Nactag

Juniper Mist v0.11.2, Jul 11 26

Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-junipermist

Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-junipermist

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as junipermist from "@pulumi/juniper-mist";

const tagOne = new junipermist.org.Nactag("tag_one", {
    name: "tag_one",
    type: "match",
    match: "client_mac",
    orgId: terraformTest.id,
    values: ["5c5b35*"],
});

import pulumi
import pulumi_juniper_mist as junipermist

tag_one = junipermist.org.Nactag("tag_one",
    name="tag_one",
    type="match",
    match="client_mac",
    org_id=terraform_test["id"],
    values=["5c5b35*"])

package main

import (
	"github.com/pulumi/pulumi-junipermist/sdk/go/junipermist/org"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := org.NewNactag(ctx, "tag_one", &org.NactagArgs{
			Name:  pulumi.String("tag_one"),
			Type:  pulumi.String("match"),
			Match: pulumi.String("client_mac"),
			OrgId: pulumi.Any(terraformTest.Id),
			Values: pulumi.StringArray{
				pulumi.String("5c5b35*"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using JuniperMist = Pulumi.JuniperMist;

return await Deployment.RunAsync(() => 
{
    var tagOne = new JuniperMist.Org.Nactag("tag_one", new()
    {
        Name = "tag_one",
        Type = "match",
        Match = "client_mac",
        OrgId = terraformTest.Id,
        Values = new[]
        {
            "5c5b35*",
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.org.Nactag;
import com.pulumi.junipermist.org.NactagArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var tagOne = new Nactag("tagOne", NactagArgs.builder()
            .name("tag_one")
            .type("match")
            .match("client_mac")
            .orgId(terraformTest.id())
            .values("5c5b35*")
            .build());

    }
}

resources:
  tagOne:
    type: junipermist:org:Nactag
    name: tag_one
    properties:
      name: tag_one
      type: match
      match: client_mac
      orgId: ${terraformTest.id}
      values:
        - 5c5b35*

pulumi {
  required_providers {
    junipermist = {
      source = "pulumi/junipermist"
    }
  }
}

resource "junipermist_org_nactag" "tag_one" {
  name   = "tag_one"
  type   = "match"
  match  = "client_mac"
  org_id = terraformTest.id
  values = ["5c5b35*"]
}

Create Nactag Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Nactag(name: string, args: NactagArgs, opts?: CustomResourceOptions);

@overload
def Nactag(resource_name: str,
           args: NactagArgs,
           opts: Optional[ResourceOptions] = None)

@overload
def Nactag(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           org_id: Optional[str] = None,
           type: Optional[str] = None,
           match_all: Optional[bool] = None,
           radius_group: Optional[str] = None,
           allow_usermac_override: Optional[bool] = None,
           nacportal_id: Optional[str] = None,
           name: Optional[str] = None,
           gbp_tag: Optional[str] = None,
           radius_attrs: Optional[Sequence[str]] = None,
           match: Optional[str] = None,
           radius_vendor_attrs: Optional[Sequence[str]] = None,
           session_timeout: Optional[int] = None,
           egress_vlan_names: Optional[Sequence[str]] = None,
           username_attr: Optional[str] = None,
           values: Optional[Sequence[str]] = None,
           vlan: Optional[str] = None)

func NewNactag(ctx *Context, name string, args NactagArgs, opts ...ResourceOption) (*Nactag, error)

public Nactag(string name, NactagArgs args, CustomResourceOptions? opts = null)

public Nactag(String name, NactagArgs args)
public Nactag(String name, NactagArgs args, CustomResourceOptions options)

type: junipermist:org:Nactag
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

resource "junipermist_org_nactag" "name" {
    # resource properties
}

Parameters

name string: The unique name of the resource.
args NactagArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args NactagArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args NactagArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args NactagArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args NactagArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var nactagResource = new JuniperMist.Org.Nactag("nactagResource", new()
{
    OrgId = "string",
    Type = "string",
    MatchAll = false,
    RadiusGroup = "string",
    AllowUsermacOverride = false,
    NacportalId = "string",
    Name = "string",
    GbpTag = "string",
    RadiusAttrs = new[]
    {
        "string",
    },
    Match = "string",
    RadiusVendorAttrs = new[]
    {
        "string",
    },
    SessionTimeout = 0,
    EgressVlanNames = new[]
    {
        "string",
    },
    UsernameAttr = "string",
    Values = new[]
    {
        "string",
    },
    Vlan = "string",
});

example, err := org.NewNactag(ctx, "nactagResource", &org.NactagArgs{
	OrgId:                pulumi.String("string"),
	Type:                 pulumi.String("string"),
	MatchAll:             pulumi.Bool(false),
	RadiusGroup:          pulumi.String("string"),
	AllowUsermacOverride: pulumi.Bool(false),
	NacportalId:          pulumi.String("string"),
	Name:                 pulumi.String("string"),
	GbpTag:               pulumi.String("string"),
	RadiusAttrs: pulumi.StringArray{
		pulumi.String("string"),
	},
	Match: pulumi.String("string"),
	RadiusVendorAttrs: pulumi.StringArray{
		pulumi.String("string"),
	},
	SessionTimeout: pulumi.Int(0),
	EgressVlanNames: pulumi.StringArray{
		pulumi.String("string"),
	},
	UsernameAttr: pulumi.String("string"),
	Values: pulumi.StringArray{
		pulumi.String("string"),
	},
	Vlan: pulumi.String("string"),
})

resource "junipermist_org_nactag" "nactagResource" {
  lifecycle {
    create_before_destroy = true
  }
  org_id                 = "string"
  type                   = "string"
  match_all              = false
  radius_group           = "string"
  allow_usermac_override = false
  nacportal_id           = "string"
  name                   = "string"
  gbp_tag                = "string"
  radius_attrs           = ["string"]
  match                  = "string"
  radius_vendor_attrs    = ["string"]
  session_timeout        = 0
  egress_vlan_names      = ["string"]
  username_attr          = "string"
  values                 = ["string"]
  vlan                   = "string"
}

var nactagResource = new Nactag("nactagResource", NactagArgs.builder()
    .orgId("string")
    .type("string")
    .matchAll(false)
    .radiusGroup("string")
    .allowUsermacOverride(false)
    .nacportalId("string")
    .name("string")
    .gbpTag("string")
    .radiusAttrs("string")
    .match("string")
    .radiusVendorAttrs("string")
    .sessionTimeout(0)
    .egressVlanNames("string")
    .usernameAttr("string")
    .values("string")
    .vlan("string")
    .build());

nactag_resource = junipermist.org.Nactag("nactagResource",
    org_id="string",
    type="string",
    match_all=False,
    radius_group="string",
    allow_usermac_override=False,
    nacportal_id="string",
    name="string",
    gbp_tag="string",
    radius_attrs=["string"],
    match="string",
    radius_vendor_attrs=["string"],
    session_timeout=0,
    egress_vlan_names=["string"],
    username_attr="string",
    values=["string"],
    vlan="string")

const nactagResource = new junipermist.org.Nactag("nactagResource", {
    orgId: "string",
    type: "string",
    matchAll: false,
    radiusGroup: "string",
    allowUsermacOverride: false,
    nacportalId: "string",
    name: "string",
    gbpTag: "string",
    radiusAttrs: ["string"],
    match: "string",
    radiusVendorAttrs: ["string"],
    sessionTimeout: 0,
    egressVlanNames: ["string"],
    usernameAttr: "string",
    values: ["string"],
    vlan: "string",
});

type: junipermist:org:Nactag
properties:
    allowUsermacOverride: false
    egressVlanNames:
        - string
    gbpTag: string
    match: string
    matchAll: false
    nacportalId: string
    name: string
    orgId: string
    radiusAttrs:
        - string
    radiusGroup: string
    radiusVendorAttrs:
        - string
    sessionTimeout: 0
    type: string
    usernameAttr: string
    values:
        - string
    vlan: string

Nactag Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Nactag resource accepts the following input properties:

OrgId string

Org identifier that owns the NAC tag

Type string

NAC tag type that determines whether the tag is a matcher or a result attribute

AllowUsermacOverride bool

Whether usermac result values can override this NAC tag when the result type is also supported by usermac

EgressVlanNames List<string>

If type==egressVlanNames, list of egress VLAN names returned by the NAC rule

GbpTag string

If type==gbpTag, GBP tag value returned by the NAC rule

Match string

If type==match, client or authentication attribute used for rule matching

MatchAll bool

This field is applicable only when type==match

false: means it is sufficient to match any of the values (i.e., match-any behavior)
true: means all values should be matched (i.e., match-all behavior)

Currently it makes sense to set this field to true only if the match==idpRole, match==usermacLabel and edrStatus

NacportalId string

If type==redirectNacportalId, NAC portal ID used for client redirection

Name string

Human-readable name of the NAC tag

RadiusAttrs List<string>

If type==radiusAttrs, standard RADIUS attributes returned by the NAC rule

RadiusGroup string

If type==radiusGroup, RADIUS group value returned by the NAC rule

RadiusVendorAttrs List<string>

If type==radiusVendorAttrs, vendor-specific RADIUS attributes returned by the NAC rule

SessionTimeout int

If type==sessionTimeout, session timeout returned by the NAC rule, in seconds

UsernameAttr string

If type==usernameAttr, attribute used to derive the username returned by the NAC rule

Values List<string>

If type==match, attribute values used by the NAC tag matcher

Vlan string

If type==vlan, VLAN name or ID returned by the NAC rule

OrgId string

Org identifier that owns the NAC tag

Type string

NAC tag type that determines whether the tag is a matcher or a result attribute

AllowUsermacOverride bool

Whether usermac result values can override this NAC tag when the result type is also supported by usermac

EgressVlanNames []string

If type==egressVlanNames, list of egress VLAN names returned by the NAC rule

GbpTag string

If type==gbpTag, GBP tag value returned by the NAC rule

Match string

If type==match, client or authentication attribute used for rule matching

MatchAll bool

This field is applicable only when type==match

false: means it is sufficient to match any of the values (i.e., match-any behavior)
true: means all values should be matched (i.e., match-all behavior)

Currently it makes sense to set this field to true only if the match==idpRole, match==usermacLabel and edrStatus

NacportalId string

If type==redirectNacportalId, NAC portal ID used for client redirection

Name string

Human-readable name of the NAC tag

RadiusAttrs []string

If type==radiusAttrs, standard RADIUS attributes returned by the NAC rule

RadiusGroup string

If type==radiusGroup, RADIUS group value returned by the NAC rule

RadiusVendorAttrs []string

If type==radiusVendorAttrs, vendor-specific RADIUS attributes returned by the NAC rule

SessionTimeout int

If type==sessionTimeout, session timeout returned by the NAC rule, in seconds

UsernameAttr string

If type==usernameAttr, attribute used to derive the username returned by the NAC rule

Values []string

If type==match, attribute values used by the NAC tag matcher

Vlan string

If type==vlan, VLAN name or ID returned by the NAC rule

org_id string

Org identifier that owns the NAC tag

type string

NAC tag type that determines whether the tag is a matcher or a result attribute

allow_usermac_override bool

Whether usermac result values can override this NAC tag when the result type is also supported by usermac

egress_vlan_names list(string)

If type==egressVlanNames, list of egress VLAN names returned by the NAC rule

gbp_tag string

If type==gbpTag, GBP tag value returned by the NAC rule

match string

If type==match, client or authentication attribute used for rule matching

match_all bool

This field is applicable only when type==match

false: means it is sufficient to match any of the values (i.e., match-any behavior)
true: means all values should be matched (i.e., match-all behavior)

Currently it makes sense to set this field to true only if the match==idpRole, match==usermacLabel and edrStatus

nacportal_id string

If type==redirectNacportalId, NAC portal ID used for client redirection

name string

Human-readable name of the NAC tag

radius_attrs list(string)

If type==radiusAttrs, standard RADIUS attributes returned by the NAC rule

radius_group string

If type==radiusGroup, RADIUS group value returned by the NAC rule

radius_vendor_attrs list(string)

If type==radiusVendorAttrs, vendor-specific RADIUS attributes returned by the NAC rule

session_timeout number

If type==sessionTimeout, session timeout returned by the NAC rule, in seconds

username_attr string

If type==usernameAttr, attribute used to derive the username returned by the NAC rule

values list(string)

If type==match, attribute values used by the NAC tag matcher

vlan string

If type==vlan, VLAN name or ID returned by the NAC rule

orgId String

Org identifier that owns the NAC tag

type String

NAC tag type that determines whether the tag is a matcher or a result attribute

allowUsermacOverride Boolean

Whether usermac result values can override this NAC tag when the result type is also supported by usermac

egressVlanNames List<String>

If type==egressVlanNames, list of egress VLAN names returned by the NAC rule

gbpTag String

If type==gbpTag, GBP tag value returned by the NAC rule

match String

If type==match, client or authentication attribute used for rule matching

matchAll Boolean

This field is applicable only when type==match

false: means it is sufficient to match any of the values (i.e., match-any behavior)
true: means all values should be matched (i.e., match-all behavior)

Currently it makes sense to set this field to true only if the match==idpRole, match==usermacLabel and edrStatus

nacportalId String

If type==redirectNacportalId, NAC portal ID used for client redirection

name String

Human-readable name of the NAC tag

radiusAttrs List<String>

If type==radiusAttrs, standard RADIUS attributes returned by the NAC rule

radiusGroup String

If type==radiusGroup, RADIUS group value returned by the NAC rule

radiusVendorAttrs List<String>

If type==radiusVendorAttrs, vendor-specific RADIUS attributes returned by the NAC rule

sessionTimeout Integer

If type==sessionTimeout, session timeout returned by the NAC rule, in seconds

usernameAttr String

If type==usernameAttr, attribute used to derive the username returned by the NAC rule

values List<String>

If type==match, attribute values used by the NAC tag matcher

vlan String

If type==vlan, VLAN name or ID returned by the NAC rule

orgId string

Org identifier that owns the NAC tag

type string

NAC tag type that determines whether the tag is a matcher or a result attribute

allowUsermacOverride boolean

Whether usermac result values can override this NAC tag when the result type is also supported by usermac

egressVlanNames string[]

If type==egressVlanNames, list of egress VLAN names returned by the NAC rule

gbpTag string

If type==gbpTag, GBP tag value returned by the NAC rule

match string

If type==match, client or authentication attribute used for rule matching

matchAll boolean

This field is applicable only when type==match

false: means it is sufficient to match any of the values (i.e., match-any behavior)
true: means all values should be matched (i.e., match-all behavior)

Currently it makes sense to set this field to true only if the match==idpRole, match==usermacLabel and edrStatus

nacportalId string

If type==redirectNacportalId, NAC portal ID used for client redirection

name string

Human-readable name of the NAC tag

radiusAttrs string[]

If type==radiusAttrs, standard RADIUS attributes returned by the NAC rule

radiusGroup string

If type==radiusGroup, RADIUS group value returned by the NAC rule

radiusVendorAttrs string[]

If type==radiusVendorAttrs, vendor-specific RADIUS attributes returned by the NAC rule

sessionTimeout number

If type==sessionTimeout, session timeout returned by the NAC rule, in seconds

usernameAttr string

If type==usernameAttr, attribute used to derive the username returned by the NAC rule

values string[]

If type==match, attribute values used by the NAC tag matcher

vlan string

If type==vlan, VLAN name or ID returned by the NAC rule

org_id str

Org identifier that owns the NAC tag

type str

NAC tag type that determines whether the tag is a matcher or a result attribute

allow_usermac_override bool

Whether usermac result values can override this NAC tag when the result type is also supported by usermac

egress_vlan_names Sequence[str]

If type==egressVlanNames, list of egress VLAN names returned by the NAC rule

gbp_tag str

If type==gbpTag, GBP tag value returned by the NAC rule

match str

If type==match, client or authentication attribute used for rule matching

match_all bool

This field is applicable only when type==match

false: means it is sufficient to match any of the values (i.e., match-any behavior)
true: means all values should be matched (i.e., match-all behavior)

Currently it makes sense to set this field to true only if the match==idpRole, match==usermacLabel and edrStatus

nacportal_id str

If type==redirectNacportalId, NAC portal ID used for client redirection

name str

Human-readable name of the NAC tag

radius_attrs Sequence[str]

If type==radiusAttrs, standard RADIUS attributes returned by the NAC rule

radius_group str

If type==radiusGroup, RADIUS group value returned by the NAC rule

radius_vendor_attrs Sequence[str]

If type==radiusVendorAttrs, vendor-specific RADIUS attributes returned by the NAC rule

session_timeout int

If type==sessionTimeout, session timeout returned by the NAC rule, in seconds

username_attr str

If type==usernameAttr, attribute used to derive the username returned by the NAC rule

values Sequence[str]

If type==match, attribute values used by the NAC tag matcher

vlan str

If type==vlan, VLAN name or ID returned by the NAC rule

orgId String

Org identifier that owns the NAC tag

type String

NAC tag type that determines whether the tag is a matcher or a result attribute

allowUsermacOverride Boolean

Whether usermac result values can override this NAC tag when the result type is also supported by usermac

egressVlanNames List<String>

If type==egressVlanNames, list of egress VLAN names returned by the NAC rule

gbpTag String

If type==gbpTag, GBP tag value returned by the NAC rule

match String

If type==match, client or authentication attribute used for rule matching

matchAll Boolean

This field is applicable only when type==match

false: means it is sufficient to match any of the values (i.e., match-any behavior)
true: means all values should be matched (i.e., match-all behavior)

Currently it makes sense to set this field to true only if the match==idpRole, match==usermacLabel and edrStatus

nacportalId String

If type==redirectNacportalId, NAC portal ID used for client redirection

name String

Human-readable name of the NAC tag

radiusAttrs List<String>

If type==radiusAttrs, standard RADIUS attributes returned by the NAC rule

radiusGroup String

If type==radiusGroup, RADIUS group value returned by the NAC rule

radiusVendorAttrs List<String>

If type==radiusVendorAttrs, vendor-specific RADIUS attributes returned by the NAC rule

sessionTimeout Number

If type==sessionTimeout, session timeout returned by the NAC rule, in seconds

usernameAttr String

If type==usernameAttr, attribute used to derive the username returned by the NAC rule

values List<String>

If type==match, attribute values used by the NAC tag matcher

vlan String

If type==vlan, VLAN name or ID returned by the NAC rule

Outputs

All input properties are implicitly available as output properties. Additionally, the Nactag resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Look up Existing Nactag Resource

Get an existing Nactag resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: NactagState, opts?: CustomResourceOptions): Nactag

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        allow_usermac_override: Optional[bool] = None,
        egress_vlan_names: Optional[Sequence[str]] = None,
        gbp_tag: Optional[str] = None,
        match: Optional[str] = None,
        match_all: Optional[bool] = None,
        nacportal_id: Optional[str] = None,
        name: Optional[str] = None,
        org_id: Optional[str] = None,
        radius_attrs: Optional[Sequence[str]] = None,
        radius_group: Optional[str] = None,
        radius_vendor_attrs: Optional[Sequence[str]] = None,
        session_timeout: Optional[int] = None,
        type: Optional[str] = None,
        username_attr: Optional[str] = None,
        values: Optional[Sequence[str]] = None,
        vlan: Optional[str] = None) -> Nactag

func GetNactag(ctx *Context, name string, id IDInput, state *NactagState, opts ...ResourceOption) (*Nactag, error)

public static Nactag Get(string name, Input<string> id, NactagState? state, CustomResourceOptions? opts = null)

public static Nactag get(String name, Output<String> id, NactagState state, CustomResourceOptions options)

resources:  _:    type: junipermist:org:Nactag    get:      id: ${id}

import {
  to = junipermist_org_nactag.example
  id = "${id}"
}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AllowUsermacOverride bool

Whether usermac result values can override this NAC tag when the result type is also supported by usermac

EgressVlanNames List<string>

If type==egressVlanNames, list of egress VLAN names returned by the NAC rule

GbpTag string

If type==gbpTag, GBP tag value returned by the NAC rule

Match string

If type==match, client or authentication attribute used for rule matching

MatchAll bool

This field is applicable only when type==match

false: means it is sufficient to match any of the values (i.e., match-any behavior)
true: means all values should be matched (i.e., match-all behavior)

Currently it makes sense to set this field to true only if the match==idpRole, match==usermacLabel and edrStatus

NacportalId string

If type==redirectNacportalId, NAC portal ID used for client redirection

Name string

Human-readable name of the NAC tag

OrgId string

Org identifier that owns the NAC tag

RadiusAttrs List<string>

If type==radiusAttrs, standard RADIUS attributes returned by the NAC rule

RadiusGroup string

If type==radiusGroup, RADIUS group value returned by the NAC rule

RadiusVendorAttrs List<string>

If type==radiusVendorAttrs, vendor-specific RADIUS attributes returned by the NAC rule

SessionTimeout int

If type==sessionTimeout, session timeout returned by the NAC rule, in seconds

Type string

NAC tag type that determines whether the tag is a matcher or a result attribute

UsernameAttr string

If type==usernameAttr, attribute used to derive the username returned by the NAC rule

Values List<string>

If type==match, attribute values used by the NAC tag matcher

Vlan string

If type==vlan, VLAN name or ID returned by the NAC rule

AllowUsermacOverride bool

Whether usermac result values can override this NAC tag when the result type is also supported by usermac

EgressVlanNames []string

If type==egressVlanNames, list of egress VLAN names returned by the NAC rule

GbpTag string

If type==gbpTag, GBP tag value returned by the NAC rule

Match string

If type==match, client or authentication attribute used for rule matching

MatchAll bool

This field is applicable only when type==match

false: means it is sufficient to match any of the values (i.e., match-any behavior)
true: means all values should be matched (i.e., match-all behavior)

Currently it makes sense to set this field to true only if the match==idpRole, match==usermacLabel and edrStatus

NacportalId string

If type==redirectNacportalId, NAC portal ID used for client redirection

Name string

Human-readable name of the NAC tag

OrgId string

Org identifier that owns the NAC tag

RadiusAttrs []string

If type==radiusAttrs, standard RADIUS attributes returned by the NAC rule

RadiusGroup string

If type==radiusGroup, RADIUS group value returned by the NAC rule

RadiusVendorAttrs []string

If type==radiusVendorAttrs, vendor-specific RADIUS attributes returned by the NAC rule

SessionTimeout int

If type==sessionTimeout, session timeout returned by the NAC rule, in seconds

Type string

NAC tag type that determines whether the tag is a matcher or a result attribute

UsernameAttr string

If type==usernameAttr, attribute used to derive the username returned by the NAC rule

Values []string

If type==match, attribute values used by the NAC tag matcher

Vlan string

If type==vlan, VLAN name or ID returned by the NAC rule

allow_usermac_override bool

Whether usermac result values can override this NAC tag when the result type is also supported by usermac

egress_vlan_names list(string)

If type==egressVlanNames, list of egress VLAN names returned by the NAC rule

gbp_tag string

If type==gbpTag, GBP tag value returned by the NAC rule

match string

If type==match, client or authentication attribute used for rule matching

match_all bool

This field is applicable only when type==match

false: means it is sufficient to match any of the values (i.e., match-any behavior)
true: means all values should be matched (i.e., match-all behavior)

Currently it makes sense to set this field to true only if the match==idpRole, match==usermacLabel and edrStatus

nacportal_id string

If type==redirectNacportalId, NAC portal ID used for client redirection

name string

Human-readable name of the NAC tag

org_id string

Org identifier that owns the NAC tag

radius_attrs list(string)

If type==radiusAttrs, standard RADIUS attributes returned by the NAC rule

radius_group string

If type==radiusGroup, RADIUS group value returned by the NAC rule

radius_vendor_attrs list(string)

If type==radiusVendorAttrs, vendor-specific RADIUS attributes returned by the NAC rule

session_timeout number

If type==sessionTimeout, session timeout returned by the NAC rule, in seconds

type string

NAC tag type that determines whether the tag is a matcher or a result attribute

username_attr string

If type==usernameAttr, attribute used to derive the username returned by the NAC rule

values list(string)

If type==match, attribute values used by the NAC tag matcher

vlan string

If type==vlan, VLAN name or ID returned by the NAC rule

allowUsermacOverride Boolean

Whether usermac result values can override this NAC tag when the result type is also supported by usermac

egressVlanNames List<String>

If type==egressVlanNames, list of egress VLAN names returned by the NAC rule

gbpTag String

If type==gbpTag, GBP tag value returned by the NAC rule

match String

If type==match, client or authentication attribute used for rule matching

matchAll Boolean

This field is applicable only when type==match

false: means it is sufficient to match any of the values (i.e., match-any behavior)
true: means all values should be matched (i.e., match-all behavior)

Currently it makes sense to set this field to true only if the match==idpRole, match==usermacLabel and edrStatus

nacportalId String

If type==redirectNacportalId, NAC portal ID used for client redirection

name String

Human-readable name of the NAC tag

orgId String

Org identifier that owns the NAC tag

radiusAttrs List<String>

If type==radiusAttrs, standard RADIUS attributes returned by the NAC rule

radiusGroup String

If type==radiusGroup, RADIUS group value returned by the NAC rule

radiusVendorAttrs List<String>

If type==radiusVendorAttrs, vendor-specific RADIUS attributes returned by the NAC rule

sessionTimeout Integer

If type==sessionTimeout, session timeout returned by the NAC rule, in seconds

type String

NAC tag type that determines whether the tag is a matcher or a result attribute

usernameAttr String

If type==usernameAttr, attribute used to derive the username returned by the NAC rule

values List<String>

If type==match, attribute values used by the NAC tag matcher

vlan String

If type==vlan, VLAN name or ID returned by the NAC rule

allowUsermacOverride boolean

Whether usermac result values can override this NAC tag when the result type is also supported by usermac

egressVlanNames string[]

If type==egressVlanNames, list of egress VLAN names returned by the NAC rule

gbpTag string

If type==gbpTag, GBP tag value returned by the NAC rule

match string

If type==match, client or authentication attribute used for rule matching

matchAll boolean

This field is applicable only when type==match

false: means it is sufficient to match any of the values (i.e., match-any behavior)
true: means all values should be matched (i.e., match-all behavior)

Currently it makes sense to set this field to true only if the match==idpRole, match==usermacLabel and edrStatus

nacportalId string

If type==redirectNacportalId, NAC portal ID used for client redirection

name string

Human-readable name of the NAC tag

orgId string

Org identifier that owns the NAC tag

radiusAttrs string[]

If type==radiusAttrs, standard RADIUS attributes returned by the NAC rule

radiusGroup string

If type==radiusGroup, RADIUS group value returned by the NAC rule

radiusVendorAttrs string[]

If type==radiusVendorAttrs, vendor-specific RADIUS attributes returned by the NAC rule

sessionTimeout number

If type==sessionTimeout, session timeout returned by the NAC rule, in seconds

type string

NAC tag type that determines whether the tag is a matcher or a result attribute

usernameAttr string

If type==usernameAttr, attribute used to derive the username returned by the NAC rule

values string[]

If type==match, attribute values used by the NAC tag matcher

vlan string

If type==vlan, VLAN name or ID returned by the NAC rule

allow_usermac_override bool

Whether usermac result values can override this NAC tag when the result type is also supported by usermac

egress_vlan_names Sequence[str]

If type==egressVlanNames, list of egress VLAN names returned by the NAC rule

gbp_tag str

If type==gbpTag, GBP tag value returned by the NAC rule

match str

If type==match, client or authentication attribute used for rule matching

match_all bool

This field is applicable only when type==match

false: means it is sufficient to match any of the values (i.e., match-any behavior)
true: means all values should be matched (i.e., match-all behavior)

Currently it makes sense to set this field to true only if the match==idpRole, match==usermacLabel and edrStatus

nacportal_id str

If type==redirectNacportalId, NAC portal ID used for client redirection

name str

Human-readable name of the NAC tag

org_id str

Org identifier that owns the NAC tag

radius_attrs Sequence[str]

If type==radiusAttrs, standard RADIUS attributes returned by the NAC rule

radius_group str

If type==radiusGroup, RADIUS group value returned by the NAC rule

radius_vendor_attrs Sequence[str]

If type==radiusVendorAttrs, vendor-specific RADIUS attributes returned by the NAC rule

session_timeout int

If type==sessionTimeout, session timeout returned by the NAC rule, in seconds

type str

NAC tag type that determines whether the tag is a matcher or a result attribute

username_attr str

If type==usernameAttr, attribute used to derive the username returned by the NAC rule

values Sequence[str]

If type==match, attribute values used by the NAC tag matcher

vlan str

If type==vlan, VLAN name or ID returned by the NAC rule

allowUsermacOverride Boolean

Whether usermac result values can override this NAC tag when the result type is also supported by usermac

egressVlanNames List<String>

If type==egressVlanNames, list of egress VLAN names returned by the NAC rule

gbpTag String

If type==gbpTag, GBP tag value returned by the NAC rule

match String

If type==match, client or authentication attribute used for rule matching

matchAll Boolean

This field is applicable only when type==match

false: means it is sufficient to match any of the values (i.e., match-any behavior)
true: means all values should be matched (i.e., match-all behavior)

Currently it makes sense to set this field to true only if the match==idpRole, match==usermacLabel and edrStatus

nacportalId String

If type==redirectNacportalId, NAC portal ID used for client redirection

name String

Human-readable name of the NAC tag

orgId String

Org identifier that owns the NAC tag

radiusAttrs List<String>

If type==radiusAttrs, standard RADIUS attributes returned by the NAC rule

radiusGroup String

If type==radiusGroup, RADIUS group value returned by the NAC rule

radiusVendorAttrs List<String>

If type==radiusVendorAttrs, vendor-specific RADIUS attributes returned by the NAC rule

sessionTimeout Number

If type==sessionTimeout, session timeout returned by the NAC rule, in seconds

type String

NAC tag type that determines whether the tag is a matcher or a result attribute

usernameAttr String

If type==usernameAttr, attribute used to derive the username returned by the NAC rule

values List<String>

If type==match, attribute values used by the NAC tag matcher

vlan String

If type==vlan, VLAN name or ID returned by the NAC rule

Import

Using pulumi import, import junipermist.org.Nactag with: NAC Tag can be imported by specifying the orgId and the nactagId

$ pulumi import junipermist:org/nactag:Nactag nactag_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: junipermist pulumi/pulumi-junipermist
License: Apache-2.0
Notes: This Pulumi package is based on the mist Terraform Provider.

Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-junipermist

junipermist.org.Nactag

On this page

On this page

Example Usage

Create Nactag Resource

Constructor syntax

Parameters

Constructor example

Nactag Resource Properties

Inputs

Outputs

Look up Existing Nactag Resource

Import

Package Details

On this page

On this page

Try Pulumi Cloud free.
Your team will thank you.

junipermist.org.Nactag

On this page

On this page

Example Usage

Create Nactag Resource

Constructor syntax

Parameters

Constructor example

Nactag Resource Properties

Inputs

Outputs

Look up Existing Nactag Resource

Import

Package Details

On this page

On this page

Try Pulumi Cloud free.Your team will thank you.

Try Pulumi Cloud free.
Your team will thank you.