplatePortConfigVpnPathsArgs.builder()
.bfdProfile("string")
.bfdUseTunnelMode(false)
.preference(0)
.role("string")
.trafficShaping(GatewaytemplatePortConfigVpnPathsTrafficShapingArgs.builder()
.classPercentages(0)
.enabled(false)
.maxTxKbps(0)
.build())
.build()))
.wanArpPolicer("string")
.wanExtIp("string")
.wanExtIp6("string")
.wanExtraRoutes(Map.of("string", GatewaytemplatePortConfigWanExtraRoutesArgs.builder()
.via("string")
.build()))
.wanExtraRoutes6(Map.of("string", GatewaytemplatePortConfigWanExtraRoutes6Args.builder()
.via("string")
.build()))
.wanNetworks("string")
.wanProbeOverride(GatewaytemplatePortConfigWanProbeOverrideArgs.builder()
.ip6s("string")
.ips("string")
.probeProfile("string")
.build())
.wanSourceNat(GatewaytemplatePortConfigWanSourceNatArgs.builder()
.disabled(false)
.nat6Pool("string")
.natPool("string")
.build())
.wanSpeedtestMode("string")
.wanType("string")
.build()))
.routerId("string")
.routingPolicies(Map.of("string", GatewaytemplateRoutingPoliciesArgs.builder()
.terms(GatewaytemplateRoutingPoliciesTermArgs.builder()
.actions(GatewaytemplateRoutingPoliciesTermActionsArgs.builder()
.accept(false)
.addCommunities("string")
.addTargetVrfs("string")
.communities("string")
.excludeAsPaths("string")
.excludeCommunities("string")
.exportCommunities("string")
.localPreference("string")
.prependAsPaths("string")
.build())
.matching(GatewaytemplateRoutingPoliciesTermMatchingArgs.builder()
.asPaths("string")
.communities("string")
.networks("string")
.prefixes("string")
.protocols("string")
.routeExists(GatewaytemplateRoutingPoliciesTermMatchingRouteExistsArgs.builder()
.route("string")
.vrfName("string")
.build())
.vpnNeighborMacs("string")
.vpnPathSla(GatewaytemplateRoutingPoliciesTermMatchingVpnPathSlaArgs.builder()
.maxJitter(0)
.maxLatency(0)
.maxLoss(0)
.build())
.vpnPaths("string")
.build())
.build())
.build()))
.servicePolicies(GatewaytemplateServicePolicyArgs.builder()
.action("string")
.antivirus(GatewaytemplateServicePolicyAntivirusArgs.builder()
.avprofileId("string")
.enabled(false)
.profile("string")
.build())
.appqoe(GatewaytemplateServicePolicyAppqoeArgs.builder()
.enabled(false)
.build())
.ewfs(GatewaytemplateServicePolicyEwfArgs.builder()
.alertOnly(false)
.blockMessage("string")
.enabled(false)
.profile("string")
.build())
.idp(GatewaytemplateServicePolicyIdpArgs.builder()
.alertOnly(false)
.enabled(false)
.idpprofileId("string")
.profile("string")
.build())
.localRouting(false)
.name("string")
.pathPreference("string")
.servicepolicyId("string")
.services("string")
.skyatp(GatewaytemplateServicePolicySkyatpArgs.builder()
.dnsDgaDetection(GatewaytemplateServicePolicySkyatpDnsDgaDetectionArgs.builder()
.enabled(false)
.profile("string")
.build())
.dnsTunnelDetection(GatewaytemplateServicePolicySkyatpDnsTunnelDetectionArgs.builder()
.enabled(false)
.profile("string")
.build())
.httpInspection(GatewaytemplateServicePolicySkyatpHttpInspectionArgs.builder()
.enabled(false)
.profile("string")
.build())
.iotDevicePolicy(GatewaytemplateServicePolicySkyatpIotDevicePolicyArgs.builder()
.enabled(false)
.build())
.build())
.sslProxy(GatewaytemplateServicePolicySslProxyArgs.builder()
.ciphersCategory("string")
.enabled(false)
.build())
.syslog(GatewaytemplateServicePolicySyslogArgs.builder()
.enabled(false)
.serverNames("string")
.build())
.tenants("string")
.build())
.ssrAdditionalConfigCmds("string")
.tunnelConfigs(Map.of("string", GatewaytemplateTunnelConfigsArgs.builder()
.autoProvision(GatewaytemplateTunnelConfigsAutoProvisionArgs.builder()
.provider("string")
.enabled(false)
.latlng(GatewaytemplateTunnelConfigsAutoProvisionLatlngArgs.builder()
.lat(0.0)
.lng(0.0)
.build())
.primary(GatewaytemplateTunnelConfigsAutoProvisionPrimaryArgs.builder()
.probeIps("string")
.wanNames("string")
.build())
.region("string")
.secondary(GatewaytemplateTunnelConfigsAutoProvisionSecondaryArgs.builder()
.probeIps("string")
.wanNames("string")
.build())
.serviceConnection("string")
.build())
.ikeLifetime(0)
.ikeMode("string")
.ikeProposals(GatewaytemplateTunnelConfigsIkeProposalArgs.builder()
.authAlgo("string")
.dhGroup("string")
.encAlgo("string")
.build())
.ipsecLifetime(0)
.ipsecProposals(GatewaytemplateTunnelConfigsIpsecProposalArgs.builder()
.authAlgo("string")
.dhGroup("string")
.encAlgo("string")
.build())
.localId("string")
.localSubnets("string")
.mode("string")
.networks("string")
.primary(GatewaytemplateTunnelConfigsPrimaryArgs.builder()
.hosts("string")
.wanNames("string")
.internalIps("string")
.probeIps("string")
.remoteIds("string")
.build())
.probe(GatewaytemplateTunnelConfigsProbeArgs.builder()
.interval(0)
.threshold(0)
.timeout(0)
.type("string")
.build())
.protocol("string")
.provider("string")
.psk("string")
.remoteSubnets("string")
.secondary(GatewaytemplateTunnelConfigsSecondaryArgs.builder()
.hosts("string")
.wanNames("string")
.internalIps("string")
.probeIps("string")
.remoteIds("string")
.build())
.version("string")
.build()))
.additionalConfigCmds("string")
.type("string")
.urlFilteringDenyMsg("string")
.vrfConfig(GatewaytemplateVrfConfigArgs.builder()
.enabled(false)
.build())
.vrfInstances(Map.of("string", GatewaytemplateVrfInstancesArgs.builder()
.networks("string")
.build()))
.build());
gatewaytemplate_resource = junipermist.org.Gatewaytemplate("gatewaytemplateResource",
org_id="string",
ntp_servers=["string"],
tunnel_provider_options={
"jse": {
"num_users": 0,
"org_name": "string",
},
"prisma": {
"service_account_name": "string",
},
"zscaler": {
"aup_block_internet_until_accepted": False,
"aup_enabled": False,
"aup_force_ssl_inspection": False,
"aup_timeout_in_days": 0,
"auth_required": False,
"caution_enabled": False,
"dn_bandwidth": float(0),
"idle_time_in_minutes": 0,
"ofw_enabled": False,
"sub_locations": [{
"aup_block_internet_until_accepted": False,
"aup_enabled": False,
"aup_force_ssl_inspection": False,
"aup_timeout_in_days": 0,
"auth_required": False,
"caution_enabled": False,
"dn_bandwidth": float(0),
"idle_time_in_minutes": 0,
"name": "string",
"ofw_enabled": False,
"surrogate_ip": False,
"surrogate_ip_enforced_for_known_browsers": False,
"surrogate_refresh_time_in_minutes": 0,
"up_bandwidth": float(0),
}],
"surrogate_ip": False,
"surrogate_ip_enforced_for_known_browsers": False,
"surrogate_refresh_time_in_minutes": 0,
"up_bandwidth": float(0),
"xff_forward_enabled": False,
},
},
dns_override=False,
dns_servers=["string"],
oob_ip_config={
"gateway": "string",
"ip": "string",
"netmask": "string",
"node1": {
"gateway": "string",
"ip": "string",
"netmask": "string",
"type": "string",
"use_mgmt_vrf": False,
"use_mgmt_vrf_for_host_out": False,
"vlan_id": "string",
},
"type": "string",
"use_mgmt_vrf": False,
"use_mgmt_vrf_for_host_out": False,
"vlan_id": "string",
},
extra_routes={
"string": {
"via": "string",
},
},
extra_routes6={
"string": {
"via": "string",
},
},
gateway_mgmt={
"admin_sshkeys": ["string"],
"app_probing": {
"apps": ["string"],
"custom_apps": [{
"address": "string",
"app_type": "string",
"hostnames": ["string"],
"key": "string",
"name": "string",
"network": "string",
"packet_size": 0,
"protocol": "string",
"url": "string",
"vrf": "string",
}],
"enabled": False,
},
"app_usage": False,
"auto_signature_update": {
"day_of_week": "string",
"enable": False,
"time_of_day": "string",
},
"config_revert_timer": 0,
"disable_console": False,
"disable_oob": False,
"disable_usb": False,
"fips_enabled": False,
"probe_hosts": ["string"],
"probe_hostsv6s": ["string"],
"protect_re": {
"allowed_services": ["string"],
"customs": [{
"port_range": "string",
"protocol": "string",
"subnets": ["string"],
}],
"enabled": False,
"hit_count": False,
"trusted_hosts": ["string"],
},
"root_password": "string",
"security_log_source_address": "string",
"security_log_source_interface": "string",
},
idp_profiles={
"string": {
"base_profile": "string",
"name": "string",
"org_id": "string",
"overwrites": [{
"action": "string",
"matching": {
"attack_names": ["string"],
"dst_subnets": ["string"],
"severities": ["string"],
},
"name": "string",
}],
},
},
ip_configs={
"string": {
"ip": "string",
"ip6": "string",
"netmask": "string",
"netmask6": "string",
"secondary_ips": ["string"],
"type": "string",
"type6": "string",
},
},
name="string",
networks=[{
"name": "string",
"subnet": "string",
"internal_access": {
"enabled": False,
},
"disallow_mist_services": False,
"internet_access": {
"create_simple_service_policy": False,
"destination_nat": {
"string": {
"internal_ip": "string",
"name": "string",
"port": "string",
"wan_name": "string",
},
},
"enabled": False,
"restricted": False,
"static_nat": {
"string": {
"internal_ip": "string",
"name": "string",
"wan_name": "string",
},
},
},
"isolation": False,
"multicast": {
"disable_igmp": False,
"enabled": False,
"groups": {
"string": {
"rp_ip": "string",
},
},
},
"gateway6": "string",
"routed_for_networks": ["string"],
"gateway": "string",
"subnet6": "string",
"tenants": {
"string": {
"addresses": ["string"],
},
},
"vlan_id": "string",
"vpn_access": {
"string": {
"advertised_subnet": "string",
"allow_ping": False,
"destination_nat": {
"string": {
"internal_ip": "string",
"name": "string",
"port": "string",
},
},
"nat_pool": "string",
"no_readvertise_to_lan_bgp": False,
"no_readvertise_to_lan_ospf": False,
"no_readvertise_to_overlay": False,
"other_vrfs": ["string"],
"routed": False,
"source_nat": {
"external_ip": "string",
},
"static_nat": {
"string": {
"internal_ip": "string",
"name": "string",
},
},
"summarized_subnet": "string",
"summarized_subnet_to_lan_bgp": "string",
"summarized_subnet_to_lan_ospf": "string",
},
},
}],
dhcpd_config={
"config": {
"string": {
"dns_servers": ["string"],
"fixed_bindings": {
"string": {
"ip": "string",
"ip6": "string",
"name": "string",
},
},
"gateway": "string",
"ip6_end": "string",
"ip6_start": "string",
"ip_end": "string",
"ip_start": "string",
"lease_time": 0,
"options": {
"string": {
"type": "string",
"value": "string",
},
},
"server_id_override": False,
"servers": ["string"],
"serversv6s": ["string"],
"type": "string",
"type6": "string",
"vendor_encapsulated": {
"string": {
"type": "string",
"value": "string",
},
},
},
},
"enabled": False,
},
ntp_override=False,
dns_suffixes=["string"],
bgp_config={
"string": {
"via": "string",
"import_policy": "string",
"neighbor_as": "string",
"disable_bfd": False,
"export": "string",
"export_policy": "string",
"extended_v4_nexthop": False,
"graceful_restart_time": 0,
"hold_time": 0,
"import_": "string",
"auth_key": "string",
"bfd_multiplier": 0,
"neighbors": {
"string": {
"neighbor_as": "string",
"disabled": False,
"export_policy": "string",
"hold_time": 0,
"import_policy": "string",
"multihop_ttl": 0,
"tunnel_via": "string",
},
},
"local_as": "string",
"networks": ["string"],
"no_private_as": False,
"no_readvertise_to_overlay": False,
"tunnel_name": "string",
"type": "string",
"bfd_minimum_interval": 0,
"vpn_name": "string",
"wan_name": "string",
},
},
path_preferences={
"string": {
"paths": [{
"type": "string",
"cost": 0,
"disabled": False,
"gateway_ip": "string",
"internet_access": False,
"name": "string",
"networks": ["string"],
"target_ips": ["string"],
"wan_name": "string",
}],
"strategy": "string",
},
},
port_config={
"string": {
"usage": "string",
"port_network": "string",
"lte_apn": "string",
"aggregated": False,
"critical": False,
"description": "string",
"disable_autoneg": False,
"disabled": False,
"dsl_type": "string",
"dsl_vci": 0,
"dsl_vpi": 0,
"duplex": "string",
"ip_config": {
"dns": ["string"],
"dns_suffixes": ["string"],
"gateway": "string",
"gateway6": "string",
"ip": "string",
"ip6": "string",
"netmask": "string",
"netmask6": "string",
"network": "string",
"poser_password": "string",
"pppoe_auth": "string",
"pppoe_username": "string",
"type": "string",
"type6": "string",
},
"ae_disable_lacp": False,
"lte_auth": "string",
"lte_backup": False,
"lte_password": "string",
"lte_username": "string",
"mtu": 0,
"name": "string",
"networks": ["string"],
"outer_vlan_id": 0,
"poe_disabled": False,
"ae_lacp_force_up": False,
"poe_keep_state_when_reboot": False,
"ssr_no_virtual_mac": False,
"redundant": False,
"redundant_group": 0,
"reth_idx": "string",
"reth_node": "string",
"reth_nodes": ["string"],
"speed": "string",
"preserve_dscp": False,
"svr_port_range": "string",
"traffic_shaping": {
"class_percentages": [0],
"enabled": False,
"max_tx_kbps": 0,
},
"ae_idx": "string",
"vlan_id": "string",
"vpn_paths": {
"string": {
"bfd_profile": "string",
"bfd_use_tunnel_mode": False,
"preference": 0,
"role": "string",
"traffic_shaping": {
"class_percentages": [0],
"enabled": False,
"max_tx_kbps": 0,
},
},
},
"wan_arp_policer": "string",
"wan_ext_ip": "string",
"wan_ext_ip6": "string",
"wan_extra_routes": {
"string": {
"via": "string",
},
},
"wan_extra_routes6": {
"string": {
"via": "string",
},
},
"wan_networks": ["string"],
"wan_probe_override": {
"ip6s": ["string"],
"ips": ["string"],
"probe_profile": "string",
},
"wan_source_nat": {
"disabled": False,
"nat6_pool": "string",
"nat_pool": "string",
},
"wan_speedtest_mode": "string",
"wan_type": "string",
},
},
router_id="string",
routing_policies={
"string": {
"terms": [{
"actions": {
"accept": False,
"add_communities": ["string"],
"add_target_vrfs": ["string"],
"communities": ["string"],
"exclude_as_paths": ["string"],
"exclude_communities": ["string"],
"export_communities": ["string"],
"local_preference": "string",
"prepend_as_paths": ["string"],
},
"matching": {
"as_paths": ["string"],
"communities": ["string"],
"networks": ["string"],
"prefixes": ["string"],
"protocols": ["string"],
"route_exists": {
"route": "string",
"vrf_name": "string",
},
"vpn_neighbor_macs": ["string"],
"vpn_path_sla": {
"max_jitter": 0,
"max_latency": 0,
"max_loss": 0,
},
"vpn_paths": ["string"],
},
}],
},
},
service_policies=[{
"action": "string",
"antivirus": {
"avprofile_id": "string",
"enabled": False,
"profile": "string",
},
"appqoe": {
"enabled": False,
},
"ewfs": [{
"alert_only": False,
"block_message": "string",
"enabled": False,
"profile": "string",
}],
"idp": {
"alert_only": False,
"enabled": False,
"idpprofile_id": "string",
"profile": "string",
},
"local_routing": False,
"name": "string",
"path_preference": "string",
"servicepolicy_id": "string",
"services": ["string"],
"skyatp": {
"dns_dga_detection": {
"enabled": False,
"profile": "string",
},
"dns_tunnel_detection": {
"enabled": False,
"profile": "string",
},
"http_inspection": {
"enabled": False,
"profile": "string",
},
"iot_device_policy": {
"enabled": False,
},
},
"ssl_proxy": {
"ciphers_category": "string",
"enabled": False,
},
"syslog": {
"enabled": False,
"server_names": ["string"],
},
"tenants": ["string"],
}],
ssr_additional_config_cmds=["string"],
tunnel_configs={
"string": {
"auto_provision": {
"provider": "string",
"enabled": False,
"latlng": {
"lat": float(0),
"lng": float(0),
},
"primary": {
"probe_ips": ["string"],
"wan_names": ["string"],
},
"region": "string",
"secondary": {
"probe_ips": ["string"],
"wan_names": ["string"],
},
"service_connection": "string",
},
"ike_lifetime": 0,
"ike_mode": "string",
"ike_proposals": [{
"auth_algo": "string",
"dh_group": "string",
"enc_algo": "string",
}],
"ipsec_lifetime": 0,
"ipsec_proposals": [{
"auth_algo": "string",
"dh_group": "string",
"enc_algo": "string",
}],
"local_id": "string",
"local_subnets": ["string"],
"mode": "string",
"networks": ["string"],
"primary": {
"hosts": ["string"],
"wan_names": ["string"],
"internal_ips": ["string"],
"probe_ips": ["string"],
"remote_ids": ["string"],
},
"probe": {
"interval": 0,
"threshold": 0,
"timeout": 0,
"type": "string",
},
"protocol": "string",
"provider": "string",
"psk": "string",
"remote_subnets": ["string"],
"secondary": {
"hosts": ["string"],
"wan_names": ["string"],
"internal_ips": ["string"],
"probe_ips": ["string"],
"remote_ids": ["string"],
},
"version": "string",
},
},
additional_config_cmds=["string"],
type="string",
url_filtering_deny_msg="string",
vrf_config={
"enabled": False,
},
vrf_instances={
"string": {
"networks": ["string"],
},
})
const gatewaytemplateResource = new junipermist.org.Gatewaytemplate("gatewaytemplateResource", {
orgId: "string",
ntpServers: ["string"],
tunnelProviderOptions: {
jse: {
numUsers: 0,
orgName: "string",
},
prisma: {
serviceAccountName: "string",
},
zscaler: {
aupBlockInternetUntilAccepted: false,
aupEnabled: false,
aupForceSslInspection: false,
aupTimeoutInDays: 0,
authRequired: false,
cautionEnabled: false,
dnBandwidth: 0,
idleTimeInMinutes: 0,
ofwEnabled: false,
subLocations: [{
aupBlockInternetUntilAccepted: false,
aupEnabled: false,
aupForceSslInspection: false,
aupTimeoutInDays: 0,
authRequired: false,
cautionEnabled: false,
dnBandwidth: 0,
idleTimeInMinutes: 0,
name: "string",
ofwEnabled: false,
surrogateIp: false,
surrogateIpEnforcedForKnownBrowsers: false,
surrogateRefreshTimeInMinutes: 0,
upBandwidth: 0,
}],
surrogateIp: false,
surrogateIpEnforcedForKnownBrowsers: false,
surrogateRefreshTimeInMinutes: 0,
upBandwidth: 0,
xffForwardEnabled: false,
},
},
dnsOverride: false,
dnsServers: ["string"],
oobIpConfig: {
gateway: "string",
ip: "string",
netmask: "string",
node1: {
gateway: "string",
ip: "string",
netmask: "string",
type: "string",
useMgmtVrf: false,
useMgmtVrfForHostOut: false,
vlanId: "string",
},
type: "string",
useMgmtVrf: false,
useMgmtVrfForHostOut: false,
vlanId: "string",
},
extraRoutes: {
string: {
via: "string",
},
},
extraRoutes6: {
string: {
via: "string",
},
},
gatewayMgmt: {
adminSshkeys: ["string"],
appProbing: {
apps: ["string"],
customApps: [{
address: "string",
appType: "string",
hostnames: ["string"],
key: "string",
name: "string",
network: "string",
packetSize: 0,
protocol: "string",
url: "string",
vrf: "string",
}],
enabled: false,
},
appUsage: false,
autoSignatureUpdate: {
dayOfWeek: "string",
enable: false,
timeOfDay: "string",
},
configRevertTimer: 0,
disableConsole: false,
disableOob: false,
disableUsb: false,
fipsEnabled: false,
probeHosts: ["string"],
probeHostsv6s: ["string"],
protectRe: {
allowedServices: ["string"],
customs: [{
portRange: "string",
protocol: "string",
subnets: ["string"],
}],
enabled: false,
hitCount: false,
trustedHosts: ["string"],
},
rootPassword: "string",
securityLogSourceAddress: "string",
securityLogSourceInterface: "string",
},
idpProfiles: {
string: {
baseProfile: "string",
name: "string",
orgId: "string",
overwrites: [{
action: "string",
matching: {
attackNames: ["string"],
dstSubnets: ["string"],
severities: ["string"],
},
name: "string",
}],
},
},
ipConfigs: {
string: {
ip: "string",
ip6: "string",
netmask: "string",
netmask6: "string",
secondaryIps: ["string"],
type: "string",
type6: "string",
},
},
name: "string",
networks: [{
name: "string",
subnet: "string",
internalAccess: {
enabled: false,
},
disallowMistServices: false,
internetAccess: {
createSimpleServicePolicy: false,
destinationNat: {
string: {
internalIp: "string",
name: "string",
port: "string",
wanName: "string",
},
},
enabled: false,
restricted: false,
staticNat: {
string: {
internalIp: "string",
name: "string",
wanName: "string",
},
},
},
isolation: false,
multicast: {
disableIgmp: false,
enabled: false,
groups: {
string: {
rpIp: "string",
},
},
},
gateway6: "string",
routedForNetworks: ["string"],
gateway: "string",
subnet6: "string",
tenants: {
string: {
addresses: ["string"],
},
},
vlanId: "string",
vpnAccess: {
string: {
advertisedSubnet: "string",
allowPing: false,
destinationNat: {
string: {
internalIp: "string",
name: "string",
port: "string",
},
},
natPool: "string",
noReadvertiseToLanBgp: false,
noReadvertiseToLanOspf: false,
noReadvertiseToOverlay: false,
otherVrfs: ["string"],
routed: false,
sourceNat: {
externalIp: "string",
},
staticNat: {
string: {
internalIp: "string",
name: "string",
},
},
summarizedSubnet: "string",
summarizedSubnetToLanBgp: "string",
summarizedSubnetToLanOspf: "string",
},
},
}],
dhcpdConfig: {
config: {
string: {
dnsServers: ["string"],
fixedBindings: {
string: {
ip: "string",
ip6: "string",
name: "string",
},
},
gateway: "string",
ip6End: "string",
ip6Start: "string",
ipEnd: "string",
ipStart: "string",
leaseTime: 0,
options: {
string: {
type: "string",
value: "string",
},
},
serverIdOverride: false,
servers: ["string"],
serversv6s: ["string"],
type: "string",
type6: "string",
vendorEncapsulated: {
string: {
type: "string",
value: "string",
},
},
},
},
enabled: false,
},
ntpOverride: false,
dnsSuffixes: ["string"],
bgpConfig: {
string: {
via: "string",
importPolicy: "string",
neighborAs: "string",
disableBfd: false,
"export": "string",
exportPolicy: "string",
extendedV4Nexthop: false,
gracefulRestartTime: 0,
holdTime: 0,
"import": "string",
authKey: "string",
bfdMultiplier: 0,
neighbors: {
string: {
neighborAs: "string",
disabled: false,
exportPolicy: "string",
holdTime: 0,
importPolicy: "string",
multihopTtl: 0,
tunnelVia: "string",
},
},
localAs: "string",
networks: ["string"],
noPrivateAs: false,
noReadvertiseToOverlay: false,
tunnelName: "string",
type: "string",
bfdMinimumInterval: 0,
vpnName: "string",
wanName: "string",
},
},
pathPreferences: {
string: {
paths: [{
type: "string",
cost: 0,
disabled: false,
gatewayIp: "string",
internetAccess: false,
name: "string",
networks: ["string"],
targetIps: ["string"],
wanName: "string",
}],
strategy: "string",
},
},
portConfig: {
string: {
usage: "string",
portNetwork: "string",
lteApn: "string",
aggregated: false,
critical: false,
description: "string",
disableAutoneg: false,
disabled: false,
dslType: "string",
dslVci: 0,
dslVpi: 0,
duplex: "string",
ipConfig: {
dns: ["string"],
dnsSuffixes: ["string"],
gateway: "string",
gateway6: "string",
ip: "string",
ip6: "string",
netmask: "string",
netmask6: "string",
network: "string",
poserPassword: "string",
pppoeAuth: "string",
pppoeUsername: "string",
type: "string",
type6: "string",
},
aeDisableLacp: false,
lteAuth: "string",
lteBackup: false,
ltePassword: "string",
lteUsername: "string",
mtu: 0,
name: "string",
networks: ["string"],
outerVlanId: 0,
poeDisabled: false,
aeLacpForceUp: false,
poeKeepStateWhenReboot: false,
ssrNoVirtualMac: false,
redundant: false,
redundantGroup: 0,
rethIdx: "string",
rethNode: "string",
rethNodes: ["string"],
speed: "string",
preserveDscp: false,
svrPortRange: "string",
trafficShaping: {
classPercentages: [0],
enabled: false,
maxTxKbps: 0,
},
aeIdx: "string",
vlanId: "string",
vpnPaths: {
string: {
bfdProfile: "string",
bfdUseTunnelMode: false,
preference: 0,
role: "string",
trafficShaping: {
classPercentages: [0],
enabled: false,
maxTxKbps: 0,
},
},
},
wanArpPolicer: "string",
wanExtIp: "string",
wanExtIp6: "string",
wanExtraRoutes: {
string: {
via: "string",
},
},
wanExtraRoutes6: {
string: {
via: "string",
},
},
wanNetworks: ["string"],
wanProbeOverride: {
ip6s: ["string"],
ips: ["string"],
probeProfile: "string",
},
wanSourceNat: {
disabled: false,
nat6Pool: "string",
natPool: "string",
},
wanSpeedtestMode: "string",
wanType: "string",
},
},
routerId: "string",
routingPolicies: {
string: {
terms: [{
actions: {
accept: false,
addCommunities: ["string"],
addTargetVrfs: ["string"],
communities: ["string"],
excludeAsPaths: ["string"],
excludeCommunities: ["string"],
exportCommunities: ["string"],
localPreference: "string",
prependAsPaths: ["string"],
},
matching: {
asPaths: ["string"],
communities: ["string"],
networks: ["string"],
prefixes: ["string"],
protocols: ["string"],
routeExists: {
route: "string",
vrfName: "string",
},
vpnNeighborMacs: ["string"],
vpnPathSla: {
maxJitter: 0,
maxLatency: 0,
maxLoss: 0,
},
vpnPaths: ["string"],
},
}],
},
},
servicePolicies: [{
action: "string",
antivirus: {
avprofileId: "string",
enabled: false,
profile: "string",
},
appqoe: {
enabled: false,
},
ewfs: [{
alertOnly: false,
blockMessage: "string",
enabled: false,
profile: "string",
}],
idp: {
alertOnly: false,
enabled: false,
idpprofileId: "string",
profile: "string",
},
localRouting: false,
name: "string",
pathPreference: "string",
servicepolicyId: "string",
services: ["string"],
skyatp: {
dnsDgaDetection: {
enabled: false,
profile: "string",
},
dnsTunnelDetection: {
enabled: false,
profile: "string",
},
httpInspection: {
enabled: false,
profile: "string",
},
iotDevicePolicy: {
enabled: false,
},
},
sslProxy: {
ciphersCategory: "string",
enabled: false,
},
syslog: {
enabled: false,
serverNames: ["string"],
},
tenants: ["string"],
}],
ssrAdditionalConfigCmds: ["string"],
tunnelConfigs: {
string: {
autoProvision: {
provider: "string",
enabled: false,
latlng: {
lat: 0,
lng: 0,
},
primary: {
probeIps: ["string"],
wanNames: ["string"],
},
region: "string",
secondary: {
probeIps: ["string"],
wanNames: ["string"],
},
serviceConnection: "string",
},
ikeLifetime: 0,
ikeMode: "string",
ikeProposals: [{
authAlgo: "string",
dhGroup: "string",
encAlgo: "string",
}],
ipsecLifetime: 0,
ipsecProposals: [{
authAlgo: "string",
dhGroup: "string",
encAlgo: "string",
}],
localId: "string",
localSubnets: ["string"],
mode: "string",
networks: ["string"],
primary: {
hosts: ["string"],
wanNames: ["string"],
internalIps: ["string"],
probeIps: ["string"],
remoteIds: ["string"],
},
probe: {
interval: 0,
threshold: 0,
timeout: 0,
type: "string",
},
protocol: "string",
provider: "string",
psk: "string",
remoteSubnets: ["string"],
secondary: {
hosts: ["string"],
wanNames: ["string"],
internalIps: ["string"],
probeIps: ["string"],
remoteIds: ["string"],
},
version: "string",
},
},
additionalConfigCmds: ["string"],
type: "string",
urlFilteringDenyMsg: "string",
vrfConfig: {
enabled: false,
},
vrfInstances: {
string: {
networks: ["string"],
},
},
});
type: junipermist:org:Gatewaytemplate
properties:
additionalConfigCmds:
- string
bgpConfig:
string:
authKey: string
bfdMinimumInterval: 0
bfdMultiplier: 0
disableBfd: false
export: string
exportPolicy: string
extendedV4Nexthop: false
gracefulRestartTime: 0
holdTime: 0
import: string
importPolicy: string
localAs: string
neighborAs: string
neighbors:
string:
disabled: false
exportPolicy: string
holdTime: 0
importPolicy: string
multihopTtl: 0
neighborAs: string
tunnelVia: string
networks:
- string
noPrivateAs: false
noReadvertiseToOverlay: false
tunnelName: string
type: string
via: string
vpnName: string
wanName: string
dhcpdConfig:
config:
string:
dnsServers:
- string
fixedBindings:
string:
ip: string
ip6: string
name: string
gateway: string
ip6End: string
ip6Start: string
ipEnd: string
ipStart: string
leaseTime: 0
options:
string:
type: string
value: string
serverIdOverride: false
servers:
- string
serversv6s:
- string
type: string
type6: string
vendorEncapsulated:
string:
type: string
value: string
enabled: false
dnsOverride: false
dnsServers:
- string
dnsSuffixes:
- string
extraRoutes:
string:
via: string
extraRoutes6:
string:
via: string
gatewayMgmt:
adminSshkeys:
- string
appProbing:
apps:
- string
customApps:
- address: string
appType: string
hostnames:
- string
key: string
name: string
network: string
packetSize: 0
protocol: string
url: string
vrf: string
enabled: false
appUsage: false
autoSignatureUpdate:
dayOfWeek: string
enable: false
timeOfDay: string
configRevertTimer: 0
disableConsole: false
disableOob: false
disableUsb: false
fipsEnabled: false
probeHosts:
- string
probeHostsv6s:
- string
protectRe:
allowedServices:
- string
customs:
- portRange: string
protocol: string
subnets:
- string
enabled: false
hitCount: false
trustedHosts:
- string
rootPassword: string
securityLogSourceAddress: string
securityLogSourceInterface: string
idpProfiles:
string:
baseProfile: string
name: string
orgId: string
overwrites:
- action: string
matching:
attackNames:
- string
dstSubnets:
- string
severities:
- string
name: string
ipConfigs:
string:
ip: string
ip6: string
netmask: string
netmask6: string
secondaryIps:
- string
type: string
type6: string
name: string
networks:
- disallowMistServices: false
gateway: string
gateway6: string
internalAccess:
enabled: false
internetAccess:
createSimpleServicePolicy: false
destinationNat:
string:
internalIp: string
name: string
port: string
wanName: string
enabled: false
restricted: false
staticNat:
string:
internalIp: string
name: string
wanName: string
isolation: false
multicast:
disableIgmp: false
enabled: false
groups:
string:
rpIp: string
name: string
routedForNetworks:
- string
subnet: string
subnet6: string
tenants:
string:
addresses:
- string
vlanId: string
vpnAccess:
string:
advertisedSubnet: string
allowPing: false
destinationNat:
string:
internalIp: string
name: string
port: string
natPool: string
noReadvertiseToLanBgp: false
noReadvertiseToLanOspf: false
noReadvertiseToOverlay: false
otherVrfs:
- string
routed: false
sourceNat:
externalIp: string
staticNat:
string:
internalIp: string
name: string
summarizedSubnet: string
summarizedSubnetToLanBgp: string
summarizedSubnetToLanOspf: string
ntpOverride: false
ntpServers:
- string
oobIpConfig:
gateway: string
ip: string
netmask: string
node1:
gateway: string
ip: string
netmask: string
type: string
useMgmtVrf: false
useMgmtVrfForHostOut: false
vlanId: string
type: string
useMgmtVrf: false
useMgmtVrfForHostOut: false
vlanId: string
orgId: string
pathPreferences:
string:
paths:
- cost: 0
disabled: false
gatewayIp: string
internetAccess: false
name: string
networks:
- string
targetIps:
- string
type: string
wanName: string
strategy: string
portConfig:
string:
aeDisableLacp: false
aeIdx: string
aeLacpForceUp: false
aggregated: false
critical: false
description: string
disableAutoneg: false
disabled: false
dslType: string
dslVci: 0
dslVpi: 0
duplex: string
ipConfig:
dns:
- string
dnsSuffixes:
- string
gateway: string
gateway6: string
ip: string
ip6: string
netmask: string
netmask6: string
network: string
poserPassword: string
pppoeAuth: string
pppoeUsername: string
type: string
type6: string
lteApn: string
lteAuth: string
lteBackup: false
ltePassword: string
lteUsername: string
mtu: 0
name: string
networks:
- string
outerVlanId: 0
poeDisabled: false
poeKeepStateWhenReboot: false
portNetwork: string
preserveDscp: false
redundant: false
redundantGroup: 0
rethIdx: string
rethNode: string
rethNodes:
- string
speed: string
ssrNoVirtualMac: false
svrPortRange: string
trafficShaping:
classPercentages:
- 0
enabled: false
maxTxKbps: 0
usage: string
vlanId: string
vpnPaths:
string:
bfdProfile: string
bfdUseTunnelMode: false
preference: 0
role: string
trafficShaping:
classPercentages:
- 0
enabled: false
maxTxKbps: 0
wanArpPolicer: string
wanExtIp: string
wanExtIp6: string
wanExtraRoutes:
string:
via: string
wanExtraRoutes6:
string:
via: string
wanNetworks:
- string
wanProbeOverride:
ip6s:
- string
ips:
- string
probeProfile: string
wanSourceNat:
disabled: false
nat6Pool: string
natPool: string
wanSpeedtestMode: string
wanType: string
routerId: string
routingPolicies:
string:
terms:
- actions:
accept: false
addCommunities:
- string
addTargetVrfs:
- string
communities:
- string
excludeAsPaths:
- string
excludeCommunities:
- string
exportCommunities:
- string
localPreference: string
prependAsPaths:
- string
matching:
asPaths:
- string
communities:
- string
networks:
- string
prefixes:
- string
protocols:
- string
routeExists:
route: string
vrfName: string
vpnNeighborMacs:
- string
vpnPathSla:
maxJitter: 0
maxLatency: 0
maxLoss: 0
vpnPaths:
- string
servicePolicies:
- action: string
antivirus:
avprofileId: string
enabled: false
profile: string
appqoe:
enabled: false
ewfs:
- alertOnly: false
blockMessage: string
enabled: false
profile: string
idp:
alertOnly: false
enabled: false
idpprofileId: string
profile: string
localRouting: false
name: string
pathPreference: string
servicepolicyId: string
services:
- string
skyatp:
dnsDgaDetection:
enabled: false
profile: string
dnsTunnelDetection:
enabled: false
profile: string
httpInspection:
enabled: false
profile: string
iotDevicePolicy:
enabled: false
sslProxy:
ciphersCategory: string
enabled: false
syslog:
enabled: false
serverNames:
- string
tenants:
- string
ssrAdditionalConfigCmds:
- string
tunnelConfigs:
string:
autoProvision:
enabled: false
latlng:
lat: 0
lng: 0
primary:
probeIps:
- string
wanNames:
- string
provider: string
region: string
secondary:
probeIps:
- string
wanNames:
- string
serviceConnection: string
ikeLifetime: 0
ikeMode: string
ikeProposals:
- authAlgo: string
dhGroup: string
encAlgo: string
ipsecLifetime: 0
ipsecProposals:
- authAlgo: string
dhGroup: string
encAlgo: string
localId: string
localSubnets:
- string
mode: string
networks:
- string
primary:
hosts:
- string
internalIps:
- string
probeIps:
- string
remoteIds:
- string
wanNames:
- string
probe:
interval: 0
threshold: 0
timeout: 0
type: string
protocol: string
provider: string
psk: string
remoteSubnets:
- string
secondary:
hosts:
- string
internalIps:
- string
probeIps:
- string
remoteIds:
- string
wanNames:
- string
version: string
tunnelProviderOptions:
jse:
numUsers: 0
orgName: string
prisma:
serviceAccountName: string
zscaler:
aupBlockInternetUntilAccepted: false
aupEnabled: false
aupForceSslInspection: false
aupTimeoutInDays: 0
authRequired: false
cautionEnabled: false
dnBandwidth: 0
idleTimeInMinutes: 0
ofwEnabled: false
subLocations:
- aupBlockInternetUntilAccepted: false
aupEnabled: false
aupForceSslInspection: false
aupTimeoutInDays: 0
authRequired: false
cautionEnabled: false
dnBandwidth: 0
idleTimeInMinutes: 0
name: string
ofwEnabled: false
surrogateIp: false
surrogateIpEnforcedForKnownBrowsers: false
surrogateRefreshTimeInMinutes: 0
upBandwidth: 0
surrogateIp: false
surrogateIpEnforcedForKnownBrowsers: false
surrogateRefreshTimeInMinutes: 0
upBandwidth: 0
xffForwardEnabled: false
type: string
urlFilteringDenyMsg: string
vrfConfig:
enabled: false
vrfInstances:
string:
networks:
- string
Gatewaytemplate Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Gatewaytemplate resource accepts the following input properties:
- Org
Id string - Organization that owns this gateway template
- Additional
Config List<string>Cmds - Additional CLI configuration commands provided by this gateway template
- Bgp
Config Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Bgp Config Args> - BGP routing defaults for this gateway template. Property key is the BGP session name
- Dhcpd
Config Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Dhcpd Config - DHCP server defaults provided by this gateway template
- Dns
Override bool - Whether DNS server and suffix settings in this template override inherited values
- Dns
Servers List<string> - DNS servers provided by this gateway template
- Dns
Suffixes List<string> - DNS search suffixes provided by this gateway template
- Extra
Routes Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Extra Routes Args> - Additional IPv4 route defaults in this gateway template
- Extra
Routes6 Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Extra Routes6Args> - Additional IPv6 route defaults in this gateway template
- Gateway
Mgmt Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Gateway Mgmt - Management-plane defaults provided by this gateway template
- Idp
Profiles Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Idp Profiles Args> - Intrusion detection and prevention profile defaults in this gateway template
- Ip
Configs Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Ip Configs Args> - Gateway interface IP configuration defaults by network name
- Name string
- Display name of the gateway template
- Networks
List<Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Network> - Layer 3 networks configured by this gateway template
- Ntp
Override bool - Whether NTP servers in this template override inherited values
- Ntp
Servers List<string> - NTP servers provided by this gateway template
- Oob
Ip Pulumi.Config Juniper Mist. Org. Inputs. Gatewaytemplate Oob Ip Config - Out-of-band management IP defaults in this gateway template
- Path
Preferences Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Path Preferences Args> - Property key is the path name
- Port
Config Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Port Config Args> - Property key is the Port Name (i.e. "ge-0/0/0"), the Ports Range (i.e. "ge-0/0/0-10"), the List of Ports (i.e. "ge-0/0/0,ge-1/0/0", only allowed for Aggregated or Redundant interfaces) or a Variable (i.e. "{{myvar}}").
- Router
Id string - Auto assigned if not set
- Routing
Policies Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Routing Policies Args> - Routing policy defaults applied by this gateway template
- Service
Policies List<Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Service Policy> - Traffic service policy defaults enforced by this gateway template
- Ssr
Additional List<string>Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- Tunnel
Configs Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Configs Args> - Property key is the tunnel name
- Tunnel
Provider Pulumi.Options Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Provider Options - Provider-specific tunnel options defined by this gateway template
- Type string
- Gateway template deployment type
- Url
Filtering stringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- Vrf
Config Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Vrf Config - VRF defaults applied by this gateway template
- Vrf
Instances Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Vrf Instances Args> - VRF instances configured by this gateway template
- Org
Id string - Organization that owns this gateway template
- Additional
Config []stringCmds - Additional CLI configuration commands provided by this gateway template
- Bgp
Config map[string]GatewaytemplateBgp Config Args - BGP routing defaults for this gateway template. Property key is the BGP session name
- Dhcpd
Config GatewaytemplateDhcpd Config Args - DHCP server defaults provided by this gateway template
- Dns
Override bool - Whether DNS server and suffix settings in this template override inherited values
- Dns
Servers []string - DNS servers provided by this gateway template
- Dns
Suffixes []string - DNS search suffixes provided by this gateway template
- Extra
Routes map[string]GatewaytemplateExtra Routes Args - Additional IPv4 route defaults in this gateway template
- Extra
Routes6 map[string]GatewaytemplateExtra Routes6Args - Additional IPv6 route defaults in this gateway template
- Gateway
Mgmt GatewaytemplateGateway Mgmt Args - Management-plane defaults provided by this gateway template
- Idp
Profiles map[string]GatewaytemplateIdp Profiles Args - Intrusion detection and prevention profile defaults in this gateway template
- Ip
Configs map[string]GatewaytemplateIp Configs Args - Gateway interface IP configuration defaults by network name
- Name string
- Display name of the gateway template
- Networks
[]Gatewaytemplate
Network Args - Layer 3 networks configured by this gateway template
- Ntp
Override bool - Whether NTP servers in this template override inherited values
- Ntp
Servers []string - NTP servers provided by this gateway template
- Oob
Ip GatewaytemplateConfig Oob Ip Config Args - Out-of-band management IP defaults in this gateway template
- Path
Preferences map[string]GatewaytemplatePath Preferences Args - Property key is the path name
- Port
Config map[string]GatewaytemplatePort Config Args - Property key is the Port Name (i.e. "ge-0/0/0"), the Ports Range (i.e. "ge-0/0/0-10"), the List of Ports (i.e. "ge-0/0/0,ge-1/0/0", only allowed for Aggregated or Redundant interfaces) or a Variable (i.e. "{{myvar}}").
- Router
Id string - Auto assigned if not set
- Routing
Policies map[string]GatewaytemplateRouting Policies Args - Routing policy defaults applied by this gateway template
- Service
Policies []GatewaytemplateService Policy Args - Traffic service policy defaults enforced by this gateway template
- Ssr
Additional []stringConfig Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- Tunnel
Configs map[string]GatewaytemplateTunnel Configs Args - Property key is the tunnel name
- Tunnel
Provider GatewaytemplateOptions Tunnel Provider Options Args - Provider-specific tunnel options defined by this gateway template
- Type string
- Gateway template deployment type
- Url
Filtering stringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- Vrf
Config GatewaytemplateVrf Config Args - VRF defaults applied by this gateway template
- Vrf
Instances map[string]GatewaytemplateVrf Instances Args - VRF instances configured by this gateway template
- org_
id string - Organization that owns this gateway template
- additional_
config_ list(string)cmds - Additional CLI configuration commands provided by this gateway template
- bgp_
config map(object) - BGP routing defaults for this gateway template. Property key is the BGP session name
- dhcpd_
config object - DHCP server defaults provided by this gateway template
- dns_
override bool - Whether DNS server and suffix settings in this template override inherited values
- dns_
servers list(string) - DNS servers provided by this gateway template
- dns_
suffixes list(string) - DNS search suffixes provided by this gateway template
- extra_
routes map(object) - Additional IPv4 route defaults in this gateway template
- extra_
routes6 map(object) - Additional IPv6 route defaults in this gateway template
- gateway_
mgmt object - Management-plane defaults provided by this gateway template
- idp_
profiles map(object) - Intrusion detection and prevention profile defaults in this gateway template
- ip_
configs map(object) - Gateway interface IP configuration defaults by network name
- name string
- Display name of the gateway template
- networks list(object)
- Layer 3 networks configured by this gateway template
- ntp_
override bool - Whether NTP servers in this template override inherited values
- ntp_
servers list(string) - NTP servers provided by this gateway template
- oob_
ip_ objectconfig - Out-of-band management IP defaults in this gateway template
- path_
preferences map(object) - Property key is the path name
- port_
config map(object) - Property key is the Port Name (i.e. "ge-0/0/0"), the Ports Range (i.e. "ge-0/0/0-10"), the List of Ports (i.e. "ge-0/0/0,ge-1/0/0", only allowed for Aggregated or Redundant interfaces) or a Variable (i.e. "{{myvar}}").
- router_
id string - Auto assigned if not set
- routing_
policies map(object) - Routing policy defaults applied by this gateway template
- service_
policies list(object) - Traffic service policy defaults enforced by this gateway template
- ssr_
additional_ list(string)config_ cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel_
configs map(object) - Property key is the tunnel name
- tunnel_
provider_ objectoptions - Provider-specific tunnel options defined by this gateway template
- type string
- Gateway template deployment type
- url_
filtering_ stringdeny_ msg - When a service policy denies a app_category, what message to show in user's browser
- vrf_
config object - VRF defaults applied by this gateway template
- vrf_
instances map(object) - VRF instances configured by this gateway template
- org
Id String - Organization that owns this gateway template
- additional
Config List<String>Cmds - Additional CLI configuration commands provided by this gateway template
- bgp
Config Map<String,GatewaytemplateBgp Config Args> - BGP routing defaults for this gateway template. Property key is the BGP session name
- dhcpd
Config GatewaytemplateDhcpd Config - DHCP server defaults provided by this gateway template
- dns
Override Boolean - Whether DNS server and suffix settings in this template override inherited values
- dns
Servers List<String> - DNS servers provided by this gateway template
- dns
Suffixes List<String> - DNS search suffixes provided by this gateway template
- extra
Routes Map<String,GatewaytemplateExtra Routes Args> - Additional IPv4 route defaults in this gateway template
- extra
Routes6 Map<String,GatewaytemplateExtra Routes6Args> - Additional IPv6 route defaults in this gateway template
- gateway
Mgmt GatewaytemplateGateway Mgmt - Management-plane defaults provided by this gateway template
- idp
Profiles Map<String,GatewaytemplateIdp Profiles Args> - Intrusion detection and prevention profile defaults in this gateway template
- ip
Configs Map<String,GatewaytemplateIp Configs Args> - Gateway interface IP configuration defaults by network name
- name String
- Display name of the gateway template
- networks
List<Gatewaytemplate
Network> - Layer 3 networks configured by this gateway template
- ntp
Override Boolean - Whether NTP servers in this template override inherited values
- ntp
Servers List<String> - NTP servers provided by this gateway template
- oob
Ip GatewaytemplateConfig Oob Ip Config - Out-of-band management IP defaults in this gateway template
- path
Preferences Map<String,GatewaytemplatePath Preferences Args> - Property key is the path name
- port
Config Map<String,GatewaytemplatePort Config Args> - Property key is the Port Name (i.e. "ge-0/0/0"), the Ports Range (i.e. "ge-0/0/0-10"), the List of Ports (i.e. "ge-0/0/0,ge-1/0/0", only allowed for Aggregated or Redundant interfaces) or a Variable (i.e. "{{myvar}}").
- router
Id String - Auto assigned if not set
- routing
Policies Map<String,GatewaytemplateRouting Policies Args> - Routing policy defaults applied by this gateway template
- service
Policies List<GatewaytemplateService Policy> - Traffic service policy defaults enforced by this gateway template
- ssr
Additional List<String>Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel
Configs Map<String,GatewaytemplateTunnel Configs Args> - Property key is the tunnel name
- tunnel
Provider GatewaytemplateOptions Tunnel Provider Options - Provider-specific tunnel options defined by this gateway template
- type String
- Gateway template deployment type
- url
Filtering StringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- vrf
Config GatewaytemplateVrf Config - VRF defaults applied by this gateway template
- vrf
Instances Map<String,GatewaytemplateVrf Instances Args> - VRF instances configured by this gateway template
- org
Id string - Organization that owns this gateway template
- additional
Config string[]Cmds - Additional CLI configuration commands provided by this gateway template
- bgp
Config {[key: string]: GatewaytemplateBgp Config Args} - BGP routing defaults for this gateway template. Property key is the BGP session name
- dhcpd
Config GatewaytemplateDhcpd Config - DHCP server defaults provided by this gateway template
- dns
Override boolean - Whether DNS server and suffix settings in this template override inherited values
- dns
Servers string[] - DNS servers provided by this gateway template
- dns
Suffixes string[] - DNS search suffixes provided by this gateway template
- extra
Routes {[key: string]: GatewaytemplateExtra Routes Args} - Additional IPv4 route defaults in this gateway template
- extra
Routes6 {[key: string]: GatewaytemplateExtra Routes6Args} - Additional IPv6 route defaults in this gateway template
- gateway
Mgmt GatewaytemplateGateway Mgmt - Management-plane defaults provided by this gateway template
- idp
Profiles {[key: string]: GatewaytemplateIdp Profiles Args} - Intrusion detection and prevention profile defaults in this gateway template
- ip
Configs {[key: string]: GatewaytemplateIp Configs Args} - Gateway interface IP configuration defaults by network name
- name string
- Display name of the gateway template
- networks
Gatewaytemplate
Network[] - Layer 3 networks configured by this gateway template
- ntp
Override boolean - Whether NTP servers in this template override inherited values
- ntp
Servers string[] - NTP servers provided by this gateway template
- oob
Ip GatewaytemplateConfig Oob Ip Config - Out-of-band management IP defaults in this gateway template
- path
Preferences {[key: string]: GatewaytemplatePath Preferences Args} - Property key is the path name
- port
Config {[key: string]: GatewaytemplatePort Config Args} - Property key is the Port Name (i.e. "ge-0/0/0"), the Ports Range (i.e. "ge-0/0/0-10"), the List of Ports (i.e. "ge-0/0/0,ge-1/0/0", only allowed for Aggregated or Redundant interfaces) or a Variable (i.e. "{{myvar}}").
- router
Id string - Auto assigned if not set
- routing
Policies {[key: string]: GatewaytemplateRouting Policies Args} - Routing policy defaults applied by this gateway template
- service
Policies GatewaytemplateService Policy[] - Traffic service policy defaults enforced by this gateway template
- ssr
Additional string[]Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel
Configs {[key: string]: GatewaytemplateTunnel Configs Args} - Property key is the tunnel name
- tunnel
Provider GatewaytemplateOptions Tunnel Provider Options - Provider-specific tunnel options defined by this gateway template
- type string
- Gateway template deployment type
- url
Filtering stringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- vrf
Config GatewaytemplateVrf Config - VRF defaults applied by this gateway template
- vrf
Instances {[key: string]: GatewaytemplateVrf Instances Args} - VRF instances configured by this gateway template
- org_
id str - Organization that owns this gateway template
- additional_
config_ Sequence[str]cmds - Additional CLI configuration commands provided by this gateway template
- bgp_
config Mapping[str, GatewaytemplateBgp Config Args] - BGP routing defaults for this gateway template. Property key is the BGP session name
- dhcpd_
config GatewaytemplateDhcpd Config Args - DHCP server defaults provided by this gateway template
- dns_
override bool - Whether DNS server and suffix settings in this template override inherited values
- dns_
servers Sequence[str] - DNS servers provided by this gateway template
- dns_
suffixes Sequence[str] - DNS search suffixes provided by this gateway template
- extra_
routes Mapping[str, GatewaytemplateExtra Routes Args] - Additional IPv4 route defaults in this gateway template
- extra_
routes6 Mapping[str, GatewaytemplateExtra Routes6Args] - Additional IPv6 route defaults in this gateway template
- gateway_
mgmt GatewaytemplateGateway Mgmt Args - Management-plane defaults provided by this gateway template
- idp_
profiles Mapping[str, GatewaytemplateIdp Profiles Args] - Intrusion detection and prevention profile defaults in this gateway template
- ip_
configs Mapping[str, GatewaytemplateIp Configs Args] - Gateway interface IP configuration defaults by network name
- name str
- Display name of the gateway template
- networks
Sequence[Gatewaytemplate
Network Args] - Layer 3 networks configured by this gateway template
- ntp_
override bool - Whether NTP servers in this template override inherited values
- ntp_
servers Sequence[str] - NTP servers provided by this gateway template
- oob_
ip_ Gatewaytemplateconfig Oob Ip Config Args - Out-of-band management IP defaults in this gateway template
- path_
preferences Mapping[str, GatewaytemplatePath Preferences Args] - Property key is the path name
- port_
config Mapping[str, GatewaytemplatePort Config Args] - Property key is the Port Name (i.e. "ge-0/0/0"), the Ports Range (i.e. "ge-0/0/0-10"), the List of Ports (i.e. "ge-0/0/0,ge-1/0/0", only allowed for Aggregated or Redundant interfaces) or a Variable (i.e. "{{myvar}}").
- router_
id str - Auto assigned if not set
- routing_
policies Mapping[str, GatewaytemplateRouting Policies Args] - Routing policy defaults applied by this gateway template
- service_
policies Sequence[GatewaytemplateService Policy Args] - Traffic service policy defaults enforced by this gateway template
- ssr_
additional_ Sequence[str]config_ cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel_
configs Mapping[str, GatewaytemplateTunnel Configs Args] - Property key is the tunnel name
- tunnel_
provider_ Gatewaytemplateoptions Tunnel Provider Options Args - Provider-specific tunnel options defined by this gateway template
- type str
- Gateway template deployment type
- url_
filtering_ strdeny_ msg - When a service policy denies a app_category, what message to show in user's browser
- vrf_
config GatewaytemplateVrf Config Args - VRF defaults applied by this gateway template
- vrf_
instances Mapping[str, GatewaytemplateVrf Instances Args] - VRF instances configured by this gateway template
- org
Id String - Organization that owns this gateway template
- additional
Config List<String>Cmds - Additional CLI configuration commands provided by this gateway template
- bgp
Config Map<Property Map> - BGP routing defaults for this gateway template. Property key is the BGP session name
- dhcpd
Config Property Map - DHCP server defaults provided by this gateway template
- dns
Override Boolean - Whether DNS server and suffix settings in this template override inherited values
- dns
Servers List<String> - DNS servers provided by this gateway template
- dns
Suffixes List<String> - DNS search suffixes provided by this gateway template
- extra
Routes Map<Property Map> - Additional IPv4 route defaults in this gateway template
- extra
Routes6 Map<Property Map> - Additional IPv6 route defaults in this gateway template
- gateway
Mgmt Property Map - Management-plane defaults provided by this gateway template
- idp
Profiles Map<Property Map> - Intrusion detection and prevention profile defaults in this gateway template
- ip
Configs Map<Property Map> - Gateway interface IP configuration defaults by network name
- name String
- Display name of the gateway template
- networks List<Property Map>
- Layer 3 networks configured by this gateway template
- ntp
Override Boolean - Whether NTP servers in this template override inherited values
- ntp
Servers List<String> - NTP servers provided by this gateway template
- oob
Ip Property MapConfig - Out-of-band management IP defaults in this gateway template
- path
Preferences Map<Property Map> - Property key is the path name
- port
Config Map<Property Map> - Property key is the Port Name (i.e. "ge-0/0/0"), the Ports Range (i.e. "ge-0/0/0-10"), the List of Ports (i.e. "ge-0/0/0,ge-1/0/0", only allowed for Aggregated or Redundant interfaces) or a Variable (i.e. "{{myvar}}").
- router
Id String - Auto assigned if not set
- routing
Policies Map<Property Map> - Routing policy defaults applied by this gateway template
- service
Policies List<Property Map> - Traffic service policy defaults enforced by this gateway template
- ssr
Additional List<String>Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel
Configs Map<Property Map> - Property key is the tunnel name
- tunnel
Provider Property MapOptions - Provider-specific tunnel options defined by this gateway template
- type String
- Gateway template deployment type
- url
Filtering StringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- vrf
Config Property Map - VRF defaults applied by this gateway template
- vrf
Instances Map<Property Map> - VRF instances configured by this gateway template
Outputs
All input properties are implicitly available as output properties. Additionally, the Gatewaytemplate resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Gatewaytemplate Resource
Get an existing Gatewaytemplate resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: GatewaytemplateState, opts?: CustomResourceOptions): Gatewaytemplate@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
additional_config_cmds: Optional[Sequence[str]] = None,
bgp_config: Optional[Mapping[str, GatewaytemplateBgpConfigArgs]] = None,
dhcpd_config: Optional[GatewaytemplateDhcpdConfigArgs] = None,
dns_override: Optional[bool] = None,
dns_servers: Optional[Sequence[str]] = None,
dns_suffixes: Optional[Sequence[str]] = None,
extra_routes: Optional[Mapping[str, GatewaytemplateExtraRoutesArgs]] = None,
extra_routes6: Optional[Mapping[str, GatewaytemplateExtraRoutes6Args]] = None,
gateway_mgmt: Optional[GatewaytemplateGatewayMgmtArgs] = None,
idp_profiles: Optional[Mapping[str, GatewaytemplateIdpProfilesArgs]] = None,
ip_configs: Optional[Mapping[str, GatewaytemplateIpConfigsArgs]] = None,
name: Optional[str] = None,
networks: Optional[Sequence[GatewaytemplateNetworkArgs]] = None,
ntp_override: Optional[bool] = None,
ntp_servers: Optional[Sequence[str]] = None,
oob_ip_config: Optional[GatewaytemplateOobIpConfigArgs] = None,
org_id: Optional[str] = None,
path_preferences: Optional[Mapping[str, GatewaytemplatePathPreferencesArgs]] = None,
port_config: Optional[Mapping[str, GatewaytemplatePortConfigArgs]] = None,
router_id: Optional[str] = None,
routing_policies: Optional[Mapping[str, GatewaytemplateRoutingPoliciesArgs]] = None,
service_policies: Optional[Sequence[GatewaytemplateServicePolicyArgs]] = None,
ssr_additional_config_cmds: Optional[Sequence[str]] = None,
tunnel_configs: Optional[Mapping[str, GatewaytemplateTunnelConfigsArgs]] = None,
tunnel_provider_options: Optional[GatewaytemplateTunnelProviderOptionsArgs] = None,
type: Optional[str] = None,
url_filtering_deny_msg: Optional[str] = None,
vrf_config: Optional[GatewaytemplateVrfConfigArgs] = None,
vrf_instances: Optional[Mapping[str, GatewaytemplateVrfInstancesArgs]] = None) -> Gatewaytemplatefunc GetGatewaytemplate(ctx *Context, name string, id IDInput, state *GatewaytemplateState, opts ...ResourceOption) (*Gatewaytemplate, error)public static Gatewaytemplate Get(string name, Input<string> id, GatewaytemplateState? state, CustomResourceOptions? opts = null)public static Gatewaytemplate get(String name, Output<String> id, GatewaytemplateState state, CustomResourceOptions options)resources: _: type: junipermist:org:Gatewaytemplate get: id: ${id}import {
to = junipermist_org_gatewaytemplate.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Additional
Config List<string>Cmds - Additional CLI configuration commands provided by this gateway template
- Bgp
Config Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Bgp Config Args> - BGP routing defaults for this gateway template. Property key is the BGP session name
- Dhcpd
Config Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Dhcpd Config - DHCP server defaults provided by this gateway template
- Dns
Override bool - Whether DNS server and suffix settings in this template override inherited values
- Dns
Servers List<string> - DNS servers provided by this gateway template
- Dns
Suffixes List<string> - DNS search suffixes provided by this gateway template
- Extra
Routes Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Extra Routes Args> - Additional IPv4 route defaults in this gateway template
- Extra
Routes6 Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Extra Routes6Args> - Additional IPv6 route defaults in this gateway template
- Gateway
Mgmt Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Gateway Mgmt - Management-plane defaults provided by this gateway template
- Idp
Profiles Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Idp Profiles Args> - Intrusion detection and prevention profile defaults in this gateway template
- Ip
Configs Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Ip Configs Args> - Gateway interface IP configuration defaults by network name
- Name string
- Display name of the gateway template
- Networks
List<Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Network> - Layer 3 networks configured by this gateway template
- Ntp
Override bool - Whether NTP servers in this template override inherited values
- Ntp
Servers List<string> - NTP servers provided by this gateway template
- Oob
Ip Pulumi.Config Juniper Mist. Org. Inputs. Gatewaytemplate Oob Ip Config - Out-of-band management IP defaults in this gateway template
- Org
Id string - Organization that owns this gateway template
- Path
Preferences Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Path Preferences Args> - Property key is the path name
- Port
Config Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Port Config Args> - Property key is the Port Name (i.e. "ge-0/0/0"), the Ports Range (i.e. "ge-0/0/0-10"), the List of Ports (i.e. "ge-0/0/0,ge-1/0/0", only allowed for Aggregated or Redundant interfaces) or a Variable (i.e. "{{myvar}}").
- Router
Id string - Auto assigned if not set
- Routing
Policies Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Routing Policies Args> - Routing policy defaults applied by this gateway template
- Service
Policies List<Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Service Policy> - Traffic service policy defaults enforced by this gateway template
- Ssr
Additional List<string>Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- Tunnel
Configs Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Configs Args> - Property key is the tunnel name
- Tunnel
Provider Pulumi.Options Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Provider Options - Provider-specific tunnel options defined by this gateway template
- Type string
- Gateway template deployment type
- Url
Filtering stringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- Vrf
Config Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Vrf Config - VRF defaults applied by this gateway template
- Vrf
Instances Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Vrf Instances Args> - VRF instances configured by this gateway template
- Additional
Config []stringCmds - Additional CLI configuration commands provided by this gateway template
- Bgp
Config map[string]GatewaytemplateBgp Config Args - BGP routing defaults for this gateway template. Property key is the BGP session name
- Dhcpd
Config GatewaytemplateDhcpd Config Args - DHCP server defaults provided by this gateway template
- Dns
Override bool - Whether DNS server and suffix settings in this template override inherited values
- Dns
Servers []string - DNS servers provided by this gateway template
- Dns
Suffixes []string - DNS search suffixes provided by this gateway template
- Extra
Routes map[string]GatewaytemplateExtra Routes Args - Additional IPv4 route defaults in this gateway template
- Extra
Routes6 map[string]GatewaytemplateExtra Routes6Args - Additional IPv6 route defaults in this gateway template
- Gateway
Mgmt GatewaytemplateGateway Mgmt Args - Management-plane defaults provided by this gateway template
- Idp
Profiles map[string]GatewaytemplateIdp Profiles Args - Intrusion detection and prevention profile defaults in this gateway template
- Ip
Configs map[string]GatewaytemplateIp Configs Args - Gateway interface IP configuration defaults by network name
- Name string
- Display name of the gateway template
- Networks
[]Gatewaytemplate
Network Args - Layer 3 networks configured by this gateway template
- Ntp
Override bool - Whether NTP servers in this template override inherited values
- Ntp
Servers []string - NTP servers provided by this gateway template
- Oob
Ip GatewaytemplateConfig Oob Ip Config Args - Out-of-band management IP defaults in this gateway template
- Org
Id string - Organization that owns this gateway template
- Path
Preferences map[string]GatewaytemplatePath Preferences Args - Property key is the path name
- Port
Config map[string]GatewaytemplatePort Config Args - Property key is the Port Name (i.e. "ge-0/0/0"), the Ports Range (i.e. "ge-0/0/0-10"), the List of Ports (i.e. "ge-0/0/0,ge-1/0/0", only allowed for Aggregated or Redundant interfaces) or a Variable (i.e. "{{myvar}}").
- Router
Id string - Auto assigned if not set
- Routing
Policies map[string]GatewaytemplateRouting Policies Args - Routing policy defaults applied by this gateway template
- Service
Policies []GatewaytemplateService Policy Args - Traffic service policy defaults enforced by this gateway template
- Ssr
Additional []stringConfig Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- Tunnel
Configs map[string]GatewaytemplateTunnel Configs Args - Property key is the tunnel name
- Tunnel
Provider GatewaytemplateOptions Tunnel Provider Options Args - Provider-specific tunnel options defined by this gateway template
- Type string
- Gateway template deployment type
- Url
Filtering stringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- Vrf
Config GatewaytemplateVrf Config Args - VRF defaults applied by this gateway template
- Vrf
Instances map[string]GatewaytemplateVrf Instances Args - VRF instances configured by this gateway template
- additional_
config_ list(string)cmds - Additional CLI configuration commands provided by this gateway template
- bgp_
config map(object) - BGP routing defaults for this gateway template. Property key is the BGP session name
- dhcpd_
config object - DHCP server defaults provided by this gateway template
- dns_
override bool - Whether DNS server and suffix settings in this template override inherited values
- dns_
servers list(string) - DNS servers provided by this gateway template
- dns_
suffixes list(string) - DNS search suffixes provided by this gateway template
- extra_
routes map(object) - Additional IPv4 route defaults in this gateway template
- extra_
routes6 map(object) - Additional IPv6 route defaults in this gateway template
- gateway_
mgmt object - Management-plane defaults provided by this gateway template
- idp_
profiles map(object) - Intrusion detection and prevention profile defaults in this gateway template
- ip_
configs map(object) - Gateway interface IP configuration defaults by network name
- name string
- Display name of the gateway template
- networks list(object)
- Layer 3 networks configured by this gateway template
- ntp_
override bool - Whether NTP servers in this template override inherited values
- ntp_
servers list(string) - NTP servers provided by this gateway template
- oob_
ip_ objectconfig - Out-of-band management IP defaults in this gateway template
- org_
id string - Organization that owns this gateway template
- path_
preferences map(object) - Property key is the path name
- port_
config map(object) - Property key is the Port Name (i.e. "ge-0/0/0"), the Ports Range (i.e. "ge-0/0/0-10"), the List of Ports (i.e. "ge-0/0/0,ge-1/0/0", only allowed for Aggregated or Redundant interfaces) or a Variable (i.e. "{{myvar}}").
- router_
id string - Auto assigned if not set
- routing_
policies map(object) - Routing policy defaults applied by this gateway template
- service_
policies list(object) - Traffic service policy defaults enforced by this gateway template
- ssr_
additional_ list(string)config_ cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel_
configs map(object) - Property key is the tunnel name
- tunnel_
provider_ objectoptions - Provider-specific tunnel options defined by this gateway template
- type string
- Gateway template deployment type
- url_
filtering_ stringdeny_ msg - When a service policy denies a app_category, what message to show in user's browser
- vrf_
config object - VRF defaults applied by this gateway template
- vrf_
instances map(object) - VRF instances configured by this gateway template
- additional
Config List<String>Cmds - Additional CLI configuration commands provided by this gateway template
- bgp
Config Map<String,GatewaytemplateBgp Config Args> - BGP routing defaults for this gateway template. Property key is the BGP session name
- dhcpd
Config GatewaytemplateDhcpd Config - DHCP server defaults provided by this gateway template
- dns
Override Boolean - Whether DNS server and suffix settings in this template override inherited values
- dns
Servers List<String> - DNS servers provided by this gateway template
- dns
Suffixes List<String> - DNS search suffixes provided by this gateway template
- extra
Routes Map<String,GatewaytemplateExtra Routes Args> - Additional IPv4 route defaults in this gateway template
- extra
Routes6 Map<String,GatewaytemplateExtra Routes6Args> - Additional IPv6 route defaults in this gateway template
- gateway
Mgmt GatewaytemplateGateway Mgmt - Management-plane defaults provided by this gateway template
- idp
Profiles Map<String,GatewaytemplateIdp Profiles Args> - Intrusion detection and prevention profile defaults in this gateway template
- ip
Configs Map<String,GatewaytemplateIp Configs Args> - Gateway interface IP configuration defaults by network name
- name String
- Display name of the gateway template
- networks
List<Gatewaytemplate
Network> - Layer 3 networks configured by this gateway template
- ntp
Override Boolean - Whether NTP servers in this template override inherited values
- ntp
Servers List<String> - NTP servers provided by this gateway template
- oob
Ip GatewaytemplateConfig Oob Ip Config - Out-of-band management IP defaults in this gateway template
- org
Id String - Organization that owns this gateway template
- path
Preferences Map<String,GatewaytemplatePath Preferences Args> - Property key is the path name
- port
Config Map<String,GatewaytemplatePort Config Args> - Property key is the Port Name (i.e. "ge-0/0/0"), the Ports Range (i.e. "ge-0/0/0-10"), the List of Ports (i.e. "ge-0/0/0,ge-1/0/0", only allowed for Aggregated or Redundant interfaces) or a Variable (i.e. "{{myvar}}").
- router
Id String - Auto assigned if not set
- routing
Policies Map<String,GatewaytemplateRouting Policies Args> - Routing policy defaults applied by this gateway template
- service
Policies List<GatewaytemplateService Policy> - Traffic service policy defaults enforced by this gateway template
- ssr
Additional List<String>Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel
Configs Map<String,GatewaytemplateTunnel Configs Args> - Property key is the tunnel name
- tunnel
Provider GatewaytemplateOptions Tunnel Provider Options - Provider-specific tunnel options defined by this gateway template
- type String
- Gateway template deployment type
- url
Filtering StringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- vrf
Config GatewaytemplateVrf Config - VRF defaults applied by this gateway template
- vrf
Instances Map<String,GatewaytemplateVrf Instances Args> - VRF instances configured by this gateway template
- additional
Config string[]Cmds - Additional CLI configuration commands provided by this gateway template
- bgp
Config {[key: string]: GatewaytemplateBgp Config Args} - BGP routing defaults for this gateway template. Property key is the BGP session name
- dhcpd
Config GatewaytemplateDhcpd Config - DHCP server defaults provided by this gateway template
- dns
Override boolean - Whether DNS server and suffix settings in this template override inherited values
- dns
Servers string[] - DNS servers provided by this gateway template
- dns
Suffixes string[] - DNS search suffixes provided by this gateway template
- extra
Routes {[key: string]: GatewaytemplateExtra Routes Args} - Additional IPv4 route defaults in this gateway template
- extra
Routes6 {[key: string]: GatewaytemplateExtra Routes6Args} - Additional IPv6 route defaults in this gateway template
- gateway
Mgmt GatewaytemplateGateway Mgmt - Management-plane defaults provided by this gateway template
- idp
Profiles {[key: string]: GatewaytemplateIdp Profiles Args} - Intrusion detection and prevention profile defaults in this gateway template
- ip
Configs {[key: string]: GatewaytemplateIp Configs Args} - Gateway interface IP configuration defaults by network name
- name string
- Display name of the gateway template
- networks
Gatewaytemplate
Network[] - Layer 3 networks configured by this gateway template
- ntp
Override boolean - Whether NTP servers in this template override inherited values
- ntp
Servers string[] - NTP servers provided by this gateway template
- oob
Ip GatewaytemplateConfig Oob Ip Config - Out-of-band management IP defaults in this gateway template
- org
Id string - Organization that owns this gateway template
- path
Preferences {[key: string]: GatewaytemplatePath Preferences Args} - Property key is the path name
- port
Config {[key: string]: GatewaytemplatePort Config Args} - Property key is the Port Name (i.e. "ge-0/0/0"), the Ports Range (i.e. "ge-0/0/0-10"), the List of Ports (i.e. "ge-0/0/0,ge-1/0/0", only allowed for Aggregated or Redundant interfaces) or a Variable (i.e. "{{myvar}}").
- router
Id string - Auto assigned if not set
- routing
Policies {[key: string]: GatewaytemplateRouting Policies Args} - Routing policy defaults applied by this gateway template
- service
Policies GatewaytemplateService Policy[] - Traffic service policy defaults enforced by this gateway template
- ssr
Additional string[]Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel
Configs {[key: string]: GatewaytemplateTunnel Configs Args} - Property key is the tunnel name
- tunnel
Provider GatewaytemplateOptions Tunnel Provider Options - Provider-specific tunnel options defined by this gateway template
- type string
- Gateway template deployment type
- url
Filtering stringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- vrf
Config GatewaytemplateVrf Config - VRF defaults applied by this gateway template
- vrf
Instances {[key: string]: GatewaytemplateVrf Instances Args} - VRF instances configured by this gateway template
- additional_
config_ Sequence[str]cmds - Additional CLI configuration commands provided by this gateway template
- bgp_
config Mapping[str, GatewaytemplateBgp Config Args] - BGP routing defaults for this gateway template. Property key is the BGP session name
- dhcpd_
config GatewaytemplateDhcpd Config Args - DHCP server defaults provided by this gateway template
- dns_
override bool - Whether DNS server and suffix settings in this template override inherited values
- dns_
servers Sequence[str] - DNS servers provided by this gateway template
- dns_
suffixes Sequence[str] - DNS search suffixes provided by this gateway template
- extra_
routes Mapping[str, GatewaytemplateExtra Routes Args] - Additional IPv4 route defaults in this gateway template
- extra_
routes6 Mapping[str, GatewaytemplateExtra Routes6Args] - Additional IPv6 route defaults in this gateway template
- gateway_
mgmt GatewaytemplateGateway Mgmt Args - Management-plane defaults provided by this gateway template
- idp_
profiles Mapping[str, GatewaytemplateIdp Profiles Args] - Intrusion detection and prevention profile defaults in this gateway template
- ip_
configs Mapping[str, GatewaytemplateIp Configs Args] - Gateway interface IP configuration defaults by network name
- name str
- Display name of the gateway template
- networks
Sequence[Gatewaytemplate
Network Args] - Layer 3 networks configured by this gateway template
- ntp_
override bool - Whether NTP servers in this template override inherited values
- ntp_
servers Sequence[str] - NTP servers provided by this gateway template
- oob_
ip_ Gatewaytemplateconfig Oob Ip Config Args - Out-of-band management IP defaults in this gateway template
- org_
id str - Organization that owns this gateway template
- path_
preferences Mapping[str, GatewaytemplatePath Preferences Args] - Property key is the path name
- port_
config Mapping[str, GatewaytemplatePort Config Args] - Property key is the Port Name (i.e. "ge-0/0/0"), the Ports Range (i.e. "ge-0/0/0-10"), the List of Ports (i.e. "ge-0/0/0,ge-1/0/0", only allowed for Aggregated or Redundant interfaces) or a Variable (i.e. "{{myvar}}").
- router_
id str - Auto assigned if not set
- routing_
policies Mapping[str, GatewaytemplateRouting Policies Args] - Routing policy defaults applied by this gateway template
- service_
policies Sequence[GatewaytemplateService Policy Args] - Traffic service policy defaults enforced by this gateway template
- ssr_
additional_ Sequence[str]config_ cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel_
configs Mapping[str, GatewaytemplateTunnel Configs Args] - Property key is the tunnel name
- tunnel_
provider_ Gatewaytemplateoptions Tunnel Provider Options Args - Provider-specific tunnel options defined by this gateway template
- type str
- Gateway template deployment type
- url_
filtering_ strdeny_ msg - When a service policy denies a app_category, what message to show in user's browser
- vrf_
config GatewaytemplateVrf Config Args - VRF defaults applied by this gateway template
- vrf_
instances Mapping[str, GatewaytemplateVrf Instances Args] - VRF instances configured by this gateway template
- additional
Config List<String>Cmds - Additional CLI configuration commands provided by this gateway template
- bgp
Config Map<Property Map> - BGP routing defaults for this gateway template. Property key is the BGP session name
- dhcpd
Config Property Map - DHCP server defaults provided by this gateway template
- dns
Override Boolean - Whether DNS server and suffix settings in this template override inherited values
- dns
Servers List<String> - DNS servers provided by this gateway template
- dns
Suffixes List<String> - DNS search suffixes provided by this gateway template
- extra
Routes Map<Property Map> - Additional IPv4 route defaults in this gateway template
- extra
Routes6 Map<Property Map> - Additional IPv6 route defaults in this gateway template
- gateway
Mgmt Property Map - Management-plane defaults provided by this gateway template
- idp
Profiles Map<Property Map> - Intrusion detection and prevention profile defaults in this gateway template
- ip
Configs Map<Property Map> - Gateway interface IP configuration defaults by network name
- name String
- Display name of the gateway template
- networks List<Property Map>
- Layer 3 networks configured by this gateway template
- ntp
Override Boolean - Whether NTP servers in this template override inherited values
- ntp
Servers List<String> - NTP servers provided by this gateway template
- oob
Ip Property MapConfig - Out-of-band management IP defaults in this gateway template
- org
Id String - Organization that owns this gateway template
- path
Preferences Map<Property Map> - Property key is the path name
- port
Config Map<Property Map> - Property key is the Port Name (i.e. "ge-0/0/0"), the Ports Range (i.e. "ge-0/0/0-10"), the List of Ports (i.e. "ge-0/0/0,ge-1/0/0", only allowed for Aggregated or Redundant interfaces) or a Variable (i.e. "{{myvar}}").
- router
Id String - Auto assigned if not set
- routing
Policies Map<Property Map> - Routing policy defaults applied by this gateway template
- service
Policies List<Property Map> - Traffic service policy defaults enforced by this gateway template
- ssr
Additional List<String>Config Cmds - additional CLI commands to append to the generated SSR config. Note: no check is done
- tunnel
Configs Map<Property Map> - Property key is the tunnel name
- tunnel
Provider Property MapOptions - Provider-specific tunnel options defined by this gateway template
- type String
- Gateway template deployment type
- url
Filtering StringDeny Msg - When a service policy denies a app_category, what message to show in user's browser
- vrf
Config Property Map - VRF defaults applied by this gateway template
- vrf
Instances Map<Property Map> - VRF instances configured by this gateway template
Supporting Types
GatewaytemplateBgpConfig, GatewaytemplateBgpConfigArgs
- Via string
- Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
- Auth
Key string - Optional if
via==lan,via==tunnelorvia==wan - Bfd
Minimum intInterval - Optional if
via==lan,via==tunnelorvia==wan, when bfdMultiplier is configured alone. Default:- 1000 if
type==external - 350
type==internal
- 1000 if
- Bfd
Multiplier int - Optional if
via==lan,via==tunnelorvia==wan, when bfdMinimumIntervalIsConfigured alone - Disable
Bfd bool - Optional if
via==lan,via==tunnelorvia==wan. BFD provides faster path failure detection and is enabled by default - Export string
- Routing policy applied to routes exported by this BGP session
- Export
Policy string - Default export policies if no per-neighbor policies defined
- Extended
V4Nexthop bool - Optional if
via==lan,via==tunnelorvia==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this - Graceful
Restart intTime - Optional if
via==lan,via==tunnelorvia==wan.0means disable - Hold
Time int - Optional if
via==lan,via==tunnelorvia==wan. Default is 90. - Import string
- Routing policy applied to routes imported by this BGP session
- Import
Policy string - Optional if
via==lan,via==tunnelorvia==wan. Default import policies if no per-neighbor policies defined - Local
As string - Required if
via==lan,via==tunnelorvia==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - Neighbor
As string - Neighbor AS. If
type==internal, must be equal tolocalAs. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - Neighbors
Dictionary<string, Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Bgp Config Neighbors> - Required if
via==lan,via==tunnelorvia==wan. If per-neighbor as is desired. Property key is the neighbor address - Networks List<string>
- Optional if
via==lan; networks where BGP neighbors can connect to or from - No
Private boolAs - Optional if
via==lan,via==tunnelorvia==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor - No
Readvertise boolTo Overlay - Optional if
via==lan,via==tunnelorvia==wan. By default, we'll re-advertise all learned BGP routers toward overlay - Tunnel
Name string - Optional if
via==tunnel; tunnel name used for this BGP session - Type string
- Required if
via==lan,via==tunnelorvia==wan; BGP session type, internal or external - Vpn
Name string - Optional if
via==vpn; VPN name used for this BGP session - Wan
Name string - Optional if
via==wan; WAN interface name used for this BGP session
- Via string
- Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
- Auth
Key string - Optional if
via==lan,via==tunnelorvia==wan - Bfd
Minimum intInterval - Optional if
via==lan,via==tunnelorvia==wan, when bfdMultiplier is configured alone. Default:- 1000 if
type==external - 350
type==internal
- 1000 if
- Bfd
Multiplier int - Optional if
via==lan,via==tunnelorvia==wan, when bfdMinimumIntervalIsConfigured alone - Disable
Bfd bool - Optional if
via==lan,via==tunnelorvia==wan. BFD provides faster path failure detection and is enabled by default - Export string
- Routing policy applied to routes exported by this BGP session
- Export
Policy string - Default export policies if no per-neighbor policies defined
- Extended
V4Nexthop bool - Optional if
via==lan,via==tunnelorvia==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this - Graceful
Restart intTime - Optional if
via==lan,via==tunnelorvia==wan.0means disable - Hold
Time int - Optional if
via==lan,via==tunnelorvia==wan. Default is 90. - Import string
- Routing policy applied to routes imported by this BGP session
- Import
Policy string - Optional if
via==lan,via==tunnelorvia==wan. Default import policies if no per-neighbor policies defined - Local
As string - Required if
via==lan,via==tunnelorvia==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - Neighbor
As string - Neighbor AS. If
type==internal, must be equal tolocalAs. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - Neighbors
map[string]Gatewaytemplate
Bgp Config Neighbors - Required if
via==lan,via==tunnelorvia==wan. If per-neighbor as is desired. Property key is the neighbor address - Networks []string
- Optional if
via==lan; networks where BGP neighbors can connect to or from - No
Private boolAs - Optional if
via==lan,via==tunnelorvia==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor - No
Readvertise boolTo Overlay - Optional if
via==lan,via==tunnelorvia==wan. By default, we'll re-advertise all learned BGP routers toward overlay - Tunnel
Name string - Optional if
via==tunnel; tunnel name used for this BGP session - Type string
- Required if
via==lan,via==tunnelorvia==wan; BGP session type, internal or external - Vpn
Name string - Optional if
via==vpn; VPN name used for this BGP session - Wan
Name string - Optional if
via==wan; WAN interface name used for this BGP session
- via string
- Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
- auth_
key string - Optional if
via==lan,via==tunnelorvia==wan - bfd_
minimum_ numberinterval - Optional if
via==lan,via==tunnelorvia==wan, when bfdMultiplier is configured alone. Default:- 1000 if
type==external - 350
type==internal
- 1000 if
- bfd_
multiplier number - Optional if
via==lan,via==tunnelorvia==wan, when bfdMinimumIntervalIsConfigured alone - disable_
bfd bool - Optional if
via==lan,via==tunnelorvia==wan. BFD provides faster path failure detection and is enabled by default - export string
- Routing policy applied to routes exported by this BGP session
- export_
policy string - Default export policies if no per-neighbor policies defined
- extended_
v4_ boolnexthop - Optional if
via==lan,via==tunnelorvia==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this - graceful_
restart_ numbertime - Optional if
via==lan,via==tunnelorvia==wan.0means disable - hold_
time number - Optional if
via==lan,via==tunnelorvia==wan. Default is 90. - import string
- Routing policy applied to routes imported by this BGP session
- import_
policy string - Optional if
via==lan,via==tunnelorvia==wan. Default import policies if no per-neighbor policies defined - local_
as string - Required if
via==lan,via==tunnelorvia==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbor_
as string - Neighbor AS. If
type==internal, must be equal tolocalAs. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbors map(object)
- Required if
via==lan,via==tunnelorvia==wan. If per-neighbor as is desired. Property key is the neighbor address - networks list(string)
- Optional if
via==lan; networks where BGP neighbors can connect to or from - no_
private_ boolas - Optional if
via==lan,via==tunnelorvia==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor - no_
readvertise_ boolto_ overlay - Optional if
via==lan,via==tunnelorvia==wan. By default, we'll re-advertise all learned BGP routers toward overlay - tunnel_
name string - Optional if
via==tunnel; tunnel name used for this BGP session - type string
- Required if
via==lan,via==tunnelorvia==wan; BGP session type, internal or external - vpn_
name string - Optional if
via==vpn; VPN name used for this BGP session - wan_
name string - Optional if
via==wan; WAN interface name used for this BGP session
- via String
- Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
- auth
Key String - Optional if
via==lan,via==tunnelorvia==wan - bfd
Minimum IntegerInterval - Optional if
via==lan,via==tunnelorvia==wan, when bfdMultiplier is configured alone. Default:- 1000 if
type==external - 350
type==internal
- 1000 if
- bfd
Multiplier Integer - Optional if
via==lan,via==tunnelorvia==wan, when bfdMinimumIntervalIsConfigured alone - disable
Bfd Boolean - Optional if
via==lan,via==tunnelorvia==wan. BFD provides faster path failure detection and is enabled by default - export String
- Routing policy applied to routes exported by this BGP session
- export
Policy String - Default export policies if no per-neighbor policies defined
- extended
V4Nexthop Boolean - Optional if
via==lan,via==tunnelorvia==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this - graceful
Restart IntegerTime - Optional if
via==lan,via==tunnelorvia==wan.0means disable - hold
Time Integer - Optional if
via==lan,via==tunnelorvia==wan. Default is 90. - import
Policy String - Optional if
via==lan,via==tunnelorvia==wan. Default import policies if no per-neighbor policies defined - import_ String
- Routing policy applied to routes imported by this BGP session
- local
As String - Required if
via==lan,via==tunnelorvia==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbor
As String - Neighbor AS. If
type==internal, must be equal tolocalAs. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbors
Map<String,Gatewaytemplate
Bgp Config Neighbors> - Required if
via==lan,via==tunnelorvia==wan. If per-neighbor as is desired. Property key is the neighbor address - networks List<String>
- Optional if
via==lan; networks where BGP neighbors can connect to or from - no
Private BooleanAs - Optional if
via==lan,via==tunnelorvia==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor - no
Readvertise BooleanTo Overlay - Optional if
via==lan,via==tunnelorvia==wan. By default, we'll re-advertise all learned BGP routers toward overlay - tunnel
Name String - Optional if
via==tunnel; tunnel name used for this BGP session - type String
- Required if
via==lan,via==tunnelorvia==wan; BGP session type, internal or external - vpn
Name String - Optional if
via==vpn; VPN name used for this BGP session - wan
Name String - Optional if
via==wan; WAN interface name used for this BGP session
- via string
- Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
- auth
Key string - Optional if
via==lan,via==tunnelorvia==wan - bfd
Minimum numberInterval - Optional if
via==lan,via==tunnelorvia==wan, when bfdMultiplier is configured alone. Default:- 1000 if
type==external - 350
type==internal
- 1000 if
- bfd
Multiplier number - Optional if
via==lan,via==tunnelorvia==wan, when bfdMinimumIntervalIsConfigured alone - disable
Bfd boolean - Optional if
via==lan,via==tunnelorvia==wan. BFD provides faster path failure detection and is enabled by default - export string
- Routing policy applied to routes exported by this BGP session
- export
Policy string - Default export policies if no per-neighbor policies defined
- extended
V4Nexthop boolean - Optional if
via==lan,via==tunnelorvia==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this - graceful
Restart numberTime - Optional if
via==lan,via==tunnelorvia==wan.0means disable - hold
Time number - Optional if
via==lan,via==tunnelorvia==wan. Default is 90. - import string
- Routing policy applied to routes imported by this BGP session
- import
Policy string - Optional if
via==lan,via==tunnelorvia==wan. Default import policies if no per-neighbor policies defined - local
As string - Required if
via==lan,via==tunnelorvia==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbor
As string - Neighbor AS. If
type==internal, must be equal tolocalAs. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbors
{[key: string]: Gatewaytemplate
Bgp Config Neighbors} - Required if
via==lan,via==tunnelorvia==wan. If per-neighbor as is desired. Property key is the neighbor address - networks string[]
- Optional if
via==lan; networks where BGP neighbors can connect to or from - no
Private booleanAs - Optional if
via==lan,via==tunnelorvia==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor - no
Readvertise booleanTo Overlay - Optional if
via==lan,via==tunnelorvia==wan. By default, we'll re-advertise all learned BGP routers toward overlay - tunnel
Name string - Optional if
via==tunnel; tunnel name used for this BGP session - type string
- Required if
via==lan,via==tunnelorvia==wan; BGP session type, internal or external - vpn
Name string - Optional if
via==vpn; VPN name used for this BGP session - wan
Name string - Optional if
via==wan; WAN interface name used for this BGP session
- via str
- Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
- auth_
key str - Optional if
via==lan,via==tunnelorvia==wan - bfd_
minimum_ intinterval - Optional if
via==lan,via==tunnelorvia==wan, when bfdMultiplier is configured alone. Default:- 1000 if
type==external - 350
type==internal
- 1000 if
- bfd_
multiplier int - Optional if
via==lan,via==tunnelorvia==wan, when bfdMinimumIntervalIsConfigured alone - disable_
bfd bool - Optional if
via==lan,via==tunnelorvia==wan. BFD provides faster path failure detection and is enabled by default - export str
- Routing policy applied to routes exported by this BGP session
- export_
policy str - Default export policies if no per-neighbor policies defined
- extended_
v4_ boolnexthop - Optional if
via==lan,via==tunnelorvia==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this - graceful_
restart_ inttime - Optional if
via==lan,via==tunnelorvia==wan.0means disable - hold_
time int - Optional if
via==lan,via==tunnelorvia==wan. Default is 90. - import_ str
- Routing policy applied to routes imported by this BGP session
- import_
policy str - Optional if
via==lan,via==tunnelorvia==wan. Default import policies if no per-neighbor policies defined - local_
as str - Required if
via==lan,via==tunnelorvia==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbor_
as str - Neighbor AS. If
type==internal, must be equal tolocalAs. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbors
Mapping[str, Gatewaytemplate
Bgp Config Neighbors] - Required if
via==lan,via==tunnelorvia==wan. If per-neighbor as is desired. Property key is the neighbor address - networks Sequence[str]
- Optional if
via==lan; networks where BGP neighbors can connect to or from - no_
private_ boolas - Optional if
via==lan,via==tunnelorvia==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor - no_
readvertise_ boolto_ overlay - Optional if
via==lan,via==tunnelorvia==wan. By default, we'll re-advertise all learned BGP routers toward overlay - tunnel_
name str - Optional if
via==tunnel; tunnel name used for this BGP session - type str
- Required if
via==lan,via==tunnelorvia==wan; BGP session type, internal or external - vpn_
name str - Optional if
via==vpn; VPN name used for this BGP session - wan_
name str - Optional if
via==wan; WAN interface name used for this BGP session
- via String
- Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
- auth
Key String - Optional if
via==lan,via==tunnelorvia==wan - bfd
Minimum NumberInterval - Optional if
via==lan,via==tunnelorvia==wan, when bfdMultiplier is configured alone. Default:- 1000 if
type==external - 350
type==internal
- 1000 if
- bfd
Multiplier Number - Optional if
via==lan,via==tunnelorvia==wan, when bfdMinimumIntervalIsConfigured alone - disable
Bfd Boolean - Optional if
via==lan,via==tunnelorvia==wan. BFD provides faster path failure detection and is enabled by default - export String
- Routing policy applied to routes exported by this BGP session
- export
Policy String - Default export policies if no per-neighbor policies defined
- extended
V4Nexthop Boolean - Optional if
via==lan,via==tunnelorvia==wan. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this - graceful
Restart NumberTime - Optional if
via==lan,via==tunnelorvia==wan.0means disable - hold
Time Number - Optional if
via==lan,via==tunnelorvia==wan. Default is 90. - import String
- Routing policy applied to routes imported by this BGP session
- import
Policy String - Optional if
via==lan,via==tunnelorvia==wan. Default import policies if no per-neighbor policies defined - local
As String - Required if
via==lan,via==tunnelorvia==wan. BGPLocal AS. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbor
As String - Neighbor AS. If
type==internal, must be equal tolocalAs. Value must be in range 1-4294967295 or a variable (e.g.{{as_variable}}) - neighbors Map<Property Map>
- Required if
via==lan,via==tunnelorvia==wan. If per-neighbor as is desired. Property key is the neighbor address - networks List<String>
- Optional if
via==lan; networks where BGP neighbors can connect to or from - no
Private BooleanAs - Optional if
via==lan,via==tunnelorvia==wan. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor - no
Readvertise BooleanTo Overlay - Optional if
via==lan,via==tunnelorvia==wan. By default, we'll re-advertise all learned BGP routers toward overlay - tunnel
Name String - Optional if
via==tunnel; tunnel name used for this BGP session - type String
- Required if
via==lan,via==tunnelorvia==wan; BGP session type, internal or external - vpn
Name String - Optional if
via==vpn; VPN name used for this BGP session - wan
Name String - Optional if
via==wan; WAN interface name used for this BGP session
GatewaytemplateBgpConfigNeighbors, GatewaytemplateBgpConfigNeighborsArgs
- Neighbor
As string - Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g.
{{as_variable}}) - Disabled bool
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- Export
Policy string - Export policy applied only to this BGP neighbor
- Hold
Time int - BGP hold time for this neighbor, in seconds
- Import
Policy string - Import policy applied only to this BGP neighbor
- Multihop
Ttl int - Assuming BGP neighbor is directly connected
- Tunnel
Via string - If
via==tunnel, primary or secondary tunnel associated with this BGP neighbor
- Neighbor
As string - Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g.
{{as_variable}}) - Disabled bool
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- Export
Policy string - Export policy applied only to this BGP neighbor
- Hold
Time int - BGP hold time for this neighbor, in seconds
- Import
Policy string - Import policy applied only to this BGP neighbor
- Multihop
Ttl int - Assuming BGP neighbor is directly connected
- Tunnel
Via string - If
via==tunnel, primary or secondary tunnel associated with this BGP neighbor
- neighbor_
as string - Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g.
{{as_variable}}) - disabled bool
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- export_
policy string - Export policy applied only to this BGP neighbor
- hold_
time number - BGP hold time for this neighbor, in seconds
- import_
policy string - Import policy applied only to this BGP neighbor
- multihop_
ttl number - Assuming BGP neighbor is directly connected
- tunnel_
via string - If
via==tunnel, primary or secondary tunnel associated with this BGP neighbor
- neighbor
As String - Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g.
{{as_variable}}) - disabled Boolean
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- export
Policy String - Export policy applied only to this BGP neighbor
- hold
Time Integer - BGP hold time for this neighbor, in seconds
- import
Policy String - Import policy applied only to this BGP neighbor
- multihop
Ttl Integer - Assuming BGP neighbor is directly connected
- tunnel
Via String - If
via==tunnel, primary or secondary tunnel associated with this BGP neighbor
- neighbor
As string - Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g.
{{as_variable}}) - disabled boolean
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- export
Policy string - Export policy applied only to this BGP neighbor
- hold
Time number - BGP hold time for this neighbor, in seconds
- import
Policy string - Import policy applied only to this BGP neighbor
- multihop
Ttl number - Assuming BGP neighbor is directly connected
- tunnel
Via string - If
via==tunnel, primary or secondary tunnel associated with this BGP neighbor
- neighbor_
as str - Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g.
{{as_variable}}) - disabled bool
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- export_
policy str - Export policy applied only to this BGP neighbor
- hold_
time int - BGP hold time for this neighbor, in seconds
- import_
policy str - Import policy applied only to this BGP neighbor
- multihop_
ttl int - Assuming BGP neighbor is directly connected
- tunnel_
via str - If
via==tunnel, primary or secondary tunnel associated with this BGP neighbor
- neighbor
As String - Neighbor AS. Value must be in range 1-4294967295 or a variable (e.g.
{{as_variable}}) - disabled Boolean
- If true, the BGP session to this neighbor will be administratively disabled/shutdown
- export
Policy String - Export policy applied only to this BGP neighbor
- hold
Time Number - BGP hold time for this neighbor, in seconds
- import
Policy String - Import policy applied only to this BGP neighbor
- multihop
Ttl Number - Assuming BGP neighbor is directly connected
- tunnel
Via String - If
via==tunnel, primary or secondary tunnel associated with this BGP neighbor
GatewaytemplateDhcpdConfig, GatewaytemplateDhcpdConfigArgs
GatewaytemplateDhcpdConfigConfig, GatewaytemplateDhcpdConfigConfigArgs
- Dns
Servers List<string> - If
type==localortype6==local, DNS servers advertised to DHCP clients - Dns
Suffixes List<string> - If
type==localortype6==local, DNS search suffixes advertised to DHCP clients - Fixed
Bindings Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Dhcpd Config Config Fixed Bindings> - If
type==localortype6==local, fixed client bindings for local DHCP service - Gateway string
- If
type==local- optional,ipwill be used if not provided - Ip6End string
- If
type6==local, ending IPv6 address for the DHCP lease pool - Ip6Start string
- If
type6==local, starting IPv6 address for the DHCP lease pool - Ip
End string - If
type==local, ending IPv4 address for the DHCP lease pool - Ip
Start string - If
type==local, starting IPv4 address for the DHCP lease pool - Lease
Time int - In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- Options
Dictionary<string, Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Dhcpd Config Config Options> - If
type==localortype6==local, custom DHCP options advertised to clients - Server
Id boolOverride serverIdOverride==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- Servers List<string>
- If
type==relay, upstream IPv4 DHCP servers - Serversv6s List<string>
- If
type6==relay, upstream IPv6 DHCP servers - Type string
- IPv4 DHCP mode for this network
- Type6 string
- IPv6 DHCP mode for this network
- Vendor
Encapsulated Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Dhcpd Config Config Vendor Encapsulated> - If
type==localortype6==local, vendor-encapsulated DHCP options advertised to clients
- Dns
Servers []string - If
type==localortype6==local, DNS servers advertised to DHCP clients - Dns
Suffixes []string - If
type==localortype6==local, DNS search suffixes advertised to DHCP clients - Fixed
Bindings map[string]GatewaytemplateDhcpd Config Config Fixed Bindings - If
type==localortype6==local, fixed client bindings for local DHCP service - Gateway string
- If
type==local- optional,ipwill be used if not provided - Ip6End string
- If
type6==local, ending IPv6 address for the DHCP lease pool - Ip6Start string
- If
type6==local, starting IPv6 address for the DHCP lease pool - Ip
End string - If
type==local, ending IPv4 address for the DHCP lease pool - Ip
Start string - If
type==local, starting IPv4 address for the DHCP lease pool - Lease
Time int - In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- Options
map[string]Gatewaytemplate
Dhcpd Config Config Options - If
type==localortype6==local, custom DHCP options advertised to clients - Server
Id boolOverride serverIdOverride==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- Servers []string
- If
type==relay, upstream IPv4 DHCP servers - Serversv6s []string
- If
type6==relay, upstream IPv6 DHCP servers - Type string
- IPv4 DHCP mode for this network
- Type6 string
- IPv6 DHCP mode for this network
- Vendor
Encapsulated map[string]GatewaytemplateDhcpd Config Config Vendor Encapsulated - If
type==localortype6==local, vendor-encapsulated DHCP options advertised to clients
- dns_
servers list(string) - If
type==localortype6==local, DNS servers advertised to DHCP clients - dns_
suffixes list(string) - If
type==localortype6==local, DNS search suffixes advertised to DHCP clients - fixed_
bindings map(object) - If
type==localortype6==local, fixed client bindings for local DHCP service - gateway string
- If
type==local- optional,ipwill be used if not provided - ip6_
end string - If
type6==local, ending IPv6 address for the DHCP lease pool - ip6_
start string - If
type6==local, starting IPv6 address for the DHCP lease pool - ip_
end string - If
type==local, ending IPv4 address for the DHCP lease pool - ip_
start string - If
type==local, starting IPv4 address for the DHCP lease pool - lease_
time number - In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options map(object)
- If
type==localortype6==local, custom DHCP options advertised to clients - server_
id_ booloverride serverIdOverride==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers list(string)
- If
type==relay, upstream IPv4 DHCP servers - serversv6s list(string)
- If
type6==relay, upstream IPv6 DHCP servers - type string
- IPv4 DHCP mode for this network
- type6 string
- IPv6 DHCP mode for this network
- vendor_
encapsulated map(object) - If
type==localortype6==local, vendor-encapsulated DHCP options advertised to clients
- dns
Servers List<String> - If
type==localortype6==local, DNS servers advertised to DHCP clients - dns
Suffixes List<String> - If
type==localortype6==local, DNS search suffixes advertised to DHCP clients - fixed
Bindings Map<String,GatewaytemplateDhcpd Config Config Fixed Bindings> - If
type==localortype6==local, fixed client bindings for local DHCP service - gateway String
- If
type==local- optional,ipwill be used if not provided - ip6End String
- If
type6==local, ending IPv6 address for the DHCP lease pool - ip6Start String
- If
type6==local, starting IPv6 address for the DHCP lease pool - ip
End String - If
type==local, ending IPv4 address for the DHCP lease pool - ip
Start String - If
type==local, starting IPv4 address for the DHCP lease pool - lease
Time Integer - In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options
Map<String,Gatewaytemplate
Dhcpd Config Config Options> - If
type==localortype6==local, custom DHCP options advertised to clients - server
Id BooleanOverride serverIdOverride==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers List<String>
- If
type==relay, upstream IPv4 DHCP servers - serversv6s List<String>
- If
type6==relay, upstream IPv6 DHCP servers - type String
- IPv4 DHCP mode for this network
- type6 String
- IPv6 DHCP mode for this network
- vendor
Encapsulated Map<String,GatewaytemplateDhcpd Config Config Vendor Encapsulated> - If
type==localortype6==local, vendor-encapsulated DHCP options advertised to clients
- dns
Servers string[] - If
type==localortype6==local, DNS servers advertised to DHCP clients - dns
Suffixes string[] - If
type==localortype6==local, DNS search suffixes advertised to DHCP clients - fixed
Bindings {[key: string]: GatewaytemplateDhcpd Config Config Fixed Bindings} - If
type==localortype6==local, fixed client bindings for local DHCP service - gateway string
- If
type==local- optional,ipwill be used if not provided - ip6End string
- If
type6==local, ending IPv6 address for the DHCP lease pool - ip6Start string
- If
type6==local, starting IPv6 address for the DHCP lease pool - ip
End string - If
type==local, ending IPv4 address for the DHCP lease pool - ip
Start string - If
type==local, starting IPv4 address for the DHCP lease pool - lease
Time number - In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options
{[key: string]: Gatewaytemplate
Dhcpd Config Config Options} - If
type==localortype6==local, custom DHCP options advertised to clients - server
Id booleanOverride serverIdOverride==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers string[]
- If
type==relay, upstream IPv4 DHCP servers - serversv6s string[]
- If
type6==relay, upstream IPv6 DHCP servers - type string
- IPv4 DHCP mode for this network
- type6 string
- IPv6 DHCP mode for this network
- vendor
Encapsulated {[key: string]: GatewaytemplateDhcpd Config Config Vendor Encapsulated} - If
type==localortype6==local, vendor-encapsulated DHCP options advertised to clients
- dns_
servers Sequence[str] - If
type==localortype6==local, DNS servers advertised to DHCP clients - dns_
suffixes Sequence[str] - If
type==localortype6==local, DNS search suffixes advertised to DHCP clients - fixed_
bindings Mapping[str, GatewaytemplateDhcpd Config Config Fixed Bindings] - If
type==localortype6==local, fixed client bindings for local DHCP service - gateway str
- If
type==local- optional,ipwill be used if not provided - ip6_
end str - If
type6==local, ending IPv6 address for the DHCP lease pool - ip6_
start str - If
type6==local, starting IPv6 address for the DHCP lease pool - ip_
end str - If
type==local, ending IPv4 address for the DHCP lease pool - ip_
start str - If
type==local, starting IPv4 address for the DHCP lease pool - lease_
time int - In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options
Mapping[str, Gatewaytemplate
Dhcpd Config Config Options] - If
type==localortype6==local, custom DHCP options advertised to clients - server_
id_ booloverride serverIdOverride==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers Sequence[str]
- If
type==relay, upstream IPv4 DHCP servers - serversv6s Sequence[str]
- If
type6==relay, upstream IPv6 DHCP servers - type str
- IPv4 DHCP mode for this network
- type6 str
- IPv6 DHCP mode for this network
- vendor_
encapsulated Mapping[str, GatewaytemplateDhcpd Config Config Vendor Encapsulated] - If
type==localortype6==local, vendor-encapsulated DHCP options advertised to clients
- dns
Servers List<String> - If
type==localortype6==local, DNS servers advertised to DHCP clients - dns
Suffixes List<String> - If
type==localortype6==local, DNS search suffixes advertised to DHCP clients - fixed
Bindings Map<Property Map> - If
type==localortype6==local, fixed client bindings for local DHCP service - gateway String
- If
type==local- optional,ipwill be used if not provided - ip6End String
- If
type6==local, ending IPv6 address for the DHCP lease pool - ip6Start String
- If
type6==local, starting IPv6 address for the DHCP lease pool - ip
End String - If
type==local, ending IPv4 address for the DHCP lease pool - ip
Start String - If
type==local, starting IPv4 address for the DHCP lease pool - lease
Time Number - In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
- options Map<Property Map>
- If
type==localortype6==local, custom DHCP options advertised to clients - server
Id BooleanOverride serverIdOverride==truemeans the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, should overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address.- servers List<String>
- If
type==relay, upstream IPv4 DHCP servers - serversv6s List<String>
- If
type6==relay, upstream IPv6 DHCP servers - type String
- IPv4 DHCP mode for this network
- type6 String
- IPv6 DHCP mode for this network
- vendor
Encapsulated Map<Property Map> - If
type==localortype6==local, vendor-encapsulated DHCP options advertised to clients
GatewaytemplateDhcpdConfigConfigFixedBindings, GatewaytemplateDhcpdConfigConfigFixedBindingsArgs
GatewaytemplateDhcpdConfigConfigOptions, GatewaytemplateDhcpdConfigConfigOptionsArgs
GatewaytemplateDhcpdConfigConfigVendorEncapsulated, GatewaytemplateDhcpdConfigConfigVendorEncapsulatedArgs
GatewaytemplateExtraRoutes, GatewaytemplateExtraRoutesArgs
- Via string
- Next-hop IPv4 address for the gateway extra route
- Via string
- Next-hop IPv4 address for the gateway extra route
- via string
- Next-hop IPv4 address for the gateway extra route
- via String
- Next-hop IPv4 address for the gateway extra route
- via string
- Next-hop IPv4 address for the gateway extra route
- via str
- Next-hop IPv4 address for the gateway extra route
- via String
- Next-hop IPv4 address for the gateway extra route
GatewaytemplateExtraRoutes6, GatewaytemplateExtraRoutes6Args
- Via string
- Next-hop IPv6 address for the gateway extra route
- Via string
- Next-hop IPv6 address for the gateway extra route
- via string
- Next-hop IPv6 address for the gateway extra route
- via String
- Next-hop IPv6 address for the gateway extra route
- via string
- Next-hop IPv6 address for the gateway extra route
- via str
- Next-hop IPv6 address for the gateway extra route
- via String
- Next-hop IPv6 address for the gateway extra route
GatewaytemplateGatewayMgmt, GatewaytemplateGatewayMgmtArgs
- Admin
Sshkeys List<string> - SSR-only SSH public keys for administrative access
- App
Probing Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Gateway Mgmt App Probing - Application probing configuration for gateway monitoring
- App
Usage bool - Consumes uplink bandwidth, requires WA license
- Auto
Signature Pulumi.Update Juniper Mist. Org. Inputs. Gatewaytemplate Gateway Mgmt Auto Signature Update - Schedule for automatic security signature updates
- Config
Revert intTimer - Rollback timer for commit confirmed
- Disable
Console bool - For SSR and SRX, disable console port
- Disable
Oob bool - For SSR and SRX, disable management interface
- Disable
Usb bool - For SSR and SRX, disable usb interface
- Fips
Enabled bool - Whether FIPS mode is enabled on the gateway
- Probe
Hosts List<string> - IPv4 probe targets used for gateway connectivity checks
- Probe
Hostsv6s List<string> - IPv6 probe targets used for gateway connectivity checks
- Protect
Re Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Gateway Mgmt Protect Re - Control-plane protection settings for the gateway
- Root
Password string - SRX only. Root password for local gateway access
- Security
Log stringSource Address - IPv4 source address used for gateway security log traffic
- Security
Log stringSource Interface - Source interface used for gateway security log traffic
- Admin
Sshkeys []string - SSR-only SSH public keys for administrative access
- App
Probing GatewaytemplateGateway Mgmt App Probing - Application probing configuration for gateway monitoring
- App
Usage bool - Consumes uplink bandwidth, requires WA license
- Auto
Signature GatewaytemplateUpdate Gateway Mgmt Auto Signature Update - Schedule for automatic security signature updates
- Config
Revert intTimer - Rollback timer for commit confirmed
- Disable
Console bool - For SSR and SRX, disable console port
- Disable
Oob bool - For SSR and SRX, disable management interface
- Disable
Usb bool - For SSR and SRX, disable usb interface
- Fips
Enabled bool - Whether FIPS mode is enabled on the gateway
- Probe
Hosts []string - IPv4 probe targets used for gateway connectivity checks
- Probe
Hostsv6s []string - IPv6 probe targets used for gateway connectivity checks
- Protect
Re GatewaytemplateGateway Mgmt Protect Re - Control-plane protection settings for the gateway
- Root
Password string - SRX only. Root password for local gateway access
- Security
Log stringSource Address - IPv4 source address used for gateway security log traffic
- Security
Log stringSource Interface - Source interface used for gateway security log traffic
- admin_
sshkeys list(string) - SSR-only SSH public keys for administrative access
- app_
probing object - Application probing configuration for gateway monitoring
- app_
usage bool - Consumes uplink bandwidth, requires WA license
- auto_
signature_ objectupdate - Schedule for automatic security signature updates
- config_
revert_ numbertimer - Rollback timer for commit confirmed
- disable_
console bool - For SSR and SRX, disable console port
- disable_
oob bool - For SSR and SRX, disable management interface
- disable_
usb bool - For SSR and SRX, disable usb interface
- fips_
enabled bool - Whether FIPS mode is enabled on the gateway
- probe_
hosts list(string) - IPv4 probe targets used for gateway connectivity checks
- probe_
hostsv6s list(string) - IPv6 probe targets used for gateway connectivity checks
- protect_
re object - Control-plane protection settings for the gateway
- root_
password string - SRX only. Root password for local gateway access
- security_
log_ stringsource_ address - IPv4 source address used for gateway security log traffic
- security_
log_ stringsource_ interface - Source interface used for gateway security log traffic
- admin
Sshkeys List<String> - SSR-only SSH public keys for administrative access
- app
Probing GatewaytemplateGateway Mgmt App Probing - Application probing configuration for gateway monitoring
- app
Usage Boolean - Consumes uplink bandwidth, requires WA license
- auto
Signature GatewaytemplateUpdate Gateway Mgmt Auto Signature Update - Schedule for automatic security signature updates
- config
Revert IntegerTimer - Rollback timer for commit confirmed
- disable
Console Boolean - For SSR and SRX, disable console port
- disable
Oob Boolean - For SSR and SRX, disable management interface
- disable
Usb Boolean - For SSR and SRX, disable usb interface
- fips
Enabled Boolean - Whether FIPS mode is enabled on the gateway
- probe
Hosts List<String> - IPv4 probe targets used for gateway connectivity checks
- probe
Hostsv6s List<String> - IPv6 probe targets used for gateway connectivity checks
- protect
Re GatewaytemplateGateway Mgmt Protect Re - Control-plane protection settings for the gateway
- root
Password String - SRX only. Root password for local gateway access
- security
Log StringSource Address - IPv4 source address used for gateway security log traffic
- security
Log StringSource Interface - Source interface used for gateway security log traffic
- admin
Sshkeys string[] - SSR-only SSH public keys for administrative access
- app
Probing GatewaytemplateGateway Mgmt App Probing - Application probing configuration for gateway monitoring
- app
Usage boolean - Consumes uplink bandwidth, requires WA license
- auto
Signature GatewaytemplateUpdate Gateway Mgmt Auto Signature Update - Schedule for automatic security signature updates
- config
Revert numberTimer - Rollback timer for commit confirmed
- disable
Console boolean - For SSR and SRX, disable console port
- disable
Oob boolean - For SSR and SRX, disable management interface
- disable
Usb boolean - For SSR and SRX, disable usb interface
- fips
Enabled boolean - Whether FIPS mode is enabled on the gateway
- probe
Hosts string[] - IPv4 probe targets used for gateway connectivity checks
- probe
Hostsv6s string[] - IPv6 probe targets used for gateway connectivity checks
- protect
Re GatewaytemplateGateway Mgmt Protect Re - Control-plane protection settings for the gateway
- root
Password string - SRX only. Root password for local gateway access
- security
Log stringSource Address - IPv4 source address used for gateway security log traffic
- security
Log stringSource Interface - Source interface used for gateway security log traffic
- admin_
sshkeys Sequence[str] - SSR-only SSH public keys for administrative access
- app_
probing GatewaytemplateGateway Mgmt App Probing - Application probing configuration for gateway monitoring
- app_
usage bool - Consumes uplink bandwidth, requires WA license
- auto_
signature_ Gatewaytemplateupdate Gateway Mgmt Auto Signature Update - Schedule for automatic security signature updates
- config_
revert_ inttimer - Rollback timer for commit confirmed
- disable_
console bool - For SSR and SRX, disable console port
- disable_
oob bool - For SSR and SRX, disable management interface
- disable_
usb bool - For SSR and SRX, disable usb interface
- fips_
enabled bool - Whether FIPS mode is enabled on the gateway
- probe_
hosts Sequence[str] - IPv4 probe targets used for gateway connectivity checks
- probe_
hostsv6s Sequence[str] - IPv6 probe targets used for gateway connectivity checks
- protect_
re GatewaytemplateGateway Mgmt Protect Re - Control-plane protection settings for the gateway
- root_
password str - SRX only. Root password for local gateway access
- security_
log_ strsource_ address - IPv4 source address used for gateway security log traffic
- security_
log_ strsource_ interface - Source interface used for gateway security log traffic
- admin
Sshkeys List<String> - SSR-only SSH public keys for administrative access
- app
Probing Property Map - Application probing configuration for gateway monitoring
- app
Usage Boolean - Consumes uplink bandwidth, requires WA license
- auto
Signature Property MapUpdate - Schedule for automatic security signature updates
- config
Revert NumberTimer - Rollback timer for commit confirmed
- disable
Console Boolean - For SSR and SRX, disable console port
- disable
Oob Boolean - For SSR and SRX, disable management interface
- disable
Usb Boolean - For SSR and SRX, disable usb interface
- fips
Enabled Boolean - Whether FIPS mode is enabled on the gateway
- probe
Hosts List<String> - IPv4 probe targets used for gateway connectivity checks
- probe
Hostsv6s List<String> - IPv6 probe targets used for gateway connectivity checks
- protect
Re Property Map - Control-plane protection settings for the gateway
- root
Password String - SRX only. Root password for local gateway access
- security
Log StringSource Address - IPv4 source address used for gateway security log traffic
- security
Log StringSource Interface - Source interface used for gateway security log traffic
GatewaytemplateGatewayMgmtAppProbing, GatewaytemplateGatewayMgmtAppProbingArgs
- Apps List<string>
- Predefined application keys to probe
- Custom
Apps List<Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Gateway Mgmt App Probing Custom App> - User-defined application probe definitions
- Enabled bool
- Whether gateway application probing is enabled
- Apps []string
- Predefined application keys to probe
- Custom
Apps []GatewaytemplateGateway Mgmt App Probing Custom App - User-defined application probe definitions
- Enabled bool
- Whether gateway application probing is enabled
- apps list(string)
- Predefined application keys to probe
- custom_
apps list(object) - User-defined application probe definitions
- enabled bool
- Whether gateway application probing is enabled
- apps List<String>
- Predefined application keys to probe
- custom
Apps List<GatewaytemplateGateway Mgmt App Probing Custom App> - User-defined application probe definitions
- enabled Boolean
- Whether gateway application probing is enabled
- apps string[]
- Predefined application keys to probe
- custom
Apps GatewaytemplateGateway Mgmt App Probing Custom App[] - User-defined application probe definitions
- enabled boolean
- Whether gateway application probing is enabled
- apps Sequence[str]
- Predefined application keys to probe
- custom_
apps Sequence[GatewaytemplateGateway Mgmt App Probing Custom App] - User-defined application probe definitions
- enabled bool
- Whether gateway application probing is enabled
- apps List<String>
- Predefined application keys to probe
- custom
Apps List<Property Map> - User-defined application probe definitions
- enabled Boolean
- Whether gateway application probing is enabled
GatewaytemplateGatewayMgmtAppProbingCustomApp, GatewaytemplateGatewayMgmtAppProbingCustomAppArgs
- Address string
- Required if
protocol==icmp. IP address probed by the ICMP custom app - App
Type string - Category label used for this custom application probe
- Hostnames List<string>
- If
protocol==http. Hostnames or URLs probed by this custom app - Key string
- Stable key used to identify this custom application probe
- Name string
- Display name for this custom application probe
- Network string
- Gateway network used as the source context for this probe
- Packet
Size int - If
protocol==icmp. ICMP packet size used by this custom app probe - Protocol string
- Probe protocol used by this custom application definition
- Url string
- If
protocol==http. HTTP URL or hostname probed by this custom app - Vrf string
- Gateway VRF used as the source context for this probe
- Address string
- Required if
protocol==icmp. IP address probed by the ICMP custom app - App
Type string - Category label used for this custom application probe
- Hostnames []string
- If
protocol==http. Hostnames or URLs probed by this custom app - Key string
- Stable key used to identify this custom application probe
- Name string
- Display name for this custom application probe
- Network string
- Gateway network used as the source context for this probe
- Packet
Size int - If
protocol==icmp. ICMP packet size used by this custom app probe - Protocol string
- Probe protocol used by this custom application definition
- Url string
- If
protocol==http. HTTP URL or hostname probed by this custom app - Vrf string
- Gateway VRF used as the source context for this probe
- address string
- Required if
protocol==icmp. IP address probed by the ICMP custom app - app_
type string - Category label used for this custom application probe
- hostnames list(string)
- If
protocol==http. Hostnames or URLs probed by this custom app - key string
- Stable key used to identify this custom application probe
- name string
- Display name for this custom application probe
- network string
- Gateway network used as the source context for this probe
- packet_
size number - If
protocol==icmp. ICMP packet size used by this custom app probe - protocol string
- Probe protocol used by this custom application definition
- url string
- If
protocol==http. HTTP URL or hostname probed by this custom app - vrf string
- Gateway VRF used as the source context for this probe
- address String
- Required if
protocol==icmp. IP address probed by the ICMP custom app - app
Type String - Category label used for this custom application probe
- hostnames List<String>
- If
protocol==http. Hostnames or URLs probed by this custom app - key String
- Stable key used to identify this custom application probe
- name String
- Display name for this custom application probe
- network String
- Gateway network used as the source context for this probe
- packet
Size Integer - If
protocol==icmp. ICMP packet size used by this custom app probe - protocol String
- Probe protocol used by this custom application definition
- url String
- If
protocol==http. HTTP URL or hostname probed by this custom app - vrf String
- Gateway VRF used as the source context for this probe
- address string
- Required if
protocol==icmp. IP address probed by the ICMP custom app - app
Type string - Category label used for this custom application probe
- hostnames string[]
- If
protocol==http. Hostnames or URLs probed by this custom app - key string
- Stable key used to identify this custom application probe
- name string
- Display name for this custom application probe
- network string
- Gateway network used as the source context for this probe
- packet
Size number - If
protocol==icmp. ICMP packet size used by this custom app probe - protocol string
- Probe protocol used by this custom application definition
- url string
- If
protocol==http. HTTP URL or hostname probed by this custom app - vrf string
- Gateway VRF used as the source context for this probe
- address str
- Required if
protocol==icmp. IP address probed by the ICMP custom app - app_
type str - Category label used for this custom application probe
- hostnames Sequence[str]
- If
protocol==http. Hostnames or URLs probed by this custom app - key str
- Stable key used to identify this custom application probe
- name str
- Display name for this custom application probe
- network str
- Gateway network used as the source context for this probe
- packet_
size int - If
protocol==icmp. ICMP packet size used by this custom app probe - protocol str
- Probe protocol used by this custom application definition
- url str
- If
protocol==http. HTTP URL or hostname probed by this custom app - vrf str
- Gateway VRF used as the source context for this probe
- address String
- Required if
protocol==icmp. IP address probed by the ICMP custom app - app
Type String - Category label used for this custom application probe
- hostnames List<String>
- If
protocol==http. Hostnames or URLs probed by this custom app - key String
- Stable key used to identify this custom application probe
- name String
- Display name for this custom application probe
- network String
- Gateway network used as the source context for this probe
- packet
Size Number - If
protocol==icmp. ICMP packet size used by this custom app probe - protocol String
- Probe protocol used by this custom application definition
- url String
- If
protocol==http. HTTP URL or hostname probed by this custom app - vrf String
- Gateway VRF used as the source context for this probe
GatewaytemplateGatewayMgmtAutoSignatureUpdate, GatewaytemplateGatewayMgmtAutoSignatureUpdateArgs
- day_
of_ stringweek - Scheduled weekday for automatic signature updates
- enable bool
- Whether automatic security signature updates are enabled
- time_
of_ stringday - Optional, Mist will decide the timing
- day_
of_ strweek - Scheduled weekday for automatic signature updates
- enable bool
- Whether automatic security signature updates are enabled
- time_
of_ strday - Optional, Mist will decide the timing
GatewaytemplateGatewayMgmtProtectRe, GatewaytemplateGatewayMgmtProtectReArgs
- Allowed
Services List<string> - Built-in services explicitly allowed by the Protect RE policy
- Customs
List<Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Gateway Mgmt Protect Re Custom> - Additional ACL entries allowed by the Protect RE policy
- Enabled bool
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- Hit
Count bool - Whether to enable hit count for Protect_RE policy
- Trusted
Hosts List<string> - Trusted host or subnet entries allowed by the Protect RE policy
- Allowed
Services []string - Built-in services explicitly allowed by the Protect RE policy
- Customs
[]Gatewaytemplate
Gateway Mgmt Protect Re Custom - Additional ACL entries allowed by the Protect RE policy
- Enabled bool
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- Hit
Count bool - Whether to enable hit count for Protect_RE policy
- Trusted
Hosts []string - Trusted host or subnet entries allowed by the Protect RE policy
- allowed_
services list(string) - Built-in services explicitly allowed by the Protect RE policy
- customs list(object)
- Additional ACL entries allowed by the Protect RE policy
- enabled bool
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- hit_
count bool - Whether to enable hit count for Protect_RE policy
- trusted_
hosts list(string) - Trusted host or subnet entries allowed by the Protect RE policy
- allowed
Services List<String> - Built-in services explicitly allowed by the Protect RE policy
- customs
List<Gatewaytemplate
Gateway Mgmt Protect Re Custom> - Additional ACL entries allowed by the Protect RE policy
- enabled Boolean
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- hit
Count Boolean - Whether to enable hit count for Protect_RE policy
- trusted
Hosts List<String> - Trusted host or subnet entries allowed by the Protect RE policy
- allowed
Services string[] - Built-in services explicitly allowed by the Protect RE policy
- customs
Gatewaytemplate
Gateway Mgmt Protect Re Custom[] - Additional ACL entries allowed by the Protect RE policy
- enabled boolean
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- hit
Count boolean - Whether to enable hit count for Protect_RE policy
- trusted
Hosts string[] - Trusted host or subnet entries allowed by the Protect RE policy
- allowed_
services Sequence[str] - Built-in services explicitly allowed by the Protect RE policy
- customs
Sequence[Gatewaytemplate
Gateway Mgmt Protect Re Custom] - Additional ACL entries allowed by the Protect RE policy
- enabled bool
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- hit_
count bool - Whether to enable hit count for Protect_RE policy
- trusted_
hosts Sequence[str] - Trusted host or subnet entries allowed by the Protect RE policy
- allowed
Services List<String> - Built-in services explicitly allowed by the Protect RE policy
- customs List<Property Map>
- Additional ACL entries allowed by the Protect RE policy
- enabled Boolean
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- hit
Count Boolean - Whether to enable hit count for Protect_RE policy
- trusted
Hosts List<String> - Trusted host or subnet entries allowed by the Protect RE policy
GatewaytemplateGatewayMgmtProtectReCustom, GatewaytemplateGatewayMgmtProtectReCustomArgs
- port_
range string - Matched dst port, "0" means any
- protocol string
- Transport protocol matched by this custom Protect RE ACL
- subnets list(string)
- Source subnets matched by this custom Protect RE ACL
- port_
range str - Matched dst port, "0" means any
- protocol str
- Transport protocol matched by this custom Protect RE ACL
- subnets Sequence[str]
- Source subnets matched by this custom Protect RE ACL
GatewaytemplateIdpProfiles, GatewaytemplateIdpProfilesArgs
- Base
Profile string - Built-in IDP baseline profile inherited before applying overwrites
- Name string
- Display name of the IDP profile
- Org
Id string - Owning organization for the IDP profile
- Overwrites
List<Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Idp Profiles Overwrite> - IDP signature override rules applied on top of the base profile
- Base
Profile string - Built-in IDP baseline profile inherited before applying overwrites
- Name string
- Display name of the IDP profile
- Org
Id string - Owning organization for the IDP profile
- Overwrites
[]Gatewaytemplate
Idp Profiles Overwrite - IDP signature override rules applied on top of the base profile
- base_
profile string - Built-in IDP baseline profile inherited before applying overwrites
- name string
- Display name of the IDP profile
- org_
id string - Owning organization for the IDP profile
- overwrites list(object)
- IDP signature override rules applied on top of the base profile
- base
Profile String - Built-in IDP baseline profile inherited before applying overwrites
- name String
- Display name of the IDP profile
- org
Id String - Owning organization for the IDP profile
- overwrites
List<Gatewaytemplate
Idp Profiles Overwrite> - IDP signature override rules applied on top of the base profile
- base
Profile string - Built-in IDP baseline profile inherited before applying overwrites
- name string
- Display name of the IDP profile
- org
Id string - Owning organization for the IDP profile
- overwrites
Gatewaytemplate
Idp Profiles Overwrite[] - IDP signature override rules applied on top of the base profile
- base_
profile str - Built-in IDP baseline profile inherited before applying overwrites
- name str
- Display name of the IDP profile
- org_
id str - Owning organization for the IDP profile
- overwrites
Sequence[Gatewaytemplate
Idp Profiles Overwrite] - IDP signature override rules applied on top of the base profile
- base
Profile String - Built-in IDP baseline profile inherited before applying overwrites
- name String
- Display name of the IDP profile
- org
Id String - Owning organization for the IDP profile
- overwrites List<Property Map>
- IDP signature override rules applied on top of the base profile
GatewaytemplateIdpProfilesOverwrite, GatewaytemplateIdpProfilesOverwriteArgs
- Action string
- Enforcement action applied when this overwrite rule matches
- Matching
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Idp Profiles Overwrite Matching - Criteria that select signatures for this overwrite rule
- Name string
- Display name for this IDP profile overwrite rule
- Action string
- Enforcement action applied when this overwrite rule matches
- Matching
Gatewaytemplate
Idp Profiles Overwrite Matching - Criteria that select signatures for this overwrite rule
- Name string
- Display name for this IDP profile overwrite rule
- action String
- Enforcement action applied when this overwrite rule matches
- matching
Gatewaytemplate
Idp Profiles Overwrite Matching - Criteria that select signatures for this overwrite rule
- name String
- Display name for this IDP profile overwrite rule
- action string
- Enforcement action applied when this overwrite rule matches
- matching
Gatewaytemplate
Idp Profiles Overwrite Matching - Criteria that select signatures for this overwrite rule
- name string
- Display name for this IDP profile overwrite rule
- action str
- Enforcement action applied when this overwrite rule matches
- matching
Gatewaytemplate
Idp Profiles Overwrite Matching - Criteria that select signatures for this overwrite rule
- name str
- Display name for this IDP profile overwrite rule
- action String
- Enforcement action applied when this overwrite rule matches
- matching Property Map
- Criteria that select signatures for this overwrite rule
- name String
- Display name for this IDP profile overwrite rule
GatewaytemplateIdpProfilesOverwriteMatching, GatewaytemplateIdpProfilesOverwriteMatchingArgs
- Attack
Names List<string> - Signature names matched by the IDP profile overwrite
- Dst
Subnets List<string> - Destination subnets matched by the IDP profile overwrite
- Severities List<string>
- Threat levels matched by the IDP profile overwrite
- Attack
Names []string - Signature names matched by the IDP profile overwrite
- Dst
Subnets []string - Destination subnets matched by the IDP profile overwrite
- Severities []string
- Threat levels matched by the IDP profile overwrite
- attack_
names list(string) - Signature names matched by the IDP profile overwrite
- dst_
subnets list(string) - Destination subnets matched by the IDP profile overwrite
- severities list(string)
- Threat levels matched by the IDP profile overwrite
- attack
Names List<String> - Signature names matched by the IDP profile overwrite
- dst
Subnets List<String> - Destination subnets matched by the IDP profile overwrite
- severities List<String>
- Threat levels matched by the IDP profile overwrite
- attack
Names string[] - Signature names matched by the IDP profile overwrite
- dst
Subnets string[] - Destination subnets matched by the IDP profile overwrite
- severities string[]
- Threat levels matched by the IDP profile overwrite
- attack_
names Sequence[str] - Signature names matched by the IDP profile overwrite
- dst_
subnets Sequence[str] - Destination subnets matched by the IDP profile overwrite
- severities Sequence[str]
- Threat levels matched by the IDP profile overwrite
- attack
Names List<String> - Signature names matched by the IDP profile overwrite
- dst
Subnets List<String> - Destination subnets matched by the IDP profile overwrite
- severities List<String>
- Threat levels matched by the IDP profile overwrite
GatewaytemplateIpConfigs, GatewaytemplateIpConfigsArgs
- Ip string
- Static IPv4 address for the gateway network interface when
type==static - Ip6 string
- Static IPv6 address for the gateway network interface when
type6==static - Netmask string
- IPv4 netmask or prefix length for the gateway network interface when
type==static - Netmask6 string
- IPv6 netmask or prefix length for the gateway network interface when
type6==static - Secondary
Ips List<string> - Additional IPv4 addresses in CIDR notation for this gateway network interface
- Type string
- IPv4 address assignment mode for this gateway network interface
- Type6 string
- IPv6 address assignment mode for this gateway network interface
- Ip string
- Static IPv4 address for the gateway network interface when
type==static - Ip6 string
- Static IPv6 address for the gateway network interface when
type6==static - Netmask string
- IPv4 netmask or prefix length for the gateway network interface when
type==static - Netmask6 string
- IPv6 netmask or prefix length for the gateway network interface when
type6==static - Secondary
Ips []string - Additional IPv4 addresses in CIDR notation for this gateway network interface
- Type string
- IPv4 address assignment mode for this gateway network interface
- Type6 string
- IPv6 address assignment mode for this gateway network interface
- ip string
- Static IPv4 address for the gateway network interface when
type==static - ip6 string
- Static IPv6 address for the gateway network interface when
type6==static - netmask string
- IPv4 netmask or prefix length for the gateway network interface when
type==static - netmask6 string
- IPv6 netmask or prefix length for the gateway network interface when
type6==static - secondary_
ips list(string) - Additional IPv4 addresses in CIDR notation for this gateway network interface
- type string
- IPv4 address assignment mode for this gateway network interface
- type6 string
- IPv6 address assignment mode for this gateway network interface
- ip String
- Static IPv4 address for the gateway network interface when
type==static - ip6 String
- Static IPv6 address for the gateway network interface when
type6==static - netmask String
- IPv4 netmask or prefix length for the gateway network interface when
type==static - netmask6 String
- IPv6 netmask or prefix length for the gateway network interface when
type6==static - secondary
Ips List<String> - Additional IPv4 addresses in CIDR notation for this gateway network interface
- type String
- IPv4 address assignment mode for this gateway network interface
- type6 String
- IPv6 address assignment mode for this gateway network interface
- ip string
- Static IPv4 address for the gateway network interface when
type==static - ip6 string
- Static IPv6 address for the gateway network interface when
type6==static - netmask string
- IPv4 netmask or prefix length for the gateway network interface when
type==static - netmask6 string
- IPv6 netmask or prefix length for the gateway network interface when
type6==static - secondary
Ips string[] - Additional IPv4 addresses in CIDR notation for this gateway network interface
- type string
- IPv4 address assignment mode for this gateway network interface
- type6 string
- IPv6 address assignment mode for this gateway network interface
- ip str
- Static IPv4 address for the gateway network interface when
type==static - ip6 str
- Static IPv6 address for the gateway network interface when
type6==static - netmask str
- IPv4 netmask or prefix length for the gateway network interface when
type==static - netmask6 str
- IPv6 netmask or prefix length for the gateway network interface when
type6==static - secondary_
ips Sequence[str] - Additional IPv4 addresses in CIDR notation for this gateway network interface
- type str
- IPv4 address assignment mode for this gateway network interface
- type6 str
- IPv6 address assignment mode for this gateway network interface
- ip String
- Static IPv4 address for the gateway network interface when
type==static - ip6 String
- Static IPv6 address for the gateway network interface when
type6==static - netmask String
- IPv4 netmask or prefix length for the gateway network interface when
type==static - netmask6 String
- IPv6 netmask or prefix length for the gateway network interface when
type6==static - secondary
Ips List<String> - Additional IPv4 addresses in CIDR notation for this gateway network interface
- type String
- IPv4 address assignment mode for this gateway network interface
- type6 String
- IPv6 address assignment mode for this gateway network interface
GatewaytemplateNetwork, GatewaytemplateNetworkArgs
- Name string
- Display name of the organization network
- Subnet string
- IPv4 subnet CIDR for this network
- Disallow
Mist boolServices - Whether to disallow Mist Devices in the network
- Gateway string
- IPv4 gateway address for this network
- Gateway6 string
- IPv6 gateway address for this network
- Internal
Access Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Network Internal Access - Internal access settings for this network
- Internet
Access Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Network Internet Access - Direct internet access and NAT settings for this network
- Isolation bool
- Whether to allow clients in the network to talk to each other
- Multicast
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Network Multicast - Settings for multicast routing on this network
- Routed
For List<string>Networks - Other network names this network can route to, for example through BGP, OSPF or static routes
- Subnet6 string
- IPv6 subnet CIDR for this network
- Tenants
Dictionary<string, Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Network Tenants> - Tenant address mappings associated with this network
- Vlan
Id string - VLAN ID or variable associated with this network
- Vpn
Access Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Network Vpn Access> - VPN access settings keyed by VPN name for this network
- Name string
- Display name of the organization network
- Subnet string
- IPv4 subnet CIDR for this network
- Disallow
Mist boolServices - Whether to disallow Mist Devices in the network
- Gateway string
- IPv4 gateway address for this network
- Gateway6 string
- IPv6 gateway address for this network
- Internal
Access GatewaytemplateNetwork Internal Access - Internal access settings for this network
- Internet
Access GatewaytemplateNetwork Internet Access - Direct internet access and NAT settings for this network
- Isolation bool
- Whether to allow clients in the network to talk to each other
- Multicast
Gatewaytemplate
Network Multicast - Settings for multicast routing on this network
- Routed
For []stringNetworks - Other network names this network can route to, for example through BGP, OSPF or static routes
- Subnet6 string
- IPv6 subnet CIDR for this network
- Tenants
map[string]Gatewaytemplate
Network Tenants - Tenant address mappings associated with this network
- Vlan
Id string - VLAN ID or variable associated with this network
- Vpn
Access map[string]GatewaytemplateNetwork Vpn Access - VPN access settings keyed by VPN name for this network
- name string
- Display name of the organization network
- subnet string
- IPv4 subnet CIDR for this network
- disallow_
mist_ boolservices - Whether to disallow Mist Devices in the network
- gateway string
- IPv4 gateway address for this network
- gateway6 string
- IPv6 gateway address for this network
- internal_
access object - Internal access settings for this network
- internet_
access object - Direct internet access and NAT settings for this network
- isolation bool
- Whether to allow clients in the network to talk to each other
- multicast object
- Settings for multicast routing on this network
- routed_
for_ list(string)networks - Other network names this network can route to, for example through BGP, OSPF or static routes
- subnet6 string
- IPv6 subnet CIDR for this network
- tenants map(object)
- Tenant address mappings associated with this network
- vlan_
id string - VLAN ID or variable associated with this network
- vpn_
access map(object) - VPN access settings keyed by VPN name for this network
- name String
- Display name of the organization network
- subnet String
- IPv4 subnet CIDR for this network
- disallow
Mist BooleanServices - Whether to disallow Mist Devices in the network
- gateway String
- IPv4 gateway address for this network
- gateway6 String
- IPv6 gateway address for this network
- internal
Access GatewaytemplateNetwork Internal Access - Internal access settings for this network
- internet
Access GatewaytemplateNetwork Internet Access - Direct internet access and NAT settings for this network
- isolation Boolean
- Whether to allow clients in the network to talk to each other
- multicast
Gatewaytemplate
Network Multicast - Settings for multicast routing on this network
- routed
For List<String>Networks - Other network names this network can route to, for example through BGP, OSPF or static routes
- subnet6 String
- IPv6 subnet CIDR for this network
- tenants
Map<String,Gatewaytemplate
Network Tenants> - Tenant address mappings associated with this network
- vlan
Id String - VLAN ID or variable associated with this network
- vpn
Access Map<String,GatewaytemplateNetwork Vpn Access> - VPN access settings keyed by VPN name for this network
- name string
- Display name of the organization network
- subnet string
- IPv4 subnet CIDR for this network
- disallow
Mist booleanServices - Whether to disallow Mist Devices in the network
- gateway string
- IPv4 gateway address for this network
- gateway6 string
- IPv6 gateway address for this network
- internal
Access GatewaytemplateNetwork Internal Access - Internal access settings for this network
- internet
Access GatewaytemplateNetwork Internet Access - Direct internet access and NAT settings for this network
- isolation boolean
- Whether to allow clients in the network to talk to each other
- multicast
Gatewaytemplate
Network Multicast - Settings for multicast routing on this network
- routed
For string[]Networks - Other network names this network can route to, for example through BGP, OSPF or static routes
- subnet6 string
- IPv6 subnet CIDR for this network
- tenants
{[key: string]: Gatewaytemplate
Network Tenants} - Tenant address mappings associated with this network
- vlan
Id string - VLAN ID or variable associated with this network
- vpn
Access {[key: string]: GatewaytemplateNetwork Vpn Access} - VPN access settings keyed by VPN name for this network
- name str
- Display name of the organization network
- subnet str
- IPv4 subnet CIDR for this network
- disallow_
mist_ boolservices - Whether to disallow Mist Devices in the network
- gateway str
- IPv4 gateway address for this network
- gateway6 str
- IPv6 gateway address for this network
- internal_
access GatewaytemplateNetwork Internal Access - Internal access settings for this network
- internet_
access GatewaytemplateNetwork Internet Access - Direct internet access and NAT settings for this network
- isolation bool
- Whether to allow clients in the network to talk to each other
- multicast
Gatewaytemplate
Network Multicast - Settings for multicast routing on this network
- routed_
for_ Sequence[str]networks - Other network names this network can route to, for example through BGP, OSPF or static routes
- subnet6 str
- IPv6 subnet CIDR for this network
- tenants
Mapping[str, Gatewaytemplate
Network Tenants] - Tenant address mappings associated with this network
- vlan_
id str - VLAN ID or variable associated with this network
- vpn_
access Mapping[str, GatewaytemplateNetwork Vpn Access] - VPN access settings keyed by VPN name for this network
- name String
- Display name of the organization network
- subnet String
- IPv4 subnet CIDR for this network
- disallow
Mist BooleanServices - Whether to disallow Mist Devices in the network
- gateway String
- IPv4 gateway address for this network
- gateway6 String
- IPv6 gateway address for this network
- internal
Access Property Map - Internal access settings for this network
- internet
Access Property Map - Direct internet access and NAT settings for this network
- isolation Boolean
- Whether to allow clients in the network to talk to each other
- multicast Property Map
- Settings for multicast routing on this network
- routed
For List<String>Networks - Other network names this network can route to, for example through BGP, OSPF or static routes
- subnet6 String
- IPv6 subnet CIDR for this network
- tenants Map<Property Map>
- Tenant address mappings associated with this network
- vlan
Id String - VLAN ID or variable associated with this network
- vpn
Access Map<Property Map> - VPN access settings keyed by VPN name for this network
GatewaytemplateNetworkInternalAccess, GatewaytemplateNetworkInternalAccessArgs
- Enabled bool
- Whether internal access is enabled for this network
- Enabled bool
- Whether internal access is enabled for this network
- enabled bool
- Whether internal access is enabled for this network
- enabled Boolean
- Whether internal access is enabled for this network
- enabled boolean
- Whether internal access is enabled for this network
- enabled bool
- Whether internal access is enabled for this network
- enabled Boolean
- Whether internal access is enabled for this network
GatewaytemplateNetworkInternetAccess, GatewaytemplateNetworkInternetAccessArgs
- Create
Simple boolService Policy - Whether Mist should create simple service policies for restricted internet access
- Destination
Nat Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Network Internet Access Destination Nat> - Destination NAT rules for direct internet access
- Enabled bool
- Whether direct internet access is enabled for this network
- Restricted bool
- By default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - Static
Nat Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Network Internet Access Static Nat> - Static NAT rules for direct internet access
- Create
Simple boolService Policy - Whether Mist should create simple service policies for restricted internet access
- Destination
Nat map[string]GatewaytemplateNetwork Internet Access Destination Nat - Destination NAT rules for direct internet access
- Enabled bool
- Whether direct internet access is enabled for this network
- Restricted bool
- By default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - Static
Nat map[string]GatewaytemplateNetwork Internet Access Static Nat - Static NAT rules for direct internet access
- create_
simple_ boolservice_ policy - Whether Mist should create simple service policies for restricted internet access
- destination_
nat map(object) - Destination NAT rules for direct internet access
- enabled bool
- Whether direct internet access is enabled for this network
- restricted bool
- By default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - static_
nat map(object) - Static NAT rules for direct internet access
- create
Simple BooleanService Policy - Whether Mist should create simple service policies for restricted internet access
- destination
Nat Map<String,GatewaytemplateNetwork Internet Access Destination Nat> - Destination NAT rules for direct internet access
- enabled Boolean
- Whether direct internet access is enabled for this network
- restricted Boolean
- By default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - static
Nat Map<String,GatewaytemplateNetwork Internet Access Static Nat> - Static NAT rules for direct internet access
- create
Simple booleanService Policy - Whether Mist should create simple service policies for restricted internet access
- destination
Nat {[key: string]: GatewaytemplateNetwork Internet Access Destination Nat} - Destination NAT rules for direct internet access
- enabled boolean
- Whether direct internet access is enabled for this network
- restricted boolean
- By default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - static
Nat {[key: string]: GatewaytemplateNetwork Internet Access Static Nat} - Static NAT rules for direct internet access
- create_
simple_ boolservice_ policy - Whether Mist should create simple service policies for restricted internet access
- destination_
nat Mapping[str, GatewaytemplateNetwork Internet Access Destination Nat] - Destination NAT rules for direct internet access
- enabled bool
- Whether direct internet access is enabled for this network
- restricted bool
- By default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - static_
nat Mapping[str, GatewaytemplateNetwork Internet Access Static Nat] - Static NAT rules for direct internet access
- create
Simple BooleanService Policy - Whether Mist should create simple service policies for restricted internet access
- destination
Nat Map<Property Map> - Destination NAT rules for direct internet access
- enabled Boolean
- Whether direct internet access is enabled for this network
- restricted Boolean
- By default, all access is allowed, to only allow certain traffic, make
restricted=trueand define service_policies - static
Nat Map<Property Map> - Static NAT rules for direct internet access
GatewaytemplateNetworkInternetAccessDestinationNat, GatewaytemplateNetworkInternetAccessDestinationNatArgs
- Internal
Ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this direct internet destination NAT rule
- Port string
- The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
- Wan
Name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
- Internal
Ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this direct internet destination NAT rule
- Port string
- The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
- Wan
Name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
- internal_
ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this direct internet destination NAT rule
- port string
- The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
- wan_
name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
- internal
Ip String - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this direct internet destination NAT rule
- port String
- The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
- wan
Name String - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
- internal
Ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this direct internet destination NAT rule
- port string
- The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
- wan
Name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
- internal_
ip str - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name str
- Label for this direct internet destination NAT rule
- port str
- The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
- wan_
name str - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
- internal
Ip String - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this direct internet destination NAT rule
- port String
- The Destination NAT destination IP address. Must be a Port (i.e. "443") or a Variable (i.e. "{{myvar}}")
- wan
Name String - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity
GatewaytemplateNetworkInternetAccessStaticNat, GatewaytemplateNetworkInternetAccessStaticNatArgs
- Internal
Ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this direct internet static NAT rule
- Wan
Name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
- Internal
Ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this direct internet static NAT rule
- Wan
Name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
- internal_
ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this direct internet static NAT rule
- wan_
name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
- internal
Ip String - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this direct internet static NAT rule
- wan
Name String - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
- internal
Ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this direct internet static NAT rule
- wan
Name string - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
- internal_
ip str - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name str
- Label for this direct internet static NAT rule
- wan_
name str - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
- internal
Ip String - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this direct internet static NAT rule
- wan
Name String - SRX Only. If not set, we configure the nat policies against all WAN ports for simplicity. Can be a Variable (i.e. "{{myvar}}")
GatewaytemplateNetworkMulticast, GatewaytemplateNetworkMulticastArgs
- Disable
Igmp bool - If the network will only be the source of the multicast traffic, IGMP can be disabled
- Enabled bool
- Whether multicast support is enabled for this network
- Groups
Dictionary<string, Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Network Multicast Groups> - Multicast group-to-RP mappings for this network
- Disable
Igmp bool - If the network will only be the source of the multicast traffic, IGMP can be disabled
- Enabled bool
- Whether multicast support is enabled for this network
- Groups
map[string]Gatewaytemplate
Network Multicast Groups - Multicast group-to-RP mappings for this network
- disable_
igmp bool - If the network will only be the source of the multicast traffic, IGMP can be disabled
- enabled bool
- Whether multicast support is enabled for this network
- groups map(object)
- Multicast group-to-RP mappings for this network
- disable
Igmp Boolean - If the network will only be the source of the multicast traffic, IGMP can be disabled
- enabled Boolean
- Whether multicast support is enabled for this network
- groups
Map<String,Gatewaytemplate
Network Multicast Groups> - Multicast group-to-RP mappings for this network
- disable
Igmp boolean - If the network will only be the source of the multicast traffic, IGMP can be disabled
- enabled boolean
- Whether multicast support is enabled for this network
- groups
{[key: string]: Gatewaytemplate
Network Multicast Groups} - Multicast group-to-RP mappings for this network
- disable_
igmp bool - If the network will only be the source of the multicast traffic, IGMP can be disabled
- enabled bool
- Whether multicast support is enabled for this network
- groups
Mapping[str, Gatewaytemplate
Network Multicast Groups] - Multicast group-to-RP mappings for this network
- disable
Igmp Boolean - If the network will only be the source of the multicast traffic, IGMP can be disabled
- enabled Boolean
- Whether multicast support is enabled for this network
- groups Map<Property Map>
- Multicast group-to-RP mappings for this network
GatewaytemplateNetworkMulticastGroups, GatewaytemplateNetworkMulticastGroupsArgs
- Rp
Ip string - RP (rendezvous point) IP address
- Rp
Ip string - RP (rendezvous point) IP address
- rp_
ip string - RP (rendezvous point) IP address
- rp
Ip String - RP (rendezvous point) IP address
- rp
Ip string - RP (rendezvous point) IP address
- rp_
ip str - RP (rendezvous point) IP address
- rp
Ip String - RP (rendezvous point) IP address
GatewaytemplateNetworkTenants, GatewaytemplateNetworkTenantsArgs
- Addresses List<string>
- IP addresses or subnets assigned to this tenant in the network
- Addresses []string
- IP addresses or subnets assigned to this tenant in the network
- addresses list(string)
- IP addresses or subnets assigned to this tenant in the network
- addresses List<String>
- IP addresses or subnets assigned to this tenant in the network
- addresses string[]
- IP addresses or subnets assigned to this tenant in the network
- addresses Sequence[str]
- IP addresses or subnets assigned to this tenant in the network
- addresses List<String>
- IP addresses or subnets assigned to this tenant in the network
GatewaytemplateNetworkVpnAccess, GatewaytemplateNetworkVpnAccessArgs
- Advertised
Subnet string - If
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - Allow
Ping bool - Whether to allow ping from vpn into this routed network
- Destination
Nat Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Network Vpn Access Destination Nat> - Destination NAT rules applied for VPN access to this network
- Nat
Pool string - If
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - No
Readvertise boolTo Lan Bgp - toward LAN-side BGP peers
- No
Readvertise boolTo Lan Ospf - toward LAN-side OSPF peers
- No
Readvertise boolTo Overlay - toward overlay, how HUB should deal with routes it received from Spokes
- Other
Vrfs List<string> - Other VRFs that can receive leaked routes from this spoke network
- Routed bool
- Whether this network is routable
- Source
Nat Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Network Vpn Access Source Nat - Source NAT settings used when non-routed spoke hosts must be reachable from the hub
- Static
Nat Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Network Vpn Access Static Nat> - Static NAT rules applied for VPN access to this network
- Summarized
Subnet string - toward overlay, how HUB should deal with routes it received from Spokes
- Summarized
Subnet stringTo Lan Bgp - toward LAN-side BGP peers
- Summarized
Subnet stringTo Lan Ospf - toward LAN-side OSPF peers
- Advertised
Subnet string - If
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - Allow
Ping bool - Whether to allow ping from vpn into this routed network
- Destination
Nat map[string]GatewaytemplateNetwork Vpn Access Destination Nat - Destination NAT rules applied for VPN access to this network
- Nat
Pool string - If
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - No
Readvertise boolTo Lan Bgp - toward LAN-side BGP peers
- No
Readvertise boolTo Lan Ospf - toward LAN-side OSPF peers
- No
Readvertise boolTo Overlay - toward overlay, how HUB should deal with routes it received from Spokes
- Other
Vrfs []string - Other VRFs that can receive leaked routes from this spoke network
- Routed bool
- Whether this network is routable
- Source
Nat GatewaytemplateNetwork Vpn Access Source Nat - Source NAT settings used when non-routed spoke hosts must be reachable from the hub
- Static
Nat map[string]GatewaytemplateNetwork Vpn Access Static Nat - Static NAT rules applied for VPN access to this network
- Summarized
Subnet string - toward overlay, how HUB should deal with routes it received from Spokes
- Summarized
Subnet stringTo Lan Bgp - toward LAN-side BGP peers
- Summarized
Subnet stringTo Lan Ospf - toward LAN-side OSPF peers
- advertised_
subnet string - If
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - allow_
ping bool - Whether to allow ping from vpn into this routed network
- destination_
nat map(object) - Destination NAT rules applied for VPN access to this network
- nat_
pool string - If
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - no_
readvertise_ boolto_ lan_ bgp - toward LAN-side BGP peers
- no_
readvertise_ boolto_ lan_ ospf - toward LAN-side OSPF peers
- no_
readvertise_ boolto_ overlay - toward overlay, how HUB should deal with routes it received from Spokes
- other_
vrfs list(string) - Other VRFs that can receive leaked routes from this spoke network
- routed bool
- Whether this network is routable
- source_
nat object - Source NAT settings used when non-routed spoke hosts must be reachable from the hub
- static_
nat map(object) - Static NAT rules applied for VPN access to this network
- summarized_
subnet string - toward overlay, how HUB should deal with routes it received from Spokes
- summarized_
subnet_ stringto_ lan_ bgp - toward LAN-side BGP peers
- summarized_
subnet_ stringto_ lan_ ospf - toward LAN-side OSPF peers
- advertised
Subnet String - If
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - allow
Ping Boolean - Whether to allow ping from vpn into this routed network
- destination
Nat Map<String,GatewaytemplateNetwork Vpn Access Destination Nat> - Destination NAT rules applied for VPN access to this network
- nat
Pool String - If
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - no
Readvertise BooleanTo Lan Bgp - toward LAN-side BGP peers
- no
Readvertise BooleanTo Lan Ospf - toward LAN-side OSPF peers
- no
Readvertise BooleanTo Overlay - toward overlay, how HUB should deal with routes it received from Spokes
- other
Vrfs List<String> - Other VRFs that can receive leaked routes from this spoke network
- routed Boolean
- Whether this network is routable
- source
Nat GatewaytemplateNetwork Vpn Access Source Nat - Source NAT settings used when non-routed spoke hosts must be reachable from the hub
- static
Nat Map<String,GatewaytemplateNetwork Vpn Access Static Nat> - Static NAT rules applied for VPN access to this network
- summarized
Subnet String - toward overlay, how HUB should deal with routes it received from Spokes
- summarized
Subnet StringTo Lan Bgp - toward LAN-side BGP peers
- summarized
Subnet StringTo Lan Ospf - toward LAN-side OSPF peers
- advertised
Subnet string - If
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - allow
Ping boolean - Whether to allow ping from vpn into this routed network
- destination
Nat {[key: string]: GatewaytemplateNetwork Vpn Access Destination Nat} - Destination NAT rules applied for VPN access to this network
- nat
Pool string - If
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - no
Readvertise booleanTo Lan Bgp - toward LAN-side BGP peers
- no
Readvertise booleanTo Lan Ospf - toward LAN-side OSPF peers
- no
Readvertise booleanTo Overlay - toward overlay, how HUB should deal with routes it received from Spokes
- other
Vrfs string[] - Other VRFs that can receive leaked routes from this spoke network
- routed boolean
- Whether this network is routable
- source
Nat GatewaytemplateNetwork Vpn Access Source Nat - Source NAT settings used when non-routed spoke hosts must be reachable from the hub
- static
Nat {[key: string]: GatewaytemplateNetwork Vpn Access Static Nat} - Static NAT rules applied for VPN access to this network
- summarized
Subnet string - toward overlay, how HUB should deal with routes it received from Spokes
- summarized
Subnet stringTo Lan Bgp - toward LAN-side BGP peers
- summarized
Subnet stringTo Lan Ospf - toward LAN-side OSPF peers
- advertised_
subnet str - If
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - allow_
ping bool - Whether to allow ping from vpn into this routed network
- destination_
nat Mapping[str, GatewaytemplateNetwork Vpn Access Destination Nat] - Destination NAT rules applied for VPN access to this network
- nat_
pool str - If
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - no_
readvertise_ boolto_ lan_ bgp - toward LAN-side BGP peers
- no_
readvertise_ boolto_ lan_ ospf - toward LAN-side OSPF peers
- no_
readvertise_ boolto_ overlay - toward overlay, how HUB should deal with routes it received from Spokes
- other_
vrfs Sequence[str] - Other VRFs that can receive leaked routes from this spoke network
- routed bool
- Whether this network is routable
- source_
nat GatewaytemplateNetwork Vpn Access Source Nat - Source NAT settings used when non-routed spoke hosts must be reachable from the hub
- static_
nat Mapping[str, GatewaytemplateNetwork Vpn Access Static Nat] - Static NAT rules applied for VPN access to this network
- summarized_
subnet str - toward overlay, how HUB should deal with routes it received from Spokes
- summarized_
subnet_ strto_ lan_ bgp - toward LAN-side BGP peers
- summarized_
subnet_ strto_ lan_ ospf - toward LAN-side OSPF peers
- advertised
Subnet String - If
routed==true, whether to advertise an aggregated subnet toward HUB this is useful when there are multiple networks on SPOKE's side - allow
Ping Boolean - Whether to allow ping from vpn into this routed network
- destination
Nat Map<Property Map> - Destination NAT rules applied for VPN access to this network
- nat
Pool String - If
routed==false(usually at Spoke), but some hosts needs to be reachable from Hub, a subnet is required to create and advertise the route to Hub - no
Readvertise BooleanTo Lan Bgp - toward LAN-side BGP peers
- no
Readvertise BooleanTo Lan Ospf - toward LAN-side OSPF peers
- no
Readvertise BooleanTo Overlay - toward overlay, how HUB should deal with routes it received from Spokes
- other
Vrfs List<String> - Other VRFs that can receive leaked routes from this spoke network
- routed Boolean
- Whether this network is routable
- source
Nat Property Map - Source NAT settings used when non-routed spoke hosts must be reachable from the hub
- static
Nat Map<Property Map> - Static NAT rules applied for VPN access to this network
- summarized
Subnet String - toward overlay, how HUB should deal with routes it received from Spokes
- summarized
Subnet StringTo Lan Bgp - toward LAN-side BGP peers
- summarized
Subnet StringTo Lan Ospf - toward LAN-side OSPF peers
GatewaytemplateNetworkVpnAccessDestinationNat, GatewaytemplateNetworkVpnAccessDestinationNatArgs
- Internal
Ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this VPN destination NAT rule
- Port string
- Destination port or variable for this VPN destination NAT rule
- Internal
Ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this VPN destination NAT rule
- Port string
- Destination port or variable for this VPN destination NAT rule
- internal_
ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this VPN destination NAT rule
- port string
- Destination port or variable for this VPN destination NAT rule
- internal
Ip String - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this VPN destination NAT rule
- port String
- Destination port or variable for this VPN destination NAT rule
- internal
Ip string - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this VPN destination NAT rule
- port string
- Destination port or variable for this VPN destination NAT rule
- internal_
ip str - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name str
- Label for this VPN destination NAT rule
- port str
- Destination port or variable for this VPN destination NAT rule
- internal
Ip String - The Destination NAT destination IP address. Must be an IP (i.e. "192.168.70.30") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this VPN destination NAT rule
- port String
- Destination port or variable for this VPN destination NAT rule
GatewaytemplateNetworkVpnAccessSourceNat, GatewaytemplateNetworkVpnAccessSourceNatArgs
- External
Ip string - External source NAT IP or subnet used when spoke hosts must be reachable from the hub
- External
Ip string - External source NAT IP or subnet used when spoke hosts must be reachable from the hub
- external_
ip string - External source NAT IP or subnet used when spoke hosts must be reachable from the hub
- external
Ip String - External source NAT IP or subnet used when spoke hosts must be reachable from the hub
- external
Ip string - External source NAT IP or subnet used when spoke hosts must be reachable from the hub
- external_
ip str - External source NAT IP or subnet used when spoke hosts must be reachable from the hub
- external
Ip String - External source NAT IP or subnet used when spoke hosts must be reachable from the hub
GatewaytemplateNetworkVpnAccessStaticNat, GatewaytemplateNetworkVpnAccessStaticNatArgs
- Internal
Ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this VPN static NAT rule
- Internal
Ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- Name string
- Label for this VPN static NAT rule
- internal_
ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this VPN static NAT rule
- internal
Ip String - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this VPN static NAT rule
- internal
Ip string - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name string
- Label for this VPN static NAT rule
- internal_
ip str - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name str
- Label for this VPN static NAT rule
- internal
Ip String - The Static NAT destination IP address. Must be an IP address (i.e. "192.168.70.3") or a Variable (i.e. "{{myvar}}")
- name String
- Label for this VPN static NAT rule
GatewaytemplateOobIpConfig, GatewaytemplateOobIpConfigArgs
- Gateway string
- Default gateway for the out-of-band management interface when
type==static - Ip string
- Static IPv4 address for the out-of-band management interface when
type==static - Netmask string
- IPv4 netmask or prefix length for the out-of-band management interface when
type==static - Node1
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Oob Ip Config Node1 - Out-of-band management IP configuration override for node1 in an HA cluster
- Type string
- IP assignment mode for the out-of-band management interface
- Use
Mgmt boolVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- Use
Mgmt boolVrf For Host Out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- Vlan
Id string - VLAN ID used for out-of-band management traffic
- Gateway string
- Default gateway for the out-of-band management interface when
type==static - Ip string
- Static IPv4 address for the out-of-band management interface when
type==static - Netmask string
- IPv4 netmask or prefix length for the out-of-band management interface when
type==static - Node1
Gatewaytemplate
Oob Ip Config Node1 - Out-of-band management IP configuration override for node1 in an HA cluster
- Type string
- IP assignment mode for the out-of-band management interface
- Use
Mgmt boolVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- Use
Mgmt boolVrf For Host Out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- Vlan
Id string - VLAN ID used for out-of-band management traffic
- gateway string
- Default gateway for the out-of-band management interface when
type==static - ip string
- Static IPv4 address for the out-of-band management interface when
type==static - netmask string
- IPv4 netmask or prefix length for the out-of-band management interface when
type==static - node1 object
- Out-of-band management IP configuration override for node1 in an HA cluster
- type string
- IP assignment mode for the out-of-band management interface
- use_
mgmt_ boolvrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use_
mgmt_ boolvrf_ for_ host_ out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- vlan_
id string - VLAN ID used for out-of-band management traffic
- gateway String
- Default gateway for the out-of-band management interface when
type==static - ip String
- Static IPv4 address for the out-of-band management interface when
type==static - netmask String
- IPv4 netmask or prefix length for the out-of-band management interface when
type==static - node1
Gatewaytemplate
Oob Ip Config Node1 - Out-of-band management IP configuration override for node1 in an HA cluster
- type String
- IP assignment mode for the out-of-band management interface
- use
Mgmt BooleanVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt BooleanVrf For Host Out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- vlan
Id String - VLAN ID used for out-of-band management traffic
- gateway string
- Default gateway for the out-of-band management interface when
type==static - ip string
- Static IPv4 address for the out-of-band management interface when
type==static - netmask string
- IPv4 netmask or prefix length for the out-of-band management interface when
type==static - node1
Gatewaytemplate
Oob Ip Config Node1 - Out-of-band management IP configuration override for node1 in an HA cluster
- type string
- IP assignment mode for the out-of-band management interface
- use
Mgmt booleanVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt booleanVrf For Host Out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- vlan
Id string - VLAN ID used for out-of-band management traffic
- gateway str
- Default gateway for the out-of-band management interface when
type==static - ip str
- Static IPv4 address for the out-of-band management interface when
type==static - netmask str
- IPv4 netmask or prefix length for the out-of-band management interface when
type==static - node1
Gatewaytemplate
Oob Ip Config Node1 - Out-of-band management IP configuration override for node1 in an HA cluster
- type str
- IP assignment mode for the out-of-band management interface
- use_
mgmt_ boolvrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use_
mgmt_ boolvrf_ for_ host_ out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- vlan_
id str - VLAN ID used for out-of-band management traffic
- gateway String
- Default gateway for the out-of-band management interface when
type==static - ip String
- Static IPv4 address for the out-of-band management interface when
type==static - netmask String
- IPv4 netmask or prefix length for the out-of-band management interface when
type==static - node1 Property Map
- Out-of-band management IP configuration override for node1 in an HA cluster
- type String
- IP assignment mode for the out-of-band management interface
- use
Mgmt BooleanVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt BooleanVrf For Host Out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- vlan
Id String - VLAN ID used for out-of-band management traffic
GatewaytemplateOobIpConfigNode1, GatewaytemplateOobIpConfigNode1Args
- Gateway string
- Default gateway for the node1 out-of-band management interface when
type==static - Ip string
- Static IPv4 address for the node1 out-of-band management interface when
type==static - Netmask string
- IPv4 netmask or prefix length for the node1 out-of-band management interface when
type==static; used only ifsubnetis not specified innetworks - Type string
- IP assignment mode for the node1 out-of-band management interface
- Use
Mgmt boolVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- Use
Mgmt boolVrf For Host Out - Whether to use
mgmtJunosfor host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired - Vlan
Id string - VLAN ID used for node1 out-of-band management traffic
- Gateway string
- Default gateway for the node1 out-of-band management interface when
type==static - Ip string
- Static IPv4 address for the node1 out-of-band management interface when
type==static - Netmask string
- IPv4 netmask or prefix length for the node1 out-of-band management interface when
type==static; used only ifsubnetis not specified innetworks - Type string
- IP assignment mode for the node1 out-of-band management interface
- Use
Mgmt boolVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- Use
Mgmt boolVrf For Host Out - Whether to use
mgmtJunosfor host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired - Vlan
Id string - VLAN ID used for node1 out-of-band management traffic
- gateway string
- Default gateway for the node1 out-of-band management interface when
type==static - ip string
- Static IPv4 address for the node1 out-of-band management interface when
type==static - netmask string
- IPv4 netmask or prefix length for the node1 out-of-band management interface when
type==static; used only ifsubnetis not specified innetworks - type string
- IP assignment mode for the node1 out-of-band management interface
- use_
mgmt_ boolvrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use_
mgmt_ boolvrf_ for_ host_ out - Whether to use
mgmtJunosfor host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired - vlan_
id string - VLAN ID used for node1 out-of-band management traffic
- gateway String
- Default gateway for the node1 out-of-band management interface when
type==static - ip String
- Static IPv4 address for the node1 out-of-band management interface when
type==static - netmask String
- IPv4 netmask or prefix length for the node1 out-of-band management interface when
type==static; used only ifsubnetis not specified innetworks - type String
- IP assignment mode for the node1 out-of-band management interface
- use
Mgmt BooleanVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt BooleanVrf For Host Out - Whether to use
mgmtJunosfor host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired - vlan
Id String - VLAN ID used for node1 out-of-band management traffic
- gateway string
- Default gateway for the node1 out-of-band management interface when
type==static - ip string
- Static IPv4 address for the node1 out-of-band management interface when
type==static - netmask string
- IPv4 netmask or prefix length for the node1 out-of-band management interface when
type==static; used only ifsubnetis not specified innetworks - type string
- IP assignment mode for the node1 out-of-band management interface
- use
Mgmt booleanVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt booleanVrf For Host Out - Whether to use
mgmtJunosfor host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired - vlan
Id string - VLAN ID used for node1 out-of-band management traffic
- gateway str
- Default gateway for the node1 out-of-band management interface when
type==static - ip str
- Static IPv4 address for the node1 out-of-band management interface when
type==static - netmask str
- IPv4 netmask or prefix length for the node1 out-of-band management interface when
type==static; used only ifsubnetis not specified innetworks - type str
- IP assignment mode for the node1 out-of-band management interface
- use_
mgmt_ boolvrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use_
mgmt_ boolvrf_ for_ host_ out - Whether to use
mgmtJunosfor host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired - vlan_
id str - VLAN ID used for node1 out-of-band management traffic
- gateway String
- Default gateway for the node1 out-of-band management interface when
type==static - ip String
- Static IPv4 address for the node1 out-of-band management interface when
type==static - netmask String
- IPv4 netmask or prefix length for the node1 out-of-band management interface when
type==static; used only ifsubnetis not specified innetworks - type String
- IP assignment mode for the node1 out-of-band management interface
- use
Mgmt BooleanVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt BooleanVrf For Host Out - Whether to use
mgmtJunosfor host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired - vlan
Id String - VLAN ID used for node1 out-of-band management traffic
GatewaytemplatePathPreferences, GatewaytemplatePathPreferencesArgs
- Paths
List<Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Path Preferences Path> - Candidate paths evaluated for this gateway path preference
- Strategy string
- Selection strategy used to evaluate the candidate paths
- Paths
[]Gatewaytemplate
Path Preferences Path - Candidate paths evaluated for this gateway path preference
- Strategy string
- Selection strategy used to evaluate the candidate paths
- paths list(object)
- Candidate paths evaluated for this gateway path preference
- strategy string
- Selection strategy used to evaluate the candidate paths
- paths
List<Gatewaytemplate
Path Preferences Path> - Candidate paths evaluated for this gateway path preference
- strategy String
- Selection strategy used to evaluate the candidate paths
- paths
Gatewaytemplate
Path Preferences Path[] - Candidate paths evaluated for this gateway path preference
- strategy string
- Selection strategy used to evaluate the candidate paths
- paths
Sequence[Gatewaytemplate
Path Preferences Path] - Candidate paths evaluated for this gateway path preference
- strategy str
- Selection strategy used to evaluate the candidate paths
- paths List<Property Map>
- Candidate paths evaluated for this gateway path preference
- strategy String
- Selection strategy used to evaluate the candidate paths
GatewaytemplatePathPreferencesPath, GatewaytemplatePathPreferencesPathArgs
- Type string
- Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
- Cost int
- Relative cost assigned to this path for gateway path selection
- Disabled bool
- For SSR Only.
true, if this specific path is undesired - Gateway
Ip string - Only if
type==local, if a different gateway is desired - Internet
Access bool - Only if
type==vpn, if this vpn path can be used for internet - Name string
- Required when
type==vpn: the name of the VPN Path to usetype==wan: the name of the WAN interface to use
- Networks List<string>
- List of network names used when
type==local - Target
Ips List<string> - List of destination IP addresses to replace when
type==local - Wan
Name string - Optional if
type==vpn; WAN interface name associated with the VPN path
- Type string
- Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
- Cost int
- Relative cost assigned to this path for gateway path selection
- Disabled bool
- For SSR Only.
true, if this specific path is undesired - Gateway
Ip string - Only if
type==local, if a different gateway is desired - Internet
Access bool - Only if
type==vpn, if this vpn path can be used for internet - Name string
- Required when
type==vpn: the name of the VPN Path to usetype==wan: the name of the WAN interface to use
- Networks []string
- List of network names used when
type==local - Target
Ips []string - List of destination IP addresses to replace when
type==local - Wan
Name string - Optional if
type==vpn; WAN interface name associated with the VPN path
- type string
- Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
- cost number
- Relative cost assigned to this path for gateway path selection
- disabled bool
- For SSR Only.
true, if this specific path is undesired - gateway_
ip string - Only if
type==local, if a different gateway is desired - internet_
access bool - Only if
type==vpn, if this vpn path can be used for internet - name string
- Required when
type==vpn: the name of the VPN Path to usetype==wan: the name of the WAN interface to use
- networks list(string)
- List of network names used when
type==local - target_
ips list(string) - List of destination IP addresses to replace when
type==local - wan_
name string - Optional if
type==vpn; WAN interface name associated with the VPN path
- type String
- Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
- cost Integer
- Relative cost assigned to this path for gateway path selection
- disabled Boolean
- For SSR Only.
true, if this specific path is undesired - gateway
Ip String - Only if
type==local, if a different gateway is desired - internet
Access Boolean - Only if
type==vpn, if this vpn path can be used for internet - name String
- Required when
type==vpn: the name of the VPN Path to usetype==wan: the name of the WAN interface to use
- networks List<String>
- List of network names used when
type==local - target
Ips List<String> - List of destination IP addresses to replace when
type==local - wan
Name String - Optional if
type==vpn; WAN interface name associated with the VPN path
- type string
- Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
- cost number
- Relative cost assigned to this path for gateway path selection
- disabled boolean
- For SSR Only.
true, if this specific path is undesired - gateway
Ip string - Only if
type==local, if a different gateway is desired - internet
Access boolean - Only if
type==vpn, if this vpn path can be used for internet - name string
- Required when
type==vpn: the name of the VPN Path to usetype==wan: the name of the WAN interface to use
- networks string[]
- List of network names used when
type==local - target
Ips string[] - List of destination IP addresses to replace when
type==local - wan
Name string - Optional if
type==vpn; WAN interface name associated with the VPN path
- type str
- Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
- cost int
- Relative cost assigned to this path for gateway path selection
- disabled bool
- For SSR Only.
true, if this specific path is undesired - gateway_
ip str - Only if
type==local, if a different gateway is desired - internet_
access bool - Only if
type==vpn, if this vpn path can be used for internet - name str
- Required when
type==vpn: the name of the VPN Path to usetype==wan: the name of the WAN interface to use
- networks Sequence[str]
- List of network names used when
type==local - target_
ips Sequence[str] - List of destination IP addresses to replace when
type==local - wan_
name str - Optional if
type==vpn; WAN interface name associated with the VPN path
- type String
- Gateway path source type, such as local network, WAN interface, VPN path, or tunnel
- cost Number
- Relative cost assigned to this path for gateway path selection
- disabled Boolean
- For SSR Only.
true, if this specific path is undesired - gateway
Ip String - Only if
type==local, if a different gateway is desired - internet
Access Boolean - Only if
type==vpn, if this vpn path can be used for internet - name String
- Required when
type==vpn: the name of the VPN Path to usetype==wan: the name of the WAN interface to use
- networks List<String>
- List of network names used when
type==local - target
Ips List<String> - List of destination IP addresses to replace when
type==local - wan
Name String - Optional if
type==vpn; WAN interface name associated with the VPN path
GatewaytemplatePortConfig, GatewaytemplatePortConfigArgs
- Usage string
- Logical usage assigned to the port
- Ae
Disable boolLacp - If
aggregated==true. To disable LCP support for the AE interface - Ae
Idx string - If
aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127) - Ae
Lacp boolForce Up - For SRX only, if
aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - Aggregated bool
- Whether the port participates in an aggregated Ethernet interface
- Critical bool
- To generate port up/down alarm, set it to true
- Description string
- Interface Description. Can be a variable (i.e. "{{myvar}}")
- Disable
Autoneg bool - Whether Ethernet autonegotiation is disabled on the port
- Disabled bool
- Port admin up (true) / down (false)
- Dsl
Type string - If
wanType==dsl. DSL technology used by the WAN port - Dsl
Vci int - If
wanType==dsl, 16 bit int - Dsl
Vpi int - If
wanType==dsl, 8 bit int - Duplex string
- Ethernet duplex mode configured on the port
- Ip
Config Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Port Config Ip Config - Layer 3 IP configuration for the port
- Lte
Apn string - If
wanType==lte. APN used by the LTE uplink - Lte
Auth string - If
wanType==lte. Authentication method used by the LTE uplink - Lte
Backup bool - Whether the LTE uplink is used as a backup WAN connection
- Lte
Password string - If
wanType==lte. Password used for LTE uplink authentication - Lte
Username string - If
wanType==lte. Username used for LTE uplink authentication - Mtu int
- Layer 3 MTU configured on the port
- Name string
- Interface name used to derive device configuration
- Networks List<string>
- if
usage==lan, name of thejunipermist.org.Networkresource - Outer
Vlan intId - For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
- Poe
Disabled bool - Whether PoE output is disabled on the port
- Poe
Keep boolState When Reboot - Whether Perpetual PoE capabilities are enabled for a port
- Port
Network string - Only for SRX and if
usage==lan, the name of the Network to be used as the Untagged VLAN - Preserve
Dscp bool - Whether to preserve dscp when sending traffic over VPN (SSR-only)
- Redundant bool
- If HA mode. Whether the port participates in the redundant Ethernet configuration
- Redundant
Group int - If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
- Reth
Idx string - For SRX only and if HA Mode
- Reth
Node string - If HA mode. Node associated with the redundant Ethernet interface
- Reth
Nodes List<string> - If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
- Speed string
- Link speed configured on the port
- Ssr
No boolVirtual Mac - When SSR is running as VM, this is required on certain hosting platforms
- Svr
Port stringRange - For SSR only. Port range configured on the interface
- Traffic
Shaping Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Port Config Traffic Shaping - Traffic shaping settings applied to the port
- Vlan
Id string - VLAN ID or variable used when the WAN interface is carried on a VLAN
- Vpn
Paths Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Port Config Vpn Paths> - Per-VPN path settings for traffic that uses this port
- Wan
Arp stringPolicer - Only when
wanType==broadband. ARP policer profile applied to the WAN port - Wan
Ext stringIp - Only if
usage==wan, optional. If spoke should reach this port by a different IP - Wan
Ext stringIp6 - Only if
usage==wan, optional. If spoke should reach this port by a different IPv6 - Wan
Extra Dictionary<string, Pulumi.Routes Juniper Mist. Org. Inputs. Gatewaytemplate Port Config Wan Extra Routes> - Only if
usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24") - Wan
Extra Dictionary<string, Pulumi.Routes6 Juniper Mist. Org. Inputs. Gatewaytemplate Port Config Wan Extra Routes6> - Only if
usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64") - Wan
Networks List<string> - Only if
usage==wan. Networks reachable through this WAN port for policy definition - Wan
Probe Pulumi.Override Juniper Mist. Org. Inputs. Gatewaytemplate Port Config Wan Probe Override - Optional WAN health probe override settings for this port
- Wan
Source Pulumi.Nat Juniper Mist. Org. Inputs. Gatewaytemplate Port Config Wan Source Nat - Source NAT settings applied to traffic leaving this WAN port
- Wan
Speedtest stringMode - Controls whether Marvis or the scheduler can run speed tests on this WAN port
- Wan
Type string - Only if
usage==wan. WAN uplink type configured on the port
- Usage string
- Logical usage assigned to the port
- Ae
Disable boolLacp - If
aggregated==true. To disable LCP support for the AE interface - Ae
Idx string - If
aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127) - Ae
Lacp boolForce Up - For SRX only, if
aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - Aggregated bool
- Whether the port participates in an aggregated Ethernet interface
- Critical bool
- To generate port up/down alarm, set it to true
- Description string
- Interface Description. Can be a variable (i.e. "{{myvar}}")
- Disable
Autoneg bool - Whether Ethernet autonegotiation is disabled on the port
- Disabled bool
- Port admin up (true) / down (false)
- Dsl
Type string - If
wanType==dsl. DSL technology used by the WAN port - Dsl
Vci int - If
wanType==dsl, 16 bit int - Dsl
Vpi int - If
wanType==dsl, 8 bit int - Duplex string
- Ethernet duplex mode configured on the port
- Ip
Config GatewaytemplatePort Config Ip Config - Layer 3 IP configuration for the port
- Lte
Apn string - If
wanType==lte. APN used by the LTE uplink - Lte
Auth string - If
wanType==lte. Authentication method used by the LTE uplink - Lte
Backup bool - Whether the LTE uplink is used as a backup WAN connection
- Lte
Password string - If
wanType==lte. Password used for LTE uplink authentication - Lte
Username string - If
wanType==lte. Username used for LTE uplink authentication - Mtu int
- Layer 3 MTU configured on the port
- Name string
- Interface name used to derive device configuration
- Networks []string
- if
usage==lan, name of thejunipermist.org.Networkresource - Outer
Vlan intId - For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
- Poe
Disabled bool - Whether PoE output is disabled on the port
- Poe
Keep boolState When Reboot - Whether Perpetual PoE capabilities are enabled for a port
- Port
Network string - Only for SRX and if
usage==lan, the name of the Network to be used as the Untagged VLAN - Preserve
Dscp bool - Whether to preserve dscp when sending traffic over VPN (SSR-only)
- Redundant bool
- If HA mode. Whether the port participates in the redundant Ethernet configuration
- Redundant
Group int - If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
- Reth
Idx string - For SRX only and if HA Mode
- Reth
Node string - If HA mode. Node associated with the redundant Ethernet interface
- Reth
Nodes []string - If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
- Speed string
- Link speed configured on the port
- Ssr
No boolVirtual Mac - When SSR is running as VM, this is required on certain hosting platforms
- Svr
Port stringRange - For SSR only. Port range configured on the interface
- Traffic
Shaping GatewaytemplatePort Config Traffic Shaping - Traffic shaping settings applied to the port
- Vlan
Id string - VLAN ID or variable used when the WAN interface is carried on a VLAN
- Vpn
Paths map[string]GatewaytemplatePort Config Vpn Paths - Per-VPN path settings for traffic that uses this port
- Wan
Arp stringPolicer - Only when
wanType==broadband. ARP policer profile applied to the WAN port - Wan
Ext stringIp - Only if
usage==wan, optional. If spoke should reach this port by a different IP - Wan
Ext stringIp6 - Only if
usage==wan, optional. If spoke should reach this port by a different IPv6 - Wan
Extra map[string]GatewaytemplateRoutes Port Config Wan Extra Routes - Only if
usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24") - Wan
Extra map[string]GatewaytemplateRoutes6 Port Config Wan Extra Routes6 - Only if
usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64") - Wan
Networks []string - Only if
usage==wan. Networks reachable through this WAN port for policy definition - Wan
Probe GatewaytemplateOverride Port Config Wan Probe Override - Optional WAN health probe override settings for this port
- Wan
Source GatewaytemplateNat Port Config Wan Source Nat - Source NAT settings applied to traffic leaving this WAN port
- Wan
Speedtest stringMode - Controls whether Marvis or the scheduler can run speed tests on this WAN port
- Wan
Type string - Only if
usage==wan. WAN uplink type configured on the port
- usage string
- Logical usage assigned to the port
- ae_
disable_ boollacp - If
aggregated==true. To disable LCP support for the AE interface - ae_
idx string - If
aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127) - ae_
lacp_ boolforce_ up - For SRX only, if
aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - aggregated bool
- Whether the port participates in an aggregated Ethernet interface
- critical bool
- To generate port up/down alarm, set it to true
- description string
- Interface Description. Can be a variable (i.e. "{{myvar}}")
- disable_
autoneg bool - Whether Ethernet autonegotiation is disabled on the port
- disabled bool
- Port admin up (true) / down (false)
- dsl_
type string - If
wanType==dsl. DSL technology used by the WAN port - dsl_
vci number - If
wanType==dsl, 16 bit int - dsl_
vpi number - If
wanType==dsl, 8 bit int - duplex string
- Ethernet duplex mode configured on the port
- ip_
config object - Layer 3 IP configuration for the port
- lte_
apn string - If
wanType==lte. APN used by the LTE uplink - lte_
auth string - If
wanType==lte. Authentication method used by the LTE uplink - lte_
backup bool - Whether the LTE uplink is used as a backup WAN connection
- lte_
password string - If
wanType==lte. Password used for LTE uplink authentication - lte_
username string - If
wanType==lte. Username used for LTE uplink authentication - mtu number
- Layer 3 MTU configured on the port
- name string
- Interface name used to derive device configuration
- networks list(string)
- if
usage==lan, name of thejunipermist.org.Networkresource - outer_
vlan_ numberid - For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
- poe_
disabled bool - Whether PoE output is disabled on the port
- poe_
keep_ boolstate_ when_ reboot - Whether Perpetual PoE capabilities are enabled for a port
- port_
network string - Only for SRX and if
usage==lan, the name of the Network to be used as the Untagged VLAN - preserve_
dscp bool - Whether to preserve dscp when sending traffic over VPN (SSR-only)
- redundant bool
- If HA mode. Whether the port participates in the redundant Ethernet configuration
- redundant_
group number - If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
- reth_
idx string - For SRX only and if HA Mode
- reth_
node string - If HA mode. Node associated with the redundant Ethernet interface
- reth_
nodes list(string) - If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
- speed string
- Link speed configured on the port
- ssr_
no_ boolvirtual_ mac - When SSR is running as VM, this is required on certain hosting platforms
- svr_
port_ stringrange - For SSR only. Port range configured on the interface
- traffic_
shaping object - Traffic shaping settings applied to the port
- vlan_
id string - VLAN ID or variable used when the WAN interface is carried on a VLAN
- vpn_
paths map(object) - Per-VPN path settings for traffic that uses this port
- wan_
arp_ stringpolicer - Only when
wanType==broadband. ARP policer profile applied to the WAN port - wan_
ext_ stringip - Only if
usage==wan, optional. If spoke should reach this port by a different IP - wan_
ext_ stringip6 - Only if
usage==wan, optional. If spoke should reach this port by a different IPv6 - wan_
extra_ map(object)routes - Only if
usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24") - wan_
extra_ map(object)routes6 - Only if
usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64") - wan_
networks list(string) - Only if
usage==wan. Networks reachable through this WAN port for policy definition - wan_
probe_ objectoverride - Optional WAN health probe override settings for this port
- wan_
source_ objectnat - Source NAT settings applied to traffic leaving this WAN port
- wan_
speedtest_ stringmode - Controls whether Marvis or the scheduler can run speed tests on this WAN port
- wan_
type string - Only if
usage==wan. WAN uplink type configured on the port
- usage String
- Logical usage assigned to the port
- ae
Disable BooleanLacp - If
aggregated==true. To disable LCP support for the AE interface - ae
Idx String - If
aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127) - ae
Lacp BooleanForce Up - For SRX only, if
aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - aggregated Boolean
- Whether the port participates in an aggregated Ethernet interface
- critical Boolean
- To generate port up/down alarm, set it to true
- description String
- Interface Description. Can be a variable (i.e. "{{myvar}}")
- disable
Autoneg Boolean - Whether Ethernet autonegotiation is disabled on the port
- disabled Boolean
- Port admin up (true) / down (false)
- dsl
Type String - If
wanType==dsl. DSL technology used by the WAN port - dsl
Vci Integer - If
wanType==dsl, 16 bit int - dsl
Vpi Integer - If
wanType==dsl, 8 bit int - duplex String
- Ethernet duplex mode configured on the port
- ip
Config GatewaytemplatePort Config Ip Config - Layer 3 IP configuration for the port
- lte
Apn String - If
wanType==lte. APN used by the LTE uplink - lte
Auth String - If
wanType==lte. Authentication method used by the LTE uplink - lte
Backup Boolean - Whether the LTE uplink is used as a backup WAN connection
- lte
Password String - If
wanType==lte. Password used for LTE uplink authentication - lte
Username String - If
wanType==lte. Username used for LTE uplink authentication - mtu Integer
- Layer 3 MTU configured on the port
- name String
- Interface name used to derive device configuration
- networks List<String>
- if
usage==lan, name of thejunipermist.org.Networkresource - outer
Vlan IntegerId - For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
- poe
Disabled Boolean - Whether PoE output is disabled on the port
- poe
Keep BooleanState When Reboot - Whether Perpetual PoE capabilities are enabled for a port
- port
Network String - Only for SRX and if
usage==lan, the name of the Network to be used as the Untagged VLAN - preserve
Dscp Boolean - Whether to preserve dscp when sending traffic over VPN (SSR-only)
- redundant Boolean
- If HA mode. Whether the port participates in the redundant Ethernet configuration
- redundant
Group Integer - If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
- reth
Idx String - For SRX only and if HA Mode
- reth
Node String - If HA mode. Node associated with the redundant Ethernet interface
- reth
Nodes List<String> - If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
- speed String
- Link speed configured on the port
- ssr
No BooleanVirtual Mac - When SSR is running as VM, this is required on certain hosting platforms
- svr
Port StringRange - For SSR only. Port range configured on the interface
- traffic
Shaping GatewaytemplatePort Config Traffic Shaping - Traffic shaping settings applied to the port
- vlan
Id String - VLAN ID or variable used when the WAN interface is carried on a VLAN
- vpn
Paths Map<String,GatewaytemplatePort Config Vpn Paths> - Per-VPN path settings for traffic that uses this port
- wan
Arp StringPolicer - Only when
wanType==broadband. ARP policer profile applied to the WAN port - wan
Ext StringIp - Only if
usage==wan, optional. If spoke should reach this port by a different IP - wan
Ext StringIp6 - Only if
usage==wan, optional. If spoke should reach this port by a different IPv6 - wan
Extra Map<String,GatewaytemplateRoutes Port Config Wan Extra Routes> - Only if
usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24") - wan
Extra Map<String,GatewaytemplateRoutes6 Port Config Wan Extra Routes6> - Only if
usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64") - wan
Networks List<String> - Only if
usage==wan. Networks reachable through this WAN port for policy definition - wan
Probe GatewaytemplateOverride Port Config Wan Probe Override - Optional WAN health probe override settings for this port
- wan
Source GatewaytemplateNat Port Config Wan Source Nat - Source NAT settings applied to traffic leaving this WAN port
- wan
Speedtest StringMode - Controls whether Marvis or the scheduler can run speed tests on this WAN port
- wan
Type String - Only if
usage==wan. WAN uplink type configured on the port
- usage string
- Logical usage assigned to the port
- ae
Disable booleanLacp - If
aggregated==true. To disable LCP support for the AE interface - ae
Idx string - If
aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127) - ae
Lacp booleanForce Up - For SRX only, if
aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - aggregated boolean
- Whether the port participates in an aggregated Ethernet interface
- critical boolean
- To generate port up/down alarm, set it to true
- description string
- Interface Description. Can be a variable (i.e. "{{myvar}}")
- disable
Autoneg boolean - Whether Ethernet autonegotiation is disabled on the port
- disabled boolean
- Port admin up (true) / down (false)
- dsl
Type string - If
wanType==dsl. DSL technology used by the WAN port - dsl
Vci number - If
wanType==dsl, 16 bit int - dsl
Vpi number - If
wanType==dsl, 8 bit int - duplex string
- Ethernet duplex mode configured on the port
- ip
Config GatewaytemplatePort Config Ip Config - Layer 3 IP configuration for the port
- lte
Apn string - If
wanType==lte. APN used by the LTE uplink - lte
Auth string - If
wanType==lte. Authentication method used by the LTE uplink - lte
Backup boolean - Whether the LTE uplink is used as a backup WAN connection
- lte
Password string - If
wanType==lte. Password used for LTE uplink authentication - lte
Username string - If
wanType==lte. Username used for LTE uplink authentication - mtu number
- Layer 3 MTU configured on the port
- name string
- Interface name used to derive device configuration
- networks string[]
- if
usage==lan, name of thejunipermist.org.Networkresource - outer
Vlan numberId - For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
- poe
Disabled boolean - Whether PoE output is disabled on the port
- poe
Keep booleanState When Reboot - Whether Perpetual PoE capabilities are enabled for a port
- port
Network string - Only for SRX and if
usage==lan, the name of the Network to be used as the Untagged VLAN - preserve
Dscp boolean - Whether to preserve dscp when sending traffic over VPN (SSR-only)
- redundant boolean
- If HA mode. Whether the port participates in the redundant Ethernet configuration
- redundant
Group number - If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
- reth
Idx string - For SRX only and if HA Mode
- reth
Node string - If HA mode. Node associated with the redundant Ethernet interface
- reth
Nodes string[] - If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
- speed string
- Link speed configured on the port
- ssr
No booleanVirtual Mac - When SSR is running as VM, this is required on certain hosting platforms
- svr
Port stringRange - For SSR only. Port range configured on the interface
- traffic
Shaping GatewaytemplatePort Config Traffic Shaping - Traffic shaping settings applied to the port
- vlan
Id string - VLAN ID or variable used when the WAN interface is carried on a VLAN
- vpn
Paths {[key: string]: GatewaytemplatePort Config Vpn Paths} - Per-VPN path settings for traffic that uses this port
- wan
Arp stringPolicer - Only when
wanType==broadband. ARP policer profile applied to the WAN port - wan
Ext stringIp - Only if
usage==wan, optional. If spoke should reach this port by a different IP - wan
Ext stringIp6 - Only if
usage==wan, optional. If spoke should reach this port by a different IPv6 - wan
Extra {[key: string]: GatewaytemplateRoutes Port Config Wan Extra Routes} - Only if
usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24") - wan
Extra {[key: string]: GatewaytemplateRoutes6 Port Config Wan Extra Routes6} - Only if
usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64") - wan
Networks string[] - Only if
usage==wan. Networks reachable through this WAN port for policy definition - wan
Probe GatewaytemplateOverride Port Config Wan Probe Override - Optional WAN health probe override settings for this port
- wan
Source GatewaytemplateNat Port Config Wan Source Nat - Source NAT settings applied to traffic leaving this WAN port
- wan
Speedtest stringMode - Controls whether Marvis or the scheduler can run speed tests on this WAN port
- wan
Type string - Only if
usage==wan. WAN uplink type configured on the port
- usage str
- Logical usage assigned to the port
- ae_
disable_ boollacp - If
aggregated==true. To disable LCP support for the AE interface - ae_
idx str - If
aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127) - ae_
lacp_ boolforce_ up - For SRX only, if
aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - aggregated bool
- Whether the port participates in an aggregated Ethernet interface
- critical bool
- To generate port up/down alarm, set it to true
- description str
- Interface Description. Can be a variable (i.e. "{{myvar}}")
- disable_
autoneg bool - Whether Ethernet autonegotiation is disabled on the port
- disabled bool
- Port admin up (true) / down (false)
- dsl_
type str - If
wanType==dsl. DSL technology used by the WAN port - dsl_
vci int - If
wanType==dsl, 16 bit int - dsl_
vpi int - If
wanType==dsl, 8 bit int - duplex str
- Ethernet duplex mode configured on the port
- ip_
config GatewaytemplatePort Config Ip Config - Layer 3 IP configuration for the port
- lte_
apn str - If
wanType==lte. APN used by the LTE uplink - lte_
auth str - If
wanType==lte. Authentication method used by the LTE uplink - lte_
backup bool - Whether the LTE uplink is used as a backup WAN connection
- lte_
password str - If
wanType==lte. Password used for LTE uplink authentication - lte_
username str - If
wanType==lte. Username used for LTE uplink authentication - mtu int
- Layer 3 MTU configured on the port
- name str
- Interface name used to derive device configuration
- networks Sequence[str]
- if
usage==lan, name of thejunipermist.org.Networkresource - outer_
vlan_ intid - For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
- poe_
disabled bool - Whether PoE output is disabled on the port
- poe_
keep_ boolstate_ when_ reboot - Whether Perpetual PoE capabilities are enabled for a port
- port_
network str - Only for SRX and if
usage==lan, the name of the Network to be used as the Untagged VLAN - preserve_
dscp bool - Whether to preserve dscp when sending traffic over VPN (SSR-only)
- redundant bool
- If HA mode. Whether the port participates in the redundant Ethernet configuration
- redundant_
group int - If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
- reth_
idx str - For SRX only and if HA Mode
- reth_
node str - If HA mode. Node associated with the redundant Ethernet interface
- reth_
nodes Sequence[str] - If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
- speed str
- Link speed configured on the port
- ssr_
no_ boolvirtual_ mac - When SSR is running as VM, this is required on certain hosting platforms
- svr_
port_ strrange - For SSR only. Port range configured on the interface
- traffic_
shaping GatewaytemplatePort Config Traffic Shaping - Traffic shaping settings applied to the port
- vlan_
id str - VLAN ID or variable used when the WAN interface is carried on a VLAN
- vpn_
paths Mapping[str, GatewaytemplatePort Config Vpn Paths] - Per-VPN path settings for traffic that uses this port
- wan_
arp_ strpolicer - Only when
wanType==broadband. ARP policer profile applied to the WAN port - wan_
ext_ strip - Only if
usage==wan, optional. If spoke should reach this port by a different IP - wan_
ext_ strip6 - Only if
usage==wan, optional. If spoke should reach this port by a different IPv6 - wan_
extra_ Mapping[str, Gatewaytemplateroutes Port Config Wan Extra Routes] - Only if
usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24") - wan_
extra_ Mapping[str, Gatewaytemplateroutes6 Port Config Wan Extra Routes6] - Only if
usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64") - wan_
networks Sequence[str] - Only if
usage==wan. Networks reachable through this WAN port for policy definition - wan_
probe_ Gatewaytemplateoverride Port Config Wan Probe Override - Optional WAN health probe override settings for this port
- wan_
source_ Gatewaytemplatenat Port Config Wan Source Nat - Source NAT settings applied to traffic leaving this WAN port
- wan_
speedtest_ strmode - Controls whether Marvis or the scheduler can run speed tests on this WAN port
- wan_
type str - Only if
usage==wan. WAN uplink type configured on the port
- usage String
- Logical usage assigned to the port
- ae
Disable BooleanLacp - If
aggregated==true. To disable LCP support for the AE interface - ae
Idx String - If
aggregated==true. Users could force to use the designated AE name (must be an integer between 0 and 127) - ae
Lacp BooleanForce Up - For SRX only, if
aggregated==true.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - aggregated Boolean
- Whether the port participates in an aggregated Ethernet interface
- critical Boolean
- To generate port up/down alarm, set it to true
- description String
- Interface Description. Can be a variable (i.e. "{{myvar}}")
- disable
Autoneg Boolean - Whether Ethernet autonegotiation is disabled on the port
- disabled Boolean
- Port admin up (true) / down (false)
- dsl
Type String - If
wanType==dsl. DSL technology used by the WAN port - dsl
Vci Number - If
wanType==dsl, 16 bit int - dsl
Vpi Number - If
wanType==dsl, 8 bit int - duplex String
- Ethernet duplex mode configured on the port
- ip
Config Property Map - Layer 3 IP configuration for the port
- lte
Apn String - If
wanType==lte. APN used by the LTE uplink - lte
Auth String - If
wanType==lte. Authentication method used by the LTE uplink - lte
Backup Boolean - Whether the LTE uplink is used as a backup WAN connection
- lte
Password String - If
wanType==lte. Password used for LTE uplink authentication - lte
Username String - If
wanType==lte. Username used for LTE uplink authentication - mtu Number
- Layer 3 MTU configured on the port
- name String
- Interface name used to derive device configuration
- networks List<String>
- if
usage==lan, name of thejunipermist.org.Networkresource - outer
Vlan NumberId - For Q-in-Q. Outer VLAN ID used for QinQ encapsulation
- poe
Disabled Boolean - Whether PoE output is disabled on the port
- poe
Keep BooleanState When Reboot - Whether Perpetual PoE capabilities are enabled for a port
- port
Network String - Only for SRX and if
usage==lan, the name of the Network to be used as the Untagged VLAN - preserve
Dscp Boolean - Whether to preserve dscp when sending traffic over VPN (SSR-only)
- redundant Boolean
- If HA mode. Whether the port participates in the redundant Ethernet configuration
- redundant
Group Number - If HA mode, SRX Only - support redundancy-group. 1-128 for physical SRX, 1-64 for virtual SRX
- reth
Idx String - For SRX only and if HA Mode
- reth
Node String - If HA mode. Node associated with the redundant Ethernet interface
- reth
Nodes List<String> - If HA mode and for SSR only. Per-network node assignment used for VLAN-based redundancy
- speed String
- Link speed configured on the port
- ssr
No BooleanVirtual Mac - When SSR is running as VM, this is required on certain hosting platforms
- svr
Port StringRange - For SSR only. Port range configured on the interface
- traffic
Shaping Property Map - Traffic shaping settings applied to the port
- vlan
Id String - VLAN ID or variable used when the WAN interface is carried on a VLAN
- vpn
Paths Map<Property Map> - Per-VPN path settings for traffic that uses this port
- wan
Arp StringPolicer - Only when
wanType==broadband. ARP policer profile applied to the WAN port - wan
Ext StringIp - Only if
usage==wan, optional. If spoke should reach this port by a different IP - wan
Ext StringIp6 - Only if
usage==wan, optional. If spoke should reach this port by a different IPv6 - wan
Extra Map<Property Map>Routes - Only if
usage==wan. Property Key is the destination CIDR (e.g. "100.100.100.0/24") - wan
Extra Map<Property Map>Routes6 - Only if
usage==wan. Property Key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64") - wan
Networks List<String> - Only if
usage==wan. Networks reachable through this WAN port for policy definition - wan
Probe Property MapOverride - Optional WAN health probe override settings for this port
- wan
Source Property MapNat - Source NAT settings applied to traffic leaving this WAN port
- wan
Speedtest StringMode - Controls whether Marvis or the scheduler can run speed tests on this WAN port
- wan
Type String - Only if
usage==wan. WAN uplink type configured on the port
GatewaytemplatePortConfigIpConfig, GatewaytemplatePortConfigIpConfigArgs
- Dns List<string>
- Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- Dns
Suffixes List<string> - DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- Gateway string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
- Gateway6 string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
- Ip string
- Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
- Ip6 string
- Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
- Netmask string
- Used only if
subnetis not specified innetworks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}") - Netmask6 string
- Used only if
subnetis not specified innetworks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}") - Network string
- Optional, the network to be used for mgmt
- Poser
Password string - Password used for PPPoE when
type==pppoe - Pppoe
Auth string - Authentication protocol used for PPPoE when
type==pppoe - Pppoe
Username string - Username used for PPPoE when
type==pppoe - Type string
- IPv4 assignment mode for this gateway port interface
- Type6 string
- IPv6 assignment mode for this gateway port interface
- Dns []string
- Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- Dns
Suffixes []string - DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- Gateway string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
- Gateway6 string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
- Ip string
- Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
- Ip6 string
- Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
- Netmask string
- Used only if
subnetis not specified innetworks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}") - Netmask6 string
- Used only if
subnetis not specified innetworks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}") - Network string
- Optional, the network to be used for mgmt
- Poser
Password string - Password used for PPPoE when
type==pppoe - Pppoe
Auth string - Authentication protocol used for PPPoE when
type==pppoe - Pppoe
Username string - Username used for PPPoE when
type==pppoe - Type string
- IPv4 assignment mode for this gateway port interface
- Type6 string
- IPv6 assignment mode for this gateway port interface
- dns list(string)
- Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- dns_
suffixes list(string) - DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- gateway string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
- gateway6 string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
- ip string
- Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
- ip6 string
- Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
- netmask string
- Used only if
subnetis not specified innetworks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}") - netmask6 string
- Used only if
subnetis not specified innetworks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}") - network string
- Optional, the network to be used for mgmt
- poser_
password string - Password used for PPPoE when
type==pppoe - pppoe_
auth string - Authentication protocol used for PPPoE when
type==pppoe - pppoe_
username string - Username used for PPPoE when
type==pppoe - type string
- IPv4 assignment mode for this gateway port interface
- type6 string
- IPv6 assignment mode for this gateway port interface
- dns List<String>
- Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- dns
Suffixes List<String> - DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- gateway String
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
- gateway6 String
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
- ip String
- Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
- ip6 String
- Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
- netmask String
- Used only if
subnetis not specified innetworks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}") - netmask6 String
- Used only if
subnetis not specified innetworks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}") - network String
- Optional, the network to be used for mgmt
- poser
Password String - Password used for PPPoE when
type==pppoe - pppoe
Auth String - Authentication protocol used for PPPoE when
type==pppoe - pppoe
Username String - Username used for PPPoE when
type==pppoe - type String
- IPv4 assignment mode for this gateway port interface
- type6 String
- IPv6 assignment mode for this gateway port interface
- dns string[]
- Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- dns
Suffixes string[] - DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- gateway string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
- gateway6 string
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
- ip string
- Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
- ip6 string
- Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
- netmask string
- Used only if
subnetis not specified innetworks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}") - netmask6 string
- Used only if
subnetis not specified innetworks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}") - network string
- Optional, the network to be used for mgmt
- poser
Password string - Password used for PPPoE when
type==pppoe - pppoe
Auth string - Authentication protocol used for PPPoE when
type==pppoe - pppoe
Username string - Username used for PPPoE when
type==pppoe - type string
- IPv4 assignment mode for this gateway port interface
- type6 string
- IPv6 assignment mode for this gateway port interface
- dns Sequence[str]
- Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- dns_
suffixes Sequence[str] - DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- gateway str
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
- gateway6 str
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
- ip str
- Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
- ip6 str
- Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
- netmask str
- Used only if
subnetis not specified innetworks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}") - netmask6 str
- Used only if
subnetis not specified innetworks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}") - network str
- Optional, the network to be used for mgmt
- poser_
password str - Password used for PPPoE when
type==pppoe - pppoe_
auth str - Authentication protocol used for PPPoE when
type==pppoe - pppoe_
username str - Username used for PPPoE when
type==pppoe - type str
- IPv4 assignment mode for this gateway port interface
- type6 str
- IPv6 assignment mode for this gateway port interface
- dns List<String>
- Resolver server IP addresses used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- dns
Suffixes List<String> - DNS search suffixes used by this interface, except on out-of-band interfaces such as vme, em0, or fxp0
- gateway String
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IP address (i.e. "192.168.1.1") or a Variable (i.e. "{{myvar}}")
- gateway6 String
- Except for out-of_band interface (vme/em0/fxp0). Interface Default Gateway IPv6 Address (i.e. "2001:db8::1") or a Variable (i.e. "{{myvar}}")
- ip String
- Interface IP address (i.e. "192.168.1.8") or a Variable (i.e. "{{myvar}}")
- ip6 String
- Interface IPv6 Address (i.e. "2001:db8::123") or a Variable (i.e. "{{myvar}}")
- netmask String
- Used only if
subnetis not specified innetworks. Interface Netmask (i.e. "/24") or a Variable (i.e. "{{myvar}}") - netmask6 String
- Used only if
subnetis not specified innetworks. Interface IPv6 Netmask (i.e. "/64") or a Variable (i.e. "{{myvar}}") - network String
- Optional, the network to be used for mgmt
- poser
Password String - Password used for PPPoE when
type==pppoe - pppoe
Auth String - Authentication protocol used for PPPoE when
type==pppoe - pppoe
Username String - Username used for PPPoE when
type==pppoe - type String
- IPv4 assignment mode for this gateway port interface
- type6 String
- IPv6 assignment mode for this gateway port interface
GatewaytemplatePortConfigTrafficShaping, GatewaytemplatePortConfigTrafficShapingArgs
- Class
Percentages List<int> - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- Enabled bool
- Whether traffic shaping is enabled
- Max
Tx intKbps - Maximum transmit bandwidth for the interface, in Kbps
- Class
Percentages []int - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- Enabled bool
- Whether traffic shaping is enabled
- Max
Tx intKbps - Maximum transmit bandwidth for the interface, in Kbps
- class_
percentages list(number) - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled bool
- Whether traffic shaping is enabled
- max_
tx_ numberkbps - Maximum transmit bandwidth for the interface, in Kbps
- class
Percentages List<Integer> - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled Boolean
- Whether traffic shaping is enabled
- max
Tx IntegerKbps - Maximum transmit bandwidth for the interface, in Kbps
- class
Percentages number[] - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled boolean
- Whether traffic shaping is enabled
- max
Tx numberKbps - Maximum transmit bandwidth for the interface, in Kbps
- class_
percentages Sequence[int] - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled bool
- Whether traffic shaping is enabled
- max_
tx_ intkbps - Maximum transmit bandwidth for the interface, in Kbps
- class
Percentages List<Number> - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled Boolean
- Whether traffic shaping is enabled
- max
Tx NumberKbps - Maximum transmit bandwidth for the interface, in Kbps
GatewaytemplatePortConfigVpnPaths, GatewaytemplatePortConfigVpnPathsArgs
- Bfd
Profile string - BFD profile used for this VPN path when the VPN
type==hubSpoke - Bfd
Use boolTunnel Mode - Only if the VPN
type==hubSpoke. Whether to use tunnel mode. SSR only - Preference int
- Only if the VPN
type==hubSpoke. For a given VPN, whenpath_selection.strategy==simple, the preference for a path (lower is preferred) - Role string
- Gateway role for this VPN path; valid values depend on the VPN
type - Traffic
Shaping Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Port Config Vpn Paths Traffic Shaping - Traffic shaping settings applied to this VPN path
- Bfd
Profile string - BFD profile used for this VPN path when the VPN
type==hubSpoke - Bfd
Use boolTunnel Mode - Only if the VPN
type==hubSpoke. Whether to use tunnel mode. SSR only - Preference int
- Only if the VPN
type==hubSpoke. For a given VPN, whenpath_selection.strategy==simple, the preference for a path (lower is preferred) - Role string
- Gateway role for this VPN path; valid values depend on the VPN
type - Traffic
Shaping GatewaytemplatePort Config Vpn Paths Traffic Shaping - Traffic shaping settings applied to this VPN path
- bfd_
profile string - BFD profile used for this VPN path when the VPN
type==hubSpoke - bfd_
use_ booltunnel_ mode - Only if the VPN
type==hubSpoke. Whether to use tunnel mode. SSR only - preference number
- Only if the VPN
type==hubSpoke. For a given VPN, whenpath_selection.strategy==simple, the preference for a path (lower is preferred) - role string
- Gateway role for this VPN path; valid values depend on the VPN
type - traffic_
shaping object - Traffic shaping settings applied to this VPN path
- bfd
Profile String - BFD profile used for this VPN path when the VPN
type==hubSpoke - bfd
Use BooleanTunnel Mode - Only if the VPN
type==hubSpoke. Whether to use tunnel mode. SSR only - preference Integer
- Only if the VPN
type==hubSpoke. For a given VPN, whenpath_selection.strategy==simple, the preference for a path (lower is preferred) - role String
- Gateway role for this VPN path; valid values depend on the VPN
type - traffic
Shaping GatewaytemplatePort Config Vpn Paths Traffic Shaping - Traffic shaping settings applied to this VPN path
- bfd
Profile string - BFD profile used for this VPN path when the VPN
type==hubSpoke - bfd
Use booleanTunnel Mode - Only if the VPN
type==hubSpoke. Whether to use tunnel mode. SSR only - preference number
- Only if the VPN
type==hubSpoke. For a given VPN, whenpath_selection.strategy==simple, the preference for a path (lower is preferred) - role string
- Gateway role for this VPN path; valid values depend on the VPN
type - traffic
Shaping GatewaytemplatePort Config Vpn Paths Traffic Shaping - Traffic shaping settings applied to this VPN path
- bfd_
profile str - BFD profile used for this VPN path when the VPN
type==hubSpoke - bfd_
use_ booltunnel_ mode - Only if the VPN
type==hubSpoke. Whether to use tunnel mode. SSR only - preference int
- Only if the VPN
type==hubSpoke. For a given VPN, whenpath_selection.strategy==simple, the preference for a path (lower is preferred) - role str
- Gateway role for this VPN path; valid values depend on the VPN
type - traffic_
shaping GatewaytemplatePort Config Vpn Paths Traffic Shaping - Traffic shaping settings applied to this VPN path
- bfd
Profile String - BFD profile used for this VPN path when the VPN
type==hubSpoke - bfd
Use BooleanTunnel Mode - Only if the VPN
type==hubSpoke. Whether to use tunnel mode. SSR only - preference Number
- Only if the VPN
type==hubSpoke. For a given VPN, whenpath_selection.strategy==simple, the preference for a path (lower is preferred) - role String
- Gateway role for this VPN path; valid values depend on the VPN
type - traffic
Shaping Property Map - Traffic shaping settings applied to this VPN path
GatewaytemplatePortConfigVpnPathsTrafficShaping, GatewaytemplatePortConfigVpnPathsTrafficShapingArgs
- Class
Percentages List<int> - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- Enabled bool
- Whether traffic shaping is enabled
- Max
Tx intKbps - Maximum transmit bandwidth for the interface, in Kbps
- Class
Percentages []int - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- Enabled bool
- Whether traffic shaping is enabled
- Max
Tx intKbps - Maximum transmit bandwidth for the interface, in Kbps
- class_
percentages list(number) - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled bool
- Whether traffic shaping is enabled
- max_
tx_ numberkbps - Maximum transmit bandwidth for the interface, in Kbps
- class
Percentages List<Integer> - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled Boolean
- Whether traffic shaping is enabled
- max
Tx IntegerKbps - Maximum transmit bandwidth for the interface, in Kbps
- class
Percentages number[] - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled boolean
- Whether traffic shaping is enabled
- max
Tx numberKbps - Maximum transmit bandwidth for the interface, in Kbps
- class_
percentages Sequence[int] - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled bool
- Whether traffic shaping is enabled
- max_
tx_ intkbps - Maximum transmit bandwidth for the interface, in Kbps
- class
Percentages List<Number> - Traffic class bandwidth percentages for high, medium, low, and best-effort queues
- enabled Boolean
- Whether traffic shaping is enabled
- max
Tx NumberKbps - Maximum transmit bandwidth for the interface, in Kbps
GatewaytemplatePortConfigWanExtraRoutes, GatewaytemplatePortConfigWanExtraRoutesArgs
- Via string
- IPv4 next-hop address for this WAN extra route
- Via string
- IPv4 next-hop address for this WAN extra route
- via string
- IPv4 next-hop address for this WAN extra route
- via String
- IPv4 next-hop address for this WAN extra route
- via string
- IPv4 next-hop address for this WAN extra route
- via str
- IPv4 next-hop address for this WAN extra route
- via String
- IPv4 next-hop address for this WAN extra route
GatewaytemplatePortConfigWanExtraRoutes6, GatewaytemplatePortConfigWanExtraRoutes6Args
- Via string
- IPv6 next-hop address for this WAN extra route
- Via string
- IPv6 next-hop address for this WAN extra route
- via string
- IPv6 next-hop address for this WAN extra route
- via String
- IPv6 next-hop address for this WAN extra route
- via string
- IPv6 next-hop address for this WAN extra route
- via str
- IPv6 next-hop address for this WAN extra route
- via String
- IPv6 next-hop address for this WAN extra route
GatewaytemplatePortConfigWanProbeOverride, GatewaytemplatePortConfigWanProbeOverrideArgs
- Ip6s List<string>
- List of IPv6 probe host addresses used by this WAN override
- Ips List<string>
- List of IPv4 probe host addresses used by this WAN override
- Probe
Profile string - WAN probe profile used for health checks on this port
- Ip6s []string
- List of IPv6 probe host addresses used by this WAN override
- Ips []string
- List of IPv4 probe host addresses used by this WAN override
- Probe
Profile string - WAN probe profile used for health checks on this port
- ip6s list(string)
- List of IPv6 probe host addresses used by this WAN override
- ips list(string)
- List of IPv4 probe host addresses used by this WAN override
- probe_
profile string - WAN probe profile used for health checks on this port
- ip6s List<String>
- List of IPv6 probe host addresses used by this WAN override
- ips List<String>
- List of IPv4 probe host addresses used by this WAN override
- probe
Profile String - WAN probe profile used for health checks on this port
- ip6s string[]
- List of IPv6 probe host addresses used by this WAN override
- ips string[]
- List of IPv4 probe host addresses used by this WAN override
- probe
Profile string - WAN probe profile used for health checks on this port
- ip6s Sequence[str]
- List of IPv6 probe host addresses used by this WAN override
- ips Sequence[str]
- List of IPv4 probe host addresses used by this WAN override
- probe_
profile str - WAN probe profile used for health checks on this port
- ip6s List<String>
- List of IPv6 probe host addresses used by this WAN override
- ips List<String>
- List of IPv4 probe host addresses used by this WAN override
- probe
Profile String - WAN probe profile used for health checks on this port
GatewaytemplatePortConfigWanSourceNat, GatewaytemplatePortConfigWanSourceNatArgs
GatewaytemplateRoutingPolicies, GatewaytemplateRoutingPoliciesArgs
- Terms
List<Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Routing Policies Term> - Ordered terms evaluated by this gateway routing policy
- Terms
[]Gatewaytemplate
Routing Policies Term - Ordered terms evaluated by this gateway routing policy
- terms list(object)
- Ordered terms evaluated by this gateway routing policy
- terms
List<Gatewaytemplate
Routing Policies Term> - Ordered terms evaluated by this gateway routing policy
- terms
Gatewaytemplate
Routing Policies Term[] - Ordered terms evaluated by this gateway routing policy
- terms
Sequence[Gatewaytemplate
Routing Policies Term] - Ordered terms evaluated by this gateway routing policy
- terms List<Property Map>
- Ordered terms evaluated by this gateway routing policy
GatewaytemplateRoutingPoliciesTerm, GatewaytemplateRoutingPoliciesTermArgs
- Actions
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Routing Policies Term Actions - Policy actions applied when this routing policy term matches
- Matching
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Routing Policies Term Matching - Route match criteria that must be satisfied before actions are applied
- Actions
Gatewaytemplate
Routing Policies Term Actions - Policy actions applied when this routing policy term matches
- Matching
Gatewaytemplate
Routing Policies Term Matching - Route match criteria that must be satisfied before actions are applied
- actions
Gatewaytemplate
Routing Policies Term Actions - Policy actions applied when this routing policy term matches
- matching
Gatewaytemplate
Routing Policies Term Matching - Route match criteria that must be satisfied before actions are applied
- actions
Gatewaytemplate
Routing Policies Term Actions - Policy actions applied when this routing policy term matches
- matching
Gatewaytemplate
Routing Policies Term Matching - Route match criteria that must be satisfied before actions are applied
- actions
Gatewaytemplate
Routing Policies Term Actions - Policy actions applied when this routing policy term matches
- matching
Gatewaytemplate
Routing Policies Term Matching - Route match criteria that must be satisfied before actions are applied
- actions Property Map
- Policy actions applied when this routing policy term matches
- matching Property Map
- Route match criteria that must be satisfied before actions are applied
GatewaytemplateRoutingPoliciesTermActions, GatewaytemplateRoutingPoliciesTermActionsArgs
- Accept bool
- Whether to accept routes that match this term
- Add
Communities List<string> - BGP communities to add to routes that match this term
- Add
Target List<string>Vrfs - SSR target VRFs to add when leaking routes from hub to spoke
- Communities List<string>
- BGP communities to set when this term is used as an export policy
- Exclude
As List<string>Paths - AS path values to exclude when this term is used as an export policy
- Exclude
Communities List<string> - BGP communities to exclude from routes that match this term
- Export
Communities List<string> - BGP communities allowed for export when this term is used as an export policy
- Local
Preference string - Preference value to set when this term is used as an import policy
- Prepend
As List<string>Paths - AS path values to prepend when this term is used as an export policy
- Accept bool
- Whether to accept routes that match this term
- Add
Communities []string - BGP communities to add to routes that match this term
- Add
Target []stringVrfs - SSR target VRFs to add when leaking routes from hub to spoke
- Communities []string
- BGP communities to set when this term is used as an export policy
- Exclude
As []stringPaths - AS path values to exclude when this term is used as an export policy
- Exclude
Communities []string - BGP communities to exclude from routes that match this term
- Export
Communities []string - BGP communities allowed for export when this term is used as an export policy
- Local
Preference string - Preference value to set when this term is used as an import policy
- Prepend
As []stringPaths - AS path values to prepend when this term is used as an export policy
- accept bool
- Whether to accept routes that match this term
- add_
communities list(string) - BGP communities to add to routes that match this term
- add_
target_ list(string)vrfs - SSR target VRFs to add when leaking routes from hub to spoke
- communities list(string)
- BGP communities to set when this term is used as an export policy
- exclude_
as_ list(string)paths - AS path values to exclude when this term is used as an export policy
- exclude_
communities list(string) - BGP communities to exclude from routes that match this term
- export_
communities list(string) - BGP communities allowed for export when this term is used as an export policy
- local_
preference string - Preference value to set when this term is used as an import policy
- prepend_
as_ list(string)paths - AS path values to prepend when this term is used as an export policy
- accept Boolean
- Whether to accept routes that match this term
- add
Communities List<String> - BGP communities to add to routes that match this term
- add
Target List<String>Vrfs - SSR target VRFs to add when leaking routes from hub to spoke
- communities List<String>
- BGP communities to set when this term is used as an export policy
- exclude
As List<String>Paths - AS path values to exclude when this term is used as an export policy
- exclude
Communities List<String> - BGP communities to exclude from routes that match this term
- export
Communities List<String> - BGP communities allowed for export when this term is used as an export policy
- local
Preference String - Preference value to set when this term is used as an import policy
- prepend
As List<String>Paths - AS path values to prepend when this term is used as an export policy
- accept boolean
- Whether to accept routes that match this term
- add
Communities string[] - BGP communities to add to routes that match this term
- add
Target string[]Vrfs - SSR target VRFs to add when leaking routes from hub to spoke
- communities string[]
- BGP communities to set when this term is used as an export policy
- exclude
As string[]Paths - AS path values to exclude when this term is used as an export policy
- exclude
Communities string[] - BGP communities to exclude from routes that match this term
- export
Communities string[] - BGP communities allowed for export when this term is used as an export policy
- local
Preference string - Preference value to set when this term is used as an import policy
- prepend
As string[]Paths - AS path values to prepend when this term is used as an export policy
- accept bool
- Whether to accept routes that match this term
- add_
communities Sequence[str] - BGP communities to add to routes that match this term
- add_
target_ Sequence[str]vrfs - SSR target VRFs to add when leaking routes from hub to spoke
- communities Sequence[str]
- BGP communities to set when this term is used as an export policy
- exclude_
as_ Sequence[str]paths - AS path values to exclude when this term is used as an export policy
- exclude_
communities Sequence[str] - BGP communities to exclude from routes that match this term
- export_
communities Sequence[str] - BGP communities allowed for export when this term is used as an export policy
- local_
preference str - Preference value to set when this term is used as an import policy
- prepend_
as_ Sequence[str]paths - AS path values to prepend when this term is used as an export policy
- accept Boolean
- Whether to accept routes that match this term
- add
Communities List<String> - BGP communities to add to routes that match this term
- add
Target List<String>Vrfs - SSR target VRFs to add when leaking routes from hub to spoke
- communities List<String>
- BGP communities to set when this term is used as an export policy
- exclude
As List<String>Paths - AS path values to exclude when this term is used as an export policy
- exclude
Communities List<String> - BGP communities to exclude from routes that match this term
- export
Communities List<String> - BGP communities allowed for export when this term is used as an export policy
- local
Preference String - Preference value to set when this term is used as an import policy
- prepend
As List<String>Paths - AS path values to prepend when this term is used as an export policy
GatewaytemplateRoutingPoliciesTermMatching, GatewaytemplateRoutingPoliciesTermMatchingArgs
- As
Paths List<string> - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - Communities List<string>
- BGP communities that routes must match
- Networks List<string>
- Configured network names that routes must match
- Prefixes List<string>
- Route prefixes that routes must match
- Protocols List<string>
- enum:
aggregate,bgp,direct,ospf,static(SRX Only) - Route
Exists Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Routing Policies Term Matching Route Exists - Existing route condition that must be satisfied before this term matches
- Vpn
Neighbor List<string>Macs - Overlay neighbor MAC addresses used as match criteria for BGP sessions with
via==vpn - Vpn
Path Pulumi.Sla Juniper Mist. Org. Inputs. Gatewaytemplate Routing Policies Term Matching Vpn Path Sla - SLA thresholds used when matching a VPN path
- Vpn
Paths List<string> - Overlay path names used as match criteria for BGP sessions with
via==vpn
- As
Paths []string - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - Communities []string
- BGP communities that routes must match
- Networks []string
- Configured network names that routes must match
- Prefixes []string
- Route prefixes that routes must match
- Protocols []string
- enum:
aggregate,bgp,direct,ospf,static(SRX Only) - Route
Exists GatewaytemplateRouting Policies Term Matching Route Exists - Existing route condition that must be satisfied before this term matches
- Vpn
Neighbor []stringMacs - Overlay neighbor MAC addresses used as match criteria for BGP sessions with
via==vpn - Vpn
Path GatewaytemplateSla Routing Policies Term Matching Vpn Path Sla - SLA thresholds used when matching a VPN path
- Vpn
Paths []string - Overlay path names used as match criteria for BGP sessions with
via==vpn
- as_
paths list(string) - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - communities list(string)
- BGP communities that routes must match
- networks list(string)
- Configured network names that routes must match
- prefixes list(string)
- Route prefixes that routes must match
- protocols list(string)
- enum:
aggregate,bgp,direct,ospf,static(SRX Only) - route_
exists object - Existing route condition that must be satisfied before this term matches
- vpn_
neighbor_ list(string)macs - Overlay neighbor MAC addresses used as match criteria for BGP sessions with
via==vpn - vpn_
path_ objectsla - SLA thresholds used when matching a VPN path
- vpn_
paths list(string) - Overlay path names used as match criteria for BGP sessions with
via==vpn
- as
Paths List<String> - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - communities List<String>
- BGP communities that routes must match
- networks List<String>
- Configured network names that routes must match
- prefixes List<String>
- Route prefixes that routes must match
- protocols List<String>
- enum:
aggregate,bgp,direct,ospf,static(SRX Only) - route
Exists GatewaytemplateRouting Policies Term Matching Route Exists - Existing route condition that must be satisfied before this term matches
- vpn
Neighbor List<String>Macs - Overlay neighbor MAC addresses used as match criteria for BGP sessions with
via==vpn - vpn
Path GatewaytemplateSla Routing Policies Term Matching Vpn Path Sla - SLA thresholds used when matching a VPN path
- vpn
Paths List<String> - Overlay path names used as match criteria for BGP sessions with
via==vpn
- as
Paths string[] - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - communities string[]
- BGP communities that routes must match
- networks string[]
- Configured network names that routes must match
- prefixes string[]
- Route prefixes that routes must match
- protocols string[]
- enum:
aggregate,bgp,direct,ospf,static(SRX Only) - route
Exists GatewaytemplateRouting Policies Term Matching Route Exists - Existing route condition that must be satisfied before this term matches
- vpn
Neighbor string[]Macs - Overlay neighbor MAC addresses used as match criteria for BGP sessions with
via==vpn - vpn
Path GatewaytemplateSla Routing Policies Term Matching Vpn Path Sla - SLA thresholds used when matching a VPN path
- vpn
Paths string[] - Overlay path names used as match criteria for BGP sessions with
via==vpn
- as_
paths Sequence[str] - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - communities Sequence[str]
- BGP communities that routes must match
- networks Sequence[str]
- Configured network names that routes must match
- prefixes Sequence[str]
- Route prefixes that routes must match
- protocols Sequence[str]
- enum:
aggregate,bgp,direct,ospf,static(SRX Only) - route_
exists GatewaytemplateRouting Policies Term Matching Route Exists - Existing route condition that must be satisfied before this term matches
- vpn_
neighbor_ Sequence[str]macs - Overlay neighbor MAC addresses used as match criteria for BGP sessions with
via==vpn - vpn_
path_ Gatewaytemplatesla Routing Policies Term Matching Vpn Path Sla - SLA thresholds used when matching a VPN path
- vpn_
paths Sequence[str] - Overlay path names used as match criteria for BGP sessions with
via==vpn
- as
Paths List<String> - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - communities List<String>
- BGP communities that routes must match
- networks List<String>
- Configured network names that routes must match
- prefixes List<String>
- Route prefixes that routes must match
- protocols List<String>
- enum:
aggregate,bgp,direct,ospf,static(SRX Only) - route
Exists Property Map - Existing route condition that must be satisfied before this term matches
- vpn
Neighbor List<String>Macs - Overlay neighbor MAC addresses used as match criteria for BGP sessions with
via==vpn - vpn
Path Property MapSla - SLA thresholds used when matching a VPN path
- vpn
Paths List<String> - Overlay path names used as match criteria for BGP sessions with
via==vpn
GatewaytemplateRoutingPoliciesTermMatchingRouteExists, GatewaytemplateRoutingPoliciesTermMatchingRouteExistsArgs
GatewaytemplateRoutingPoliciesTermMatchingVpnPathSla, GatewaytemplateRoutingPoliciesTermMatchingVpnPathSlaArgs
- Max
Jitter int - Maximum jitter threshold allowed for the VPN path
- Max
Latency int - Maximum latency threshold allowed for the VPN path
- Max
Loss int - Maximum packet-loss threshold allowed for the VPN path
- Max
Jitter int - Maximum jitter threshold allowed for the VPN path
- Max
Latency int - Maximum latency threshold allowed for the VPN path
- Max
Loss int - Maximum packet-loss threshold allowed for the VPN path
- max_
jitter number - Maximum jitter threshold allowed for the VPN path
- max_
latency number - Maximum latency threshold allowed for the VPN path
- max_
loss number - Maximum packet-loss threshold allowed for the VPN path
- max
Jitter Integer - Maximum jitter threshold allowed for the VPN path
- max
Latency Integer - Maximum latency threshold allowed for the VPN path
- max
Loss Integer - Maximum packet-loss threshold allowed for the VPN path
- max
Jitter number - Maximum jitter threshold allowed for the VPN path
- max
Latency number - Maximum latency threshold allowed for the VPN path
- max
Loss number - Maximum packet-loss threshold allowed for the VPN path
- max_
jitter int - Maximum jitter threshold allowed for the VPN path
- max_
latency int - Maximum latency threshold allowed for the VPN path
- max_
loss int - Maximum packet-loss threshold allowed for the VPN path
- max
Jitter Number - Maximum jitter threshold allowed for the VPN path
- max
Latency Number - Maximum latency threshold allowed for the VPN path
- max
Loss Number - Maximum packet-loss threshold allowed for the VPN path
GatewaytemplateServicePolicy, GatewaytemplateServicePolicyArgs
- Action string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy action). enum:allow,deny - Antivirus
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Service Policy Antivirus - Malware and virus inspection settings applied by this service policy
- Appqoe
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Service Policy Appqoe - Application QoE settings applied by this service policy
- Ewfs
List<Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Service Policy Ewf> - Enhanced web filtering rules applied by this service policy
- Idp
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Service Policy Idp - Intrusion detection and prevention settings applied by this service policy
- Local
Routing bool - Whether the policy permits access within the same VRF
- Name string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy name) - Path
Preference string - By default, we derive all paths available and use them. Optionally, you can customize by using
pathPreference - Servicepolicy
Id string - Organization-level service policy identifier used to link and override selected attributes
- Services List<string>
- Required when
servicepolicyIdis not defined. List of Applications / Destinations - Skyatp
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Service Policy Skyatp - Threat inspection settings provided by Sky ATP for this service policy
- Ssl
Proxy Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Service Policy Ssl Proxy - TLS inspection settings applied by this service policy
- Syslog
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Service Policy Syslog - Remote logging settings applied by this service policy
- Tenants List<string>
- Required when
servicepolicyIdis not defined. List of Networks / Users
- Action string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy action). enum:allow,deny - Antivirus
Gatewaytemplate
Service Policy Antivirus - Malware and virus inspection settings applied by this service policy
- Appqoe
Gatewaytemplate
Service Policy Appqoe - Application QoE settings applied by this service policy
- Ewfs
[]Gatewaytemplate
Service Policy Ewf - Enhanced web filtering rules applied by this service policy
- Idp
Gatewaytemplate
Service Policy Idp - Intrusion detection and prevention settings applied by this service policy
- Local
Routing bool - Whether the policy permits access within the same VRF
- Name string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy name) - Path
Preference string - By default, we derive all paths available and use them. Optionally, you can customize by using
pathPreference - Servicepolicy
Id string - Organization-level service policy identifier used to link and override selected attributes
- Services []string
- Required when
servicepolicyIdis not defined. List of Applications / Destinations - Skyatp
Gatewaytemplate
Service Policy Skyatp - Threat inspection settings provided by Sky ATP for this service policy
- Ssl
Proxy GatewaytemplateService Policy Ssl Proxy - TLS inspection settings applied by this service policy
- Syslog
Gatewaytemplate
Service Policy Syslog - Remote logging settings applied by this service policy
- Tenants []string
- Required when
servicepolicyIdis not defined. List of Networks / Users
- action string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy action). enum:allow,deny - antivirus object
- Malware and virus inspection settings applied by this service policy
- appqoe object
- Application QoE settings applied by this service policy
- ewfs list(object)
- Enhanced web filtering rules applied by this service policy
- idp object
- Intrusion detection and prevention settings applied by this service policy
- local_
routing bool - Whether the policy permits access within the same VRF
- name string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy name) - path_
preference string - By default, we derive all paths available and use them. Optionally, you can customize by using
pathPreference - servicepolicy_
id string - Organization-level service policy identifier used to link and override selected attributes
- services list(string)
- Required when
servicepolicyIdis not defined. List of Applications / Destinations - skyatp object
- Threat inspection settings provided by Sky ATP for this service policy
- ssl_
proxy object - TLS inspection settings applied by this service policy
- syslog object
- Remote logging settings applied by this service policy
- tenants list(string)
- Required when
servicepolicyIdis not defined. List of Networks / Users
- action String
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy action). enum:allow,deny - antivirus
Gatewaytemplate
Service Policy Antivirus - Malware and virus inspection settings applied by this service policy
- appqoe
Gatewaytemplate
Service Policy Appqoe - Application QoE settings applied by this service policy
- ewfs
List<Gatewaytemplate
Service Policy Ewf> - Enhanced web filtering rules applied by this service policy
- idp
Gatewaytemplate
Service Policy Idp - Intrusion detection and prevention settings applied by this service policy
- local
Routing Boolean - Whether the policy permits access within the same VRF
- name String
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy name) - path
Preference String - By default, we derive all paths available and use them. Optionally, you can customize by using
pathPreference - servicepolicy
Id String - Organization-level service policy identifier used to link and override selected attributes
- services List<String>
- Required when
servicepolicyIdis not defined. List of Applications / Destinations - skyatp
Gatewaytemplate
Service Policy Skyatp - Threat inspection settings provided by Sky ATP for this service policy
- ssl
Proxy GatewaytemplateService Policy Ssl Proxy - TLS inspection settings applied by this service policy
- syslog
Gatewaytemplate
Service Policy Syslog - Remote logging settings applied by this service policy
- tenants List<String>
- Required when
servicepolicyIdis not defined. List of Networks / Users
- action string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy action). enum:allow,deny - antivirus
Gatewaytemplate
Service Policy Antivirus - Malware and virus inspection settings applied by this service policy
- appqoe
Gatewaytemplate
Service Policy Appqoe - Application QoE settings applied by this service policy
- ewfs
Gatewaytemplate
Service Policy Ewf[] - Enhanced web filtering rules applied by this service policy
- idp
Gatewaytemplate
Service Policy Idp - Intrusion detection and prevention settings applied by this service policy
- local
Routing boolean - Whether the policy permits access within the same VRF
- name string
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy name) - path
Preference string - By default, we derive all paths available and use them. Optionally, you can customize by using
pathPreference - servicepolicy
Id string - Organization-level service policy identifier used to link and override selected attributes
- services string[]
- Required when
servicepolicyIdis not defined. List of Applications / Destinations - skyatp
Gatewaytemplate
Service Policy Skyatp - Threat inspection settings provided by Sky ATP for this service policy
- ssl
Proxy GatewaytemplateService Policy Ssl Proxy - TLS inspection settings applied by this service policy
- syslog
Gatewaytemplate
Service Policy Syslog - Remote logging settings applied by this service policy
- tenants string[]
- Required when
servicepolicyIdis not defined. List of Networks / Users
- action str
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy action). enum:allow,deny - antivirus
Gatewaytemplate
Service Policy Antivirus - Malware and virus inspection settings applied by this service policy
- appqoe
Gatewaytemplate
Service Policy Appqoe - Application QoE settings applied by this service policy
- ewfs
Sequence[Gatewaytemplate
Service Policy Ewf] - Enhanced web filtering rules applied by this service policy
- idp
Gatewaytemplate
Service Policy Idp - Intrusion detection and prevention settings applied by this service policy
- local_
routing bool - Whether the policy permits access within the same VRF
- name str
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy name) - path_
preference str - By default, we derive all paths available and use them. Optionally, you can customize by using
pathPreference - servicepolicy_
id str - Organization-level service policy identifier used to link and override selected attributes
- services Sequence[str]
- Required when
servicepolicyIdis not defined. List of Applications / Destinations - skyatp
Gatewaytemplate
Service Policy Skyatp - Threat inspection settings provided by Sky ATP for this service policy
- ssl_
proxy GatewaytemplateService Policy Ssl Proxy - TLS inspection settings applied by this service policy
- syslog
Gatewaytemplate
Service Policy Syslog - Remote logging settings applied by this service policy
- tenants Sequence[str]
- Required when
servicepolicyIdis not defined. List of Networks / Users
- action String
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy action). enum:allow,deny - antivirus Property Map
- Malware and virus inspection settings applied by this service policy
- appqoe Property Map
- Application QoE settings applied by this service policy
- ewfs List<Property Map>
- Enhanced web filtering rules applied by this service policy
- idp Property Map
- Intrusion detection and prevention settings applied by this service policy
- local
Routing Boolean - Whether the policy permits access within the same VRF
- name String
- Required when
servicepolicyIdis not defined, optional otherwise (override the servicepolicy name) - path
Preference String - By default, we derive all paths available and use them. Optionally, you can customize by using
pathPreference - servicepolicy
Id String - Organization-level service policy identifier used to link and override selected attributes
- services List<String>
- Required when
servicepolicyIdis not defined. List of Applications / Destinations - skyatp Property Map
- Threat inspection settings provided by Sky ATP for this service policy
- ssl
Proxy Property Map - TLS inspection settings applied by this service policy
- syslog Property Map
- Remote logging settings applied by this service policy
- tenants List<String>
- Required when
servicepolicyIdis not defined. List of Networks / Users
GatewaytemplateServicePolicyAntivirus, GatewaytemplateServicePolicyAntivirusArgs
- Avprofile
Id string - Organization-level antivirus profile ID; takes precedence over inline
profilesettings - Enabled bool
- Whether antivirus inspection is enabled for the service policy
- Profile string
- Antivirus profile name to apply, such as
default,noftp,httponly, or an AV profile key
- Avprofile
Id string - Organization-level antivirus profile ID; takes precedence over inline
profilesettings - Enabled bool
- Whether antivirus inspection is enabled for the service policy
- Profile string
- Antivirus profile name to apply, such as
default,noftp,httponly, or an AV profile key
- avprofile_
id string - Organization-level antivirus profile ID; takes precedence over inline
profilesettings - enabled bool
- Whether antivirus inspection is enabled for the service policy
- profile string
- Antivirus profile name to apply, such as
default,noftp,httponly, or an AV profile key
- avprofile
Id String - Organization-level antivirus profile ID; takes precedence over inline
profilesettings - enabled Boolean
- Whether antivirus inspection is enabled for the service policy
- profile String
- Antivirus profile name to apply, such as
default,noftp,httponly, or an AV profile key
- avprofile
Id string - Organization-level antivirus profile ID; takes precedence over inline
profilesettings - enabled boolean
- Whether antivirus inspection is enabled for the service policy
- profile string
- Antivirus profile name to apply, such as
default,noftp,httponly, or an AV profile key
- avprofile_
id str - Organization-level antivirus profile ID; takes precedence over inline
profilesettings - enabled bool
- Whether antivirus inspection is enabled for the service policy
- profile str
- Antivirus profile name to apply, such as
default,noftp,httponly, or an AV profile key
- avprofile
Id String - Organization-level antivirus profile ID; takes precedence over inline
profilesettings - enabled Boolean
- Whether antivirus inspection is enabled for the service policy
- profile String
- Antivirus profile name to apply, such as
default,noftp,httponly, or an AV profile key
GatewaytemplateServicePolicyAppqoe, GatewaytemplateServicePolicyAppqoeArgs
- Enabled bool
- Whether application QoE is enabled for the service policy
- Enabled bool
- Whether application QoE is enabled for the service policy
- enabled bool
- Whether application QoE is enabled for the service policy
- enabled Boolean
- Whether application QoE is enabled for the service policy
- enabled boolean
- Whether application QoE is enabled for the service policy
- enabled bool
- Whether application QoE is enabled for the service policy
- enabled Boolean
- Whether application QoE is enabled for the service policy
GatewaytemplateServicePolicyEwf, GatewaytemplateServicePolicyEwfArgs
- Alert
Only bool - Whether matching enhanced web filtering traffic is logged without being blocked
- Block
Message string - Message returned when enhanced web filtering blocks a request
- Enabled bool
- Whether this enhanced web filtering rule is enabled
- Profile string
- Enhanced web filtering profile applied by this rule
- Alert
Only bool - Whether matching enhanced web filtering traffic is logged without being blocked
- Block
Message string - Message returned when enhanced web filtering blocks a request
- Enabled bool
- Whether this enhanced web filtering rule is enabled
- Profile string
- Enhanced web filtering profile applied by this rule
- alert_
only bool - Whether matching enhanced web filtering traffic is logged without being blocked
- block_
message string - Message returned when enhanced web filtering blocks a request
- enabled bool
- Whether this enhanced web filtering rule is enabled
- profile string
- Enhanced web filtering profile applied by this rule
- alert
Only Boolean - Whether matching enhanced web filtering traffic is logged without being blocked
- block
Message String - Message returned when enhanced web filtering blocks a request
- enabled Boolean
- Whether this enhanced web filtering rule is enabled
- profile String
- Enhanced web filtering profile applied by this rule
- alert
Only boolean - Whether matching enhanced web filtering traffic is logged without being blocked
- block
Message string - Message returned when enhanced web filtering blocks a request
- enabled boolean
- Whether this enhanced web filtering rule is enabled
- profile string
- Enhanced web filtering profile applied by this rule
- alert_
only bool - Whether matching enhanced web filtering traffic is logged without being blocked
- block_
message str - Message returned when enhanced web filtering blocks a request
- enabled bool
- Whether this enhanced web filtering rule is enabled
- profile str
- Enhanced web filtering profile applied by this rule
- alert
Only Boolean - Whether matching enhanced web filtering traffic is logged without being blocked
- block
Message String - Message returned when enhanced web filtering blocks a request
- enabled Boolean
- Whether this enhanced web filtering rule is enabled
- profile String
- Enhanced web filtering profile applied by this rule
GatewaytemplateServicePolicyIdp, GatewaytemplateServicePolicyIdpArgs
- Alert
Only bool - Whether to alert without enforcing IDP prevention actions
- Enabled bool
- Whether IDP inspection is enabled for the policy
- Idpprofile
Id string - org_level IDP Profile can be used, this takes precedence over
profile - Profile string
- enum:
Custom,strict(default),standardor keys from idp_profiles
- Alert
Only bool - Whether to alert without enforcing IDP prevention actions
- Enabled bool
- Whether IDP inspection is enabled for the policy
- Idpprofile
Id string - org_level IDP Profile can be used, this takes precedence over
profile - Profile string
- enum:
Custom,strict(default),standardor keys from idp_profiles
- alert_
only bool - Whether to alert without enforcing IDP prevention actions
- enabled bool
- Whether IDP inspection is enabled for the policy
- idpprofile_
id string - org_level IDP Profile can be used, this takes precedence over
profile - profile string
- enum:
Custom,strict(default),standardor keys from idp_profiles
- alert
Only Boolean - Whether to alert without enforcing IDP prevention actions
- enabled Boolean
- Whether IDP inspection is enabled for the policy
- idpprofile
Id String - org_level IDP Profile can be used, this takes precedence over
profile - profile String
- enum:
Custom,strict(default),standardor keys from idp_profiles
- alert
Only boolean - Whether to alert without enforcing IDP prevention actions
- enabled boolean
- Whether IDP inspection is enabled for the policy
- idpprofile
Id string - org_level IDP Profile can be used, this takes precedence over
profile - profile string
- enum:
Custom,strict(default),standardor keys from idp_profiles
- alert_
only bool - Whether to alert without enforcing IDP prevention actions
- enabled bool
- Whether IDP inspection is enabled for the policy
- idpprofile_
id str - org_level IDP Profile can be used, this takes precedence over
profile - profile str
- enum:
Custom,strict(default),standardor keys from idp_profiles
- alert
Only Boolean - Whether to alert without enforcing IDP prevention actions
- enabled Boolean
- Whether IDP inspection is enabled for the policy
- idpprofile
Id String - org_level IDP Profile can be used, this takes precedence over
profile - profile String
- enum:
Custom,strict(default),standardor keys from idp_profiles
GatewaytemplateServicePolicySkyatp, GatewaytemplateServicePolicySkyatpArgs
- Dns
Dga Pulumi.Detection Juniper Mist. Org. Inputs. Gatewaytemplate Service Policy Skyatp Dns Dga Detection - Detection settings for DNS DGA threats provided by Sky ATP
- Dns
Tunnel Pulumi.Detection Juniper Mist. Org. Inputs. Gatewaytemplate Service Policy Skyatp Dns Tunnel Detection - Detection settings for DNS tunneling threats provided by Sky ATP
- Http
Inspection Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Service Policy Skyatp Http Inspection - Web traffic inspection settings provided by Sky ATP
- Iot
Device Pulumi.Policy Juniper Mist. Org. Inputs. Gatewaytemplate Service Policy Skyatp Iot Device Policy - Device threat policy settings provided by Sky ATP for IoT clients
- Dns
Dga GatewaytemplateDetection Service Policy Skyatp Dns Dga Detection - Detection settings for DNS DGA threats provided by Sky ATP
- Dns
Tunnel GatewaytemplateDetection Service Policy Skyatp Dns Tunnel Detection - Detection settings for DNS tunneling threats provided by Sky ATP
- Http
Inspection GatewaytemplateService Policy Skyatp Http Inspection - Web traffic inspection settings provided by Sky ATP
- Iot
Device GatewaytemplatePolicy Service Policy Skyatp Iot Device Policy - Device threat policy settings provided by Sky ATP for IoT clients
- dns_
dga_ objectdetection - Detection settings for DNS DGA threats provided by Sky ATP
- dns_
tunnel_ objectdetection - Detection settings for DNS tunneling threats provided by Sky ATP
- http_
inspection object - Web traffic inspection settings provided by Sky ATP
- iot_
device_ objectpolicy - Device threat policy settings provided by Sky ATP for IoT clients
- dns
Dga GatewaytemplateDetection Service Policy Skyatp Dns Dga Detection - Detection settings for DNS DGA threats provided by Sky ATP
- dns
Tunnel GatewaytemplateDetection Service Policy Skyatp Dns Tunnel Detection - Detection settings for DNS tunneling threats provided by Sky ATP
- http
Inspection GatewaytemplateService Policy Skyatp Http Inspection - Web traffic inspection settings provided by Sky ATP
- iot
Device GatewaytemplatePolicy Service Policy Skyatp Iot Device Policy - Device threat policy settings provided by Sky ATP for IoT clients
- dns
Dga GatewaytemplateDetection Service Policy Skyatp Dns Dga Detection - Detection settings for DNS DGA threats provided by Sky ATP
- dns
Tunnel GatewaytemplateDetection Service Policy Skyatp Dns Tunnel Detection - Detection settings for DNS tunneling threats provided by Sky ATP
- http
Inspection GatewaytemplateService Policy Skyatp Http Inspection - Web traffic inspection settings provided by Sky ATP
- iot
Device GatewaytemplatePolicy Service Policy Skyatp Iot Device Policy - Device threat policy settings provided by Sky ATP for IoT clients
- dns_
dga_ Gatewaytemplatedetection Service Policy Skyatp Dns Dga Detection - Detection settings for DNS DGA threats provided by Sky ATP
- dns_
tunnel_ Gatewaytemplatedetection Service Policy Skyatp Dns Tunnel Detection - Detection settings for DNS tunneling threats provided by Sky ATP
- http_
inspection GatewaytemplateService Policy Skyatp Http Inspection - Web traffic inspection settings provided by Sky ATP
- iot_
device_ Gatewaytemplatepolicy Service Policy Skyatp Iot Device Policy - Device threat policy settings provided by Sky ATP for IoT clients
- dns
Dga Property MapDetection - Detection settings for DNS DGA threats provided by Sky ATP
- dns
Tunnel Property MapDetection - Detection settings for DNS tunneling threats provided by Sky ATP
- http
Inspection Property Map - Web traffic inspection settings provided by Sky ATP
- iot
Device Property MapPolicy - Device threat policy settings provided by Sky ATP for IoT clients
GatewaytemplateServicePolicySkyatpDnsDgaDetection, GatewaytemplateServicePolicySkyatpDnsDgaDetectionArgs
GatewaytemplateServicePolicySkyatpDnsTunnelDetection, GatewaytemplateServicePolicySkyatpDnsTunnelDetectionArgs
GatewaytemplateServicePolicySkyatpHttpInspection, GatewaytemplateServicePolicySkyatpHttpInspectionArgs
GatewaytemplateServicePolicySkyatpIotDevicePolicy, GatewaytemplateServicePolicySkyatpIotDevicePolicyArgs
- Enabled bool
- Whether Sky ATP IoT device policy inspection is enabled
- Enabled bool
- Whether Sky ATP IoT device policy inspection is enabled
- enabled bool
- Whether Sky ATP IoT device policy inspection is enabled
- enabled Boolean
- Whether Sky ATP IoT device policy inspection is enabled
- enabled boolean
- Whether Sky ATP IoT device policy inspection is enabled
- enabled bool
- Whether Sky ATP IoT device policy inspection is enabled
- enabled Boolean
- Whether Sky ATP IoT device policy inspection is enabled
GatewaytemplateServicePolicySslProxy, GatewaytemplateServicePolicySslProxyArgs
- Ciphers
Category string - Allowed cipher strength category for SSL proxy inspection
- Enabled bool
- Whether SSL proxy inspection is enabled for the service policy
- Ciphers
Category string - Allowed cipher strength category for SSL proxy inspection
- Enabled bool
- Whether SSL proxy inspection is enabled for the service policy
- ciphers_
category string - Allowed cipher strength category for SSL proxy inspection
- enabled bool
- Whether SSL proxy inspection is enabled for the service policy
- ciphers
Category String - Allowed cipher strength category for SSL proxy inspection
- enabled Boolean
- Whether SSL proxy inspection is enabled for the service policy
- ciphers
Category string - Allowed cipher strength category for SSL proxy inspection
- enabled boolean
- Whether SSL proxy inspection is enabled for the service policy
- ciphers_
category str - Allowed cipher strength category for SSL proxy inspection
- enabled bool
- Whether SSL proxy inspection is enabled for the service policy
- ciphers
Category String - Allowed cipher strength category for SSL proxy inspection
- enabled Boolean
- Whether SSL proxy inspection is enabled for the service policy
GatewaytemplateServicePolicySyslog, GatewaytemplateServicePolicySyslogArgs
- Enabled bool
- Whether syslog logging is enabled for the service policy
- Server
Names List<string> - Names of syslog servers that receive logs for this service policy
- Enabled bool
- Whether syslog logging is enabled for the service policy
- Server
Names []string - Names of syslog servers that receive logs for this service policy
- enabled bool
- Whether syslog logging is enabled for the service policy
- server_
names list(string) - Names of syslog servers that receive logs for this service policy
- enabled Boolean
- Whether syslog logging is enabled for the service policy
- server
Names List<String> - Names of syslog servers that receive logs for this service policy
- enabled boolean
- Whether syslog logging is enabled for the service policy
- server
Names string[] - Names of syslog servers that receive logs for this service policy
- enabled bool
- Whether syslog logging is enabled for the service policy
- server_
names Sequence[str] - Names of syslog servers that receive logs for this service policy
- enabled Boolean
- Whether syslog logging is enabled for the service policy
- server
Names List<String> - Names of syslog servers that receive logs for this service policy
GatewaytemplateTunnelConfigs, GatewaytemplateTunnelConfigsArgs
- Auto
Provision Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Configs Auto Provision - Provider auto-provisioning settings for tunnel endpoints
- Ike
Lifetime int - Only if
provider==custom-ipsec. Must be between 180 and 86400 - Ike
Mode string - Only if
provider==custom-ipsec. IKE negotiation mode for the tunnel - Ike
Proposals List<Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Configs Ike Proposal> - If
provider==custom-ipsec, IKE proposals used for custom IPsec negotiation - Ipsec
Lifetime int - Only if
provider==custom-ipsec. Must be between 180 and 86400 - Ipsec
Proposals List<Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Configs Ipsec Proposal> - Only if
provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation - Local
Id string - Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - Local
Subnets List<string> - Local protected subnets advertised by this tunnel
- Mode string
- Tunnel failover mode used for primary and secondary endpoints
- Networks List<string>
- Destination networks reachable through this tunnel
- Primary
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Configs Primary - Main remote tunnel endpoint settings
- Probe
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Configs Probe - Tunnel health probe settings
- Protocol string
- Only if
provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation - Provider string
- Tunnel provider used when auto provisioning is disabled
- Psk string
- Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - Remote
Subnets List<string> - Remote protected subnets reached through policy-based IPsec
- Secondary
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Configs Secondary - Backup remote tunnel endpoint settings
- Version string
- Only if
provider==custom-greorprovider==custom-ipsec. Tunnel version value for custom tunnel configuration
- Auto
Provision GatewaytemplateTunnel Configs Auto Provision - Provider auto-provisioning settings for tunnel endpoints
- Ike
Lifetime int - Only if
provider==custom-ipsec. Must be between 180 and 86400 - Ike
Mode string - Only if
provider==custom-ipsec. IKE negotiation mode for the tunnel - Ike
Proposals []GatewaytemplateTunnel Configs Ike Proposal - If
provider==custom-ipsec, IKE proposals used for custom IPsec negotiation - Ipsec
Lifetime int - Only if
provider==custom-ipsec. Must be between 180 and 86400 - Ipsec
Proposals []GatewaytemplateTunnel Configs Ipsec Proposal - Only if
provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation - Local
Id string - Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - Local
Subnets []string - Local protected subnets advertised by this tunnel
- Mode string
- Tunnel failover mode used for primary and secondary endpoints
- Networks []string
- Destination networks reachable through this tunnel
- Primary
Gatewaytemplate
Tunnel Configs Primary - Main remote tunnel endpoint settings
- Probe
Gatewaytemplate
Tunnel Configs Probe - Tunnel health probe settings
- Protocol string
- Only if
provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation - Provider string
- Tunnel provider used when auto provisioning is disabled
- Psk string
- Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - Remote
Subnets []string - Remote protected subnets reached through policy-based IPsec
- Secondary
Gatewaytemplate
Tunnel Configs Secondary - Backup remote tunnel endpoint settings
- Version string
- Only if
provider==custom-greorprovider==custom-ipsec. Tunnel version value for custom tunnel configuration
- auto_
provision object - Provider auto-provisioning settings for tunnel endpoints
- ike_
lifetime number - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ike_
mode string - Only if
provider==custom-ipsec. IKE negotiation mode for the tunnel - ike_
proposals list(object) - If
provider==custom-ipsec, IKE proposals used for custom IPsec negotiation - ipsec_
lifetime number - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ipsec_
proposals list(object) - Only if
provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation - local_
id string - Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - local_
subnets list(string) - Local protected subnets advertised by this tunnel
- mode string
- Tunnel failover mode used for primary and secondary endpoints
- networks list(string)
- Destination networks reachable through this tunnel
- primary object
- Main remote tunnel endpoint settings
- probe object
- Tunnel health probe settings
- protocol string
- Only if
provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation - provider string
- Tunnel provider used when auto provisioning is disabled
- psk string
- Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - remote_
subnets list(string) - Remote protected subnets reached through policy-based IPsec
- secondary object
- Backup remote tunnel endpoint settings
- version string
- Only if
provider==custom-greorprovider==custom-ipsec. Tunnel version value for custom tunnel configuration
- auto
Provision GatewaytemplateTunnel Configs Auto Provision - Provider auto-provisioning settings for tunnel endpoints
- ike
Lifetime Integer - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ike
Mode String - Only if
provider==custom-ipsec. IKE negotiation mode for the tunnel - ike
Proposals List<GatewaytemplateTunnel Configs Ike Proposal> - If
provider==custom-ipsec, IKE proposals used for custom IPsec negotiation - ipsec
Lifetime Integer - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ipsec
Proposals List<GatewaytemplateTunnel Configs Ipsec Proposal> - Only if
provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation - local
Id String - Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - local
Subnets List<String> - Local protected subnets advertised by this tunnel
- mode String
- Tunnel failover mode used for primary and secondary endpoints
- networks List<String>
- Destination networks reachable through this tunnel
- primary
Gatewaytemplate
Tunnel Configs Primary - Main remote tunnel endpoint settings
- probe
Gatewaytemplate
Tunnel Configs Probe - Tunnel health probe settings
- protocol String
- Only if
provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation - provider String
- Tunnel provider used when auto provisioning is disabled
- psk String
- Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - remote
Subnets List<String> - Remote protected subnets reached through policy-based IPsec
- secondary
Gatewaytemplate
Tunnel Configs Secondary - Backup remote tunnel endpoint settings
- version String
- Only if
provider==custom-greorprovider==custom-ipsec. Tunnel version value for custom tunnel configuration
- auto
Provision GatewaytemplateTunnel Configs Auto Provision - Provider auto-provisioning settings for tunnel endpoints
- ike
Lifetime number - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ike
Mode string - Only if
provider==custom-ipsec. IKE negotiation mode for the tunnel - ike
Proposals GatewaytemplateTunnel Configs Ike Proposal[] - If
provider==custom-ipsec, IKE proposals used for custom IPsec negotiation - ipsec
Lifetime number - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ipsec
Proposals GatewaytemplateTunnel Configs Ipsec Proposal[] - Only if
provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation - local
Id string - Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - local
Subnets string[] - Local protected subnets advertised by this tunnel
- mode string
- Tunnel failover mode used for primary and secondary endpoints
- networks string[]
- Destination networks reachable through this tunnel
- primary
Gatewaytemplate
Tunnel Configs Primary - Main remote tunnel endpoint settings
- probe
Gatewaytemplate
Tunnel Configs Probe - Tunnel health probe settings
- protocol string
- Only if
provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation - provider string
- Tunnel provider used when auto provisioning is disabled
- psk string
- Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - remote
Subnets string[] - Remote protected subnets reached through policy-based IPsec
- secondary
Gatewaytemplate
Tunnel Configs Secondary - Backup remote tunnel endpoint settings
- version string
- Only if
provider==custom-greorprovider==custom-ipsec. Tunnel version value for custom tunnel configuration
- auto_
provision GatewaytemplateTunnel Configs Auto Provision - Provider auto-provisioning settings for tunnel endpoints
- ike_
lifetime int - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ike_
mode str - Only if
provider==custom-ipsec. IKE negotiation mode for the tunnel - ike_
proposals Sequence[GatewaytemplateTunnel Configs Ike Proposal] - If
provider==custom-ipsec, IKE proposals used for custom IPsec negotiation - ipsec_
lifetime int - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ipsec_
proposals Sequence[GatewaytemplateTunnel Configs Ipsec Proposal] - Only if
provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation - local_
id str - Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - local_
subnets Sequence[str] - Local protected subnets advertised by this tunnel
- mode str
- Tunnel failover mode used for primary and secondary endpoints
- networks Sequence[str]
- Destination networks reachable through this tunnel
- primary
Gatewaytemplate
Tunnel Configs Primary - Main remote tunnel endpoint settings
- probe
Gatewaytemplate
Tunnel Configs Probe - Tunnel health probe settings
- protocol str
- Only if
provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation - provider str
- Tunnel provider used when auto provisioning is disabled
- psk str
- Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - remote_
subnets Sequence[str] - Remote protected subnets reached through policy-based IPsec
- secondary
Gatewaytemplate
Tunnel Configs Secondary - Backup remote tunnel endpoint settings
- version str
- Only if
provider==custom-greorprovider==custom-ipsec. Tunnel version value for custom tunnel configuration
- auto
Provision Property Map - Provider auto-provisioning settings for tunnel endpoints
- ike
Lifetime Number - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ike
Mode String - Only if
provider==custom-ipsec. IKE negotiation mode for the tunnel - ike
Proposals List<Property Map> - If
provider==custom-ipsec, IKE proposals used for custom IPsec negotiation - ipsec
Lifetime Number - Only if
provider==custom-ipsec. Must be between 180 and 86400 - ipsec
Proposals List<Property Map> - Only if
provider==custom-ipsec. IPsec proposals used for custom IPsec negotiation - local
Id String - Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - local
Subnets List<String> - Local protected subnets advertised by this tunnel
- mode String
- Tunnel failover mode used for primary and secondary endpoints
- networks List<String>
- Destination networks reachable through this tunnel
- primary Property Map
- Main remote tunnel endpoint settings
- probe Property Map
- Tunnel health probe settings
- protocol String
- Only if
provider==custom-ipsec. Tunnel protocol for custom tunnel negotiation - provider String
- Tunnel provider used when auto provisioning is disabled
- psk String
- Required if
provider==zscaler-ipsec,provider==jse-ipsecorprovider==custom-ipsec - remote
Subnets List<String> - Remote protected subnets reached through policy-based IPsec
- secondary Property Map
- Backup remote tunnel endpoint settings
- version String
- Only if
provider==custom-greorprovider==custom-ipsec. Tunnel version value for custom tunnel configuration
GatewaytemplateTunnelConfigsAutoProvision, GatewaytemplateTunnelConfigsAutoProvisionArgs
- Provider string
- Tunnel provider used for automatic endpoint provisioning
- Enabled bool
- Enable auto provisioning for the tunnel. If enabled, the
primaryandsecondarynodes will be ignored. - Latlng
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Configs Auto Provision Latlng - Geographic coordinate override used for tunnel POP selection
- Primary
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Configs Auto Provision Primary - Main auto-provisioned tunnel endpoint settings
- Region string
- API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
- Secondary
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Configs Auto Provision Secondary - Backup auto-provisioned tunnel endpoint settings
- Service
Connection string - if
provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
- Provider string
- Tunnel provider used for automatic endpoint provisioning
- Enabled bool
- Enable auto provisioning for the tunnel. If enabled, the
primaryandsecondarynodes will be ignored. - Latlng
Gatewaytemplate
Tunnel Configs Auto Provision Latlng - Geographic coordinate override used for tunnel POP selection
- Primary
Gatewaytemplate
Tunnel Configs Auto Provision Primary - Main auto-provisioned tunnel endpoint settings
- Region string
- API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
- Secondary
Gatewaytemplate
Tunnel Configs Auto Provision Secondary - Backup auto-provisioned tunnel endpoint settings
- Service
Connection string - if
provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
- provider string
- Tunnel provider used for automatic endpoint provisioning
- enabled bool
- Enable auto provisioning for the tunnel. If enabled, the
primaryandsecondarynodes will be ignored. - latlng object
- Geographic coordinate override used for tunnel POP selection
- primary object
- Main auto-provisioned tunnel endpoint settings
- region string
- API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
- secondary object
- Backup auto-provisioned tunnel endpoint settings
- service_
connection string - if
provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
- provider String
- Tunnel provider used for automatic endpoint provisioning
- enabled Boolean
- Enable auto provisioning for the tunnel. If enabled, the
primaryandsecondarynodes will be ignored. - latlng
Gatewaytemplate
Tunnel Configs Auto Provision Latlng - Geographic coordinate override used for tunnel POP selection
- primary
Gatewaytemplate
Tunnel Configs Auto Provision Primary - Main auto-provisioned tunnel endpoint settings
- region String
- API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
- secondary
Gatewaytemplate
Tunnel Configs Auto Provision Secondary - Backup auto-provisioned tunnel endpoint settings
- service
Connection String - if
provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
- provider string
- Tunnel provider used for automatic endpoint provisioning
- enabled boolean
- Enable auto provisioning for the tunnel. If enabled, the
primaryandsecondarynodes will be ignored. - latlng
Gatewaytemplate
Tunnel Configs Auto Provision Latlng - Geographic coordinate override used for tunnel POP selection
- primary
Gatewaytemplate
Tunnel Configs Auto Provision Primary - Main auto-provisioned tunnel endpoint settings
- region string
- API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
- secondary
Gatewaytemplate
Tunnel Configs Auto Provision Secondary - Backup auto-provisioned tunnel endpoint settings
- service
Connection string - if
provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
- provider str
- Tunnel provider used for automatic endpoint provisioning
- enabled bool
- Enable auto provisioning for the tunnel. If enabled, the
primaryandsecondarynodes will be ignored. - latlng
Gatewaytemplate
Tunnel Configs Auto Provision Latlng - Geographic coordinate override used for tunnel POP selection
- primary
Gatewaytemplate
Tunnel Configs Auto Provision Primary - Main auto-provisioned tunnel endpoint settings
- region str
- API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
- secondary
Gatewaytemplate
Tunnel Configs Auto Provision Secondary - Backup auto-provisioned tunnel endpoint settings
- service_
connection str - if
provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
- provider String
- Tunnel provider used for automatic endpoint provisioning
- enabled Boolean
- Enable auto provisioning for the tunnel. If enabled, the
primaryandsecondarynodes will be ignored. - latlng Property Map
- Geographic coordinate override used for tunnel POP selection
- primary Property Map
- Main auto-provisioned tunnel endpoint settings
- region String
- API override for POP selection in the case user wants to override the auto discovery of remote network location and force the tunnel to use the specified peer location.
- secondary Property Map
- Backup auto-provisioned tunnel endpoint settings
- service
Connection String - if
provider==prisma-ipsec. By default, we'll use the location of the site to determine the optimal Remote Network location, optionally, serviceConnection can be considered, then we'll also consider this along with the site location. Define serviceConnection if the traffic is to be routed to a specific service connection. This field takes a service connection name that is configured in the Prisma cloud, Prisma Access Setup > Service Connections.
GatewaytemplateTunnelConfigsAutoProvisionLatlng, GatewaytemplateTunnelConfigsAutoProvisionLatlngArgs
GatewaytemplateTunnelConfigsAutoProvisionPrimary, GatewaytemplateTunnelConfigsAutoProvisionPrimaryArgs
GatewaytemplateTunnelConfigsAutoProvisionSecondary, GatewaytemplateTunnelConfigsAutoProvisionSecondaryArgs
GatewaytemplateTunnelConfigsIkeProposal, GatewaytemplateTunnelConfigsIkeProposalArgs
GatewaytemplateTunnelConfigsIpsecProposal, GatewaytemplateTunnelConfigsIpsecProposalArgs
GatewaytemplateTunnelConfigsPrimary, GatewaytemplateTunnelConfigsPrimaryArgs
- Hosts List<string>
- Remote gateway host addresses for this tunnel node
- Wan
Names List<string> - Interface names that source tunnel traffic for this node
- Internal
Ips List<string> - Internal IP addresses configured on this tunnel node
- Probe
Ips List<string> - Health-check IP addresses used to monitor this tunnel node
- Remote
Ids List<string> - IKE identities expected from this tunnel node
- Hosts []string
- Remote gateway host addresses for this tunnel node
- Wan
Names []string - Interface names that source tunnel traffic for this node
- Internal
Ips []string - Internal IP addresses configured on this tunnel node
- Probe
Ips []string - Health-check IP addresses used to monitor this tunnel node
- Remote
Ids []string - IKE identities expected from this tunnel node
- hosts list(string)
- Remote gateway host addresses for this tunnel node
- wan_
names list(string) - Interface names that source tunnel traffic for this node
- internal_
ips list(string) - Internal IP addresses configured on this tunnel node
- probe_
ips list(string) - Health-check IP addresses used to monitor this tunnel node
- remote_
ids list(string) - IKE identities expected from this tunnel node
- hosts List<String>
- Remote gateway host addresses for this tunnel node
- wan
Names List<String> - Interface names that source tunnel traffic for this node
- internal
Ips List<String> - Internal IP addresses configured on this tunnel node
- probe
Ips List<String> - Health-check IP addresses used to monitor this tunnel node
- remote
Ids List<String> - IKE identities expected from this tunnel node
- hosts string[]
- Remote gateway host addresses for this tunnel node
- wan
Names string[] - Interface names that source tunnel traffic for this node
- internal
Ips string[] - Internal IP addresses configured on this tunnel node
- probe
Ips string[] - Health-check IP addresses used to monitor this tunnel node
- remote
Ids string[] - IKE identities expected from this tunnel node
- hosts Sequence[str]
- Remote gateway host addresses for this tunnel node
- wan_
names Sequence[str] - Interface names that source tunnel traffic for this node
- internal_
ips Sequence[str] - Internal IP addresses configured on this tunnel node
- probe_
ips Sequence[str] - Health-check IP addresses used to monitor this tunnel node
- remote_
ids Sequence[str] - IKE identities expected from this tunnel node
- hosts List<String>
- Remote gateway host addresses for this tunnel node
- wan
Names List<String> - Interface names that source tunnel traffic for this node
- internal
Ips List<String> - Internal IP addresses configured on this tunnel node
- probe
Ips List<String> - Health-check IP addresses used to monitor this tunnel node
- remote
Ids List<String> - IKE identities expected from this tunnel node
GatewaytemplateTunnelConfigsProbe, GatewaytemplateTunnelConfigsProbeArgs
GatewaytemplateTunnelConfigsSecondary, GatewaytemplateTunnelConfigsSecondaryArgs
- Hosts List<string>
- Remote gateway host addresses for this tunnel node
- Wan
Names List<string> - Interface names that source tunnel traffic for this node
- Internal
Ips List<string> - Internal IP addresses configured on this tunnel node
- Probe
Ips List<string> - Health-check IP addresses used to monitor this tunnel node
- Remote
Ids List<string> - IKE identities expected from this tunnel node
- Hosts []string
- Remote gateway host addresses for this tunnel node
- Wan
Names []string - Interface names that source tunnel traffic for this node
- Internal
Ips []string - Internal IP addresses configured on this tunnel node
- Probe
Ips []string - Health-check IP addresses used to monitor this tunnel node
- Remote
Ids []string - IKE identities expected from this tunnel node
- hosts list(string)
- Remote gateway host addresses for this tunnel node
- wan_
names list(string) - Interface names that source tunnel traffic for this node
- internal_
ips list(string) - Internal IP addresses configured on this tunnel node
- probe_
ips list(string) - Health-check IP addresses used to monitor this tunnel node
- remote_
ids list(string) - IKE identities expected from this tunnel node
- hosts List<String>
- Remote gateway host addresses for this tunnel node
- wan
Names List<String> - Interface names that source tunnel traffic for this node
- internal
Ips List<String> - Internal IP addresses configured on this tunnel node
- probe
Ips List<String> - Health-check IP addresses used to monitor this tunnel node
- remote
Ids List<String> - IKE identities expected from this tunnel node
- hosts string[]
- Remote gateway host addresses for this tunnel node
- wan
Names string[] - Interface names that source tunnel traffic for this node
- internal
Ips string[] - Internal IP addresses configured on this tunnel node
- probe
Ips string[] - Health-check IP addresses used to monitor this tunnel node
- remote
Ids string[] - IKE identities expected from this tunnel node
- hosts Sequence[str]
- Remote gateway host addresses for this tunnel node
- wan_
names Sequence[str] - Interface names that source tunnel traffic for this node
- internal_
ips Sequence[str] - Internal IP addresses configured on this tunnel node
- probe_
ips Sequence[str] - Health-check IP addresses used to monitor this tunnel node
- remote_
ids Sequence[str] - IKE identities expected from this tunnel node
- hosts List<String>
- Remote gateway host addresses for this tunnel node
- wan
Names List<String> - Interface names that source tunnel traffic for this node
- internal
Ips List<String> - Internal IP addresses configured on this tunnel node
- probe
Ips List<String> - Health-check IP addresses used to monitor this tunnel node
- remote
Ids List<String> - IKE identities expected from this tunnel node
GatewaytemplateTunnelProviderOptions, GatewaytemplateTunnelProviderOptionsArgs
- Jse
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Provider Options Jse - Juniper Secure Edge provisioning options for tunnel endpoints
- Prisma
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Provider Options Prisma - Palo Alto Prisma Access provisioning options for tunnel endpoints
- Zscaler
Pulumi.
Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Provider Options Zscaler - Provider settings for Zscaler tunnel endpoints
- Jse
Gatewaytemplate
Tunnel Provider Options Jse - Juniper Secure Edge provisioning options for tunnel endpoints
- Prisma
Gatewaytemplate
Tunnel Provider Options Prisma - Palo Alto Prisma Access provisioning options for tunnel endpoints
- Zscaler
Gatewaytemplate
Tunnel Provider Options Zscaler - Provider settings for Zscaler tunnel endpoints
- jse
Gatewaytemplate
Tunnel Provider Options Jse - Juniper Secure Edge provisioning options for tunnel endpoints
- prisma
Gatewaytemplate
Tunnel Provider Options Prisma - Palo Alto Prisma Access provisioning options for tunnel endpoints
- zscaler
Gatewaytemplate
Tunnel Provider Options Zscaler - Provider settings for Zscaler tunnel endpoints
- jse
Gatewaytemplate
Tunnel Provider Options Jse - Juniper Secure Edge provisioning options for tunnel endpoints
- prisma
Gatewaytemplate
Tunnel Provider Options Prisma - Palo Alto Prisma Access provisioning options for tunnel endpoints
- zscaler
Gatewaytemplate
Tunnel Provider Options Zscaler - Provider settings for Zscaler tunnel endpoints
- jse
Gatewaytemplate
Tunnel Provider Options Jse - Juniper Secure Edge provisioning options for tunnel endpoints
- prisma
Gatewaytemplate
Tunnel Provider Options Prisma - Palo Alto Prisma Access provisioning options for tunnel endpoints
- zscaler
Gatewaytemplate
Tunnel Provider Options Zscaler - Provider settings for Zscaler tunnel endpoints
- jse Property Map
- Juniper Secure Edge provisioning options for tunnel endpoints
- prisma Property Map
- Palo Alto Prisma Access provisioning options for tunnel endpoints
- zscaler Property Map
- Provider settings for Zscaler tunnel endpoints
GatewaytemplateTunnelProviderOptionsJse, GatewaytemplateTunnelProviderOptionsJseArgs
GatewaytemplateTunnelProviderOptionsPrisma, GatewaytemplateTunnelProviderOptionsPrismaArgs
- Service
Account stringName - For prisma-ipsec, service account name to used for tunnel auto provisioning
- Service
Account stringName - For prisma-ipsec, service account name to used for tunnel auto provisioning
- service_
account_ stringname - For prisma-ipsec, service account name to used for tunnel auto provisioning
- service
Account StringName - For prisma-ipsec, service account name to used for tunnel auto provisioning
- service
Account stringName - For prisma-ipsec, service account name to used for tunnel auto provisioning
- service_
account_ strname - For prisma-ipsec, service account name to used for tunnel auto provisioning
- service
Account StringName - For prisma-ipsec, service account name to used for tunnel auto provisioning
GatewaytemplateTunnelProviderOptionsZscaler, GatewaytemplateTunnelProviderOptionsZscalerArgs
- Aup
Block boolInternet Until Accepted - Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
- Aup
Enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - Aup
Force boolSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- Aup
Timeout intIn Days - Required if
aupEnabled==true. Days before AUP is requested again - Auth
Required bool - Enable this option to enforce user authentication
- Caution
Enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - Dn
Bandwidth double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- Idle
Time intIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - Ofw
Enabled bool - If
true, enable the firewall control option - Sub
Locations List<Pulumi.Juniper Mist. Org. Inputs. Gatewaytemplate Tunnel Provider Options Zscaler Sub Location> - Per-network Zscaler sub-location settings
- Surrogate
Ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - Surrogate
Ip boolEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - Surrogate
Refresh intTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - Up
Bandwidth double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- Xff
Forward boolEnabled - Location uses proxy chaining to forward traffic
- Aup
Block boolInternet Until Accepted - Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
- Aup
Enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - Aup
Force boolSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- Aup
Timeout intIn Days - Required if
aupEnabled==true. Days before AUP is requested again - Auth
Required bool - Enable this option to enforce user authentication
- Caution
Enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - Dn
Bandwidth float64 - Download bandwidth cap of the link, in Mbps. Disabled if not set
- Idle
Time intIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - Ofw
Enabled bool - If
true, enable the firewall control option - Sub
Locations []GatewaytemplateTunnel Provider Options Zscaler Sub Location - Per-network Zscaler sub-location settings
- Surrogate
Ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - Surrogate
Ip boolEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - Surrogate
Refresh intTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - Up
Bandwidth float64 - Download bandwidth cap of the link, in Mbps. Disabled if not set
- Xff
Forward boolEnabled - Location uses proxy chaining to forward traffic
- aup_
block_ boolinternet_ until_ accepted - Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
- aup_
enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup_
force_ boolssl_ inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup_
timeout_ numberin_ days - Required if
aupEnabled==true. Days before AUP is requested again - auth_
required bool - Enable this option to enforce user authentication
- caution_
enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn_
bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle_
time_ numberin_ minutes - Required if
surrogate_IP==true, idle Time to Disassociation - ofw_
enabled bool - If
true, enable the firewall control option - sub_
locations list(object) - Per-network Zscaler sub-location settings
- surrogate_
ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate_
ip_ boolenforced_ for_ known_ browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate_
refresh_ numbertime_ in_ minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up_
bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- xff_
forward_ boolenabled - Location uses proxy chaining to forward traffic
- aup
Block BooleanInternet Until Accepted - Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
- aup
Enabled Boolean - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup
Force BooleanSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup
Timeout IntegerIn Days - Required if
aupEnabled==true. Days before AUP is requested again - auth
Required Boolean - Enable this option to enforce user authentication
- caution
Enabled Boolean - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn
Bandwidth Double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle
Time IntegerIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - ofw
Enabled Boolean - If
true, enable the firewall control option - sub
Locations List<GatewaytemplateTunnel Provider Options Zscaler Sub Location> - Per-network Zscaler sub-location settings
- surrogate
Ip Boolean - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate
Ip BooleanEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate
Refresh IntegerTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up
Bandwidth Double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- xff
Forward BooleanEnabled - Location uses proxy chaining to forward traffic
- aup
Block booleanInternet Until Accepted - Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
- aup
Enabled boolean - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup
Force booleanSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup
Timeout numberIn Days - Required if
aupEnabled==true. Days before AUP is requested again - auth
Required boolean - Enable this option to enforce user authentication
- caution
Enabled boolean - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn
Bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle
Time numberIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - ofw
Enabled boolean - If
true, enable the firewall control option - sub
Locations GatewaytemplateTunnel Provider Options Zscaler Sub Location[] - Per-network Zscaler sub-location settings
- surrogate
Ip boolean - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate
Ip booleanEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate
Refresh numberTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up
Bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- xff
Forward booleanEnabled - Location uses proxy chaining to forward traffic
- aup_
block_ boolinternet_ until_ accepted - Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
- aup_
enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup_
force_ boolssl_ inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup_
timeout_ intin_ days - Required if
aupEnabled==true. Days before AUP is requested again - auth_
required bool - Enable this option to enforce user authentication
- caution_
enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn_
bandwidth float - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle_
time_ intin_ minutes - Required if
surrogate_IP==true, idle Time to Disassociation - ofw_
enabled bool - If
true, enable the firewall control option - sub_
locations Sequence[GatewaytemplateTunnel Provider Options Zscaler Sub Location] - Per-network Zscaler sub-location settings
- surrogate_
ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate_
ip_ boolenforced_ for_ known_ browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate_
refresh_ inttime_ in_ minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up_
bandwidth float - Download bandwidth cap of the link, in Mbps. Disabled if not set
- xff_
forward_ boolenabled - Location uses proxy chaining to forward traffic
- aup
Block BooleanInternet Until Accepted - Whether Zscaler blocks internet access until the Acceptable Use Policy is accepted
- aup
Enabled Boolean - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup
Force BooleanSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup
Timeout NumberIn Days - Required if
aupEnabled==true. Days before AUP is requested again - auth
Required Boolean - Enable this option to enforce user authentication
- caution
Enabled Boolean - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn
Bandwidth Number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle
Time NumberIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - ofw
Enabled Boolean - If
true, enable the firewall control option - sub
Locations List<Property Map> - Per-network Zscaler sub-location settings
- surrogate
Ip Boolean - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate
Ip BooleanEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate
Refresh NumberTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up
Bandwidth Number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- xff
Forward BooleanEnabled - Location uses proxy chaining to forward traffic
GatewaytemplateTunnelProviderOptionsZscalerSubLocation, GatewaytemplateTunnelProviderOptionsZscalerSubLocationArgs
- Aup
Block boolInternet Until Accepted - Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
- Aup
Enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - Aup
Force boolSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- Aup
Timeout intIn Days - Required if
aupEnabled==true. Days before AUP is requested again - Auth
Required bool - Enable this option to authenticate users
- Caution
Enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - Dn
Bandwidth double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- Idle
Time intIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - Name string
- Network name
- Ofw
Enabled bool - If
true, enable the firewall control option - Surrogate
Ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - Surrogate
Ip boolEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - Surrogate
Refresh intTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - Up
Bandwidth double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- Aup
Block boolInternet Until Accepted - Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
- Aup
Enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - Aup
Force boolSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- Aup
Timeout intIn Days - Required if
aupEnabled==true. Days before AUP is requested again - Auth
Required bool - Enable this option to authenticate users
- Caution
Enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - Dn
Bandwidth float64 - Download bandwidth cap of the link, in Mbps. Disabled if not set
- Idle
Time intIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - Name string
- Network name
- Ofw
Enabled bool - If
true, enable the firewall control option - Surrogate
Ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - Surrogate
Ip boolEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - Surrogate
Refresh intTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - Up
Bandwidth float64 - Download bandwidth cap of the link, in Mbps. Disabled if not set
- aup_
block_ boolinternet_ until_ accepted - Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
- aup_
enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup_
force_ boolssl_ inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup_
timeout_ numberin_ days - Required if
aupEnabled==true. Days before AUP is requested again - auth_
required bool - Enable this option to authenticate users
- caution_
enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn_
bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle_
time_ numberin_ minutes - Required if
surrogate_IP==true, idle Time to Disassociation - name string
- Network name
- ofw_
enabled bool - If
true, enable the firewall control option - surrogate_
ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate_
ip_ boolenforced_ for_ known_ browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate_
refresh_ numbertime_ in_ minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up_
bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- aup
Block BooleanInternet Until Accepted - Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
- aup
Enabled Boolean - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup
Force BooleanSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup
Timeout IntegerIn Days - Required if
aupEnabled==true. Days before AUP is requested again - auth
Required Boolean - Enable this option to authenticate users
- caution
Enabled Boolean - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn
Bandwidth Double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle
Time IntegerIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - name String
- Network name
- ofw
Enabled Boolean - If
true, enable the firewall control option - surrogate
Ip Boolean - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate
Ip BooleanEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate
Refresh IntegerTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up
Bandwidth Double - Download bandwidth cap of the link, in Mbps. Disabled if not set
- aup
Block booleanInternet Until Accepted - Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
- aup
Enabled boolean - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup
Force booleanSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup
Timeout numberIn Days - Required if
aupEnabled==true. Days before AUP is requested again - auth
Required boolean - Enable this option to authenticate users
- caution
Enabled boolean - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn
Bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle
Time numberIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - name string
- Network name
- ofw
Enabled boolean - If
true, enable the firewall control option - surrogate
Ip boolean - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate
Ip booleanEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate
Refresh numberTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up
Bandwidth number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- aup_
block_ boolinternet_ until_ accepted - Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
- aup_
enabled bool - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup_
force_ boolssl_ inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup_
timeout_ intin_ days - Required if
aupEnabled==true. Days before AUP is requested again - auth_
required bool - Enable this option to authenticate users
- caution_
enabled bool - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn_
bandwidth float - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle_
time_ intin_ minutes - Required if
surrogate_IP==true, idle Time to Disassociation - name str
- Network name
- ofw_
enabled bool - If
true, enable the firewall control option - surrogate_
ip bool - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate_
ip_ boolenforced_ for_ known_ browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate_
refresh_ inttime_ in_ minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up_
bandwidth float - Download bandwidth cap of the link, in Mbps. Disabled if not set
- aup
Block BooleanInternet Until Accepted - Whether this sub-location blocks internet access until the Acceptable Use Policy is accepted
- aup
Enabled Boolean - Can only be
truewhenauthRequired==false, display Acceptable Use Policy (AUP) - aup
Force BooleanSsl Inspection - Proxy HTTPs traffic, requiring Zscaler cert to be installed in browser
- aup
Timeout NumberIn Days - Required if
aupEnabled==true. Days before AUP is requested again - auth
Required Boolean - Enable this option to authenticate users
- caution
Enabled Boolean - Can only be
truewhenauthRequired==false, display caution notification for non-authenticated users - dn
Bandwidth Number - Download bandwidth cap of the link, in Mbps. Disabled if not set
- idle
Time NumberIn Minutes - Required if
surrogate_IP==true, idle Time to Disassociation - name String
- Network name
- ofw
Enabled Boolean - If
true, enable the firewall control option - surrogate
Ip Boolean - Can only be
truewhenauthRequired==true. Map a user to a private IP address so it applies the user's policies, instead of the location's policies - surrogate
Ip BooleanEnforced For Known Browsers - Can only be
truewhensurrogate_IP==true, enforce surrogate IP for known browsers - surrogate
Refresh NumberTime In Minutes - Required if
surrogate_IP_enforced_for_known_browsers==true, must be lower or equal thanidleTimeInMinutes, refresh Time for re-validation of Surrogacy - up
Bandwidth Number - Download bandwidth cap of the link, in Mbps. Disabled if not set
GatewaytemplateVrfConfig, GatewaytemplateVrfConfigArgs
- Enabled bool
- Whether to enable VRF (when supported on the device)
- Enabled bool
- Whether to enable VRF (when supported on the device)
- enabled bool
- Whether to enable VRF (when supported on the device)
- enabled Boolean
- Whether to enable VRF (when supported on the device)
- enabled boolean
- Whether to enable VRF (when supported on the device)
- enabled bool
- Whether to enable VRF (when supported on the device)
- enabled Boolean
- Whether to enable VRF (when supported on the device)
GatewaytemplateVrfInstances, GatewaytemplateVrfInstancesArgs
- Networks List<string>
- Network names included in this gateway VRF instance
- Networks []string
- Network names included in this gateway VRF instance
- networks list(string)
- Network names included in this gateway VRF instance
- networks List<String>
- Network names included in this gateway VRF instance
- networks string[]
- Network names included in this gateway VRF instance
- networks Sequence[str]
- Network names included in this gateway VRF instance
- networks List<String>
- Network names included in this gateway VRF instance
Import
Using pulumi import, import junipermist.org.Gatewaytemplate with:
Gateway Template can be imported by specifying the orgId and the gatewaytemplateId
$ pulumi import junipermist:org/gatewaytemplate:Gatewaytemplate gatewaytemplate_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- junipermist pulumi/pulumi-junipermist
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
mistTerraform Provider.
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
published on Saturday, Jul 11, 2026 by Pulumi