1. Registry
  2. Packages
  3. Juniper Mist Provider
  4. API Docs
  5. org
  6. Mxcluster
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
junipermist logo
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi

    This resource manages MxCluster (cluster of MxEdge devices) in the Mist Organization.

    A Mist Edge Cluster is a group of one or more Org Mist Edge devices (mist_org_mxedge) providing tunnel termination, edge network services and RADIUS proxy capabilities.

    Create Mxcluster Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Mxcluster(name: string, args: MxclusterArgs, opts?: CustomResourceOptions);
    @overload
    def Mxcluster(resource_name: str,
                  args: MxclusterArgs,
                  opts: Optional[ResourceOptions] = None)
    
    @overload
    def Mxcluster(resource_name: str,
                  opts: Optional[ResourceOptions] = None,
                  org_id: Optional[str] = None,
                  site_id: Optional[str] = None,
                  tunterm_dhcpd_config: Optional[Mapping[str, MxclusterTuntermDhcpdConfigArgs]] = None,
                  mxedge_mgmt: Optional[MxclusterMxedgeMgmtArgs] = None,
                  name: Optional[str] = None,
                  mist_nac: Optional[MxclusterMistNacArgs] = None,
                  proxy: Optional[MxclusterProxyArgs] = None,
                  mist_nacedge: Optional[MxclusterMistNacedgeArgs] = None,
                  radsec: Optional[MxclusterRadsecArgs] = None,
                  tunterm_ap_subnets: Optional[Sequence[str]] = None,
                  mist_das: Optional[MxclusterMistDasArgs] = None,
                  tunterm_extra_routes: Optional[Mapping[str, MxclusterTuntermExtraRoutesArgs]] = None,
                  tunterm_hosts: Optional[Sequence[str]] = None,
                  tunterm_hosts_orders: Optional[Sequence[int]] = None,
                  tunterm_hosts_selection: Optional[str] = None,
                  tunterm_monitoring_disabled: Optional[bool] = None,
                  tunterm_monitorings: Optional[Sequence[Sequence[MxclusterTuntermMonitoringArgs]]] = None)
    func NewMxcluster(ctx *Context, name string, args MxclusterArgs, opts ...ResourceOption) (*Mxcluster, error)
    public Mxcluster(string name, MxclusterArgs args, CustomResourceOptions? opts = null)
    public Mxcluster(String name, MxclusterArgs args)
    public Mxcluster(String name, MxclusterArgs args, CustomResourceOptions options)
    
    type: junipermist:org:Mxcluster
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "junipermist_org_mxcluster" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args MxclusterArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args MxclusterArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args MxclusterArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args MxclusterArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args MxclusterArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var mxclusterResource = new JuniperMist.Org.Mxcluster("mxclusterResource", new()
    {
        OrgId = "string",
        SiteId = "string",
        TuntermDhcpdConfig = 
        {
            { "string", new JuniperMist.Org.Inputs.MxclusterTuntermDhcpdConfigArgs
            {
                Enabled = false,
                Servers = new[]
                {
                    "string",
                },
                Type = "string",
            } },
        },
        MxedgeMgmt = new JuniperMist.Org.Inputs.MxclusterMxedgeMgmtArgs
        {
            ConfigAutoRevert = false,
            FipsEnabled = false,
            MistPassword = "string",
            OobIpType = "string",
            OobIpType6 = "string",
            RootPassword = "string",
        },
        Name = "string",
        MistNac = new JuniperMist.Org.Inputs.MxclusterMistNacArgs
        {
            AcctServerPort = 0,
            AuthServerPort = 0,
            ClientIps = 
            {
                { "string", null },
            },
            Enabled = false,
            Secret = "string",
        },
        Proxy = new JuniperMist.Org.Inputs.MxclusterProxyArgs
        {
            Disabled = false,
            Url = "string",
        },
        MistNacedge = new JuniperMist.Org.Inputs.MxclusterMistNacedgeArgs
        {
            AuthTtl = 0,
            CachingSiteIds = new[]
            {
                "string",
            },
            DefaultDot1xVlan = "string",
            DefaultVlan = "string",
            Enabled = false,
            NacEdgeHosts = new[]
            {
                "string",
            },
        },
        Radsec = new JuniperMist.Org.Inputs.MxclusterRadsecArgs
        {
            AcctServers = new[]
            {
                new JuniperMist.Org.Inputs.MxclusterRadsecAcctServerArgs
                {
                    Host = "string",
                    Port = 0,
                    Secret = "string",
                    Ssids = new[]
                    {
                        "string",
                    },
                },
            },
            AuthServers = new[]
            {
                new JuniperMist.Org.Inputs.MxclusterRadsecAuthServerArgs
                {
                    Host = "string",
                    InbandStatusCheck = false,
                    InbandStatusInterval = 0,
                    KeywrapEnabled = false,
                    KeywrapFormat = "string",
                    KeywrapKek = "string",
                    KeywrapMack = "string",
                    Port = 0,
                    Retry = 0,
                    Secret = "string",
                    Ssids = new[]
                    {
                        "string",
                    },
                    Timeout = 0,
                },
            },
            Enabled = false,
            MatchSsid = false,
            NasIpSource = "string",
            ProxyHosts = new[]
            {
                "string",
            },
            ServerSelection = "string",
            SrcIpSource = "string",
        },
        TuntermApSubnets = new[]
        {
            "string",
        },
        MistDas = new JuniperMist.Org.Inputs.MxclusterMistDasArgs
        {
            CoaServers = new[]
            {
                new JuniperMist.Org.Inputs.MxclusterMistDasCoaServerArgs
                {
                    DisableEventTimestampCheck = false,
                    Enabled = false,
                    Host = "string",
                    Port = 0,
                    RequireMessageAuthenticator = false,
                    Secret = "string",
                },
            },
            Enabled = false,
        },
        TuntermExtraRoutes = 
        {
            { "string", new JuniperMist.Org.Inputs.MxclusterTuntermExtraRoutesArgs
            {
                Via = "string",
            } },
        },
        TuntermHosts = new[]
        {
            "string",
        },
        TuntermHostsOrders = new[]
        {
            0,
        },
        TuntermHostsSelection = "string",
        TuntermMonitoringDisabled = false,
        TuntermMonitorings = new[]
        {
            new[]
            {
                new JuniperMist.Org.Inputs.MxclusterTuntermMonitoringArgs
                {
                    Host = "string",
                    Port = 0,
                    Protocol = "string",
                    SrcVlanId = 0,
                    Timeout = 0,
                },
            },
        },
    });
    
    example, err := org.NewMxcluster(ctx, "mxclusterResource", &org.MxclusterArgs{
    	OrgId:  pulumi.String("string"),
    	SiteId: pulumi.String("string"),
    	TuntermDhcpdConfig: org.MxclusterTuntermDhcpdConfigMap{
    		"string": &org.MxclusterTuntermDhcpdConfigArgs{
    			Enabled: pulumi.Bool(false),
    			Servers: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    			Type: pulumi.String("string"),
    		},
    	},
    	MxedgeMgmt: &org.MxclusterMxedgeMgmtArgs{
    		ConfigAutoRevert: pulumi.Bool(false),
    		FipsEnabled:      pulumi.Bool(false),
    		MistPassword:     pulumi.String("string"),
    		OobIpType:        pulumi.String("string"),
    		OobIpType6:       pulumi.String("string"),
    		RootPassword:     pulumi.String("string"),
    	},
    	Name: pulumi.String("string"),
    	MistNac: &org.MxclusterMistNacArgs{
    		AcctServerPort: pulumi.Int(0),
    		AuthServerPort: pulumi.Int(0),
    		ClientIps: org.MxclusterMistNacClientIpsMap{
    			"string": &org.MxclusterMistNacClientIpsArgs{},
    		},
    		Enabled: pulumi.Bool(false),
    		Secret:  pulumi.String("string"),
    	},
    	Proxy: &org.MxclusterProxyArgs{
    		Disabled: pulumi.Bool(false),
    		Url:      pulumi.String("string"),
    	},
    	MistNacedge: &org.MxclusterMistNacedgeArgs{
    		AuthTtl: pulumi.Int(0),
    		CachingSiteIds: pulumi.StringArray{
    			pulumi.String("string"),
    		},
    		DefaultDot1xVlan: pulumi.String("string"),
    		DefaultVlan:      pulumi.String("string"),
    		Enabled:          pulumi.Bool(false),
    		NacEdgeHosts: pulumi.StringArray{
    			pulumi.String("string"),
    		},
    	},
    	Radsec: &org.MxclusterRadsecArgs{
    		AcctServers: org.MxclusterRadsecAcctServerArray{
    			&org.MxclusterRadsecAcctServerArgs{
    				Host:   pulumi.String("string"),
    				Port:   pulumi.Int(0),
    				Secret: pulumi.String("string"),
    				Ssids: pulumi.StringArray{
    					pulumi.String("string"),
    				},
    			},
    		},
    		AuthServers: org.MxclusterRadsecAuthServerArray{
    			&org.MxclusterRadsecAuthServerArgs{
    				Host:                 pulumi.String("string"),
    				InbandStatusCheck:    pulumi.Bool(false),
    				InbandStatusInterval: pulumi.Int(0),
    				KeywrapEnabled:       pulumi.Bool(false),
    				KeywrapFormat:        pulumi.String("string"),
    				KeywrapKek:           pulumi.String("string"),
    				KeywrapMack:          pulumi.String("string"),
    				Port:                 pulumi.Int(0),
    				Retry:                pulumi.Int(0),
    				Secret:               pulumi.String("string"),
    				Ssids: pulumi.StringArray{
    					pulumi.String("string"),
    				},
    				Timeout: pulumi.Int(0),
    			},
    		},
    		Enabled:     pulumi.Bool(false),
    		MatchSsid:   pulumi.Bool(false),
    		NasIpSource: pulumi.String("string"),
    		ProxyHosts: pulumi.StringArray{
    			pulumi.String("string"),
    		},
    		ServerSelection: pulumi.String("string"),
    		SrcIpSource:     pulumi.String("string"),
    	},
    	TuntermApSubnets: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	MistDas: &org.MxclusterMistDasArgs{
    		CoaServers: org.MxclusterMistDasCoaServerArray{
    			&org.MxclusterMistDasCoaServerArgs{
    				DisableEventTimestampCheck:  pulumi.Bool(false),
    				Enabled:                     pulumi.Bool(false),
    				Host:                        pulumi.String("string"),
    				Port:                        pulumi.Int(0),
    				RequireMessageAuthenticator: pulumi.Bool(false),
    				Secret:                      pulumi.String("string"),
    			},
    		},
    		Enabled: pulumi.Bool(false),
    	},
    	TuntermExtraRoutes: org.MxclusterTuntermExtraRoutesMap{
    		"string": &org.MxclusterTuntermExtraRoutesArgs{
    			Via: pulumi.String("string"),
    		},
    	},
    	TuntermHosts: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	TuntermHostsOrders: pulumi.IntArray{
    		pulumi.Int(0),
    	},
    	TuntermHostsSelection:     pulumi.String("string"),
    	TuntermMonitoringDisabled: pulumi.Bool(false),
    	TuntermMonitorings: org.MxclusterTuntermMonitoringArrayArray{
    		org.MxclusterTuntermMonitoringArray{
    			&org.MxclusterTuntermMonitoringArgs{
    				Host:      pulumi.String("string"),
    				Port:      pulumi.Int(0),
    				Protocol:  pulumi.String("string"),
    				SrcVlanId: pulumi.Int(0),
    				Timeout:   pulumi.Int(0),
    			},
    		},
    	},
    })
    
    resource "junipermist_org_mxcluster" "mxclusterResource" {
      lifecycle {
        create_before_destroy = true
      }
      org_id  = "string"
      site_id = "string"
      tunterm_dhcpd_config = {
        "string" = {
          enabled = false
          servers = ["string"]
          type    = "string"
        }
      }
      mxedge_mgmt = {
        config_auto_revert = false
        fips_enabled       = false
        mist_password      = "string"
        oob_ip_type        = "string"
        oob_ip_type6       = "string"
        root_password      = "string"
      }
      name = "string"
      mist_nac = {
        acct_server_port = 0
        auth_server_port = 0
        client_ips = {
          "string" = {}
        }
        enabled = false
        secret  = "string"
      }
      proxy = {
        disabled = false
        url      = "string"
      }
      mist_nacedge = {
        auth_ttl           = 0
        caching_site_ids   = ["string"]
        default_dot1x_vlan = "string"
        default_vlan       = "string"
        enabled            = false
        nac_edge_hosts     = ["string"]
      }
      radsec = {
        acct_servers = [{
          host   = "string"
          port   = 0
          secret = "string"
          ssids  = ["string"]
        }]
        auth_servers = [{
          host                   = "string"
          inband_status_check    = false
          inband_status_interval = 0
          keywrap_enabled        = false
          keywrap_format         = "string"
          keywrap_kek            = "string"
          keywrap_mack           = "string"
          port                   = 0
          retry                  = 0
          secret                 = "string"
          ssids                  = ["string"]
          timeout                = 0
        }]
        enabled          = false
        match_ssid       = false
        nas_ip_source    = "string"
        proxy_hosts      = ["string"]
        server_selection = "string"
        src_ip_source    = "string"
      }
      tunterm_ap_subnets = ["string"]
      mist_das = {
        coa_servers = [{
          disable_event_timestamp_check = false
          enabled                       = false
          host                          = "string"
          port                          = 0
          require_message_authenticator = false
          secret                        = "string"
        }]
        enabled = false
      }
      tunterm_extra_routes = {
        "string" = {
          via = "string"
        }
      }
      tunterm_hosts               = ["string"]
      tunterm_hosts_orders        = [0]
      tunterm_hosts_selection     = "string"
      tunterm_monitoring_disabled = false
      tunterm_monitorings = [[{
        host        = "string"
        port        = 0
        protocol    = "string"
        src_vlan_id = 0
        timeout     = 0
      }]]
    }
    
    var mxclusterResource = new Mxcluster("mxclusterResource", MxclusterArgs.builder()
        .orgId("string")
        .siteId("string")
        .tuntermDhcpdConfig(Map.of("string", MxclusterTuntermDhcpdConfigArgs.builder()
            .enabled(false)
            .servers("string")
            .type("string")
            .build()))
        .mxedgeMgmt(MxclusterMxedgeMgmtArgs.builder()
            .configAutoRevert(false)
            .fipsEnabled(false)
            .mistPassword("string")
            .oobIpType("string")
            .oobIpType6("string")
            .rootPassword("string")
            .build())
        .name("string")
        .mistNac(MxclusterMistNacArgs.builder()
            .acctServerPort(0)
            .authServerPort(0)
            .clientIps(Map.of("string", MxclusterMistNacClientIpsArgs.builder()
                .build()))
            .enabled(false)
            .secret("string")
            .build())
        .proxy(MxclusterProxyArgs.builder()
            .disabled(false)
            .url("string")
            .build())
        .mistNacedge(MxclusterMistNacedgeArgs.builder()
            .authTtl(0)
            .cachingSiteIds("string")
            .defaultDot1xVlan("string")
            .defaultVlan("string")
            .enabled(false)
            .nacEdgeHosts("string")
            .build())
        .radsec(MxclusterRadsecArgs.builder()
            .acctServers(MxclusterRadsecAcctServerArgs.builder()
                .host("string")
                .port(0)
                .secret("string")
                .ssids("string")
                .build())
            .authServers(MxclusterRadsecAuthServerArgs.builder()
                .host("string")
                .inbandStatusCheck(false)
                .inbandStatusInterval(0)
                .keywrapEnabled(false)
                .keywrapFormat("string")
                .keywrapKek("string")
                .keywrapMack("string")
                .port(0)
                .retry(0)
                .secret("string")
                .ssids("string")
                .timeout(0)
                .build())
            .enabled(false)
            .matchSsid(false)
            .nasIpSource("string")
            .proxyHosts("string")
            .serverSelection("string")
            .srcIpSource("string")
            .build())
        .tuntermApSubnets("string")
        .mistDas(MxclusterMistDasArgs.builder()
            .coaServers(MxclusterMistDasCoaServerArgs.builder()
                .disableEventTimestampCheck(false)
                .enabled(false)
                .host("string")
                .port(0)
                .requireMessageAuthenticator(false)
                .secret("string")
                .build())
            .enabled(false)
            .build())
        .tuntermExtraRoutes(Map.of("string", MxclusterTuntermExtraRoutesArgs.builder()
            .via("string")
            .build()))
        .tuntermHosts("string")
        .tuntermHostsOrders(0)
        .tuntermHostsSelection("string")
        .tuntermMonitoringDisabled(false)
        .tuntermMonitorings(MxclusterTuntermMonitoringArgs.builder()
            .host("string")
            .port(0)
            .protocol("string")
            .srcVlanId(0)
            .timeout(0)
            .build())
        .build());
    
    mxcluster_resource = junipermist.org.Mxcluster("mxclusterResource",
        org_id="string",
        site_id="string",
        tunterm_dhcpd_config={
            "string": {
                "enabled": False,
                "servers": ["string"],
                "type": "string",
            },
        },
        mxedge_mgmt={
            "config_auto_revert": False,
            "fips_enabled": False,
            "mist_password": "string",
            "oob_ip_type": "string",
            "oob_ip_type6": "string",
            "root_password": "string",
        },
        name="string",
        mist_nac={
            "acct_server_port": 0,
            "auth_server_port": 0,
            "client_ips": {
                "string": {},
            },
            "enabled": False,
            "secret": "string",
        },
        proxy={
            "disabled": False,
            "url": "string",
        },
        mist_nacedge={
            "auth_ttl": 0,
            "caching_site_ids": ["string"],
            "default_dot1x_vlan": "string",
            "default_vlan": "string",
            "enabled": False,
            "nac_edge_hosts": ["string"],
        },
        radsec={
            "acct_servers": [{
                "host": "string",
                "port": 0,
                "secret": "string",
                "ssids": ["string"],
            }],
            "auth_servers": [{
                "host": "string",
                "inband_status_check": False,
                "inband_status_interval": 0,
                "keywrap_enabled": False,
                "keywrap_format": "string",
                "keywrap_kek": "string",
                "keywrap_mack": "string",
                "port": 0,
                "retry": 0,
                "secret": "string",
                "ssids": ["string"],
                "timeout": 0,
            }],
            "enabled": False,
            "match_ssid": False,
            "nas_ip_source": "string",
            "proxy_hosts": ["string"],
            "server_selection": "string",
            "src_ip_source": "string",
        },
        tunterm_ap_subnets=["string"],
        mist_das={
            "coa_servers": [{
                "disable_event_timestamp_check": False,
                "enabled": False,
                "host": "string",
                "port": 0,
                "require_message_authenticator": False,
                "secret": "string",
            }],
            "enabled": False,
        },
        tunterm_extra_routes={
            "string": {
                "via": "string",
            },
        },
        tunterm_hosts=["string"],
        tunterm_hosts_orders=[0],
        tunterm_hosts_selection="string",
        tunterm_monitoring_disabled=False,
        tunterm_monitorings=[[{
            "host": "string",
            "port": 0,
            "protocol": "string",
            "src_vlan_id": 0,
            "timeout": 0,
        }]])
    
    const mxclusterResource = new junipermist.org.Mxcluster("mxclusterResource", {
        orgId: "string",
        siteId: "string",
        tuntermDhcpdConfig: {
            string: {
                enabled: false,
                servers: ["string"],
                type: "string",
            },
        },
        mxedgeMgmt: {
            configAutoRevert: false,
            fipsEnabled: false,
            mistPassword: "string",
            oobIpType: "string",
            oobIpType6: "string",
            rootPassword: "string",
        },
        name: "string",
        mistNac: {
            acctServerPort: 0,
            authServerPort: 0,
            clientIps: {
                string: {},
            },
            enabled: false,
            secret: "string",
        },
        proxy: {
            disabled: false,
            url: "string",
        },
        mistNacedge: {
            authTtl: 0,
            cachingSiteIds: ["string"],
            defaultDot1xVlan: "string",
            defaultVlan: "string",
            enabled: false,
            nacEdgeHosts: ["string"],
        },
        radsec: {
            acctServers: [{
                host: "string",
                port: 0,
                secret: "string",
                ssids: ["string"],
            }],
            authServers: [{
                host: "string",
                inbandStatusCheck: false,
                inbandStatusInterval: 0,
                keywrapEnabled: false,
                keywrapFormat: "string",
                keywrapKek: "string",
                keywrapMack: "string",
                port: 0,
                retry: 0,
                secret: "string",
                ssids: ["string"],
                timeout: 0,
            }],
            enabled: false,
            matchSsid: false,
            nasIpSource: "string",
            proxyHosts: ["string"],
            serverSelection: "string",
            srcIpSource: "string",
        },
        tuntermApSubnets: ["string"],
        mistDas: {
            coaServers: [{
                disableEventTimestampCheck: false,
                enabled: false,
                host: "string",
                port: 0,
                requireMessageAuthenticator: false,
                secret: "string",
            }],
            enabled: false,
        },
        tuntermExtraRoutes: {
            string: {
                via: "string",
            },
        },
        tuntermHosts: ["string"],
        tuntermHostsOrders: [0],
        tuntermHostsSelection: "string",
        tuntermMonitoringDisabled: false,
        tuntermMonitorings: [[{
            host: "string",
            port: 0,
            protocol: "string",
            srcVlanId: 0,
            timeout: 0,
        }]],
    });
    
    type: junipermist:org:Mxcluster
    properties:
        mistDas:
            coaServers:
                - disableEventTimestampCheck: false
                  enabled: false
                  host: string
                  port: 0
                  requireMessageAuthenticator: false
                  secret: string
            enabled: false
        mistNac:
            acctServerPort: 0
            authServerPort: 0
            clientIps:
                string: {}
            enabled: false
            secret: string
        mistNacedge:
            authTtl: 0
            cachingSiteIds:
                - string
            defaultDot1xVlan: string
            defaultVlan: string
            enabled: false
            nacEdgeHosts:
                - string
        mxedgeMgmt:
            configAutoRevert: false
            fipsEnabled: false
            mistPassword: string
            oobIpType: string
            oobIpType6: string
            rootPassword: string
        name: string
        orgId: string
        proxy:
            disabled: false
            url: string
        radsec:
            acctServers:
                - host: string
                  port: 0
                  secret: string
                  ssids:
                    - string
            authServers:
                - host: string
                  inbandStatusCheck: false
                  inbandStatusInterval: 0
                  keywrapEnabled: false
                  keywrapFormat: string
                  keywrapKek: string
                  keywrapMack: string
                  port: 0
                  retry: 0
                  secret: string
                  ssids:
                    - string
                  timeout: 0
            enabled: false
            matchSsid: false
            nasIpSource: string
            proxyHosts:
                - string
            serverSelection: string
            srcIpSource: string
        siteId: string
        tuntermApSubnets:
            - string
        tuntermDhcpdConfig:
            string:
                enabled: false
                servers:
                    - string
                type: string
        tuntermExtraRoutes:
            string:
                via: string
        tuntermHosts:
            - string
        tuntermHostsOrders:
            - 0
        tuntermHostsSelection: string
        tuntermMonitoringDisabled: false
        tuntermMonitorings:
            - - host: string
                port: 0
                protocol: string
                srcVlanId: 0
                timeout: 0
    

    Mxcluster Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Mxcluster resource accepts the following input properties:

    OrgId string
    Identifier of the org that owns the Mist Edge cluster
    MistDas Pulumi.JuniperMist.Org.Inputs.MxclusterMistDas
    Dynamic authorization service settings for the cluster
    MistNac Pulumi.JuniperMist.Org.Inputs.MxclusterMistNac
    NAC settings for the Mist Edge cluster
    MistNacedge Pulumi.JuniperMist.Org.Inputs.MxclusterMistNacedge
    NAC Edge survivability settings for the cluster; requires mistNac to be enabled
    MxedgeMgmt Pulumi.JuniperMist.Org.Inputs.MxclusterMxedgeMgmt
    Out-of-band management settings for Mist Edges in the cluster
    Name string
    Display name of the Mist Edge cluster
    Proxy Pulumi.JuniperMist.Org.Inputs.MxclusterProxy
    Network proxy settings used by Mist Edges in the cluster to communicate with the Mist Cloud
    Radsec Pulumi.JuniperMist.Org.Inputs.MxclusterRadsec
    TLS RADIUS proxy settings for the Mist Edge cluster
    SiteId string
    Identifier of the site when the Mist Edge cluster is site-scoped
    TuntermApSubnets List<string>
    AP source subnets allowed to establish Mist tunnels
    TuntermDhcpdConfig Dictionary<string, Pulumi.JuniperMist.Org.Inputs.MxclusterTuntermDhcpdConfigArgs>
    DHCP relay or server settings for tunneled VLANs
    TuntermExtraRoutes Dictionary<string, Pulumi.JuniperMist.Org.Inputs.MxclusterTuntermExtraRoutesArgs>
    Extra routes for Mist Tunnel VLAN traffic
    TuntermHosts List<string>
    Hostnames or IP addresses used as Mist Tunnel peers
    TuntermHostsOrders List<int>
    Explicit host ordering indexes used when ordered selection is configured
    TuntermHostsSelection string
    Selection strategy for ordering tunnel termination hosts
    TuntermMonitoringDisabled bool
    Whether tunnel termination monitoring is disabled for the cluster
    TuntermMonitorings List<ImmutableArray<Pulumi.JuniperMist.Org.Inputs.MxclusterTuntermMonitoring>>
    Monitoring checks for tunnel termination reachability
    OrgId string
    Identifier of the org that owns the Mist Edge cluster
    MistDas MxclusterMistDasArgs
    Dynamic authorization service settings for the cluster
    MistNac MxclusterMistNacArgs
    NAC settings for the Mist Edge cluster
    MistNacedge MxclusterMistNacedgeArgs
    NAC Edge survivability settings for the cluster; requires mistNac to be enabled
    MxedgeMgmt MxclusterMxedgeMgmtArgs
    Out-of-band management settings for Mist Edges in the cluster
    Name string
    Display name of the Mist Edge cluster
    Proxy MxclusterProxyArgs
    Network proxy settings used by Mist Edges in the cluster to communicate with the Mist Cloud
    Radsec MxclusterRadsecArgs
    TLS RADIUS proxy settings for the Mist Edge cluster
    SiteId string
    Identifier of the site when the Mist Edge cluster is site-scoped
    TuntermApSubnets []string
    AP source subnets allowed to establish Mist tunnels
    TuntermDhcpdConfig map[string]MxclusterTuntermDhcpdConfigArgs
    DHCP relay or server settings for tunneled VLANs
    TuntermExtraRoutes map[string]MxclusterTuntermExtraRoutesArgs
    Extra routes for Mist Tunnel VLAN traffic
    TuntermHosts []string
    Hostnames or IP addresses used as Mist Tunnel peers
    TuntermHostsOrders []int
    Explicit host ordering indexes used when ordered selection is configured
    TuntermHostsSelection string
    Selection strategy for ordering tunnel termination hosts
    TuntermMonitoringDisabled bool
    Whether tunnel termination monitoring is disabled for the cluster
    TuntermMonitorings [][]MxclusterTuntermMonitoringArgs
    Monitoring checks for tunnel termination reachability
    org_id string
    Identifier of the org that owns the Mist Edge cluster
    mist_das object
    Dynamic authorization service settings for the cluster
    mist_nac object
    NAC settings for the Mist Edge cluster
    mist_nacedge object
    NAC Edge survivability settings for the cluster; requires mistNac to be enabled
    mxedge_mgmt object
    Out-of-band management settings for Mist Edges in the cluster
    name string
    Display name of the Mist Edge cluster
    proxy object
    Network proxy settings used by Mist Edges in the cluster to communicate with the Mist Cloud
    radsec object
    TLS RADIUS proxy settings for the Mist Edge cluster
    site_id string
    Identifier of the site when the Mist Edge cluster is site-scoped
    tunterm_ap_subnets list(string)
    AP source subnets allowed to establish Mist tunnels
    tunterm_dhcpd_config map(object)
    DHCP relay or server settings for tunneled VLANs
    tunterm_extra_routes map(object)
    Extra routes for Mist Tunnel VLAN traffic
    tunterm_hosts list(string)
    Hostnames or IP addresses used as Mist Tunnel peers
    tunterm_hosts_orders list(number)
    Explicit host ordering indexes used when ordered selection is configured
    tunterm_hosts_selection string
    Selection strategy for ordering tunnel termination hosts
    tunterm_monitoring_disabled bool
    Whether tunnel termination monitoring is disabled for the cluster
    tunterm_monitorings list(list(object))
    Monitoring checks for tunnel termination reachability
    orgId String
    Identifier of the org that owns the Mist Edge cluster
    mistDas MxclusterMistDas
    Dynamic authorization service settings for the cluster
    mistNac MxclusterMistNac
    NAC settings for the Mist Edge cluster
    mistNacedge MxclusterMistNacedge
    NAC Edge survivability settings for the cluster; requires mistNac to be enabled
    mxedgeMgmt MxclusterMxedgeMgmt
    Out-of-band management settings for Mist Edges in the cluster
    name String
    Display name of the Mist Edge cluster
    proxy MxclusterProxy
    Network proxy settings used by Mist Edges in the cluster to communicate with the Mist Cloud
    radsec MxclusterRadsec
    TLS RADIUS proxy settings for the Mist Edge cluster
    siteId String
    Identifier of the site when the Mist Edge cluster is site-scoped
    tuntermApSubnets List<String>
    AP source subnets allowed to establish Mist tunnels
    tuntermDhcpdConfig Map<String,MxclusterTuntermDhcpdConfigArgs>
    DHCP relay or server settings for tunneled VLANs
    tuntermExtraRoutes Map<String,MxclusterTuntermExtraRoutesArgs>
    Extra routes for Mist Tunnel VLAN traffic
    tuntermHosts List<String>
    Hostnames or IP addresses used as Mist Tunnel peers
    tuntermHostsOrders List<Integer>
    Explicit host ordering indexes used when ordered selection is configured
    tuntermHostsSelection String
    Selection strategy for ordering tunnel termination hosts
    tuntermMonitoringDisabled Boolean
    Whether tunnel termination monitoring is disabled for the cluster
    tuntermMonitorings List<List<MxclusterTuntermMonitoring>>
    Monitoring checks for tunnel termination reachability
    orgId string
    Identifier of the org that owns the Mist Edge cluster
    mistDas MxclusterMistDas
    Dynamic authorization service settings for the cluster
    mistNac MxclusterMistNac
    NAC settings for the Mist Edge cluster
    mistNacedge MxclusterMistNacedge
    NAC Edge survivability settings for the cluster; requires mistNac to be enabled
    mxedgeMgmt MxclusterMxedgeMgmt
    Out-of-band management settings for Mist Edges in the cluster
    name string
    Display name of the Mist Edge cluster
    proxy MxclusterProxy
    Network proxy settings used by Mist Edges in the cluster to communicate with the Mist Cloud
    radsec MxclusterRadsec
    TLS RADIUS proxy settings for the Mist Edge cluster
    siteId string
    Identifier of the site when the Mist Edge cluster is site-scoped
    tuntermApSubnets string[]
    AP source subnets allowed to establish Mist tunnels
    tuntermDhcpdConfig {[key: string]: MxclusterTuntermDhcpdConfigArgs}
    DHCP relay or server settings for tunneled VLANs
    tuntermExtraRoutes {[key: string]: MxclusterTuntermExtraRoutesArgs}
    Extra routes for Mist Tunnel VLAN traffic
    tuntermHosts string[]
    Hostnames or IP addresses used as Mist Tunnel peers
    tuntermHostsOrders number[]
    Explicit host ordering indexes used when ordered selection is configured
    tuntermHostsSelection string
    Selection strategy for ordering tunnel termination hosts
    tuntermMonitoringDisabled boolean
    Whether tunnel termination monitoring is disabled for the cluster
    tuntermMonitorings MxclusterTuntermMonitoring[][]
    Monitoring checks for tunnel termination reachability
    org_id str
    Identifier of the org that owns the Mist Edge cluster
    mist_das MxclusterMistDasArgs
    Dynamic authorization service settings for the cluster
    mist_nac MxclusterMistNacArgs
    NAC settings for the Mist Edge cluster
    mist_nacedge MxclusterMistNacedgeArgs
    NAC Edge survivability settings for the cluster; requires mistNac to be enabled
    mxedge_mgmt MxclusterMxedgeMgmtArgs
    Out-of-band management settings for Mist Edges in the cluster
    name str
    Display name of the Mist Edge cluster
    proxy MxclusterProxyArgs
    Network proxy settings used by Mist Edges in the cluster to communicate with the Mist Cloud
    radsec MxclusterRadsecArgs
    TLS RADIUS proxy settings for the Mist Edge cluster
    site_id str
    Identifier of the site when the Mist Edge cluster is site-scoped
    tunterm_ap_subnets Sequence[str]
    AP source subnets allowed to establish Mist tunnels
    tunterm_dhcpd_config Mapping[str, MxclusterTuntermDhcpdConfigArgs]
    DHCP relay or server settings for tunneled VLANs
    tunterm_extra_routes Mapping[str, MxclusterTuntermExtraRoutesArgs]
    Extra routes for Mist Tunnel VLAN traffic
    tunterm_hosts Sequence[str]
    Hostnames or IP addresses used as Mist Tunnel peers
    tunterm_hosts_orders Sequence[int]
    Explicit host ordering indexes used when ordered selection is configured
    tunterm_hosts_selection str
    Selection strategy for ordering tunnel termination hosts
    tunterm_monitoring_disabled bool
    Whether tunnel termination monitoring is disabled for the cluster
    tunterm_monitorings Sequence[Sequence[MxclusterTuntermMonitoringArgs]]
    Monitoring checks for tunnel termination reachability
    orgId String
    Identifier of the org that owns the Mist Edge cluster
    mistDas Property Map
    Dynamic authorization service settings for the cluster
    mistNac Property Map
    NAC settings for the Mist Edge cluster
    mistNacedge Property Map
    NAC Edge survivability settings for the cluster; requires mistNac to be enabled
    mxedgeMgmt Property Map
    Out-of-band management settings for Mist Edges in the cluster
    name String
    Display name of the Mist Edge cluster
    proxy Property Map
    Network proxy settings used by Mist Edges in the cluster to communicate with the Mist Cloud
    radsec Property Map
    TLS RADIUS proxy settings for the Mist Edge cluster
    siteId String
    Identifier of the site when the Mist Edge cluster is site-scoped
    tuntermApSubnets List<String>
    AP source subnets allowed to establish Mist tunnels
    tuntermDhcpdConfig Map<Property Map>
    DHCP relay or server settings for tunneled VLANs
    tuntermExtraRoutes Map<Property Map>
    Extra routes for Mist Tunnel VLAN traffic
    tuntermHosts List<String>
    Hostnames or IP addresses used as Mist Tunnel peers
    tuntermHostsOrders List<Number>
    Explicit host ordering indexes used when ordered selection is configured
    tuntermHostsSelection String
    Selection strategy for ordering tunnel termination hosts
    tuntermMonitoringDisabled Boolean
    Whether tunnel termination monitoring is disabled for the cluster
    tuntermMonitorings List<List<Property Map>>
    Monitoring checks for tunnel termination reachability

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Mxcluster resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    RadsecTls Pulumi.JuniperMist.Org.Outputs.MxclusterRadsecTls
    TLS keypair settings for RadSec on the Mist Edge cluster
    Id string
    The provider-assigned unique ID for this managed resource.
    RadsecTls MxclusterRadsecTls
    TLS keypair settings for RadSec on the Mist Edge cluster
    id string
    The provider-assigned unique ID for this managed resource.
    radsec_tls object
    TLS keypair settings for RadSec on the Mist Edge cluster
    id String
    The provider-assigned unique ID for this managed resource.
    radsecTls MxclusterRadsecTls
    TLS keypair settings for RadSec on the Mist Edge cluster
    id string
    The provider-assigned unique ID for this managed resource.
    radsecTls MxclusterRadsecTls
    TLS keypair settings for RadSec on the Mist Edge cluster
    id str
    The provider-assigned unique ID for this managed resource.
    radsec_tls MxclusterRadsecTls
    TLS keypair settings for RadSec on the Mist Edge cluster
    id String
    The provider-assigned unique ID for this managed resource.
    radsecTls Property Map
    TLS keypair settings for RadSec on the Mist Edge cluster

    Look up Existing Mxcluster Resource

    Get an existing Mxcluster resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: MxclusterState, opts?: CustomResourceOptions): Mxcluster
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            mist_das: Optional[MxclusterMistDasArgs] = None,
            mist_nac: Optional[MxclusterMistNacArgs] = None,
            mist_nacedge: Optional[MxclusterMistNacedgeArgs] = None,
            mxedge_mgmt: Optional[MxclusterMxedgeMgmtArgs] = None,
            name: Optional[str] = None,
            org_id: Optional[str] = None,
            proxy: Optional[MxclusterProxyArgs] = None,
            radsec: Optional[MxclusterRadsecArgs] = None,
            radsec_tls: Optional[MxclusterRadsecTlsArgs] = None,
            site_id: Optional[str] = None,
            tunterm_ap_subnets: Optional[Sequence[str]] = None,
            tunterm_dhcpd_config: Optional[Mapping[str, MxclusterTuntermDhcpdConfigArgs]] = None,
            tunterm_extra_routes: Optional[Mapping[str, MxclusterTuntermExtraRoutesArgs]] = None,
            tunterm_hosts: Optional[Sequence[str]] = None,
            tunterm_hosts_orders: Optional[Sequence[int]] = None,
            tunterm_hosts_selection: Optional[str] = None,
            tunterm_monitoring_disabled: Optional[bool] = None,
            tunterm_monitorings: Optional[Sequence[Sequence[MxclusterTuntermMonitoringArgs]]] = None) -> Mxcluster
    func GetMxcluster(ctx *Context, name string, id IDInput, state *MxclusterState, opts ...ResourceOption) (*Mxcluster, error)
    public static Mxcluster Get(string name, Input<string> id, MxclusterState? state, CustomResourceOptions? opts = null)
    public static Mxcluster get(String name, Output<String> id, MxclusterState state, CustomResourceOptions options)
    resources:  _:    type: junipermist:org:Mxcluster    get:      id: ${id}
    import {
      to = junipermist_org_mxcluster.example
      id = "${id}"
    }
    
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    MistDas Pulumi.JuniperMist.Org.Inputs.MxclusterMistDas
    Dynamic authorization service settings for the cluster
    MistNac Pulumi.JuniperMist.Org.Inputs.MxclusterMistNac
    NAC settings for the Mist Edge cluster
    MistNacedge Pulumi.JuniperMist.Org.Inputs.MxclusterMistNacedge
    NAC Edge survivability settings for the cluster; requires mistNac to be enabled
    MxedgeMgmt Pulumi.JuniperMist.Org.Inputs.MxclusterMxedgeMgmt
    Out-of-band management settings for Mist Edges in the cluster
    Name string
    Display name of the Mist Edge cluster
    OrgId string
    Identifier of the org that owns the Mist Edge cluster
    Proxy Pulumi.JuniperMist.Org.Inputs.MxclusterProxy
    Network proxy settings used by Mist Edges in the cluster to communicate with the Mist Cloud
    Radsec Pulumi.JuniperMist.Org.Inputs.MxclusterRadsec
    TLS RADIUS proxy settings for the Mist Edge cluster
    RadsecTls Pulumi.JuniperMist.Org.Inputs.MxclusterRadsecTls
    TLS keypair settings for RadSec on the Mist Edge cluster
    SiteId string
    Identifier of the site when the Mist Edge cluster is site-scoped
    TuntermApSubnets List<string>
    AP source subnets allowed to establish Mist tunnels
    TuntermDhcpdConfig Dictionary<string, Pulumi.JuniperMist.Org.Inputs.MxclusterTuntermDhcpdConfigArgs>
    DHCP relay or server settings for tunneled VLANs
    TuntermExtraRoutes Dictionary<string, Pulumi.JuniperMist.Org.Inputs.MxclusterTuntermExtraRoutesArgs>
    Extra routes for Mist Tunnel VLAN traffic
    TuntermHosts List<string>
    Hostnames or IP addresses used as Mist Tunnel peers
    TuntermHostsOrders List<int>
    Explicit host ordering indexes used when ordered selection is configured
    TuntermHostsSelection string
    Selection strategy for ordering tunnel termination hosts
    TuntermMonitoringDisabled bool
    Whether tunnel termination monitoring is disabled for the cluster
    TuntermMonitorings List<ImmutableArray<Pulumi.JuniperMist.Org.Inputs.MxclusterTuntermMonitoring>>
    Monitoring checks for tunnel termination reachability
    MistDas MxclusterMistDasArgs
    Dynamic authorization service settings for the cluster
    MistNac MxclusterMistNacArgs
    NAC settings for the Mist Edge cluster
    MistNacedge MxclusterMistNacedgeArgs
    NAC Edge survivability settings for the cluster; requires mistNac to be enabled
    MxedgeMgmt MxclusterMxedgeMgmtArgs
    Out-of-band management settings for Mist Edges in the cluster
    Name string
    Display name of the Mist Edge cluster
    OrgId string
    Identifier of the org that owns the Mist Edge cluster
    Proxy MxclusterProxyArgs
    Network proxy settings used by Mist Edges in the cluster to communicate with the Mist Cloud
    Radsec MxclusterRadsecArgs
    TLS RADIUS proxy settings for the Mist Edge cluster
    RadsecTls MxclusterRadsecTlsArgs
    TLS keypair settings for RadSec on the Mist Edge cluster
    SiteId string
    Identifier of the site when the Mist Edge cluster is site-scoped
    TuntermApSubnets []string
    AP source subnets allowed to establish Mist tunnels
    TuntermDhcpdConfig map[string]MxclusterTuntermDhcpdConfigArgs
    DHCP relay or server settings for tunneled VLANs
    TuntermExtraRoutes map[string]MxclusterTuntermExtraRoutesArgs
    Extra routes for Mist Tunnel VLAN traffic
    TuntermHosts []string
    Hostnames or IP addresses used as Mist Tunnel peers
    TuntermHostsOrders []int
    Explicit host ordering indexes used when ordered selection is configured
    TuntermHostsSelection string
    Selection strategy for ordering tunnel termination hosts
    TuntermMonitoringDisabled bool
    Whether tunnel termination monitoring is disabled for the cluster
    TuntermMonitorings [][]MxclusterTuntermMonitoringArgs
    Monitoring checks for tunnel termination reachability
    mist_das object
    Dynamic authorization service settings for the cluster
    mist_nac object
    NAC settings for the Mist Edge cluster
    mist_nacedge object
    NAC Edge survivability settings for the cluster; requires mistNac to be enabled
    mxedge_mgmt object
    Out-of-band management settings for Mist Edges in the cluster
    name string
    Display name of the Mist Edge cluster
    org_id string
    Identifier of the org that owns the Mist Edge cluster
    proxy object
    Network proxy settings used by Mist Edges in the cluster to communicate with the Mist Cloud
    radsec object
    TLS RADIUS proxy settings for the Mist Edge cluster
    radsec_tls object
    TLS keypair settings for RadSec on the Mist Edge cluster
    site_id string
    Identifier of the site when the Mist Edge cluster is site-scoped
    tunterm_ap_subnets list(string)
    AP source subnets allowed to establish Mist tunnels
    tunterm_dhcpd_config map(object)
    DHCP relay or server settings for tunneled VLANs
    tunterm_extra_routes map(object)
    Extra routes for Mist Tunnel VLAN traffic
    tunterm_hosts list(string)
    Hostnames or IP addresses used as Mist Tunnel peers
    tunterm_hosts_orders list(number)
    Explicit host ordering indexes used when ordered selection is configured
    tunterm_hosts_selection string
    Selection strategy for ordering tunnel termination hosts
    tunterm_monitoring_disabled bool
    Whether tunnel termination monitoring is disabled for the cluster
    tunterm_monitorings list(list(object))
    Monitoring checks for tunnel termination reachability
    mistDas MxclusterMistDas
    Dynamic authorization service settings for the cluster
    mistNac MxclusterMistNac
    NAC settings for the Mist Edge cluster
    mistNacedge MxclusterMistNacedge
    NAC Edge survivability settings for the cluster; requires mistNac to be enabled
    mxedgeMgmt MxclusterMxedgeMgmt
    Out-of-band management settings for Mist Edges in the cluster
    name String
    Display name of the Mist Edge cluster
    orgId String
    Identifier of the org that owns the Mist Edge cluster
    proxy MxclusterProxy
    Network proxy settings used by Mist Edges in the cluster to communicate with the Mist Cloud
    radsec MxclusterRadsec
    TLS RADIUS proxy settings for the Mist Edge cluster
    radsecTls MxclusterRadsecTls
    TLS keypair settings for RadSec on the Mist Edge cluster
    siteId String
    Identifier of the site when the Mist Edge cluster is site-scoped
    tuntermApSubnets List<String>
    AP source subnets allowed to establish Mist tunnels
    tuntermDhcpdConfig Map<String,MxclusterTuntermDhcpdConfigArgs>
    DHCP relay or server settings for tunneled VLANs
    tuntermExtraRoutes Map<String,MxclusterTuntermExtraRoutesArgs>
    Extra routes for Mist Tunnel VLAN traffic
    tuntermHosts List<String>
    Hostnames or IP addresses used as Mist Tunnel peers
    tuntermHostsOrders List<Integer>
    Explicit host ordering indexes used when ordered selection is configured
    tuntermHostsSelection String
    Selection strategy for ordering tunnel termination hosts
    tuntermMonitoringDisabled Boolean
    Whether tunnel termination monitoring is disabled for the cluster
    tuntermMonitorings List<List<MxclusterTuntermMonitoring>>
    Monitoring checks for tunnel termination reachability
    mistDas MxclusterMistDas
    Dynamic authorization service settings for the cluster
    mistNac MxclusterMistNac
    NAC settings for the Mist Edge cluster
    mistNacedge MxclusterMistNacedge
    NAC Edge survivability settings for the cluster; requires mistNac to be enabled
    mxedgeMgmt MxclusterMxedgeMgmt
    Out-of-band management settings for Mist Edges in the cluster
    name string
    Display name of the Mist Edge cluster
    orgId string
    Identifier of the org that owns the Mist Edge cluster
    proxy MxclusterProxy
    Network proxy settings used by Mist Edges in the cluster to communicate with the Mist Cloud
    radsec MxclusterRadsec
    TLS RADIUS proxy settings for the Mist Edge cluster
    radsecTls MxclusterRadsecTls
    TLS keypair settings for RadSec on the Mist Edge cluster
    siteId string
    Identifier of the site when the Mist Edge cluster is site-scoped
    tuntermApSubnets string[]
    AP source subnets allowed to establish Mist tunnels
    tuntermDhcpdConfig {[key: string]: MxclusterTuntermDhcpdConfigArgs}
    DHCP relay or server settings for tunneled VLANs
    tuntermExtraRoutes {[key: string]: MxclusterTuntermExtraRoutesArgs}
    Extra routes for Mist Tunnel VLAN traffic
    tuntermHosts string[]
    Hostnames or IP addresses used as Mist Tunnel peers
    tuntermHostsOrders number[]
    Explicit host ordering indexes used when ordered selection is configured
    tuntermHostsSelection string
    Selection strategy for ordering tunnel termination hosts
    tuntermMonitoringDisabled boolean
    Whether tunnel termination monitoring is disabled for the cluster
    tuntermMonitorings MxclusterTuntermMonitoring[][]
    Monitoring checks for tunnel termination reachability
    mist_das MxclusterMistDasArgs
    Dynamic authorization service settings for the cluster
    mist_nac MxclusterMistNacArgs
    NAC settings for the Mist Edge cluster
    mist_nacedge MxclusterMistNacedgeArgs
    NAC Edge survivability settings for the cluster; requires mistNac to be enabled
    mxedge_mgmt MxclusterMxedgeMgmtArgs
    Out-of-band management settings for Mist Edges in the cluster
    name str
    Display name of the Mist Edge cluster
    org_id str
    Identifier of the org that owns the Mist Edge cluster
    proxy MxclusterProxyArgs
    Network proxy settings used by Mist Edges in the cluster to communicate with the Mist Cloud
    radsec MxclusterRadsecArgs
    TLS RADIUS proxy settings for the Mist Edge cluster
    radsec_tls MxclusterRadsecTlsArgs
    TLS keypair settings for RadSec on the Mist Edge cluster
    site_id str
    Identifier of the site when the Mist Edge cluster is site-scoped
    tunterm_ap_subnets Sequence[str]
    AP source subnets allowed to establish Mist tunnels
    tunterm_dhcpd_config Mapping[str, MxclusterTuntermDhcpdConfigArgs]
    DHCP relay or server settings for tunneled VLANs
    tunterm_extra_routes Mapping[str, MxclusterTuntermExtraRoutesArgs]
    Extra routes for Mist Tunnel VLAN traffic
    tunterm_hosts Sequence[str]
    Hostnames or IP addresses used as Mist Tunnel peers
    tunterm_hosts_orders Sequence[int]
    Explicit host ordering indexes used when ordered selection is configured
    tunterm_hosts_selection str
    Selection strategy for ordering tunnel termination hosts
    tunterm_monitoring_disabled bool
    Whether tunnel termination monitoring is disabled for the cluster
    tunterm_monitorings Sequence[Sequence[MxclusterTuntermMonitoringArgs]]
    Monitoring checks for tunnel termination reachability
    mistDas Property Map
    Dynamic authorization service settings for the cluster
    mistNac Property Map
    NAC settings for the Mist Edge cluster
    mistNacedge Property Map
    NAC Edge survivability settings for the cluster; requires mistNac to be enabled
    mxedgeMgmt Property Map
    Out-of-band management settings for Mist Edges in the cluster
    name String
    Display name of the Mist Edge cluster
    orgId String
    Identifier of the org that owns the Mist Edge cluster
    proxy Property Map
    Network proxy settings used by Mist Edges in the cluster to communicate with the Mist Cloud
    radsec Property Map
    TLS RADIUS proxy settings for the Mist Edge cluster
    radsecTls Property Map
    TLS keypair settings for RadSec on the Mist Edge cluster
    siteId String
    Identifier of the site when the Mist Edge cluster is site-scoped
    tuntermApSubnets List<String>
    AP source subnets allowed to establish Mist tunnels
    tuntermDhcpdConfig Map<Property Map>
    DHCP relay or server settings for tunneled VLANs
    tuntermExtraRoutes Map<Property Map>
    Extra routes for Mist Tunnel VLAN traffic
    tuntermHosts List<String>
    Hostnames or IP addresses used as Mist Tunnel peers
    tuntermHostsOrders List<Number>
    Explicit host ordering indexes used when ordered selection is configured
    tuntermHostsSelection String
    Selection strategy for ordering tunnel termination hosts
    tuntermMonitoringDisabled Boolean
    Whether tunnel termination monitoring is disabled for the cluster
    tuntermMonitorings List<List<Property Map>>
    Monitoring checks for tunnel termination reachability

    Supporting Types

    MxclusterMistDas, MxclusterMistDasArgs

    CoaServers List<Pulumi.JuniperMist.Org.Inputs.MxclusterMistDasCoaServer>
    Dynamic authorization clients allowed to send CoA or Disconnect-Message requests
    Enabled bool
    Whether cloud-assisted DAS is enabled for the Mist Edge cluster
    CoaServers []MxclusterMistDasCoaServer
    Dynamic authorization clients allowed to send CoA or Disconnect-Message requests
    Enabled bool
    Whether cloud-assisted DAS is enabled for the Mist Edge cluster
    coa_servers list(object)
    Dynamic authorization clients allowed to send CoA or Disconnect-Message requests
    enabled bool
    Whether cloud-assisted DAS is enabled for the Mist Edge cluster
    coaServers List<MxclusterMistDasCoaServer>
    Dynamic authorization clients allowed to send CoA or Disconnect-Message requests
    enabled Boolean
    Whether cloud-assisted DAS is enabled for the Mist Edge cluster
    coaServers MxclusterMistDasCoaServer[]
    Dynamic authorization clients allowed to send CoA or Disconnect-Message requests
    enabled boolean
    Whether cloud-assisted DAS is enabled for the Mist Edge cluster
    coa_servers Sequence[MxclusterMistDasCoaServer]
    Dynamic authorization clients allowed to send CoA or Disconnect-Message requests
    enabled bool
    Whether cloud-assisted DAS is enabled for the Mist Edge cluster
    coaServers List<Property Map>
    Dynamic authorization clients allowed to send CoA or Disconnect-Message requests
    enabled Boolean
    Whether cloud-assisted DAS is enabled for the Mist Edge cluster

    MxclusterMistDasCoaServer, MxclusterMistDasCoaServerArgs

    DisableEventTimestampCheck bool
    Whether to disable Event-Timestamp Check
    Enabled bool
    Whether this DAS CoA or Disconnect-Message client is enabled
    Host string
    Server host allowed to send CoA or Disconnect-Message requests to Mist Edges
    Port int
    UDP port where Mist Edges accept CoA or Disconnect-Message requests from this host
    RequireMessageAuthenticator bool
    Whether to require Message-Authenticator in requests
    Secret string
    Shared secret used by this DAS CoA or Disconnect-Message client
    DisableEventTimestampCheck bool
    Whether to disable Event-Timestamp Check
    Enabled bool
    Whether this DAS CoA or Disconnect-Message client is enabled
    Host string
    Server host allowed to send CoA or Disconnect-Message requests to Mist Edges
    Port int
    UDP port where Mist Edges accept CoA or Disconnect-Message requests from this host
    RequireMessageAuthenticator bool
    Whether to require Message-Authenticator in requests
    Secret string
    Shared secret used by this DAS CoA or Disconnect-Message client
    disable_event_timestamp_check bool
    Whether to disable Event-Timestamp Check
    enabled bool
    Whether this DAS CoA or Disconnect-Message client is enabled
    host string
    Server host allowed to send CoA or Disconnect-Message requests to Mist Edges
    port number
    UDP port where Mist Edges accept CoA or Disconnect-Message requests from this host
    require_message_authenticator bool
    Whether to require Message-Authenticator in requests
    secret string
    Shared secret used by this DAS CoA or Disconnect-Message client
    disableEventTimestampCheck Boolean
    Whether to disable Event-Timestamp Check
    enabled Boolean
    Whether this DAS CoA or Disconnect-Message client is enabled
    host String
    Server host allowed to send CoA or Disconnect-Message requests to Mist Edges
    port Integer
    UDP port where Mist Edges accept CoA or Disconnect-Message requests from this host
    requireMessageAuthenticator Boolean
    Whether to require Message-Authenticator in requests
    secret String
    Shared secret used by this DAS CoA or Disconnect-Message client
    disableEventTimestampCheck boolean
    Whether to disable Event-Timestamp Check
    enabled boolean
    Whether this DAS CoA or Disconnect-Message client is enabled
    host string
    Server host allowed to send CoA or Disconnect-Message requests to Mist Edges
    port number
    UDP port where Mist Edges accept CoA or Disconnect-Message requests from this host
    requireMessageAuthenticator boolean
    Whether to require Message-Authenticator in requests
    secret string
    Shared secret used by this DAS CoA or Disconnect-Message client
    disable_event_timestamp_check bool
    Whether to disable Event-Timestamp Check
    enabled bool
    Whether this DAS CoA or Disconnect-Message client is enabled
    host str
    Server host allowed to send CoA or Disconnect-Message requests to Mist Edges
    port int
    UDP port where Mist Edges accept CoA or Disconnect-Message requests from this host
    require_message_authenticator bool
    Whether to require Message-Authenticator in requests
    secret str
    Shared secret used by this DAS CoA or Disconnect-Message client
    disableEventTimestampCheck Boolean
    Whether to disable Event-Timestamp Check
    enabled Boolean
    Whether this DAS CoA or Disconnect-Message client is enabled
    host String
    Server host allowed to send CoA or Disconnect-Message requests to Mist Edges
    port Number
    UDP port where Mist Edges accept CoA or Disconnect-Message requests from this host
    requireMessageAuthenticator Boolean
    Whether to require Message-Authenticator in requests
    secret String
    Shared secret used by this DAS CoA or Disconnect-Message client

    MxclusterMistNac, MxclusterMistNacArgs

    AcctServerPort int
    RADIUS accounting port used by Mist NAC on the cluster
    AuthServerPort int
    RADIUS authentication port used by Mist NAC on the cluster
    ClientIps Dictionary<string, Pulumi.JuniperMist.Org.Inputs.MxclusterMistNacClientIps>
    Property key is the RADIUS Client IP/Subnet.
    Enabled bool
    Whether Mist NAC is enabled on the cluster
    Secret string
    Shared RADIUS secret used by Mist NAC clients
    AcctServerPort int
    RADIUS accounting port used by Mist NAC on the cluster
    AuthServerPort int
    RADIUS authentication port used by Mist NAC on the cluster
    ClientIps map[string]MxclusterMistNacClientIps
    Property key is the RADIUS Client IP/Subnet.
    Enabled bool
    Whether Mist NAC is enabled on the cluster
    Secret string
    Shared RADIUS secret used by Mist NAC clients
    acct_server_port number
    RADIUS accounting port used by Mist NAC on the cluster
    auth_server_port number
    RADIUS authentication port used by Mist NAC on the cluster
    client_ips map(object)
    Property key is the RADIUS Client IP/Subnet.
    enabled bool
    Whether Mist NAC is enabled on the cluster
    secret string
    Shared RADIUS secret used by Mist NAC clients
    acctServerPort Integer
    RADIUS accounting port used by Mist NAC on the cluster
    authServerPort Integer
    RADIUS authentication port used by Mist NAC on the cluster
    clientIps Map<String,MxclusterMistNacClientIps>
    Property key is the RADIUS Client IP/Subnet.
    enabled Boolean
    Whether Mist NAC is enabled on the cluster
    secret String
    Shared RADIUS secret used by Mist NAC clients
    acctServerPort number
    RADIUS accounting port used by Mist NAC on the cluster
    authServerPort number
    RADIUS authentication port used by Mist NAC on the cluster
    clientIps {[key: string]: MxclusterMistNacClientIps}
    Property key is the RADIUS Client IP/Subnet.
    enabled boolean
    Whether Mist NAC is enabled on the cluster
    secret string
    Shared RADIUS secret used by Mist NAC clients
    acct_server_port int
    RADIUS accounting port used by Mist NAC on the cluster
    auth_server_port int
    RADIUS authentication port used by Mist NAC on the cluster
    client_ips Mapping[str, MxclusterMistNacClientIps]
    Property key is the RADIUS Client IP/Subnet.
    enabled bool
    Whether Mist NAC is enabled on the cluster
    secret str
    Shared RADIUS secret used by Mist NAC clients
    acctServerPort Number
    RADIUS accounting port used by Mist NAC on the cluster
    authServerPort Number
    RADIUS authentication port used by Mist NAC on the cluster
    clientIps Map<Property Map>
    Property key is the RADIUS Client IP/Subnet.
    enabled Boolean
    Whether Mist NAC is enabled on the cluster
    secret String
    Shared RADIUS secret used by Mist NAC clients

    MxclusterMistNacedge, MxclusterMistNacedgeArgs

    AuthTtl int
    Cache TTL for last auth result in seconds
    CachingSiteIds List<string>
    List of site UUIDs whose auth requests should be cached by NAC Edges in this cluster
    DefaultDot1xVlan string
    Default VLAN for all dot1x devices, if different from default_vlan
    DefaultVlan string
    Default VLAN to assign for devices not in the cache
    Enabled bool
    Whether NAC Edge survivability is enabled for this cluster
    NacEdgeHosts List<string>
    NAC Edge hostnames used by APs for survivability authentication
    AuthTtl int
    Cache TTL for last auth result in seconds
    CachingSiteIds []string
    List of site UUIDs whose auth requests should be cached by NAC Edges in this cluster
    DefaultDot1xVlan string
    Default VLAN for all dot1x devices, if different from default_vlan
    DefaultVlan string
    Default VLAN to assign for devices not in the cache
    Enabled bool
    Whether NAC Edge survivability is enabled for this cluster
    NacEdgeHosts []string
    NAC Edge hostnames used by APs for survivability authentication
    auth_ttl number
    Cache TTL for last auth result in seconds
    caching_site_ids list(string)
    List of site UUIDs whose auth requests should be cached by NAC Edges in this cluster
    default_dot1x_vlan string
    Default VLAN for all dot1x devices, if different from default_vlan
    default_vlan string
    Default VLAN to assign for devices not in the cache
    enabled bool
    Whether NAC Edge survivability is enabled for this cluster
    nac_edge_hosts list(string)
    NAC Edge hostnames used by APs for survivability authentication
    authTtl Integer
    Cache TTL for last auth result in seconds
    cachingSiteIds List<String>
    List of site UUIDs whose auth requests should be cached by NAC Edges in this cluster
    defaultDot1xVlan String
    Default VLAN for all dot1x devices, if different from default_vlan
    defaultVlan String
    Default VLAN to assign for devices not in the cache
    enabled Boolean
    Whether NAC Edge survivability is enabled for this cluster
    nacEdgeHosts List<String>
    NAC Edge hostnames used by APs for survivability authentication
    authTtl number
    Cache TTL for last auth result in seconds
    cachingSiteIds string[]
    List of site UUIDs whose auth requests should be cached by NAC Edges in this cluster
    defaultDot1xVlan string
    Default VLAN for all dot1x devices, if different from default_vlan
    defaultVlan string
    Default VLAN to assign for devices not in the cache
    enabled boolean
    Whether NAC Edge survivability is enabled for this cluster
    nacEdgeHosts string[]
    NAC Edge hostnames used by APs for survivability authentication
    auth_ttl int
    Cache TTL for last auth result in seconds
    caching_site_ids Sequence[str]
    List of site UUIDs whose auth requests should be cached by NAC Edges in this cluster
    default_dot1x_vlan str
    Default VLAN for all dot1x devices, if different from default_vlan
    default_vlan str
    Default VLAN to assign for devices not in the cache
    enabled bool
    Whether NAC Edge survivability is enabled for this cluster
    nac_edge_hosts Sequence[str]
    NAC Edge hostnames used by APs for survivability authentication
    authTtl Number
    Cache TTL for last auth result in seconds
    cachingSiteIds List<String>
    List of site UUIDs whose auth requests should be cached by NAC Edges in this cluster
    defaultDot1xVlan String
    Default VLAN for all dot1x devices, if different from default_vlan
    defaultVlan String
    Default VLAN to assign for devices not in the cache
    enabled Boolean
    Whether NAC Edge survivability is enabled for this cluster
    nacEdgeHosts List<String>
    NAC Edge hostnames used by APs for survivability authentication

    MxclusterMxedgeMgmt, MxclusterMxedgeMgmtArgs

    ConfigAutoRevert bool
    Whether the Mist Edge automatically reverts configuration changes if connectivity is lost
    FipsEnabled bool
    Whether FIPS mode is enabled on the Mist Edge
    MistPassword string
    Password for the Mist service account on the Mist Edge
    OobIpType string
    IPv4 address assignment mode for out-of-band management
    OobIpType6 string
    IPv6 address assignment mode for out-of-band management
    RootPassword string
    Root account password for the Mist Edge
    ConfigAutoRevert bool
    Whether the Mist Edge automatically reverts configuration changes if connectivity is lost
    FipsEnabled bool
    Whether FIPS mode is enabled on the Mist Edge
    MistPassword string
    Password for the Mist service account on the Mist Edge
    OobIpType string
    IPv4 address assignment mode for out-of-band management
    OobIpType6 string
    IPv6 address assignment mode for out-of-band management
    RootPassword string
    Root account password for the Mist Edge
    config_auto_revert bool
    Whether the Mist Edge automatically reverts configuration changes if connectivity is lost
    fips_enabled bool
    Whether FIPS mode is enabled on the Mist Edge
    mist_password string
    Password for the Mist service account on the Mist Edge
    oob_ip_type string
    IPv4 address assignment mode for out-of-band management
    oob_ip_type6 string
    IPv6 address assignment mode for out-of-band management
    root_password string
    Root account password for the Mist Edge
    configAutoRevert Boolean
    Whether the Mist Edge automatically reverts configuration changes if connectivity is lost
    fipsEnabled Boolean
    Whether FIPS mode is enabled on the Mist Edge
    mistPassword String
    Password for the Mist service account on the Mist Edge
    oobIpType String
    IPv4 address assignment mode for out-of-band management
    oobIpType6 String
    IPv6 address assignment mode for out-of-band management
    rootPassword String
    Root account password for the Mist Edge
    configAutoRevert boolean
    Whether the Mist Edge automatically reverts configuration changes if connectivity is lost
    fipsEnabled boolean
    Whether FIPS mode is enabled on the Mist Edge
    mistPassword string
    Password for the Mist service account on the Mist Edge
    oobIpType string
    IPv4 address assignment mode for out-of-band management
    oobIpType6 string
    IPv6 address assignment mode for out-of-band management
    rootPassword string
    Root account password for the Mist Edge
    config_auto_revert bool
    Whether the Mist Edge automatically reverts configuration changes if connectivity is lost
    fips_enabled bool
    Whether FIPS mode is enabled on the Mist Edge
    mist_password str
    Password for the Mist service account on the Mist Edge
    oob_ip_type str
    IPv4 address assignment mode for out-of-band management
    oob_ip_type6 str
    IPv6 address assignment mode for out-of-band management
    root_password str
    Root account password for the Mist Edge
    configAutoRevert Boolean
    Whether the Mist Edge automatically reverts configuration changes if connectivity is lost
    fipsEnabled Boolean
    Whether FIPS mode is enabled on the Mist Edge
    mistPassword String
    Password for the Mist service account on the Mist Edge
    oobIpType String
    IPv4 address assignment mode for out-of-band management
    oobIpType6 String
    IPv6 address assignment mode for out-of-band management
    rootPassword String
    Root account password for the Mist Edge

    MxclusterProxy, MxclusterProxyArgs

    Disabled bool
    Whether this proxy configuration is disabled
    Url string
    Proxy URL used to reach Mist
    Disabled bool
    Whether this proxy configuration is disabled
    Url string
    Proxy URL used to reach Mist
    disabled bool
    Whether this proxy configuration is disabled
    url string
    Proxy URL used to reach Mist
    disabled Boolean
    Whether this proxy configuration is disabled
    url String
    Proxy URL used to reach Mist
    disabled boolean
    Whether this proxy configuration is disabled
    url string
    Proxy URL used to reach Mist
    disabled bool
    Whether this proxy configuration is disabled
    url str
    Proxy URL used to reach Mist
    disabled Boolean
    Whether this proxy configuration is disabled
    url String
    Proxy URL used to reach Mist

    MxclusterRadsec, MxclusterRadsecArgs

    AcctServers List<Pulumi.JuniperMist.Org.Inputs.MxclusterRadsecAcctServer>
    RADIUS accounting servers used by the RadSec proxy
    AuthServers List<Pulumi.JuniperMist.Org.Inputs.MxclusterRadsecAuthServer>
    RADIUS authentication servers used by the RadSec proxy
    Enabled bool
    Whether to enable service on Mist Edge i.e. RADIUS proxy over TLS
    MatchSsid bool
    Whether to match ssid in request message to select from a subset of RADIUS servers
    NasIpSource string
    Source used to populate NAS-IP-Address and NAS-IPv6-Address attributes
    ProxyHosts List<string>
    AP-reachable hostnames or IP addresses advertised as RadSec TLS servers
    ServerSelection string
    RADIUS server selection strategy for RadSec failover
    SrcIpSource string
    Connection source interface or address used when reaching RADIUS servers
    AcctServers []MxclusterRadsecAcctServer
    RADIUS accounting servers used by the RadSec proxy
    AuthServers []MxclusterRadsecAuthServer
    RADIUS authentication servers used by the RadSec proxy
    Enabled bool
    Whether to enable service on Mist Edge i.e. RADIUS proxy over TLS
    MatchSsid bool
    Whether to match ssid in request message to select from a subset of RADIUS servers
    NasIpSource string
    Source used to populate NAS-IP-Address and NAS-IPv6-Address attributes
    ProxyHosts []string
    AP-reachable hostnames or IP addresses advertised as RadSec TLS servers
    ServerSelection string
    RADIUS server selection strategy for RadSec failover
    SrcIpSource string
    Connection source interface or address used when reaching RADIUS servers
    acct_servers list(object)
    RADIUS accounting servers used by the RadSec proxy
    auth_servers list(object)
    RADIUS authentication servers used by the RadSec proxy
    enabled bool
    Whether to enable service on Mist Edge i.e. RADIUS proxy over TLS
    match_ssid bool
    Whether to match ssid in request message to select from a subset of RADIUS servers
    nas_ip_source string
    Source used to populate NAS-IP-Address and NAS-IPv6-Address attributes
    proxy_hosts list(string)
    AP-reachable hostnames or IP addresses advertised as RadSec TLS servers
    server_selection string
    RADIUS server selection strategy for RadSec failover
    src_ip_source string
    Connection source interface or address used when reaching RADIUS servers
    acctServers List<MxclusterRadsecAcctServer>
    RADIUS accounting servers used by the RadSec proxy
    authServers List<MxclusterRadsecAuthServer>
    RADIUS authentication servers used by the RadSec proxy
    enabled Boolean
    Whether to enable service on Mist Edge i.e. RADIUS proxy over TLS
    matchSsid Boolean
    Whether to match ssid in request message to select from a subset of RADIUS servers
    nasIpSource String
    Source used to populate NAS-IP-Address and NAS-IPv6-Address attributes
    proxyHosts List<String>
    AP-reachable hostnames or IP addresses advertised as RadSec TLS servers
    serverSelection String
    RADIUS server selection strategy for RadSec failover
    srcIpSource String
    Connection source interface or address used when reaching RADIUS servers
    acctServers MxclusterRadsecAcctServer[]
    RADIUS accounting servers used by the RadSec proxy
    authServers MxclusterRadsecAuthServer[]
    RADIUS authentication servers used by the RadSec proxy
    enabled boolean
    Whether to enable service on Mist Edge i.e. RADIUS proxy over TLS
    matchSsid boolean
    Whether to match ssid in request message to select from a subset of RADIUS servers
    nasIpSource string
    Source used to populate NAS-IP-Address and NAS-IPv6-Address attributes
    proxyHosts string[]
    AP-reachable hostnames or IP addresses advertised as RadSec TLS servers
    serverSelection string
    RADIUS server selection strategy for RadSec failover
    srcIpSource string
    Connection source interface or address used when reaching RADIUS servers
    acct_servers Sequence[MxclusterRadsecAcctServer]
    RADIUS accounting servers used by the RadSec proxy
    auth_servers Sequence[MxclusterRadsecAuthServer]
    RADIUS authentication servers used by the RadSec proxy
    enabled bool
    Whether to enable service on Mist Edge i.e. RADIUS proxy over TLS
    match_ssid bool
    Whether to match ssid in request message to select from a subset of RADIUS servers
    nas_ip_source str
    Source used to populate NAS-IP-Address and NAS-IPv6-Address attributes
    proxy_hosts Sequence[str]
    AP-reachable hostnames or IP addresses advertised as RadSec TLS servers
    server_selection str
    RADIUS server selection strategy for RadSec failover
    src_ip_source str
    Connection source interface or address used when reaching RADIUS servers
    acctServers List<Property Map>
    RADIUS accounting servers used by the RadSec proxy
    authServers List<Property Map>
    RADIUS authentication servers used by the RadSec proxy
    enabled Boolean
    Whether to enable service on Mist Edge i.e. RADIUS proxy over TLS
    matchSsid Boolean
    Whether to match ssid in request message to select from a subset of RADIUS servers
    nasIpSource String
    Source used to populate NAS-IP-Address and NAS-IPv6-Address attributes
    proxyHosts List<String>
    AP-reachable hostnames or IP addresses advertised as RadSec TLS servers
    serverSelection String
    RADIUS server selection strategy for RadSec failover
    srcIpSource String
    Connection source interface or address used when reaching RADIUS servers

    MxclusterRadsecAcctServer, MxclusterRadsecAcctServerArgs

    Host string
    IP / hostname of RADIUS server
    Port int
    Acct port of RADIUS server
    Secret string
    Shared secret used with this RADIUS accounting server
    Ssids List<string>
    WLAN SSID filters that use this accounting server when matching is enabled
    Host string
    IP / hostname of RADIUS server
    Port int
    Acct port of RADIUS server
    Secret string
    Shared secret used with this RADIUS accounting server
    Ssids []string
    WLAN SSID filters that use this accounting server when matching is enabled
    host string
    IP / hostname of RADIUS server
    port number
    Acct port of RADIUS server
    secret string
    Shared secret used with this RADIUS accounting server
    ssids list(string)
    WLAN SSID filters that use this accounting server when matching is enabled
    host String
    IP / hostname of RADIUS server
    port Integer
    Acct port of RADIUS server
    secret String
    Shared secret used with this RADIUS accounting server
    ssids List<String>
    WLAN SSID filters that use this accounting server when matching is enabled
    host string
    IP / hostname of RADIUS server
    port number
    Acct port of RADIUS server
    secret string
    Shared secret used with this RADIUS accounting server
    ssids string[]
    WLAN SSID filters that use this accounting server when matching is enabled
    host str
    IP / hostname of RADIUS server
    port int
    Acct port of RADIUS server
    secret str
    Shared secret used with this RADIUS accounting server
    ssids Sequence[str]
    WLAN SSID filters that use this accounting server when matching is enabled
    host String
    IP / hostname of RADIUS server
    port Number
    Acct port of RADIUS server
    secret String
    Shared secret used with this RADIUS accounting server
    ssids List<String>
    WLAN SSID filters that use this accounting server when matching is enabled

    MxclusterRadsecAuthServer, MxclusterRadsecAuthServerArgs

    Host string
    IP / hostname of RADIUS server
    InbandStatusCheck bool
    Whether to enable inband status check
    InbandStatusInterval int
    Inband status interval, in seconds
    KeywrapEnabled bool
    If used for Mist APs, enable keywrap algorithm. Default is false
    KeywrapFormat string
    Encoding format for Mist AP RADIUS keywrap keys
    KeywrapKek string
    If used for Mist APs, encryption key
    KeywrapMack string
    If used for Mist APs, Message Authentication Code Key
    Port int
    Auth port of RADIUS server
    Retry int
    Number of authentication request retries before failing over
    Secret string
    Shared secret used with this RADIUS authentication server
    Ssids List<string>
    WLAN SSID filters that use this authentication server when matching is enabled
    Timeout int
    Authentication request timeout, in seconds
    Host string
    IP / hostname of RADIUS server
    InbandStatusCheck bool
    Whether to enable inband status check
    InbandStatusInterval int
    Inband status interval, in seconds
    KeywrapEnabled bool
    If used for Mist APs, enable keywrap algorithm. Default is false
    KeywrapFormat string
    Encoding format for Mist AP RADIUS keywrap keys
    KeywrapKek string
    If used for Mist APs, encryption key
    KeywrapMack string
    If used for Mist APs, Message Authentication Code Key
    Port int
    Auth port of RADIUS server
    Retry int
    Number of authentication request retries before failing over
    Secret string
    Shared secret used with this RADIUS authentication server
    Ssids []string
    WLAN SSID filters that use this authentication server when matching is enabled
    Timeout int
    Authentication request timeout, in seconds
    host string
    IP / hostname of RADIUS server
    inband_status_check bool
    Whether to enable inband status check
    inband_status_interval number
    Inband status interval, in seconds
    keywrap_enabled bool
    If used for Mist APs, enable keywrap algorithm. Default is false
    keywrap_format string
    Encoding format for Mist AP RADIUS keywrap keys
    keywrap_kek string
    If used for Mist APs, encryption key
    keywrap_mack string
    If used for Mist APs, Message Authentication Code Key
    port number
    Auth port of RADIUS server
    retry number
    Number of authentication request retries before failing over
    secret string
    Shared secret used with this RADIUS authentication server
    ssids list(string)
    WLAN SSID filters that use this authentication server when matching is enabled
    timeout number
    Authentication request timeout, in seconds
    host String
    IP / hostname of RADIUS server
    inbandStatusCheck Boolean
    Whether to enable inband status check
    inbandStatusInterval Integer
    Inband status interval, in seconds
    keywrapEnabled Boolean
    If used for Mist APs, enable keywrap algorithm. Default is false
    keywrapFormat String
    Encoding format for Mist AP RADIUS keywrap keys
    keywrapKek String
    If used for Mist APs, encryption key
    keywrapMack String
    If used for Mist APs, Message Authentication Code Key
    port Integer
    Auth port of RADIUS server
    retry Integer
    Number of authentication request retries before failing over
    secret String
    Shared secret used with this RADIUS authentication server
    ssids List<String>
    WLAN SSID filters that use this authentication server when matching is enabled
    timeout Integer
    Authentication request timeout, in seconds
    host string
    IP / hostname of RADIUS server
    inbandStatusCheck boolean
    Whether to enable inband status check
    inbandStatusInterval number
    Inband status interval, in seconds
    keywrapEnabled boolean
    If used for Mist APs, enable keywrap algorithm. Default is false
    keywrapFormat string
    Encoding format for Mist AP RADIUS keywrap keys
    keywrapKek string
    If used for Mist APs, encryption key
    keywrapMack string
    If used for Mist APs, Message Authentication Code Key
    port number
    Auth port of RADIUS server
    retry number
    Number of authentication request retries before failing over
    secret string
    Shared secret used with this RADIUS authentication server
    ssids string[]
    WLAN SSID filters that use this authentication server when matching is enabled
    timeout number
    Authentication request timeout, in seconds
    host str
    IP / hostname of RADIUS server
    inband_status_check bool
    Whether to enable inband status check
    inband_status_interval int
    Inband status interval, in seconds
    keywrap_enabled bool
    If used for Mist APs, enable keywrap algorithm. Default is false
    keywrap_format str
    Encoding format for Mist AP RADIUS keywrap keys
    keywrap_kek str
    If used for Mist APs, encryption key
    keywrap_mack str
    If used for Mist APs, Message Authentication Code Key
    port int
    Auth port of RADIUS server
    retry int
    Number of authentication request retries before failing over
    secret str
    Shared secret used with this RADIUS authentication server
    ssids Sequence[str]
    WLAN SSID filters that use this authentication server when matching is enabled
    timeout int
    Authentication request timeout, in seconds
    host String
    IP / hostname of RADIUS server
    inbandStatusCheck Boolean
    Whether to enable inband status check
    inbandStatusInterval Number
    Inband status interval, in seconds
    keywrapEnabled Boolean
    If used for Mist APs, enable keywrap algorithm. Default is false
    keywrapFormat String
    Encoding format for Mist AP RADIUS keywrap keys
    keywrapKek String
    If used for Mist APs, encryption key
    keywrapMack String
    If used for Mist APs, Message Authentication Code Key
    port Number
    Auth port of RADIUS server
    retry Number
    Number of authentication request retries before failing over
    secret String
    Shared secret used with this RADIUS authentication server
    ssids List<String>
    WLAN SSID filters that use this authentication server when matching is enabled
    timeout Number
    Authentication request timeout, in seconds

    MxclusterRadsecTls, MxclusterRadsecTlsArgs

    Keypair string
    Name or identifier of the TLS keypair used by RadSec
    Keypair string
    Name or identifier of the TLS keypair used by RadSec
    keypair string
    Name or identifier of the TLS keypair used by RadSec
    keypair String
    Name or identifier of the TLS keypair used by RadSec
    keypair string
    Name or identifier of the TLS keypair used by RadSec
    keypair str
    Name or identifier of the TLS keypair used by RadSec
    keypair String
    Name or identifier of the TLS keypair used by RadSec

    MxclusterTuntermDhcpdConfig, MxclusterTuntermDhcpdConfigArgs

    Enabled bool
    Whether DHCP relay is enabled for this tunneled VLAN
    Servers List<string>
    DHCP server IP addresses used as relay targets for this VLAN
    Type string
    DHCP forwarding mode for this tunneled VLAN
    Enabled bool
    Whether DHCP relay is enabled for this tunneled VLAN
    Servers []string
    DHCP server IP addresses used as relay targets for this VLAN
    Type string
    DHCP forwarding mode for this tunneled VLAN
    enabled bool
    Whether DHCP relay is enabled for this tunneled VLAN
    servers list(string)
    DHCP server IP addresses used as relay targets for this VLAN
    type string
    DHCP forwarding mode for this tunneled VLAN
    enabled Boolean
    Whether DHCP relay is enabled for this tunneled VLAN
    servers List<String>
    DHCP server IP addresses used as relay targets for this VLAN
    type String
    DHCP forwarding mode for this tunneled VLAN
    enabled boolean
    Whether DHCP relay is enabled for this tunneled VLAN
    servers string[]
    DHCP server IP addresses used as relay targets for this VLAN
    type string
    DHCP forwarding mode for this tunneled VLAN
    enabled bool
    Whether DHCP relay is enabled for this tunneled VLAN
    servers Sequence[str]
    DHCP server IP addresses used as relay targets for this VLAN
    type str
    DHCP forwarding mode for this tunneled VLAN
    enabled Boolean
    Whether DHCP relay is enabled for this tunneled VLAN
    servers List<String>
    DHCP server IP addresses used as relay targets for this VLAN
    type String
    DHCP forwarding mode for this tunneled VLAN

    MxclusterTuntermExtraRoutes, MxclusterTuntermExtraRoutesArgs

    Via string
    Next-hop IP address for this extra route
    Via string
    Next-hop IP address for this extra route
    via string
    Next-hop IP address for this extra route
    via String
    Next-hop IP address for this extra route
    via string
    Next-hop IP address for this extra route
    via str
    Next-hop IP address for this extra route
    via String
    Next-hop IP address for this extra route

    MxclusterTuntermMonitoring, MxclusterTuntermMonitoringArgs

    Host string
    Port int
    Protocol string
    SrcVlanId int
    Timeout int
    Authentication request timeout, in seconds
    Host string
    Port int
    Protocol string
    SrcVlanId int
    Timeout int
    Authentication request timeout, in seconds
    host string
    port number
    protocol string
    src_vlan_id number
    timeout number
    Authentication request timeout, in seconds
    host String
    port Integer
    protocol String
    srcVlanId Integer
    timeout Integer
    Authentication request timeout, in seconds
    host string
    port number
    protocol string
    srcVlanId number
    timeout number
    Authentication request timeout, in seconds
    host str
    port int
    protocol str
    src_vlan_id int
    timeout int
    Authentication request timeout, in seconds
    host String
    port Number
    protocol String
    srcVlanId Number
    timeout Number
    Authentication request timeout, in seconds

    Import

    Using pulumi import, import junipermist.org.Mxcluster with: Mist Org MxCluster can be imported by specifying the orgId and the mxclusterId

    $ pulumi import junipermist:org/mxcluster:Mxcluster cluster_one 17f90707-aebe-4274-af42-f42952a665a3.387804a7-3474-85ce-15a2-f9a9684c9c90
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    junipermist pulumi/pulumi-junipermist
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the mist Terraform Provider.
    junipermist logo
    Viewing docs for Juniper Mist v0.11.2
    published on Saturday, Jul 11, 2026 by Pulumi

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial