1. Packages
  2. Juniper Mist Provider
  3. API Docs
  4. org
  5. Mxcluster
Viewing docs for Juniper Mist v0.8.1
published on Thursday, Apr 2, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-junipermist

junipermist.org.Mxcluster

junipermist logo
Viewing docs for Juniper Mist v0.8.1
published on Thursday, Apr 2, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-junipermist

    This resource manages MxCluster (cluster of MxEdge devices) in the Mist Organization.

    A Mist Edge Cluster is a group of one or more Org Mist Edge devices (mist_org_mxedge) providing tunnel termination, edge network services and RADIUS proxy capabilities.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as junipermist from "@pulumi/juniper-mist";

// Resource for importing existing mxcluster
// Import with: terraform import mist_org_mxcluster.existing_mxcluster "<org_id>.<mxcluster_id>"
const existingMxcluster = new junipermist.org.Mxcluster("existing_mxcluster", {
    orgId: terraformTest.id,
    name: "edgey_cluster",
    siteId: terraformTestSite.id,
});
// Create new mxcluster
const newMxcluster = new junipermist.org.Mxcluster("new_mxcluster", {
    orgId: terraformTest.id,
    name: "edgey_cluster_new",
    siteId: terraformTestSite.id,
    mistDas: {
        enabled: true,
        coaServers: [
            {
                disableEventTimestampCheck: false,
                enabled: true,
                host: "10.10.10.10",
                port: 3799,
                requireMessageAuthenticator: true,
                secret: "coa-secret-123",
            },
            {
                enabled: true,
                host: "10.10.10.11",
                port: 3799,
                secret: "coa-secret-456",
            },
        ],
    },
    mistNac: {
        enabled: true,
        acctServerPort: 1813,
        authServerPort: 1812,
        secret: "nac-shared-secret",
    },
    mxedgeMgmt: {
        configAutoRevert: true,
        fipsEnabled: false,
        mistPassword: "mist-password-123",
        rootPassword: "root-password-456",
        oobIpType: "static",
        oobIpType6: "dhcp",
    },
    proxy: {
        disabled: false,
        url: "http://proxy.example.com:8080",
    },
    radsec: {
        enabled: true,
        matchSsid: true,
        nasIpSource: "tunnel",
        serverSelection: "ordered",
        srcIpSource: "tunnel",
        proxyHosts: [
            "radsec1.example.com",
            "radsec2.example.com",
        ],
        acctServers: [
            {
                host: "acct1.example.com",
                port: 2083,
                secret: "acct-secret-123",
                ssids: [
                    "Corporate",
                    "Guest",
                ],
            },
            {
                host: "acct2.example.com",
                port: 2083,
                secret: "acct-secret-456",
                ssids: ["Corporate"],
            },
        ],
        authServers: [
            {
                host: "auth1.example.com",
                port: 2083,
                secret: "auth-secret-123",
                inbandStatusCheck: true,
                inbandStatusInterval: 60,
                keywrapEnabled: true,
                keywrapFormat: "hex",
                keywrapKek: "keywrap-kek-value",
                keywrapMack: "keywrap-mack-value",
                retry: 3,
                timeout: 30,
                ssids: [
                    "Corporate",
                    "Guest",
                ],
            },
            {
                host: "auth2.example.com",
                port: 2083,
                secret: "auth-secret-456",
                retry: 3,
                timeout: 30,
                ssids: ["Corporate"],
            },
        ],
    },
    tuntermApSubnets: [
        "192.168.10.0/24",
        "192.168.20.0/24",
        "10.100.0.0/16",
    ],
    tuntermDhcpdConfig: {
        "100": {
            enabled: true,
            type: "relay",
            servers: [
                "10.100.0.5",
                "10.100.0.6",
            ],
        },
        "200": {
            enabled: true,
            type: "relay",
            servers: ["10.200.0.5"],
        },
    },
    tuntermExtraRoutes: {
        "172.16.0.0/16": {
            via: "10.0.0.10",
        },
        "192.168.100.0/24": {
            via: "10.0.0.20",
        },
    },
    tuntermHosts: [
        "mxedge1.example.com",
        "mxedge2.example.com",
        "10.10.10.100",
    ],
    tuntermHostsOrders: [
        0,
        1,
        2,
    ],
    tuntermHostsSelection: "ordered",
    tuntermMonitorings: [
        [
            {
                host: "10.0.0.1",
                port: 443,
                protocol: "https",
                srcVlanId: 100,
                timeout: 10,
            },
            {
                host: "10.0.0.2",
                port: 80,
                protocol: "http",
                srcVlanId: 100,
                timeout: 5,
            },
        ],
        [{
            host: "8.8.8.8",
            port: 443,
            protocol: "https",
            srcVlanId: 200,
            timeout: 10,
        }],
    ],
    tuntermMonitoringDisabled: false,
});

    import pulumi
import pulumi_juniper_mist as junipermist

# Resource for importing existing mxcluster
# Import with: terraform import mist_org_mxcluster.existing_mxcluster "<org_id>.<mxcluster_id>"
existing_mxcluster = junipermist.org.Mxcluster("existing_mxcluster",
    org_id=terraform_test["id"],
    name="edgey_cluster",
    site_id=terraform_test_site["id"])
# Create new mxcluster
new_mxcluster = junipermist.org.Mxcluster("new_mxcluster",
    org_id=terraform_test["id"],
    name="edgey_cluster_new",
    site_id=terraform_test_site["id"],
    mist_das={
        "enabled": True,
        "coa_servers": [
            {
                "disable_event_timestamp_check": False,
                "enabled": True,
                "host": "10.10.10.10",
                "port": 3799,
                "require_message_authenticator": True,
                "secret": "coa-secret-123",
            },
            {
                "enabled": True,
                "host": "10.10.10.11",
                "port": 3799,
                "secret": "coa-secret-456",
            },
        ],
    },
    mist_nac={
        "enabled": True,
        "acct_server_port": 1813,
        "auth_server_port": 1812,
        "secret": "nac-shared-secret",
    },
    mxedge_mgmt={
        "config_auto_revert": True,
        "fips_enabled": False,
        "mist_password": "mist-password-123",
        "root_password": "root-password-456",
        "oob_ip_type": "static",
        "oob_ip_type6": "dhcp",
    },
    proxy={
        "disabled": False,
        "url": "http://proxy.example.com:8080",
    },
    radsec={
        "enabled": True,
        "match_ssid": True,
        "nas_ip_source": "tunnel",
        "server_selection": "ordered",
        "src_ip_source": "tunnel",
        "proxy_hosts": [
            "radsec1.example.com",
            "radsec2.example.com",
        ],
        "acct_servers": [
            {
                "host": "acct1.example.com",
                "port": 2083,
                "secret": "acct-secret-123",
                "ssids": [
                    "Corporate",
                    "Guest",
                ],
            },
            {
                "host": "acct2.example.com",
                "port": 2083,
                "secret": "acct-secret-456",
                "ssids": ["Corporate"],
            },
        ],
        "auth_servers": [
            {
                "host": "auth1.example.com",
                "port": 2083,
                "secret": "auth-secret-123",
                "inband_status_check": True,
                "inband_status_interval": 60,
                "keywrap_enabled": True,
                "keywrap_format": "hex",
                "keywrap_kek": "keywrap-kek-value",
                "keywrap_mack": "keywrap-mack-value",
                "retry": 3,
                "timeout": 30,
                "ssids": [
                    "Corporate",
                    "Guest",
                ],
            },
            {
                "host": "auth2.example.com",
                "port": 2083,
                "secret": "auth-secret-456",
                "retry": 3,
                "timeout": 30,
                "ssids": ["Corporate"],
            },
        ],
    },
    tunterm_ap_subnets=[
        "192.168.10.0/24",
        "192.168.20.0/24",
        "10.100.0.0/16",
    ],
    tunterm_dhcpd_config={
        "100": {
            "enabled": True,
            "type": "relay",
            "servers": [
                "10.100.0.5",
                "10.100.0.6",
            ],
        },
        "200": {
            "enabled": True,
            "type": "relay",
            "servers": ["10.200.0.5"],
        },
    },
    tunterm_extra_routes={
        "172.16.0.0/16": {
            "via": "10.0.0.10",
        },
        "192.168.100.0/24": {
            "via": "10.0.0.20",
        },
    },
    tunterm_hosts=[
        "mxedge1.example.com",
        "mxedge2.example.com",
        "10.10.10.100",
    ],
    tunterm_hosts_orders=[
        0,
        1,
        2,
    ],
    tunterm_hosts_selection="ordered",
    tunterm_monitorings=[
        [
            {
                "host": "10.0.0.1",
                "port": 443,
                "protocol": "https",
                "src_vlan_id": 100,
                "timeout": 10,
            },
            {
                "host": "10.0.0.2",
                "port": 80,
                "protocol": "http",
                "src_vlan_id": 100,
                "timeout": 5,
            },
        ],
        [{
            "host": "8.8.8.8",
            "port": 443,
            "protocol": "https",
            "src_vlan_id": 200,
            "timeout": 10,
        }],
    ],
    tunterm_monitoring_disabled=False)

    package main

import (
	"github.com/pulumi/pulumi-junipermist/sdk/go/junipermist/org"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// Resource for importing existing mxcluster
		// Import with: terraform import mist_org_mxcluster.existing_mxcluster "<org_id>.<mxcluster_id>"
		_, err := org.NewMxcluster(ctx, "existing_mxcluster", &org.MxclusterArgs{
			OrgId:  pulumi.Any(terraformTest.Id),
			Name:   pulumi.String("edgey_cluster"),
			SiteId: pulumi.Any(terraformTestSite.Id),
		})
		if err != nil {
			return err
		}
		// Create new mxcluster
		_, err = org.NewMxcluster(ctx, "new_mxcluster", &org.MxclusterArgs{
			OrgId:  pulumi.Any(terraformTest.Id),
			Name:   pulumi.String("edgey_cluster_new"),
			SiteId: pulumi.Any(terraformTestSite.Id),
			MistDas: &org.MxclusterMistDasArgs{
				Enabled: pulumi.Bool(true),
				CoaServers: org.MxclusterMistDasCoaServerArray{
					&org.MxclusterMistDasCoaServerArgs{
						DisableEventTimestampCheck:  pulumi.Bool(false),
						Enabled:                     pulumi.Bool(true),
						Host:                        pulumi.String("10.10.10.10"),
						Port:                        pulumi.Int(3799),
						RequireMessageAuthenticator: pulumi.Bool(true),
						Secret:                      pulumi.String("coa-secret-123"),
					},
					&org.MxclusterMistDasCoaServerArgs{
						Enabled: pulumi.Bool(true),
						Host:    pulumi.String("10.10.10.11"),
						Port:    pulumi.Int(3799),
						Secret:  pulumi.String("coa-secret-456"),
					},
				},
			},
			MistNac: &org.MxclusterMistNacArgs{
				Enabled:        pulumi.Bool(true),
				AcctServerPort: pulumi.Int(1813),
				AuthServerPort: pulumi.Int(1812),
				Secret:         pulumi.String("nac-shared-secret"),
			},
			MxedgeMgmt: &org.MxclusterMxedgeMgmtArgs{
				ConfigAutoRevert: pulumi.Bool(true),
				FipsEnabled:      pulumi.Bool(false),
				MistPassword:     pulumi.String("mist-password-123"),
				RootPassword:     pulumi.String("root-password-456"),
				OobIpType:        pulumi.String("static"),
				OobIpType6:       pulumi.String("dhcp"),
			},
			Proxy: &org.MxclusterProxyArgs{
				Disabled: pulumi.Bool(false),
				Url:      pulumi.String("http://proxy.example.com:8080"),
			},
			Radsec: &org.MxclusterRadsecArgs{
				Enabled:         pulumi.Bool(true),
				MatchSsid:       pulumi.Bool(true),
				NasIpSource:     pulumi.String("tunnel"),
				ServerSelection: pulumi.String("ordered"),
				SrcIpSource:     pulumi.String("tunnel"),
				ProxyHosts: pulumi.StringArray{
					pulumi.String("radsec1.example.com"),
					pulumi.String("radsec2.example.com"),
				},
				AcctServers: org.MxclusterRadsecAcctServerArray{
					&org.MxclusterRadsecAcctServerArgs{
						Host:   pulumi.String("acct1.example.com"),
						Port:   pulumi.Int(2083),
						Secret: pulumi.String("acct-secret-123"),
						Ssids: pulumi.StringArray{
							pulumi.String("Corporate"),
							pulumi.String("Guest"),
						},
					},
					&org.MxclusterRadsecAcctServerArgs{
						Host:   pulumi.String("acct2.example.com"),
						Port:   pulumi.Int(2083),
						Secret: pulumi.String("acct-secret-456"),
						Ssids: pulumi.StringArray{
							pulumi.String("Corporate"),
						},
					},
				},
				AuthServers: org.MxclusterRadsecAuthServerArray{
					&org.MxclusterRadsecAuthServerArgs{
						Host:                 pulumi.String("auth1.example.com"),
						Port:                 pulumi.Int(2083),
						Secret:               pulumi.String("auth-secret-123"),
						InbandStatusCheck:    pulumi.Bool(true),
						InbandStatusInterval: pulumi.Int(60),
						KeywrapEnabled:       pulumi.Bool(true),
						KeywrapFormat:        pulumi.String("hex"),
						KeywrapKek:           pulumi.String("keywrap-kek-value"),
						KeywrapMack:          pulumi.String("keywrap-mack-value"),
						Retry:                pulumi.Int(3),
						Timeout:              pulumi.Int(30),
						Ssids: pulumi.StringArray{
							pulumi.String("Corporate"),
							pulumi.String("Guest"),
						},
					},
					&org.MxclusterRadsecAuthServerArgs{
						Host:    pulumi.String("auth2.example.com"),
						Port:    pulumi.Int(2083),
						Secret:  pulumi.String("auth-secret-456"),
						Retry:   pulumi.Int(3),
						Timeout: pulumi.Int(30),
						Ssids: pulumi.StringArray{
							pulumi.String("Corporate"),
						},
					},
				},
			},
			TuntermApSubnets: pulumi.StringArray{
				pulumi.String("192.168.10.0/24"),
				pulumi.String("192.168.20.0/24"),
				pulumi.String("10.100.0.0/16"),
			},
			TuntermDhcpdConfig: org.MxclusterTuntermDhcpdConfigMap{
				"100": &org.MxclusterTuntermDhcpdConfigArgs{
					Enabled: pulumi.Bool(true),
					Type:    pulumi.String("relay"),
					Servers: pulumi.StringArray{
						pulumi.String("10.100.0.5"),
						pulumi.String("10.100.0.6"),
					},
				},
				"200": &org.MxclusterTuntermDhcpdConfigArgs{
					Enabled: pulumi.Bool(true),
					Type:    pulumi.String("relay"),
					Servers: pulumi.StringArray{
						pulumi.String("10.200.0.5"),
					},
				},
			},
			TuntermExtraRoutes: org.MxclusterTuntermExtraRoutesMap{
				"172.16.0.0/16": &org.MxclusterTuntermExtraRoutesArgs{
					Via: pulumi.String("10.0.0.10"),
				},
				"192.168.100.0/24": &org.MxclusterTuntermExtraRoutesArgs{
					Via: pulumi.String("10.0.0.20"),
				},
			},
			TuntermHosts: pulumi.StringArray{
				pulumi.String("mxedge1.example.com"),
				pulumi.String("mxedge2.example.com"),
				pulumi.String("10.10.10.100"),
			},
			TuntermHostsOrders: pulumi.IntArray{
				pulumi.Int(0),
				pulumi.Int(1),
				pulumi.Int(2),
			},
			TuntermHostsSelection: pulumi.String("ordered"),
			TuntermMonitorings: org.MxclusterTuntermMonitoringArrayArray{
				org.MxclusterTuntermMonitoringArray{
					&org.MxclusterTuntermMonitoringArgs{
						Host:      pulumi.String("10.0.0.1"),
						Port:      pulumi.Int(443),
						Protocol:  pulumi.String("https"),
						SrcVlanId: pulumi.Int(100),
						Timeout:   pulumi.Int(10),
					},
					&org.MxclusterTuntermMonitoringArgs{
						Host:      pulumi.String("10.0.0.2"),
						Port:      pulumi.Int(80),
						Protocol:  pulumi.String("http"),
						SrcVlanId: pulumi.Int(100),
						Timeout:   pulumi.Int(5),
					},
				},
				org.MxclusterTuntermMonitoringArray{
					&org.MxclusterTuntermMonitoringArgs{
						Host:      pulumi.String("8.8.8.8"),
						Port:      pulumi.Int(443),
						Protocol:  pulumi.String("https"),
						SrcVlanId: pulumi.Int(200),
						Timeout:   pulumi.Int(10),
					},
				},
			},
			TuntermMonitoringDisabled: pulumi.Bool(false),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using JuniperMist = Pulumi.JuniperMist;

return await Deployment.RunAsync(() => 
{
    // Resource for importing existing mxcluster
    // Import with: terraform import mist_org_mxcluster.existing_mxcluster "<org_id>.<mxcluster_id>"
    var existingMxcluster = new JuniperMist.Org.Mxcluster("existing_mxcluster", new()
    {
        OrgId = terraformTest.Id,
        Name = "edgey_cluster",
        SiteId = terraformTestSite.Id,
    });

    // Create new mxcluster
    var newMxcluster = new JuniperMist.Org.Mxcluster("new_mxcluster", new()
    {
        OrgId = terraformTest.Id,
        Name = "edgey_cluster_new",
        SiteId = terraformTestSite.Id,
        MistDas = new JuniperMist.Org.Inputs.MxclusterMistDasArgs
        {
            Enabled = true,
            CoaServers = new[]
            {
                new JuniperMist.Org.Inputs.MxclusterMistDasCoaServerArgs
                {
                    DisableEventTimestampCheck = false,
                    Enabled = true,
                    Host = "10.10.10.10",
                    Port = 3799,
                    RequireMessageAuthenticator = true,
                    Secret = "coa-secret-123",
                },
                new JuniperMist.Org.Inputs.MxclusterMistDasCoaServerArgs
                {
                    Enabled = true,
                    Host = "10.10.10.11",
                    Port = 3799,
                    Secret = "coa-secret-456",
                },
            },
        },
        MistNac = new JuniperMist.Org.Inputs.MxclusterMistNacArgs
        {
            Enabled = true,
            AcctServerPort = 1813,
            AuthServerPort = 1812,
            Secret = "nac-shared-secret",
        },
        MxedgeMgmt = new JuniperMist.Org.Inputs.MxclusterMxedgeMgmtArgs
        {
            ConfigAutoRevert = true,
            FipsEnabled = false,
            MistPassword = "mist-password-123",
            RootPassword = "root-password-456",
            OobIpType = "static",
            OobIpType6 = "dhcp",
        },
        Proxy = new JuniperMist.Org.Inputs.MxclusterProxyArgs
        {
            Disabled = false,
            Url = "http://proxy.example.com:8080",
        },
        Radsec = new JuniperMist.Org.Inputs.MxclusterRadsecArgs
        {
            Enabled = true,
            MatchSsid = true,
            NasIpSource = "tunnel",
            ServerSelection = "ordered",
            SrcIpSource = "tunnel",
            ProxyHosts = new[]
            {
                "radsec1.example.com",
                "radsec2.example.com",
            },
            AcctServers = new[]
            {
                new JuniperMist.Org.Inputs.MxclusterRadsecAcctServerArgs
                {
                    Host = "acct1.example.com",
                    Port = 2083,
                    Secret = "acct-secret-123",
                    Ssids = new[]
                    {
                        "Corporate",
                        "Guest",
                    },
                },
                new JuniperMist.Org.Inputs.MxclusterRadsecAcctServerArgs
                {
                    Host = "acct2.example.com",
                    Port = 2083,
                    Secret = "acct-secret-456",
                    Ssids = new[]
                    {
                        "Corporate",
                    },
                },
            },
            AuthServers = new[]
            {
                new JuniperMist.Org.Inputs.MxclusterRadsecAuthServerArgs
                {
                    Host = "auth1.example.com",
                    Port = 2083,
                    Secret = "auth-secret-123",
                    InbandStatusCheck = true,
                    InbandStatusInterval = 60,
                    KeywrapEnabled = true,
                    KeywrapFormat = "hex",
                    KeywrapKek = "keywrap-kek-value",
                    KeywrapMack = "keywrap-mack-value",
                    Retry = 3,
                    Timeout = 30,
                    Ssids = new[]
                    {
                        "Corporate",
                        "Guest",
                    },
                },
                new JuniperMist.Org.Inputs.MxclusterRadsecAuthServerArgs
                {
                    Host = "auth2.example.com",
                    Port = 2083,
                    Secret = "auth-secret-456",
                    Retry = 3,
                    Timeout = 30,
                    Ssids = new[]
                    {
                        "Corporate",
                    },
                },
            },
        },
        TuntermApSubnets = new[]
        {
            "192.168.10.0/24",
            "192.168.20.0/24",
            "10.100.0.0/16",
        },
        TuntermDhcpdConfig = 
        {
            { "100", new JuniperMist.Org.Inputs.MxclusterTuntermDhcpdConfigArgs
            {
                Enabled = true,
                Type = "relay",
                Servers = new[]
                {
                    "10.100.0.5",
                    "10.100.0.6",
                },
            } },
            { "200", new JuniperMist.Org.Inputs.MxclusterTuntermDhcpdConfigArgs
            {
                Enabled = true,
                Type = "relay",
                Servers = new[]
                {
                    "10.200.0.5",
                },
            } },
        },
        TuntermExtraRoutes = 
        {
            { "172.16.0.0/16", new JuniperMist.Org.Inputs.MxclusterTuntermExtraRoutesArgs
            {
                Via = "10.0.0.10",
            } },
            { "192.168.100.0/24", new JuniperMist.Org.Inputs.MxclusterTuntermExtraRoutesArgs
            {
                Via = "10.0.0.20",
            } },
        },
        TuntermHosts = new[]
        {
            "mxedge1.example.com",
            "mxedge2.example.com",
            "10.10.10.100",
        },
        TuntermHostsOrders = new[]
        {
            0,
            1,
            2,
        },
        TuntermHostsSelection = "ordered",
        TuntermMonitorings = new[]
        {
            new[]
            {
                new JuniperMist.Org.Inputs.MxclusterTuntermMonitoringArgs
                {
                    Host = "10.0.0.1",
                    Port = 443,
                    Protocol = "https",
                    SrcVlanId = 100,
                    Timeout = 10,
                },
                new JuniperMist.Org.Inputs.MxclusterTuntermMonitoringArgs
                {
                    Host = "10.0.0.2",
                    Port = 80,
                    Protocol = "http",
                    SrcVlanId = 100,
                    Timeout = 5,
                },
            },
            new[]
            {
                new JuniperMist.Org.Inputs.MxclusterTuntermMonitoringArgs
                {
                    Host = "8.8.8.8",
                    Port = 443,
                    Protocol = "https",
                    SrcVlanId = 200,
                    Timeout = 10,
                },
            },
        },
        TuntermMonitoringDisabled = false,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.org.Mxcluster;
import com.pulumi.junipermist.org.MxclusterArgs;
import com.pulumi.junipermist.org.inputs.MxclusterMistDasArgs;
import com.pulumi.junipermist.org.inputs.MxclusterMistNacArgs;
import com.pulumi.junipermist.org.inputs.MxclusterMxedgeMgmtArgs;
import com.pulumi.junipermist.org.inputs.MxclusterProxyArgs;
import com.pulumi.junipermist.org.inputs.MxclusterRadsecArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // Resource for importing existing mxcluster
        // Import with: terraform import mist_org_mxcluster.existing_mxcluster "<org_id>.<mxcluster_id>"
        var existingMxcluster = new Mxcluster("existingMxcluster", MxclusterArgs.builder()
            .orgId(terraformTest.id())
            .name("edgey_cluster")
            .siteId(terraformTestSite.id())
            .build());

        // Create new mxcluster
        var newMxcluster = new Mxcluster("newMxcluster", MxclusterArgs.builder()
            .orgId(terraformTest.id())
            .name("edgey_cluster_new")
            .siteId(terraformTestSite.id())
            .mistDas(MxclusterMistDasArgs.builder()
                .enabled(true)
                .coaServers(                
                    MxclusterMistDasCoaServerArgs.builder()
                        .disableEventTimestampCheck(false)
                        .enabled(true)
                        .host("10.10.10.10")
                        .port(3799)
                        .requireMessageAuthenticator(true)
                        .secret("coa-secret-123")
                        .build(),
                    MxclusterMistDasCoaServerArgs.builder()
                        .enabled(true)
                        .host("10.10.10.11")
                        .port(3799)
                        .secret("coa-secret-456")
                        .build())
                .build())
            .mistNac(MxclusterMistNacArgs.builder()
                .enabled(true)
                .acctServerPort(1813)
                .authServerPort(1812)
                .secret("nac-shared-secret")
                .build())
            .mxedgeMgmt(MxclusterMxedgeMgmtArgs.builder()
                .configAutoRevert(true)
                .fipsEnabled(false)
                .mistPassword("mist-password-123")
                .rootPassword("root-password-456")
                .oobIpType("static")
                .oobIpType6("dhcp")
                .build())
            .proxy(MxclusterProxyArgs.builder()
                .disabled(false)
                .url("http://proxy.example.com:8080")
                .build())
            .radsec(MxclusterRadsecArgs.builder()
                .enabled(true)
                .matchSsid(true)
                .nasIpSource("tunnel")
                .serverSelection("ordered")
                .srcIpSource("tunnel")
                .proxyHosts(                
                    "radsec1.example.com",
                    "radsec2.example.com")
                .acctServers(                
                    MxclusterRadsecAcctServerArgs.builder()
                        .host("acct1.example.com")
                        .port(2083)
                        .secret("acct-secret-123")
                        .ssids(                        
                            "Corporate",
                            "Guest")
                        .build(),
                    MxclusterRadsecAcctServerArgs.builder()
                        .host("acct2.example.com")
                        .port(2083)
                        .secret("acct-secret-456")
                        .ssids("Corporate")
                        .build())
                .authServers(                
                    MxclusterRadsecAuthServerArgs.builder()
                        .host("auth1.example.com")
                        .port(2083)
                        .secret("auth-secret-123")
                        .inbandStatusCheck(true)
                        .inbandStatusInterval(60)
                        .keywrapEnabled(true)
                        .keywrapFormat("hex")
                        .keywrapKek("keywrap-kek-value")
                        .keywrapMack("keywrap-mack-value")
                        .retry(3)
                        .timeout(30)
                        .ssids(                        
                            "Corporate",
                            "Guest")
                        .build(),
                    MxclusterRadsecAuthServerArgs.builder()
                        .host("auth2.example.com")
                        .port(2083)
                        .secret("auth-secret-456")
                        .retry(3)
                        .timeout(30)
                        .ssids("Corporate")
                        .build())
                .build())
            .tuntermApSubnets(            
                "192.168.10.0/24",
                "192.168.20.0/24",
                "10.100.0.0/16")
            .tuntermDhcpdConfig(Map.ofEntries(
                Map.entry("100", MxclusterTuntermDhcpdConfigArgs.builder()
                    .enabled(true)
                    .type("relay")
                    .servers(                    
                        "10.100.0.5",
                        "10.100.0.6")
                    .build()),
                Map.entry("200", MxclusterTuntermDhcpdConfigArgs.builder()
                    .enabled(true)
                    .type("relay")
                    .servers("10.200.0.5")
                    .build())
            ))
            .tuntermExtraRoutes(Map.ofEntries(
                Map.entry("172.16.0.0/16", MxclusterTuntermExtraRoutesArgs.builder()
                    .via("10.0.0.10")
                    .build()),
                Map.entry("192.168.100.0/24", MxclusterTuntermExtraRoutesArgs.builder()
                    .via("10.0.0.20")
                    .build())
            ))
            .tuntermHosts(            
                "mxedge1.example.com",
                "mxedge2.example.com",
                "10.10.10.100")
            .tuntermHostsOrders(            
                0,
                1,
                2)
            .tuntermHostsSelection("ordered")
            .tuntermMonitorings(            
                                
                    MxclusterTuntermMonitoringArgs.builder()
                        .host("10.0.0.1")
                        .port(443)
                        .protocol("https")
                        .srcVlanId(100)
                        .timeout(10)
                        .build(),
                    MxclusterTuntermMonitoringArgs.builder()
                        .host("10.0.0.2")
                        .port(80)
                        .protocol("http")
                        .srcVlanId(100)
                        .timeout(5)
                        .build(),
                MxclusterTuntermMonitoringArgs.builder()
                    .host("8.8.8.8")
                    .port(443)
                    .protocol("https")
                    .srcVlanId(200)
                    .timeout(10)
                    .build())
            .tuntermMonitoringDisabled(false)
            .build());

    }
}

    resources:
  # Resource for importing existing mxcluster
  # Import with: terraform import mist_org_mxcluster.existing_mxcluster "<org_id>.<mxcluster_id>"
  existingMxcluster:
    type: junipermist:org:Mxcluster
    name: existing_mxcluster
    properties:
      orgId: ${terraformTest.id}
      name: edgey_cluster
      siteId: ${terraformTestSite.id}
  # Create new mxcluster
  newMxcluster:
    type: junipermist:org:Mxcluster
    name: new_mxcluster
    properties:
      orgId: ${terraformTest.id}
      name: edgey_cluster_new
      siteId: ${terraformTestSite.id}
      mistDas:
        enabled: true
        coaServers:
          - disableEventTimestampCheck: false
            enabled: true
            host: 10.10.10.10
            port: 3799
            requireMessageAuthenticator: true
            secret: coa-secret-123
          - enabled: true
            host: 10.10.10.11
            port: 3799
            secret: coa-secret-456
      mistNac:
        enabled: true
        acctServerPort: 1813
        authServerPort: 1812
        secret: nac-shared-secret
      mxedgeMgmt:
        configAutoRevert: true
        fipsEnabled: false
        mistPassword: mist-password-123
        rootPassword: root-password-456
        oobIpType: static
        oobIpType6: dhcp
      proxy:
        disabled: false
        url: http://proxy.example.com:8080
      radsec:
        enabled: true
        matchSsid: true
        nasIpSource: tunnel
        serverSelection: ordered
        srcIpSource: tunnel
        proxyHosts:
          - radsec1.example.com
          - radsec2.example.com
        acctServers:
          - host: acct1.example.com
            port: 2083
            secret: acct-secret-123
            ssids:
              - Corporate
              - Guest
          - host: acct2.example.com
            port: 2083
            secret: acct-secret-456
            ssids:
              - Corporate
        authServers:
          - host: auth1.example.com
            port: 2083
            secret: auth-secret-123
            inbandStatusCheck: true
            inbandStatusInterval: 60
            keywrapEnabled: true
            keywrapFormat: hex
            keywrapKek: keywrap-kek-value
            keywrapMack: keywrap-mack-value
            retry: 3
            timeout: 30
            ssids:
              - Corporate
              - Guest
          - host: auth2.example.com
            port: 2083
            secret: auth-secret-456
            retry: 3
            timeout: 30
            ssids:
              - Corporate
      tuntermApSubnets:
        - 192.168.10.0/24
        - 192.168.20.0/24
        - 10.100.0.0/16
      tuntermDhcpdConfig:
        '100':
          enabled: true
          type: relay
          servers:
            - 10.100.0.5
            - 10.100.0.6
        '200':
          enabled: true
          type: relay
          servers:
            - 10.200.0.5
      tuntermExtraRoutes:
        172.16.0.0/16:
          via: 10.0.0.10
        192.168.100.0/24:
          via: 10.0.0.20
      tuntermHosts:
        - mxedge1.example.com
        - mxedge2.example.com
        - 10.10.10.100
      tuntermHostsOrders:
        - 0
        - 1
        - 2
      tuntermHostsSelection: ordered
      tuntermMonitorings:
        - - host: 10.0.0.1
            port: 443
            protocol: https
            srcVlanId: 100
            timeout: 10
          - host: 10.0.0.2
            port: 80
            protocol: http
            srcVlanId: 100
            timeout: 5
        - - host: 8.8.8.8
            port: 443
            protocol: https
            srcVlanId: 200
            timeout: 10
      tuntermMonitoringDisabled: false

    Create Mxcluster Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Mxcluster(name: string, args: MxclusterArgs, opts?: CustomResourceOptions);
    @overload
def Mxcluster(resource_name: str,
              args: MxclusterArgs,
              opts: Optional[ResourceOptions] = None)

@overload
def Mxcluster(resource_name: str,
              opts: Optional[ResourceOptions] = None,
              org_id: Optional[str] = None,
              tunterm_ap_subnets: Optional[Sequence[str]] = None,
              tunterm_hosts: Optional[Sequence[str]] = None,
              name: Optional[str] = None,
              mist_nac: Optional[MxclusterMistNacArgs] = None,
              proxy: Optional[MxclusterProxyArgs] = None,
              radsec: Optional[MxclusterRadsecArgs] = None,
              mxedge_mgmt: Optional[MxclusterMxedgeMgmtArgs] = None,
              tunterm_dhcpd_config: Optional[Mapping[str, MxclusterTuntermDhcpdConfigArgs]] = None,
              site_id: Optional[str] = None,
              tunterm_extra_routes: Optional[Mapping[str, MxclusterTuntermExtraRoutesArgs]] = None,
              mist_das: Optional[MxclusterMistDasArgs] = None,
              tunterm_hosts_orders: Optional[Sequence[int]] = None,
              tunterm_hosts_selection: Optional[str] = None,
              tunterm_monitoring_disabled: Optional[bool] = None,
              tunterm_monitorings: Optional[Sequence[Sequence[MxclusterTuntermMonitoringArgs]]] = None)
    func NewMxcluster(ctx *Context, name string, args MxclusterArgs, opts ...ResourceOption) (*Mxcluster, error)
    public Mxcluster(string name, MxclusterArgs args, CustomResourceOptions? opts = null)
    public Mxcluster(String name, MxclusterArgs args)
public Mxcluster(String name, MxclusterArgs args, CustomResourceOptions options)

    type: junipermist:org:Mxcluster
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args MxclusterArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args MxclusterArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args MxclusterArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args MxclusterArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args MxclusterArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var mxclusterResource = new JuniperMist.Org.Mxcluster("mxclusterResource", new()
{
    OrgId = "string",
    TuntermApSubnets = new[]
    {
        "string",
    },
    TuntermHosts = new[]
    {
        "string",
    },
    Name = "string",
    MistNac = new JuniperMist.Org.Inputs.MxclusterMistNacArgs
    {
        AcctServerPort = 0,
        AuthServerPort = 0,
        ClientIps = 
        {
            { "string", null },
        },
        Enabled = false,
        Secret = "string",
    },
    Proxy = new JuniperMist.Org.Inputs.MxclusterProxyArgs
    {
        Disabled = false,
        Url = "string",
    },
    Radsec = new JuniperMist.Org.Inputs.MxclusterRadsecArgs
    {
        AcctServers = new[]
        {
            new JuniperMist.Org.Inputs.MxclusterRadsecAcctServerArgs
            {
                Host = "string",
                Port = 0,
                Secret = "string",
                Ssids = new[]
                {
                    "string",
                },
            },
        },
        AuthServers = new[]
        {
            new JuniperMist.Org.Inputs.MxclusterRadsecAuthServerArgs
            {
                Host = "string",
                InbandStatusCheck = false,
                InbandStatusInterval = 0,
                KeywrapEnabled = false,
                KeywrapFormat = "string",
                KeywrapKek = "string",
                KeywrapMack = "string",
                Port = 0,
                Retry = 0,
                Secret = "string",
                Ssids = new[]
                {
                    "string",
                },
                Timeout = 0,
            },
        },
        Enabled = false,
        MatchSsid = false,
        NasIpSource = "string",
        ProxyHosts = new[]
        {
            "string",
        },
        ServerSelection = "string",
        SrcIpSource = "string",
    },
    MxedgeMgmt = new JuniperMist.Org.Inputs.MxclusterMxedgeMgmtArgs
    {
        ConfigAutoRevert = false,
        FipsEnabled = false,
        MistPassword = "string",
        OobIpType = "string",
        OobIpType6 = "string",
        RootPassword = "string",
    },
    TuntermDhcpdConfig = 
    {
        { "string", new JuniperMist.Org.Inputs.MxclusterTuntermDhcpdConfigArgs
        {
            Enabled = false,
            Servers = new[]
            {
                "string",
            },
            Type = "string",
        } },
    },
    SiteId = "string",
    TuntermExtraRoutes = 
    {
        { "string", new JuniperMist.Org.Inputs.MxclusterTuntermExtraRoutesArgs
        {
            Via = "string",
        } },
    },
    MistDas = new JuniperMist.Org.Inputs.MxclusterMistDasArgs
    {
        CoaServers = new[]
        {
            new JuniperMist.Org.Inputs.MxclusterMistDasCoaServerArgs
            {
                DisableEventTimestampCheck = false,
                Enabled = false,
                Host = "string",
                Port = 0,
                RequireMessageAuthenticator = false,
                Secret = "string",
            },
        },
        Enabled = false,
    },
    TuntermHostsOrders = new[]
    {
        0,
    },
    TuntermHostsSelection = "string",
    TuntermMonitoringDisabled = false,
    TuntermMonitorings = new[]
    {
        new[]
        {
            new JuniperMist.Org.Inputs.MxclusterTuntermMonitoringArgs
            {
                Host = "string",
                Port = 0,
                Protocol = "string",
                SrcVlanId = 0,
                Timeout = 0,
            },
        },
    },
});

    example, err := org.NewMxcluster(ctx, "mxclusterResource", &org.MxclusterArgs{
	OrgId: pulumi.String("string"),
	TuntermApSubnets: pulumi.StringArray{
		pulumi.String("string"),
	},
	TuntermHosts: pulumi.StringArray{
		pulumi.String("string"),
	},
	Name: pulumi.String("string"),
	MistNac: &org.MxclusterMistNacArgs{
		AcctServerPort: pulumi.Int(0),
		AuthServerPort: pulumi.Int(0),
		ClientIps: org.MxclusterMistNacClientIpsMap{
			"string": &org.MxclusterMistNacClientIpsArgs{},
		},
		Enabled: pulumi.Bool(false),
		Secret:  pulumi.String("string"),
	},
	Proxy: &org.MxclusterProxyArgs{
		Disabled: pulumi.Bool(false),
		Url:      pulumi.String("string"),
	},
	Radsec: &org.MxclusterRadsecArgs{
		AcctServers: org.MxclusterRadsecAcctServerArray{
			&org.MxclusterRadsecAcctServerArgs{
				Host:   pulumi.String("string"),
				Port:   pulumi.Int(0),
				Secret: pulumi.String("string"),
				Ssids: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
		AuthServers: org.MxclusterRadsecAuthServerArray{
			&org.MxclusterRadsecAuthServerArgs{
				Host:                 pulumi.String("string"),
				InbandStatusCheck:    pulumi.Bool(false),
				InbandStatusInterval: pulumi.Int(0),
				KeywrapEnabled:       pulumi.Bool(false),
				KeywrapFormat:        pulumi.String("string"),
				KeywrapKek:           pulumi.String("string"),
				KeywrapMack:          pulumi.String("string"),
				Port:                 pulumi.Int(0),
				Retry:                pulumi.Int(0),
				Secret:               pulumi.String("string"),
				Ssids: pulumi.StringArray{
					pulumi.String("string"),
				},
				Timeout: pulumi.Int(0),
			},
		},
		Enabled:     pulumi.Bool(false),
		MatchSsid:   pulumi.Bool(false),
		NasIpSource: pulumi.String("string"),
		ProxyHosts: pulumi.StringArray{
			pulumi.String("string"),
		},
		ServerSelection: pulumi.String("string"),
		SrcIpSource:     pulumi.String("string"),
	},
	MxedgeMgmt: &org.MxclusterMxedgeMgmtArgs{
		ConfigAutoRevert: pulumi.Bool(false),
		FipsEnabled:      pulumi.Bool(false),
		MistPassword:     pulumi.String("string"),
		OobIpType:        pulumi.String("string"),
		OobIpType6:       pulumi.String("string"),
		RootPassword:     pulumi.String("string"),
	},
	TuntermDhcpdConfig: org.MxclusterTuntermDhcpdConfigMap{
		"string": &org.MxclusterTuntermDhcpdConfigArgs{
			Enabled: pulumi.Bool(false),
			Servers: pulumi.StringArray{
				pulumi.String("string"),
			},
			Type: pulumi.String("string"),
		},
	},
	SiteId: pulumi.String("string"),
	TuntermExtraRoutes: org.MxclusterTuntermExtraRoutesMap{
		"string": &org.MxclusterTuntermExtraRoutesArgs{
			Via: pulumi.String("string"),
		},
	},
	MistDas: &org.MxclusterMistDasArgs{
		CoaServers: org.MxclusterMistDasCoaServerArray{
			&org.MxclusterMistDasCoaServerArgs{
				DisableEventTimestampCheck:  pulumi.Bool(false),
				Enabled:                     pulumi.Bool(false),
				Host:                        pulumi.String("string"),
				Port:                        pulumi.Int(0),
				RequireMessageAuthenticator: pulumi.Bool(false),
				Secret:                      pulumi.String("string"),
			},
		},
		Enabled: pulumi.Bool(false),
	},
	TuntermHostsOrders: pulumi.IntArray{
		pulumi.Int(0),
	},
	TuntermHostsSelection:     pulumi.String("string"),
	TuntermMonitoringDisabled: pulumi.Bool(false),
	TuntermMonitorings: org.MxclusterTuntermMonitoringArrayArray{
		org.MxclusterTuntermMonitoringArray{
			&org.MxclusterTuntermMonitoringArgs{
				Host:      pulumi.String("string"),
				Port:      pulumi.Int(0),
				Protocol:  pulumi.String("string"),
				SrcVlanId: pulumi.Int(0),
				Timeout:   pulumi.Int(0),
			},
		},
	},
})

    var mxclusterResource = new Mxcluster("mxclusterResource", MxclusterArgs.builder()
    .orgId("string")
    .tuntermApSubnets("string")
    .tuntermHosts("string")
    .name("string")
    .mistNac(MxclusterMistNacArgs.builder()
        .acctServerPort(0)
        .authServerPort(0)
        .clientIps(Map.of("string", MxclusterMistNacClientIpsArgs.builder()
            .build()))
        .enabled(false)
        .secret("string")
        .build())
    .proxy(MxclusterProxyArgs.builder()
        .disabled(false)
        .url("string")
        .build())
    .radsec(MxclusterRadsecArgs.builder()
        .acctServers(MxclusterRadsecAcctServerArgs.builder()
            .host("string")
            .port(0)
            .secret("string")
            .ssids("string")
            .build())
        .authServers(MxclusterRadsecAuthServerArgs.builder()
            .host("string")
            .inbandStatusCheck(false)
            .inbandStatusInterval(0)
            .keywrapEnabled(false)
            .keywrapFormat("string")
            .keywrapKek("string")
            .keywrapMack("string")
            .port(0)
            .retry(0)
            .secret("string")
            .ssids("string")
            .timeout(0)
            .build())
        .enabled(false)
        .matchSsid(false)
        .nasIpSource("string")
        .proxyHosts("string")
        .serverSelection("string")
        .srcIpSource("string")
        .build())
    .mxedgeMgmt(MxclusterMxedgeMgmtArgs.builder()
        .configAutoRevert(false)
        .fipsEnabled(false)
        .mistPassword("string")
        .oobIpType("string")
        .oobIpType6("string")
        .rootPassword("string")
        .build())
    .tuntermDhcpdConfig(Map.of("string", MxclusterTuntermDhcpdConfigArgs.builder()
        .enabled(false)
        .servers("string")
        .type("string")
        .build()))
    .siteId("string")
    .tuntermExtraRoutes(Map.of("string", MxclusterTuntermExtraRoutesArgs.builder()
        .via("string")
        .build()))
    .mistDas(MxclusterMistDasArgs.builder()
        .coaServers(MxclusterMistDasCoaServerArgs.builder()
            .disableEventTimestampCheck(false)
            .enabled(false)
            .host("string")
            .port(0)
            .requireMessageAuthenticator(false)
            .secret("string")
            .build())
        .enabled(false)
        .build())
    .tuntermHostsOrders(0)
    .tuntermHostsSelection("string")
    .tuntermMonitoringDisabled(false)
    .tuntermMonitorings(MxclusterTuntermMonitoringArgs.builder()
        .host("string")
        .port(0)
        .protocol("string")
        .srcVlanId(0)
        .timeout(0)
        .build())
    .build());

    mxcluster_resource = junipermist.org.Mxcluster("mxclusterResource",
    org_id="string",
    tunterm_ap_subnets=["string"],
    tunterm_hosts=["string"],
    name="string",
    mist_nac={
        "acct_server_port": 0,
        "auth_server_port": 0,
        "client_ips": {
            "string": {},
        },
        "enabled": False,
        "secret": "string",
    },
    proxy={
        "disabled": False,
        "url": "string",
    },
    radsec={
        "acct_servers": [{
            "host": "string",
            "port": 0,
            "secret": "string",
            "ssids": ["string"],
        }],
        "auth_servers": [{
            "host": "string",
            "inband_status_check": False,
            "inband_status_interval": 0,
            "keywrap_enabled": False,
            "keywrap_format": "string",
            "keywrap_kek": "string",
            "keywrap_mack": "string",
            "port": 0,
            "retry": 0,
            "secret": "string",
            "ssids": ["string"],
            "timeout": 0,
        }],
        "enabled": False,
        "match_ssid": False,
        "nas_ip_source": "string",
        "proxy_hosts": ["string"],
        "server_selection": "string",
        "src_ip_source": "string",
    },
    mxedge_mgmt={
        "config_auto_revert": False,
        "fips_enabled": False,
        "mist_password": "string",
        "oob_ip_type": "string",
        "oob_ip_type6": "string",
        "root_password": "string",
    },
    tunterm_dhcpd_config={
        "string": {
            "enabled": False,
            "servers": ["string"],
            "type": "string",
        },
    },
    site_id="string",
    tunterm_extra_routes={
        "string": {
            "via": "string",
        },
    },
    mist_das={
        "coa_servers": [{
            "disable_event_timestamp_check": False,
            "enabled": False,
            "host": "string",
            "port": 0,
            "require_message_authenticator": False,
            "secret": "string",
        }],
        "enabled": False,
    },
    tunterm_hosts_orders=[0],
    tunterm_hosts_selection="string",
    tunterm_monitoring_disabled=False,
    tunterm_monitorings=[[{
        "host": "string",
        "port": 0,
        "protocol": "string",
        "src_vlan_id": 0,
        "timeout": 0,
    }]])

    const mxclusterResource = new junipermist.org.Mxcluster("mxclusterResource", {
    orgId: "string",
    tuntermApSubnets: ["string"],
    tuntermHosts: ["string"],
    name: "string",
    mistNac: {
        acctServerPort: 0,
        authServerPort: 0,
        clientIps: {
            string: {},
        },
        enabled: false,
        secret: "string",
    },
    proxy: {
        disabled: false,
        url: "string",
    },
    radsec: {
        acctServers: [{
            host: "string",
            port: 0,
            secret: "string",
            ssids: ["string"],
        }],
        authServers: [{
            host: "string",
            inbandStatusCheck: false,
            inbandStatusInterval: 0,
            keywrapEnabled: false,
            keywrapFormat: "string",
            keywrapKek: "string",
            keywrapMack: "string",
            port: 0,
            retry: 0,
            secret: "string",
            ssids: ["string"],
            timeout: 0,
        }],
        enabled: false,
        matchSsid: false,
        nasIpSource: "string",
        proxyHosts: ["string"],
        serverSelection: "string",
        srcIpSource: "string",
    },
    mxedgeMgmt: {
        configAutoRevert: false,
        fipsEnabled: false,
        mistPassword: "string",
        oobIpType: "string",
        oobIpType6: "string",
        rootPassword: "string",
    },
    tuntermDhcpdConfig: {
        string: {
            enabled: false,
            servers: ["string"],
            type: "string",
        },
    },
    siteId: "string",
    tuntermExtraRoutes: {
        string: {
            via: "string",
        },
    },
    mistDas: {
        coaServers: [{
            disableEventTimestampCheck: false,
            enabled: false,
            host: "string",
            port: 0,
            requireMessageAuthenticator: false,
            secret: "string",
        }],
        enabled: false,
    },
    tuntermHostsOrders: [0],
    tuntermHostsSelection: "string",
    tuntermMonitoringDisabled: false,
    tuntermMonitorings: [[{
        host: "string",
        port: 0,
        protocol: "string",
        srcVlanId: 0,
        timeout: 0,
    }]],
});

    type: junipermist:org:Mxcluster
properties:
    mistDas:
        coaServers:
            - disableEventTimestampCheck: false
              enabled: false
              host: string
              port: 0
              requireMessageAuthenticator: false
              secret: string
        enabled: false
    mistNac:
        acctServerPort: 0
        authServerPort: 0
        clientIps:
            string: {}
        enabled: false
        secret: string
    mxedgeMgmt:
        configAutoRevert: false
        fipsEnabled: false
        mistPassword: string
        oobIpType: string
        oobIpType6: string
        rootPassword: string
    name: string
    orgId: string
    proxy:
        disabled: false
        url: string
    radsec:
        acctServers:
            - host: string
              port: 0
              secret: string
              ssids:
                - string
        authServers:
            - host: string
              inbandStatusCheck: false
              inbandStatusInterval: 0
              keywrapEnabled: false
              keywrapFormat: string
              keywrapKek: string
              keywrapMack: string
              port: 0
              retry: 0
              secret: string
              ssids:
                - string
              timeout: 0
        enabled: false
        matchSsid: false
        nasIpSource: string
        proxyHosts:
            - string
        serverSelection: string
        srcIpSource: string
    siteId: string
    tuntermApSubnets:
        - string
    tuntermDhcpdConfig:
        string:
            enabled: false
            servers:
                - string
            type: string
    tuntermExtraRoutes:
        string:
            via: string
    tuntermHosts:
        - string
    tuntermHostsOrders:
        - 0
    tuntermHostsSelection: string
    tuntermMonitoringDisabled: false
    tuntermMonitorings:
        - - host: string
            port: 0
            protocol: string
            srcVlanId: 0
            timeout: 0

    Mxcluster Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Mxcluster resource accepts the following input properties:

    OrgId string
    MistDas Pulumi.JuniperMist.Org.Inputs.MxclusterMistDas
    Configure cloud-assisted dynamic authorization service on this cluster of mist edges
    MistNac Pulumi.JuniperMist.Org.Inputs.MxclusterMistNac
    MxedgeMgmt Pulumi.JuniperMist.Org.Inputs.MxclusterMxedgeMgmt
    Name string
    Proxy Pulumi.JuniperMist.Org.Inputs.MxclusterProxy
    Proxy Configuration to talk to Mist
    Radsec Pulumi.JuniperMist.Org.Inputs.MxclusterRadsec
    MxEdge RadSec Configuration
    SiteId string
    TuntermApSubnets List<string>
    List of subnets where we allow AP to establish Mist Tunnels from
    TuntermDhcpdConfig Dictionary<string, Pulumi.JuniperMist.Org.Inputs.MxclusterTuntermDhcpdConfigArgs>
    DHCP server/relay configuration of Mist Tunneled VLANs. Property key is the VLAN ID
    TuntermExtraRoutes Dictionary<string, Pulumi.JuniperMist.Org.Inputs.MxclusterTuntermExtraRoutesArgs>
    Extra routes for Mist Tunneled VLANs. Property key is a CIDR
    TuntermHosts List<string>
    Hostnames or IPs where a Mist Tunnel will use as the Peer (i.e. they are reachable from AP)
    TuntermHostsOrders List<int>
    List of index of tunterm_hosts
    TuntermHostsSelection string
    Ordering of tuntermHosts for mxedge within the same mxcluster. enum:

    • shuffle: the ordering of tuntermHosts is randomized by the device''s MAC
    • shuffle-by-site: shuffle by site_id+tunnel_id (so when client connects to a specific Tunnel, it will go to the same (order of) mxedge, and we load-balancing between tunnels)
    • ordered: order decided by tunterm_hosts_order
    TuntermMonitoringDisabled bool
    TuntermMonitorings List<ImmutableArray<Pulumi.JuniperMist.Org.Inputs.MxclusterTuntermMonitoring>>
    OrgId string
    MistDas MxclusterMistDasArgs
    Configure cloud-assisted dynamic authorization service on this cluster of mist edges
    MistNac MxclusterMistNacArgs
    MxedgeMgmt MxclusterMxedgeMgmtArgs
    Name string
    Proxy MxclusterProxyArgs
    Proxy Configuration to talk to Mist
    Radsec MxclusterRadsecArgs
    MxEdge RadSec Configuration
    SiteId string
    TuntermApSubnets []string
    List of subnets where we allow AP to establish Mist Tunnels from
    TuntermDhcpdConfig map[string]MxclusterTuntermDhcpdConfigArgs
    DHCP server/relay configuration of Mist Tunneled VLANs. Property key is the VLAN ID
    TuntermExtraRoutes map[string]MxclusterTuntermExtraRoutesArgs
    Extra routes for Mist Tunneled VLANs. Property key is a CIDR
    TuntermHosts []string
    Hostnames or IPs where a Mist Tunnel will use as the Peer (i.e. they are reachable from AP)
    TuntermHostsOrders []int
    List of index of tunterm_hosts
    TuntermHostsSelection string
    Ordering of tuntermHosts for mxedge within the same mxcluster. enum:

    • shuffle: the ordering of tuntermHosts is randomized by the device''s MAC
    • shuffle-by-site: shuffle by site_id+tunnel_id (so when client connects to a specific Tunnel, it will go to the same (order of) mxedge, and we load-balancing between tunnels)
    • ordered: order decided by tunterm_hosts_order
    TuntermMonitoringDisabled bool
    TuntermMonitorings [][]MxclusterTuntermMonitoringArgs
    orgId String
    mistDas MxclusterMistDas
    Configure cloud-assisted dynamic authorization service on this cluster of mist edges
    mistNac MxclusterMistNac
    mxedgeMgmt MxclusterMxedgeMgmt
    name String
    proxy MxclusterProxy
    Proxy Configuration to talk to Mist
    radsec MxclusterRadsec
    MxEdge RadSec Configuration
    siteId String
    tuntermApSubnets List<String>
    List of subnets where we allow AP to establish Mist Tunnels from
    tuntermDhcpdConfig Map<String,MxclusterTuntermDhcpdConfigArgs>
    DHCP server/relay configuration of Mist Tunneled VLANs. Property key is the VLAN ID
    tuntermExtraRoutes Map<String,MxclusterTuntermExtraRoutesArgs>
    Extra routes for Mist Tunneled VLANs. Property key is a CIDR
    tuntermHosts List<String>
    Hostnames or IPs where a Mist Tunnel will use as the Peer (i.e. they are reachable from AP)
    tuntermHostsOrders List<Integer>
    List of index of tunterm_hosts
    tuntermHostsSelection String
    Ordering of tuntermHosts for mxedge within the same mxcluster. enum:

    • shuffle: the ordering of tuntermHosts is randomized by the device''s MAC
    • shuffle-by-site: shuffle by site_id+tunnel_id (so when client connects to a specific Tunnel, it will go to the same (order of) mxedge, and we load-balancing between tunnels)
    • ordered: order decided by tunterm_hosts_order
    tuntermMonitoringDisabled Boolean
    tuntermMonitorings List<List<MxclusterTuntermMonitoring>>
    orgId string
    mistDas MxclusterMistDas
    Configure cloud-assisted dynamic authorization service on this cluster of mist edges
    mistNac MxclusterMistNac
    mxedgeMgmt MxclusterMxedgeMgmt
    name string
    proxy MxclusterProxy
    Proxy Configuration to talk to Mist
    radsec MxclusterRadsec
    MxEdge RadSec Configuration
    siteId string
    tuntermApSubnets string[]
    List of subnets where we allow AP to establish Mist Tunnels from
    tuntermDhcpdConfig {[key: string]: MxclusterTuntermDhcpdConfigArgs}
    DHCP server/relay configuration of Mist Tunneled VLANs. Property key is the VLAN ID
    tuntermExtraRoutes {[key: string]: MxclusterTuntermExtraRoutesArgs}
    Extra routes for Mist Tunneled VLANs. Property key is a CIDR
    tuntermHosts string[]
    Hostnames or IPs where a Mist Tunnel will use as the Peer (i.e. they are reachable from AP)
    tuntermHostsOrders number[]
    List of index of tunterm_hosts
    tuntermHostsSelection string
    Ordering of tuntermHosts for mxedge within the same mxcluster. enum:

    • shuffle: the ordering of tuntermHosts is randomized by the device''s MAC
    • shuffle-by-site: shuffle by site_id+tunnel_id (so when client connects to a specific Tunnel, it will go to the same (order of) mxedge, and we load-balancing between tunnels)
    • ordered: order decided by tunterm_hosts_order
    tuntermMonitoringDisabled boolean
    tuntermMonitorings MxclusterTuntermMonitoring[][]
    org_id str
    mist_das MxclusterMistDasArgs
    Configure cloud-assisted dynamic authorization service on this cluster of mist edges
    mist_nac MxclusterMistNacArgs
    mxedge_mgmt MxclusterMxedgeMgmtArgs
    name str
    proxy MxclusterProxyArgs
    Proxy Configuration to talk to Mist
    radsec MxclusterRadsecArgs
    MxEdge RadSec Configuration
    site_id str
    tunterm_ap_subnets Sequence[str]
    List of subnets where we allow AP to establish Mist Tunnels from
    tunterm_dhcpd_config Mapping[str, MxclusterTuntermDhcpdConfigArgs]
    DHCP server/relay configuration of Mist Tunneled VLANs. Property key is the VLAN ID
    tunterm_extra_routes Mapping[str, MxclusterTuntermExtraRoutesArgs]
    Extra routes for Mist Tunneled VLANs. Property key is a CIDR
    tunterm_hosts Sequence[str]
    Hostnames or IPs where a Mist Tunnel will use as the Peer (i.e. they are reachable from AP)
    tunterm_hosts_orders Sequence[int]
    List of index of tunterm_hosts
    tunterm_hosts_selection str
    Ordering of tuntermHosts for mxedge within the same mxcluster. enum:

    • shuffle: the ordering of tuntermHosts is randomized by the device''s MAC
    • shuffle-by-site: shuffle by site_id+tunnel_id (so when client connects to a specific Tunnel, it will go to the same (order of) mxedge, and we load-balancing between tunnels)
    • ordered: order decided by tunterm_hosts_order
    tunterm_monitoring_disabled bool
    tunterm_monitorings Sequence[Sequence[MxclusterTuntermMonitoringArgs]]
    orgId String
    mistDas Property Map
    Configure cloud-assisted dynamic authorization service on this cluster of mist edges
    mistNac Property Map
    mxedgeMgmt Property Map
    name String
    proxy Property Map
    Proxy Configuration to talk to Mist
    radsec Property Map
    MxEdge RadSec Configuration
    siteId String
    tuntermApSubnets List<String>
    List of subnets where we allow AP to establish Mist Tunnels from
    tuntermDhcpdConfig Map<Property Map>
    DHCP server/relay configuration of Mist Tunneled VLANs. Property key is the VLAN ID
    tuntermExtraRoutes Map<Property Map>
    Extra routes for Mist Tunneled VLANs. Property key is a CIDR
    tuntermHosts List<String>
    Hostnames or IPs where a Mist Tunnel will use as the Peer (i.e. they are reachable from AP)
    tuntermHostsOrders List<Number>
    List of index of tunterm_hosts
    tuntermHostsSelection String
    Ordering of tuntermHosts for mxedge within the same mxcluster. enum:

    • shuffle: the ordering of tuntermHosts is randomized by the device''s MAC
    • shuffle-by-site: shuffle by site_id+tunnel_id (so when client connects to a specific Tunnel, it will go to the same (order of) mxedge, and we load-balancing between tunnels)
    • ordered: order decided by tunterm_hosts_order
    tuntermMonitoringDisabled Boolean
    tuntermMonitorings List<List<Property Map>>

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Mxcluster resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    RadsecTls Pulumi.JuniperMist.Org.Outputs.MxclusterRadsecTls
    Id string
    The provider-assigned unique ID for this managed resource.
    RadsecTls MxclusterRadsecTls
    id String
    The provider-assigned unique ID for this managed resource.
    radsecTls MxclusterRadsecTls
    id string
    The provider-assigned unique ID for this managed resource.
    radsecTls MxclusterRadsecTls
    id str
    The provider-assigned unique ID for this managed resource.
    radsec_tls MxclusterRadsecTls
    id String
    The provider-assigned unique ID for this managed resource.
    radsecTls Property Map

    Look up Existing Mxcluster Resource

    Get an existing Mxcluster resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: MxclusterState, opts?: CustomResourceOptions): Mxcluster
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        mist_das: Optional[MxclusterMistDasArgs] = None,
        mist_nac: Optional[MxclusterMistNacArgs] = None,
        mxedge_mgmt: Optional[MxclusterMxedgeMgmtArgs] = None,
        name: Optional[str] = None,
        org_id: Optional[str] = None,
        proxy: Optional[MxclusterProxyArgs] = None,
        radsec: Optional[MxclusterRadsecArgs] = None,
        radsec_tls: Optional[MxclusterRadsecTlsArgs] = None,
        site_id: Optional[str] = None,
        tunterm_ap_subnets: Optional[Sequence[str]] = None,
        tunterm_dhcpd_config: Optional[Mapping[str, MxclusterTuntermDhcpdConfigArgs]] = None,
        tunterm_extra_routes: Optional[Mapping[str, MxclusterTuntermExtraRoutesArgs]] = None,
        tunterm_hosts: Optional[Sequence[str]] = None,
        tunterm_hosts_orders: Optional[Sequence[int]] = None,
        tunterm_hosts_selection: Optional[str] = None,
        tunterm_monitoring_disabled: Optional[bool] = None,
        tunterm_monitorings: Optional[Sequence[Sequence[MxclusterTuntermMonitoringArgs]]] = None) -> Mxcluster
    func GetMxcluster(ctx *Context, name string, id IDInput, state *MxclusterState, opts ...ResourceOption) (*Mxcluster, error)
    public static Mxcluster Get(string name, Input<string> id, MxclusterState? state, CustomResourceOptions? opts = null)
    public static Mxcluster get(String name, Output<String> id, MxclusterState state, CustomResourceOptions options)
    resources:  _:    type: junipermist:org:Mxcluster    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    MistDas Pulumi.JuniperMist.Org.Inputs.MxclusterMistDas
    Configure cloud-assisted dynamic authorization service on this cluster of mist edges
    MistNac Pulumi.JuniperMist.Org.Inputs.MxclusterMistNac
    MxedgeMgmt Pulumi.JuniperMist.Org.Inputs.MxclusterMxedgeMgmt
    Name string
    OrgId string
    Proxy Pulumi.JuniperMist.Org.Inputs.MxclusterProxy
    Proxy Configuration to talk to Mist
    Radsec Pulumi.JuniperMist.Org.Inputs.MxclusterRadsec
    MxEdge RadSec Configuration
    RadsecTls Pulumi.JuniperMist.Org.Inputs.MxclusterRadsecTls
    SiteId string
    TuntermApSubnets List<string>
    List of subnets where we allow AP to establish Mist Tunnels from
    TuntermDhcpdConfig Dictionary<string, Pulumi.JuniperMist.Org.Inputs.MxclusterTuntermDhcpdConfigArgs>
    DHCP server/relay configuration of Mist Tunneled VLANs. Property key is the VLAN ID
    TuntermExtraRoutes Dictionary<string, Pulumi.JuniperMist.Org.Inputs.MxclusterTuntermExtraRoutesArgs>
    Extra routes for Mist Tunneled VLANs. Property key is a CIDR
    TuntermHosts List<string>
    Hostnames or IPs where a Mist Tunnel will use as the Peer (i.e. they are reachable from AP)
    TuntermHostsOrders List<int>
    List of index of tunterm_hosts
    TuntermHostsSelection string
    Ordering of tuntermHosts for mxedge within the same mxcluster. enum:

    • shuffle: the ordering of tuntermHosts is randomized by the device''s MAC
    • shuffle-by-site: shuffle by site_id+tunnel_id (so when client connects to a specific Tunnel, it will go to the same (order of) mxedge, and we load-balancing between tunnels)
    • ordered: order decided by tunterm_hosts_order
    TuntermMonitoringDisabled bool
    TuntermMonitorings List<ImmutableArray<Pulumi.JuniperMist.Org.Inputs.MxclusterTuntermMonitoring>>
    MistDas MxclusterMistDasArgs
    Configure cloud-assisted dynamic authorization service on this cluster of mist edges
    MistNac MxclusterMistNacArgs
    MxedgeMgmt MxclusterMxedgeMgmtArgs
    Name string
    OrgId string
    Proxy MxclusterProxyArgs
    Proxy Configuration to talk to Mist
    Radsec MxclusterRadsecArgs
    MxEdge RadSec Configuration
    RadsecTls MxclusterRadsecTlsArgs
    SiteId string
    TuntermApSubnets []string
    List of subnets where we allow AP to establish Mist Tunnels from
    TuntermDhcpdConfig map[string]MxclusterTuntermDhcpdConfigArgs
    DHCP server/relay configuration of Mist Tunneled VLANs. Property key is the VLAN ID
    TuntermExtraRoutes map[string]MxclusterTuntermExtraRoutesArgs
    Extra routes for Mist Tunneled VLANs. Property key is a CIDR
    TuntermHosts []string
    Hostnames or IPs where a Mist Tunnel will use as the Peer (i.e. they are reachable from AP)
    TuntermHostsOrders []int
    List of index of tunterm_hosts
    TuntermHostsSelection string
    Ordering of tuntermHosts for mxedge within the same mxcluster. enum:

    • shuffle: the ordering of tuntermHosts is randomized by the device''s MAC
    • shuffle-by-site: shuffle by site_id+tunnel_id (so when client connects to a specific Tunnel, it will go to the same (order of) mxedge, and we load-balancing between tunnels)
    • ordered: order decided by tunterm_hosts_order
    TuntermMonitoringDisabled bool
    TuntermMonitorings [][]MxclusterTuntermMonitoringArgs
    mistDas MxclusterMistDas
    Configure cloud-assisted dynamic authorization service on this cluster of mist edges
    mistNac MxclusterMistNac
    mxedgeMgmt MxclusterMxedgeMgmt
    name String
    orgId String
    proxy MxclusterProxy
    Proxy Configuration to talk to Mist
    radsec MxclusterRadsec
    MxEdge RadSec Configuration
    radsecTls MxclusterRadsecTls
    siteId String
    tuntermApSubnets List<String>
    List of subnets where we allow AP to establish Mist Tunnels from
    tuntermDhcpdConfig Map<String,MxclusterTuntermDhcpdConfigArgs>
    DHCP server/relay configuration of Mist Tunneled VLANs. Property key is the VLAN ID
    tuntermExtraRoutes Map<String,MxclusterTuntermExtraRoutesArgs>
    Extra routes for Mist Tunneled VLANs. Property key is a CIDR
    tuntermHosts List<String>
    Hostnames or IPs where a Mist Tunnel will use as the Peer (i.e. they are reachable from AP)
    tuntermHostsOrders List<Integer>
    List of index of tunterm_hosts
    tuntermHostsSelection String
    Ordering of tuntermHosts for mxedge within the same mxcluster. enum:

    • shuffle: the ordering of tuntermHosts is randomized by the device''s MAC
    • shuffle-by-site: shuffle by site_id+tunnel_id (so when client connects to a specific Tunnel, it will go to the same (order of) mxedge, and we load-balancing between tunnels)
    • ordered: order decided by tunterm_hosts_order
    tuntermMonitoringDisabled Boolean
    tuntermMonitorings List<List<MxclusterTuntermMonitoring>>
    mistDas MxclusterMistDas
    Configure cloud-assisted dynamic authorization service on this cluster of mist edges
    mistNac MxclusterMistNac
    mxedgeMgmt MxclusterMxedgeMgmt
    name string
    orgId string
    proxy MxclusterProxy
    Proxy Configuration to talk to Mist
    radsec MxclusterRadsec
    MxEdge RadSec Configuration
    radsecTls MxclusterRadsecTls
    siteId string
    tuntermApSubnets string[]
    List of subnets where we allow AP to establish Mist Tunnels from
    tuntermDhcpdConfig {[key: string]: MxclusterTuntermDhcpdConfigArgs}
    DHCP server/relay configuration of Mist Tunneled VLANs. Property key is the VLAN ID
    tuntermExtraRoutes {[key: string]: MxclusterTuntermExtraRoutesArgs}
    Extra routes for Mist Tunneled VLANs. Property key is a CIDR
    tuntermHosts string[]
    Hostnames or IPs where a Mist Tunnel will use as the Peer (i.e. they are reachable from AP)
    tuntermHostsOrders number[]
    List of index of tunterm_hosts
    tuntermHostsSelection string
    Ordering of tuntermHosts for mxedge within the same mxcluster. enum:

    • shuffle: the ordering of tuntermHosts is randomized by the device''s MAC
    • shuffle-by-site: shuffle by site_id+tunnel_id (so when client connects to a specific Tunnel, it will go to the same (order of) mxedge, and we load-balancing between tunnels)
    • ordered: order decided by tunterm_hosts_order
    tuntermMonitoringDisabled boolean
    tuntermMonitorings MxclusterTuntermMonitoring[][]
    mist_das MxclusterMistDasArgs
    Configure cloud-assisted dynamic authorization service on this cluster of mist edges
    mist_nac MxclusterMistNacArgs
    mxedge_mgmt MxclusterMxedgeMgmtArgs
    name str
    org_id str
    proxy MxclusterProxyArgs
    Proxy Configuration to talk to Mist
    radsec MxclusterRadsecArgs
    MxEdge RadSec Configuration
    radsec_tls MxclusterRadsecTlsArgs
    site_id str
    tunterm_ap_subnets Sequence[str]
    List of subnets where we allow AP to establish Mist Tunnels from
    tunterm_dhcpd_config Mapping[str, MxclusterTuntermDhcpdConfigArgs]
    DHCP server/relay configuration of Mist Tunneled VLANs. Property key is the VLAN ID
    tunterm_extra_routes Mapping[str, MxclusterTuntermExtraRoutesArgs]
    Extra routes for Mist Tunneled VLANs. Property key is a CIDR
    tunterm_hosts Sequence[str]
    Hostnames or IPs where a Mist Tunnel will use as the Peer (i.e. they are reachable from AP)
    tunterm_hosts_orders Sequence[int]
    List of index of tunterm_hosts
    tunterm_hosts_selection str
    Ordering of tuntermHosts for mxedge within the same mxcluster. enum:

    • shuffle: the ordering of tuntermHosts is randomized by the device''s MAC
    • shuffle-by-site: shuffle by site_id+tunnel_id (so when client connects to a specific Tunnel, it will go to the same (order of) mxedge, and we load-balancing between tunnels)
    • ordered: order decided by tunterm_hosts_order
    tunterm_monitoring_disabled bool
    tunterm_monitorings Sequence[Sequence[MxclusterTuntermMonitoringArgs]]
    mistDas Property Map
    Configure cloud-assisted dynamic authorization service on this cluster of mist edges
    mistNac Property Map
    mxedgeMgmt Property Map
    name String
    orgId String
    proxy Property Map
    Proxy Configuration to talk to Mist
    radsec Property Map
    MxEdge RadSec Configuration
    radsecTls Property Map
    siteId String
    tuntermApSubnets List<String>
    List of subnets where we allow AP to establish Mist Tunnels from
    tuntermDhcpdConfig Map<Property Map>
    DHCP server/relay configuration of Mist Tunneled VLANs. Property key is the VLAN ID
    tuntermExtraRoutes Map<Property Map>
    Extra routes for Mist Tunneled VLANs. Property key is a CIDR
    tuntermHosts List<String>
    Hostnames or IPs where a Mist Tunnel will use as the Peer (i.e. they are reachable from AP)
    tuntermHostsOrders List<Number>
    List of index of tunterm_hosts
    tuntermHostsSelection String
    Ordering of tuntermHosts for mxedge within the same mxcluster. enum:

    • shuffle: the ordering of tuntermHosts is randomized by the device''s MAC
    • shuffle-by-site: shuffle by site_id+tunnel_id (so when client connects to a specific Tunnel, it will go to the same (order of) mxedge, and we load-balancing between tunnels)
    • ordered: order decided by tunterm_hosts_order
    tuntermMonitoringDisabled Boolean
    tuntermMonitorings List<List<Property Map>>

    Supporting Types

    MxclusterMistDas, MxclusterMistDasArgs

    CoaServers List<Pulumi.JuniperMist.Org.Inputs.MxclusterMistDasCoaServer>
    Dynamic authorization clients configured to send CoA|DM to mist edges on port 3799
    Enabled bool
    CoaServers []MxclusterMistDasCoaServer
    Dynamic authorization clients configured to send CoA|DM to mist edges on port 3799
    Enabled bool
    coaServers List<MxclusterMistDasCoaServer>
    Dynamic authorization clients configured to send CoA|DM to mist edges on port 3799
    enabled Boolean
    coaServers MxclusterMistDasCoaServer[]
    Dynamic authorization clients configured to send CoA|DM to mist edges on port 3799
    enabled boolean
    coa_servers Sequence[MxclusterMistDasCoaServer]
    Dynamic authorization clients configured to send CoA|DM to mist edges on port 3799
    enabled bool
    coaServers List<Property Map>
    Dynamic authorization clients configured to send CoA|DM to mist edges on port 3799
    enabled Boolean

    MxclusterMistDasCoaServer, MxclusterMistDasCoaServerArgs

    DisableEventTimestampCheck bool
    Whether to disable Event-Timestamp Check
    Enabled bool
    Host string
    This server configured to send CoA|DM to mist edges
    Port int
    Mist edges will allow this host on this port
    RequireMessageAuthenticator bool
    Whether to require Message-Authenticator in requests
    Secret string
    DisableEventTimestampCheck bool
    Whether to disable Event-Timestamp Check
    Enabled bool
    Host string
    This server configured to send CoA|DM to mist edges
    Port int
    Mist edges will allow this host on this port
    RequireMessageAuthenticator bool
    Whether to require Message-Authenticator in requests
    Secret string
    disableEventTimestampCheck Boolean
    Whether to disable Event-Timestamp Check
    enabled Boolean
    host String
    This server configured to send CoA|DM to mist edges
    port Integer
    Mist edges will allow this host on this port
    requireMessageAuthenticator Boolean
    Whether to require Message-Authenticator in requests
    secret String
    disableEventTimestampCheck boolean
    Whether to disable Event-Timestamp Check
    enabled boolean
    host string
    This server configured to send CoA|DM to mist edges
    port number
    Mist edges will allow this host on this port
    requireMessageAuthenticator boolean
    Whether to require Message-Authenticator in requests
    secret string
    disable_event_timestamp_check bool
    Whether to disable Event-Timestamp Check
    enabled bool
    host str
    This server configured to send CoA|DM to mist edges
    port int
    Mist edges will allow this host on this port
    require_message_authenticator bool
    Whether to require Message-Authenticator in requests
    secret str
    disableEventTimestampCheck Boolean
    Whether to disable Event-Timestamp Check
    enabled Boolean
    host String
    This server configured to send CoA|DM to mist edges
    port Number
    Mist edges will allow this host on this port
    requireMessageAuthenticator Boolean
    Whether to require Message-Authenticator in requests
    secret String

    MxclusterMistNac, MxclusterMistNacArgs

    AcctServerPort int
    AuthServerPort int
    ClientIps Dictionary<string, Pulumi.JuniperMist.Org.Inputs.MxclusterMistNacClientIps>
    Property key is the RADIUS Client IP/Subnet.
    Enabled bool
    Secret string
    AcctServerPort int
    AuthServerPort int
    ClientIps map[string]MxclusterMistNacClientIps
    Property key is the RADIUS Client IP/Subnet.
    Enabled bool
    Secret string
    acctServerPort Integer
    authServerPort Integer
    clientIps Map<String,MxclusterMistNacClientIps>
    Property key is the RADIUS Client IP/Subnet.
    enabled Boolean
    secret String
    acctServerPort number
    authServerPort number
    clientIps {[key: string]: MxclusterMistNacClientIps}
    Property key is the RADIUS Client IP/Subnet.
    enabled boolean
    secret string
    acct_server_port int
    auth_server_port int
    client_ips Mapping[str, MxclusterMistNacClientIps]
    Property key is the RADIUS Client IP/Subnet.
    enabled bool
    secret str
    acctServerPort Number
    authServerPort Number
    clientIps Map<Property Map>
    Property key is the RADIUS Client IP/Subnet.
    enabled Boolean
    secret String

    MxclusterMxedgeMgmt, MxclusterMxedgeMgmtArgs

    ConfigAutoRevert bool
    FipsEnabled bool
    MistPassword string
    OobIpType string
    enum: dhcp, disabled, static
    OobIpType6 string
    enum: autoconf, dhcp, disabled, static
    RootPassword string
    ConfigAutoRevert bool
    FipsEnabled bool
    MistPassword string
    OobIpType string
    enum: dhcp, disabled, static
    OobIpType6 string
    enum: autoconf, dhcp, disabled, static
    RootPassword string
    configAutoRevert Boolean
    fipsEnabled Boolean
    mistPassword String
    oobIpType String
    enum: dhcp, disabled, static
    oobIpType6 String
    enum: autoconf, dhcp, disabled, static
    rootPassword String
    configAutoRevert boolean
    fipsEnabled boolean
    mistPassword string
    oobIpType string
    enum: dhcp, disabled, static
    oobIpType6 string
    enum: autoconf, dhcp, disabled, static
    rootPassword string
    config_auto_revert bool
    fips_enabled bool
    mist_password str
    oob_ip_type str
    enum: dhcp, disabled, static
    oob_ip_type6 str
    enum: autoconf, dhcp, disabled, static
    root_password str
    configAutoRevert Boolean
    fipsEnabled Boolean
    mistPassword String
    oobIpType String
    enum: dhcp, disabled, static
    oobIpType6 String
    enum: autoconf, dhcp, disabled, static
    rootPassword String

    MxclusterProxy, MxclusterProxyArgs

    Disabled bool
    Url string
    Disabled bool
    Url string
    disabled Boolean
    url String
    disabled boolean
    url string
    disabled bool
    url str
    disabled Boolean
    url String

    MxclusterRadsec, MxclusterRadsecArgs

    AcctServers List<Pulumi.JuniperMist.Org.Inputs.MxclusterRadsecAcctServer>
    List of RADIUS accounting servers, optional, order matters where the first one is treated as primary
    AuthServers List<Pulumi.JuniperMist.Org.Inputs.MxclusterRadsecAuthServer>
    List of RADIUS authentication servers, order matters where the first one is treated as primary
    Enabled bool
    Whether to enable service on Mist Edge i.e. RADIUS proxy over TLS
    MatchSsid bool
    Whether to match ssid in request message to select from a subset of RADIUS servers
    NasIpSource string
    SSpecify NAS-IP-ADDRESS, NAS-IPv6-ADDRESS to use with auth_servers. enum: any, oob, oob6, tunnel, tunnel6
    ProxyHosts List<string>
    Hostnames or IPs for Mist AP to use as the TLS Server (i.e. they are reachable from AP) in addition to tuntermHosts
    ServerSelection string
    When ordered, Mist Edge will prefer and go back to the first radius server if possible. enum: ordered, unordered
    SrcIpSource string
    Specify IP address to connect to authServers and acct_servers. enum: any, oob, oob6, tunnel, tunnel6
    AcctServers []MxclusterRadsecAcctServer
    List of RADIUS accounting servers, optional, order matters where the first one is treated as primary
    AuthServers []MxclusterRadsecAuthServer
    List of RADIUS authentication servers, order matters where the first one is treated as primary
    Enabled bool
    Whether to enable service on Mist Edge i.e. RADIUS proxy over TLS
    MatchSsid bool
    Whether to match ssid in request message to select from a subset of RADIUS servers
    NasIpSource string
    SSpecify NAS-IP-ADDRESS, NAS-IPv6-ADDRESS to use with auth_servers. enum: any, oob, oob6, tunnel, tunnel6
    ProxyHosts []string
    Hostnames or IPs for Mist AP to use as the TLS Server (i.e. they are reachable from AP) in addition to tuntermHosts
    ServerSelection string
    When ordered, Mist Edge will prefer and go back to the first radius server if possible. enum: ordered, unordered
    SrcIpSource string
    Specify IP address to connect to authServers and acct_servers. enum: any, oob, oob6, tunnel, tunnel6
    acctServers List<MxclusterRadsecAcctServer>
    List of RADIUS accounting servers, optional, order matters where the first one is treated as primary
    authServers List<MxclusterRadsecAuthServer>
    List of RADIUS authentication servers, order matters where the first one is treated as primary
    enabled Boolean
    Whether to enable service on Mist Edge i.e. RADIUS proxy over TLS
    matchSsid Boolean
    Whether to match ssid in request message to select from a subset of RADIUS servers
    nasIpSource String
    SSpecify NAS-IP-ADDRESS, NAS-IPv6-ADDRESS to use with auth_servers. enum: any, oob, oob6, tunnel, tunnel6
    proxyHosts List<String>
    Hostnames or IPs for Mist AP to use as the TLS Server (i.e. they are reachable from AP) in addition to tuntermHosts
    serverSelection String
    When ordered, Mist Edge will prefer and go back to the first radius server if possible. enum: ordered, unordered
    srcIpSource String
    Specify IP address to connect to authServers and acct_servers. enum: any, oob, oob6, tunnel, tunnel6
    acctServers MxclusterRadsecAcctServer[]
    List of RADIUS accounting servers, optional, order matters where the first one is treated as primary
    authServers MxclusterRadsecAuthServer[]
    List of RADIUS authentication servers, order matters where the first one is treated as primary
    enabled boolean
    Whether to enable service on Mist Edge i.e. RADIUS proxy over TLS
    matchSsid boolean
    Whether to match ssid in request message to select from a subset of RADIUS servers
    nasIpSource string
    SSpecify NAS-IP-ADDRESS, NAS-IPv6-ADDRESS to use with auth_servers. enum: any, oob, oob6, tunnel, tunnel6
    proxyHosts string[]
    Hostnames or IPs for Mist AP to use as the TLS Server (i.e. they are reachable from AP) in addition to tuntermHosts
    serverSelection string
    When ordered, Mist Edge will prefer and go back to the first radius server if possible. enum: ordered, unordered
    srcIpSource string
    Specify IP address to connect to authServers and acct_servers. enum: any, oob, oob6, tunnel, tunnel6
    acct_servers Sequence[MxclusterRadsecAcctServer]
    List of RADIUS accounting servers, optional, order matters where the first one is treated as primary
    auth_servers Sequence[MxclusterRadsecAuthServer]
    List of RADIUS authentication servers, order matters where the first one is treated as primary
    enabled bool
    Whether to enable service on Mist Edge i.e. RADIUS proxy over TLS
    match_ssid bool
    Whether to match ssid in request message to select from a subset of RADIUS servers
    nas_ip_source str
    SSpecify NAS-IP-ADDRESS, NAS-IPv6-ADDRESS to use with auth_servers. enum: any, oob, oob6, tunnel, tunnel6
    proxy_hosts Sequence[str]
    Hostnames or IPs for Mist AP to use as the TLS Server (i.e. they are reachable from AP) in addition to tuntermHosts
    server_selection str
    When ordered, Mist Edge will prefer and go back to the first radius server if possible. enum: ordered, unordered
    src_ip_source str
    Specify IP address to connect to authServers and acct_servers. enum: any, oob, oob6, tunnel, tunnel6
    acctServers List<Property Map>
    List of RADIUS accounting servers, optional, order matters where the first one is treated as primary
    authServers List<Property Map>
    List of RADIUS authentication servers, order matters where the first one is treated as primary
    enabled Boolean
    Whether to enable service on Mist Edge i.e. RADIUS proxy over TLS
    matchSsid Boolean
    Whether to match ssid in request message to select from a subset of RADIUS servers
    nasIpSource String
    SSpecify NAS-IP-ADDRESS, NAS-IPv6-ADDRESS to use with auth_servers. enum: any, oob, oob6, tunnel, tunnel6
    proxyHosts List<String>
    Hostnames or IPs for Mist AP to use as the TLS Server (i.e. they are reachable from AP) in addition to tuntermHosts
    serverSelection String
    When ordered, Mist Edge will prefer and go back to the first radius server if possible. enum: ordered, unordered
    srcIpSource String
    Specify IP address to connect to authServers and acct_servers. enum: any, oob, oob6, tunnel, tunnel6

    MxclusterRadsecAcctServer, MxclusterRadsecAcctServerArgs

    Host string
    IP / hostname of RADIUS server
    Port int
    Acct port of RADIUS server
    Secret string
    Secret of RADIUS server
    Ssids List<string>
    List of ssids that will use this server if matchSsid is true and match is found
    Host string
    IP / hostname of RADIUS server
    Port int
    Acct port of RADIUS server
    Secret string
    Secret of RADIUS server
    Ssids []string
    List of ssids that will use this server if matchSsid is true and match is found
    host String
    IP / hostname of RADIUS server
    port Integer
    Acct port of RADIUS server
    secret String
    Secret of RADIUS server
    ssids List<String>
    List of ssids that will use this server if matchSsid is true and match is found
    host string
    IP / hostname of RADIUS server
    port number
    Acct port of RADIUS server
    secret string
    Secret of RADIUS server
    ssids string[]
    List of ssids that will use this server if matchSsid is true and match is found
    host str
    IP / hostname of RADIUS server
    port int
    Acct port of RADIUS server
    secret str
    Secret of RADIUS server
    ssids Sequence[str]
    List of ssids that will use this server if matchSsid is true and match is found
    host String
    IP / hostname of RADIUS server
    port Number
    Acct port of RADIUS server
    secret String
    Secret of RADIUS server
    ssids List<String>
    List of ssids that will use this server if matchSsid is true and match is found

    MxclusterRadsecAuthServer, MxclusterRadsecAuthServerArgs

    Host string
    IP / hostname of RADIUS server
    InbandStatusCheck bool
    Whether to enable inband status check
    InbandStatusInterval int
    Inband status interval, in seconds
    KeywrapEnabled bool
    If used for Mist APs, enable keywrap algorithm. Default is false
    KeywrapFormat string
    if used for Mist APs. enum: ascii, hex
    KeywrapKek string
    If used for Mist APs, encryption key
    KeywrapMack string
    If used for Mist APs, Message Authentication Code Key
    Port int
    Auth port of RADIUS server
    Retry int
    Authentication request retry
    Secret string
    Secret of RADIUS server
    Ssids List<string>
    List of ssids that will use this server if matchSsid is true and match is found
    Timeout int
    Authentication request timeout, in seconds
    Host string
    IP / hostname of RADIUS server
    InbandStatusCheck bool
    Whether to enable inband status check
    InbandStatusInterval int
    Inband status interval, in seconds
    KeywrapEnabled bool
    If used for Mist APs, enable keywrap algorithm. Default is false
    KeywrapFormat string
    if used for Mist APs. enum: ascii, hex
    KeywrapKek string
    If used for Mist APs, encryption key
    KeywrapMack string
    If used for Mist APs, Message Authentication Code Key
    Port int
    Auth port of RADIUS server
    Retry int
    Authentication request retry
    Secret string
    Secret of RADIUS server
    Ssids []string
    List of ssids that will use this server if matchSsid is true and match is found
    Timeout int
    Authentication request timeout, in seconds
    host String
    IP / hostname of RADIUS server
    inbandStatusCheck Boolean
    Whether to enable inband status check
    inbandStatusInterval Integer
    Inband status interval, in seconds
    keywrapEnabled Boolean
    If used for Mist APs, enable keywrap algorithm. Default is false
    keywrapFormat String
    if used for Mist APs. enum: ascii, hex
    keywrapKek String
    If used for Mist APs, encryption key
    keywrapMack String
    If used for Mist APs, Message Authentication Code Key
    port Integer
    Auth port of RADIUS server
    retry Integer
    Authentication request retry
    secret String
    Secret of RADIUS server
    ssids List<String>
    List of ssids that will use this server if matchSsid is true and match is found
    timeout Integer
    Authentication request timeout, in seconds
    host string
    IP / hostname of RADIUS server
    inbandStatusCheck boolean
    Whether to enable inband status check
    inbandStatusInterval number
    Inband status interval, in seconds
    keywrapEnabled boolean
    If used for Mist APs, enable keywrap algorithm. Default is false
    keywrapFormat string
    if used for Mist APs. enum: ascii, hex
    keywrapKek string
    If used for Mist APs, encryption key
    keywrapMack string
    If used for Mist APs, Message Authentication Code Key
    port number
    Auth port of RADIUS server
    retry number
    Authentication request retry
    secret string
    Secret of RADIUS server
    ssids string[]
    List of ssids that will use this server if matchSsid is true and match is found
    timeout number
    Authentication request timeout, in seconds
    host str
    IP / hostname of RADIUS server
    inband_status_check bool
    Whether to enable inband status check
    inband_status_interval int
    Inband status interval, in seconds
    keywrap_enabled bool
    If used for Mist APs, enable keywrap algorithm. Default is false
    keywrap_format str
    if used for Mist APs. enum: ascii, hex
    keywrap_kek str
    If used for Mist APs, encryption key
    keywrap_mack str
    If used for Mist APs, Message Authentication Code Key
    port int
    Auth port of RADIUS server
    retry int
    Authentication request retry
    secret str
    Secret of RADIUS server
    ssids Sequence[str]
    List of ssids that will use this server if matchSsid is true and match is found
    timeout int
    Authentication request timeout, in seconds
    host String
    IP / hostname of RADIUS server
    inbandStatusCheck Boolean
    Whether to enable inband status check
    inbandStatusInterval Number
    Inband status interval, in seconds
    keywrapEnabled Boolean
    If used for Mist APs, enable keywrap algorithm. Default is false
    keywrapFormat String
    if used for Mist APs. enum: ascii, hex
    keywrapKek String
    If used for Mist APs, encryption key
    keywrapMack String
    If used for Mist APs, Message Authentication Code Key
    port Number
    Auth port of RADIUS server
    retry Number
    Authentication request retry
    secret String
    Secret of RADIUS server
    ssids List<String>
    List of ssids that will use this server if matchSsid is true and match is found
    timeout Number
    Authentication request timeout, in seconds

    MxclusterRadsecTls, MxclusterRadsecTlsArgs

    Keypair string
    Keypair string
    keypair String
    keypair string
    keypair String

    MxclusterTuntermDhcpdConfig, MxclusterTuntermDhcpdConfigArgs

    Enabled bool
    Servers List<string>
    Type string
    enum: relay
    Enabled bool
    Servers []string
    Type string
    enum: relay
    enabled Boolean
    servers List<String>
    type String
    enum: relay
    enabled boolean
    servers string[]
    type string
    enum: relay
    enabled bool
    servers Sequence[str]
    type str
    enum: relay
    enabled Boolean
    servers List<String>
    type String
    enum: relay

    MxclusterTuntermExtraRoutes, MxclusterTuntermExtraRoutesArgs

    Via string
    Via string
    via String
    via string
    via str
    via String

    MxclusterTuntermMonitoring, MxclusterTuntermMonitoringArgs

    Host string
    Port int
    Protocol string
    SrcVlanId int
    Timeout int
    Host string
    Port int
    Protocol string
    SrcVlanId int
    Timeout int
    host String
    port Integer
    protocol String
    srcVlanId Integer
    timeout Integer
    host string
    port number
    protocol string
    srcVlanId number
    timeout number
    host String
    port Number
    protocol String
    srcVlanId Number
    timeout Number

    Import

    Using pulumi import, import junipermist.org.Mxcluster with: Mist Org MxCluster can be imported by specifying the orgId and the mxclusterId

    $ pulumi import junipermist:org/mxcluster:Mxcluster cluster_one 17f90707-aebe-4274-af42-f42952a665a3.387804a7-3474-85ce-15a2-f9a9684c9c90

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    junipermist pulumi/pulumi-junipermist
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the mist Terraform Provider.
    junipermist logo
    Viewing docs for Juniper Mist v0.8.1
    published on Thursday, Apr 2, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-junipermist
      Try Pulumi Cloud free. Your team will thank you.