Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Juniper Mist Provider
  4. API Docs
  5. org
  6. Nacrule
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-junipermist

junipermist.org.Nacrule

junipermist logo
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-junipermist

    This resource manages the NAC Rules (Auth Policies).

    A NAC Rule defines a list of criteria (NAC Tag) the network client must match to execute the Rule, an action (Allow/Deny)and a list of RADIUS Attributes (NAC Tags) to return

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as junipermist from "@pulumi/juniper-mist";

const nacruleOne = new junipermist.org.Nacrule("nacrule_one", {
    name: "rule_one",
    action: "allow",
    orgId: terraformTest.id,
    matching: {
        portTypes: ["wired"],
        authType: "mab",
        nactags: ["c055c60b-351a-4311-8ee5-9b7be5e5f902"],
    },
    applyTags: [
        "61c11327-5e1b-40ed-bbbf-5e95642c4f59",
        "3f292454-ac5f-4a36-9aff-d0518d90b47a",
    ],
    enabled: true,
    order: 9,
});

    import pulumi
import pulumi_juniper_mist as junipermist

nacrule_one = junipermist.org.Nacrule("nacrule_one",
    name="rule_one",
    action="allow",
    org_id=terraform_test["id"],
    matching={
        "port_types": ["wired"],
        "auth_type": "mab",
        "nactags": ["c055c60b-351a-4311-8ee5-9b7be5e5f902"],
    },
    apply_tags=[
        "61c11327-5e1b-40ed-bbbf-5e95642c4f59",
        "3f292454-ac5f-4a36-9aff-d0518d90b47a",
    ],
    enabled=True,
    order=9)

    package main

import (
	"github.com/pulumi/pulumi-junipermist/sdk/go/junipermist/org"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := org.NewNacrule(ctx, "nacrule_one", &org.NacruleArgs{
			Name:   pulumi.String("rule_one"),
			Action: pulumi.String("allow"),
			OrgId:  pulumi.Any(terraformTest.Id),
			Matching: &org.NacruleMatchingArgs{
				PortTypes: pulumi.StringArray{
					pulumi.String("wired"),
				},
				AuthType: pulumi.String("mab"),
				Nactags: pulumi.StringArray{
					pulumi.String("c055c60b-351a-4311-8ee5-9b7be5e5f902"),
				},
			},
			ApplyTags: pulumi.StringArray{
				pulumi.String("61c11327-5e1b-40ed-bbbf-5e95642c4f59"),
				pulumi.String("3f292454-ac5f-4a36-9aff-d0518d90b47a"),
			},
			Enabled: pulumi.Bool(true),
			Order:   pulumi.Int(9),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using JuniperMist = Pulumi.JuniperMist;

return await Deployment.RunAsync(() => 
{
    var nacruleOne = new JuniperMist.Org.Nacrule("nacrule_one", new()
    {
        Name = "rule_one",
        Action = "allow",
        OrgId = terraformTest.Id,
        Matching = new JuniperMist.Org.Inputs.NacruleMatchingArgs
        {
            PortTypes = new[]
            {
                "wired",
            },
            AuthType = "mab",
            Nactags = new[]
            {
                "c055c60b-351a-4311-8ee5-9b7be5e5f902",
            },
        },
        ApplyTags = new[]
        {
            "61c11327-5e1b-40ed-bbbf-5e95642c4f59",
            "3f292454-ac5f-4a36-9aff-d0518d90b47a",
        },
        Enabled = true,
        Order = 9,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.org.Nacrule;
import com.pulumi.junipermist.org.NacruleArgs;
import com.pulumi.junipermist.org.inputs.NacruleMatchingArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var nacruleOne = new Nacrule("nacruleOne", NacruleArgs.builder()
            .name("rule_one")
            .action("allow")
            .orgId(terraformTest.id())
            .matching(NacruleMatchingArgs.builder()
                .portTypes("wired")
                .authType("mab")
                .nactags("c055c60b-351a-4311-8ee5-9b7be5e5f902")
                .build())
            .applyTags(            
                "61c11327-5e1b-40ed-bbbf-5e95642c4f59",
                "3f292454-ac5f-4a36-9aff-d0518d90b47a")
            .enabled(true)
            .order(9)
            .build());

    }
}

    resources:
  nacruleOne:
    type: junipermist:org:Nacrule
    name: nacrule_one
    properties:
      name: rule_one
      action: allow
      orgId: ${terraformTest.id}
      matching:
        portTypes:
          - wired
        authType: mab
        nactags:
          - c055c60b-351a-4311-8ee5-9b7be5e5f902
      applyTags:
        - 61c11327-5e1b-40ed-bbbf-5e95642c4f59
        - 3f292454-ac5f-4a36-9aff-d0518d90b47a
      enabled: true
      order: 9

    pulumi {
  required_providers {
    junipermist = {
      source = "pulumi/junipermist"
    }
  }
}

resource "junipermist_org_nacrule" "nacrule_one" {
  name   = "rule_one"
  action = "allow"
  org_id = terraformTest.id
  matching = {
    port_types = ["wired"]
    auth_type  = "mab"
    nactags    = ["c055c60b-351a-4311-8ee5-9b7be5e5f902"]
  }
  apply_tags = ["61c11327-5e1b-40ed-bbbf-5e95642c4f59", "3f292454-ac5f-4a36-9aff-d0518d90b47a"]
  enabled    = true
  order      = 9
}

    Create Nacrule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Nacrule(name: string, args: NacruleArgs, opts?: CustomResourceOptions);
    @overload
def Nacrule(resource_name: str,
            args: NacruleArgs,
            opts: Optional[ResourceOptions] = None)

@overload
def Nacrule(resource_name: str,
            opts: Optional[ResourceOptions] = None,
            action: Optional[str] = None,
            order: Optional[int] = None,
            org_id: Optional[str] = None,
            apply_tags: Optional[Sequence[str]] = None,
            dry_run: Optional[bool] = None,
            enabled: Optional[bool] = None,
            guest_auth_state: Optional[str] = None,
            matching: Optional[NacruleMatchingArgs] = None,
            name: Optional[str] = None,
            not_matching: Optional[NacruleNotMatchingArgs] = None)
    func NewNacrule(ctx *Context, name string, args NacruleArgs, opts ...ResourceOption) (*Nacrule, error)
    public Nacrule(string name, NacruleArgs args, CustomResourceOptions? opts = null)
    public Nacrule(String name, NacruleArgs args)
public Nacrule(String name, NacruleArgs args, CustomResourceOptions options)

    type: junipermist:org:Nacrule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "junipermist_org_nacrule" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args NacruleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args NacruleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args NacruleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args NacruleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args NacruleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var nacruleResource = new JuniperMist.Org.Nacrule("nacruleResource", new()
{
    Action = "string",
    Order = 0,
    OrgId = "string",
    ApplyTags = new[]
    {
        "string",
    },
    DryRun = false,
    Enabled = false,
    GuestAuthState = "string",
    Matching = new JuniperMist.Org.Inputs.NacruleMatchingArgs
    {
        AuthType = "string",
        Families = new[]
        {
            "string",
        },
        Mfgs = new[]
        {
            "string",
        },
        Models = new[]
        {
            "string",
        },
        Nactags = new[]
        {
            "string",
        },
        OsTypes = new[]
        {
            "string",
        },
        PortTypes = new[]
        {
            "string",
        },
        SiteIds = new[]
        {
            "string",
        },
        SitegroupIds = new[]
        {
            "string",
        },
        Vendors = new[]
        {
            "string",
        },
    },
    Name = "string",
    NotMatching = new JuniperMist.Org.Inputs.NacruleNotMatchingArgs
    {
        AuthType = "string",
        Families = new[]
        {
            "string",
        },
        Mfgs = new[]
        {
            "string",
        },
        Models = new[]
        {
            "string",
        },
        Nactags = new[]
        {
            "string",
        },
        OsTypes = new[]
        {
            "string",
        },
        PortTypes = new[]
        {
            "string",
        },
        SiteIds = new[]
        {
            "string",
        },
        SitegroupIds = new[]
        {
            "string",
        },
        Vendors = new[]
        {
            "string",
        },
    },
});

    example, err := org.NewNacrule(ctx, "nacruleResource", &org.NacruleArgs{
	Action: pulumi.String("string"),
	Order:  pulumi.Int(0),
	OrgId:  pulumi.String("string"),
	ApplyTags: pulumi.StringArray{
		pulumi.String("string"),
	},
	DryRun:         pulumi.Bool(false),
	Enabled:        pulumi.Bool(false),
	GuestAuthState: pulumi.String("string"),
	Matching: &org.NacruleMatchingArgs{
		AuthType: pulumi.String("string"),
		Families: pulumi.StringArray{
			pulumi.String("string"),
		},
		Mfgs: pulumi.StringArray{
			pulumi.String("string"),
		},
		Models: pulumi.StringArray{
			pulumi.String("string"),
		},
		Nactags: pulumi.StringArray{
			pulumi.String("string"),
		},
		OsTypes: pulumi.StringArray{
			pulumi.String("string"),
		},
		PortTypes: pulumi.StringArray{
			pulumi.String("string"),
		},
		SiteIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		SitegroupIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		Vendors: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	Name: pulumi.String("string"),
	NotMatching: &org.NacruleNotMatchingArgs{
		AuthType: pulumi.String("string"),
		Families: pulumi.StringArray{
			pulumi.String("string"),
		},
		Mfgs: pulumi.StringArray{
			pulumi.String("string"),
		},
		Models: pulumi.StringArray{
			pulumi.String("string"),
		},
		Nactags: pulumi.StringArray{
			pulumi.String("string"),
		},
		OsTypes: pulumi.StringArray{
			pulumi.String("string"),
		},
		PortTypes: pulumi.StringArray{
			pulumi.String("string"),
		},
		SiteIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		SitegroupIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		Vendors: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
})

    resource "junipermist_org_nacrule" "nacruleResource" {
  lifecycle {
    create_before_destroy = true
  }
  action           = "string"
  order            = 0
  org_id           = "string"
  apply_tags       = ["string"]
  dry_run          = false
  enabled          = false
  guest_auth_state = "string"
  matching = {
    auth_type     = "string"
    families      = ["string"]
    mfgs          = ["string"]
    models        = ["string"]
    nactags       = ["string"]
    os_types      = ["string"]
    port_types    = ["string"]
    site_ids      = ["string"]
    sitegroup_ids = ["string"]
    vendors       = ["string"]
  }
  name = "string"
  not_matching = {
    auth_type     = "string"
    families      = ["string"]
    mfgs          = ["string"]
    models        = ["string"]
    nactags       = ["string"]
    os_types      = ["string"]
    port_types    = ["string"]
    site_ids      = ["string"]
    sitegroup_ids = ["string"]
    vendors       = ["string"]
  }
}

    var nacruleResource = new Nacrule("nacruleResource", NacruleArgs.builder()
    .action("string")
    .order(0)
    .orgId("string")
    .applyTags("string")
    .dryRun(false)
    .enabled(false)
    .guestAuthState("string")
    .matching(NacruleMatchingArgs.builder()
        .authType("string")
        .families("string")
        .mfgs("string")
        .models("string")
        .nactags("string")
        .osTypes("string")
        .portTypes("string")
        .siteIds("string")
        .sitegroupIds("string")
        .vendors("string")
        .build())
    .name("string")
    .notMatching(NacruleNotMatchingArgs.builder()
        .authType("string")
        .families("string")
        .mfgs("string")
        .models("string")
        .nactags("string")
        .osTypes("string")
        .portTypes("string")
        .siteIds("string")
        .sitegroupIds("string")
        .vendors("string")
        .build())
    .build());

    nacrule_resource = junipermist.org.Nacrule("nacruleResource",
    action="string",
    order=0,
    org_id="string",
    apply_tags=["string"],
    dry_run=False,
    enabled=False,
    guest_auth_state="string",
    matching={
        "auth_type": "string",
        "families": ["string"],
        "mfgs": ["string"],
        "models": ["string"],
        "nactags": ["string"],
        "os_types": ["string"],
        "port_types": ["string"],
        "site_ids": ["string"],
        "sitegroup_ids": ["string"],
        "vendors": ["string"],
    },
    name="string",
    not_matching={
        "auth_type": "string",
        "families": ["string"],
        "mfgs": ["string"],
        "models": ["string"],
        "nactags": ["string"],
        "os_types": ["string"],
        "port_types": ["string"],
        "site_ids": ["string"],
        "sitegroup_ids": ["string"],
        "vendors": ["string"],
    })

    const nacruleResource = new junipermist.org.Nacrule("nacruleResource", {
    action: "string",
    order: 0,
    orgId: "string",
    applyTags: ["string"],
    dryRun: false,
    enabled: false,
    guestAuthState: "string",
    matching: {
        authType: "string",
        families: ["string"],
        mfgs: ["string"],
        models: ["string"],
        nactags: ["string"],
        osTypes: ["string"],
        portTypes: ["string"],
        siteIds: ["string"],
        sitegroupIds: ["string"],
        vendors: ["string"],
    },
    name: "string",
    notMatching: {
        authType: "string",
        families: ["string"],
        mfgs: ["string"],
        models: ["string"],
        nactags: ["string"],
        osTypes: ["string"],
        portTypes: ["string"],
        siteIds: ["string"],
        sitegroupIds: ["string"],
        vendors: ["string"],
    },
});

    type: junipermist:org:Nacrule
properties:
    action: string
    applyTags:
        - string
    dryRun: false
    enabled: false
    guestAuthState: string
    matching:
        authType: string
        families:
            - string
        mfgs:
            - string
        models:
            - string
        nactags:
            - string
        osTypes:
            - string
        portTypes:
            - string
        siteIds:
            - string
        sitegroupIds:
            - string
        vendors:
            - string
    name: string
    notMatching:
        authType: string
        families:
            - string
        mfgs:
            - string
        models:
            - string
        nactags:
            - string
        osTypes:
            - string
        portTypes:
            - string
        siteIds:
            - string
        sitegroupIds:
            - string
        vendors:
            - string
    order: 0
    orgId: string

    Nacrule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Nacrule resource accepts the following input properties:

    Action string
    Allow or block decision applied when the NAC rule matches
    Order int
    Rule priority; lower values are evaluated with higher priority
    OrgId string
    Org identifier that owns the NAC rule
    ApplyTags List<string>
    NAC tag IDs to include in the Access-Accept when the rule allows access
    DryRun bool
    Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
    Enabled bool
    Whether the NAC rule is evaluated during policy matching
    GuestAuthState string
    Guest portal authorization state condition for the rule
    Matching Pulumi.JuniperMist.Org.Inputs.NacruleMatching
    Criteria that must match for the NAC rule to apply
    Name string
    Human-readable name of the NAC rule
    NotMatching Pulumi.JuniperMist.Org.Inputs.NacruleNotMatching
    Criteria that must not match for the NAC rule to apply
    Action string
    Allow or block decision applied when the NAC rule matches
    Order int
    Rule priority; lower values are evaluated with higher priority
    OrgId string
    Org identifier that owns the NAC rule
    ApplyTags []string
    NAC tag IDs to include in the Access-Accept when the rule allows access
    DryRun bool
    Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
    Enabled bool
    Whether the NAC rule is evaluated during policy matching
    GuestAuthState string
    Guest portal authorization state condition for the rule
    Matching NacruleMatchingArgs
    Criteria that must match for the NAC rule to apply
    Name string
    Human-readable name of the NAC rule
    NotMatching NacruleNotMatchingArgs
    Criteria that must not match for the NAC rule to apply
    action string
    Allow or block decision applied when the NAC rule matches
    order number
    Rule priority; lower values are evaluated with higher priority
    org_id string
    Org identifier that owns the NAC rule
    apply_tags list(string)
    NAC tag IDs to include in the Access-Accept when the rule allows access
    dry_run bool
    Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
    enabled bool
    Whether the NAC rule is evaluated during policy matching
    guest_auth_state string
    Guest portal authorization state condition for the rule
    matching object
    Criteria that must match for the NAC rule to apply
    name string
    Human-readable name of the NAC rule
    not_matching object
    Criteria that must not match for the NAC rule to apply
    action String
    Allow or block decision applied when the NAC rule matches
    order Integer
    Rule priority; lower values are evaluated with higher priority
    orgId String
    Org identifier that owns the NAC rule
    applyTags List<String>
    NAC tag IDs to include in the Access-Accept when the rule allows access
    dryRun Boolean
    Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
    enabled Boolean
    Whether the NAC rule is evaluated during policy matching
    guestAuthState String
    Guest portal authorization state condition for the rule
    matching NacruleMatching
    Criteria that must match for the NAC rule to apply
    name String
    Human-readable name of the NAC rule
    notMatching NacruleNotMatching
    Criteria that must not match for the NAC rule to apply
    action string
    Allow or block decision applied when the NAC rule matches
    order number
    Rule priority; lower values are evaluated with higher priority
    orgId string
    Org identifier that owns the NAC rule
    applyTags string[]
    NAC tag IDs to include in the Access-Accept when the rule allows access
    dryRun boolean
    Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
    enabled boolean
    Whether the NAC rule is evaluated during policy matching
    guestAuthState string
    Guest portal authorization state condition for the rule
    matching NacruleMatching
    Criteria that must match for the NAC rule to apply
    name string
    Human-readable name of the NAC rule
    notMatching NacruleNotMatching
    Criteria that must not match for the NAC rule to apply
    action str
    Allow or block decision applied when the NAC rule matches
    order int
    Rule priority; lower values are evaluated with higher priority
    org_id str
    Org identifier that owns the NAC rule
    apply_tags Sequence[str]
    NAC tag IDs to include in the Access-Accept when the rule allows access
    dry_run bool
    Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
    enabled bool
    Whether the NAC rule is evaluated during policy matching
    guest_auth_state str
    Guest portal authorization state condition for the rule
    matching NacruleMatchingArgs
    Criteria that must match for the NAC rule to apply
    name str
    Human-readable name of the NAC rule
    not_matching NacruleNotMatchingArgs
    Criteria that must not match for the NAC rule to apply
    action String
    Allow or block decision applied when the NAC rule matches
    order Number
    Rule priority; lower values are evaluated with higher priority
    orgId String
    Org identifier that owns the NAC rule
    applyTags List<String>
    NAC tag IDs to include in the Access-Accept when the rule allows access
    dryRun Boolean
    Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
    enabled Boolean
    Whether the NAC rule is evaluated during policy matching
    guestAuthState String
    Guest portal authorization state condition for the rule
    matching Property Map
    Criteria that must match for the NAC rule to apply
    name String
    Human-readable name of the NAC rule
    notMatching Property Map
    Criteria that must not match for the NAC rule to apply

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Nacrule resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing Nacrule Resource

    Get an existing Nacrule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: NacruleState, opts?: CustomResourceOptions): Nacrule
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[str] = None,
        apply_tags: Optional[Sequence[str]] = None,
        dry_run: Optional[bool] = None,
        enabled: Optional[bool] = None,
        guest_auth_state: Optional[str] = None,
        matching: Optional[NacruleMatchingArgs] = None,
        name: Optional[str] = None,
        not_matching: Optional[NacruleNotMatchingArgs] = None,
        order: Optional[int] = None,
        org_id: Optional[str] = None) -> Nacrule
    func GetNacrule(ctx *Context, name string, id IDInput, state *NacruleState, opts ...ResourceOption) (*Nacrule, error)
    public static Nacrule Get(string name, Input<string> id, NacruleState? state, CustomResourceOptions? opts = null)
    public static Nacrule get(String name, Output<String> id, NacruleState state, CustomResourceOptions options)
    resources:  _:    type: junipermist:org:Nacrule    get:      id: ${id}
    import {
  to = junipermist_org_nacrule.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Action string
    Allow or block decision applied when the NAC rule matches
    ApplyTags List<string>
    NAC tag IDs to include in the Access-Accept when the rule allows access
    DryRun bool
    Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
    Enabled bool
    Whether the NAC rule is evaluated during policy matching
    GuestAuthState string
    Guest portal authorization state condition for the rule
    Matching Pulumi.JuniperMist.Org.Inputs.NacruleMatching
    Criteria that must match for the NAC rule to apply
    Name string
    Human-readable name of the NAC rule
    NotMatching Pulumi.JuniperMist.Org.Inputs.NacruleNotMatching
    Criteria that must not match for the NAC rule to apply
    Order int
    Rule priority; lower values are evaluated with higher priority
    OrgId string
    Org identifier that owns the NAC rule
    Action string
    Allow or block decision applied when the NAC rule matches
    ApplyTags []string
    NAC tag IDs to include in the Access-Accept when the rule allows access
    DryRun bool
    Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
    Enabled bool
    Whether the NAC rule is evaluated during policy matching
    GuestAuthState string
    Guest portal authorization state condition for the rule
    Matching NacruleMatchingArgs
    Criteria that must match for the NAC rule to apply
    Name string
    Human-readable name of the NAC rule
    NotMatching NacruleNotMatchingArgs
    Criteria that must not match for the NAC rule to apply
    Order int
    Rule priority; lower values are evaluated with higher priority
    OrgId string
    Org identifier that owns the NAC rule
    action string
    Allow or block decision applied when the NAC rule matches
    apply_tags list(string)
    NAC tag IDs to include in the Access-Accept when the rule allows access
    dry_run bool
    Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
    enabled bool
    Whether the NAC rule is evaluated during policy matching
    guest_auth_state string
    Guest portal authorization state condition for the rule
    matching object
    Criteria that must match for the NAC rule to apply
    name string
    Human-readable name of the NAC rule
    not_matching object
    Criteria that must not match for the NAC rule to apply
    order number
    Rule priority; lower values are evaluated with higher priority
    org_id string
    Org identifier that owns the NAC rule
    action String
    Allow or block decision applied when the NAC rule matches
    applyTags List<String>
    NAC tag IDs to include in the Access-Accept when the rule allows access
    dryRun Boolean
    Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
    enabled Boolean
    Whether the NAC rule is evaluated during policy matching
    guestAuthState String
    Guest portal authorization state condition for the rule
    matching NacruleMatching
    Criteria that must match for the NAC rule to apply
    name String
    Human-readable name of the NAC rule
    notMatching NacruleNotMatching
    Criteria that must not match for the NAC rule to apply
    order Integer
    Rule priority; lower values are evaluated with higher priority
    orgId String
    Org identifier that owns the NAC rule
    action string
    Allow or block decision applied when the NAC rule matches
    applyTags string[]
    NAC tag IDs to include in the Access-Accept when the rule allows access
    dryRun boolean
    Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
    enabled boolean
    Whether the NAC rule is evaluated during policy matching
    guestAuthState string
    Guest portal authorization state condition for the rule
    matching NacruleMatching
    Criteria that must match for the NAC rule to apply
    name string
    Human-readable name of the NAC rule
    notMatching NacruleNotMatching
    Criteria that must not match for the NAC rule to apply
    order number
    Rule priority; lower values are evaluated with higher priority
    orgId string
    Org identifier that owns the NAC rule
    action str
    Allow or block decision applied when the NAC rule matches
    apply_tags Sequence[str]
    NAC tag IDs to include in the Access-Accept when the rule allows access
    dry_run bool
    Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
    enabled bool
    Whether the NAC rule is evaluated during policy matching
    guest_auth_state str
    Guest portal authorization state condition for the rule
    matching NacruleMatchingArgs
    Criteria that must match for the NAC rule to apply
    name str
    Human-readable name of the NAC rule
    not_matching NacruleNotMatchingArgs
    Criteria that must not match for the NAC rule to apply
    order int
    Rule priority; lower values are evaluated with higher priority
    org_id str
    Org identifier that owns the NAC rule
    action String
    Allow or block decision applied when the NAC rule matches
    applyTags List<String>
    NAC tag IDs to include in the Access-Accept when the rule allows access
    dryRun Boolean
    Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
    enabled Boolean
    Whether the NAC rule is evaluated during policy matching
    guestAuthState String
    Guest portal authorization state condition for the rule
    matching Property Map
    Criteria that must match for the NAC rule to apply
    name String
    Human-readable name of the NAC rule
    notMatching Property Map
    Criteria that must not match for the NAC rule to apply
    order Number
    Rule priority; lower values are evaluated with higher priority
    orgId String
    Org identifier that owns the NAC rule

    Supporting Types

    NacruleMatching, NacruleMatchingArgs

    AuthType string
    NAC authentication method that must match the request
    Families List<string>
    Client device family values that must match the request
    Mfgs List<string>
    Client device manufacturer values that must match the request
    Models List<string>
    Client device model values that must match the request
    Nactags List<string>
    NAC tag IDs whose match criteria must be satisfied by the request
    OsTypes List<string>
    Client OS type values that must match the request
    PortTypes List<string>
    Wired or wireless access types that must match the request
    SiteIds List<string>
    Site IDs where the rule criteria apply
    SitegroupIds List<string>
    Site group IDs where the rule criteria apply
    Vendors List<string>
    Client device vendor values that must match the request
    AuthType string
    NAC authentication method that must match the request
    Families []string
    Client device family values that must match the request
    Mfgs []string
    Client device manufacturer values that must match the request
    Models []string
    Client device model values that must match the request
    Nactags []string
    NAC tag IDs whose match criteria must be satisfied by the request
    OsTypes []string
    Client OS type values that must match the request
    PortTypes []string
    Wired or wireless access types that must match the request
    SiteIds []string
    Site IDs where the rule criteria apply
    SitegroupIds []string
    Site group IDs where the rule criteria apply
    Vendors []string
    Client device vendor values that must match the request
    auth_type string
    NAC authentication method that must match the request
    families list(string)
    Client device family values that must match the request
    mfgs list(string)
    Client device manufacturer values that must match the request
    models list(string)
    Client device model values that must match the request
    nactags list(string)
    NAC tag IDs whose match criteria must be satisfied by the request
    os_types list(string)
    Client OS type values that must match the request
    port_types list(string)
    Wired or wireless access types that must match the request
    site_ids list(string)
    Site IDs where the rule criteria apply
    sitegroup_ids list(string)
    Site group IDs where the rule criteria apply
    vendors list(string)
    Client device vendor values that must match the request
    authType String
    NAC authentication method that must match the request
    families List<String>
    Client device family values that must match the request
    mfgs List<String>
    Client device manufacturer values that must match the request
    models List<String>
    Client device model values that must match the request
    nactags List<String>
    NAC tag IDs whose match criteria must be satisfied by the request
    osTypes List<String>
    Client OS type values that must match the request
    portTypes List<String>
    Wired or wireless access types that must match the request
    siteIds List<String>
    Site IDs where the rule criteria apply
    sitegroupIds List<String>
    Site group IDs where the rule criteria apply
    vendors List<String>
    Client device vendor values that must match the request
    authType string
    NAC authentication method that must match the request
    families string[]
    Client device family values that must match the request
    mfgs string[]
    Client device manufacturer values that must match the request
    models string[]
    Client device model values that must match the request
    nactags string[]
    NAC tag IDs whose match criteria must be satisfied by the request
    osTypes string[]
    Client OS type values that must match the request
    portTypes string[]
    Wired or wireless access types that must match the request
    siteIds string[]
    Site IDs where the rule criteria apply
    sitegroupIds string[]
    Site group IDs where the rule criteria apply
    vendors string[]
    Client device vendor values that must match the request
    auth_type str
    NAC authentication method that must match the request
    families Sequence[str]
    Client device family values that must match the request
    mfgs Sequence[str]
    Client device manufacturer values that must match the request
    models Sequence[str]
    Client device model values that must match the request
    nactags Sequence[str]
    NAC tag IDs whose match criteria must be satisfied by the request
    os_types Sequence[str]
    Client OS type values that must match the request
    port_types Sequence[str]
    Wired or wireless access types that must match the request
    site_ids Sequence[str]
    Site IDs where the rule criteria apply
    sitegroup_ids Sequence[str]
    Site group IDs where the rule criteria apply
    vendors Sequence[str]
    Client device vendor values that must match the request
    authType String
    NAC authentication method that must match the request
    families List<String>
    Client device family values that must match the request
    mfgs List<String>
    Client device manufacturer values that must match the request
    models List<String>
    Client device model values that must match the request
    nactags List<String>
    NAC tag IDs whose match criteria must be satisfied by the request
    osTypes List<String>
    Client OS type values that must match the request
    portTypes List<String>
    Wired or wireless access types that must match the request
    siteIds List<String>
    Site IDs where the rule criteria apply
    sitegroupIds List<String>
    Site group IDs where the rule criteria apply
    vendors List<String>
    Client device vendor values that must match the request

    NacruleNotMatching, NacruleNotMatchingArgs

    AuthType string
    NAC authentication method that must match the request
    Families List<string>
    Client device family values that must match the request
    Mfgs List<string>
    Client device manufacturer values that must match the request
    Models List<string>
    Client device model values that must match the request
    Nactags List<string>
    NAC tag IDs whose match criteria must be satisfied by the request
    OsTypes List<string>
    Client OS type values that must match the request
    PortTypes List<string>
    Wired or wireless access types that must match the request
    SiteIds List<string>
    Site IDs where the rule criteria apply
    SitegroupIds List<string>
    Site group IDs where the rule criteria apply
    Vendors List<string>
    Client device vendor values that must match the request
    AuthType string
    NAC authentication method that must match the request
    Families []string
    Client device family values that must match the request
    Mfgs []string
    Client device manufacturer values that must match the request
    Models []string
    Client device model values that must match the request
    Nactags []string
    NAC tag IDs whose match criteria must be satisfied by the request
    OsTypes []string
    Client OS type values that must match the request
    PortTypes []string
    Wired or wireless access types that must match the request
    SiteIds []string
    Site IDs where the rule criteria apply
    SitegroupIds []string
    Site group IDs where the rule criteria apply
    Vendors []string
    Client device vendor values that must match the request
    auth_type string
    NAC authentication method that must match the request
    families list(string)
    Client device family values that must match the request
    mfgs list(string)
    Client device manufacturer values that must match the request
    models list(string)
    Client device model values that must match the request
    nactags list(string)
    NAC tag IDs whose match criteria must be satisfied by the request
    os_types list(string)
    Client OS type values that must match the request
    port_types list(string)
    Wired or wireless access types that must match the request
    site_ids list(string)
    Site IDs where the rule criteria apply
    sitegroup_ids list(string)
    Site group IDs where the rule criteria apply
    vendors list(string)
    Client device vendor values that must match the request
    authType String
    NAC authentication method that must match the request
    families List<String>
    Client device family values that must match the request
    mfgs List<String>
    Client device manufacturer values that must match the request
    models List<String>
    Client device model values that must match the request
    nactags List<String>
    NAC tag IDs whose match criteria must be satisfied by the request
    osTypes List<String>
    Client OS type values that must match the request
    portTypes List<String>
    Wired or wireless access types that must match the request
    siteIds List<String>
    Site IDs where the rule criteria apply
    sitegroupIds List<String>
    Site group IDs where the rule criteria apply
    vendors List<String>
    Client device vendor values that must match the request
    authType string
    NAC authentication method that must match the request
    families string[]
    Client device family values that must match the request
    mfgs string[]
    Client device manufacturer values that must match the request
    models string[]
    Client device model values that must match the request
    nactags string[]
    NAC tag IDs whose match criteria must be satisfied by the request
    osTypes string[]
    Client OS type values that must match the request
    portTypes string[]
    Wired or wireless access types that must match the request
    siteIds string[]
    Site IDs where the rule criteria apply
    sitegroupIds string[]
    Site group IDs where the rule criteria apply
    vendors string[]
    Client device vendor values that must match the request
    auth_type str
    NAC authentication method that must match the request
    families Sequence[str]
    Client device family values that must match the request
    mfgs Sequence[str]
    Client device manufacturer values that must match the request
    models Sequence[str]
    Client device model values that must match the request
    nactags Sequence[str]
    NAC tag IDs whose match criteria must be satisfied by the request
    os_types Sequence[str]
    Client OS type values that must match the request
    port_types Sequence[str]
    Wired or wireless access types that must match the request
    site_ids Sequence[str]
    Site IDs where the rule criteria apply
    sitegroup_ids Sequence[str]
    Site group IDs where the rule criteria apply
    vendors Sequence[str]
    Client device vendor values that must match the request
    authType String
    NAC authentication method that must match the request
    families List<String>
    Client device family values that must match the request
    mfgs List<String>
    Client device manufacturer values that must match the request
    models List<String>
    Client device model values that must match the request
    nactags List<String>
    NAC tag IDs whose match criteria must be satisfied by the request
    osTypes List<String>
    Client OS type values that must match the request
    portTypes List<String>
    Wired or wireless access types that must match the request
    siteIds List<String>
    Site IDs where the rule criteria apply
    sitegroupIds List<String>
    Site group IDs where the rule criteria apply
    vendors List<String>
    Client device vendor values that must match the request

    Import

    Using pulumi import, import junipermist.org.Nacrule with: NAC Rule can be imported by specifying the orgId and the nacruleId

    $ pulumi import junipermist:org/nacrule:Nacrule nacrule_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    junipermist pulumi/pulumi-junipermist
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the mist Terraform Provider.
    junipermist logo
    Viewing docs for Juniper Mist v0.11.2
    published on Saturday, Jul 11, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-junipermist

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial