Viewing docs for Juniper Mist v0.11.1
published on Friday, Jul 10, 2026 by Pulumi
published on Friday, Jul 10, 2026 by Pulumi
Viewing docs for Juniper Mist v0.11.1
published on Friday, Jul 10, 2026 by Pulumi
published on Friday, Jul 10, 2026 by Pulumi
This resource managed the Org Network Templates (Switch templates).
A network template is a predefined configuration that provides a consistent and reusable set of network settings for devices within an organization. It includes various parameters such as ip addressing, vlan configurations, routing protocols, security policies, and other network-specific settings.
Network templates simplify the deployment and management of switches by ensuring consistent configurations across multiple devices and sites. They help enforce standardization, reduce human error, and streamline troubleshooting and maintenance tasks.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as junipermist from "@pulumi/juniper-mist";
const networktemplateOne = new junipermist.org.Networktemplate("networktemplate_one", {
name: "networktemplate_one",
orgId: terraformTest.id,
dnsServers: [
"8.8.8.8",
"1.1.1.1",
],
dnsSuffixes: ["mycorp.com"],
ntpServers: ["pool.ntp.org"],
additionalConfigCmds: [
"set system hostname test",
"set system services ssh root-login allow",
],
networks: {
network_one: {
vlanId: "10",
},
network_two: {
vlanId: "11",
},
},
portUsages: {
trunk: {
allNetworks: true,
enableQos: true,
mode: "port_usage_one",
portNetwork: "network_one",
},
},
radiusConfig: {
acctInterimInterval: 60,
coaEnabled: true,
network: "network_one",
acctServers: [{
host: "1.2.3.4",
secret: "secret",
}],
authServers: [{
host: "1.2.3.4",
secret: "secret",
}],
},
switchMatching: {
enable: true,
rules: [{
name: "switch_rule_one",
matchName: "corp",
matchNameOffset: 3,
matchRole: "core",
portConfig: {
"ge-0/0/0-10": {
usage: "port_usage_one",
},
},
}],
},
});
import pulumi
import pulumi_juniper_mist as junipermist
networktemplate_one = junipermist.org.Networktemplate("networktemplate_one",
name="networktemplate_one",
org_id=terraform_test["id"],
dns_servers=[
"8.8.8.8",
"1.1.1.1",
],
dns_suffixes=["mycorp.com"],
ntp_servers=["pool.ntp.org"],
additional_config_cmds=[
"set system hostname test",
"set system services ssh root-login allow",
],
networks={
"network_one": {
"vlan_id": "10",
},
"network_two": {
"vlan_id": "11",
},
},
port_usages={
"trunk": {
"all_networks": True,
"enable_qos": True,
"mode": "port_usage_one",
"port_network": "network_one",
},
},
radius_config={
"acct_interim_interval": 60,
"coa_enabled": True,
"network": "network_one",
"acct_servers": [{
"host": "1.2.3.4",
"secret": "secret",
}],
"auth_servers": [{
"host": "1.2.3.4",
"secret": "secret",
}],
},
switch_matching={
"enable": True,
"rules": [{
"name": "switch_rule_one",
"match_name": "corp",
"match_name_offset": 3,
"match_role": "core",
"port_config": {
"ge-0/0/0-10": {
"usage": "port_usage_one",
},
},
}],
})
package main
import (
"github.com/pulumi/pulumi-junipermist/sdk/go/junipermist/org"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := org.NewNetworktemplate(ctx, "networktemplate_one", &org.NetworktemplateArgs{
Name: pulumi.String("networktemplate_one"),
OrgId: pulumi.Any(terraformTest.Id),
DnsServers: pulumi.StringArray{
pulumi.String("8.8.8.8"),
pulumi.String("1.1.1.1"),
},
DnsSuffixes: pulumi.StringArray{
pulumi.String("mycorp.com"),
},
NtpServers: pulumi.StringArray{
pulumi.String("pool.ntp.org"),
},
AdditionalConfigCmds: pulumi.StringArray{
pulumi.String("set system hostname test"),
pulumi.String("set system services ssh root-login allow"),
},
Networks: org.NetworktemplateNetworksMap{
"network_one": &org.NetworktemplateNetworksArgs{
VlanId: pulumi.String("10"),
},
"network_two": &org.NetworktemplateNetworksArgs{
VlanId: pulumi.String("11"),
},
},
PortUsages: org.NetworktemplatePortUsagesMap{
"trunk": &org.NetworktemplatePortUsagesArgs{
AllNetworks: pulumi.Bool(true),
EnableQos: pulumi.Bool(true),
Mode: pulumi.String("port_usage_one"),
PortNetwork: pulumi.String("network_one"),
},
},
RadiusConfig: &org.NetworktemplateRadiusConfigArgs{
AcctInterimInterval: pulumi.Int(60),
CoaEnabled: pulumi.Bool(true),
Network: pulumi.String("network_one"),
AcctServers: org.NetworktemplateRadiusConfigAcctServerArray{
&org.NetworktemplateRadiusConfigAcctServerArgs{
Host: pulumi.String("1.2.3.4"),
Secret: pulumi.String("secret"),
},
},
AuthServers: org.NetworktemplateRadiusConfigAuthServerArray{
&org.NetworktemplateRadiusConfigAuthServerArgs{
Host: pulumi.String("1.2.3.4"),
Secret: pulumi.String("secret"),
},
},
},
SwitchMatching: &org.NetworktemplateSwitchMatchingArgs{
Enable: pulumi.Bool(true),
Rules: org.NetworktemplateSwitchMatchingRuleArray{
&org.NetworktemplateSwitchMatchingRuleArgs{
Name: pulumi.String("switch_rule_one"),
MatchName: pulumi.String("corp"),
MatchNameOffset: pulumi.Int(3),
MatchRole: pulumi.String("core"),
PortConfig: org.NetworktemplateSwitchMatchingRulePortConfigMap{
"ge-0/0/0-10": &org.NetworktemplateSwitchMatchingRulePortConfigArgs{
Usage: pulumi.String("port_usage_one"),
},
},
},
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using JuniperMist = Pulumi.JuniperMist;
return await Deployment.RunAsync(() =>
{
var networktemplateOne = new JuniperMist.Org.Networktemplate("networktemplate_one", new()
{
Name = "networktemplate_one",
OrgId = terraformTest.Id,
DnsServers = new[]
{
"8.8.8.8",
"1.1.1.1",
},
DnsSuffixes = new[]
{
"mycorp.com",
},
NtpServers = new[]
{
"pool.ntp.org",
},
AdditionalConfigCmds = new[]
{
"set system hostname test",
"set system services ssh root-login allow",
},
Networks =
{
{ "network_one", new JuniperMist.Org.Inputs.NetworktemplateNetworksArgs
{
VlanId = "10",
} },
{ "network_two", new JuniperMist.Org.Inputs.NetworktemplateNetworksArgs
{
VlanId = "11",
} },
},
PortUsages =
{
{ "trunk", new JuniperMist.Org.Inputs.NetworktemplatePortUsagesArgs
{
AllNetworks = true,
EnableQos = true,
Mode = "port_usage_one",
PortNetwork = "network_one",
} },
},
RadiusConfig = new JuniperMist.Org.Inputs.NetworktemplateRadiusConfigArgs
{
AcctInterimInterval = 60,
CoaEnabled = true,
Network = "network_one",
AcctServers = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateRadiusConfigAcctServerArgs
{
Host = "1.2.3.4",
Secret = "secret",
},
},
AuthServers = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateRadiusConfigAuthServerArgs
{
Host = "1.2.3.4",
Secret = "secret",
},
},
},
SwitchMatching = new JuniperMist.Org.Inputs.NetworktemplateSwitchMatchingArgs
{
Enable = true,
Rules = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSwitchMatchingRuleArgs
{
Name = "switch_rule_one",
MatchName = "corp",
MatchNameOffset = 3,
MatchRole = "core",
PortConfig =
{
{ "ge-0/0/0-10", new JuniperMist.Org.Inputs.NetworktemplateSwitchMatchingRulePortConfigArgs
{
Usage = "port_usage_one",
} },
},
},
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.org.Networktemplate;
import com.pulumi.junipermist.org.NetworktemplateArgs;
import com.pulumi.junipermist.org.inputs.NetworktemplateNetworksArgs;
import com.pulumi.junipermist.org.inputs.NetworktemplatePortUsagesArgs;
import com.pulumi.junipermist.org.inputs.NetworktemplateRadiusConfigArgs;
import com.pulumi.junipermist.org.inputs.NetworktemplateRadiusConfigAcctServerArgs;
import com.pulumi.junipermist.org.inputs.NetworktemplateRadiusConfigAuthServerArgs;
import com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMatchingArgs;
import com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMatchingRuleArgs;
import com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMatchingRulePortConfigArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var networktemplateOne = new Networktemplate("networktemplateOne", NetworktemplateArgs.builder()
.name("networktemplate_one")
.orgId(terraformTest.id())
.dnsServers(
"8.8.8.8",
"1.1.1.1")
.dnsSuffixes("mycorp.com")
.ntpServers("pool.ntp.org")
.additionalConfigCmds(
"set system hostname test",
"set system services ssh root-login allow")
.networks(Map.ofEntries(
Map.entry("network_one", NetworktemplateNetworksArgs.builder()
.vlanId("10")
.build()),
Map.entry("network_two", NetworktemplateNetworksArgs.builder()
.vlanId("11")
.build())
))
.portUsages(Map.of("trunk", NetworktemplatePortUsagesArgs.builder()
.allNetworks(true)
.enableQos(true)
.mode("port_usage_one")
.portNetwork("network_one")
.build()))
.radiusConfig(NetworktemplateRadiusConfigArgs.builder()
.acctInterimInterval(60)
.coaEnabled(true)
.network("network_one")
.acctServers(NetworktemplateRadiusConfigAcctServerArgs.builder()
.host("1.2.3.4")
.secret("secret")
.build())
.authServers(NetworktemplateRadiusConfigAuthServerArgs.builder()
.host("1.2.3.4")
.secret("secret")
.build())
.build())
.switchMatching(NetworktemplateSwitchMatchingArgs.builder()
.enable(true)
.rules(NetworktemplateSwitchMatchingRuleArgs.builder()
.name("switch_rule_one")
.matchName("corp")
.matchNameOffset(3)
.matchRole("core")
.portConfig(Map.of("ge-0/0/0-10", NetworktemplateSwitchMatchingRulePortConfigArgs.builder()
.usage("port_usage_one")
.build()))
.build())
.build())
.build());
}
}
resources:
networktemplateOne:
type: junipermist:org:Networktemplate
name: networktemplate_one
properties:
name: networktemplate_one
orgId: ${terraformTest.id}
dnsServers:
- 8.8.8.8
- 1.1.1.1
dnsSuffixes:
- mycorp.com
ntpServers:
- pool.ntp.org
additionalConfigCmds:
- set system hostname test
- set system services ssh root-login allow
networks:
network_one:
vlanId: 10
network_two:
vlanId: 11
portUsages:
trunk:
allNetworks: true
enableQos: true
mode: port_usage_one
portNetwork: network_one
radiusConfig:
acctInterimInterval: 60
coaEnabled: true
network: network_one
acctServers:
- host: 1.2.3.4
secret: secret
authServers:
- host: 1.2.3.4
secret: secret
switchMatching:
enable: true
rules:
- name: switch_rule_one
matchName: corp
matchNameOffset: 3
matchRole: core
portConfig:
ge-0/0/0-10:
usage: port_usage_one
pulumi {
required_providers {
junipermist = {
source = "pulumi/junipermist"
}
}
}
resource "junipermist_org_networktemplate" "networktemplate_one" {
name = "networktemplate_one"
org_id = terraformTest.id
dns_servers = ["8.8.8.8", "1.1.1.1"]
dns_suffixes = ["mycorp.com"]
ntp_servers = ["pool.ntp.org"]
additional_config_cmds = ["set system hostname test", "set system services ssh root-login allow"]
networks = {
"network_one" = {
vlan_id = 10
}
"network_two" = {
vlan_id = 11
}
}
port_usages = {
"trunk" = {
all_networks = true
enable_qos = true
mode = "port_usage_one"
port_network = "network_one"
}
}
radius_config = {
acct_interim_interval = 60
coa_enabled = true
network = "network_one"
acct_servers = [{
"host" = "1.2.3.4"
"secret" = "secret"
}]
auth_servers = [{
"host" = "1.2.3.4"
"secret" = "secret"
}]
}
switch_matching = {
enable = true
rules = [{
"name" = "switch_rule_one"
"matchName" = "corp"
"matchNameOffset" = 3
"matchRole" = "core"
"portConfig" = {
"ge-0/0/0-10" = {
"usage" = "port_usage_one"
}
}
}]
}
}
Create Networktemplate Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Networktemplate(name: string, args: NetworktemplateArgs, opts?: CustomResourceOptions);@overload
def Networktemplate(resource_name: str,
args: NetworktemplateArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Networktemplate(resource_name: str,
opts: Optional[ResourceOptions] = None,
org_id: Optional[str] = None,
ntp_servers: Optional[Sequence[str]] = None,
switch_matching: Optional[NetworktemplateSwitchMatchingArgs] = None,
bgp_config: Optional[Mapping[str, NetworktemplateBgpConfigArgs]] = None,
dhcp_snooping: Optional[NetworktemplateDhcpSnoopingArgs] = None,
dns_servers: Optional[Sequence[str]] = None,
dns_suffixes: Optional[Sequence[str]] = None,
extra_routes: Optional[Mapping[str, NetworktemplateExtraRoutesArgs]] = None,
extra_routes6: Optional[Mapping[str, NetworktemplateExtraRoutes6Args]] = None,
mist_nac: Optional[NetworktemplateMistNacArgs] = None,
name: Optional[str] = None,
networks: Optional[Mapping[str, NetworktemplateNetworksArgs]] = None,
acl_policies: Optional[Sequence[NetworktemplateAclPolicyArgs]] = None,
additional_config_cmds: Optional[Sequence[str]] = None,
port_mirroring: Optional[Mapping[str, NetworktemplatePortMirroringArgs]] = None,
acl_tags: Optional[Mapping[str, NetworktemplateAclTagsArgs]] = None,
port_usages: Optional[Mapping[str, NetworktemplatePortUsagesArgs]] = None,
radius_config: Optional[NetworktemplateRadiusConfigArgs] = None,
remote_syslog: Optional[NetworktemplateRemoteSyslogArgs] = None,
remove_existing_configs: Optional[bool] = None,
routing_policies: Optional[Mapping[str, NetworktemplateRoutingPoliciesArgs]] = None,
snmp_config: Optional[NetworktemplateSnmpConfigArgs] = None,
ospf_areas: Optional[Mapping[str, NetworktemplateOspfAreasArgs]] = None,
switch_mgmt: Optional[NetworktemplateSwitchMgmtArgs] = None,
vrf_config: Optional[NetworktemplateVrfConfigArgs] = None,
vrf_instances: Optional[Mapping[str, NetworktemplateVrfInstancesArgs]] = None)func NewNetworktemplate(ctx *Context, name string, args NetworktemplateArgs, opts ...ResourceOption) (*Networktemplate, error)public Networktemplate(string name, NetworktemplateArgs args, CustomResourceOptions? opts = null)
public Networktemplate(String name, NetworktemplateArgs args)
public Networktemplate(String name, NetworktemplateArgs args, CustomResourceOptions options)
type: junipermist:org:Networktemplate
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "junipermist_org_networktemplate" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args NetworktemplateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args NetworktemplateArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args NetworktemplateArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args NetworktemplateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args NetworktemplateArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var networktemplateResource = new JuniperMist.Org.Networktemplate("networktemplateResource", new()
{
OrgId = "string",
NtpServers = new[]
{
"string",
},
SwitchMatching = new JuniperMist.Org.Inputs.NetworktemplateSwitchMatchingArgs
{
Enable = false,
Rules = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSwitchMatchingRuleArgs
{
AdditionalConfigCmds = new[]
{
"string",
},
DefaultPortUsage = "string",
IpConfig = new JuniperMist.Org.Inputs.NetworktemplateSwitchMatchingRuleIpConfigArgs
{
Network = "string",
Type = "string",
},
MatchModel = "string",
MatchName = "string",
MatchNameOffset = 0,
MatchRole = "string",
Name = "string",
OobIpConfig = new JuniperMist.Org.Inputs.NetworktemplateSwitchMatchingRuleOobIpConfigArgs
{
Type = "string",
UseMgmtVrf = false,
UseMgmtVrfForHostOut = false,
},
PortConfig =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateSwitchMatchingRulePortConfigArgs
{
Usage = "string",
DisableAutoneg = false,
Esilag = false,
AeLacpPassive = false,
AeLacpSlow = false,
Aggregated = false,
Critical = false,
Description = "string",
AeDisableLacp = false,
AeLacpForceUp = false,
Duplex = "string",
DynamicUsage = "string",
Mtu = 0,
Networks = new[]
{
"string",
},
NoLocalOverwrite = false,
PoeDisabled = false,
PortNetwork = "string",
Speed = "string",
AeIdx = 0,
} },
},
PortMirroring =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateSwitchMatchingRulePortMirroringArgs
{
InputNetworksIngresses = new[]
{
"string",
},
InputPortIdsEgresses = new[]
{
"string",
},
InputPortIdsIngresses = new[]
{
"string",
},
OutputIpAddress = "string",
OutputNetwork = "string",
OutputPortId = "string",
} },
},
StpConfig = new JuniperMist.Org.Inputs.NetworktemplateSwitchMatchingRuleStpConfigArgs
{
BridgePriority = "string",
},
},
},
},
BgpConfig =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateBgpConfigArgs
{
LocalAs = "string",
Type = "string",
AuthKey = "string",
BfdMinimumInterval = 0,
ExportPolicy = "string",
HoldTime = 0,
ImportPolicy = "string",
Neighbors =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateBgpConfigNeighborsArgs
{
NeighborAs = "string",
ExportPolicy = "string",
HoldTime = 0,
ImportPolicy = "string",
MultihopTtl = 0,
} },
},
Networks = new[]
{
"string",
},
} },
},
DhcpSnooping = new JuniperMist.Org.Inputs.NetworktemplateDhcpSnoopingArgs
{
AllNetworks = false,
EnableArpSpoofCheck = false,
EnableIpSourceGuard = false,
Enabled = false,
Networks = new[]
{
"string",
},
},
DnsServers = new[]
{
"string",
},
DnsSuffixes = new[]
{
"string",
},
ExtraRoutes =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateExtraRoutesArgs
{
Via = "string",
Discard = false,
Metric = 0,
NextQualified =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateExtraRoutesNextQualifiedArgs
{
Metric = 0,
Preference = 0,
} },
},
NoResolve = false,
Preference = 0,
} },
},
ExtraRoutes6 =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateExtraRoutes6Args
{
Via = "string",
Discard = false,
Metric = 0,
NextQualified =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateExtraRoutes6NextQualifiedArgs
{
Metric = 0,
Preference = 0,
} },
},
NoResolve = false,
Preference = 0,
} },
},
MistNac = new JuniperMist.Org.Inputs.NetworktemplateMistNacArgs
{
Enabled = false,
Network = "string",
},
Name = "string",
Networks =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateNetworksArgs
{
VlanId = "string",
Gateway = "string",
Gateway6 = "string",
Isolation = false,
IsolationVlanId = "string",
Subnet = "string",
Subnet6 = "string",
} },
},
AclPolicies = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateAclPolicyArgs
{
Actions = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateAclPolicyActionArgs
{
DstTag = "string",
Action = "string",
},
},
Name = "string",
SrcTags = new[]
{
"string",
},
},
},
AdditionalConfigCmds = new[]
{
"string",
},
PortMirroring =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplatePortMirroringArgs
{
InputNetworksIngresses = new[]
{
"string",
},
InputPortIdsEgresses = new[]
{
"string",
},
InputPortIdsIngresses = new[]
{
"string",
},
OutputIpAddress = "string",
OutputNetwork = "string",
OutputPortId = "string",
} },
},
AclTags =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateAclTagsArgs
{
Type = "string",
EtherTypes = new[]
{
"string",
},
GbpTag = 0,
Macs = new[]
{
"string",
},
Network = "string",
PortUsage = "string",
RadiusGroup = "string",
Specs = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateAclTagsSpecArgs
{
PortRange = "string",
Protocol = "string",
},
},
Subnets = new[]
{
"string",
},
} },
},
PortUsages =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplatePortUsagesArgs
{
AllNetworks = false,
AllowDhcpd = false,
AllowMultipleSupplicants = false,
BypassAuthWhenServerDown = false,
BypassAuthWhenServerDownForUnknownClient = false,
BypassAuthWhenServerDownForVoip = false,
CommunityVlanId = 0,
Description = "string",
DisableAutoneg = false,
Disabled = false,
Duplex = "string",
DynamicVlanNetworks = new[]
{
"string",
},
EnableMacAuth = false,
EnableQos = false,
GuestNetwork = "string",
InterIsolationNetworkLink = false,
InterSwitchLink = false,
MacAuthOnly = false,
MacAuthPreferred = false,
MacAuthProtocol = "string",
MacLimit = "string",
Mode = "string",
Mtu = "string",
Networks = new[]
{
"string",
},
PersistMac = false,
PoeDisabled = false,
PoeKeepStateWhenReboot = false,
PoePriority = "string",
PortAuth = "string",
PortNetwork = "string",
ReauthInterval = "string",
ResetDefaultWhen = "string",
Rules = new[]
{
new JuniperMist.Org.Inputs.NetworktemplatePortUsagesRuleArgs
{
Src = "string",
Description = "string",
Equals = "string",
EqualsAnies = new[]
{
"string",
},
Expression = "string",
Usage = "string",
},
},
ServerFailNetwork = "string",
ServerFailRetryInterval = 0,
ServerRejectNetwork = "string",
Speed = "string",
StormControl = new JuniperMist.Org.Inputs.NetworktemplatePortUsagesStormControlArgs
{
DisablePort = false,
NoBroadcast = false,
NoMulticast = false,
NoRegisteredMulticast = false,
NoUnknownUnicast = false,
Percentage = 0,
},
StpDisable = false,
StpEdge = false,
StpNoRootPort = false,
StpP2p = false,
StpRequired = false,
UiEvpntopoId = "string",
UseVstp = false,
VoipNetwork = "string",
} },
},
RadiusConfig = new JuniperMist.Org.Inputs.NetworktemplateRadiusConfigArgs
{
AcctImmediateUpdate = false,
AcctInterimInterval = 0,
AcctServers = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateRadiusConfigAcctServerArgs
{
Host = "string",
Secret = "string",
KeywrapEnabled = false,
KeywrapFormat = "string",
KeywrapKek = "string",
KeywrapMack = "string",
Port = "string",
},
},
AuthServerSelection = "string",
AuthServers = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateRadiusConfigAuthServerArgs
{
Host = "string",
Secret = "string",
KeywrapEnabled = false,
KeywrapFormat = "string",
KeywrapKek = "string",
KeywrapMack = "string",
Port = "string",
RequireMessageAuthenticator = false,
},
},
AuthServersRetries = 0,
AuthServersTimeout = 0,
CoaEnabled = false,
CoaPort = "string",
FastDot1xTimers = false,
Network = "string",
SourceIp = "string",
},
RemoteSyslog = new JuniperMist.Org.Inputs.NetworktemplateRemoteSyslogArgs
{
Archive = new JuniperMist.Org.Inputs.NetworktemplateRemoteSyslogArchiveArgs
{
Files = "string",
Size = "string",
},
Cacerts = new[]
{
"string",
},
Console = new JuniperMist.Org.Inputs.NetworktemplateRemoteSyslogConsoleArgs
{
Contents = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateRemoteSyslogConsoleContentArgs
{
Facility = "string",
Severity = "string",
},
},
},
Enabled = false,
Files = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateRemoteSyslogFileArgs
{
Archive = new JuniperMist.Org.Inputs.NetworktemplateRemoteSyslogFileArchiveArgs
{
Files = "string",
Size = "string",
},
Contents = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateRemoteSyslogFileContentArgs
{
Facility = "string",
Severity = "string",
},
},
EnableTls = false,
ExplicitPriority = false,
File = "string",
Match = "string",
StructuredData = false,
},
},
Network = "string",
SendToAllServers = false,
Servers = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateRemoteSyslogServerArgs
{
Contents = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateRemoteSyslogServerContentArgs
{
Facility = "string",
Severity = "string",
},
},
ExplicitPriority = false,
Facility = "string",
Host = "string",
Match = "string",
Port = "string",
Protocol = "string",
RoutingInstance = "string",
ServerName = "string",
Severity = "string",
SourceAddress = "string",
StructuredData = false,
Tag = "string",
},
},
TimeFormat = "string",
Users = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateRemoteSyslogUserArgs
{
Contents = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateRemoteSyslogUserContentArgs
{
Facility = "string",
Severity = "string",
},
},
Match = "string",
User = "string",
},
},
},
RemoveExistingConfigs = false,
RoutingPolicies =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateRoutingPoliciesArgs
{
Terms = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateRoutingPoliciesTermArgs
{
Name = "string",
Actions = new JuniperMist.Org.Inputs.NetworktemplateRoutingPoliciesTermActionsArgs
{
Accept = false,
Communities = new[]
{
"string",
},
LocalPreference = "string",
PrependAsPaths = new[]
{
"string",
},
},
Matching = new JuniperMist.Org.Inputs.NetworktemplateRoutingPoliciesTermMatchingArgs
{
AsPaths = new[]
{
"string",
},
Communities = new[]
{
"string",
},
Prefixes = new[]
{
"string",
},
Protocols = new[]
{
"string",
},
},
},
},
} },
},
SnmpConfig = new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigArgs
{
ClientLists = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigClientListArgs
{
ClientListName = "string",
Clients = new[]
{
"string",
},
},
},
Contact = "string",
Description = "string",
Enabled = false,
EngineId = "string",
EngineIdType = "string",
Location = "string",
Name = "string",
Network = "string",
TrapGroups = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigTrapGroupArgs
{
Categories = new[]
{
"string",
},
GroupName = "string",
Targets = new[]
{
"string",
},
Version = "string",
},
},
V2cConfigs = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigV2cConfigArgs
{
Authorization = "string",
ClientListName = "string",
CommunityName = "string",
View = "string",
},
},
V3Config = new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigV3ConfigArgs
{
Notifies = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigV3ConfigNotifyArgs
{
Name = "string",
Tag = "string",
Type = "string",
},
},
NotifyFilters = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigV3ConfigNotifyFilterArgs
{
Contents = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArgs
{
Oid = "string",
Include = false,
},
},
ProfileName = "string",
},
},
TargetAddresses = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigV3ConfigTargetAddressArgs
{
Address = "string",
AddressMask = "string",
TargetAddressName = "string",
Port = "string",
TagList = "string",
TargetParameters = "string",
},
},
TargetParameters = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigV3ConfigTargetParameterArgs
{
MessageProcessingModel = "string",
Name = "string",
NotifyFilter = "string",
SecurityLevel = "string",
SecurityModel = "string",
SecurityName = "string",
},
},
Usms = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigV3ConfigUsmArgs
{
EngineType = "string",
RemoteEngineId = "string",
Users = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigV3ConfigUsmUserArgs
{
AuthenticationPassword = "string",
AuthenticationType = "string",
EncryptionPassword = "string",
EncryptionType = "string",
Name = "string",
},
},
},
},
Vacm = new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigV3ConfigVacmArgs
{
Accesses = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigV3ConfigVacmAccessArgs
{
GroupName = "string",
PrefixLists = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArgs
{
ContextPrefix = "string",
NotifyView = "string",
ReadView = "string",
SecurityLevel = "string",
SecurityModel = "string",
Type = "string",
WriteView = "string",
},
},
},
},
SecurityToGroup = new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupArgs
{
Contents = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArgs
{
Group = "string",
SecurityName = "string",
},
},
SecurityModel = "string",
},
},
},
Views = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSnmpConfigViewArgs
{
Include = false,
Oid = "string",
ViewName = "string",
},
},
},
OspfAreas =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateOspfAreasArgs
{
Networks =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateOspfAreasNetworksArgs
{
AuthKeys =
{
{ "string", "string" },
},
AuthPassword = "string",
AuthType = "string",
BfdMinimumInterval = 0,
DeadInterval = 0,
ExportPolicy = "string",
HelloInterval = 0,
ImportPolicy = "string",
InterfaceType = "string",
Metric = 0,
NoReadvertiseToOverlay = false,
Passive = false,
} },
},
IncludeLoopback = false,
Type = "string",
} },
},
SwitchMgmt = new JuniperMist.Org.Inputs.NetworktemplateSwitchMgmtArgs
{
ApAffinityThreshold = 0,
CliBanner = "string",
CliIdleTimeout = 0,
ConfigRevertTimer = 0,
DhcpOptionFqdn = false,
DisableOobDownAlarm = false,
FipsEnabled = false,
LocalAccounts =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateSwitchMgmtLocalAccountsArgs
{
Password = "string",
Role = "string",
} },
},
MxedgeProxyHost = "string",
MxedgeProxyPort = "string",
ProtectRe = new JuniperMist.Org.Inputs.NetworktemplateSwitchMgmtProtectReArgs
{
AllowedServices = new[]
{
"string",
},
Customs = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSwitchMgmtProtectReCustomArgs
{
Subnets = new[]
{
"string",
},
PortRange = "string",
Protocol = "string",
},
},
Enabled = false,
HitCount = false,
TrustedHosts = new[]
{
"string",
},
},
RemoveExistingConfigs = false,
RootPassword = "string",
Tacacs = new JuniperMist.Org.Inputs.NetworktemplateSwitchMgmtTacacsArgs
{
AcctServers = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSwitchMgmtTacacsAcctServerArgs
{
Host = "string",
Port = "string",
Secret = "string",
Timeout = 0,
},
},
DefaultRole = "string",
Enabled = false,
Network = "string",
TacplusServers = new[]
{
new JuniperMist.Org.Inputs.NetworktemplateSwitchMgmtTacacsTacplusServerArgs
{
Host = "string",
Port = "string",
Secret = "string",
Timeout = 0,
},
},
},
UseMxedgeProxy = false,
},
VrfConfig = new JuniperMist.Org.Inputs.NetworktemplateVrfConfigArgs
{
Enabled = false,
},
VrfInstances =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateVrfInstancesArgs
{
EvpnAutoLoopbackSubnet = "string",
EvpnAutoLoopbackSubnet6 = "string",
ExtraRoutes =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateVrfInstancesExtraRoutesArgs
{
Via = "string",
} },
},
ExtraRoutes6 =
{
{ "string", new JuniperMist.Org.Inputs.NetworktemplateVrfInstancesExtraRoutes6Args
{
Via = "string",
} },
},
Networks = new[]
{
"string",
},
} },
},
});
example, err := org.NewNetworktemplate(ctx, "networktemplateResource", &org.NetworktemplateArgs{
OrgId: pulumi.String("string"),
NtpServers: pulumi.StringArray{
pulumi.String("string"),
},
SwitchMatching: &org.NetworktemplateSwitchMatchingArgs{
Enable: pulumi.Bool(false),
Rules: org.NetworktemplateSwitchMatchingRuleArray{
&org.NetworktemplateSwitchMatchingRuleArgs{
AdditionalConfigCmds: pulumi.StringArray{
pulumi.String("string"),
},
DefaultPortUsage: pulumi.String("string"),
IpConfig: &org.NetworktemplateSwitchMatchingRuleIpConfigArgs{
Network: pulumi.String("string"),
Type: pulumi.String("string"),
},
MatchModel: pulumi.String("string"),
MatchName: pulumi.String("string"),
MatchNameOffset: pulumi.Int(0),
MatchRole: pulumi.String("string"),
Name: pulumi.String("string"),
OobIpConfig: &org.NetworktemplateSwitchMatchingRuleOobIpConfigArgs{
Type: pulumi.String("string"),
UseMgmtVrf: pulumi.Bool(false),
UseMgmtVrfForHostOut: pulumi.Bool(false),
},
PortConfig: org.NetworktemplateSwitchMatchingRulePortConfigMap{
"string": &org.NetworktemplateSwitchMatchingRulePortConfigArgs{
Usage: pulumi.String("string"),
DisableAutoneg: pulumi.Bool(false),
Esilag: pulumi.Bool(false),
AeLacpPassive: pulumi.Bool(false),
AeLacpSlow: pulumi.Bool(false),
Aggregated: pulumi.Bool(false),
Critical: pulumi.Bool(false),
Description: pulumi.String("string"),
AeDisableLacp: pulumi.Bool(false),
AeLacpForceUp: pulumi.Bool(false),
Duplex: pulumi.String("string"),
DynamicUsage: pulumi.String("string"),
Mtu: pulumi.Int(0),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
NoLocalOverwrite: pulumi.Bool(false),
PoeDisabled: pulumi.Bool(false),
PortNetwork: pulumi.String("string"),
Speed: pulumi.String("string"),
AeIdx: pulumi.Int(0),
},
},
PortMirroring: org.NetworktemplateSwitchMatchingRulePortMirroringMap{
"string": &org.NetworktemplateSwitchMatchingRulePortMirroringArgs{
InputNetworksIngresses: pulumi.StringArray{
pulumi.String("string"),
},
InputPortIdsEgresses: pulumi.StringArray{
pulumi.String("string"),
},
InputPortIdsIngresses: pulumi.StringArray{
pulumi.String("string"),
},
OutputIpAddress: pulumi.String("string"),
OutputNetwork: pulumi.String("string"),
OutputPortId: pulumi.String("string"),
},
},
StpConfig: &org.NetworktemplateSwitchMatchingRuleStpConfigArgs{
BridgePriority: pulumi.String("string"),
},
},
},
},
BgpConfig: org.NetworktemplateBgpConfigMap{
"string": &org.NetworktemplateBgpConfigArgs{
LocalAs: pulumi.String("string"),
Type: pulumi.String("string"),
AuthKey: pulumi.String("string"),
BfdMinimumInterval: pulumi.Int(0),
ExportPolicy: pulumi.String("string"),
HoldTime: pulumi.Int(0),
ImportPolicy: pulumi.String("string"),
Neighbors: org.NetworktemplateBgpConfigNeighborsMap{
"string": &org.NetworktemplateBgpConfigNeighborsArgs{
NeighborAs: pulumi.String("string"),
ExportPolicy: pulumi.String("string"),
HoldTime: pulumi.Int(0),
ImportPolicy: pulumi.String("string"),
MultihopTtl: pulumi.Int(0),
},
},
Networks: pulumi.StringArray{
pulumi.String("string"),
},
},
},
DhcpSnooping: &org.NetworktemplateDhcpSnoopingArgs{
AllNetworks: pulumi.Bool(false),
EnableArpSpoofCheck: pulumi.Bool(false),
EnableIpSourceGuard: pulumi.Bool(false),
Enabled: pulumi.Bool(false),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
},
DnsServers: pulumi.StringArray{
pulumi.String("string"),
},
DnsSuffixes: pulumi.StringArray{
pulumi.String("string"),
},
ExtraRoutes: org.NetworktemplateExtraRoutesMap{
"string": &org.NetworktemplateExtraRoutesArgs{
Via: pulumi.String("string"),
Discard: pulumi.Bool(false),
Metric: pulumi.Int(0),
NextQualified: org.NetworktemplateExtraRoutesNextQualifiedMap{
"string": &org.NetworktemplateExtraRoutesNextQualifiedArgs{
Metric: pulumi.Int(0),
Preference: pulumi.Int(0),
},
},
NoResolve: pulumi.Bool(false),
Preference: pulumi.Int(0),
},
},
ExtraRoutes6: org.NetworktemplateExtraRoutes6Map{
"string": &org.NetworktemplateExtraRoutes6Args{
Via: pulumi.String("string"),
Discard: pulumi.Bool(false),
Metric: pulumi.Int(0),
NextQualified: org.NetworktemplateExtraRoutes6NextQualifiedMap{
"string": &org.NetworktemplateExtraRoutes6NextQualifiedArgs{
Metric: pulumi.Int(0),
Preference: pulumi.Int(0),
},
},
NoResolve: pulumi.Bool(false),
Preference: pulumi.Int(0),
},
},
MistNac: &org.NetworktemplateMistNacArgs{
Enabled: pulumi.Bool(false),
Network: pulumi.String("string"),
},
Name: pulumi.String("string"),
Networks: org.NetworktemplateNetworksMap{
"string": &org.NetworktemplateNetworksArgs{
VlanId: pulumi.String("string"),
Gateway: pulumi.String("string"),
Gateway6: pulumi.String("string"),
Isolation: pulumi.Bool(false),
IsolationVlanId: pulumi.String("string"),
Subnet: pulumi.String("string"),
Subnet6: pulumi.String("string"),
},
},
AclPolicies: org.NetworktemplateAclPolicyArray{
&org.NetworktemplateAclPolicyArgs{
Actions: org.NetworktemplateAclPolicyActionArray{
&org.NetworktemplateAclPolicyActionArgs{
DstTag: pulumi.String("string"),
Action: pulumi.String("string"),
},
},
Name: pulumi.String("string"),
SrcTags: pulumi.StringArray{
pulumi.String("string"),
},
},
},
AdditionalConfigCmds: pulumi.StringArray{
pulumi.String("string"),
},
PortMirroring: org.NetworktemplatePortMirroringMap{
"string": &org.NetworktemplatePortMirroringArgs{
InputNetworksIngresses: pulumi.StringArray{
pulumi.String("string"),
},
InputPortIdsEgresses: pulumi.StringArray{
pulumi.String("string"),
},
InputPortIdsIngresses: pulumi.StringArray{
pulumi.String("string"),
},
OutputIpAddress: pulumi.String("string"),
OutputNetwork: pulumi.String("string"),
OutputPortId: pulumi.String("string"),
},
},
AclTags: org.NetworktemplateAclTagsMap{
"string": &org.NetworktemplateAclTagsArgs{
Type: pulumi.String("string"),
EtherTypes: pulumi.StringArray{
pulumi.String("string"),
},
GbpTag: pulumi.Int(0),
Macs: pulumi.StringArray{
pulumi.String("string"),
},
Network: pulumi.String("string"),
PortUsage: pulumi.String("string"),
RadiusGroup: pulumi.String("string"),
Specs: org.NetworktemplateAclTagsSpecArray{
&org.NetworktemplateAclTagsSpecArgs{
PortRange: pulumi.String("string"),
Protocol: pulumi.String("string"),
},
},
Subnets: pulumi.StringArray{
pulumi.String("string"),
},
},
},
PortUsages: org.NetworktemplatePortUsagesMap{
"string": &org.NetworktemplatePortUsagesArgs{
AllNetworks: pulumi.Bool(false),
AllowDhcpd: pulumi.Bool(false),
AllowMultipleSupplicants: pulumi.Bool(false),
BypassAuthWhenServerDown: pulumi.Bool(false),
BypassAuthWhenServerDownForUnknownClient: pulumi.Bool(false),
BypassAuthWhenServerDownForVoip: pulumi.Bool(false),
CommunityVlanId: pulumi.Int(0),
Description: pulumi.String("string"),
DisableAutoneg: pulumi.Bool(false),
Disabled: pulumi.Bool(false),
Duplex: pulumi.String("string"),
DynamicVlanNetworks: pulumi.StringArray{
pulumi.String("string"),
},
EnableMacAuth: pulumi.Bool(false),
EnableQos: pulumi.Bool(false),
GuestNetwork: pulumi.String("string"),
InterIsolationNetworkLink: pulumi.Bool(false),
InterSwitchLink: pulumi.Bool(false),
MacAuthOnly: pulumi.Bool(false),
MacAuthPreferred: pulumi.Bool(false),
MacAuthProtocol: pulumi.String("string"),
MacLimit: pulumi.String("string"),
Mode: pulumi.String("string"),
Mtu: pulumi.String("string"),
Networks: pulumi.StringArray{
pulumi.String("string"),
},
PersistMac: pulumi.Bool(false),
PoeDisabled: pulumi.Bool(false),
PoeKeepStateWhenReboot: pulumi.Bool(false),
PoePriority: pulumi.String("string"),
PortAuth: pulumi.String("string"),
PortNetwork: pulumi.String("string"),
ReauthInterval: pulumi.String("string"),
ResetDefaultWhen: pulumi.String("string"),
Rules: org.NetworktemplatePortUsagesRuleArray{
&org.NetworktemplatePortUsagesRuleArgs{
Src: pulumi.String("string"),
Description: pulumi.String("string"),
Equals: pulumi.String("string"),
EqualsAnies: pulumi.StringArray{
pulumi.String("string"),
},
Expression: pulumi.String("string"),
Usage: pulumi.String("string"),
},
},
ServerFailNetwork: pulumi.String("string"),
ServerFailRetryInterval: pulumi.Int(0),
ServerRejectNetwork: pulumi.String("string"),
Speed: pulumi.String("string"),
StormControl: &org.NetworktemplatePortUsagesStormControlArgs{
DisablePort: pulumi.Bool(false),
NoBroadcast: pulumi.Bool(false),
NoMulticast: pulumi.Bool(false),
NoRegisteredMulticast: pulumi.Bool(false),
NoUnknownUnicast: pulumi.Bool(false),
Percentage: pulumi.Int(0),
},
StpDisable: pulumi.Bool(false),
StpEdge: pulumi.Bool(false),
StpNoRootPort: pulumi.Bool(false),
StpP2p: pulumi.Bool(false),
StpRequired: pulumi.Bool(false),
UiEvpntopoId: pulumi.String("string"),
UseVstp: pulumi.Bool(false),
VoipNetwork: pulumi.String("string"),
},
},
RadiusConfig: &org.NetworktemplateRadiusConfigArgs{
AcctImmediateUpdate: pulumi.Bool(false),
AcctInterimInterval: pulumi.Int(0),
AcctServers: org.NetworktemplateRadiusConfigAcctServerArray{
&org.NetworktemplateRadiusConfigAcctServerArgs{
Host: pulumi.String("string"),
Secret: pulumi.String("string"),
KeywrapEnabled: pulumi.Bool(false),
KeywrapFormat: pulumi.String("string"),
KeywrapKek: pulumi.String("string"),
KeywrapMack: pulumi.String("string"),
Port: pulumi.String("string"),
},
},
AuthServerSelection: pulumi.String("string"),
AuthServers: org.NetworktemplateRadiusConfigAuthServerArray{
&org.NetworktemplateRadiusConfigAuthServerArgs{
Host: pulumi.String("string"),
Secret: pulumi.String("string"),
KeywrapEnabled: pulumi.Bool(false),
KeywrapFormat: pulumi.String("string"),
KeywrapKek: pulumi.String("string"),
KeywrapMack: pulumi.String("string"),
Port: pulumi.String("string"),
RequireMessageAuthenticator: pulumi.Bool(false),
},
},
AuthServersRetries: pulumi.Int(0),
AuthServersTimeout: pulumi.Int(0),
CoaEnabled: pulumi.Bool(false),
CoaPort: pulumi.String("string"),
FastDot1xTimers: pulumi.Bool(false),
Network: pulumi.String("string"),
SourceIp: pulumi.String("string"),
},
RemoteSyslog: &org.NetworktemplateRemoteSyslogArgs{
Archive: &org.NetworktemplateRemoteSyslogArchiveArgs{
Files: pulumi.String("string"),
Size: pulumi.String("string"),
},
Cacerts: pulumi.StringArray{
pulumi.String("string"),
},
Console: &org.NetworktemplateRemoteSyslogConsoleArgs{
Contents: org.NetworktemplateRemoteSyslogConsoleContentArray{
&org.NetworktemplateRemoteSyslogConsoleContentArgs{
Facility: pulumi.String("string"),
Severity: pulumi.String("string"),
},
},
},
Enabled: pulumi.Bool(false),
Files: org.NetworktemplateRemoteSyslogFileArray{
&org.NetworktemplateRemoteSyslogFileArgs{
Archive: &org.NetworktemplateRemoteSyslogFileArchiveArgs{
Files: pulumi.String("string"),
Size: pulumi.String("string"),
},
Contents: org.NetworktemplateRemoteSyslogFileContentArray{
&org.NetworktemplateRemoteSyslogFileContentArgs{
Facility: pulumi.String("string"),
Severity: pulumi.String("string"),
},
},
EnableTls: pulumi.Bool(false),
ExplicitPriority: pulumi.Bool(false),
File: pulumi.String("string"),
Match: pulumi.String("string"),
StructuredData: pulumi.Bool(false),
},
},
Network: pulumi.String("string"),
SendToAllServers: pulumi.Bool(false),
Servers: org.NetworktemplateRemoteSyslogServerArray{
&org.NetworktemplateRemoteSyslogServerArgs{
Contents: org.NetworktemplateRemoteSyslogServerContentArray{
&org.NetworktemplateRemoteSyslogServerContentArgs{
Facility: pulumi.String("string"),
Severity: pulumi.String("string"),
},
},
ExplicitPriority: pulumi.Bool(false),
Facility: pulumi.String("string"),
Host: pulumi.String("string"),
Match: pulumi.String("string"),
Port: pulumi.String("string"),
Protocol: pulumi.String("string"),
RoutingInstance: pulumi.String("string"),
ServerName: pulumi.String("string"),
Severity: pulumi.String("string"),
SourceAddress: pulumi.String("string"),
StructuredData: pulumi.Bool(false),
Tag: pulumi.String("string"),
},
},
TimeFormat: pulumi.String("string"),
Users: org.NetworktemplateRemoteSyslogUserArray{
&org.NetworktemplateRemoteSyslogUserArgs{
Contents: org.NetworktemplateRemoteSyslogUserContentArray{
&org.NetworktemplateRemoteSyslogUserContentArgs{
Facility: pulumi.String("string"),
Severity: pulumi.String("string"),
},
},
Match: pulumi.String("string"),
User: pulumi.String("string"),
},
},
},
RemoveExistingConfigs: pulumi.Bool(false),
RoutingPolicies: org.NetworktemplateRoutingPoliciesMap{
"string": &org.NetworktemplateRoutingPoliciesArgs{
Terms: org.NetworktemplateRoutingPoliciesTermArray{
&org.NetworktemplateRoutingPoliciesTermArgs{
Name: pulumi.String("string"),
Actions: &org.NetworktemplateRoutingPoliciesTermActionsArgs{
Accept: pulumi.Bool(false),
Communities: pulumi.StringArray{
pulumi.String("string"),
},
LocalPreference: pulumi.String("string"),
PrependAsPaths: pulumi.StringArray{
pulumi.String("string"),
},
},
Matching: &org.NetworktemplateRoutingPoliciesTermMatchingArgs{
AsPaths: pulumi.StringArray{
pulumi.String("string"),
},
Communities: pulumi.StringArray{
pulumi.String("string"),
},
Prefixes: pulumi.StringArray{
pulumi.String("string"),
},
Protocols: pulumi.StringArray{
pulumi.String("string"),
},
},
},
},
},
},
SnmpConfig: &org.NetworktemplateSnmpConfigArgs{
ClientLists: org.NetworktemplateSnmpConfigClientListArray{
&org.NetworktemplateSnmpConfigClientListArgs{
ClientListName: pulumi.String("string"),
Clients: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Contact: pulumi.String("string"),
Description: pulumi.String("string"),
Enabled: pulumi.Bool(false),
EngineId: pulumi.String("string"),
EngineIdType: pulumi.String("string"),
Location: pulumi.String("string"),
Name: pulumi.String("string"),
Network: pulumi.String("string"),
TrapGroups: org.NetworktemplateSnmpConfigTrapGroupArray{
&org.NetworktemplateSnmpConfigTrapGroupArgs{
Categories: pulumi.StringArray{
pulumi.String("string"),
},
GroupName: pulumi.String("string"),
Targets: pulumi.StringArray{
pulumi.String("string"),
},
Version: pulumi.String("string"),
},
},
V2cConfigs: org.NetworktemplateSnmpConfigV2cConfigArray{
&org.NetworktemplateSnmpConfigV2cConfigArgs{
Authorization: pulumi.String("string"),
ClientListName: pulumi.String("string"),
CommunityName: pulumi.String("string"),
View: pulumi.String("string"),
},
},
V3Config: &org.NetworktemplateSnmpConfigV3ConfigArgs{
Notifies: org.NetworktemplateSnmpConfigV3ConfigNotifyArray{
&org.NetworktemplateSnmpConfigV3ConfigNotifyArgs{
Name: pulumi.String("string"),
Tag: pulumi.String("string"),
Type: pulumi.String("string"),
},
},
NotifyFilters: org.NetworktemplateSnmpConfigV3ConfigNotifyFilterArray{
&org.NetworktemplateSnmpConfigV3ConfigNotifyFilterArgs{
Contents: org.NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArray{
&org.NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArgs{
Oid: pulumi.String("string"),
Include: pulumi.Bool(false),
},
},
ProfileName: pulumi.String("string"),
},
},
TargetAddresses: org.NetworktemplateSnmpConfigV3ConfigTargetAddressArray{
&org.NetworktemplateSnmpConfigV3ConfigTargetAddressArgs{
Address: pulumi.String("string"),
AddressMask: pulumi.String("string"),
TargetAddressName: pulumi.String("string"),
Port: pulumi.String("string"),
TagList: pulumi.String("string"),
TargetParameters: pulumi.String("string"),
},
},
TargetParameters: org.NetworktemplateSnmpConfigV3ConfigTargetParameterArray{
&org.NetworktemplateSnmpConfigV3ConfigTargetParameterArgs{
MessageProcessingModel: pulumi.String("string"),
Name: pulumi.String("string"),
NotifyFilter: pulumi.String("string"),
SecurityLevel: pulumi.String("string"),
SecurityModel: pulumi.String("string"),
SecurityName: pulumi.String("string"),
},
},
Usms: org.NetworktemplateSnmpConfigV3ConfigUsmArray{
&org.NetworktemplateSnmpConfigV3ConfigUsmArgs{
EngineType: pulumi.String("string"),
RemoteEngineId: pulumi.String("string"),
Users: org.NetworktemplateSnmpConfigV3ConfigUsmUserArray{
&org.NetworktemplateSnmpConfigV3ConfigUsmUserArgs{
AuthenticationPassword: pulumi.String("string"),
AuthenticationType: pulumi.String("string"),
EncryptionPassword: pulumi.String("string"),
EncryptionType: pulumi.String("string"),
Name: pulumi.String("string"),
},
},
},
},
Vacm: &org.NetworktemplateSnmpConfigV3ConfigVacmArgs{
Accesses: org.NetworktemplateSnmpConfigV3ConfigVacmAccessArray{
&org.NetworktemplateSnmpConfigV3ConfigVacmAccessArgs{
GroupName: pulumi.String("string"),
PrefixLists: org.NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArray{
&org.NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArgs{
ContextPrefix: pulumi.String("string"),
NotifyView: pulumi.String("string"),
ReadView: pulumi.String("string"),
SecurityLevel: pulumi.String("string"),
SecurityModel: pulumi.String("string"),
Type: pulumi.String("string"),
WriteView: pulumi.String("string"),
},
},
},
},
SecurityToGroup: &org.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupArgs{
Contents: org.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArray{
&org.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArgs{
Group: pulumi.String("string"),
SecurityName: pulumi.String("string"),
},
},
SecurityModel: pulumi.String("string"),
},
},
},
Views: org.NetworktemplateSnmpConfigViewArray{
&org.NetworktemplateSnmpConfigViewArgs{
Include: pulumi.Bool(false),
Oid: pulumi.String("string"),
ViewName: pulumi.String("string"),
},
},
},
OspfAreas: org.NetworktemplateOspfAreasMap{
"string": &org.NetworktemplateOspfAreasArgs{
Networks: org.NetworktemplateOspfAreasNetworksMap{
"string": &org.NetworktemplateOspfAreasNetworksArgs{
AuthKeys: pulumi.StringMap{
"string": pulumi.String("string"),
},
AuthPassword: pulumi.String("string"),
AuthType: pulumi.String("string"),
BfdMinimumInterval: pulumi.Int(0),
DeadInterval: pulumi.Int(0),
ExportPolicy: pulumi.String("string"),
HelloInterval: pulumi.Int(0),
ImportPolicy: pulumi.String("string"),
InterfaceType: pulumi.String("string"),
Metric: pulumi.Int(0),
NoReadvertiseToOverlay: pulumi.Bool(false),
Passive: pulumi.Bool(false),
},
},
IncludeLoopback: pulumi.Bool(false),
Type: pulumi.String("string"),
},
},
SwitchMgmt: &org.NetworktemplateSwitchMgmtArgs{
ApAffinityThreshold: pulumi.Int(0),
CliBanner: pulumi.String("string"),
CliIdleTimeout: pulumi.Int(0),
ConfigRevertTimer: pulumi.Int(0),
DhcpOptionFqdn: pulumi.Bool(false),
DisableOobDownAlarm: pulumi.Bool(false),
FipsEnabled: pulumi.Bool(false),
LocalAccounts: org.NetworktemplateSwitchMgmtLocalAccountsMap{
"string": &org.NetworktemplateSwitchMgmtLocalAccountsArgs{
Password: pulumi.String("string"),
Role: pulumi.String("string"),
},
},
MxedgeProxyHost: pulumi.String("string"),
MxedgeProxyPort: pulumi.String("string"),
ProtectRe: &org.NetworktemplateSwitchMgmtProtectReArgs{
AllowedServices: pulumi.StringArray{
pulumi.String("string"),
},
Customs: org.NetworktemplateSwitchMgmtProtectReCustomArray{
&org.NetworktemplateSwitchMgmtProtectReCustomArgs{
Subnets: pulumi.StringArray{
pulumi.String("string"),
},
PortRange: pulumi.String("string"),
Protocol: pulumi.String("string"),
},
},
Enabled: pulumi.Bool(false),
HitCount: pulumi.Bool(false),
TrustedHosts: pulumi.StringArray{
pulumi.String("string"),
},
},
RemoveExistingConfigs: pulumi.Bool(false),
RootPassword: pulumi.String("string"),
Tacacs: &org.NetworktemplateSwitchMgmtTacacsArgs{
AcctServers: org.NetworktemplateSwitchMgmtTacacsAcctServerArray{
&org.NetworktemplateSwitchMgmtTacacsAcctServerArgs{
Host: pulumi.String("string"),
Port: pulumi.String("string"),
Secret: pulumi.String("string"),
Timeout: pulumi.Int(0),
},
},
DefaultRole: pulumi.String("string"),
Enabled: pulumi.Bool(false),
Network: pulumi.String("string"),
TacplusServers: org.NetworktemplateSwitchMgmtTacacsTacplusServerArray{
&org.NetworktemplateSwitchMgmtTacacsTacplusServerArgs{
Host: pulumi.String("string"),
Port: pulumi.String("string"),
Secret: pulumi.String("string"),
Timeout: pulumi.Int(0),
},
},
},
UseMxedgeProxy: pulumi.Bool(false),
},
VrfConfig: &org.NetworktemplateVrfConfigArgs{
Enabled: pulumi.Bool(false),
},
VrfInstances: org.NetworktemplateVrfInstancesMap{
"string": &org.NetworktemplateVrfInstancesArgs{
EvpnAutoLoopbackSubnet: pulumi.String("string"),
EvpnAutoLoopbackSubnet6: pulumi.String("string"),
ExtraRoutes: org.NetworktemplateVrfInstancesExtraRoutesMap{
"string": &org.NetworktemplateVrfInstancesExtraRoutesArgs{
Via: pulumi.String("string"),
},
},
ExtraRoutes6: org.NetworktemplateVrfInstancesExtraRoutes6Map{
"string": &org.NetworktemplateVrfInstancesExtraRoutes6Args{
Via: pulumi.String("string"),
},
},
Networks: pulumi.StringArray{
pulumi.String("string"),
},
},
},
})
resource "junipermist_org_networktemplate" "networktemplateResource" {
org_id = "string"
ntp_servers = ["string"]
switch_matching = {
enable = false
rules = [{
"additionalConfigCmds" = ["string"]
"defaultPortUsage" = "string"
"ipConfig" = {
"network" = "string"
"type" = "string"
}
"matchModel" = "string"
"matchName" = "string"
"matchNameOffset" = 0
"matchRole" = "string"
"name" = "string"
"oobIpConfig" = {
"type" = "string"
"useMgmtVrf" = false
"useMgmtVrfForHostOut" = false
}
"portConfig" = {
"string" = {
"usage" = "string"
"disableAutoneg" = false
"esilag" = false
"aeLacpPassive" = false
"aeLacpSlow" = false
"aggregated" = false
"critical" = false
"description" = "string"
"aeDisableLacp" = false
"aeLacpForceUp" = false
"duplex" = "string"
"dynamicUsage" = "string"
"mtu" = 0
"networks" = ["string"]
"noLocalOverwrite" = false
"poeDisabled" = false
"portNetwork" = "string"
"speed" = "string"
"aeIdx" = 0
}
}
"portMirroring" = {
"string" = {
"inputNetworksIngresses" = ["string"]
"inputPortIdsEgresses" = ["string"]
"inputPortIdsIngresses" = ["string"]
"outputIpAddress" = "string"
"outputNetwork" = "string"
"outputPortId" = "string"
}
}
"stpConfig" = {
"bridgePriority" = "string"
}
}]
}
bgp_config = {
"string" = {
local_as = "string"
type = "string"
auth_key = "string"
bfd_minimum_interval = 0
export_policy = "string"
hold_time = 0
import_policy = "string"
neighbors = {
"string" = {
neighbor_as = "string"
export_policy = "string"
hold_time = 0
import_policy = "string"
multihop_ttl = 0
}
}
networks = ["string"]
}
}
dhcp_snooping = {
all_networks = false
enable_arp_spoof_check = false
enable_ip_source_guard = false
enabled = false
networks = ["string"]
}
dns_servers = ["string"]
dns_suffixes = ["string"]
extra_routes = {
"string" = {
via = "string"
discard = false
metric = 0
next_qualified = {
"string" = {
metric = 0
preference = 0
}
}
no_resolve = false
preference = 0
}
}
extra_routes6 = {
"string" = {
via = "string"
discard = false
metric = 0
next_qualified = {
"string" = {
metric = 0
preference = 0
}
}
no_resolve = false
preference = 0
}
}
mist_nac = {
enabled = false
network = "string"
}
name = "string"
networks = {
"string" = {
vlan_id = "string"
gateway = "string"
gateway6 = "string"
isolation = false
isolation_vlan_id = "string"
subnet = "string"
subnet6 = "string"
}
}
acl_policies {
actions {
dst_tag = "string"
action = "string"
}
name = "string"
src_tags = ["string"]
}
additional_config_cmds = ["string"]
port_mirroring = {
"string" = {
input_networks_ingresses = ["string"]
input_port_ids_egresses = ["string"]
input_port_ids_ingresses = ["string"]
output_ip_address = "string"
output_network = "string"
output_port_id = "string"
}
}
acl_tags = {
"string" = {
type = "string"
ether_types = ["string"]
gbp_tag = 0
macs = ["string"]
network = "string"
port_usage = "string"
radius_group = "string"
specs = [{
"portRange" = "string"
"protocol" = "string"
}]
subnets = ["string"]
}
}
port_usages = {
"string" = {
all_networks = false
allow_dhcpd = false
allow_multiple_supplicants = false
bypass_auth_when_server_down = false
bypass_auth_when_server_down_for_unknown_client = false
bypass_auth_when_server_down_for_voip = false
community_vlan_id = 0
description = "string"
disable_autoneg = false
disabled = false
duplex = "string"
dynamic_vlan_networks = ["string"]
enable_mac_auth = false
enable_qos = false
guest_network = "string"
inter_isolation_network_link = false
inter_switch_link = false
mac_auth_only = false
mac_auth_preferred = false
mac_auth_protocol = "string"
mac_limit = "string"
mode = "string"
mtu = "string"
networks = ["string"]
persist_mac = false
poe_disabled = false
poe_keep_state_when_reboot = false
poe_priority = "string"
port_auth = "string"
port_network = "string"
reauth_interval = "string"
reset_default_when = "string"
rules = [{
"src" = "string"
"description" = "string"
"equals" = "string"
"equalsAnies" = ["string"]
"expression" = "string"
"usage" = "string"
}]
server_fail_network = "string"
server_fail_retry_interval = 0
server_reject_network = "string"
speed = "string"
storm_control = {
disable_port = false
no_broadcast = false
no_multicast = false
no_registered_multicast = false
no_unknown_unicast = false
percentage = 0
}
stp_disable = false
stp_edge = false
stp_no_root_port = false
stp_p2p = false
stp_required = false
ui_evpntopo_id = "string"
use_vstp = false
voip_network = "string"
}
}
radius_config = {
acct_immediate_update = false
acct_interim_interval = 0
acct_servers = [{
"host" = "string"
"secret" = "string"
"keywrapEnabled" = false
"keywrapFormat" = "string"
"keywrapKek" = "string"
"keywrapMack" = "string"
"port" = "string"
}]
auth_server_selection = "string"
auth_servers = [{
"host" = "string"
"secret" = "string"
"keywrapEnabled" = false
"keywrapFormat" = "string"
"keywrapKek" = "string"
"keywrapMack" = "string"
"port" = "string"
"requireMessageAuthenticator" = false
}]
auth_servers_retries = 0
auth_servers_timeout = 0
coa_enabled = false
coa_port = "string"
fast_dot1x_timers = false
network = "string"
source_ip = "string"
}
remote_syslog = {
archive = {
files = "string"
size = "string"
}
cacerts = ["string"]
console = {
contents = [{
"facility" = "string"
"severity" = "string"
}]
}
enabled = false
files = [{
"archive" = {
"files" = "string"
"size" = "string"
}
"contents" = [{
"facility" = "string"
"severity" = "string"
}]
"enableTls" = false
"explicitPriority" = false
"file" = "string"
"match" = "string"
"structuredData" = false
}]
network = "string"
send_to_all_servers = false
servers = [{
"contents" = [{
"facility" = "string"
"severity" = "string"
}]
"explicitPriority" = false
"facility" = "string"
"host" = "string"
"match" = "string"
"port" = "string"
"protocol" = "string"
"routingInstance" = "string"
"serverName" = "string"
"severity" = "string"
"sourceAddress" = "string"
"structuredData" = false
"tag" = "string"
}]
time_format = "string"
users = [{
"contents" = [{
"facility" = "string"
"severity" = "string"
}]
"match" = "string"
"user" = "string"
}]
}
remove_existing_configs = false
routing_policies = {
"string" = {
terms = [{
"name" = "string"
"actions" = {
"accept" = false
"communities" = ["string"]
"localPreference" = "string"
"prependAsPaths" = ["string"]
}
"matching" = {
"asPaths" = ["string"]
"communities" = ["string"]
"prefixes" = ["string"]
"protocols" = ["string"]
}
}]
}
}
snmp_config = {
client_lists = [{
"clientListName" = "string"
"clients" = ["string"]
}]
contact = "string"
description = "string"
enabled = false
engine_id = "string"
engine_id_type = "string"
location = "string"
name = "string"
network = "string"
trap_groups = [{
"categories" = ["string"]
"groupName" = "string"
"targets" = ["string"]
"version" = "string"
}]
v2c_configs = [{
"authorization" = "string"
"clientListName" = "string"
"communityName" = "string"
"view" = "string"
}]
v3_config = {
notifies = [{
"name" = "string"
"tag" = "string"
"type" = "string"
}]
notify_filters = [{
"contents" = [{
"oid" = "string"
"include" = false
}]
"profileName" = "string"
}]
target_addresses = [{
"address" = "string"
"addressMask" = "string"
"targetAddressName" = "string"
"port" = "string"
"tagList" = "string"
"targetParameters" = "string"
}]
target_parameters = [{
"messageProcessingModel" = "string"
"name" = "string"
"notifyFilter" = "string"
"securityLevel" = "string"
"securityModel" = "string"
"securityName" = "string"
}]
usms = [{
"engineType" = "string"
"remoteEngineId" = "string"
"users" = [{
"authenticationPassword" = "string"
"authenticationType" = "string"
"encryptionPassword" = "string"
"encryptionType" = "string"
"name" = "string"
}]
}]
vacm = {
accesses = [{
"groupName" = "string"
"prefixLists" = [{
"contextPrefix" = "string"
"notifyView" = "string"
"readView" = "string"
"securityLevel" = "string"
"securityModel" = "string"
"type" = "string"
"writeView" = "string"
}]
}]
security_to_group = {
contents = [{
"group" = "string"
"securityName" = "string"
}]
security_model = "string"
}
}
}
views = [{
"include" = false
"oid" = "string"
"viewName" = "string"
}]
}
ospf_areas = {
"string" = {
networks = {
"string" = {
auth_keys = {
"string" = "string"
}
auth_password = "string"
auth_type = "string"
bfd_minimum_interval = 0
dead_interval = 0
export_policy = "string"
hello_interval = 0
import_policy = "string"
interface_type = "string"
metric = 0
no_readvertise_to_overlay = false
passive = false
}
}
include_loopback = false
type = "string"
}
}
switch_mgmt = {
ap_affinity_threshold = 0
cli_banner = "string"
cli_idle_timeout = 0
config_revert_timer = 0
dhcp_option_fqdn = false
disable_oob_down_alarm = false
fips_enabled = false
local_accounts = {
"string" = {
password = "string"
role = "string"
}
}
mxedge_proxy_host = "string"
mxedge_proxy_port = "string"
protect_re = {
allowed_services = ["string"]
customs = [{
"subnets" = ["string"]
"portRange" = "string"
"protocol" = "string"
}]
enabled = false
hit_count = false
trusted_hosts = ["string"]
}
remove_existing_configs = false
root_password = "string"
tacacs = {
acct_servers = [{
"host" = "string"
"port" = "string"
"secret" = "string"
"timeout" = 0
}]
default_role = "string"
enabled = false
network = "string"
tacplus_servers = [{
"host" = "string"
"port" = "string"
"secret" = "string"
"timeout" = 0
}]
}
use_mxedge_proxy = false
}
vrf_config = {
enabled = false
}
vrf_instances = {
"string" = {
evpn_auto_loopback_subnet = "string"
evpn_auto_loopback_subnet6 = "string"
extra_routes = {
"string" = {
via = "string"
}
}
extra_routes6 = {
"string" = {
via = "string"
}
}
networks = ["string"]
}
}
}
var networktemplateResource = new com.pulumi.junipermist.org.Networktemplate("networktemplateResource", com.pulumi.junipermist.org.NetworktemplateArgs.builder()
.orgId("string")
.ntpServers("string")
.switchMatching(com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMatchingArgs.builder()
.enable(false)
.rules(com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMatchingRuleArgs.builder()
.additionalConfigCmds("string")
.defaultPortUsage("string")
.ipConfig(com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMatchingRuleIpConfigArgs.builder()
.network("string")
.type("string")
.build())
.matchModel("string")
.matchName("string")
.matchNameOffset(0)
.matchRole("string")
.name("string")
.oobIpConfig(com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMatchingRuleOobIpConfigArgs.builder()
.type("string")
.useMgmtVrf(false)
.useMgmtVrfForHostOut(false)
.build())
.portConfig(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMatchingRulePortConfigArgs.builder()
.usage("string")
.disableAutoneg(false)
.esilag(false)
.aeLacpPassive(false)
.aeLacpSlow(false)
.aggregated(false)
.critical(false)
.description("string")
.aeDisableLacp(false)
.aeLacpForceUp(false)
.duplex("string")
.dynamicUsage("string")
.mtu(0)
.networks("string")
.noLocalOverwrite(false)
.poeDisabled(false)
.portNetwork("string")
.speed("string")
.aeIdx(0)
.build()))
.portMirroring(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMatchingRulePortMirroringArgs.builder()
.inputNetworksIngresses("string")
.inputPortIdsEgresses("string")
.inputPortIdsIngresses("string")
.outputIpAddress("string")
.outputNetwork("string")
.outputPortId("string")
.build()))
.stpConfig(com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMatchingRuleStpConfigArgs.builder()
.bridgePriority("string")
.build())
.build())
.build())
.bgpConfig(Map.of("string", NetworktemplateBgpConfigArgs.builder()
.localAs("string")
.type("string")
.authKey("string")
.bfdMinimumInterval(0)
.exportPolicy("string")
.holdTime(0)
.importPolicy("string")
.neighbors(Map.of("string", NetworktemplateBgpConfigNeighborsArgs.builder()
.neighborAs("string")
.exportPolicy("string")
.holdTime(0)
.importPolicy("string")
.multihopTtl(0)
.build()))
.networks("string")
.build()))
.dhcpSnooping(com.pulumi.junipermist.org.inputs.NetworktemplateDhcpSnoopingArgs.builder()
.allNetworks(false)
.enableArpSpoofCheck(false)
.enableIpSourceGuard(false)
.enabled(false)
.networks("string")
.build())
.dnsServers("string")
.dnsSuffixes("string")
.extraRoutes(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplateExtraRoutesArgs.builder()
.via("string")
.discard(false)
.metric(0)
.nextQualified(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplateExtraRoutesNextQualifiedArgs.builder()
.metric(0)
.preference(0)
.build()))
.noResolve(false)
.preference(0)
.build()))
.extraRoutes6(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplateExtraRoutes6Args.builder()
.via("string")
.discard(false)
.metric(0)
.nextQualified(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplateExtraRoutes6NextQualifiedArgs.builder()
.metric(0)
.preference(0)
.build()))
.noResolve(false)
.preference(0)
.build()))
.mistNac(com.pulumi.junipermist.org.inputs.NetworktemplateMistNacArgs.builder()
.enabled(false)
.network("string")
.build())
.name("string")
.networks(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplateNetworksArgs.builder()
.vlanId("string")
.gateway("string")
.gateway6("string")
.isolation(false)
.isolationVlanId("string")
.subnet("string")
.subnet6("string")
.build()))
.aclPolicies(com.pulumi.junipermist.org.inputs.NetworktemplateAclPolicyArgs.builder()
.actions(com.pulumi.junipermist.org.inputs.NetworktemplateAclPolicyActionArgs.builder()
.dstTag("string")
.action("string")
.build())
.name("string")
.srcTags("string")
.build())
.additionalConfigCmds("string")
.portMirroring(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplatePortMirroringArgs.builder()
.inputNetworksIngresses("string")
.inputPortIdsEgresses("string")
.inputPortIdsIngresses("string")
.outputIpAddress("string")
.outputNetwork("string")
.outputPortId("string")
.build()))
.aclTags(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplateAclTagsArgs.builder()
.type("string")
.etherTypes("string")
.gbpTag(0)
.macs("string")
.network("string")
.portUsage("string")
.radiusGroup("string")
.specs(com.pulumi.junipermist.org.inputs.NetworktemplateAclTagsSpecArgs.builder()
.portRange("string")
.protocol("string")
.build())
.subnets("string")
.build()))
.portUsages(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplatePortUsagesArgs.builder()
.allNetworks(false)
.allowDhcpd(false)
.allowMultipleSupplicants(false)
.bypassAuthWhenServerDown(false)
.bypassAuthWhenServerDownForUnknownClient(false)
.bypassAuthWhenServerDownForVoip(false)
.communityVlanId(0)
.description("string")
.disableAutoneg(false)
.disabled(false)
.duplex("string")
.dynamicVlanNetworks("string")
.enableMacAuth(false)
.enableQos(false)
.guestNetwork("string")
.interIsolationNetworkLink(false)
.interSwitchLink(false)
.macAuthOnly(false)
.macAuthPreferred(false)
.macAuthProtocol("string")
.macLimit("string")
.mode("string")
.mtu("string")
.networks("string")
.persistMac(false)
.poeDisabled(false)
.poeKeepStateWhenReboot(false)
.poePriority("string")
.portAuth("string")
.portNetwork("string")
.reauthInterval("string")
.resetDefaultWhen("string")
.rules(com.pulumi.junipermist.org.inputs.NetworktemplatePortUsagesRuleArgs.builder()
.src("string")
.description("string")
.equals("string")
.equalsAnies("string")
.expression("string")
.usage("string")
.build())
.serverFailNetwork("string")
.serverFailRetryInterval(0)
.serverRejectNetwork("string")
.speed("string")
.stormControl(com.pulumi.junipermist.org.inputs.NetworktemplatePortUsagesStormControlArgs.builder()
.disablePort(false)
.noBroadcast(false)
.noMulticast(false)
.noRegisteredMulticast(false)
.noUnknownUnicast(false)
.percentage(0)
.build())
.stpDisable(false)
.stpEdge(false)
.stpNoRootPort(false)
.stpP2p(false)
.stpRequired(false)
.uiEvpntopoId("string")
.useVstp(false)
.voipNetwork("string")
.build()))
.radiusConfig(com.pulumi.junipermist.org.inputs.NetworktemplateRadiusConfigArgs.builder()
.acctImmediateUpdate(false)
.acctInterimInterval(0)
.acctServers(com.pulumi.junipermist.org.inputs.NetworktemplateRadiusConfigAcctServerArgs.builder()
.host("string")
.secret("string")
.keywrapEnabled(false)
.keywrapFormat("string")
.keywrapKek("string")
.keywrapMack("string")
.port("string")
.build())
.authServerSelection("string")
.authServers(com.pulumi.junipermist.org.inputs.NetworktemplateRadiusConfigAuthServerArgs.builder()
.host("string")
.secret("string")
.keywrapEnabled(false)
.keywrapFormat("string")
.keywrapKek("string")
.keywrapMack("string")
.port("string")
.requireMessageAuthenticator(false)
.build())
.authServersRetries(0)
.authServersTimeout(0)
.coaEnabled(false)
.coaPort("string")
.fastDot1xTimers(false)
.network("string")
.sourceIp("string")
.build())
.remoteSyslog(com.pulumi.junipermist.org.inputs.NetworktemplateRemoteSyslogArgs.builder()
.archive(com.pulumi.junipermist.org.inputs.NetworktemplateRemoteSyslogArchiveArgs.builder()
.files("string")
.size("string")
.build())
.cacerts("string")
.console(com.pulumi.junipermist.org.inputs.NetworktemplateRemoteSyslogConsoleArgs.builder()
.contents(com.pulumi.junipermist.org.inputs.NetworktemplateRemoteSyslogConsoleContentArgs.builder()
.facility("string")
.severity("string")
.build())
.build())
.enabled(false)
.files(com.pulumi.junipermist.org.inputs.NetworktemplateRemoteSyslogFileArgs.builder()
.archive(com.pulumi.junipermist.org.inputs.NetworktemplateRemoteSyslogFileArchiveArgs.builder()
.files("string")
.size("string")
.build())
.contents(com.pulumi.junipermist.org.inputs.NetworktemplateRemoteSyslogFileContentArgs.builder()
.facility("string")
.severity("string")
.build())
.enableTls(false)
.explicitPriority(false)
.file("string")
.match("string")
.structuredData(false)
.build())
.network("string")
.sendToAllServers(false)
.servers(com.pulumi.junipermist.org.inputs.NetworktemplateRemoteSyslogServerArgs.builder()
.contents(com.pulumi.junipermist.org.inputs.NetworktemplateRemoteSyslogServerContentArgs.builder()
.facility("string")
.severity("string")
.build())
.explicitPriority(false)
.facility("string")
.host("string")
.match("string")
.port("string")
.protocol("string")
.routingInstance("string")
.serverName("string")
.severity("string")
.sourceAddress("string")
.structuredData(false)
.tag("string")
.build())
.timeFormat("string")
.users(com.pulumi.junipermist.org.inputs.NetworktemplateRemoteSyslogUserArgs.builder()
.contents(com.pulumi.junipermist.org.inputs.NetworktemplateRemoteSyslogUserContentArgs.builder()
.facility("string")
.severity("string")
.build())
.match("string")
.user("string")
.build())
.build())
.removeExistingConfigs(false)
.routingPolicies(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplateRoutingPoliciesArgs.builder()
.terms(com.pulumi.junipermist.org.inputs.NetworktemplateRoutingPoliciesTermArgs.builder()
.name("string")
.actions(com.pulumi.junipermist.org.inputs.NetworktemplateRoutingPoliciesTermActionsArgs.builder()
.accept(false)
.communities("string")
.localPreference("string")
.prependAsPaths("string")
.build())
.matching(com.pulumi.junipermist.org.inputs.NetworktemplateRoutingPoliciesTermMatchingArgs.builder()
.asPaths("string")
.communities("string")
.prefixes("string")
.protocols("string")
.build())
.build())
.build()))
.snmpConfig(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigArgs.builder()
.clientLists(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigClientListArgs.builder()
.clientListName("string")
.clients("string")
.build())
.contact("string")
.description("string")
.enabled(false)
.engineId("string")
.engineIdType("string")
.location("string")
.name("string")
.network("string")
.trapGroups(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigTrapGroupArgs.builder()
.categories("string")
.groupName("string")
.targets("string")
.version("string")
.build())
.v2cConfigs(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigV2cConfigArgs.builder()
.authorization("string")
.clientListName("string")
.communityName("string")
.view("string")
.build())
.v3Config(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigV3ConfigArgs.builder()
.notifies(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigV3ConfigNotifyArgs.builder()
.name("string")
.tag("string")
.type("string")
.build())
.notifyFilters(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigV3ConfigNotifyFilterArgs.builder()
.contents(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArgs.builder()
.oid("string")
.include(false)
.build())
.profileName("string")
.build())
.targetAddresses(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigV3ConfigTargetAddressArgs.builder()
.address("string")
.addressMask("string")
.targetAddressName("string")
.port("string")
.tagList("string")
.targetParameters("string")
.build())
.targetParameters(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigV3ConfigTargetParameterArgs.builder()
.messageProcessingModel("string")
.name("string")
.notifyFilter("string")
.securityLevel("string")
.securityModel("string")
.securityName("string")
.build())
.usms(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigV3ConfigUsmArgs.builder()
.engineType("string")
.remoteEngineId("string")
.users(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigV3ConfigUsmUserArgs.builder()
.authenticationPassword("string")
.authenticationType("string")
.encryptionPassword("string")
.encryptionType("string")
.name("string")
.build())
.build())
.vacm(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigV3ConfigVacmArgs.builder()
.accesses(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigV3ConfigVacmAccessArgs.builder()
.groupName("string")
.prefixLists(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArgs.builder()
.contextPrefix("string")
.notifyView("string")
.readView("string")
.securityLevel("string")
.securityModel("string")
.type("string")
.writeView("string")
.build())
.build())
.securityToGroup(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupArgs.builder()
.contents(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArgs.builder()
.group("string")
.securityName("string")
.build())
.securityModel("string")
.build())
.build())
.build())
.views(com.pulumi.junipermist.org.inputs.NetworktemplateSnmpConfigViewArgs.builder()
.include(false)
.oid("string")
.viewName("string")
.build())
.build())
.ospfAreas(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplateOspfAreasArgs.builder()
.networks(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplateOspfAreasNetworksArgs.builder()
.authKeys(Map.of("string", "string"))
.authPassword("string")
.authType("string")
.bfdMinimumInterval(0)
.deadInterval(0)
.exportPolicy("string")
.helloInterval(0)
.importPolicy("string")
.interfaceType("string")
.metric(0)
.noReadvertiseToOverlay(false)
.passive(false)
.build()))
.includeLoopback(false)
.type("string")
.build()))
.switchMgmt(com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMgmtArgs.builder()
.apAffinityThreshold(0)
.cliBanner("string")
.cliIdleTimeout(0)
.configRevertTimer(0)
.dhcpOptionFqdn(false)
.disableOobDownAlarm(false)
.fipsEnabled(false)
.localAccounts(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMgmtLocalAccountsArgs.builder()
.password("string")
.role("string")
.build()))
.mxedgeProxyHost("string")
.mxedgeProxyPort("string")
.protectRe(com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMgmtProtectReArgs.builder()
.allowedServices("string")
.customs(com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMgmtProtectReCustomArgs.builder()
.subnets("string")
.portRange("string")
.protocol("string")
.build())
.enabled(false)
.hitCount(false)
.trustedHosts("string")
.build())
.removeExistingConfigs(false)
.rootPassword("string")
.tacacs(com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMgmtTacacsArgs.builder()
.acctServers(com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMgmtTacacsAcctServerArgs.builder()
.host("string")
.port("string")
.secret("string")
.timeout(0)
.build())
.defaultRole("string")
.enabled(false)
.network("string")
.tacplusServers(com.pulumi.junipermist.org.inputs.NetworktemplateSwitchMgmtTacacsTacplusServerArgs.builder()
.host("string")
.port("string")
.secret("string")
.timeout(0)
.build())
.build())
.useMxedgeProxy(false)
.build())
.vrfConfig(com.pulumi.junipermist.org.inputs.NetworktemplateVrfConfigArgs.builder()
.enabled(false)
.build())
.vrfInstances(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplateVrfInstancesArgs.builder()
.evpnAutoLoopbackSubnet("string")
.evpnAutoLoopbackSubnet6("string")
.extraRoutes(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplateVrfInstancesExtraRoutesArgs.builder()
.via("string")
.build()))
.extraRoutes6(Map.of("string", com.pulumi.junipermist.org.inputs.NetworktemplateVrfInstancesExtraRoutes6Args.builder()
.via("string")
.build()))
.networks("string")
.build()))
.build());
networktemplate_resource = junipermist.org.Networktemplate("networktemplateResource",
org_id="string",
ntp_servers=["string"],
switch_matching={
"enable": False,
"rules": [{
"additional_config_cmds": ["string"],
"default_port_usage": "string",
"ip_config": {
"network": "string",
"type": "string",
},
"match_model": "string",
"match_name": "string",
"match_name_offset": 0,
"match_role": "string",
"name": "string",
"oob_ip_config": {
"type": "string",
"use_mgmt_vrf": False,
"use_mgmt_vrf_for_host_out": False,
},
"port_config": {
"string": {
"usage": "string",
"disable_autoneg": False,
"esilag": False,
"ae_lacp_passive": False,
"ae_lacp_slow": False,
"aggregated": False,
"critical": False,
"description": "string",
"ae_disable_lacp": False,
"ae_lacp_force_up": False,
"duplex": "string",
"dynamic_usage": "string",
"mtu": 0,
"networks": ["string"],
"no_local_overwrite": False,
"poe_disabled": False,
"port_network": "string",
"speed": "string",
"ae_idx": 0,
},
},
"port_mirroring": {
"string": {
"input_networks_ingresses": ["string"],
"input_port_ids_egresses": ["string"],
"input_port_ids_ingresses": ["string"],
"output_ip_address": "string",
"output_network": "string",
"output_port_id": "string",
},
},
"stp_config": {
"bridge_priority": "string",
},
}],
},
bgp_config={
"string": {
"local_as": "string",
"type": "string",
"auth_key": "string",
"bfd_minimum_interval": 0,
"export_policy": "string",
"hold_time": 0,
"import_policy": "string",
"neighbors": {
"string": {
"neighbor_as": "string",
"export_policy": "string",
"hold_time": 0,
"import_policy": "string",
"multihop_ttl": 0,
},
},
"networks": ["string"],
},
},
dhcp_snooping={
"all_networks": False,
"enable_arp_spoof_check": False,
"enable_ip_source_guard": False,
"enabled": False,
"networks": ["string"],
},
dns_servers=["string"],
dns_suffixes=["string"],
extra_routes={
"string": {
"via": "string",
"discard": False,
"metric": 0,
"next_qualified": {
"string": {
"metric": 0,
"preference": 0,
},
},
"no_resolve": False,
"preference": 0,
},
},
extra_routes6={
"string": {
"via": "string",
"discard": False,
"metric": 0,
"next_qualified": {
"string": {
"metric": 0,
"preference": 0,
},
},
"no_resolve": False,
"preference": 0,
},
},
mist_nac={
"enabled": False,
"network": "string",
},
name="string",
networks={
"string": {
"vlan_id": "string",
"gateway": "string",
"gateway6": "string",
"isolation": False,
"isolation_vlan_id": "string",
"subnet": "string",
"subnet6": "string",
},
},
acl_policies=[{
"actions": [{
"dst_tag": "string",
"action": "string",
}],
"name": "string",
"src_tags": ["string"],
}],
additional_config_cmds=["string"],
port_mirroring={
"string": {
"input_networks_ingresses": ["string"],
"input_port_ids_egresses": ["string"],
"input_port_ids_ingresses": ["string"],
"output_ip_address": "string",
"output_network": "string",
"output_port_id": "string",
},
},
acl_tags={
"string": {
"type": "string",
"ether_types": ["string"],
"gbp_tag": 0,
"macs": ["string"],
"network": "string",
"port_usage": "string",
"radius_group": "string",
"specs": [{
"port_range": "string",
"protocol": "string",
}],
"subnets": ["string"],
},
},
port_usages={
"string": {
"all_networks": False,
"allow_dhcpd": False,
"allow_multiple_supplicants": False,
"bypass_auth_when_server_down": False,
"bypass_auth_when_server_down_for_unknown_client": False,
"bypass_auth_when_server_down_for_voip": False,
"community_vlan_id": 0,
"description": "string",
"disable_autoneg": False,
"disabled": False,
"duplex": "string",
"dynamic_vlan_networks": ["string"],
"enable_mac_auth": False,
"enable_qos": False,
"guest_network": "string",
"inter_isolation_network_link": False,
"inter_switch_link": False,
"mac_auth_only": False,
"mac_auth_preferred": False,
"mac_auth_protocol": "string",
"mac_limit": "string",
"mode": "string",
"mtu": "string",
"networks": ["string"],
"persist_mac": False,
"poe_disabled": False,
"poe_keep_state_when_reboot": False,
"poe_priority": "string",
"port_auth": "string",
"port_network": "string",
"reauth_interval": "string",
"reset_default_when": "string",
"rules": [{
"src": "string",
"description": "string",
"equals": "string",
"equals_anies": ["string"],
"expression": "string",
"usage": "string",
}],
"server_fail_network": "string",
"server_fail_retry_interval": 0,
"server_reject_network": "string",
"speed": "string",
"storm_control": {
"disable_port": False,
"no_broadcast": False,
"no_multicast": False,
"no_registered_multicast": False,
"no_unknown_unicast": False,
"percentage": 0,
},
"stp_disable": False,
"stp_edge": False,
"stp_no_root_port": False,
"stp_p2p": False,
"stp_required": False,
"ui_evpntopo_id": "string",
"use_vstp": False,
"voip_network": "string",
},
},
radius_config={
"acct_immediate_update": False,
"acct_interim_interval": 0,
"acct_servers": [{
"host": "string",
"secret": "string",
"keywrap_enabled": False,
"keywrap_format": "string",
"keywrap_kek": "string",
"keywrap_mack": "string",
"port": "string",
}],
"auth_server_selection": "string",
"auth_servers": [{
"host": "string",
"secret": "string",
"keywrap_enabled": False,
"keywrap_format": "string",
"keywrap_kek": "string",
"keywrap_mack": "string",
"port": "string",
"require_message_authenticator": False,
}],
"auth_servers_retries": 0,
"auth_servers_timeout": 0,
"coa_enabled": False,
"coa_port": "string",
"fast_dot1x_timers": False,
"network": "string",
"source_ip": "string",
},
remote_syslog={
"archive": {
"files": "string",
"size": "string",
},
"cacerts": ["string"],
"console": {
"contents": [{
"facility": "string",
"severity": "string",
}],
},
"enabled": False,
"files": [{
"archive": {
"files": "string",
"size": "string",
},
"contents": [{
"facility": "string",
"severity": "string",
}],
"enable_tls": False,
"explicit_priority": False,
"file": "string",
"match": "string",
"structured_data": False,
}],
"network": "string",
"send_to_all_servers": False,
"servers": [{
"contents": [{
"facility": "string",
"severity": "string",
}],
"explicit_priority": False,
"facility": "string",
"host": "string",
"match": "string",
"port": "string",
"protocol": "string",
"routing_instance": "string",
"server_name": "string",
"severity": "string",
"source_address": "string",
"structured_data": False,
"tag": "string",
}],
"time_format": "string",
"users": [{
"contents": [{
"facility": "string",
"severity": "string",
}],
"match": "string",
"user": "string",
}],
},
remove_existing_configs=False,
routing_policies={
"string": {
"terms": [{
"name": "string",
"actions": {
"accept": False,
"communities": ["string"],
"local_preference": "string",
"prepend_as_paths": ["string"],
},
"matching": {
"as_paths": ["string"],
"communities": ["string"],
"prefixes": ["string"],
"protocols": ["string"],
},
}],
},
},
snmp_config={
"client_lists": [{
"client_list_name": "string",
"clients": ["string"],
}],
"contact": "string",
"description": "string",
"enabled": False,
"engine_id": "string",
"engine_id_type": "string",
"location": "string",
"name": "string",
"network": "string",
"trap_groups": [{
"categories": ["string"],
"group_name": "string",
"targets": ["string"],
"version": "string",
}],
"v2c_configs": [{
"authorization": "string",
"client_list_name": "string",
"community_name": "string",
"view": "string",
}],
"v3_config": {
"notifies": [{
"name": "string",
"tag": "string",
"type": "string",
}],
"notify_filters": [{
"contents": [{
"oid": "string",
"include": False,
}],
"profile_name": "string",
}],
"target_addresses": [{
"address": "string",
"address_mask": "string",
"target_address_name": "string",
"port": "string",
"tag_list": "string",
"target_parameters": "string",
}],
"target_parameters": [{
"message_processing_model": "string",
"name": "string",
"notify_filter": "string",
"security_level": "string",
"security_model": "string",
"security_name": "string",
}],
"usms": [{
"engine_type": "string",
"remote_engine_id": "string",
"users": [{
"authentication_password": "string",
"authentication_type": "string",
"encryption_password": "string",
"encryption_type": "string",
"name": "string",
}],
}],
"vacm": {
"accesses": [{
"group_name": "string",
"prefix_lists": [{
"context_prefix": "string",
"notify_view": "string",
"read_view": "string",
"security_level": "string",
"security_model": "string",
"type": "string",
"write_view": "string",
}],
}],
"security_to_group": {
"contents": [{
"group": "string",
"security_name": "string",
}],
"security_model": "string",
},
},
},
"views": [{
"include": False,
"oid": "string",
"view_name": "string",
}],
},
ospf_areas={
"string": {
"networks": {
"string": {
"auth_keys": {
"string": "string",
},
"auth_password": "string",
"auth_type": "string",
"bfd_minimum_interval": 0,
"dead_interval": 0,
"export_policy": "string",
"hello_interval": 0,
"import_policy": "string",
"interface_type": "string",
"metric": 0,
"no_readvertise_to_overlay": False,
"passive": False,
},
},
"include_loopback": False,
"type": "string",
},
},
switch_mgmt={
"ap_affinity_threshold": 0,
"cli_banner": "string",
"cli_idle_timeout": 0,
"config_revert_timer": 0,
"dhcp_option_fqdn": False,
"disable_oob_down_alarm": False,
"fips_enabled": False,
"local_accounts": {
"string": {
"password": "string",
"role": "string",
},
},
"mxedge_proxy_host": "string",
"mxedge_proxy_port": "string",
"protect_re": {
"allowed_services": ["string"],
"customs": [{
"subnets": ["string"],
"port_range": "string",
"protocol": "string",
}],
"enabled": False,
"hit_count": False,
"trusted_hosts": ["string"],
},
"remove_existing_configs": False,
"root_password": "string",
"tacacs": {
"acct_servers": [{
"host": "string",
"port": "string",
"secret": "string",
"timeout": 0,
}],
"default_role": "string",
"enabled": False,
"network": "string",
"tacplus_servers": [{
"host": "string",
"port": "string",
"secret": "string",
"timeout": 0,
}],
},
"use_mxedge_proxy": False,
},
vrf_config={
"enabled": False,
},
vrf_instances={
"string": {
"evpn_auto_loopback_subnet": "string",
"evpn_auto_loopback_subnet6": "string",
"extra_routes": {
"string": {
"via": "string",
},
},
"extra_routes6": {
"string": {
"via": "string",
},
},
"networks": ["string"],
},
})
const networktemplateResource = new junipermist.org.Networktemplate("networktemplateResource", {
orgId: "string",
ntpServers: ["string"],
switchMatching: {
enable: false,
rules: [{
additionalConfigCmds: ["string"],
defaultPortUsage: "string",
ipConfig: {
network: "string",
type: "string",
},
matchModel: "string",
matchName: "string",
matchNameOffset: 0,
matchRole: "string",
name: "string",
oobIpConfig: {
type: "string",
useMgmtVrf: false,
useMgmtVrfForHostOut: false,
},
portConfig: {
string: {
usage: "string",
disableAutoneg: false,
esilag: false,
aeLacpPassive: false,
aeLacpSlow: false,
aggregated: false,
critical: false,
description: "string",
aeDisableLacp: false,
aeLacpForceUp: false,
duplex: "string",
dynamicUsage: "string",
mtu: 0,
networks: ["string"],
noLocalOverwrite: false,
poeDisabled: false,
portNetwork: "string",
speed: "string",
aeIdx: 0,
},
},
portMirroring: {
string: {
inputNetworksIngresses: ["string"],
inputPortIdsEgresses: ["string"],
inputPortIdsIngresses: ["string"],
outputIpAddress: "string",
outputNetwork: "string",
outputPortId: "string",
},
},
stpConfig: {
bridgePriority: "string",
},
}],
},
bgpConfig: {
string: {
localAs: "string",
type: "string",
authKey: "string",
bfdMinimumInterval: 0,
exportPolicy: "string",
holdTime: 0,
importPolicy: "string",
neighbors: {
string: {
neighborAs: "string",
exportPolicy: "string",
holdTime: 0,
importPolicy: "string",
multihopTtl: 0,
},
},
networks: ["string"],
},
},
dhcpSnooping: {
allNetworks: false,
enableArpSpoofCheck: false,
enableIpSourceGuard: false,
enabled: false,
networks: ["string"],
},
dnsServers: ["string"],
dnsSuffixes: ["string"],
extraRoutes: {
string: {
via: "string",
discard: false,
metric: 0,
nextQualified: {
string: {
metric: 0,
preference: 0,
},
},
noResolve: false,
preference: 0,
},
},
extraRoutes6: {
string: {
via: "string",
discard: false,
metric: 0,
nextQualified: {
string: {
metric: 0,
preference: 0,
},
},
noResolve: false,
preference: 0,
},
},
mistNac: {
enabled: false,
network: "string",
},
name: "string",
networks: {
string: {
vlanId: "string",
gateway: "string",
gateway6: "string",
isolation: false,
isolationVlanId: "string",
subnet: "string",
subnet6: "string",
},
},
aclPolicies: [{
actions: [{
dstTag: "string",
action: "string",
}],
name: "string",
srcTags: ["string"],
}],
additionalConfigCmds: ["string"],
portMirroring: {
string: {
inputNetworksIngresses: ["string"],
inputPortIdsEgresses: ["string"],
inputPortIdsIngresses: ["string"],
outputIpAddress: "string",
outputNetwork: "string",
outputPortId: "string",
},
},
aclTags: {
string: {
type: "string",
etherTypes: ["string"],
gbpTag: 0,
macs: ["string"],
network: "string",
portUsage: "string",
radiusGroup: "string",
specs: [{
portRange: "string",
protocol: "string",
}],
subnets: ["string"],
},
},
portUsages: {
string: {
allNetworks: false,
allowDhcpd: false,
allowMultipleSupplicants: false,
bypassAuthWhenServerDown: false,
bypassAuthWhenServerDownForUnknownClient: false,
bypassAuthWhenServerDownForVoip: false,
communityVlanId: 0,
description: "string",
disableAutoneg: false,
disabled: false,
duplex: "string",
dynamicVlanNetworks: ["string"],
enableMacAuth: false,
enableQos: false,
guestNetwork: "string",
interIsolationNetworkLink: false,
interSwitchLink: false,
macAuthOnly: false,
macAuthPreferred: false,
macAuthProtocol: "string",
macLimit: "string",
mode: "string",
mtu: "string",
networks: ["string"],
persistMac: false,
poeDisabled: false,
poeKeepStateWhenReboot: false,
poePriority: "string",
portAuth: "string",
portNetwork: "string",
reauthInterval: "string",
resetDefaultWhen: "string",
rules: [{
src: "string",
description: "string",
equals: "string",
equalsAnies: ["string"],
expression: "string",
usage: "string",
}],
serverFailNetwork: "string",
serverFailRetryInterval: 0,
serverRejectNetwork: "string",
speed: "string",
stormControl: {
disablePort: false,
noBroadcast: false,
noMulticast: false,
noRegisteredMulticast: false,
noUnknownUnicast: false,
percentage: 0,
},
stpDisable: false,
stpEdge: false,
stpNoRootPort: false,
stpP2p: false,
stpRequired: false,
uiEvpntopoId: "string",
useVstp: false,
voipNetwork: "string",
},
},
radiusConfig: {
acctImmediateUpdate: false,
acctInterimInterval: 0,
acctServers: [{
host: "string",
secret: "string",
keywrapEnabled: false,
keywrapFormat: "string",
keywrapKek: "string",
keywrapMack: "string",
port: "string",
}],
authServerSelection: "string",
authServers: [{
host: "string",
secret: "string",
keywrapEnabled: false,
keywrapFormat: "string",
keywrapKek: "string",
keywrapMack: "string",
port: "string",
requireMessageAuthenticator: false,
}],
authServersRetries: 0,
authServersTimeout: 0,
coaEnabled: false,
coaPort: "string",
fastDot1xTimers: false,
network: "string",
sourceIp: "string",
},
remoteSyslog: {
archive: {
files: "string",
size: "string",
},
cacerts: ["string"],
console: {
contents: [{
facility: "string",
severity: "string",
}],
},
enabled: false,
files: [{
archive: {
files: "string",
size: "string",
},
contents: [{
facility: "string",
severity: "string",
}],
enableTls: false,
explicitPriority: false,
file: "string",
match: "string",
structuredData: false,
}],
network: "string",
sendToAllServers: false,
servers: [{
contents: [{
facility: "string",
severity: "string",
}],
explicitPriority: false,
facility: "string",
host: "string",
match: "string",
port: "string",
protocol: "string",
routingInstance: "string",
serverName: "string",
severity: "string",
sourceAddress: "string",
structuredData: false,
tag: "string",
}],
timeFormat: "string",
users: [{
contents: [{
facility: "string",
severity: "string",
}],
match: "string",
user: "string",
}],
},
removeExistingConfigs: false,
routingPolicies: {
string: {
terms: [{
name: "string",
actions: {
accept: false,
communities: ["string"],
localPreference: "string",
prependAsPaths: ["string"],
},
matching: {
asPaths: ["string"],
communities: ["string"],
prefixes: ["string"],
protocols: ["string"],
},
}],
},
},
snmpConfig: {
clientLists: [{
clientListName: "string",
clients: ["string"],
}],
contact: "string",
description: "string",
enabled: false,
engineId: "string",
engineIdType: "string",
location: "string",
name: "string",
network: "string",
trapGroups: [{
categories: ["string"],
groupName: "string",
targets: ["string"],
version: "string",
}],
v2cConfigs: [{
authorization: "string",
clientListName: "string",
communityName: "string",
view: "string",
}],
v3Config: {
notifies: [{
name: "string",
tag: "string",
type: "string",
}],
notifyFilters: [{
contents: [{
oid: "string",
include: false,
}],
profileName: "string",
}],
targetAddresses: [{
address: "string",
addressMask: "string",
targetAddressName: "string",
port: "string",
tagList: "string",
targetParameters: "string",
}],
targetParameters: [{
messageProcessingModel: "string",
name: "string",
notifyFilter: "string",
securityLevel: "string",
securityModel: "string",
securityName: "string",
}],
usms: [{
engineType: "string",
remoteEngineId: "string",
users: [{
authenticationPassword: "string",
authenticationType: "string",
encryptionPassword: "string",
encryptionType: "string",
name: "string",
}],
}],
vacm: {
accesses: [{
groupName: "string",
prefixLists: [{
contextPrefix: "string",
notifyView: "string",
readView: "string",
securityLevel: "string",
securityModel: "string",
type: "string",
writeView: "string",
}],
}],
securityToGroup: {
contents: [{
group: "string",
securityName: "string",
}],
securityModel: "string",
},
},
},
views: [{
include: false,
oid: "string",
viewName: "string",
}],
},
ospfAreas: {
string: {
networks: {
string: {
authKeys: {
string: "string",
},
authPassword: "string",
authType: "string",
bfdMinimumInterval: 0,
deadInterval: 0,
exportPolicy: "string",
helloInterval: 0,
importPolicy: "string",
interfaceType: "string",
metric: 0,
noReadvertiseToOverlay: false,
passive: false,
},
},
includeLoopback: false,
type: "string",
},
},
switchMgmt: {
apAffinityThreshold: 0,
cliBanner: "string",
cliIdleTimeout: 0,
configRevertTimer: 0,
dhcpOptionFqdn: false,
disableOobDownAlarm: false,
fipsEnabled: false,
localAccounts: {
string: {
password: "string",
role: "string",
},
},
mxedgeProxyHost: "string",
mxedgeProxyPort: "string",
protectRe: {
allowedServices: ["string"],
customs: [{
subnets: ["string"],
portRange: "string",
protocol: "string",
}],
enabled: false,
hitCount: false,
trustedHosts: ["string"],
},
removeExistingConfigs: false,
rootPassword: "string",
tacacs: {
acctServers: [{
host: "string",
port: "string",
secret: "string",
timeout: 0,
}],
defaultRole: "string",
enabled: false,
network: "string",
tacplusServers: [{
host: "string",
port: "string",
secret: "string",
timeout: 0,
}],
},
useMxedgeProxy: false,
},
vrfConfig: {
enabled: false,
},
vrfInstances: {
string: {
evpnAutoLoopbackSubnet: "string",
evpnAutoLoopbackSubnet6: "string",
extraRoutes: {
string: {
via: "string",
},
},
extraRoutes6: {
string: {
via: "string",
},
},
networks: ["string"],
},
},
});
type: junipermist:org:Networktemplate
properties:
aclPolicies:
- actions:
- action: string
dstTag: string
name: string
srcTags:
- string
aclTags:
string:
etherTypes:
- string
gbpTag: 0
macs:
- string
network: string
portUsage: string
radiusGroup: string
specs:
- portRange: string
protocol: string
subnets:
- string
type: string
additionalConfigCmds:
- string
bgpConfig:
string:
authKey: string
bfdMinimumInterval: 0
exportPolicy: string
holdTime: 0
importPolicy: string
localAs: string
neighbors:
string:
exportPolicy: string
holdTime: 0
importPolicy: string
multihopTtl: 0
neighborAs: string
networks:
- string
type: string
dhcpSnooping:
allNetworks: false
enableArpSpoofCheck: false
enableIpSourceGuard: false
enabled: false
networks:
- string
dnsServers:
- string
dnsSuffixes:
- string
extraRoutes:
string:
discard: false
metric: 0
nextQualified:
string:
metric: 0
preference: 0
noResolve: false
preference: 0
via: string
extraRoutes6:
string:
discard: false
metric: 0
nextQualified:
string:
metric: 0
preference: 0
noResolve: false
preference: 0
via: string
mistNac:
enabled: false
network: string
name: string
networks:
string:
gateway: string
gateway6: string
isolation: false
isolationVlanId: string
subnet: string
subnet6: string
vlanId: string
ntpServers:
- string
orgId: string
ospfAreas:
string:
includeLoopback: false
networks:
string:
authKeys:
string: string
authPassword: string
authType: string
bfdMinimumInterval: 0
deadInterval: 0
exportPolicy: string
helloInterval: 0
importPolicy: string
interfaceType: string
metric: 0
noReadvertiseToOverlay: false
passive: false
type: string
portMirroring:
string:
inputNetworksIngresses:
- string
inputPortIdsEgresses:
- string
inputPortIdsIngresses:
- string
outputIpAddress: string
outputNetwork: string
outputPortId: string
portUsages:
string:
allNetworks: false
allowDhcpd: false
allowMultipleSupplicants: false
bypassAuthWhenServerDown: false
bypassAuthWhenServerDownForUnknownClient: false
bypassAuthWhenServerDownForVoip: false
communityVlanId: 0
description: string
disableAutoneg: false
disabled: false
duplex: string
dynamicVlanNetworks:
- string
enableMacAuth: false
enableQos: false
guestNetwork: string
interIsolationNetworkLink: false
interSwitchLink: false
macAuthOnly: false
macAuthPreferred: false
macAuthProtocol: string
macLimit: string
mode: string
mtu: string
networks:
- string
persistMac: false
poeDisabled: false
poeKeepStateWhenReboot: false
poePriority: string
portAuth: string
portNetwork: string
reauthInterval: string
resetDefaultWhen: string
rules:
- description: string
equals: string
equalsAnies:
- string
expression: string
src: string
usage: string
serverFailNetwork: string
serverFailRetryInterval: 0
serverRejectNetwork: string
speed: string
stormControl:
disablePort: false
noBroadcast: false
noMulticast: false
noRegisteredMulticast: false
noUnknownUnicast: false
percentage: 0
stpDisable: false
stpEdge: false
stpNoRootPort: false
stpP2p: false
stpRequired: false
uiEvpntopoId: string
useVstp: false
voipNetwork: string
radiusConfig:
acctImmediateUpdate: false
acctInterimInterval: 0
acctServers:
- host: string
keywrapEnabled: false
keywrapFormat: string
keywrapKek: string
keywrapMack: string
port: string
secret: string
authServerSelection: string
authServers:
- host: string
keywrapEnabled: false
keywrapFormat: string
keywrapKek: string
keywrapMack: string
port: string
requireMessageAuthenticator: false
secret: string
authServersRetries: 0
authServersTimeout: 0
coaEnabled: false
coaPort: string
fastDot1xTimers: false
network: string
sourceIp: string
remoteSyslog:
archive:
files: string
size: string
cacerts:
- string
console:
contents:
- facility: string
severity: string
enabled: false
files:
- archive:
files: string
size: string
contents:
- facility: string
severity: string
enableTls: false
explicitPriority: false
file: string
match: string
structuredData: false
network: string
sendToAllServers: false
servers:
- contents:
- facility: string
severity: string
explicitPriority: false
facility: string
host: string
match: string
port: string
protocol: string
routingInstance: string
serverName: string
severity: string
sourceAddress: string
structuredData: false
tag: string
timeFormat: string
users:
- contents:
- facility: string
severity: string
match: string
user: string
removeExistingConfigs: false
routingPolicies:
string:
terms:
- actions:
accept: false
communities:
- string
localPreference: string
prependAsPaths:
- string
matching:
asPaths:
- string
communities:
- string
prefixes:
- string
protocols:
- string
name: string
snmpConfig:
clientLists:
- clientListName: string
clients:
- string
contact: string
description: string
enabled: false
engineId: string
engineIdType: string
location: string
name: string
network: string
trapGroups:
- categories:
- string
groupName: string
targets:
- string
version: string
v2cConfigs:
- authorization: string
clientListName: string
communityName: string
view: string
v3Config:
notifies:
- name: string
tag: string
type: string
notifyFilters:
- contents:
- include: false
oid: string
profileName: string
targetAddresses:
- address: string
addressMask: string
port: string
tagList: string
targetAddressName: string
targetParameters: string
targetParameters:
- messageProcessingModel: string
name: string
notifyFilter: string
securityLevel: string
securityModel: string
securityName: string
usms:
- engineType: string
remoteEngineId: string
users:
- authenticationPassword: string
authenticationType: string
encryptionPassword: string
encryptionType: string
name: string
vacm:
accesses:
- groupName: string
prefixLists:
- contextPrefix: string
notifyView: string
readView: string
securityLevel: string
securityModel: string
type: string
writeView: string
securityToGroup:
contents:
- group: string
securityName: string
securityModel: string
views:
- include: false
oid: string
viewName: string
switchMatching:
enable: false
rules:
- additionalConfigCmds:
- string
defaultPortUsage: string
ipConfig:
network: string
type: string
matchModel: string
matchName: string
matchNameOffset: 0
matchRole: string
name: string
oobIpConfig:
type: string
useMgmtVrf: false
useMgmtVrfForHostOut: false
portConfig:
string:
aeDisableLacp: false
aeIdx: 0
aeLacpForceUp: false
aeLacpPassive: false
aeLacpSlow: false
aggregated: false
critical: false
description: string
disableAutoneg: false
duplex: string
dynamicUsage: string
esilag: false
mtu: 0
networks:
- string
noLocalOverwrite: false
poeDisabled: false
portNetwork: string
speed: string
usage: string
portMirroring:
string:
inputNetworksIngresses:
- string
inputPortIdsEgresses:
- string
inputPortIdsIngresses:
- string
outputIpAddress: string
outputNetwork: string
outputPortId: string
stpConfig:
bridgePriority: string
switchMgmt:
apAffinityThreshold: 0
cliBanner: string
cliIdleTimeout: 0
configRevertTimer: 0
dhcpOptionFqdn: false
disableOobDownAlarm: false
fipsEnabled: false
localAccounts:
string:
password: string
role: string
mxedgeProxyHost: string
mxedgeProxyPort: string
protectRe:
allowedServices:
- string
customs:
- portRange: string
protocol: string
subnets:
- string
enabled: false
hitCount: false
trustedHosts:
- string
removeExistingConfigs: false
rootPassword: string
tacacs:
acctServers:
- host: string
port: string
secret: string
timeout: 0
defaultRole: string
enabled: false
network: string
tacplusServers:
- host: string
port: string
secret: string
timeout: 0
useMxedgeProxy: false
vrfConfig:
enabled: false
vrfInstances:
string:
evpnAutoLoopbackSubnet: string
evpnAutoLoopbackSubnet6: string
extraRoutes:
string:
via: string
extraRoutes6:
string:
via: string
networks:
- string
Networktemplate Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Networktemplate resource accepts the following input properties:
- Org
Id string - Organization that owns this network template
- Acl
Policies List<Pulumi.Juniper Mist. Org. Inputs. Networktemplate Acl Policy> - ACL policy defaults provided by this network template
-
Dictionary<string, Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Acl Tags Args> - ACL tags available to access policies in this network template
- Additional
Config List<string>Cmds - Additional CLI configuration commands provided by this network template
- Bgp
Config Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Bgp Config Args> - BGP routing defaults for this network template. Property key is the BGP session name
- Dhcp
Snooping Pulumi.Juniper Mist. Org. Inputs. Networktemplate Dhcp Snooping - DHCP snooping defaults provided by this network template
- Dns
Servers List<string> - DNS servers provided by this network template
- Dns
Suffixes List<string> - DNS search suffixes provided by this network template
- Extra
Routes Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Extra Routes Args> - Additional IPv4 route defaults in this network template
- Extra
Routes6 Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Extra Routes6Args> - Additional IPv6 route defaults in this network template
- Mist
Nac Pulumi.Juniper Mist. Org. Inputs. Networktemplate Mist Nac - Mist NAC defaults applied by this network template
- Name string
- Display name of the network template
- Networks
Dictionary<string, Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Networks Args> - Layer 3 networks configured by this network template
- Ntp
Servers List<string> - NTP servers provided by this network template
- Ospf
Areas Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Ospf Areas Args> - OSPF area defaults provided by this network template
- Port
Mirroring Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Port Mirroring Args> - Port mirroring defaults provided by this network template
- Port
Usages Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Port Usages Args> - Reusable switch port usage profiles provided by this network template
- Radius
Config Pulumi.Juniper Mist. Org. Inputs. Networktemplate Radius Config - RADIUS authentication and accounting defaults in this network template
- Remote
Syslog Pulumi.Juniper Mist. Org. Inputs. Networktemplate Remote Syslog - Remote syslog defaults provided by this network template
- Remove
Existing boolConfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - Routing
Policies Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Routing Policies Args> - Routing policy defaults applied by this network template
- Snmp
Config Pulumi.Juniper Mist. Org. Inputs. Networktemplate Snmp Config - SNMP defaults provided by this network template
- Switch
Matching Pulumi.Juniper Mist. Org. Inputs. Networktemplate Switch Matching - Matching rules that select switches for this network template
- Switch
Mgmt Pulumi.Juniper Mist. Org. Inputs. Networktemplate Switch Mgmt - Management-plane defaults provided by this network template
- Vrf
Config Pulumi.Juniper Mist. Org. Inputs. Networktemplate Vrf Config - VRF defaults applied by this network template
- Vrf
Instances Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Vrf Instances Args> - VRF instances configured by this network template
- Org
Id string - Organization that owns this network template
- Acl
Policies []NetworktemplateAcl Policy Args - ACL policy defaults provided by this network template
-
map[string]Networktemplate
Acl Tags Args - ACL tags available to access policies in this network template
- Additional
Config []stringCmds - Additional CLI configuration commands provided by this network template
- Bgp
Config map[string]NetworktemplateBgp Config Args - BGP routing defaults for this network template. Property key is the BGP session name
- Dhcp
Snooping NetworktemplateDhcp Snooping Args - DHCP snooping defaults provided by this network template
- Dns
Servers []string - DNS servers provided by this network template
- Dns
Suffixes []string - DNS search suffixes provided by this network template
- Extra
Routes map[string]NetworktemplateExtra Routes Args - Additional IPv4 route defaults in this network template
- Extra
Routes6 map[string]NetworktemplateExtra Routes6Args - Additional IPv6 route defaults in this network template
- Mist
Nac NetworktemplateMist Nac Args - Mist NAC defaults applied by this network template
- Name string
- Display name of the network template
- Networks
map[string]Networktemplate
Networks Args - Layer 3 networks configured by this network template
- Ntp
Servers []string - NTP servers provided by this network template
- Ospf
Areas map[string]NetworktemplateOspf Areas Args - OSPF area defaults provided by this network template
- Port
Mirroring map[string]NetworktemplatePort Mirroring Args - Port mirroring defaults provided by this network template
- Port
Usages map[string]NetworktemplatePort Usages Args - Reusable switch port usage profiles provided by this network template
- Radius
Config NetworktemplateRadius Config Args - RADIUS authentication and accounting defaults in this network template
- Remote
Syslog NetworktemplateRemote Syslog Args - Remote syslog defaults provided by this network template
- Remove
Existing boolConfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - Routing
Policies map[string]NetworktemplateRouting Policies Args - Routing policy defaults applied by this network template
- Snmp
Config NetworktemplateSnmp Config Args - SNMP defaults provided by this network template
- Switch
Matching NetworktemplateSwitch Matching Args - Matching rules that select switches for this network template
- Switch
Mgmt NetworktemplateSwitch Mgmt Args - Management-plane defaults provided by this network template
- Vrf
Config NetworktemplateVrf Config Args - VRF defaults applied by this network template
- Vrf
Instances map[string]NetworktemplateVrf Instances Args - VRF instances configured by this network template
- org_
id string - Organization that owns this network template
- acl_
policies list(object) - ACL policy defaults provided by this network template
- map(object)
- ACL tags available to access policies in this network template
- additional_
config_ list(string)cmds - Additional CLI configuration commands provided by this network template
- bgp_
config map(object) - BGP routing defaults for this network template. Property key is the BGP session name
- dhcp_
snooping object - DHCP snooping defaults provided by this network template
- dns_
servers list(string) - DNS servers provided by this network template
- dns_
suffixes list(string) - DNS search suffixes provided by this network template
- extra_
routes map(object) - Additional IPv4 route defaults in this network template
- extra_
routes6 map(object) - Additional IPv6 route defaults in this network template
- mist_
nac object - Mist NAC defaults applied by this network template
- name string
- Display name of the network template
- networks map(object)
- Layer 3 networks configured by this network template
- ntp_
servers list(string) - NTP servers provided by this network template
- ospf_
areas map(object) - OSPF area defaults provided by this network template
- port_
mirroring map(object) - Port mirroring defaults provided by this network template
- port_
usages map(object) - Reusable switch port usage profiles provided by this network template
- radius_
config object - RADIUS authentication and accounting defaults in this network template
- remote_
syslog object - Remote syslog defaults provided by this network template
- remove_
existing_ boolconfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - routing_
policies map(object) - Routing policy defaults applied by this network template
- snmp_
config object - SNMP defaults provided by this network template
- switch_
matching object - Matching rules that select switches for this network template
- switch_
mgmt object - Management-plane defaults provided by this network template
- vrf_
config object - VRF defaults applied by this network template
- vrf_
instances map(object) - VRF instances configured by this network template
- org
Id String - Organization that owns this network template
- acl
Policies List<NetworktemplateAcl Policy> - ACL policy defaults provided by this network template
-
Map<String,Networktemplate
Acl Tags Args> - ACL tags available to access policies in this network template
- additional
Config List<String>Cmds - Additional CLI configuration commands provided by this network template
- bgp
Config Map<String,NetworktemplateBgp Config Args> - BGP routing defaults for this network template. Property key is the BGP session name
- dhcp
Snooping NetworktemplateDhcp Snooping - DHCP snooping defaults provided by this network template
- dns
Servers List<String> - DNS servers provided by this network template
- dns
Suffixes List<String> - DNS search suffixes provided by this network template
- extra
Routes Map<String,NetworktemplateExtra Routes Args> - Additional IPv4 route defaults in this network template
- extra
Routes6 Map<String,NetworktemplateExtra Routes6Args> - Additional IPv6 route defaults in this network template
- mist
Nac NetworktemplateMist Nac - Mist NAC defaults applied by this network template
- name String
- Display name of the network template
- networks
Map<String,Networktemplate
Networks Args> - Layer 3 networks configured by this network template
- ntp
Servers List<String> - NTP servers provided by this network template
- ospf
Areas Map<String,NetworktemplateOspf Areas Args> - OSPF area defaults provided by this network template
- port
Mirroring Map<String,NetworktemplatePort Mirroring Args> - Port mirroring defaults provided by this network template
- port
Usages Map<String,NetworktemplatePort Usages Args> - Reusable switch port usage profiles provided by this network template
- radius
Config NetworktemplateRadius Config - RADIUS authentication and accounting defaults in this network template
- remote
Syslog NetworktemplateRemote Syslog - Remote syslog defaults provided by this network template
- remove
Existing BooleanConfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - routing
Policies Map<String,NetworktemplateRouting Policies Args> - Routing policy defaults applied by this network template
- snmp
Config NetworktemplateSnmp Config - SNMP defaults provided by this network template
- switch
Matching NetworktemplateSwitch Matching - Matching rules that select switches for this network template
- switch
Mgmt NetworktemplateSwitch Mgmt - Management-plane defaults provided by this network template
- vrf
Config NetworktemplateVrf Config - VRF defaults applied by this network template
- vrf
Instances Map<String,NetworktemplateVrf Instances Args> - VRF instances configured by this network template
- org
Id string - Organization that owns this network template
- acl
Policies NetworktemplateAcl Policy[] - ACL policy defaults provided by this network template
-
{[key: string]: Networktemplate
Acl Tags Args} - ACL tags available to access policies in this network template
- additional
Config string[]Cmds - Additional CLI configuration commands provided by this network template
- bgp
Config {[key: string]: NetworktemplateBgp Config Args} - BGP routing defaults for this network template. Property key is the BGP session name
- dhcp
Snooping NetworktemplateDhcp Snooping - DHCP snooping defaults provided by this network template
- dns
Servers string[] - DNS servers provided by this network template
- dns
Suffixes string[] - DNS search suffixes provided by this network template
- extra
Routes {[key: string]: NetworktemplateExtra Routes Args} - Additional IPv4 route defaults in this network template
- extra
Routes6 {[key: string]: NetworktemplateExtra Routes6Args} - Additional IPv6 route defaults in this network template
- mist
Nac NetworktemplateMist Nac - Mist NAC defaults applied by this network template
- name string
- Display name of the network template
- networks
{[key: string]: Networktemplate
Networks Args} - Layer 3 networks configured by this network template
- ntp
Servers string[] - NTP servers provided by this network template
- ospf
Areas {[key: string]: NetworktemplateOspf Areas Args} - OSPF area defaults provided by this network template
- port
Mirroring {[key: string]: NetworktemplatePort Mirroring Args} - Port mirroring defaults provided by this network template
- port
Usages {[key: string]: NetworktemplatePort Usages Args} - Reusable switch port usage profiles provided by this network template
- radius
Config NetworktemplateRadius Config - RADIUS authentication and accounting defaults in this network template
- remote
Syslog NetworktemplateRemote Syslog - Remote syslog defaults provided by this network template
- remove
Existing booleanConfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - routing
Policies {[key: string]: NetworktemplateRouting Policies Args} - Routing policy defaults applied by this network template
- snmp
Config NetworktemplateSnmp Config - SNMP defaults provided by this network template
- switch
Matching NetworktemplateSwitch Matching - Matching rules that select switches for this network template
- switch
Mgmt NetworktemplateSwitch Mgmt - Management-plane defaults provided by this network template
- vrf
Config NetworktemplateVrf Config - VRF defaults applied by this network template
- vrf
Instances {[key: string]: NetworktemplateVrf Instances Args} - VRF instances configured by this network template
- org_
id str - Organization that owns this network template
- acl_
policies Sequence[NetworktemplateAcl Policy Args] - ACL policy defaults provided by this network template
-
Mapping[str, Networktemplate
Acl Tags Args] - ACL tags available to access policies in this network template
- additional_
config_ Sequence[str]cmds - Additional CLI configuration commands provided by this network template
- bgp_
config Mapping[str, NetworktemplateBgp Config Args] - BGP routing defaults for this network template. Property key is the BGP session name
- dhcp_
snooping NetworktemplateDhcp Snooping Args - DHCP snooping defaults provided by this network template
- dns_
servers Sequence[str] - DNS servers provided by this network template
- dns_
suffixes Sequence[str] - DNS search suffixes provided by this network template
- extra_
routes Mapping[str, NetworktemplateExtra Routes Args] - Additional IPv4 route defaults in this network template
- extra_
routes6 Mapping[str, NetworktemplateExtra Routes6Args] - Additional IPv6 route defaults in this network template
- mist_
nac NetworktemplateMist Nac Args - Mist NAC defaults applied by this network template
- name str
- Display name of the network template
- networks
Mapping[str, Networktemplate
Networks Args] - Layer 3 networks configured by this network template
- ntp_
servers Sequence[str] - NTP servers provided by this network template
- ospf_
areas Mapping[str, NetworktemplateOspf Areas Args] - OSPF area defaults provided by this network template
- port_
mirroring Mapping[str, NetworktemplatePort Mirroring Args] - Port mirroring defaults provided by this network template
- port_
usages Mapping[str, NetworktemplatePort Usages Args] - Reusable switch port usage profiles provided by this network template
- radius_
config NetworktemplateRadius Config Args - RADIUS authentication and accounting defaults in this network template
- remote_
syslog NetworktemplateRemote Syslog Args - Remote syslog defaults provided by this network template
- remove_
existing_ boolconfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - routing_
policies Mapping[str, NetworktemplateRouting Policies Args] - Routing policy defaults applied by this network template
- snmp_
config NetworktemplateSnmp Config Args - SNMP defaults provided by this network template
- switch_
matching NetworktemplateSwitch Matching Args - Matching rules that select switches for this network template
- switch_
mgmt NetworktemplateSwitch Mgmt Args - Management-plane defaults provided by this network template
- vrf_
config NetworktemplateVrf Config Args - VRF defaults applied by this network template
- vrf_
instances Mapping[str, NetworktemplateVrf Instances Args] - VRF instances configured by this network template
- org
Id String - Organization that owns this network template
- acl
Policies List<Property Map> - ACL policy defaults provided by this network template
- Map<Property Map>
- ACL tags available to access policies in this network template
- additional
Config List<String>Cmds - Additional CLI configuration commands provided by this network template
- bgp
Config Map<Property Map> - BGP routing defaults for this network template. Property key is the BGP session name
- dhcp
Snooping Property Map - DHCP snooping defaults provided by this network template
- dns
Servers List<String> - DNS servers provided by this network template
- dns
Suffixes List<String> - DNS search suffixes provided by this network template
- extra
Routes Map<Property Map> - Additional IPv4 route defaults in this network template
- extra
Routes6 Map<Property Map> - Additional IPv6 route defaults in this network template
- mist
Nac Property Map - Mist NAC defaults applied by this network template
- name String
- Display name of the network template
- networks Map<Property Map>
- Layer 3 networks configured by this network template
- ntp
Servers List<String> - NTP servers provided by this network template
- ospf
Areas Map<Property Map> - OSPF area defaults provided by this network template
- port
Mirroring Map<Property Map> - Port mirroring defaults provided by this network template
- port
Usages Map<Property Map> - Reusable switch port usage profiles provided by this network template
- radius
Config Property Map - RADIUS authentication and accounting defaults in this network template
- remote
Syslog Property Map - Remote syslog defaults provided by this network template
- remove
Existing BooleanConfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - routing
Policies Map<Property Map> - Routing policy defaults applied by this network template
- snmp
Config Property Map - SNMP defaults provided by this network template
- switch
Matching Property Map - Matching rules that select switches for this network template
- switch
Mgmt Property Map - Management-plane defaults provided by this network template
- vrf
Config Property Map - VRF defaults applied by this network template
- vrf
Instances Map<Property Map> - VRF instances configured by this network template
Outputs
All input properties are implicitly available as output properties. Additionally, the Networktemplate resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Networktemplate Resource
Get an existing Networktemplate resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: NetworktemplateState, opts?: CustomResourceOptions): Networktemplate@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
acl_policies: Optional[Sequence[NetworktemplateAclPolicyArgs]] = None,
acl_tags: Optional[Mapping[str, NetworktemplateAclTagsArgs]] = None,
additional_config_cmds: Optional[Sequence[str]] = None,
bgp_config: Optional[Mapping[str, NetworktemplateBgpConfigArgs]] = None,
dhcp_snooping: Optional[NetworktemplateDhcpSnoopingArgs] = None,
dns_servers: Optional[Sequence[str]] = None,
dns_suffixes: Optional[Sequence[str]] = None,
extra_routes: Optional[Mapping[str, NetworktemplateExtraRoutesArgs]] = None,
extra_routes6: Optional[Mapping[str, NetworktemplateExtraRoutes6Args]] = None,
mist_nac: Optional[NetworktemplateMistNacArgs] = None,
name: Optional[str] = None,
networks: Optional[Mapping[str, NetworktemplateNetworksArgs]] = None,
ntp_servers: Optional[Sequence[str]] = None,
org_id: Optional[str] = None,
ospf_areas: Optional[Mapping[str, NetworktemplateOspfAreasArgs]] = None,
port_mirroring: Optional[Mapping[str, NetworktemplatePortMirroringArgs]] = None,
port_usages: Optional[Mapping[str, NetworktemplatePortUsagesArgs]] = None,
radius_config: Optional[NetworktemplateRadiusConfigArgs] = None,
remote_syslog: Optional[NetworktemplateRemoteSyslogArgs] = None,
remove_existing_configs: Optional[bool] = None,
routing_policies: Optional[Mapping[str, NetworktemplateRoutingPoliciesArgs]] = None,
snmp_config: Optional[NetworktemplateSnmpConfigArgs] = None,
switch_matching: Optional[NetworktemplateSwitchMatchingArgs] = None,
switch_mgmt: Optional[NetworktemplateSwitchMgmtArgs] = None,
vrf_config: Optional[NetworktemplateVrfConfigArgs] = None,
vrf_instances: Optional[Mapping[str, NetworktemplateVrfInstancesArgs]] = None) -> Networktemplatefunc GetNetworktemplate(ctx *Context, name string, id IDInput, state *NetworktemplateState, opts ...ResourceOption) (*Networktemplate, error)public static Networktemplate Get(string name, Input<string> id, NetworktemplateState? state, CustomResourceOptions? opts = null)public static Networktemplate get(String name, Output<String> id, NetworktemplateState state, CustomResourceOptions options)resources: _: type: junipermist:org:Networktemplate get: id: ${id}import {
to = junipermist_org_networktemplate.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Acl
Policies List<Pulumi.Juniper Mist. Org. Inputs. Networktemplate Acl Policy> - ACL policy defaults provided by this network template
-
Dictionary<string, Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Acl Tags Args> - ACL tags available to access policies in this network template
- Additional
Config List<string>Cmds - Additional CLI configuration commands provided by this network template
- Bgp
Config Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Bgp Config Args> - BGP routing defaults for this network template. Property key is the BGP session name
- Dhcp
Snooping Pulumi.Juniper Mist. Org. Inputs. Networktemplate Dhcp Snooping - DHCP snooping defaults provided by this network template
- Dns
Servers List<string> - DNS servers provided by this network template
- Dns
Suffixes List<string> - DNS search suffixes provided by this network template
- Extra
Routes Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Extra Routes Args> - Additional IPv4 route defaults in this network template
- Extra
Routes6 Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Extra Routes6Args> - Additional IPv6 route defaults in this network template
- Mist
Nac Pulumi.Juniper Mist. Org. Inputs. Networktemplate Mist Nac - Mist NAC defaults applied by this network template
- Name string
- Display name of the network template
- Networks
Dictionary<string, Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Networks Args> - Layer 3 networks configured by this network template
- Ntp
Servers List<string> - NTP servers provided by this network template
- Org
Id string - Organization that owns this network template
- Ospf
Areas Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Ospf Areas Args> - OSPF area defaults provided by this network template
- Port
Mirroring Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Port Mirroring Args> - Port mirroring defaults provided by this network template
- Port
Usages Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Port Usages Args> - Reusable switch port usage profiles provided by this network template
- Radius
Config Pulumi.Juniper Mist. Org. Inputs. Networktemplate Radius Config - RADIUS authentication and accounting defaults in this network template
- Remote
Syslog Pulumi.Juniper Mist. Org. Inputs. Networktemplate Remote Syslog - Remote syslog defaults provided by this network template
- Remove
Existing boolConfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - Routing
Policies Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Routing Policies Args> - Routing policy defaults applied by this network template
- Snmp
Config Pulumi.Juniper Mist. Org. Inputs. Networktemplate Snmp Config - SNMP defaults provided by this network template
- Switch
Matching Pulumi.Juniper Mist. Org. Inputs. Networktemplate Switch Matching - Matching rules that select switches for this network template
- Switch
Mgmt Pulumi.Juniper Mist. Org. Inputs. Networktemplate Switch Mgmt - Management-plane defaults provided by this network template
- Vrf
Config Pulumi.Juniper Mist. Org. Inputs. Networktemplate Vrf Config - VRF defaults applied by this network template
- Vrf
Instances Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Vrf Instances Args> - VRF instances configured by this network template
- Acl
Policies []NetworktemplateAcl Policy Args - ACL policy defaults provided by this network template
-
map[string]Networktemplate
Acl Tags Args - ACL tags available to access policies in this network template
- Additional
Config []stringCmds - Additional CLI configuration commands provided by this network template
- Bgp
Config map[string]NetworktemplateBgp Config Args - BGP routing defaults for this network template. Property key is the BGP session name
- Dhcp
Snooping NetworktemplateDhcp Snooping Args - DHCP snooping defaults provided by this network template
- Dns
Servers []string - DNS servers provided by this network template
- Dns
Suffixes []string - DNS search suffixes provided by this network template
- Extra
Routes map[string]NetworktemplateExtra Routes Args - Additional IPv4 route defaults in this network template
- Extra
Routes6 map[string]NetworktemplateExtra Routes6Args - Additional IPv6 route defaults in this network template
- Mist
Nac NetworktemplateMist Nac Args - Mist NAC defaults applied by this network template
- Name string
- Display name of the network template
- Networks
map[string]Networktemplate
Networks Args - Layer 3 networks configured by this network template
- Ntp
Servers []string - NTP servers provided by this network template
- Org
Id string - Organization that owns this network template
- Ospf
Areas map[string]NetworktemplateOspf Areas Args - OSPF area defaults provided by this network template
- Port
Mirroring map[string]NetworktemplatePort Mirroring Args - Port mirroring defaults provided by this network template
- Port
Usages map[string]NetworktemplatePort Usages Args - Reusable switch port usage profiles provided by this network template
- Radius
Config NetworktemplateRadius Config Args - RADIUS authentication and accounting defaults in this network template
- Remote
Syslog NetworktemplateRemote Syslog Args - Remote syslog defaults provided by this network template
- Remove
Existing boolConfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - Routing
Policies map[string]NetworktemplateRouting Policies Args - Routing policy defaults applied by this network template
- Snmp
Config NetworktemplateSnmp Config Args - SNMP defaults provided by this network template
- Switch
Matching NetworktemplateSwitch Matching Args - Matching rules that select switches for this network template
- Switch
Mgmt NetworktemplateSwitch Mgmt Args - Management-plane defaults provided by this network template
- Vrf
Config NetworktemplateVrf Config Args - VRF defaults applied by this network template
- Vrf
Instances map[string]NetworktemplateVrf Instances Args - VRF instances configured by this network template
- acl_
policies list(object) - ACL policy defaults provided by this network template
- map(object)
- ACL tags available to access policies in this network template
- additional_
config_ list(string)cmds - Additional CLI configuration commands provided by this network template
- bgp_
config map(object) - BGP routing defaults for this network template. Property key is the BGP session name
- dhcp_
snooping object - DHCP snooping defaults provided by this network template
- dns_
servers list(string) - DNS servers provided by this network template
- dns_
suffixes list(string) - DNS search suffixes provided by this network template
- extra_
routes map(object) - Additional IPv4 route defaults in this network template
- extra_
routes6 map(object) - Additional IPv6 route defaults in this network template
- mist_
nac object - Mist NAC defaults applied by this network template
- name string
- Display name of the network template
- networks map(object)
- Layer 3 networks configured by this network template
- ntp_
servers list(string) - NTP servers provided by this network template
- org_
id string - Organization that owns this network template
- ospf_
areas map(object) - OSPF area defaults provided by this network template
- port_
mirroring map(object) - Port mirroring defaults provided by this network template
- port_
usages map(object) - Reusable switch port usage profiles provided by this network template
- radius_
config object - RADIUS authentication and accounting defaults in this network template
- remote_
syslog object - Remote syslog defaults provided by this network template
- remove_
existing_ boolconfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - routing_
policies map(object) - Routing policy defaults applied by this network template
- snmp_
config object - SNMP defaults provided by this network template
- switch_
matching object - Matching rules that select switches for this network template
- switch_
mgmt object - Management-plane defaults provided by this network template
- vrf_
config object - VRF defaults applied by this network template
- vrf_
instances map(object) - VRF instances configured by this network template
- acl
Policies List<NetworktemplateAcl Policy> - ACL policy defaults provided by this network template
-
Map<String,Networktemplate
Acl Tags Args> - ACL tags available to access policies in this network template
- additional
Config List<String>Cmds - Additional CLI configuration commands provided by this network template
- bgp
Config Map<String,NetworktemplateBgp Config Args> - BGP routing defaults for this network template. Property key is the BGP session name
- dhcp
Snooping NetworktemplateDhcp Snooping - DHCP snooping defaults provided by this network template
- dns
Servers List<String> - DNS servers provided by this network template
- dns
Suffixes List<String> - DNS search suffixes provided by this network template
- extra
Routes Map<String,NetworktemplateExtra Routes Args> - Additional IPv4 route defaults in this network template
- extra
Routes6 Map<String,NetworktemplateExtra Routes6Args> - Additional IPv6 route defaults in this network template
- mist
Nac NetworktemplateMist Nac - Mist NAC defaults applied by this network template
- name String
- Display name of the network template
- networks
Map<String,Networktemplate
Networks Args> - Layer 3 networks configured by this network template
- ntp
Servers List<String> - NTP servers provided by this network template
- org
Id String - Organization that owns this network template
- ospf
Areas Map<String,NetworktemplateOspf Areas Args> - OSPF area defaults provided by this network template
- port
Mirroring Map<String,NetworktemplatePort Mirroring Args> - Port mirroring defaults provided by this network template
- port
Usages Map<String,NetworktemplatePort Usages Args> - Reusable switch port usage profiles provided by this network template
- radius
Config NetworktemplateRadius Config - RADIUS authentication and accounting defaults in this network template
- remote
Syslog NetworktemplateRemote Syslog - Remote syslog defaults provided by this network template
- remove
Existing BooleanConfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - routing
Policies Map<String,NetworktemplateRouting Policies Args> - Routing policy defaults applied by this network template
- snmp
Config NetworktemplateSnmp Config - SNMP defaults provided by this network template
- switch
Matching NetworktemplateSwitch Matching - Matching rules that select switches for this network template
- switch
Mgmt NetworktemplateSwitch Mgmt - Management-plane defaults provided by this network template
- vrf
Config NetworktemplateVrf Config - VRF defaults applied by this network template
- vrf
Instances Map<String,NetworktemplateVrf Instances Args> - VRF instances configured by this network template
- acl
Policies NetworktemplateAcl Policy[] - ACL policy defaults provided by this network template
-
{[key: string]: Networktemplate
Acl Tags Args} - ACL tags available to access policies in this network template
- additional
Config string[]Cmds - Additional CLI configuration commands provided by this network template
- bgp
Config {[key: string]: NetworktemplateBgp Config Args} - BGP routing defaults for this network template. Property key is the BGP session name
- dhcp
Snooping NetworktemplateDhcp Snooping - DHCP snooping defaults provided by this network template
- dns
Servers string[] - DNS servers provided by this network template
- dns
Suffixes string[] - DNS search suffixes provided by this network template
- extra
Routes {[key: string]: NetworktemplateExtra Routes Args} - Additional IPv4 route defaults in this network template
- extra
Routes6 {[key: string]: NetworktemplateExtra Routes6Args} - Additional IPv6 route defaults in this network template
- mist
Nac NetworktemplateMist Nac - Mist NAC defaults applied by this network template
- name string
- Display name of the network template
- networks
{[key: string]: Networktemplate
Networks Args} - Layer 3 networks configured by this network template
- ntp
Servers string[] - NTP servers provided by this network template
- org
Id string - Organization that owns this network template
- ospf
Areas {[key: string]: NetworktemplateOspf Areas Args} - OSPF area defaults provided by this network template
- port
Mirroring {[key: string]: NetworktemplatePort Mirroring Args} - Port mirroring defaults provided by this network template
- port
Usages {[key: string]: NetworktemplatePort Usages Args} - Reusable switch port usage profiles provided by this network template
- radius
Config NetworktemplateRadius Config - RADIUS authentication and accounting defaults in this network template
- remote
Syslog NetworktemplateRemote Syslog - Remote syslog defaults provided by this network template
- remove
Existing booleanConfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - routing
Policies {[key: string]: NetworktemplateRouting Policies Args} - Routing policy defaults applied by this network template
- snmp
Config NetworktemplateSnmp Config - SNMP defaults provided by this network template
- switch
Matching NetworktemplateSwitch Matching - Matching rules that select switches for this network template
- switch
Mgmt NetworktemplateSwitch Mgmt - Management-plane defaults provided by this network template
- vrf
Config NetworktemplateVrf Config - VRF defaults applied by this network template
- vrf
Instances {[key: string]: NetworktemplateVrf Instances Args} - VRF instances configured by this network template
- acl_
policies Sequence[NetworktemplateAcl Policy Args] - ACL policy defaults provided by this network template
-
Mapping[str, Networktemplate
Acl Tags Args] - ACL tags available to access policies in this network template
- additional_
config_ Sequence[str]cmds - Additional CLI configuration commands provided by this network template
- bgp_
config Mapping[str, NetworktemplateBgp Config Args] - BGP routing defaults for this network template. Property key is the BGP session name
- dhcp_
snooping NetworktemplateDhcp Snooping Args - DHCP snooping defaults provided by this network template
- dns_
servers Sequence[str] - DNS servers provided by this network template
- dns_
suffixes Sequence[str] - DNS search suffixes provided by this network template
- extra_
routes Mapping[str, NetworktemplateExtra Routes Args] - Additional IPv4 route defaults in this network template
- extra_
routes6 Mapping[str, NetworktemplateExtra Routes6Args] - Additional IPv6 route defaults in this network template
- mist_
nac NetworktemplateMist Nac Args - Mist NAC defaults applied by this network template
- name str
- Display name of the network template
- networks
Mapping[str, Networktemplate
Networks Args] - Layer 3 networks configured by this network template
- ntp_
servers Sequence[str] - NTP servers provided by this network template
- org_
id str - Organization that owns this network template
- ospf_
areas Mapping[str, NetworktemplateOspf Areas Args] - OSPF area defaults provided by this network template
- port_
mirroring Mapping[str, NetworktemplatePort Mirroring Args] - Port mirroring defaults provided by this network template
- port_
usages Mapping[str, NetworktemplatePort Usages Args] - Reusable switch port usage profiles provided by this network template
- radius_
config NetworktemplateRadius Config Args - RADIUS authentication and accounting defaults in this network template
- remote_
syslog NetworktemplateRemote Syslog Args - Remote syslog defaults provided by this network template
- remove_
existing_ boolconfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - routing_
policies Mapping[str, NetworktemplateRouting Policies Args] - Routing policy defaults applied by this network template
- snmp_
config NetworktemplateSnmp Config Args - SNMP defaults provided by this network template
- switch_
matching NetworktemplateSwitch Matching Args - Matching rules that select switches for this network template
- switch_
mgmt NetworktemplateSwitch Mgmt Args - Management-plane defaults provided by this network template
- vrf_
config NetworktemplateVrf Config Args - VRF defaults applied by this network template
- vrf_
instances Mapping[str, NetworktemplateVrf Instances Args] - VRF instances configured by this network template
- acl
Policies List<Property Map> - ACL policy defaults provided by this network template
- Map<Property Map>
- ACL tags available to access policies in this network template
- additional
Config List<String>Cmds - Additional CLI configuration commands provided by this network template
- bgp
Config Map<Property Map> - BGP routing defaults for this network template. Property key is the BGP session name
- dhcp
Snooping Property Map - DHCP snooping defaults provided by this network template
- dns
Servers List<String> - DNS servers provided by this network template
- dns
Suffixes List<String> - DNS search suffixes provided by this network template
- extra
Routes Map<Property Map> - Additional IPv4 route defaults in this network template
- extra
Routes6 Map<Property Map> - Additional IPv6 route defaults in this network template
- mist
Nac Property Map - Mist NAC defaults applied by this network template
- name String
- Display name of the network template
- networks Map<Property Map>
- Layer 3 networks configured by this network template
- ntp
Servers List<String> - NTP servers provided by this network template
- org
Id String - Organization that owns this network template
- ospf
Areas Map<Property Map> - OSPF area defaults provided by this network template
- port
Mirroring Map<Property Map> - Port mirroring defaults provided by this network template
- port
Usages Map<Property Map> - Reusable switch port usage profiles provided by this network template
- radius
Config Property Map - RADIUS authentication and accounting defaults in this network template
- remote
Syslog Property Map - Remote syslog defaults provided by this network template
- remove
Existing BooleanConfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - routing
Policies Map<Property Map> - Routing policy defaults applied by this network template
- snmp
Config Property Map - SNMP defaults provided by this network template
- switch
Matching Property Map - Matching rules that select switches for this network template
- switch
Mgmt Property Map - Management-plane defaults provided by this network template
- vrf
Config Property Map - VRF defaults applied by this network template
- vrf
Instances Map<Property Map> - VRF instances configured by this network template
Supporting Types
NetworktemplateAclPolicy, NetworktemplateAclPolicyArgs
- Actions
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Acl Policy Action> - Destination tag actions evaluated for sources matching this ACL policy
- Name string
- Display name of the ACL policy
- List<string>
- Source ACL tags that select traffic for this ACL policy
- Actions
[]Networktemplate
Acl Policy Action - Destination tag actions evaluated for sources matching this ACL policy
- Name string
- Display name of the ACL policy
- []string
- Source ACL tags that select traffic for this ACL policy
- actions list(object)
- Destination tag actions evaluated for sources matching this ACL policy
- name string
- Display name of the ACL policy
- list(string)
- Source ACL tags that select traffic for this ACL policy
- actions
List<Networktemplate
Acl Policy Action> - Destination tag actions evaluated for sources matching this ACL policy
- name String
- Display name of the ACL policy
- List<String>
- Source ACL tags that select traffic for this ACL policy
- actions
Networktemplate
Acl Policy Action[] - Destination tag actions evaluated for sources matching this ACL policy
- name string
- Display name of the ACL policy
- string[]
- Source ACL tags that select traffic for this ACL policy
- actions
Sequence[Networktemplate
Acl Policy Action] - Destination tag actions evaluated for sources matching this ACL policy
- name str
- Display name of the ACL policy
- Sequence[str]
- Source ACL tags that select traffic for this ACL policy
- actions List<Property Map>
- Destination tag actions evaluated for sources matching this ACL policy
- name String
- Display name of the ACL policy
- List<String>
- Source ACL tags that select traffic for this ACL policy
NetworktemplateAclPolicyAction, NetworktemplateAclPolicyActionArgs
NetworktemplateAclTags, NetworktemplateAclTagsArgs
- Type string
- Classifier type that determines which ACL tag fields are evaluated
- Ether
Types List<string> - Layer 2 EtherTypes matched by this ACL tag; defaults to
any - Gbp
Tag int - Required if
type==dynamicGbp(gbp_tag received from RADIUS)type==gbpResourcetype==staticGbp(applying gbp tag against matching conditions)
- Macs List<string>
- Client or resource MAC addresses matched by this ACL tag
- Network string
- If:
type==mac(optional. default isany)type==subnet(optional. default isany)type==networktype==resource(optional. default isany)type==staticGbpif from matching network (vlan)
- Port
Usage string - Required if
type==portUsage. Switch port usage name matched by this ACL tag - Radius
Group string - Required if:
type==radiusGrouptype==staticGbpif from matching radius_group
- Specs
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Acl Tags Spec> - Layer 4 protocol and destination-port constraints for this ACL tag
- Subnets List<string>
- IP subnets matched by this ACL tag
- Type string
- Classifier type that determines which ACL tag fields are evaluated
- Ether
Types []string - Layer 2 EtherTypes matched by this ACL tag; defaults to
any - Gbp
Tag int - Required if
type==dynamicGbp(gbp_tag received from RADIUS)type==gbpResourcetype==staticGbp(applying gbp tag against matching conditions)
- Macs []string
- Client or resource MAC addresses matched by this ACL tag
- Network string
- If:
type==mac(optional. default isany)type==subnet(optional. default isany)type==networktype==resource(optional. default isany)type==staticGbpif from matching network (vlan)
- Port
Usage string - Required if
type==portUsage. Switch port usage name matched by this ACL tag - Radius
Group string - Required if:
type==radiusGrouptype==staticGbpif from matching radius_group
- Specs
[]Networktemplate
Acl Tags Spec - Layer 4 protocol and destination-port constraints for this ACL tag
- Subnets []string
- IP subnets matched by this ACL tag
- type string
- Classifier type that determines which ACL tag fields are evaluated
- ether_
types list(string) - Layer 2 EtherTypes matched by this ACL tag; defaults to
any - gbp_
tag number - Required if
type==dynamicGbp(gbp_tag received from RADIUS)type==gbpResourcetype==staticGbp(applying gbp tag against matching conditions)
- macs list(string)
- Client or resource MAC addresses matched by this ACL tag
- network string
- If:
type==mac(optional. default isany)type==subnet(optional. default isany)type==networktype==resource(optional. default isany)type==staticGbpif from matching network (vlan)
- port_
usage string - Required if
type==portUsage. Switch port usage name matched by this ACL tag - radius_
group string - Required if:
type==radiusGrouptype==staticGbpif from matching radius_group
- specs list(object)
- Layer 4 protocol and destination-port constraints for this ACL tag
- subnets list(string)
- IP subnets matched by this ACL tag
- type String
- Classifier type that determines which ACL tag fields are evaluated
- ether
Types List<String> - Layer 2 EtherTypes matched by this ACL tag; defaults to
any - gbp
Tag Integer - Required if
type==dynamicGbp(gbp_tag received from RADIUS)type==gbpResourcetype==staticGbp(applying gbp tag against matching conditions)
- macs List<String>
- Client or resource MAC addresses matched by this ACL tag
- network String
- If:
type==mac(optional. default isany)type==subnet(optional. default isany)type==networktype==resource(optional. default isany)type==staticGbpif from matching network (vlan)
- port
Usage String - Required if
type==portUsage. Switch port usage name matched by this ACL tag - radius
Group String - Required if:
type==radiusGrouptype==staticGbpif from matching radius_group
- specs
List<Networktemplate
Acl Tags Spec> - Layer 4 protocol and destination-port constraints for this ACL tag
- subnets List<String>
- IP subnets matched by this ACL tag
- type string
- Classifier type that determines which ACL tag fields are evaluated
- ether
Types string[] - Layer 2 EtherTypes matched by this ACL tag; defaults to
any - gbp
Tag number - Required if
type==dynamicGbp(gbp_tag received from RADIUS)type==gbpResourcetype==staticGbp(applying gbp tag against matching conditions)
- macs string[]
- Client or resource MAC addresses matched by this ACL tag
- network string
- If:
type==mac(optional. default isany)type==subnet(optional. default isany)type==networktype==resource(optional. default isany)type==staticGbpif from matching network (vlan)
- port
Usage string - Required if
type==portUsage. Switch port usage name matched by this ACL tag - radius
Group string - Required if:
type==radiusGrouptype==staticGbpif from matching radius_group
- specs
Networktemplate
Acl Tags Spec[] - Layer 4 protocol and destination-port constraints for this ACL tag
- subnets string[]
- IP subnets matched by this ACL tag
- type str
- Classifier type that determines which ACL tag fields are evaluated
- ether_
types Sequence[str] - Layer 2 EtherTypes matched by this ACL tag; defaults to
any - gbp_
tag int - Required if
type==dynamicGbp(gbp_tag received from RADIUS)type==gbpResourcetype==staticGbp(applying gbp tag against matching conditions)
- macs Sequence[str]
- Client or resource MAC addresses matched by this ACL tag
- network str
- If:
type==mac(optional. default isany)type==subnet(optional. default isany)type==networktype==resource(optional. default isany)type==staticGbpif from matching network (vlan)
- port_
usage str - Required if
type==portUsage. Switch port usage name matched by this ACL tag - radius_
group str - Required if:
type==radiusGrouptype==staticGbpif from matching radius_group
- specs
Sequence[Networktemplate
Acl Tags Spec] - Layer 4 protocol and destination-port constraints for this ACL tag
- subnets Sequence[str]
- IP subnets matched by this ACL tag
- type String
- Classifier type that determines which ACL tag fields are evaluated
- ether
Types List<String> - Layer 2 EtherTypes matched by this ACL tag; defaults to
any - gbp
Tag Number - Required if
type==dynamicGbp(gbp_tag received from RADIUS)type==gbpResourcetype==staticGbp(applying gbp tag against matching conditions)
- macs List<String>
- Client or resource MAC addresses matched by this ACL tag
- network String
- If:
type==mac(optional. default isany)type==subnet(optional. default isany)type==networktype==resource(optional. default isany)type==staticGbpif from matching network (vlan)
- port
Usage String - Required if
type==portUsage. Switch port usage name matched by this ACL tag - radius
Group String - Required if:
type==radiusGrouptype==staticGbpif from matching radius_group
- specs List<Property Map>
- Layer 4 protocol and destination-port constraints for this ACL tag
- subnets List<String>
- IP subnets matched by this ACL tag
NetworktemplateAclTagsSpec, NetworktemplateAclTagsSpecArgs
- port_
range string - Matched dst port, "0" means any
- protocol string
tcp/udp/icmp/icmp6/gre/any/:protocol_number,protocolNumberis between 1-254, default isanyprotocolNumberis between 1-254
- port_
range str - Matched dst port, "0" means any
- protocol str
tcp/udp/icmp/icmp6/gre/any/:protocol_number,protocolNumberis between 1-254, default isanyprotocolNumberis between 1-254
NetworktemplateBgpConfig, NetworktemplateBgpConfigArgs
- Local
As string - Local BGP Autonomous System (AS) number for the switch
- Type string
- BGP session type for this switch BGP configuration
- Auth
Key string - Authentication key used for BGP neighbor sessions, when configured
- Bfd
Minimum intInterval - Minimum interval in milliseconds for BFD hello packets. A neighbor is considered failed when the device stops receiving replies after the specified interval. Value must be between 1 and 255000.
- Export
Policy string - Export policy must match one of the policy names defined in the
routingPoliciesproperty. - Hold
Time int - Default BGP hold time for switch BGP sessions
- Import
Policy string - Import policy must match one of the policy names defined in the
routingPoliciesproperty. - Neighbors
Dictionary<string, Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Bgp Config Neighbors> - BGP neighbor settings keyed by neighbor IP address
- Networks List<string>
- Network names used to add BGP groups to the corresponding VRFs
- Local
As string - Local BGP Autonomous System (AS) number for the switch
- Type string
- BGP session type for this switch BGP configuration
- Auth
Key string - Authentication key used for BGP neighbor sessions, when configured
- Bfd
Minimum intInterval - Minimum interval in milliseconds for BFD hello packets. A neighbor is considered failed when the device stops receiving replies after the specified interval. Value must be between 1 and 255000.
- Export
Policy string - Export policy must match one of the policy names defined in the
routingPoliciesproperty. - Hold
Time int - Default BGP hold time for switch BGP sessions
- Import
Policy string - Import policy must match one of the policy names defined in the
routingPoliciesproperty. - Neighbors
map[string]Networktemplate
Bgp Config Neighbors - BGP neighbor settings keyed by neighbor IP address
- Networks []string
- Network names used to add BGP groups to the corresponding VRFs
- local_
as string - Local BGP Autonomous System (AS) number for the switch
- type string
- BGP session type for this switch BGP configuration
- auth_
key string - Authentication key used for BGP neighbor sessions, when configured
- bfd_
minimum_ numberinterval - Minimum interval in milliseconds for BFD hello packets. A neighbor is considered failed when the device stops receiving replies after the specified interval. Value must be between 1 and 255000.
- export_
policy string - Export policy must match one of the policy names defined in the
routingPoliciesproperty. - hold_
time number - Default BGP hold time for switch BGP sessions
- import_
policy string - Import policy must match one of the policy names defined in the
routingPoliciesproperty. - neighbors map(object)
- BGP neighbor settings keyed by neighbor IP address
- networks list(string)
- Network names used to add BGP groups to the corresponding VRFs
- local
As String - Local BGP Autonomous System (AS) number for the switch
- type String
- BGP session type for this switch BGP configuration
- auth
Key String - Authentication key used for BGP neighbor sessions, when configured
- bfd
Minimum IntegerInterval - Minimum interval in milliseconds for BFD hello packets. A neighbor is considered failed when the device stops receiving replies after the specified interval. Value must be between 1 and 255000.
- export
Policy String - Export policy must match one of the policy names defined in the
routingPoliciesproperty. - hold
Time Integer - Default BGP hold time for switch BGP sessions
- import
Policy String - Import policy must match one of the policy names defined in the
routingPoliciesproperty. - neighbors
Map<String,Networktemplate
Bgp Config Neighbors> - BGP neighbor settings keyed by neighbor IP address
- networks List<String>
- Network names used to add BGP groups to the corresponding VRFs
- local
As string - Local BGP Autonomous System (AS) number for the switch
- type string
- BGP session type for this switch BGP configuration
- auth
Key string - Authentication key used for BGP neighbor sessions, when configured
- bfd
Minimum numberInterval - Minimum interval in milliseconds for BFD hello packets. A neighbor is considered failed when the device stops receiving replies after the specified interval. Value must be between 1 and 255000.
- export
Policy string - Export policy must match one of the policy names defined in the
routingPoliciesproperty. - hold
Time number - Default BGP hold time for switch BGP sessions
- import
Policy string - Import policy must match one of the policy names defined in the
routingPoliciesproperty. - neighbors
{[key: string]: Networktemplate
Bgp Config Neighbors} - BGP neighbor settings keyed by neighbor IP address
- networks string[]
- Network names used to add BGP groups to the corresponding VRFs
- local_
as str - Local BGP Autonomous System (AS) number for the switch
- type str
- BGP session type for this switch BGP configuration
- auth_
key str - Authentication key used for BGP neighbor sessions, when configured
- bfd_
minimum_ intinterval - Minimum interval in milliseconds for BFD hello packets. A neighbor is considered failed when the device stops receiving replies after the specified interval. Value must be between 1 and 255000.
- export_
policy str - Export policy must match one of the policy names defined in the
routingPoliciesproperty. - hold_
time int - Default BGP hold time for switch BGP sessions
- import_
policy str - Import policy must match one of the policy names defined in the
routingPoliciesproperty. - neighbors
Mapping[str, Networktemplate
Bgp Config Neighbors] - BGP neighbor settings keyed by neighbor IP address
- networks Sequence[str]
- Network names used to add BGP groups to the corresponding VRFs
- local
As String - Local BGP Autonomous System (AS) number for the switch
- type String
- BGP session type for this switch BGP configuration
- auth
Key String - Authentication key used for BGP neighbor sessions, when configured
- bfd
Minimum NumberInterval - Minimum interval in milliseconds for BFD hello packets. A neighbor is considered failed when the device stops receiving replies after the specified interval. Value must be between 1 and 255000.
- export
Policy String - Export policy must match one of the policy names defined in the
routingPoliciesproperty. - hold
Time Number - Default BGP hold time for switch BGP sessions
- import
Policy String - Import policy must match one of the policy names defined in the
routingPoliciesproperty. - neighbors Map<Property Map>
- BGP neighbor settings keyed by neighbor IP address
- networks List<String>
- Network names used to add BGP groups to the corresponding VRFs
NetworktemplateBgpConfigNeighbors, NetworktemplateBgpConfigNeighborsArgs
- Neighbor
As string - Autonomous System (AS) number of the BGP neighbor. For internal BGP, this must match
localAs. For external BGP, this must differ fromlocalAs. - Export
Policy string - Export policy must match one of the policy names defined in the
routingPoliciesproperty. - Hold
Time int - BGP hold time for this neighbor
- Import
Policy string - Import policy must match one of the policy names defined in the
routingPoliciesproperty. - Multihop
Ttl int - Time-to-live value for multihop BGP sessions to this neighbor
- Neighbor
As string - Autonomous System (AS) number of the BGP neighbor. For internal BGP, this must match
localAs. For external BGP, this must differ fromlocalAs. - Export
Policy string - Export policy must match one of the policy names defined in the
routingPoliciesproperty. - Hold
Time int - BGP hold time for this neighbor
- Import
Policy string - Import policy must match one of the policy names defined in the
routingPoliciesproperty. - Multihop
Ttl int - Time-to-live value for multihop BGP sessions to this neighbor
- neighbor_
as string - Autonomous System (AS) number of the BGP neighbor. For internal BGP, this must match
localAs. For external BGP, this must differ fromlocalAs. - export_
policy string - Export policy must match one of the policy names defined in the
routingPoliciesproperty. - hold_
time number - BGP hold time for this neighbor
- import_
policy string - Import policy must match one of the policy names defined in the
routingPoliciesproperty. - multihop_
ttl number - Time-to-live value for multihop BGP sessions to this neighbor
- neighbor
As String - Autonomous System (AS) number of the BGP neighbor. For internal BGP, this must match
localAs. For external BGP, this must differ fromlocalAs. - export
Policy String - Export policy must match one of the policy names defined in the
routingPoliciesproperty. - hold
Time Integer - BGP hold time for this neighbor
- import
Policy String - Import policy must match one of the policy names defined in the
routingPoliciesproperty. - multihop
Ttl Integer - Time-to-live value for multihop BGP sessions to this neighbor
- neighbor
As string - Autonomous System (AS) number of the BGP neighbor. For internal BGP, this must match
localAs. For external BGP, this must differ fromlocalAs. - export
Policy string - Export policy must match one of the policy names defined in the
routingPoliciesproperty. - hold
Time number - BGP hold time for this neighbor
- import
Policy string - Import policy must match one of the policy names defined in the
routingPoliciesproperty. - multihop
Ttl number - Time-to-live value for multihop BGP sessions to this neighbor
- neighbor_
as str - Autonomous System (AS) number of the BGP neighbor. For internal BGP, this must match
localAs. For external BGP, this must differ fromlocalAs. - export_
policy str - Export policy must match one of the policy names defined in the
routingPoliciesproperty. - hold_
time int - BGP hold time for this neighbor
- import_
policy str - Import policy must match one of the policy names defined in the
routingPoliciesproperty. - multihop_
ttl int - Time-to-live value for multihop BGP sessions to this neighbor
- neighbor
As String - Autonomous System (AS) number of the BGP neighbor. For internal BGP, this must match
localAs. For external BGP, this must differ fromlocalAs. - export
Policy String - Export policy must match one of the policy names defined in the
routingPoliciesproperty. - hold
Time Number - BGP hold time for this neighbor
- import
Policy String - Import policy must match one of the policy names defined in the
routingPoliciesproperty. - multihop
Ttl Number - Time-to-live value for multihop BGP sessions to this neighbor
NetworktemplateDhcpSnooping, NetworktemplateDhcpSnoopingArgs
- All
Networks bool - Whether DHCP snooping applies to all configured networks
- Enable
Arp boolSpoof Check - Enable for dynamic ARP inspection check
- Enable
Ip boolSource Guard - Enable for check for forging source IP address
- Enabled bool
- Whether DHCP snooping is enabled
- Networks List<string>
- Network names with DHCP snooping enabled when
allNetworks==false
- All
Networks bool - Whether DHCP snooping applies to all configured networks
- Enable
Arp boolSpoof Check - Enable for dynamic ARP inspection check
- Enable
Ip boolSource Guard - Enable for check for forging source IP address
- Enabled bool
- Whether DHCP snooping is enabled
- Networks []string
- Network names with DHCP snooping enabled when
allNetworks==false
- all_
networks bool - Whether DHCP snooping applies to all configured networks
- enable_
arp_ boolspoof_ check - Enable for dynamic ARP inspection check
- enable_
ip_ boolsource_ guard - Enable for check for forging source IP address
- enabled bool
- Whether DHCP snooping is enabled
- networks list(string)
- Network names with DHCP snooping enabled when
allNetworks==false
- all
Networks Boolean - Whether DHCP snooping applies to all configured networks
- enable
Arp BooleanSpoof Check - Enable for dynamic ARP inspection check
- enable
Ip BooleanSource Guard - Enable for check for forging source IP address
- enabled Boolean
- Whether DHCP snooping is enabled
- networks List<String>
- Network names with DHCP snooping enabled when
allNetworks==false
- all
Networks boolean - Whether DHCP snooping applies to all configured networks
- enable
Arp booleanSpoof Check - Enable for dynamic ARP inspection check
- enable
Ip booleanSource Guard - Enable for check for forging source IP address
- enabled boolean
- Whether DHCP snooping is enabled
- networks string[]
- Network names with DHCP snooping enabled when
allNetworks==false
- all_
networks bool - Whether DHCP snooping applies to all configured networks
- enable_
arp_ boolspoof_ check - Enable for dynamic ARP inspection check
- enable_
ip_ boolsource_ guard - Enable for check for forging source IP address
- enabled bool
- Whether DHCP snooping is enabled
- networks Sequence[str]
- Network names with DHCP snooping enabled when
allNetworks==false
- all
Networks Boolean - Whether DHCP snooping applies to all configured networks
- enable
Arp BooleanSpoof Check - Enable for dynamic ARP inspection check
- enable
Ip BooleanSource Guard - Enable for check for forging source IP address
- enabled Boolean
- Whether DHCP snooping is enabled
- networks List<String>
- Network names with DHCP snooping enabled when
allNetworks==false
NetworktemplateExtraRoutes, NetworktemplateExtraRoutesArgs
- Via string
- Next-hop IPv4 address or ECMP next-hop IPv4 addresses for the route
- Discard bool
- Whether to install a discard route; this takes precedence over next-hop settings
- Metric int
- Route metric for the IPv4 static route
- Next
Qualified Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Extra Routes Next Qualified> - Qualified next-hop settings keyed by IPv4 next-hop address
- No
Resolve bool - Whether to prevent recursive next-hop resolution for the IPv4 static route
- Preference int
- Route preference for the IPv4 static route
- Via string
- Next-hop IPv4 address or ECMP next-hop IPv4 addresses for the route
- Discard bool
- Whether to install a discard route; this takes precedence over next-hop settings
- Metric int
- Route metric for the IPv4 static route
- Next
Qualified map[string]NetworktemplateExtra Routes Next Qualified - Qualified next-hop settings keyed by IPv4 next-hop address
- No
Resolve bool - Whether to prevent recursive next-hop resolution for the IPv4 static route
- Preference int
- Route preference for the IPv4 static route
- via string
- Next-hop IPv4 address or ECMP next-hop IPv4 addresses for the route
- discard bool
- Whether to install a discard route; this takes precedence over next-hop settings
- metric number
- Route metric for the IPv4 static route
- next_
qualified map(object) - Qualified next-hop settings keyed by IPv4 next-hop address
- no_
resolve bool - Whether to prevent recursive next-hop resolution for the IPv4 static route
- preference number
- Route preference for the IPv4 static route
- via String
- Next-hop IPv4 address or ECMP next-hop IPv4 addresses for the route
- discard Boolean
- Whether to install a discard route; this takes precedence over next-hop settings
- metric Integer
- Route metric for the IPv4 static route
- next
Qualified Map<String,NetworktemplateExtra Routes Next Qualified> - Qualified next-hop settings keyed by IPv4 next-hop address
- no
Resolve Boolean - Whether to prevent recursive next-hop resolution for the IPv4 static route
- preference Integer
- Route preference for the IPv4 static route
- via string
- Next-hop IPv4 address or ECMP next-hop IPv4 addresses for the route
- discard boolean
- Whether to install a discard route; this takes precedence over next-hop settings
- metric number
- Route metric for the IPv4 static route
- next
Qualified {[key: string]: NetworktemplateExtra Routes Next Qualified} - Qualified next-hop settings keyed by IPv4 next-hop address
- no
Resolve boolean - Whether to prevent recursive next-hop resolution for the IPv4 static route
- preference number
- Route preference for the IPv4 static route
- via str
- Next-hop IPv4 address or ECMP next-hop IPv4 addresses for the route
- discard bool
- Whether to install a discard route; this takes precedence over next-hop settings
- metric int
- Route metric for the IPv4 static route
- next_
qualified Mapping[str, NetworktemplateExtra Routes Next Qualified] - Qualified next-hop settings keyed by IPv4 next-hop address
- no_
resolve bool - Whether to prevent recursive next-hop resolution for the IPv4 static route
- preference int
- Route preference for the IPv4 static route
- via String
- Next-hop IPv4 address or ECMP next-hop IPv4 addresses for the route
- discard Boolean
- Whether to install a discard route; this takes precedence over next-hop settings
- metric Number
- Route metric for the IPv4 static route
- next
Qualified Map<Property Map> - Qualified next-hop settings keyed by IPv4 next-hop address
- no
Resolve Boolean - Whether to prevent recursive next-hop resolution for the IPv4 static route
- preference Number
- Route preference for the IPv4 static route
NetworktemplateExtraRoutes6, NetworktemplateExtraRoutes6Args
- Via string
- Next-hop IPv6 address or ECMP next-hop IPv6 addresses for the route
- Discard bool
- Whether to install a discard route; this takes precedence over next-hop settings
- Metric int
- Route metric for the IPv6 static route
- Next
Qualified Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Extra Routes6Next Qualified> - Qualified next-hop settings keyed by IPv6 next-hop address
- No
Resolve bool - Whether to prevent recursive next-hop resolution for the IPv6 static route
- Preference int
- Route preference for the IPv6 static route
- Via string
- Next-hop IPv6 address or ECMP next-hop IPv6 addresses for the route
- Discard bool
- Whether to install a discard route; this takes precedence over next-hop settings
- Metric int
- Route metric for the IPv6 static route
- Next
Qualified map[string]NetworktemplateExtra Routes6Next Qualified - Qualified next-hop settings keyed by IPv6 next-hop address
- No
Resolve bool - Whether to prevent recursive next-hop resolution for the IPv6 static route
- Preference int
- Route preference for the IPv6 static route
- via string
- Next-hop IPv6 address or ECMP next-hop IPv6 addresses for the route
- discard bool
- Whether to install a discard route; this takes precedence over next-hop settings
- metric number
- Route metric for the IPv6 static route
- next_
qualified map(object) - Qualified next-hop settings keyed by IPv6 next-hop address
- no_
resolve bool - Whether to prevent recursive next-hop resolution for the IPv6 static route
- preference number
- Route preference for the IPv6 static route
- via String
- Next-hop IPv6 address or ECMP next-hop IPv6 addresses for the route
- discard Boolean
- Whether to install a discard route; this takes precedence over next-hop settings
- metric Integer
- Route metric for the IPv6 static route
- next
Qualified Map<String,NetworktemplateExtra Routes6Next Qualified> - Qualified next-hop settings keyed by IPv6 next-hop address
- no
Resolve Boolean - Whether to prevent recursive next-hop resolution for the IPv6 static route
- preference Integer
- Route preference for the IPv6 static route
- via string
- Next-hop IPv6 address or ECMP next-hop IPv6 addresses for the route
- discard boolean
- Whether to install a discard route; this takes precedence over next-hop settings
- metric number
- Route metric for the IPv6 static route
- next
Qualified {[key: string]: NetworktemplateExtra Routes6Next Qualified} - Qualified next-hop settings keyed by IPv6 next-hop address
- no
Resolve boolean - Whether to prevent recursive next-hop resolution for the IPv6 static route
- preference number
- Route preference for the IPv6 static route
- via str
- Next-hop IPv6 address or ECMP next-hop IPv6 addresses for the route
- discard bool
- Whether to install a discard route; this takes precedence over next-hop settings
- metric int
- Route metric for the IPv6 static route
- next_
qualified Mapping[str, NetworktemplateExtra Routes6Next Qualified] - Qualified next-hop settings keyed by IPv6 next-hop address
- no_
resolve bool - Whether to prevent recursive next-hop resolution for the IPv6 static route
- preference int
- Route preference for the IPv6 static route
- via String
- Next-hop IPv6 address or ECMP next-hop IPv6 addresses for the route
- discard Boolean
- Whether to install a discard route; this takes precedence over next-hop settings
- metric Number
- Route metric for the IPv6 static route
- next
Qualified Map<Property Map> - Qualified next-hop settings keyed by IPv6 next-hop address
- no
Resolve Boolean - Whether to prevent recursive next-hop resolution for the IPv6 static route
- preference Number
- Route preference for the IPv6 static route
NetworktemplateExtraRoutes6NextQualified, NetworktemplateExtraRoutes6NextQualifiedArgs
- Metric int
- Route metric for this qualified IPv6 next hop
- Preference int
- Route preference for this qualified IPv6 next hop
- Metric int
- Route metric for this qualified IPv6 next hop
- Preference int
- Route preference for this qualified IPv6 next hop
- metric number
- Route metric for this qualified IPv6 next hop
- preference number
- Route preference for this qualified IPv6 next hop
- metric Integer
- Route metric for this qualified IPv6 next hop
- preference Integer
- Route preference for this qualified IPv6 next hop
- metric number
- Route metric for this qualified IPv6 next hop
- preference number
- Route preference for this qualified IPv6 next hop
- metric int
- Route metric for this qualified IPv6 next hop
- preference int
- Route preference for this qualified IPv6 next hop
- metric Number
- Route metric for this qualified IPv6 next hop
- preference Number
- Route preference for this qualified IPv6 next hop
NetworktemplateExtraRoutesNextQualified, NetworktemplateExtraRoutesNextQualifiedArgs
- Metric int
- Route metric for this qualified IPv4 next hop
- Preference int
- Route preference for this qualified IPv4 next hop
- Metric int
- Route metric for this qualified IPv4 next hop
- Preference int
- Route preference for this qualified IPv4 next hop
- metric number
- Route metric for this qualified IPv4 next hop
- preference number
- Route preference for this qualified IPv4 next hop
- metric Integer
- Route metric for this qualified IPv4 next hop
- preference Integer
- Route preference for this qualified IPv4 next hop
- metric number
- Route metric for this qualified IPv4 next hop
- preference number
- Route preference for this qualified IPv4 next hop
- metric int
- Route metric for this qualified IPv4 next hop
- preference int
- Route preference for this qualified IPv4 next hop
- metric Number
- Route metric for this qualified IPv4 next hop
- preference Number
- Route preference for this qualified IPv4 next hop
NetworktemplateMistNac, NetworktemplateMistNacArgs
NetworktemplateNetworks, NetworktemplateNetworksArgs
- Vlan
Id string - VLAN identifier for this switch network
- Gateway string
- Only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
- Gateway6 string
- Only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
- Isolation bool
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolationVlanId is required). NOTE: this features requires uplink device to also a be Juniper device and
interSwitchLinkto be set. See alsointerIsolationNetworkLinkandcommunityVlanIdin port_usage - Isolation
Vlan stringId - Required when
isolation==true. Unique VLAN ID used for client isolation - Subnet string
- Optional for pure switching, required when L3 / routing features are used
- Subnet6 string
- Optional for pure switching, required when L3 / routing features are used
- Vlan
Id string - VLAN identifier for this switch network
- Gateway string
- Only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
- Gateway6 string
- Only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
- Isolation bool
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolationVlanId is required). NOTE: this features requires uplink device to also a be Juniper device and
interSwitchLinkto be set. See alsointerIsolationNetworkLinkandcommunityVlanIdin port_usage - Isolation
Vlan stringId - Required when
isolation==true. Unique VLAN ID used for client isolation - Subnet string
- Optional for pure switching, required when L3 / routing features are used
- Subnet6 string
- Optional for pure switching, required when L3 / routing features are used
- vlan_
id string - VLAN identifier for this switch network
- gateway string
- Only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
- gateway6 string
- Only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
- isolation bool
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolationVlanId is required). NOTE: this features requires uplink device to also a be Juniper device and
interSwitchLinkto be set. See alsointerIsolationNetworkLinkandcommunityVlanIdin port_usage - isolation_
vlan_ stringid - Required when
isolation==true. Unique VLAN ID used for client isolation - subnet string
- Optional for pure switching, required when L3 / routing features are used
- subnet6 string
- Optional for pure switching, required when L3 / routing features are used
- vlan
Id String - VLAN identifier for this switch network
- gateway String
- Only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
- gateway6 String
- Only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
- isolation Boolean
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolationVlanId is required). NOTE: this features requires uplink device to also a be Juniper device and
interSwitchLinkto be set. See alsointerIsolationNetworkLinkandcommunityVlanIdin port_usage - isolation
Vlan StringId - Required when
isolation==true. Unique VLAN ID used for client isolation - subnet String
- Optional for pure switching, required when L3 / routing features are used
- subnet6 String
- Optional for pure switching, required when L3 / routing features are used
- vlan
Id string - VLAN identifier for this switch network
- gateway string
- Only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
- gateway6 string
- Only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
- isolation boolean
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolationVlanId is required). NOTE: this features requires uplink device to also a be Juniper device and
interSwitchLinkto be set. See alsointerIsolationNetworkLinkandcommunityVlanIdin port_usage - isolation
Vlan stringId - Required when
isolation==true. Unique VLAN ID used for client isolation - subnet string
- Optional for pure switching, required when L3 / routing features are used
- subnet6 string
- Optional for pure switching, required when L3 / routing features are used
- vlan_
id str - VLAN identifier for this switch network
- gateway str
- Only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
- gateway6 str
- Only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
- isolation bool
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolationVlanId is required). NOTE: this features requires uplink device to also a be Juniper device and
interSwitchLinkto be set. See alsointerIsolationNetworkLinkandcommunityVlanIdin port_usage - isolation_
vlan_ strid - Required when
isolation==true. Unique VLAN ID used for client isolation - subnet str
- Optional for pure switching, required when L3 / routing features are used
- subnet6 str
- Optional for pure switching, required when L3 / routing features are used
- vlan
Id String - VLAN identifier for this switch network
- gateway String
- Only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
- gateway6 String
- Only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
- isolation Boolean
- whether to stop clients to talk to each other, default is false (when enabled, a unique isolationVlanId is required). NOTE: this features requires uplink device to also a be Juniper device and
interSwitchLinkto be set. See alsointerIsolationNetworkLinkandcommunityVlanIdin port_usage - isolation
Vlan StringId - Required when
isolation==true. Unique VLAN ID used for client isolation - subnet String
- Optional for pure switching, required when L3 / routing features are used
- subnet6 String
- Optional for pure switching, required when L3 / routing features are used
NetworktemplateOspfAreas, NetworktemplateOspfAreasArgs
- Networks
Dictionary<string, Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Ospf Areas Networks> - OSPF network settings keyed by network name
- Include
Loopback bool - Whether loopback interfaces are included in this OSPF area
- Type string
- Area type for this OSPF area
- Networks
map[string]Networktemplate
Ospf Areas Networks - OSPF network settings keyed by network name
- Include
Loopback bool - Whether loopback interfaces are included in this OSPF area
- Type string
- Area type for this OSPF area
- networks map(object)
- OSPF network settings keyed by network name
- include_
loopback bool - Whether loopback interfaces are included in this OSPF area
- type string
- Area type for this OSPF area
- networks
Map<String,Networktemplate
Ospf Areas Networks> - OSPF network settings keyed by network name
- include
Loopback Boolean - Whether loopback interfaces are included in this OSPF area
- type String
- Area type for this OSPF area
- networks
{[key: string]: Networktemplate
Ospf Areas Networks} - OSPF network settings keyed by network name
- include
Loopback boolean - Whether loopback interfaces are included in this OSPF area
- type string
- Area type for this OSPF area
- networks
Mapping[str, Networktemplate
Ospf Areas Networks] - OSPF network settings keyed by network name
- include_
loopback bool - Whether loopback interfaces are included in this OSPF area
- type str
- Area type for this OSPF area
- networks Map<Property Map>
- OSPF network settings keyed by network name
- include
Loopback Boolean - Whether loopback interfaces are included in this OSPF area
- type String
- Area type for this OSPF area
NetworktemplateOspfAreasNetworks, NetworktemplateOspfAreasNetworksArgs
- Auth
Keys Dictionary<string, string> - Required if
authType==md5. Property key is the key number - Auth
Password string - Required if
authType==password, the password, max length is 8 - Auth
Type string - Authentication method used by this OSPF network
- Bfd
Minimum intInterval - Minimum BFD interval for this OSPF network, in milliseconds
- Dead
Interval int - OSPF dead interval for this network, in seconds
- Export
Policy string - Routing policy used to export routes from this OSPF network
- Hello
Interval int - OSPF hello interval for this network, in seconds
- Import
Policy string - Routing policy used to import routes for this OSPF network
- Interface
Type string - OSPF interface type used for this network
- Metric int
- OSPF metric assigned to this network
- No
Readvertise boolTo Overlay - By default, we'll re-advertise all learned OSPF routes toward overlay
- Passive bool
- Whether to send OSPF-Hello
- Auth
Keys map[string]string - Required if
authType==md5. Property key is the key number - Auth
Password string - Required if
authType==password, the password, max length is 8 - Auth
Type string - Authentication method used by this OSPF network
- Bfd
Minimum intInterval - Minimum BFD interval for this OSPF network, in milliseconds
- Dead
Interval int - OSPF dead interval for this network, in seconds
- Export
Policy string - Routing policy used to export routes from this OSPF network
- Hello
Interval int - OSPF hello interval for this network, in seconds
- Import
Policy string - Routing policy used to import routes for this OSPF network
- Interface
Type string - OSPF interface type used for this network
- Metric int
- OSPF metric assigned to this network
- No
Readvertise boolTo Overlay - By default, we'll re-advertise all learned OSPF routes toward overlay
- Passive bool
- Whether to send OSPF-Hello
- auth_
keys map(string) - Required if
authType==md5. Property key is the key number - auth_
password string - Required if
authType==password, the password, max length is 8 - auth_
type string - Authentication method used by this OSPF network
- bfd_
minimum_ numberinterval - Minimum BFD interval for this OSPF network, in milliseconds
- dead_
interval number - OSPF dead interval for this network, in seconds
- export_
policy string - Routing policy used to export routes from this OSPF network
- hello_
interval number - OSPF hello interval for this network, in seconds
- import_
policy string - Routing policy used to import routes for this OSPF network
- interface_
type string - OSPF interface type used for this network
- metric number
- OSPF metric assigned to this network
- no_
readvertise_ boolto_ overlay - By default, we'll re-advertise all learned OSPF routes toward overlay
- passive bool
- Whether to send OSPF-Hello
- auth
Keys Map<String,String> - Required if
authType==md5. Property key is the key number - auth
Password String - Required if
authType==password, the password, max length is 8 - auth
Type String - Authentication method used by this OSPF network
- bfd
Minimum IntegerInterval - Minimum BFD interval for this OSPF network, in milliseconds
- dead
Interval Integer - OSPF dead interval for this network, in seconds
- export
Policy String - Routing policy used to export routes from this OSPF network
- hello
Interval Integer - OSPF hello interval for this network, in seconds
- import
Policy String - Routing policy used to import routes for this OSPF network
- interface
Type String - OSPF interface type used for this network
- metric Integer
- OSPF metric assigned to this network
- no
Readvertise BooleanTo Overlay - By default, we'll re-advertise all learned OSPF routes toward overlay
- passive Boolean
- Whether to send OSPF-Hello
- auth
Keys {[key: string]: string} - Required if
authType==md5. Property key is the key number - auth
Password string - Required if
authType==password, the password, max length is 8 - auth
Type string - Authentication method used by this OSPF network
- bfd
Minimum numberInterval - Minimum BFD interval for this OSPF network, in milliseconds
- dead
Interval number - OSPF dead interval for this network, in seconds
- export
Policy string - Routing policy used to export routes from this OSPF network
- hello
Interval number - OSPF hello interval for this network, in seconds
- import
Policy string - Routing policy used to import routes for this OSPF network
- interface
Type string - OSPF interface type used for this network
- metric number
- OSPF metric assigned to this network
- no
Readvertise booleanTo Overlay - By default, we'll re-advertise all learned OSPF routes toward overlay
- passive boolean
- Whether to send OSPF-Hello
- auth_
keys Mapping[str, str] - Required if
authType==md5. Property key is the key number - auth_
password str - Required if
authType==password, the password, max length is 8 - auth_
type str - Authentication method used by this OSPF network
- bfd_
minimum_ intinterval - Minimum BFD interval for this OSPF network, in milliseconds
- dead_
interval int - OSPF dead interval for this network, in seconds
- export_
policy str - Routing policy used to export routes from this OSPF network
- hello_
interval int - OSPF hello interval for this network, in seconds
- import_
policy str - Routing policy used to import routes for this OSPF network
- interface_
type str - OSPF interface type used for this network
- metric int
- OSPF metric assigned to this network
- no_
readvertise_ boolto_ overlay - By default, we'll re-advertise all learned OSPF routes toward overlay
- passive bool
- Whether to send OSPF-Hello
- auth
Keys Map<String> - Required if
authType==md5. Property key is the key number - auth
Password String - Required if
authType==password, the password, max length is 8 - auth
Type String - Authentication method used by this OSPF network
- bfd
Minimum NumberInterval - Minimum BFD interval for this OSPF network, in milliseconds
- dead
Interval Number - OSPF dead interval for this network, in seconds
- export
Policy String - Routing policy used to export routes from this OSPF network
- hello
Interval Number - OSPF hello interval for this network, in seconds
- import
Policy String - Routing policy used to import routes for this OSPF network
- interface
Type String - OSPF interface type used for this network
- metric Number
- OSPF metric assigned to this network
- no
Readvertise BooleanTo Overlay - By default, we'll re-advertise all learned OSPF routes toward overlay
- passive Boolean
- Whether to send OSPF-Hello
NetworktemplatePortMirroring, NetworktemplatePortMirroringArgs
- Input
Networks List<string>Ingresses - At least one mirror input source should be specified. Networks whose ingress traffic is mirrored
- Input
Port List<string>Ids Egresses - At least one mirror input source should be specified. Switch ports whose egress traffic is mirrored
- Input
Port List<string>Ids Ingresses - At least one mirror input source should be specified. Switch ports whose ingress traffic is mirrored
- Output
Ip stringAddress - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - Output
Network string - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - Output
Port stringId - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided
- Input
Networks []stringIngresses - At least one mirror input source should be specified. Networks whose ingress traffic is mirrored
- Input
Port []stringIds Egresses - At least one mirror input source should be specified. Switch ports whose egress traffic is mirrored
- Input
Port []stringIds Ingresses - At least one mirror input source should be specified. Switch ports whose ingress traffic is mirrored
- Output
Ip stringAddress - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - Output
Network string - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - Output
Port stringId - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided
- input_
networks_ list(string)ingresses - At least one mirror input source should be specified. Networks whose ingress traffic is mirrored
- input_
port_ list(string)ids_ egresses - At least one mirror input source should be specified. Switch ports whose egress traffic is mirrored
- input_
port_ list(string)ids_ ingresses - At least one mirror input source should be specified. Switch ports whose ingress traffic is mirrored
- output_
ip_ stringaddress - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output_
network string - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output_
port_ stringid - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided
- input
Networks List<String>Ingresses - At least one mirror input source should be specified. Networks whose ingress traffic is mirrored
- input
Port List<String>Ids Egresses - At least one mirror input source should be specified. Switch ports whose egress traffic is mirrored
- input
Port List<String>Ids Ingresses - At least one mirror input source should be specified. Switch ports whose ingress traffic is mirrored
- output
Ip StringAddress - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output
Network String - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output
Port StringId - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided
- input
Networks string[]Ingresses - At least one mirror input source should be specified. Networks whose ingress traffic is mirrored
- input
Port string[]Ids Egresses - At least one mirror input source should be specified. Switch ports whose egress traffic is mirrored
- input
Port string[]Ids Ingresses - At least one mirror input source should be specified. Switch ports whose ingress traffic is mirrored
- output
Ip stringAddress - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output
Network string - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output
Port stringId - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided
- input_
networks_ Sequence[str]ingresses - At least one mirror input source should be specified. Networks whose ingress traffic is mirrored
- input_
port_ Sequence[str]ids_ egresses - At least one mirror input source should be specified. Switch ports whose egress traffic is mirrored
- input_
port_ Sequence[str]ids_ ingresses - At least one mirror input source should be specified. Switch ports whose ingress traffic is mirrored
- output_
ip_ straddress - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output_
network str - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output_
port_ strid - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided
- input
Networks List<String>Ingresses - At least one mirror input source should be specified. Networks whose ingress traffic is mirrored
- input
Port List<String>Ids Egresses - At least one mirror input source should be specified. Switch ports whose egress traffic is mirrored
- input
Port List<String>Ids Ingresses - At least one mirror input source should be specified. Switch ports whose ingress traffic is mirrored
- output
Ip StringAddress - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output
Network String - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output
Port StringId - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided
NetworktemplatePortUsages, NetworktemplatePortUsagesArgs
- All
Networks bool - Only if
mode==trunk. Whether to trunk all network/vlans - Allow
Dhcpd bool - Only applies when
mode!=dynamic. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting;true: ports become trusted ports allowing DHCP server traffic,false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted). - Allow
Multiple boolSupplicants - Only if
mode!=dynamic - Bypass
Auth boolWhen Server Down - Only if
mode!=dynamicandportAuth==dot1x. Bypass auth for known clients if set to true when RADIUS server is down - Bypass
Auth boolWhen Server Down For Unknown Client - Only if
mode!=dynamicandportAuth=dot1x. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down - Bypass
Auth boolWhen Server Down For Voip - Only if
mode!=dynamicandportAuth==dot1x. Bypass auth for VOIP if set to true when RADIUS server is down - Community
Vlan intId - Only if
mode!=dynamic. To be used together withisolationunder networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other - Description string
- Only if
mode!=dynamic - Disable
Autoneg bool - Only if
mode!=dynamic. If speed and duplex are specified, whether to disable autonegotiation - Disabled bool
- Only if
mode!=dynamic. Whether the port is disabled - Duplex string
- Only if
mode!=dynamic. Link duplex mode for this port usage - Dynamic
Vlan List<string>Networks - Only if
mode!=dynamicandportAuth==dot1x. Networks or VLANs that RADIUS can return for dynamic VLAN assignment - Enable
Mac boolAuth - Only if
mode!=dynamicandportAuth==dot1x. Whether to enable MAC Auth - Enable
Qos bool - Only if
mode!=dynamic - Guest
Network string - Only if
mode!=dynamicandportAuth==dot1x. Which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - Inter
Isolation boolNetwork Link - Only if
mode!=dynamic.interIsolationNetworkLinkis used together withisolationunder networks, signaling that this port connects to isolated networks - Inter
Switch boolLink - Only if
mode!=dynamic.interSwitchLinkis used together withisolationunder networks. NOTE:interSwitchLinkworks only between Juniper devices. This has to be applied to both ports connected together - Mac
Auth boolOnly - Only if
mode!=dynamicandenableMacAuth==true - Mac
Auth boolPreferred - Only if
mode!=dynamic+enableMacAuth==true+macAuthOnly==false, dot1x will be given priority then mac_auth. Enable this to prefer macAuth over dot1x. - Mac
Auth stringProtocol - Only if
mode!=dynamicandenableMacAuth==true. MAC authentication protocol to use; ignored if Mist NAC is enabled - Mac
Limit string - Only if
mode!=dynamicmax number of mac addresses, default is 0 for unlimited, otherwise range is 1 to 16383 (upper bound constrained by platform) - Mode string
- Switching mode for this port usage
- Mtu string
- Only if
mode!=dynamicmedia maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. Value between 256 and 9216, default value is 1514. - Networks List<string>
- Only if
mode==trunk. Network or VLAN names to trunk - Persist
Mac bool - Only if
mode==accessandportAuth!=dot1x. Whether the port should retain dynamically learned MAC addresses - Poe
Disabled bool - Only if
mode!=dynamic. Whether PoE capabilities are disabled for a port - Poe
Keep boolState When Reboot - Only if
mode!=dynamic. Whether Perpetual PoE is enabled; keeps PoE state across reboots - Poe
Priority string - Only if
mode!=dynamic. PoE priority for ports using this port usage - Port
Auth string - Only if
mode!=dynamic. 802.1X authentication mode for this port usage - Port
Network string - Only if
mode!=dynamic. Native network/vlan for untagged traffic - Reauth
Interval string - Only if
mode!=dynamicandportAuth=dot1xreauthentication interval range between 10 and 65535 (default: 3600) - Reset
Default stringWhen - Only if
mode==dynamic. Condition that resets a dynamic port to the default port usage - Rules
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Port Usages Rule> - Only if
mode==dynamic. Dynamic matching rules that select the port usage to apply - Server
Fail stringNetwork - Only if
mode!=dynamicandportAuth==dot1x. Sets server fail fallback vlan - Server
Fail intRetry Interval - Only if
mode!=dynamicandportAuth==dot1x. Interval, in seconds. Sets the wait time before retrying authentication after RADIUS failure to reduce client flapping. Range 120-65535 - Server
Reject stringNetwork - Only if
mode!=dynamicandportAuth==dot1x. When RADIUS server reject / fails - Speed string
- Only if
mode!=dynamic. Link speed for this port usage - Storm
Control Pulumi.Juniper Mist. Org. Inputs. Networktemplate Port Usages Storm Control - Only if
mode!=dynamic. Storm-control settings for this port usage - Stp
Disable bool - Only if
mode!=dynamicandstpRequired==false. Drop bridge protocol data units (BPDUs ) that enter any interface or a specified interface - Stp
Edge bool - Only if
mode!=dynamic. When enabled, the port is not expected to receive BPDU frames - Stp
No boolRoot Port - Only if
mode!=dynamic - Stp
P2p bool - Only if
mode!=dynamic - Stp
Required bool - Only if
mode!=dynamic. Whether to remain in block state if no BPDU is received - Ui
Evpntopo stringId - Optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
- Use
Vstp bool - If this is connected to a vstp network
- Voip
Network string - Only if
mode!=dynamic. Network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- All
Networks bool - Only if
mode==trunk. Whether to trunk all network/vlans - Allow
Dhcpd bool - Only applies when
mode!=dynamic. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting;true: ports become trusted ports allowing DHCP server traffic,false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted). - Allow
Multiple boolSupplicants - Only if
mode!=dynamic - Bypass
Auth boolWhen Server Down - Only if
mode!=dynamicandportAuth==dot1x. Bypass auth for known clients if set to true when RADIUS server is down - Bypass
Auth boolWhen Server Down For Unknown Client - Only if
mode!=dynamicandportAuth=dot1x. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down - Bypass
Auth boolWhen Server Down For Voip - Only if
mode!=dynamicandportAuth==dot1x. Bypass auth for VOIP if set to true when RADIUS server is down - Community
Vlan intId - Only if
mode!=dynamic. To be used together withisolationunder networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other - Description string
- Only if
mode!=dynamic - Disable
Autoneg bool - Only if
mode!=dynamic. If speed and duplex are specified, whether to disable autonegotiation - Disabled bool
- Only if
mode!=dynamic. Whether the port is disabled - Duplex string
- Only if
mode!=dynamic. Link duplex mode for this port usage - Dynamic
Vlan []stringNetworks - Only if
mode!=dynamicandportAuth==dot1x. Networks or VLANs that RADIUS can return for dynamic VLAN assignment - Enable
Mac boolAuth - Only if
mode!=dynamicandportAuth==dot1x. Whether to enable MAC Auth - Enable
Qos bool - Only if
mode!=dynamic - Guest
Network string - Only if
mode!=dynamicandportAuth==dot1x. Which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - Inter
Isolation boolNetwork Link - Only if
mode!=dynamic.interIsolationNetworkLinkis used together withisolationunder networks, signaling that this port connects to isolated networks - Inter
Switch boolLink - Only if
mode!=dynamic.interSwitchLinkis used together withisolationunder networks. NOTE:interSwitchLinkworks only between Juniper devices. This has to be applied to both ports connected together - Mac
Auth boolOnly - Only if
mode!=dynamicandenableMacAuth==true - Mac
Auth boolPreferred - Only if
mode!=dynamic+enableMacAuth==true+macAuthOnly==false, dot1x will be given priority then mac_auth. Enable this to prefer macAuth over dot1x. - Mac
Auth stringProtocol - Only if
mode!=dynamicandenableMacAuth==true. MAC authentication protocol to use; ignored if Mist NAC is enabled - Mac
Limit string - Only if
mode!=dynamicmax number of mac addresses, default is 0 for unlimited, otherwise range is 1 to 16383 (upper bound constrained by platform) - Mode string
- Switching mode for this port usage
- Mtu string
- Only if
mode!=dynamicmedia maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. Value between 256 and 9216, default value is 1514. - Networks []string
- Only if
mode==trunk. Network or VLAN names to trunk - Persist
Mac bool - Only if
mode==accessandportAuth!=dot1x. Whether the port should retain dynamically learned MAC addresses - Poe
Disabled bool - Only if
mode!=dynamic. Whether PoE capabilities are disabled for a port - Poe
Keep boolState When Reboot - Only if
mode!=dynamic. Whether Perpetual PoE is enabled; keeps PoE state across reboots - Poe
Priority string - Only if
mode!=dynamic. PoE priority for ports using this port usage - Port
Auth string - Only if
mode!=dynamic. 802.1X authentication mode for this port usage - Port
Network string - Only if
mode!=dynamic. Native network/vlan for untagged traffic - Reauth
Interval string - Only if
mode!=dynamicandportAuth=dot1xreauthentication interval range between 10 and 65535 (default: 3600) - Reset
Default stringWhen - Only if
mode==dynamic. Condition that resets a dynamic port to the default port usage - Rules
[]Networktemplate
Port Usages Rule - Only if
mode==dynamic. Dynamic matching rules that select the port usage to apply - Server
Fail stringNetwork - Only if
mode!=dynamicandportAuth==dot1x. Sets server fail fallback vlan - Server
Fail intRetry Interval - Only if
mode!=dynamicandportAuth==dot1x. Interval, in seconds. Sets the wait time before retrying authentication after RADIUS failure to reduce client flapping. Range 120-65535 - Server
Reject stringNetwork - Only if
mode!=dynamicandportAuth==dot1x. When RADIUS server reject / fails - Speed string
- Only if
mode!=dynamic. Link speed for this port usage - Storm
Control NetworktemplatePort Usages Storm Control - Only if
mode!=dynamic. Storm-control settings for this port usage - Stp
Disable bool - Only if
mode!=dynamicandstpRequired==false. Drop bridge protocol data units (BPDUs ) that enter any interface or a specified interface - Stp
Edge bool - Only if
mode!=dynamic. When enabled, the port is not expected to receive BPDU frames - Stp
No boolRoot Port - Only if
mode!=dynamic - Stp
P2p bool - Only if
mode!=dynamic - Stp
Required bool - Only if
mode!=dynamic. Whether to remain in block state if no BPDU is received - Ui
Evpntopo stringId - Optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
- Use
Vstp bool - If this is connected to a vstp network
- Voip
Network string - Only if
mode!=dynamic. Network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- all_
networks bool - Only if
mode==trunk. Whether to trunk all network/vlans - allow_
dhcpd bool - Only applies when
mode!=dynamic. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting;true: ports become trusted ports allowing DHCP server traffic,false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted). - allow_
multiple_ boolsupplicants - Only if
mode!=dynamic - bypass_
auth_ boolwhen_ server_ down - Only if
mode!=dynamicandportAuth==dot1x. Bypass auth for known clients if set to true when RADIUS server is down - bypass_
auth_ boolwhen_ server_ down_ for_ unknown_ client - Only if
mode!=dynamicandportAuth=dot1x. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down - bypass_
auth_ boolwhen_ server_ down_ for_ voip - Only if
mode!=dynamicandportAuth==dot1x. Bypass auth for VOIP if set to true when RADIUS server is down - community_
vlan_ numberid - Only if
mode!=dynamic. To be used together withisolationunder networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other - description string
- Only if
mode!=dynamic - disable_
autoneg bool - Only if
mode!=dynamic. If speed and duplex are specified, whether to disable autonegotiation - disabled bool
- Only if
mode!=dynamic. Whether the port is disabled - duplex string
- Only if
mode!=dynamic. Link duplex mode for this port usage - dynamic_
vlan_ list(string)networks - Only if
mode!=dynamicandportAuth==dot1x. Networks or VLANs that RADIUS can return for dynamic VLAN assignment - enable_
mac_ boolauth - Only if
mode!=dynamicandportAuth==dot1x. Whether to enable MAC Auth - enable_
qos bool - Only if
mode!=dynamic - guest_
network string - Only if
mode!=dynamicandportAuth==dot1x. Which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - inter_
isolation_ boolnetwork_ link - Only if
mode!=dynamic.interIsolationNetworkLinkis used together withisolationunder networks, signaling that this port connects to isolated networks - inter_
switch_ boollink - Only if
mode!=dynamic.interSwitchLinkis used together withisolationunder networks. NOTE:interSwitchLinkworks only between Juniper devices. This has to be applied to both ports connected together - mac_
auth_ boolonly - Only if
mode!=dynamicandenableMacAuth==true - mac_
auth_ boolpreferred - Only if
mode!=dynamic+enableMacAuth==true+macAuthOnly==false, dot1x will be given priority then mac_auth. Enable this to prefer macAuth over dot1x. - mac_
auth_ stringprotocol - Only if
mode!=dynamicandenableMacAuth==true. MAC authentication protocol to use; ignored if Mist NAC is enabled - mac_
limit string - Only if
mode!=dynamicmax number of mac addresses, default is 0 for unlimited, otherwise range is 1 to 16383 (upper bound constrained by platform) - mode string
- Switching mode for this port usage
- mtu string
- Only if
mode!=dynamicmedia maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. Value between 256 and 9216, default value is 1514. - networks list(string)
- Only if
mode==trunk. Network or VLAN names to trunk - persist_
mac bool - Only if
mode==accessandportAuth!=dot1x. Whether the port should retain dynamically learned MAC addresses - poe_
disabled bool - Only if
mode!=dynamic. Whether PoE capabilities are disabled for a port - poe_
keep_ boolstate_ when_ reboot - Only if
mode!=dynamic. Whether Perpetual PoE is enabled; keeps PoE state across reboots - poe_
priority string - Only if
mode!=dynamic. PoE priority for ports using this port usage - port_
auth string - Only if
mode!=dynamic. 802.1X authentication mode for this port usage - port_
network string - Only if
mode!=dynamic. Native network/vlan for untagged traffic - reauth_
interval string - Only if
mode!=dynamicandportAuth=dot1xreauthentication interval range between 10 and 65535 (default: 3600) - reset_
default_ stringwhen - Only if
mode==dynamic. Condition that resets a dynamic port to the default port usage - rules list(object)
- Only if
mode==dynamic. Dynamic matching rules that select the port usage to apply - server_
fail_ stringnetwork - Only if
mode!=dynamicandportAuth==dot1x. Sets server fail fallback vlan - server_
fail_ numberretry_ interval - Only if
mode!=dynamicandportAuth==dot1x. Interval, in seconds. Sets the wait time before retrying authentication after RADIUS failure to reduce client flapping. Range 120-65535 - server_
reject_ stringnetwork - Only if
mode!=dynamicandportAuth==dot1x. When RADIUS server reject / fails - speed string
- Only if
mode!=dynamic. Link speed for this port usage - storm_
control object - Only if
mode!=dynamic. Storm-control settings for this port usage - stp_
disable bool - Only if
mode!=dynamicandstpRequired==false. Drop bridge protocol data units (BPDUs ) that enter any interface or a specified interface - stp_
edge bool - Only if
mode!=dynamic. When enabled, the port is not expected to receive BPDU frames - stp_
no_ boolroot_ port - Only if
mode!=dynamic - stp_
p2p bool - Only if
mode!=dynamic - stp_
required bool - Only if
mode!=dynamic. Whether to remain in block state if no BPDU is received - ui_
evpntopo_ stringid - Optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
- use_
vstp bool - If this is connected to a vstp network
- voip_
network string - Only if
mode!=dynamic. Network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- all
Networks Boolean - Only if
mode==trunk. Whether to trunk all network/vlans - allow
Dhcpd Boolean - Only applies when
mode!=dynamic. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting;true: ports become trusted ports allowing DHCP server traffic,false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted). - allow
Multiple BooleanSupplicants - Only if
mode!=dynamic - bypass
Auth BooleanWhen Server Down - Only if
mode!=dynamicandportAuth==dot1x. Bypass auth for known clients if set to true when RADIUS server is down - bypass
Auth BooleanWhen Server Down For Unknown Client - Only if
mode!=dynamicandportAuth=dot1x. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down - bypass
Auth BooleanWhen Server Down For Voip - Only if
mode!=dynamicandportAuth==dot1x. Bypass auth for VOIP if set to true when RADIUS server is down - community
Vlan IntegerId - Only if
mode!=dynamic. To be used together withisolationunder networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other - description String
- Only if
mode!=dynamic - disable
Autoneg Boolean - Only if
mode!=dynamic. If speed and duplex are specified, whether to disable autonegotiation - disabled Boolean
- Only if
mode!=dynamic. Whether the port is disabled - duplex String
- Only if
mode!=dynamic. Link duplex mode for this port usage - dynamic
Vlan List<String>Networks - Only if
mode!=dynamicandportAuth==dot1x. Networks or VLANs that RADIUS can return for dynamic VLAN assignment - enable
Mac BooleanAuth - Only if
mode!=dynamicandportAuth==dot1x. Whether to enable MAC Auth - enable
Qos Boolean - Only if
mode!=dynamic - guest
Network String - Only if
mode!=dynamicandportAuth==dot1x. Which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - inter
Isolation BooleanNetwork Link - Only if
mode!=dynamic.interIsolationNetworkLinkis used together withisolationunder networks, signaling that this port connects to isolated networks - inter
Switch BooleanLink - Only if
mode!=dynamic.interSwitchLinkis used together withisolationunder networks. NOTE:interSwitchLinkworks only between Juniper devices. This has to be applied to both ports connected together - mac
Auth BooleanOnly - Only if
mode!=dynamicandenableMacAuth==true - mac
Auth BooleanPreferred - Only if
mode!=dynamic+enableMacAuth==true+macAuthOnly==false, dot1x will be given priority then mac_auth. Enable this to prefer macAuth over dot1x. - mac
Auth StringProtocol - Only if
mode!=dynamicandenableMacAuth==true. MAC authentication protocol to use; ignored if Mist NAC is enabled - mac
Limit String - Only if
mode!=dynamicmax number of mac addresses, default is 0 for unlimited, otherwise range is 1 to 16383 (upper bound constrained by platform) - mode String
- Switching mode for this port usage
- mtu String
- Only if
mode!=dynamicmedia maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. Value between 256 and 9216, default value is 1514. - networks List<String>
- Only if
mode==trunk. Network or VLAN names to trunk - persist
Mac Boolean - Only if
mode==accessandportAuth!=dot1x. Whether the port should retain dynamically learned MAC addresses - poe
Disabled Boolean - Only if
mode!=dynamic. Whether PoE capabilities are disabled for a port - poe
Keep BooleanState When Reboot - Only if
mode!=dynamic. Whether Perpetual PoE is enabled; keeps PoE state across reboots - poe
Priority String - Only if
mode!=dynamic. PoE priority for ports using this port usage - port
Auth String - Only if
mode!=dynamic. 802.1X authentication mode for this port usage - port
Network String - Only if
mode!=dynamic. Native network/vlan for untagged traffic - reauth
Interval String - Only if
mode!=dynamicandportAuth=dot1xreauthentication interval range between 10 and 65535 (default: 3600) - reset
Default StringWhen - Only if
mode==dynamic. Condition that resets a dynamic port to the default port usage - rules
List<Networktemplate
Port Usages Rule> - Only if
mode==dynamic. Dynamic matching rules that select the port usage to apply - server
Fail StringNetwork - Only if
mode!=dynamicandportAuth==dot1x. Sets server fail fallback vlan - server
Fail IntegerRetry Interval - Only if
mode!=dynamicandportAuth==dot1x. Interval, in seconds. Sets the wait time before retrying authentication after RADIUS failure to reduce client flapping. Range 120-65535 - server
Reject StringNetwork - Only if
mode!=dynamicandportAuth==dot1x. When RADIUS server reject / fails - speed String
- Only if
mode!=dynamic. Link speed for this port usage - storm
Control NetworktemplatePort Usages Storm Control - Only if
mode!=dynamic. Storm-control settings for this port usage - stp
Disable Boolean - Only if
mode!=dynamicandstpRequired==false. Drop bridge protocol data units (BPDUs ) that enter any interface or a specified interface - stp
Edge Boolean - Only if
mode!=dynamic. When enabled, the port is not expected to receive BPDU frames - stp
No BooleanRoot Port - Only if
mode!=dynamic - stp
P2p Boolean - Only if
mode!=dynamic - stp
Required Boolean - Only if
mode!=dynamic. Whether to remain in block state if no BPDU is received - ui
Evpntopo StringId - Optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
- use
Vstp Boolean - If this is connected to a vstp network
- voip
Network String - Only if
mode!=dynamic. Network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- all
Networks boolean - Only if
mode==trunk. Whether to trunk all network/vlans - allow
Dhcpd boolean - Only applies when
mode!=dynamic. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting;true: ports become trusted ports allowing DHCP server traffic,false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted). - allow
Multiple booleanSupplicants - Only if
mode!=dynamic - bypass
Auth booleanWhen Server Down - Only if
mode!=dynamicandportAuth==dot1x. Bypass auth for known clients if set to true when RADIUS server is down - bypass
Auth booleanWhen Server Down For Unknown Client - Only if
mode!=dynamicandportAuth=dot1x. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down - bypass
Auth booleanWhen Server Down For Voip - Only if
mode!=dynamicandportAuth==dot1x. Bypass auth for VOIP if set to true when RADIUS server is down - community
Vlan numberId - Only if
mode!=dynamic. To be used together withisolationunder networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other - description string
- Only if
mode!=dynamic - disable
Autoneg boolean - Only if
mode!=dynamic. If speed and duplex are specified, whether to disable autonegotiation - disabled boolean
- Only if
mode!=dynamic. Whether the port is disabled - duplex string
- Only if
mode!=dynamic. Link duplex mode for this port usage - dynamic
Vlan string[]Networks - Only if
mode!=dynamicandportAuth==dot1x. Networks or VLANs that RADIUS can return for dynamic VLAN assignment - enable
Mac booleanAuth - Only if
mode!=dynamicandportAuth==dot1x. Whether to enable MAC Auth - enable
Qos boolean - Only if
mode!=dynamic - guest
Network string - Only if
mode!=dynamicandportAuth==dot1x. Which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - inter
Isolation booleanNetwork Link - Only if
mode!=dynamic.interIsolationNetworkLinkis used together withisolationunder networks, signaling that this port connects to isolated networks - inter
Switch booleanLink - Only if
mode!=dynamic.interSwitchLinkis used together withisolationunder networks. NOTE:interSwitchLinkworks only between Juniper devices. This has to be applied to both ports connected together - mac
Auth booleanOnly - Only if
mode!=dynamicandenableMacAuth==true - mac
Auth booleanPreferred - Only if
mode!=dynamic+enableMacAuth==true+macAuthOnly==false, dot1x will be given priority then mac_auth. Enable this to prefer macAuth over dot1x. - mac
Auth stringProtocol - Only if
mode!=dynamicandenableMacAuth==true. MAC authentication protocol to use; ignored if Mist NAC is enabled - mac
Limit string - Only if
mode!=dynamicmax number of mac addresses, default is 0 for unlimited, otherwise range is 1 to 16383 (upper bound constrained by platform) - mode string
- Switching mode for this port usage
- mtu string
- Only if
mode!=dynamicmedia maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. Value between 256 and 9216, default value is 1514. - networks string[]
- Only if
mode==trunk. Network or VLAN names to trunk - persist
Mac boolean - Only if
mode==accessandportAuth!=dot1x. Whether the port should retain dynamically learned MAC addresses - poe
Disabled boolean - Only if
mode!=dynamic. Whether PoE capabilities are disabled for a port - poe
Keep booleanState When Reboot - Only if
mode!=dynamic. Whether Perpetual PoE is enabled; keeps PoE state across reboots - poe
Priority string - Only if
mode!=dynamic. PoE priority for ports using this port usage - port
Auth string - Only if
mode!=dynamic. 802.1X authentication mode for this port usage - port
Network string - Only if
mode!=dynamic. Native network/vlan for untagged traffic - reauth
Interval string - Only if
mode!=dynamicandportAuth=dot1xreauthentication interval range between 10 and 65535 (default: 3600) - reset
Default stringWhen - Only if
mode==dynamic. Condition that resets a dynamic port to the default port usage - rules
Networktemplate
Port Usages Rule[] - Only if
mode==dynamic. Dynamic matching rules that select the port usage to apply - server
Fail stringNetwork - Only if
mode!=dynamicandportAuth==dot1x. Sets server fail fallback vlan - server
Fail numberRetry Interval - Only if
mode!=dynamicandportAuth==dot1x. Interval, in seconds. Sets the wait time before retrying authentication after RADIUS failure to reduce client flapping. Range 120-65535 - server
Reject stringNetwork - Only if
mode!=dynamicandportAuth==dot1x. When RADIUS server reject / fails - speed string
- Only if
mode!=dynamic. Link speed for this port usage - storm
Control NetworktemplatePort Usages Storm Control - Only if
mode!=dynamic. Storm-control settings for this port usage - stp
Disable boolean - Only if
mode!=dynamicandstpRequired==false. Drop bridge protocol data units (BPDUs ) that enter any interface or a specified interface - stp
Edge boolean - Only if
mode!=dynamic. When enabled, the port is not expected to receive BPDU frames - stp
No booleanRoot Port - Only if
mode!=dynamic - stp
P2p boolean - Only if
mode!=dynamic - stp
Required boolean - Only if
mode!=dynamic. Whether to remain in block state if no BPDU is received - ui
Evpntopo stringId - Optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
- use
Vstp boolean - If this is connected to a vstp network
- voip
Network string - Only if
mode!=dynamic. Network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- all_
networks bool - Only if
mode==trunk. Whether to trunk all network/vlans - allow_
dhcpd bool - Only applies when
mode!=dynamic. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting;true: ports become trusted ports allowing DHCP server traffic,false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted). - allow_
multiple_ boolsupplicants - Only if
mode!=dynamic - bypass_
auth_ boolwhen_ server_ down - Only if
mode!=dynamicandportAuth==dot1x. Bypass auth for known clients if set to true when RADIUS server is down - bypass_
auth_ boolwhen_ server_ down_ for_ unknown_ client - Only if
mode!=dynamicandportAuth=dot1x. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down - bypass_
auth_ boolwhen_ server_ down_ for_ voip - Only if
mode!=dynamicandportAuth==dot1x. Bypass auth for VOIP if set to true when RADIUS server is down - community_
vlan_ intid - Only if
mode!=dynamic. To be used together withisolationunder networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other - description str
- Only if
mode!=dynamic - disable_
autoneg bool - Only if
mode!=dynamic. If speed and duplex are specified, whether to disable autonegotiation - disabled bool
- Only if
mode!=dynamic. Whether the port is disabled - duplex str
- Only if
mode!=dynamic. Link duplex mode for this port usage - dynamic_
vlan_ Sequence[str]networks - Only if
mode!=dynamicandportAuth==dot1x. Networks or VLANs that RADIUS can return for dynamic VLAN assignment - enable_
mac_ boolauth - Only if
mode!=dynamicandportAuth==dot1x. Whether to enable MAC Auth - enable_
qos bool - Only if
mode!=dynamic - guest_
network str - Only if
mode!=dynamicandportAuth==dot1x. Which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - inter_
isolation_ boolnetwork_ link - Only if
mode!=dynamic.interIsolationNetworkLinkis used together withisolationunder networks, signaling that this port connects to isolated networks - inter_
switch_ boollink - Only if
mode!=dynamic.interSwitchLinkis used together withisolationunder networks. NOTE:interSwitchLinkworks only between Juniper devices. This has to be applied to both ports connected together - mac_
auth_ boolonly - Only if
mode!=dynamicandenableMacAuth==true - mac_
auth_ boolpreferred - Only if
mode!=dynamic+enableMacAuth==true+macAuthOnly==false, dot1x will be given priority then mac_auth. Enable this to prefer macAuth over dot1x. - mac_
auth_ strprotocol - Only if
mode!=dynamicandenableMacAuth==true. MAC authentication protocol to use; ignored if Mist NAC is enabled - mac_
limit str - Only if
mode!=dynamicmax number of mac addresses, default is 0 for unlimited, otherwise range is 1 to 16383 (upper bound constrained by platform) - mode str
- Switching mode for this port usage
- mtu str
- Only if
mode!=dynamicmedia maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. Value between 256 and 9216, default value is 1514. - networks Sequence[str]
- Only if
mode==trunk. Network or VLAN names to trunk - persist_
mac bool - Only if
mode==accessandportAuth!=dot1x. Whether the port should retain dynamically learned MAC addresses - poe_
disabled bool - Only if
mode!=dynamic. Whether PoE capabilities are disabled for a port - poe_
keep_ boolstate_ when_ reboot - Only if
mode!=dynamic. Whether Perpetual PoE is enabled; keeps PoE state across reboots - poe_
priority str - Only if
mode!=dynamic. PoE priority for ports using this port usage - port_
auth str - Only if
mode!=dynamic. 802.1X authentication mode for this port usage - port_
network str - Only if
mode!=dynamic. Native network/vlan for untagged traffic - reauth_
interval str - Only if
mode!=dynamicandportAuth=dot1xreauthentication interval range between 10 and 65535 (default: 3600) - reset_
default_ strwhen - Only if
mode==dynamic. Condition that resets a dynamic port to the default port usage - rules
Sequence[Networktemplate
Port Usages Rule] - Only if
mode==dynamic. Dynamic matching rules that select the port usage to apply - server_
fail_ strnetwork - Only if
mode!=dynamicandportAuth==dot1x. Sets server fail fallback vlan - server_
fail_ intretry_ interval - Only if
mode!=dynamicandportAuth==dot1x. Interval, in seconds. Sets the wait time before retrying authentication after RADIUS failure to reduce client flapping. Range 120-65535 - server_
reject_ strnetwork - Only if
mode!=dynamicandportAuth==dot1x. When RADIUS server reject / fails - speed str
- Only if
mode!=dynamic. Link speed for this port usage - storm_
control NetworktemplatePort Usages Storm Control - Only if
mode!=dynamic. Storm-control settings for this port usage - stp_
disable bool - Only if
mode!=dynamicandstpRequired==false. Drop bridge protocol data units (BPDUs ) that enter any interface or a specified interface - stp_
edge bool - Only if
mode!=dynamic. When enabled, the port is not expected to receive BPDU frames - stp_
no_ boolroot_ port - Only if
mode!=dynamic - stp_
p2p bool - Only if
mode!=dynamic - stp_
required bool - Only if
mode!=dynamic. Whether to remain in block state if no BPDU is received - ui_
evpntopo_ strid - Optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
- use_
vstp bool - If this is connected to a vstp network
- voip_
network str - Only if
mode!=dynamic. Network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
- all
Networks Boolean - Only if
mode==trunk. Whether to trunk all network/vlans - allow
Dhcpd Boolean - Only applies when
mode!=dynamic. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting;true: ports become trusted ports allowing DHCP server traffic,false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted). - allow
Multiple BooleanSupplicants - Only if
mode!=dynamic - bypass
Auth BooleanWhen Server Down - Only if
mode!=dynamicandportAuth==dot1x. Bypass auth for known clients if set to true when RADIUS server is down - bypass
Auth BooleanWhen Server Down For Unknown Client - Only if
mode!=dynamicandportAuth=dot1x. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down - bypass
Auth BooleanWhen Server Down For Voip - Only if
mode!=dynamicandportAuth==dot1x. Bypass auth for VOIP if set to true when RADIUS server is down - community
Vlan NumberId - Only if
mode!=dynamic. To be used together withisolationunder networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other - description String
- Only if
mode!=dynamic - disable
Autoneg Boolean - Only if
mode!=dynamic. If speed and duplex are specified, whether to disable autonegotiation - disabled Boolean
- Only if
mode!=dynamic. Whether the port is disabled - duplex String
- Only if
mode!=dynamic. Link duplex mode for this port usage - dynamic
Vlan List<String>Networks - Only if
mode!=dynamicandportAuth==dot1x. Networks or VLANs that RADIUS can return for dynamic VLAN assignment - enable
Mac BooleanAuth - Only if
mode!=dynamicandportAuth==dot1x. Whether to enable MAC Auth - enable
Qos Boolean - Only if
mode!=dynamic - guest
Network String - Only if
mode!=dynamicandportAuth==dot1x. Which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed) - inter
Isolation BooleanNetwork Link - Only if
mode!=dynamic.interIsolationNetworkLinkis used together withisolationunder networks, signaling that this port connects to isolated networks - inter
Switch BooleanLink - Only if
mode!=dynamic.interSwitchLinkis used together withisolationunder networks. NOTE:interSwitchLinkworks only between Juniper devices. This has to be applied to both ports connected together - mac
Auth BooleanOnly - Only if
mode!=dynamicandenableMacAuth==true - mac
Auth BooleanPreferred - Only if
mode!=dynamic+enableMacAuth==true+macAuthOnly==false, dot1x will be given priority then mac_auth. Enable this to prefer macAuth over dot1x. - mac
Auth StringProtocol - Only if
mode!=dynamicandenableMacAuth==true. MAC authentication protocol to use; ignored if Mist NAC is enabled - mac
Limit String - Only if
mode!=dynamicmax number of mac addresses, default is 0 for unlimited, otherwise range is 1 to 16383 (upper bound constrained by platform) - mode String
- Switching mode for this port usage
- mtu String
- Only if
mode!=dynamicmedia maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. Value between 256 and 9216, default value is 1514. - networks List<String>
- Only if
mode==trunk. Network or VLAN names to trunk - persist
Mac Boolean - Only if
mode==accessandportAuth!=dot1x. Whether the port should retain dynamically learned MAC addresses - poe
Disabled Boolean - Only if
mode!=dynamic. Whether PoE capabilities are disabled for a port - poe
Keep BooleanState When Reboot - Only if
mode!=dynamic. Whether Perpetual PoE is enabled; keeps PoE state across reboots - poe
Priority String - Only if
mode!=dynamic. PoE priority for ports using this port usage - port
Auth String - Only if
mode!=dynamic. 802.1X authentication mode for this port usage - port
Network String - Only if
mode!=dynamic. Native network/vlan for untagged traffic - reauth
Interval String - Only if
mode!=dynamicandportAuth=dot1xreauthentication interval range between 10 and 65535 (default: 3600) - reset
Default StringWhen - Only if
mode==dynamic. Condition that resets a dynamic port to the default port usage - rules List<Property Map>
- Only if
mode==dynamic. Dynamic matching rules that select the port usage to apply - server
Fail StringNetwork - Only if
mode!=dynamicandportAuth==dot1x. Sets server fail fallback vlan - server
Fail NumberRetry Interval - Only if
mode!=dynamicandportAuth==dot1x. Interval, in seconds. Sets the wait time before retrying authentication after RADIUS failure to reduce client flapping. Range 120-65535 - server
Reject StringNetwork - Only if
mode!=dynamicandportAuth==dot1x. When RADIUS server reject / fails - speed String
- Only if
mode!=dynamic. Link speed for this port usage - storm
Control Property Map - Only if
mode!=dynamic. Storm-control settings for this port usage - stp
Disable Boolean - Only if
mode!=dynamicandstpRequired==false. Drop bridge protocol data units (BPDUs ) that enter any interface or a specified interface - stp
Edge Boolean - Only if
mode!=dynamic. When enabled, the port is not expected to receive BPDU frames - stp
No BooleanRoot Port - Only if
mode!=dynamic - stp
P2p Boolean - Only if
mode!=dynamic - stp
Required Boolean - Only if
mode!=dynamic. Whether to remain in block state if no BPDU is received - ui
Evpntopo StringId - Optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
- use
Vstp Boolean - If this is connected to a vstp network
- voip
Network String - Only if
mode!=dynamic. Network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
NetworktemplatePortUsagesRule, NetworktemplatePortUsagesRuleArgs
- Src string
- Source attribute evaluated by this dynamic rule
- Description string
- Optional description of the rule
- Equals string
- Exact value that the selected source attribute must match
- Equals
Anies List<string> - List of values where any match satisfies this dynamic rule
- Expression string
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- Usage string
- Port usage name to apply when this dynamic rule matches
- Src string
- Source attribute evaluated by this dynamic rule
- Description string
- Optional description of the rule
- Equals string
- Exact value that the selected source attribute must match
- Equals
Anies []string - List of values where any match satisfies this dynamic rule
- Expression string
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- Usage string
- Port usage name to apply when this dynamic rule matches
- src string
- Source attribute evaluated by this dynamic rule
- description string
- Optional description of the rule
- equals string
- Exact value that the selected source attribute must match
- equals_
anies list(string) - List of values where any match satisfies this dynamic rule
- expression string
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- usage string
- Port usage name to apply when this dynamic rule matches
- src String
- Source attribute evaluated by this dynamic rule
- description String
- Optional description of the rule
- equals
Anies List<String> - List of values where any match satisfies this dynamic rule
- equals_ String
- Exact value that the selected source attribute must match
- expression String
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- usage String
- Port usage name to apply when this dynamic rule matches
- src string
- Source attribute evaluated by this dynamic rule
- description string
- Optional description of the rule
- equals string
- Exact value that the selected source attribute must match
- equals
Anies string[] - List of values where any match satisfies this dynamic rule
- expression string
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- usage string
- Port usage name to apply when this dynamic rule matches
- src str
- Source attribute evaluated by this dynamic rule
- description str
- Optional description of the rule
- equals str
- Exact value that the selected source attribute must match
- equals_
anies Sequence[str] - List of values where any match satisfies this dynamic rule
- expression str
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- usage str
- Port usage name to apply when this dynamic rule matches
- src String
- Source attribute evaluated by this dynamic rule
- description String
- Optional description of the rule
- equals String
- Exact value that the selected source attribute must match
- equals
Anies List<String> - List of values where any match satisfies this dynamic rule
- expression String
- "[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
- usage String
- Port usage name to apply when this dynamic rule matches
NetworktemplatePortUsagesStormControl, NetworktemplatePortUsagesStormControlArgs
- Disable
Port bool - Whether to disable the port when storm control is triggered
- No
Broadcast bool - Whether to disable storm control on broadcast traffic
- No
Multicast bool - Whether to disable storm control on multicast traffic
- No
Registered boolMulticast - Whether to disable storm control on registered multicast traffic
- No
Unknown boolUnicast - Whether to disable storm control on unknown unicast traffic
- Percentage int
- Bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- Disable
Port bool - Whether to disable the port when storm control is triggered
- No
Broadcast bool - Whether to disable storm control on broadcast traffic
- No
Multicast bool - Whether to disable storm control on multicast traffic
- No
Registered boolMulticast - Whether to disable storm control on registered multicast traffic
- No
Unknown boolUnicast - Whether to disable storm control on unknown unicast traffic
- Percentage int
- Bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- disable_
port bool - Whether to disable the port when storm control is triggered
- no_
broadcast bool - Whether to disable storm control on broadcast traffic
- no_
multicast bool - Whether to disable storm control on multicast traffic
- no_
registered_ boolmulticast - Whether to disable storm control on registered multicast traffic
- no_
unknown_ boolunicast - Whether to disable storm control on unknown unicast traffic
- percentage number
- Bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- disable
Port Boolean - Whether to disable the port when storm control is triggered
- no
Broadcast Boolean - Whether to disable storm control on broadcast traffic
- no
Multicast Boolean - Whether to disable storm control on multicast traffic
- no
Registered BooleanMulticast - Whether to disable storm control on registered multicast traffic
- no
Unknown BooleanUnicast - Whether to disable storm control on unknown unicast traffic
- percentage Integer
- Bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- disable
Port boolean - Whether to disable the port when storm control is triggered
- no
Broadcast boolean - Whether to disable storm control on broadcast traffic
- no
Multicast boolean - Whether to disable storm control on multicast traffic
- no
Registered booleanMulticast - Whether to disable storm control on registered multicast traffic
- no
Unknown booleanUnicast - Whether to disable storm control on unknown unicast traffic
- percentage number
- Bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- disable_
port bool - Whether to disable the port when storm control is triggered
- no_
broadcast bool - Whether to disable storm control on broadcast traffic
- no_
multicast bool - Whether to disable storm control on multicast traffic
- no_
registered_ boolmulticast - Whether to disable storm control on registered multicast traffic
- no_
unknown_ boolunicast - Whether to disable storm control on unknown unicast traffic
- percentage int
- Bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
- disable
Port Boolean - Whether to disable the port when storm control is triggered
- no
Broadcast Boolean - Whether to disable storm control on broadcast traffic
- no
Multicast Boolean - Whether to disable storm control on multicast traffic
- no
Registered BooleanMulticast - Whether to disable storm control on registered multicast traffic
- no
Unknown BooleanUnicast - Whether to disable storm control on unknown unicast traffic
- percentage Number
- Bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
NetworktemplateRadiusConfig, NetworktemplateRadiusConfigArgs
- Acct
Immediate boolUpdate - Whether immediate RADIUS accounting updates are sent
- Acct
Interim intInterval - How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled
- Acct
Servers List<Pulumi.Juniper Mist. Org. Inputs. Networktemplate Radius Config Acct Server> - RADIUS accounting servers used by this switch configuration
- Auth
Server stringSelection - Selection strategy for RADIUS authentication servers
- Auth
Servers List<Pulumi.Juniper Mist. Org. Inputs. Networktemplate Radius Config Auth Server> - RADIUS authentication servers used by this switch configuration
- Auth
Servers intRetries - RADIUS auth session retries
- Auth
Servers intTimeout - RADIUS auth session timeout
- Coa
Enabled bool - Whether RADIUS Change of Authorization (CoA) is enabled
- Coa
Port string - UDP port used for RADIUS Change of Authorization (CoA)
- Fast
Dot1x boolTimers - Whether fast 802.1X timers are enabled for RADIUS authentication
- Network string
- Use
networkorsourceIp. Which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - Source
Ip string - Use
networkorsourceIp. Explicit source IP address for RADIUS traffic
- Acct
Immediate boolUpdate - Whether immediate RADIUS accounting updates are sent
- Acct
Interim intInterval - How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled
- Acct
Servers []NetworktemplateRadius Config Acct Server - RADIUS accounting servers used by this switch configuration
- Auth
Server stringSelection - Selection strategy for RADIUS authentication servers
- Auth
Servers []NetworktemplateRadius Config Auth Server - RADIUS authentication servers used by this switch configuration
- Auth
Servers intRetries - RADIUS auth session retries
- Auth
Servers intTimeout - RADIUS auth session timeout
- Coa
Enabled bool - Whether RADIUS Change of Authorization (CoA) is enabled
- Coa
Port string - UDP port used for RADIUS Change of Authorization (CoA)
- Fast
Dot1x boolTimers - Whether fast 802.1X timers are enabled for RADIUS authentication
- Network string
- Use
networkorsourceIp. Which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - Source
Ip string - Use
networkorsourceIp. Explicit source IP address for RADIUS traffic
- acct_
immediate_ boolupdate - Whether immediate RADIUS accounting updates are sent
- acct_
interim_ numberinterval - How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled
- acct_
servers list(object) - RADIUS accounting servers used by this switch configuration
- auth_
server_ stringselection - Selection strategy for RADIUS authentication servers
- auth_
servers list(object) - RADIUS authentication servers used by this switch configuration
- auth_
servers_ numberretries - RADIUS auth session retries
- auth_
servers_ numbertimeout - RADIUS auth session timeout
- coa_
enabled bool - Whether RADIUS Change of Authorization (CoA) is enabled
- coa_
port string - UDP port used for RADIUS Change of Authorization (CoA)
- fast_
dot1x_ booltimers - Whether fast 802.1X timers are enabled for RADIUS authentication
- network string
- Use
networkorsourceIp. Which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - source_
ip string - Use
networkorsourceIp. Explicit source IP address for RADIUS traffic
- acct
Immediate BooleanUpdate - Whether immediate RADIUS accounting updates are sent
- acct
Interim IntegerInterval - How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled
- acct
Servers List<NetworktemplateRadius Config Acct Server> - RADIUS accounting servers used by this switch configuration
- auth
Server StringSelection - Selection strategy for RADIUS authentication servers
- auth
Servers List<NetworktemplateRadius Config Auth Server> - RADIUS authentication servers used by this switch configuration
- auth
Servers IntegerRetries - RADIUS auth session retries
- auth
Servers IntegerTimeout - RADIUS auth session timeout
- coa
Enabled Boolean - Whether RADIUS Change of Authorization (CoA) is enabled
- coa
Port String - UDP port used for RADIUS Change of Authorization (CoA)
- fast
Dot1x BooleanTimers - Whether fast 802.1X timers are enabled for RADIUS authentication
- network String
- Use
networkorsourceIp. Which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - source
Ip String - Use
networkorsourceIp. Explicit source IP address for RADIUS traffic
- acct
Immediate booleanUpdate - Whether immediate RADIUS accounting updates are sent
- acct
Interim numberInterval - How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled
- acct
Servers NetworktemplateRadius Config Acct Server[] - RADIUS accounting servers used by this switch configuration
- auth
Server stringSelection - Selection strategy for RADIUS authentication servers
- auth
Servers NetworktemplateRadius Config Auth Server[] - RADIUS authentication servers used by this switch configuration
- auth
Servers numberRetries - RADIUS auth session retries
- auth
Servers numberTimeout - RADIUS auth session timeout
- coa
Enabled boolean - Whether RADIUS Change of Authorization (CoA) is enabled
- coa
Port string - UDP port used for RADIUS Change of Authorization (CoA)
- fast
Dot1x booleanTimers - Whether fast 802.1X timers are enabled for RADIUS authentication
- network string
- Use
networkorsourceIp. Which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - source
Ip string - Use
networkorsourceIp. Explicit source IP address for RADIUS traffic
- acct_
immediate_ boolupdate - Whether immediate RADIUS accounting updates are sent
- acct_
interim_ intinterval - How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled
- acct_
servers Sequence[NetworktemplateRadius Config Acct Server] - RADIUS accounting servers used by this switch configuration
- auth_
server_ strselection - Selection strategy for RADIUS authentication servers
- auth_
servers Sequence[NetworktemplateRadius Config Auth Server] - RADIUS authentication servers used by this switch configuration
- auth_
servers_ intretries - RADIUS auth session retries
- auth_
servers_ inttimeout - RADIUS auth session timeout
- coa_
enabled bool - Whether RADIUS Change of Authorization (CoA) is enabled
- coa_
port str - UDP port used for RADIUS Change of Authorization (CoA)
- fast_
dot1x_ booltimers - Whether fast 802.1X timers are enabled for RADIUS authentication
- network str
- Use
networkorsourceIp. Which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - source_
ip str - Use
networkorsourceIp. Explicit source IP address for RADIUS traffic
- acct
Immediate BooleanUpdate - Whether immediate RADIUS accounting updates are sent
- acct
Interim NumberInterval - How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled
- acct
Servers List<Property Map> - RADIUS accounting servers used by this switch configuration
- auth
Server StringSelection - Selection strategy for RADIUS authentication servers
- auth
Servers List<Property Map> - RADIUS authentication servers used by this switch configuration
- auth
Servers NumberRetries - RADIUS auth session retries
- auth
Servers NumberTimeout - RADIUS auth session timeout
- coa
Enabled Boolean - Whether RADIUS Change of Authorization (CoA) is enabled
- coa
Port String - UDP port used for RADIUS Change of Authorization (CoA)
- fast
Dot1x BooleanTimers - Whether fast 802.1X timers are enabled for RADIUS authentication
- network String
- Use
networkorsourceIp. Which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip - source
Ip String - Use
networkorsourceIp. Explicit source IP address for RADIUS traffic
NetworktemplateRadiusConfigAcctServer, NetworktemplateRadiusConfigAcctServerArgs
- Host string
- Address or hostname of the RADIUS accounting server
- Secret string
- Shared secret used with this RADIUS accounting server
- Keywrap
Enabled bool - Whether RADIUS keywrap is enabled for messages sent to this accounting server
- Keywrap
Format string - Encoding format for RADIUS keywrap KEK and MACK values
- Keywrap
Kek string - RADIUS keywrap key encryption key (KEK)
- Keywrap
Mack string - RADIUS keywrap message authentication code key (MACK)
- Port string
- UDP port used by the RADIUS accounting server
- Host string
- Address or hostname of the RADIUS accounting server
- Secret string
- Shared secret used with this RADIUS accounting server
- Keywrap
Enabled bool - Whether RADIUS keywrap is enabled for messages sent to this accounting server
- Keywrap
Format string - Encoding format for RADIUS keywrap KEK and MACK values
- Keywrap
Kek string - RADIUS keywrap key encryption key (KEK)
- Keywrap
Mack string - RADIUS keywrap message authentication code key (MACK)
- Port string
- UDP port used by the RADIUS accounting server
- host string
- Address or hostname of the RADIUS accounting server
- secret string
- Shared secret used with this RADIUS accounting server
- keywrap_
enabled bool - Whether RADIUS keywrap is enabled for messages sent to this accounting server
- keywrap_
format string - Encoding format for RADIUS keywrap KEK and MACK values
- keywrap_
kek string - RADIUS keywrap key encryption key (KEK)
- keywrap_
mack string - RADIUS keywrap message authentication code key (MACK)
- port string
- UDP port used by the RADIUS accounting server
- host String
- Address or hostname of the RADIUS accounting server
- secret String
- Shared secret used with this RADIUS accounting server
- keywrap
Enabled Boolean - Whether RADIUS keywrap is enabled for messages sent to this accounting server
- keywrap
Format String - Encoding format for RADIUS keywrap KEK and MACK values
- keywrap
Kek String - RADIUS keywrap key encryption key (KEK)
- keywrap
Mack String - RADIUS keywrap message authentication code key (MACK)
- port String
- UDP port used by the RADIUS accounting server
- host string
- Address or hostname of the RADIUS accounting server
- secret string
- Shared secret used with this RADIUS accounting server
- keywrap
Enabled boolean - Whether RADIUS keywrap is enabled for messages sent to this accounting server
- keywrap
Format string - Encoding format for RADIUS keywrap KEK and MACK values
- keywrap
Kek string - RADIUS keywrap key encryption key (KEK)
- keywrap
Mack string - RADIUS keywrap message authentication code key (MACK)
- port string
- UDP port used by the RADIUS accounting server
- host str
- Address or hostname of the RADIUS accounting server
- secret str
- Shared secret used with this RADIUS accounting server
- keywrap_
enabled bool - Whether RADIUS keywrap is enabled for messages sent to this accounting server
- keywrap_
format str - Encoding format for RADIUS keywrap KEK and MACK values
- keywrap_
kek str - RADIUS keywrap key encryption key (KEK)
- keywrap_
mack str - RADIUS keywrap message authentication code key (MACK)
- port str
- UDP port used by the RADIUS accounting server
- host String
- Address or hostname of the RADIUS accounting server
- secret String
- Shared secret used with this RADIUS accounting server
- keywrap
Enabled Boolean - Whether RADIUS keywrap is enabled for messages sent to this accounting server
- keywrap
Format String - Encoding format for RADIUS keywrap KEK and MACK values
- keywrap
Kek String - RADIUS keywrap key encryption key (KEK)
- keywrap
Mack String - RADIUS keywrap message authentication code key (MACK)
- port String
- UDP port used by the RADIUS accounting server
NetworktemplateRadiusConfigAuthServer, NetworktemplateRadiusConfigAuthServerArgs
- Host string
- Address or hostname of the RADIUS authentication server
- Secret string
- Shared secret used with this RADIUS authentication server
- Keywrap
Enabled bool - Whether RADIUS keywrap is enabled for messages sent to this authentication server
- Keywrap
Format string - Encoding format for RADIUS keywrap KEK and MACK values
- Keywrap
Kek string - RADIUS keywrap key encryption key (KEK)
- Keywrap
Mack string - RADIUS keywrap message authentication code key (MACK)
- Port string
- UDP port used by the RADIUS authentication server
- Require
Message boolAuthenticator - Whether to require Message-Authenticator in requests
- Host string
- Address or hostname of the RADIUS authentication server
- Secret string
- Shared secret used with this RADIUS authentication server
- Keywrap
Enabled bool - Whether RADIUS keywrap is enabled for messages sent to this authentication server
- Keywrap
Format string - Encoding format for RADIUS keywrap KEK and MACK values
- Keywrap
Kek string - RADIUS keywrap key encryption key (KEK)
- Keywrap
Mack string - RADIUS keywrap message authentication code key (MACK)
- Port string
- UDP port used by the RADIUS authentication server
- Require
Message boolAuthenticator - Whether to require Message-Authenticator in requests
- host string
- Address or hostname of the RADIUS authentication server
- secret string
- Shared secret used with this RADIUS authentication server
- keywrap_
enabled bool - Whether RADIUS keywrap is enabled for messages sent to this authentication server
- keywrap_
format string - Encoding format for RADIUS keywrap KEK and MACK values
- keywrap_
kek string - RADIUS keywrap key encryption key (KEK)
- keywrap_
mack string - RADIUS keywrap message authentication code key (MACK)
- port string
- UDP port used by the RADIUS authentication server
- require_
message_ boolauthenticator - Whether to require Message-Authenticator in requests
- host String
- Address or hostname of the RADIUS authentication server
- secret String
- Shared secret used with this RADIUS authentication server
- keywrap
Enabled Boolean - Whether RADIUS keywrap is enabled for messages sent to this authentication server
- keywrap
Format String - Encoding format for RADIUS keywrap KEK and MACK values
- keywrap
Kek String - RADIUS keywrap key encryption key (KEK)
- keywrap
Mack String - RADIUS keywrap message authentication code key (MACK)
- port String
- UDP port used by the RADIUS authentication server
- require
Message BooleanAuthenticator - Whether to require Message-Authenticator in requests
- host string
- Address or hostname of the RADIUS authentication server
- secret string
- Shared secret used with this RADIUS authentication server
- keywrap
Enabled boolean - Whether RADIUS keywrap is enabled for messages sent to this authentication server
- keywrap
Format string - Encoding format for RADIUS keywrap KEK and MACK values
- keywrap
Kek string - RADIUS keywrap key encryption key (KEK)
- keywrap
Mack string - RADIUS keywrap message authentication code key (MACK)
- port string
- UDP port used by the RADIUS authentication server
- require
Message booleanAuthenticator - Whether to require Message-Authenticator in requests
- host str
- Address or hostname of the RADIUS authentication server
- secret str
- Shared secret used with this RADIUS authentication server
- keywrap_
enabled bool - Whether RADIUS keywrap is enabled for messages sent to this authentication server
- keywrap_
format str - Encoding format for RADIUS keywrap KEK and MACK values
- keywrap_
kek str - RADIUS keywrap key encryption key (KEK)
- keywrap_
mack str - RADIUS keywrap message authentication code key (MACK)
- port str
- UDP port used by the RADIUS authentication server
- require_
message_ boolauthenticator - Whether to require Message-Authenticator in requests
- host String
- Address or hostname of the RADIUS authentication server
- secret String
- Shared secret used with this RADIUS authentication server
- keywrap
Enabled Boolean - Whether RADIUS keywrap is enabled for messages sent to this authentication server
- keywrap
Format String - Encoding format for RADIUS keywrap KEK and MACK values
- keywrap
Kek String - RADIUS keywrap key encryption key (KEK)
- keywrap
Mack String - RADIUS keywrap message authentication code key (MACK)
- port String
- UDP port used by the RADIUS authentication server
- require
Message BooleanAuthenticator - Whether to require Message-Authenticator in requests
NetworktemplateRemoteSyslog, NetworktemplateRemoteSyslogArgs
- Archive
Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Remote Syslog Archive - Retention settings for generated syslog archive files
- Cacerts List<string>
- CA certificates used to verify TLS syslog servers
- Console
Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Remote Syslog Console - Log forwarding filters for console messages sent to remote syslog
- Enabled bool
- Whether remote syslog forwarding is enabled
- Files
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Remote Syslog File> - Local syslog file definitions to generate and forward
- Network string
- Source network used for syslog traffic. If
sourceAddressis configured, Mist uses the VLAN first; otherwise it usessourceIp - Send
To boolAll Servers - Whether each log entry is sent to all configured remote syslog servers
- Servers
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Remote Syslog Server> - Remote syslog server destinations
- Time
Format string - Timestamp format used in forwarded syslog messages
- Users
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Remote Syslog User> - User-specific syslog logging rules
- Archive
Networktemplate
Remote Syslog Archive - Retention settings for generated syslog archive files
- Cacerts []string
- CA certificates used to verify TLS syslog servers
- Console
Networktemplate
Remote Syslog Console - Log forwarding filters for console messages sent to remote syslog
- Enabled bool
- Whether remote syslog forwarding is enabled
- Files
[]Networktemplate
Remote Syslog File - Local syslog file definitions to generate and forward
- Network string
- Source network used for syslog traffic. If
sourceAddressis configured, Mist uses the VLAN first; otherwise it usessourceIp - Send
To boolAll Servers - Whether each log entry is sent to all configured remote syslog servers
- Servers
[]Networktemplate
Remote Syslog Server - Remote syslog server destinations
- Time
Format string - Timestamp format used in forwarded syslog messages
- Users
[]Networktemplate
Remote Syslog User - User-specific syslog logging rules
- archive object
- Retention settings for generated syslog archive files
- cacerts list(string)
- CA certificates used to verify TLS syslog servers
- console object
- Log forwarding filters for console messages sent to remote syslog
- enabled bool
- Whether remote syslog forwarding is enabled
- files list(object)
- Local syslog file definitions to generate and forward
- network string
- Source network used for syslog traffic. If
sourceAddressis configured, Mist uses the VLAN first; otherwise it usessourceIp - send_
to_ boolall_ servers - Whether each log entry is sent to all configured remote syslog servers
- servers list(object)
- Remote syslog server destinations
- time_
format string - Timestamp format used in forwarded syslog messages
- users list(object)
- User-specific syslog logging rules
- archive
Networktemplate
Remote Syslog Archive - Retention settings for generated syslog archive files
- cacerts List<String>
- CA certificates used to verify TLS syslog servers
- console
Networktemplate
Remote Syslog Console - Log forwarding filters for console messages sent to remote syslog
- enabled Boolean
- Whether remote syslog forwarding is enabled
- files
List<Networktemplate
Remote Syslog File> - Local syslog file definitions to generate and forward
- network String
- Source network used for syslog traffic. If
sourceAddressis configured, Mist uses the VLAN first; otherwise it usessourceIp - send
To BooleanAll Servers - Whether each log entry is sent to all configured remote syslog servers
- servers
List<Networktemplate
Remote Syslog Server> - Remote syslog server destinations
- time
Format String - Timestamp format used in forwarded syslog messages
- users
List<Networktemplate
Remote Syslog User> - User-specific syslog logging rules
- archive
Networktemplate
Remote Syslog Archive - Retention settings for generated syslog archive files
- cacerts string[]
- CA certificates used to verify TLS syslog servers
- console
Networktemplate
Remote Syslog Console - Log forwarding filters for console messages sent to remote syslog
- enabled boolean
- Whether remote syslog forwarding is enabled
- files
Networktemplate
Remote Syslog File[] - Local syslog file definitions to generate and forward
- network string
- Source network used for syslog traffic. If
sourceAddressis configured, Mist uses the VLAN first; otherwise it usessourceIp - send
To booleanAll Servers - Whether each log entry is sent to all configured remote syslog servers
- servers
Networktemplate
Remote Syslog Server[] - Remote syslog server destinations
- time
Format string - Timestamp format used in forwarded syslog messages
- users
Networktemplate
Remote Syslog User[] - User-specific syslog logging rules
- archive
Networktemplate
Remote Syslog Archive - Retention settings for generated syslog archive files
- cacerts Sequence[str]
- CA certificates used to verify TLS syslog servers
- console
Networktemplate
Remote Syslog Console - Log forwarding filters for console messages sent to remote syslog
- enabled bool
- Whether remote syslog forwarding is enabled
- files
Sequence[Networktemplate
Remote Syslog File] - Local syslog file definitions to generate and forward
- network str
- Source network used for syslog traffic. If
sourceAddressis configured, Mist uses the VLAN first; otherwise it usessourceIp - send_
to_ boolall_ servers - Whether each log entry is sent to all configured remote syslog servers
- servers
Sequence[Networktemplate
Remote Syslog Server] - Remote syslog server destinations
- time_
format str - Timestamp format used in forwarded syslog messages
- users
Sequence[Networktemplate
Remote Syslog User] - User-specific syslog logging rules
- archive Property Map
- Retention settings for generated syslog archive files
- cacerts List<String>
- CA certificates used to verify TLS syslog servers
- console Property Map
- Log forwarding filters for console messages sent to remote syslog
- enabled Boolean
- Whether remote syslog forwarding is enabled
- files List<Property Map>
- Local syslog file definitions to generate and forward
- network String
- Source network used for syslog traffic. If
sourceAddressis configured, Mist uses the VLAN first; otherwise it usessourceIp - send
To BooleanAll Servers - Whether each log entry is sent to all configured remote syslog servers
- servers List<Property Map>
- Remote syslog server destinations
- time
Format String - Timestamp format used in forwarded syslog messages
- users List<Property Map>
- User-specific syslog logging rules
NetworktemplateRemoteSyslogArchive, NetworktemplateRemoteSyslogArchiveArgs
NetworktemplateRemoteSyslogConsole, NetworktemplateRemoteSyslogConsoleArgs
- Contents
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Remote Syslog Console Content> - Syslog facilities and severities forwarded from console logs
- Contents
[]Networktemplate
Remote Syslog Console Content - Syslog facilities and severities forwarded from console logs
- contents list(object)
- Syslog facilities and severities forwarded from console logs
- contents
List<Networktemplate
Remote Syslog Console Content> - Syslog facilities and severities forwarded from console logs
- contents
Networktemplate
Remote Syslog Console Content[] - Syslog facilities and severities forwarded from console logs
- contents
Sequence[Networktemplate
Remote Syslog Console Content] - Syslog facilities and severities forwarded from console logs
- contents List<Property Map>
- Syslog facilities and severities forwarded from console logs
NetworktemplateRemoteSyslogConsoleContent, NetworktemplateRemoteSyslogConsoleContentArgs
NetworktemplateRemoteSyslogFile, NetworktemplateRemoteSyslogFileArgs
- Archive
Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Remote Syslog File Archive - Retention settings for this generated syslog file
- Contents
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Remote Syslog File Content> - Syslog facilities and severities written to this file
- Enable
Tls bool - Only if
protocol==tcp, enable TLS for this syslog file destination - Explicit
Priority bool - Whether to include explicit syslog priority values in file output
- File string
- Generated syslog file name
- Match string
- Expression used to filter log messages written to this file
- Structured
Data bool - Whether to include structured syslog data in file output
- Archive
Networktemplate
Remote Syslog File Archive - Retention settings for this generated syslog file
- Contents
[]Networktemplate
Remote Syslog File Content - Syslog facilities and severities written to this file
- Enable
Tls bool - Only if
protocol==tcp, enable TLS for this syslog file destination - Explicit
Priority bool - Whether to include explicit syslog priority values in file output
- File string
- Generated syslog file name
- Match string
- Expression used to filter log messages written to this file
- Structured
Data bool - Whether to include structured syslog data in file output
- archive object
- Retention settings for this generated syslog file
- contents list(object)
- Syslog facilities and severities written to this file
- enable_
tls bool - Only if
protocol==tcp, enable TLS for this syslog file destination - explicit_
priority bool - Whether to include explicit syslog priority values in file output
- file string
- Generated syslog file name
- match string
- Expression used to filter log messages written to this file
- structured_
data bool - Whether to include structured syslog data in file output
- archive
Networktemplate
Remote Syslog File Archive - Retention settings for this generated syslog file
- contents
List<Networktemplate
Remote Syslog File Content> - Syslog facilities and severities written to this file
- enable
Tls Boolean - Only if
protocol==tcp, enable TLS for this syslog file destination - explicit
Priority Boolean - Whether to include explicit syslog priority values in file output
- file String
- Generated syslog file name
- match String
- Expression used to filter log messages written to this file
- structured
Data Boolean - Whether to include structured syslog data in file output
- archive
Networktemplate
Remote Syslog File Archive - Retention settings for this generated syslog file
- contents
Networktemplate
Remote Syslog File Content[] - Syslog facilities and severities written to this file
- enable
Tls boolean - Only if
protocol==tcp, enable TLS for this syslog file destination - explicit
Priority boolean - Whether to include explicit syslog priority values in file output
- file string
- Generated syslog file name
- match string
- Expression used to filter log messages written to this file
- structured
Data boolean - Whether to include structured syslog data in file output
- archive
Networktemplate
Remote Syslog File Archive - Retention settings for this generated syslog file
- contents
Sequence[Networktemplate
Remote Syslog File Content] - Syslog facilities and severities written to this file
- enable_
tls bool - Only if
protocol==tcp, enable TLS for this syslog file destination - explicit_
priority bool - Whether to include explicit syslog priority values in file output
- file str
- Generated syslog file name
- match str
- Expression used to filter log messages written to this file
- structured_
data bool - Whether to include structured syslog data in file output
- archive Property Map
- Retention settings for this generated syslog file
- contents List<Property Map>
- Syslog facilities and severities written to this file
- enable
Tls Boolean - Only if
protocol==tcp, enable TLS for this syslog file destination - explicit
Priority Boolean - Whether to include explicit syslog priority values in file output
- file String
- Generated syslog file name
- match String
- Expression used to filter log messages written to this file
- structured
Data Boolean - Whether to include structured syslog data in file output
NetworktemplateRemoteSyslogFileArchive, NetworktemplateRemoteSyslogFileArchiveArgs
NetworktemplateRemoteSyslogFileContent, NetworktemplateRemoteSyslogFileContentArgs
NetworktemplateRemoteSyslogServer, NetworktemplateRemoteSyslogServerArgs
- Contents
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Remote Syslog Server Content> - Syslog facilities and severities sent to this server
- Explicit
Priority bool - Whether to include explicit syslog priority values in messages sent to this server
- Facility string
- Default syslog facility for messages sent to this server
- Host string
- Address or hostname of the remote syslog server
- Match string
- Expression used to filter log messages sent to this server
- Port string
- Network port used by the remote syslog server
- Protocol string
- Transport protocol used for this remote syslog server
- Routing
Instance string - Routing instance used to reach this remote syslog server
- Server
Name string - TLS server name used when verifying the remote syslog server certificate
- Severity string
- Default syslog severity for messages sent to this server
- Source
Address string - Source address for syslog traffic. If configured, Mist uses the VLAN first; otherwise it uses
sourceIp - Structured
Data bool - Whether to include structured syslog data in messages sent to this server
- Tag string
- Syslog tag value added to messages sent to this server
- Contents
[]Networktemplate
Remote Syslog Server Content - Syslog facilities and severities sent to this server
- Explicit
Priority bool - Whether to include explicit syslog priority values in messages sent to this server
- Facility string
- Default syslog facility for messages sent to this server
- Host string
- Address or hostname of the remote syslog server
- Match string
- Expression used to filter log messages sent to this server
- Port string
- Network port used by the remote syslog server
- Protocol string
- Transport protocol used for this remote syslog server
- Routing
Instance string - Routing instance used to reach this remote syslog server
- Server
Name string - TLS server name used when verifying the remote syslog server certificate
- Severity string
- Default syslog severity for messages sent to this server
- Source
Address string - Source address for syslog traffic. If configured, Mist uses the VLAN first; otherwise it uses
sourceIp - Structured
Data bool - Whether to include structured syslog data in messages sent to this server
- Tag string
- Syslog tag value added to messages sent to this server
- contents list(object)
- Syslog facilities and severities sent to this server
- explicit_
priority bool - Whether to include explicit syslog priority values in messages sent to this server
- facility string
- Default syslog facility for messages sent to this server
- host string
- Address or hostname of the remote syslog server
- match string
- Expression used to filter log messages sent to this server
- port string
- Network port used by the remote syslog server
- protocol string
- Transport protocol used for this remote syslog server
- routing_
instance string - Routing instance used to reach this remote syslog server
- server_
name string - TLS server name used when verifying the remote syslog server certificate
- severity string
- Default syslog severity for messages sent to this server
- source_
address string - Source address for syslog traffic. If configured, Mist uses the VLAN first; otherwise it uses
sourceIp - structured_
data bool - Whether to include structured syslog data in messages sent to this server
- tag string
- Syslog tag value added to messages sent to this server
- contents
List<Networktemplate
Remote Syslog Server Content> - Syslog facilities and severities sent to this server
- explicit
Priority Boolean - Whether to include explicit syslog priority values in messages sent to this server
- facility String
- Default syslog facility for messages sent to this server
- host String
- Address or hostname of the remote syslog server
- match String
- Expression used to filter log messages sent to this server
- port String
- Network port used by the remote syslog server
- protocol String
- Transport protocol used for this remote syslog server
- routing
Instance String - Routing instance used to reach this remote syslog server
- server
Name String - TLS server name used when verifying the remote syslog server certificate
- severity String
- Default syslog severity for messages sent to this server
- source
Address String - Source address for syslog traffic. If configured, Mist uses the VLAN first; otherwise it uses
sourceIp - structured
Data Boolean - Whether to include structured syslog data in messages sent to this server
- tag String
- Syslog tag value added to messages sent to this server
- contents
Networktemplate
Remote Syslog Server Content[] - Syslog facilities and severities sent to this server
- explicit
Priority boolean - Whether to include explicit syslog priority values in messages sent to this server
- facility string
- Default syslog facility for messages sent to this server
- host string
- Address or hostname of the remote syslog server
- match string
- Expression used to filter log messages sent to this server
- port string
- Network port used by the remote syslog server
- protocol string
- Transport protocol used for this remote syslog server
- routing
Instance string - Routing instance used to reach this remote syslog server
- server
Name string - TLS server name used when verifying the remote syslog server certificate
- severity string
- Default syslog severity for messages sent to this server
- source
Address string - Source address for syslog traffic. If configured, Mist uses the VLAN first; otherwise it uses
sourceIp - structured
Data boolean - Whether to include structured syslog data in messages sent to this server
- tag string
- Syslog tag value added to messages sent to this server
- contents
Sequence[Networktemplate
Remote Syslog Server Content] - Syslog facilities and severities sent to this server
- explicit_
priority bool - Whether to include explicit syslog priority values in messages sent to this server
- facility str
- Default syslog facility for messages sent to this server
- host str
- Address or hostname of the remote syslog server
- match str
- Expression used to filter log messages sent to this server
- port str
- Network port used by the remote syslog server
- protocol str
- Transport protocol used for this remote syslog server
- routing_
instance str - Routing instance used to reach this remote syslog server
- server_
name str - TLS server name used when verifying the remote syslog server certificate
- severity str
- Default syslog severity for messages sent to this server
- source_
address str - Source address for syslog traffic. If configured, Mist uses the VLAN first; otherwise it uses
sourceIp - structured_
data bool - Whether to include structured syslog data in messages sent to this server
- tag str
- Syslog tag value added to messages sent to this server
- contents List<Property Map>
- Syslog facilities and severities sent to this server
- explicit
Priority Boolean - Whether to include explicit syslog priority values in messages sent to this server
- facility String
- Default syslog facility for messages sent to this server
- host String
- Address or hostname of the remote syslog server
- match String
- Expression used to filter log messages sent to this server
- port String
- Network port used by the remote syslog server
- protocol String
- Transport protocol used for this remote syslog server
- routing
Instance String - Routing instance used to reach this remote syslog server
- server
Name String - TLS server name used when verifying the remote syslog server certificate
- severity String
- Default syslog severity for messages sent to this server
- source
Address String - Source address for syslog traffic. If configured, Mist uses the VLAN first; otherwise it uses
sourceIp - structured
Data Boolean - Whether to include structured syslog data in messages sent to this server
- tag String
- Syslog tag value added to messages sent to this server
NetworktemplateRemoteSyslogServerContent, NetworktemplateRemoteSyslogServerContentArgs
NetworktemplateRemoteSyslogUser, NetworktemplateRemoteSyslogUserArgs
- Contents
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Remote Syslog User Content> - Syslog facilities and severities logged for this user rule
- Match string
- Expression used to filter user log messages
- User string
- Account name or wildcard matched by this syslog rule
- Contents
[]Networktemplate
Remote Syslog User Content - Syslog facilities and severities logged for this user rule
- Match string
- Expression used to filter user log messages
- User string
- Account name or wildcard matched by this syslog rule
- contents list(object)
- Syslog facilities and severities logged for this user rule
- match string
- Expression used to filter user log messages
- user string
- Account name or wildcard matched by this syslog rule
- contents
List<Networktemplate
Remote Syslog User Content> - Syslog facilities and severities logged for this user rule
- match String
- Expression used to filter user log messages
- user String
- Account name or wildcard matched by this syslog rule
- contents
Networktemplate
Remote Syslog User Content[] - Syslog facilities and severities logged for this user rule
- match string
- Expression used to filter user log messages
- user string
- Account name or wildcard matched by this syslog rule
- contents
Sequence[Networktemplate
Remote Syslog User Content] - Syslog facilities and severities logged for this user rule
- match str
- Expression used to filter user log messages
- user str
- Account name or wildcard matched by this syslog rule
- contents List<Property Map>
- Syslog facilities and severities logged for this user rule
- match String
- Expression used to filter user log messages
- user String
- Account name or wildcard matched by this syslog rule
NetworktemplateRemoteSyslogUserContent, NetworktemplateRemoteSyslogUserContentArgs
NetworktemplateRoutingPolicies, NetworktemplateRoutingPoliciesArgs
- Terms
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Routing Policies Term> - Ordered terms evaluated by this switch routing policy
- Terms
[]Networktemplate
Routing Policies Term - Ordered terms evaluated by this switch routing policy
- terms list(object)
- Ordered terms evaluated by this switch routing policy
- terms
List<Networktemplate
Routing Policies Term> - Ordered terms evaluated by this switch routing policy
- terms
Networktemplate
Routing Policies Term[] - Ordered terms evaluated by this switch routing policy
- terms
Sequence[Networktemplate
Routing Policies Term] - Ordered terms evaluated by this switch routing policy
- terms List<Property Map>
- Ordered terms evaluated by this switch routing policy
NetworktemplateRoutingPoliciesTerm, NetworktemplateRoutingPoliciesTermArgs
- Name string
- Display name of the switch routing policy term
- Actions
Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Routing Policies Term Actions - Policy actions applied when this routing policy term matches
- Matching
Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Routing Policies Term Matching - Route match criteria that must be satisfied before actions are applied
- Name string
- Display name of the switch routing policy term
- Actions
Networktemplate
Routing Policies Term Actions - Policy actions applied when this routing policy term matches
- Matching
Networktemplate
Routing Policies Term Matching - Route match criteria that must be satisfied before actions are applied
- name String
- Display name of the switch routing policy term
- actions
Networktemplate
Routing Policies Term Actions - Policy actions applied when this routing policy term matches
- matching
Networktemplate
Routing Policies Term Matching - Route match criteria that must be satisfied before actions are applied
- name string
- Display name of the switch routing policy term
- actions
Networktemplate
Routing Policies Term Actions - Policy actions applied when this routing policy term matches
- matching
Networktemplate
Routing Policies Term Matching - Route match criteria that must be satisfied before actions are applied
- name str
- Display name of the switch routing policy term
- actions
Networktemplate
Routing Policies Term Actions - Policy actions applied when this routing policy term matches
- matching
Networktemplate
Routing Policies Term Matching - Route match criteria that must be satisfied before actions are applied
- name String
- Display name of the switch routing policy term
- actions Property Map
- Policy actions applied when this routing policy term matches
- matching Property Map
- Route match criteria that must be satisfied before actions are applied
NetworktemplateRoutingPoliciesTermActions, NetworktemplateRoutingPoliciesTermActionsArgs
- Accept bool
- Whether to accept routes that match this term
- Communities List<string>
- BGP communities to set when this term is used as an export policy
- Local
Preference string - Optional, for an import policy, localPreference can be changed, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - Prepend
As List<string>Paths - AS path values to prepend when this term is used as an export policy
- Accept bool
- Whether to accept routes that match this term
- Communities []string
- BGP communities to set when this term is used as an export policy
- Local
Preference string - Optional, for an import policy, localPreference can be changed, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - Prepend
As []stringPaths - AS path values to prepend when this term is used as an export policy
- accept bool
- Whether to accept routes that match this term
- communities list(string)
- BGP communities to set when this term is used as an export policy
- local_
preference string - Optional, for an import policy, localPreference can be changed, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - prepend_
as_ list(string)paths - AS path values to prepend when this term is used as an export policy
- accept Boolean
- Whether to accept routes that match this term
- communities List<String>
- BGP communities to set when this term is used as an export policy
- local
Preference String - Optional, for an import policy, localPreference can be changed, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - prepend
As List<String>Paths - AS path values to prepend when this term is used as an export policy
- accept boolean
- Whether to accept routes that match this term
- communities string[]
- BGP communities to set when this term is used as an export policy
- local
Preference string - Optional, for an import policy, localPreference can be changed, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - prepend
As string[]Paths - AS path values to prepend when this term is used as an export policy
- accept bool
- Whether to accept routes that match this term
- communities Sequence[str]
- BGP communities to set when this term is used as an export policy
- local_
preference str - Optional, for an import policy, localPreference can be changed, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - prepend_
as_ Sequence[str]paths - AS path values to prepend when this term is used as an export policy
- accept Boolean
- Whether to accept routes that match this term
- communities List<String>
- BGP communities to set when this term is used as an export policy
- local
Preference String - Optional, for an import policy, localPreference can be changed, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - prepend
As List<String>Paths - AS path values to prepend when this term is used as an export policy
NetworktemplateRoutingPoliciesTermMatching, NetworktemplateRoutingPoliciesTermMatchingArgs
- As
Paths List<string> - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - Communities List<string>
- BGP communities that routes must match
- Prefixes List<string>
- Route prefixes that routes must match
- Protocols List<string>
- enum:
bgp,direct,evpn,ospf,static
- As
Paths []string - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - Communities []string
- BGP communities that routes must match
- Prefixes []string
- Route prefixes that routes must match
- Protocols []string
- enum:
bgp,direct,evpn,ospf,static
- as_
paths list(string) - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - communities list(string)
- BGP communities that routes must match
- prefixes list(string)
- Route prefixes that routes must match
- protocols list(string)
- enum:
bgp,direct,evpn,ospf,static
- as
Paths List<String> - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - communities List<String>
- BGP communities that routes must match
- prefixes List<String>
- Route prefixes that routes must match
- protocols List<String>
- enum:
bgp,direct,evpn,ospf,static
- as
Paths string[] - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - communities string[]
- BGP communities that routes must match
- prefixes string[]
- Route prefixes that routes must match
- protocols string[]
- enum:
bgp,direct,evpn,ospf,static
- as_
paths Sequence[str] - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - communities Sequence[str]
- BGP communities that routes must match
- prefixes Sequence[str]
- Route prefixes that routes must match
- protocols Sequence[str]
- enum:
bgp,direct,evpn,ospf,static
- as
Paths List<String> - BGP AS, value in range 1-4294967294. Can be a Variable (e.g.
{{bgp_as}}) - communities List<String>
- BGP communities that routes must match
- prefixes List<String>
- Route prefixes that routes must match
- protocols List<String>
- enum:
bgp,direct,evpn,ospf,static
NetworktemplateSnmpConfig, NetworktemplateSnmpConfigArgs
- Client
Lists List<Pulumi.Juniper Mist. Org. Inputs. Networktemplate Snmp Config Client List> - SNMP client allowlists that can be referenced by communities
- Contact string
- Administrative contact string advertised through SNMP
- Description string
- Device description string advertised through SNMP
- Enabled bool
- Whether SNMP is enabled
- Engine
Id string - SNMP engine ID used for SNMPv3
- Engine
Id stringType - Method used to derive the SNMP engine ID
- Location string
- Physical location string advertised through SNMP
- Name string
- System name advertised through SNMP
- Network string
- Management network used for SNMP traffic
- Trap
Groups List<Pulumi.Juniper Mist. Org. Inputs. Networktemplate Snmp Config Trap Group> - SNMP trap group definitions
- V2c
Configs List<Pulumi.Juniper Mist. Org. Inputs. Networktemplate Snmp Config V2c Config> - SNMPv2c community configuration entries for this SNMP profile
- V3Config
Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Snmp Config V3Config - SNMPv3 user, VACM, notify, and target configuration
- Views
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Snmp Config View> - SNMP MIB view definitions
- Client
Lists []NetworktemplateSnmp Config Client List - SNMP client allowlists that can be referenced by communities
- Contact string
- Administrative contact string advertised through SNMP
- Description string
- Device description string advertised through SNMP
- Enabled bool
- Whether SNMP is enabled
- Engine
Id string - SNMP engine ID used for SNMPv3
- Engine
Id stringType - Method used to derive the SNMP engine ID
- Location string
- Physical location string advertised through SNMP
- Name string
- System name advertised through SNMP
- Network string
- Management network used for SNMP traffic
- Trap
Groups []NetworktemplateSnmp Config Trap Group - SNMP trap group definitions
- V2c
Configs []NetworktemplateSnmp Config V2c Config - SNMPv2c community configuration entries for this SNMP profile
- V3Config
Networktemplate
Snmp Config V3Config - SNMPv3 user, VACM, notify, and target configuration
- Views
[]Networktemplate
Snmp Config View - SNMP MIB view definitions
- client_
lists list(object) - SNMP client allowlists that can be referenced by communities
- contact string
- Administrative contact string advertised through SNMP
- description string
- Device description string advertised through SNMP
- enabled bool
- Whether SNMP is enabled
- engine_
id string - SNMP engine ID used for SNMPv3
- engine_
id_ stringtype - Method used to derive the SNMP engine ID
- location string
- Physical location string advertised through SNMP
- name string
- System name advertised through SNMP
- network string
- Management network used for SNMP traffic
- trap_
groups list(object) - SNMP trap group definitions
- v2c_
configs list(object) - SNMPv2c community configuration entries for this SNMP profile
- v3_
config object - SNMPv3 user, VACM, notify, and target configuration
- views list(object)
- SNMP MIB view definitions
- client
Lists List<NetworktemplateSnmp Config Client List> - SNMP client allowlists that can be referenced by communities
- contact String
- Administrative contact string advertised through SNMP
- description String
- Device description string advertised through SNMP
- enabled Boolean
- Whether SNMP is enabled
- engine
Id String - SNMP engine ID used for SNMPv3
- engine
Id StringType - Method used to derive the SNMP engine ID
- location String
- Physical location string advertised through SNMP
- name String
- System name advertised through SNMP
- network String
- Management network used for SNMP traffic
- trap
Groups List<NetworktemplateSnmp Config Trap Group> - SNMP trap group definitions
- v2c
Configs List<NetworktemplateSnmp Config V2c Config> - SNMPv2c community configuration entries for this SNMP profile
- v3Config
Networktemplate
Snmp Config V3Config - SNMPv3 user, VACM, notify, and target configuration
- views
List<Networktemplate
Snmp Config View> - SNMP MIB view definitions
- client
Lists NetworktemplateSnmp Config Client List[] - SNMP client allowlists that can be referenced by communities
- contact string
- Administrative contact string advertised through SNMP
- description string
- Device description string advertised through SNMP
- enabled boolean
- Whether SNMP is enabled
- engine
Id string - SNMP engine ID used for SNMPv3
- engine
Id stringType - Method used to derive the SNMP engine ID
- location string
- Physical location string advertised through SNMP
- name string
- System name advertised through SNMP
- network string
- Management network used for SNMP traffic
- trap
Groups NetworktemplateSnmp Config Trap Group[] - SNMP trap group definitions
- v2c
Configs NetworktemplateSnmp Config V2c Config[] - SNMPv2c community configuration entries for this SNMP profile
- v3Config
Networktemplate
Snmp Config V3Config - SNMPv3 user, VACM, notify, and target configuration
- views
Networktemplate
Snmp Config View[] - SNMP MIB view definitions
- client_
lists Sequence[NetworktemplateSnmp Config Client List] - SNMP client allowlists that can be referenced by communities
- contact str
- Administrative contact string advertised through SNMP
- description str
- Device description string advertised through SNMP
- enabled bool
- Whether SNMP is enabled
- engine_
id str - SNMP engine ID used for SNMPv3
- engine_
id_ strtype - Method used to derive the SNMP engine ID
- location str
- Physical location string advertised through SNMP
- name str
- System name advertised through SNMP
- network str
- Management network used for SNMP traffic
- trap_
groups Sequence[NetworktemplateSnmp Config Trap Group] - SNMP trap group definitions
- v2c_
configs Sequence[NetworktemplateSnmp Config V2c Config] - SNMPv2c community configuration entries for this SNMP profile
- v3_
config NetworktemplateSnmp Config V3Config - SNMPv3 user, VACM, notify, and target configuration
- views
Sequence[Networktemplate
Snmp Config View] - SNMP MIB view definitions
- client
Lists List<Property Map> - SNMP client allowlists that can be referenced by communities
- contact String
- Administrative contact string advertised through SNMP
- description String
- Device description string advertised through SNMP
- enabled Boolean
- Whether SNMP is enabled
- engine
Id String - SNMP engine ID used for SNMPv3
- engine
Id StringType - Method used to derive the SNMP engine ID
- location String
- Physical location string advertised through SNMP
- name String
- System name advertised through SNMP
- network String
- Management network used for SNMP traffic
- trap
Groups List<Property Map> - SNMP trap group definitions
- v2c
Configs List<Property Map> - SNMPv2c community configuration entries for this SNMP profile
- v3Config Property Map
- SNMPv3 user, VACM, notify, and target configuration
- views List<Property Map>
- SNMP MIB view definitions
NetworktemplateSnmpConfigClientList, NetworktemplateSnmpConfigClientListArgs
- Client
List stringName - Name of the SNMP client list
- Clients List<string>
- SNMP client IP addresses or CIDR ranges allowed by this list
- Client
List stringName - Name of the SNMP client list
- Clients []string
- SNMP client IP addresses or CIDR ranges allowed by this list
- client_
list_ stringname - Name of the SNMP client list
- clients list(string)
- SNMP client IP addresses or CIDR ranges allowed by this list
- client
List StringName - Name of the SNMP client list
- clients List<String>
- SNMP client IP addresses or CIDR ranges allowed by this list
- client
List stringName - Name of the SNMP client list
- clients string[]
- SNMP client IP addresses or CIDR ranges allowed by this list
- client_
list_ strname - Name of the SNMP client list
- clients Sequence[str]
- SNMP client IP addresses or CIDR ranges allowed by this list
- client
List StringName - Name of the SNMP client list
- clients List<String>
- SNMP client IP addresses or CIDR ranges allowed by this list
NetworktemplateSnmpConfigTrapGroup, NetworktemplateSnmpConfigTrapGroupArgs
- Categories List<string>
- Trap categories included in this SNMP trap group
- Group
Name string - Trap group name for this SNMP trap group
- Targets List<string>
- Trap target addresses for this SNMP trap group
- Version string
- SNMP trap protocol version used by this group
- Categories []string
- Trap categories included in this SNMP trap group
- Group
Name string - Trap group name for this SNMP trap group
- Targets []string
- Trap target addresses for this SNMP trap group
- Version string
- SNMP trap protocol version used by this group
- categories list(string)
- Trap categories included in this SNMP trap group
- group_
name string - Trap group name for this SNMP trap group
- targets list(string)
- Trap target addresses for this SNMP trap group
- version string
- SNMP trap protocol version used by this group
- categories List<String>
- Trap categories included in this SNMP trap group
- group
Name String - Trap group name for this SNMP trap group
- targets List<String>
- Trap target addresses for this SNMP trap group
- version String
- SNMP trap protocol version used by this group
- categories string[]
- Trap categories included in this SNMP trap group
- group
Name string - Trap group name for this SNMP trap group
- targets string[]
- Trap target addresses for this SNMP trap group
- version string
- SNMP trap protocol version used by this group
- categories Sequence[str]
- Trap categories included in this SNMP trap group
- group_
name str - Trap group name for this SNMP trap group
- targets Sequence[str]
- Trap target addresses for this SNMP trap group
- version str
- SNMP trap protocol version used by this group
- categories List<String>
- Trap categories included in this SNMP trap group
- group
Name String - Trap group name for this SNMP trap group
- targets List<String>
- Trap target addresses for this SNMP trap group
- version String
- SNMP trap protocol version used by this group
NetworktemplateSnmpConfigV2cConfig, NetworktemplateSnmpConfigV2cConfigArgs
- string
- Access level for the SNMPv2c community
- Client
List stringName - SNMP client list name referenced by this community
- Community
Name string - SNMPv2c community string name
- View string
- SNMP view name that must be defined in the views list
- string
- Access level for the SNMPv2c community
- Client
List stringName - SNMP client list name referenced by this community
- Community
Name string - SNMPv2c community string name
- View string
- SNMP view name that must be defined in the views list
- string
- Access level for the SNMPv2c community
- client_
list_ stringname - SNMP client list name referenced by this community
- community_
name string - SNMPv2c community string name
- view string
- SNMP view name that must be defined in the views list
- String
- Access level for the SNMPv2c community
- client
List StringName - SNMP client list name referenced by this community
- community
Name String - SNMPv2c community string name
- view String
- SNMP view name that must be defined in the views list
- string
- Access level for the SNMPv2c community
- client
List stringName - SNMP client list name referenced by this community
- community
Name string - SNMPv2c community string name
- view string
- SNMP view name that must be defined in the views list
- str
- Access level for the SNMPv2c community
- client_
list_ strname - SNMP client list name referenced by this community
- community_
name str - SNMPv2c community string name
- view str
- SNMP view name that must be defined in the views list
- String
- Access level for the SNMPv2c community
- client
List StringName - SNMP client list name referenced by this community
- community
Name String - SNMPv2c community string name
- view String
- SNMP view name that must be defined in the views list
NetworktemplateSnmpConfigV3Config, NetworktemplateSnmpConfigV3ConfigArgs
- Notifies
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Snmp Config V3Config Notify> - SNMPv3 notification definitions used for traps and informs
- Notify
Filters List<Pulumi.Juniper Mist. Org. Inputs. Networktemplate Snmp Config V3Config Notify Filter> - SNMPv3 notification filter profiles
- Target
Addresses List<Pulumi.Juniper Mist. Org. Inputs. Networktemplate Snmp Config V3Config Target Address> - SNMPv3 notification target addresses
- Target
Parameters List<Pulumi.Juniper Mist. Org. Inputs. Networktemplate Snmp Config V3Config Target Parameter> - SNMPv3 target parameter profiles
- Usms
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Snmp Config V3Config Usm> - SNMPv3 USM engine configurations
- Vacm
Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Snmp Config V3Config Vacm - SNMPv3 VACM access control configuration
- Notifies
[]Networktemplate
Snmp Config V3Config Notify - SNMPv3 notification definitions used for traps and informs
- Notify
Filters []NetworktemplateSnmp Config V3Config Notify Filter - SNMPv3 notification filter profiles
- Target
Addresses []NetworktemplateSnmp Config V3Config Target Address - SNMPv3 notification target addresses
- Target
Parameters []NetworktemplateSnmp Config V3Config Target Parameter - SNMPv3 target parameter profiles
- Usms
[]Networktemplate
Snmp Config V3Config Usm - SNMPv3 USM engine configurations
- Vacm
Networktemplate
Snmp Config V3Config Vacm - SNMPv3 VACM access control configuration
- notifies list(object)
- SNMPv3 notification definitions used for traps and informs
- notify_
filters list(object) - SNMPv3 notification filter profiles
- target_
addresses list(object) - SNMPv3 notification target addresses
- target_
parameters list(object) - SNMPv3 target parameter profiles
- usms list(object)
- SNMPv3 USM engine configurations
- vacm object
- SNMPv3 VACM access control configuration
- notifies
List<Networktemplate
Snmp Config V3Config Notify> - SNMPv3 notification definitions used for traps and informs
- notify
Filters List<NetworktemplateSnmp Config V3Config Notify Filter> - SNMPv3 notification filter profiles
- target
Addresses List<NetworktemplateSnmp Config V3Config Target Address> - SNMPv3 notification target addresses
- target
Parameters List<NetworktemplateSnmp Config V3Config Target Parameter> - SNMPv3 target parameter profiles
- usms
List<Networktemplate
Snmp Config V3Config Usm> - SNMPv3 USM engine configurations
- vacm
Networktemplate
Snmp Config V3Config Vacm - SNMPv3 VACM access control configuration
- notifies
Networktemplate
Snmp Config V3Config Notify[] - SNMPv3 notification definitions used for traps and informs
- notify
Filters NetworktemplateSnmp Config V3Config Notify Filter[] - SNMPv3 notification filter profiles
- target
Addresses NetworktemplateSnmp Config V3Config Target Address[] - SNMPv3 notification target addresses
- target
Parameters NetworktemplateSnmp Config V3Config Target Parameter[] - SNMPv3 target parameter profiles
- usms
Networktemplate
Snmp Config V3Config Usm[] - SNMPv3 USM engine configurations
- vacm
Networktemplate
Snmp Config V3Config Vacm - SNMPv3 VACM access control configuration
- notifies
Sequence[Networktemplate
Snmp Config V3Config Notify] - SNMPv3 notification definitions used for traps and informs
- notify_
filters Sequence[NetworktemplateSnmp Config V3Config Notify Filter] - SNMPv3 notification filter profiles
- target_
addresses Sequence[NetworktemplateSnmp Config V3Config Target Address] - SNMPv3 notification target addresses
- target_
parameters Sequence[NetworktemplateSnmp Config V3Config Target Parameter] - SNMPv3 target parameter profiles
- usms
Sequence[Networktemplate
Snmp Config V3Config Usm] - SNMPv3 USM engine configurations
- vacm
Networktemplate
Snmp Config V3Config Vacm - SNMPv3 VACM access control configuration
- notifies List<Property Map>
- SNMPv3 notification definitions used for traps and informs
- notify
Filters List<Property Map> - SNMPv3 notification filter profiles
- target
Addresses List<Property Map> - SNMPv3 notification target addresses
- target
Parameters List<Property Map> - SNMPv3 target parameter profiles
- usms List<Property Map>
- SNMPv3 USM engine configurations
- vacm Property Map
- SNMPv3 VACM access control configuration
NetworktemplateSnmpConfigV3ConfigNotify, NetworktemplateSnmpConfigV3ConfigNotifyArgs
NetworktemplateSnmpConfigV3ConfigNotifyFilter, NetworktemplateSnmpConfigV3ConfigNotifyFilterArgs
- Contents
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Snmp Config V3Config Notify Filter Content> - OID filter rules in this notification filter profile
- Profile
Name string - Notification filter profile name
- Contents
[]Networktemplate
Snmp Config V3Config Notify Filter Content - OID filter rules in this notification filter profile
- Profile
Name string - Notification filter profile name
- contents list(object)
- OID filter rules in this notification filter profile
- profile_
name string - Notification filter profile name
- contents
List<Networktemplate
Snmp Config V3Config Notify Filter Content> - OID filter rules in this notification filter profile
- profile
Name String - Notification filter profile name
- contents
Networktemplate
Snmp Config V3Config Notify Filter Content[] - OID filter rules in this notification filter profile
- profile
Name string - Notification filter profile name
- contents
Sequence[Networktemplate
Snmp Config V3Config Notify Filter Content] - OID filter rules in this notification filter profile
- profile_
name str - Notification filter profile name
- contents List<Property Map>
- OID filter rules in this notification filter profile
- profile
Name String - Notification filter profile name
NetworktemplateSnmpConfigV3ConfigNotifyFilterContent, NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArgs
NetworktemplateSnmpConfigV3ConfigTargetAddress, NetworktemplateSnmpConfigV3ConfigTargetAddressArgs
- Address string
- IP address or hostname of the SNMP target
- Address
Mask string - Mask applied to the SNMP target address
- Target
Address stringName - Name of the SNMP target address entry
- Port string
- UDP port used by the SNMP target
- Tag
List string - Set of notification tags for this target address; use spaces between multiple tags
- Target
Parameters string - Target parameter profile referenced by this target address
- Address string
- IP address or hostname of the SNMP target
- Address
Mask string - Mask applied to the SNMP target address
- Target
Address stringName - Name of the SNMP target address entry
- Port string
- UDP port used by the SNMP target
- Tag
List string - Set of notification tags for this target address; use spaces between multiple tags
- Target
Parameters string - Target parameter profile referenced by this target address
- address string
- IP address or hostname of the SNMP target
- address_
mask string - Mask applied to the SNMP target address
- target_
address_ stringname - Name of the SNMP target address entry
- port string
- UDP port used by the SNMP target
- tag_
list string - Set of notification tags for this target address; use spaces between multiple tags
- target_
parameters string - Target parameter profile referenced by this target address
- address String
- IP address or hostname of the SNMP target
- address
Mask String - Mask applied to the SNMP target address
- target
Address StringName - Name of the SNMP target address entry
- port String
- UDP port used by the SNMP target
- tag
List String - Set of notification tags for this target address; use spaces between multiple tags
- target
Parameters String - Target parameter profile referenced by this target address
- address string
- IP address or hostname of the SNMP target
- address
Mask string - Mask applied to the SNMP target address
- target
Address stringName - Name of the SNMP target address entry
- port string
- UDP port used by the SNMP target
- tag
List string - Set of notification tags for this target address; use spaces between multiple tags
- target
Parameters string - Target parameter profile referenced by this target address
- address str
- IP address or hostname of the SNMP target
- address_
mask str - Mask applied to the SNMP target address
- target_
address_ strname - Name of the SNMP target address entry
- port str
- UDP port used by the SNMP target
- tag_
list str - Set of notification tags for this target address; use spaces between multiple tags
- target_
parameters str - Target parameter profile referenced by this target address
- address String
- IP address or hostname of the SNMP target
- address
Mask String - Mask applied to the SNMP target address
- target
Address StringName - Name of the SNMP target address entry
- port String
- UDP port used by the SNMP target
- tag
List String - Set of notification tags for this target address; use spaces between multiple tags
- target
Parameters String - Target parameter profile referenced by this target address
NetworktemplateSnmpConfigV3ConfigTargetParameter, NetworktemplateSnmpConfigV3ConfigTargetParameterArgs
- Message
Processing stringModel - SNMP message processing model used by this target parameter profile
- Name string
- Target parameter profile name
- Notify
Filter string - Notification filter profile referenced by this target parameter profile
- Security
Level string - Required security level for this target parameter profile
- Security
Model string - Required security model for this target parameter profile
- Security
Name string - USM security name referenced by this target parameter profile
- Message
Processing stringModel - SNMP message processing model used by this target parameter profile
- Name string
- Target parameter profile name
- Notify
Filter string - Notification filter profile referenced by this target parameter profile
- Security
Level string - Required security level for this target parameter profile
- Security
Model string - Required security model for this target parameter profile
- Security
Name string - USM security name referenced by this target parameter profile
- message_
processing_ stringmodel - SNMP message processing model used by this target parameter profile
- name string
- Target parameter profile name
- notify_
filter string - Notification filter profile referenced by this target parameter profile
- security_
level string - Required security level for this target parameter profile
- security_
model string - Required security model for this target parameter profile
- security_
name string - USM security name referenced by this target parameter profile
- message
Processing StringModel - SNMP message processing model used by this target parameter profile
- name String
- Target parameter profile name
- notify
Filter String - Notification filter profile referenced by this target parameter profile
- security
Level String - Required security level for this target parameter profile
- security
Model String - Required security model for this target parameter profile
- security
Name String - USM security name referenced by this target parameter profile
- message
Processing stringModel - SNMP message processing model used by this target parameter profile
- name string
- Target parameter profile name
- notify
Filter string - Notification filter profile referenced by this target parameter profile
- security
Level string - Required security level for this target parameter profile
- security
Model string - Required security model for this target parameter profile
- security
Name string - USM security name referenced by this target parameter profile
- message_
processing_ strmodel - SNMP message processing model used by this target parameter profile
- name str
- Target parameter profile name
- notify_
filter str - Notification filter profile referenced by this target parameter profile
- security_
level str - Required security level for this target parameter profile
- security_
model str - Required security model for this target parameter profile
- security_
name str - USM security name referenced by this target parameter profile
- message
Processing StringModel - SNMP message processing model used by this target parameter profile
- name String
- Target parameter profile name
- notify
Filter String - Notification filter profile referenced by this target parameter profile
- security
Level String - Required security level for this target parameter profile
- security
Model String - Required security model for this target parameter profile
- security
Name String - USM security name referenced by this target parameter profile
NetworktemplateSnmpConfigV3ConfigUsm, NetworktemplateSnmpConfigV3ConfigUsmArgs
- Engine
Type string - SNMP engine type used for this USM configuration
- Remote
Engine stringId - Required only if
engineType==remoteEngine - Users
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Snmp Config V3Config Usm User> - SNMPv3 USM users for this engine
- Engine
Type string - SNMP engine type used for this USM configuration
- Remote
Engine stringId - Required only if
engineType==remoteEngine - Users
[]Networktemplate
Snmp Config V3Config Usm User - SNMPv3 USM users for this engine
- engine_
type string - SNMP engine type used for this USM configuration
- remote_
engine_ stringid - Required only if
engineType==remoteEngine - users list(object)
- SNMPv3 USM users for this engine
- engine
Type String - SNMP engine type used for this USM configuration
- remote
Engine StringId - Required only if
engineType==remoteEngine - users
List<Networktemplate
Snmp Config V3Config Usm User> - SNMPv3 USM users for this engine
- engine
Type string - SNMP engine type used for this USM configuration
- remote
Engine stringId - Required only if
engineType==remoteEngine - users
Networktemplate
Snmp Config V3Config Usm User[] - SNMPv3 USM users for this engine
- engine_
type str - SNMP engine type used for this USM configuration
- remote_
engine_ strid - Required only if
engineType==remoteEngine - users
Sequence[Networktemplate
Snmp Config V3Config Usm User] - SNMPv3 USM users for this engine
- engine
Type String - SNMP engine type used for this USM configuration
- remote
Engine StringId - Required only if
engineType==remoteEngine - users List<Property Map>
- SNMPv3 USM users for this engine
NetworktemplateSnmpConfigV3ConfigUsmUser, NetworktemplateSnmpConfigV3ConfigUsmUserArgs
- Authentication
Password string - Not required if
authenticationType==authentication-none. Include alphabetic, numeric, and special characters, but it cannot include control characters. - Authentication
Type string - Authentication protocol used by this SNMPv3 USM user
- Encryption
Password string - Not required if
encryptionType==privacy-none. Include alphabetic, numeric, and special characters, but it cannot include control characters - Encryption
Type string - Privacy protocol used by this SNMPv3 USM user
- Name string
- Username for the SNMPv3 USM user
- Authentication
Password string - Not required if
authenticationType==authentication-none. Include alphabetic, numeric, and special characters, but it cannot include control characters. - Authentication
Type string - Authentication protocol used by this SNMPv3 USM user
- Encryption
Password string - Not required if
encryptionType==privacy-none. Include alphabetic, numeric, and special characters, but it cannot include control characters - Encryption
Type string - Privacy protocol used by this SNMPv3 USM user
- Name string
- Username for the SNMPv3 USM user
- authentication_
password string - Not required if
authenticationType==authentication-none. Include alphabetic, numeric, and special characters, but it cannot include control characters. - authentication_
type string - Authentication protocol used by this SNMPv3 USM user
- encryption_
password string - Not required if
encryptionType==privacy-none. Include alphabetic, numeric, and special characters, but it cannot include control characters - encryption_
type string - Privacy protocol used by this SNMPv3 USM user
- name string
- Username for the SNMPv3 USM user
- authentication
Password String - Not required if
authenticationType==authentication-none. Include alphabetic, numeric, and special characters, but it cannot include control characters. - authentication
Type String - Authentication protocol used by this SNMPv3 USM user
- encryption
Password String - Not required if
encryptionType==privacy-none. Include alphabetic, numeric, and special characters, but it cannot include control characters - encryption
Type String - Privacy protocol used by this SNMPv3 USM user
- name String
- Username for the SNMPv3 USM user
- authentication
Password string - Not required if
authenticationType==authentication-none. Include alphabetic, numeric, and special characters, but it cannot include control characters. - authentication
Type string - Authentication protocol used by this SNMPv3 USM user
- encryption
Password string - Not required if
encryptionType==privacy-none. Include alphabetic, numeric, and special characters, but it cannot include control characters - encryption
Type string - Privacy protocol used by this SNMPv3 USM user
- name string
- Username for the SNMPv3 USM user
- authentication_
password str - Not required if
authenticationType==authentication-none. Include alphabetic, numeric, and special characters, but it cannot include control characters. - authentication_
type str - Authentication protocol used by this SNMPv3 USM user
- encryption_
password str - Not required if
encryptionType==privacy-none. Include alphabetic, numeric, and special characters, but it cannot include control characters - encryption_
type str - Privacy protocol used by this SNMPv3 USM user
- name str
- Username for the SNMPv3 USM user
- authentication
Password String - Not required if
authenticationType==authentication-none. Include alphabetic, numeric, and special characters, but it cannot include control characters. - authentication
Type String - Authentication protocol used by this SNMPv3 USM user
- encryption
Password String - Not required if
encryptionType==privacy-none. Include alphabetic, numeric, and special characters, but it cannot include control characters - encryption
Type String - Privacy protocol used by this SNMPv3 USM user
- name String
- Username for the SNMPv3 USM user
NetworktemplateSnmpConfigV3ConfigVacm, NetworktemplateSnmpConfigV3ConfigVacmArgs
- Accesses
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Snmp Config V3Config Vacm Access> - VACM access rules for SNMPv3
- Security
To Pulumi.Group Juniper Mist. Org. Inputs. Networktemplate Snmp Config V3Config Vacm Security To Group - VACM security-name to group mappings
- Accesses
[]Networktemplate
Snmp Config V3Config Vacm Access - VACM access rules for SNMPv3
- Security
To NetworktemplateGroup Snmp Config V3Config Vacm Security To Group - VACM security-name to group mappings
- accesses list(object)
- VACM access rules for SNMPv3
- security_
to_ objectgroup - VACM security-name to group mappings
- accesses
List<Networktemplate
Snmp Config V3Config Vacm Access> - VACM access rules for SNMPv3
- security
To NetworktemplateGroup Snmp Config V3Config Vacm Security To Group - VACM security-name to group mappings
- accesses
Networktemplate
Snmp Config V3Config Vacm Access[] - VACM access rules for SNMPv3
- security
To NetworktemplateGroup Snmp Config V3Config Vacm Security To Group - VACM security-name to group mappings
- accesses
Sequence[Networktemplate
Snmp Config V3Config Vacm Access] - VACM access rules for SNMPv3
- security_
to_ Networktemplategroup Snmp Config V3Config Vacm Security To Group - VACM security-name to group mappings
- accesses List<Property Map>
- VACM access rules for SNMPv3
- security
To Property MapGroup - VACM security-name to group mappings
NetworktemplateSnmpConfigV3ConfigVacmAccess, NetworktemplateSnmpConfigV3ConfigVacmAccessArgs
- Group
Name string - SNMP VACM group name
- Prefix
Lists List<Pulumi.Juniper Mist. Org. Inputs. Networktemplate Snmp Config V3Config Vacm Access Prefix List> - Context prefix rules for this VACM group
- Group
Name string - SNMP VACM group name
- Prefix
Lists []NetworktemplateSnmp Config V3Config Vacm Access Prefix List - Context prefix rules for this VACM group
- group_
name string - SNMP VACM group name
- prefix_
lists list(object) - Context prefix rules for this VACM group
- group
Name String - SNMP VACM group name
- prefix
Lists List<NetworktemplateSnmp Config V3Config Vacm Access Prefix List> - Context prefix rules for this VACM group
- group
Name string - SNMP VACM group name
- prefix
Lists NetworktemplateSnmp Config V3Config Vacm Access Prefix List[] - Context prefix rules for this VACM group
- group_
name str - SNMP VACM group name
- prefix_
lists Sequence[NetworktemplateSnmp Config V3Config Vacm Access Prefix List] - Context prefix rules for this VACM group
- group
Name String - SNMP VACM group name
- prefix
Lists List<Property Map> - Context prefix rules for this VACM group
NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixList, NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArgs
- Context
Prefix string - Context prefix for this VACM access rule. Required only if
type==contextPrefix - Notify
View string - Notify view name referenced by this VACM access rule
- Read
View string - Read view name referenced by this VACM access rule
- Security
Level string - Required security level for this VACM access rule
- Security
Model string - Required security model for this VACM access rule
- Type string
- VACM context matching type for this access rule
- Write
View string - Write view name referenced by this VACM access rule
- Context
Prefix string - Context prefix for this VACM access rule. Required only if
type==contextPrefix - Notify
View string - Notify view name referenced by this VACM access rule
- Read
View string - Read view name referenced by this VACM access rule
- Security
Level string - Required security level for this VACM access rule
- Security
Model string - Required security model for this VACM access rule
- Type string
- VACM context matching type for this access rule
- Write
View string - Write view name referenced by this VACM access rule
- context_
prefix string - Context prefix for this VACM access rule. Required only if
type==contextPrefix - notify_
view string - Notify view name referenced by this VACM access rule
- read_
view string - Read view name referenced by this VACM access rule
- security_
level string - Required security level for this VACM access rule
- security_
model string - Required security model for this VACM access rule
- type string
- VACM context matching type for this access rule
- write_
view string - Write view name referenced by this VACM access rule
- context
Prefix String - Context prefix for this VACM access rule. Required only if
type==contextPrefix - notify
View String - Notify view name referenced by this VACM access rule
- read
View String - Read view name referenced by this VACM access rule
- security
Level String - Required security level for this VACM access rule
- security
Model String - Required security model for this VACM access rule
- type String
- VACM context matching type for this access rule
- write
View String - Write view name referenced by this VACM access rule
- context
Prefix string - Context prefix for this VACM access rule. Required only if
type==contextPrefix - notify
View string - Notify view name referenced by this VACM access rule
- read
View string - Read view name referenced by this VACM access rule
- security
Level string - Required security level for this VACM access rule
- security
Model string - Required security model for this VACM access rule
- type string
- VACM context matching type for this access rule
- write
View string - Write view name referenced by this VACM access rule
- context_
prefix str - Context prefix for this VACM access rule. Required only if
type==contextPrefix - notify_
view str - Notify view name referenced by this VACM access rule
- read_
view str - Read view name referenced by this VACM access rule
- security_
level str - Required security level for this VACM access rule
- security_
model str - Required security model for this VACM access rule
- type str
- VACM context matching type for this access rule
- write_
view str - Write view name referenced by this VACM access rule
- context
Prefix String - Context prefix for this VACM access rule. Required only if
type==contextPrefix - notify
View String - Notify view name referenced by this VACM access rule
- read
View String - Read view name referenced by this VACM access rule
- security
Level String - Required security level for this VACM access rule
- security
Model String - Required security model for this VACM access rule
- type String
- VACM context matching type for this access rule
- write
View String - Write view name referenced by this VACM access rule
NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroup, NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupArgs
- Contents
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Snmp Config V3Config Vacm Security To Group Content> - VACM security-name to group mapping entries
- Security
Model string - Required security model for these VACM group mappings
- Contents
[]Networktemplate
Snmp Config V3Config Vacm Security To Group Content - VACM security-name to group mapping entries
- Security
Model string - Required security model for these VACM group mappings
- contents list(object)
- VACM security-name to group mapping entries
- security_
model string - Required security model for these VACM group mappings
- contents
List<Networktemplate
Snmp Config V3Config Vacm Security To Group Content> - VACM security-name to group mapping entries
- security
Model String - Required security model for these VACM group mappings
- contents
Networktemplate
Snmp Config V3Config Vacm Security To Group Content[] - VACM security-name to group mapping entries
- security
Model string - Required security model for these VACM group mappings
- contents
Sequence[Networktemplate
Snmp Config V3Config Vacm Security To Group Content] - VACM security-name to group mapping entries
- security_
model str - Required security model for these VACM group mappings
- contents List<Property Map>
- VACM security-name to group mapping entries
- security
Model String - Required security model for these VACM group mappings
NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContent, NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArgs
- Group string
- VACM group name referenced by this mapping
- Security
Name string - Name of the SNMP security principal mapped to a VACM group
- Group string
- VACM group name referenced by this mapping
- Security
Name string - Name of the SNMP security principal mapped to a VACM group
- group string
- VACM group name referenced by this mapping
- security_
name string - Name of the SNMP security principal mapped to a VACM group
- group String
- VACM group name referenced by this mapping
- security
Name String - Name of the SNMP security principal mapped to a VACM group
- group string
- VACM group name referenced by this mapping
- security
Name string - Name of the SNMP security principal mapped to a VACM group
- group str
- VACM group name referenced by this mapping
- security_
name str - Name of the SNMP security principal mapped to a VACM group
- group String
- VACM group name referenced by this mapping
- security
Name String - Name of the SNMP security principal mapped to a VACM group
NetworktemplateSnmpConfigView, NetworktemplateSnmpConfigViewArgs
NetworktemplateSwitchMatching, NetworktemplateSwitchMatchingArgs
- Enable bool
- Whether custom switch matching rules are enabled
- Rules
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Switch Matching Rule> - list of rules to define custom switch configuration based on different criteria. Each list must have at least one of
matchModel,matchNameormatchRolemust be defined
- Enable bool
- Whether custom switch matching rules are enabled
- Rules
[]Networktemplate
Switch Matching Rule - list of rules to define custom switch configuration based on different criteria. Each list must have at least one of
matchModel,matchNameormatchRolemust be defined
- enable bool
- Whether custom switch matching rules are enabled
- rules list(object)
- list of rules to define custom switch configuration based on different criteria. Each list must have at least one of
matchModel,matchNameormatchRolemust be defined
- enable Boolean
- Whether custom switch matching rules are enabled
- rules
List<Networktemplate
Switch Matching Rule> - list of rules to define custom switch configuration based on different criteria. Each list must have at least one of
matchModel,matchNameormatchRolemust be defined
- enable boolean
- Whether custom switch matching rules are enabled
- rules
Networktemplate
Switch Matching Rule[] - list of rules to define custom switch configuration based on different criteria. Each list must have at least one of
matchModel,matchNameormatchRolemust be defined
- enable bool
- Whether custom switch matching rules are enabled
- rules
Sequence[Networktemplate
Switch Matching Rule] - list of rules to define custom switch configuration based on different criteria. Each list must have at least one of
matchModel,matchNameormatchRolemust be defined
- enable Boolean
- Whether custom switch matching rules are enabled
- rules List<Property Map>
- list of rules to define custom switch configuration based on different criteria. Each list must have at least one of
matchModel,matchNameormatchRolemust be defined
NetworktemplateSwitchMatchingRule, NetworktemplateSwitchMatchingRuleArgs
- Additional
Config List<string>Cmds - Additional Junos CLI commands applied when this matching rule matches
- Default
Port stringUsage - Port usage to assign to switch ports without any port usage assigned. Default:
defaultto preserve default behavior - Ip
Config Pulumi.Juniper Mist. Org. Inputs. Networktemplate Switch Matching Rule Ip Config - In-band management IP configuration applied when this matching rule matches
- Match
Model string - string the switch model must start with to use this rule. It is possible to combine with the
matchNameandmatchRoleattributes - Match
Name string - string the switch name must start with to use this rule. Use the
matchNameOffsetto indicate the first character of the switch name to compare to. It is possible to combine with thematchModelandmatchRoleattributes - Match
Name intOffset - first character of the switch name to compare to the
matchNamevalue - Match
Role string - string the switch role must start with to use this rule. It is possible to combine with the
matchNameandmatchModelattributes - Name string
- Rule name. WARNING: the name
defaultis reserved and can only be used for the last rule in the list - Oob
Ip Pulumi.Config Juniper Mist. Org. Inputs. Networktemplate Switch Matching Rule Oob Ip Config - Out-of-band management IP configuration applied when this matching rule matches
- Port
Config Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Switch Matching Rule Port Config> - Per-port wired configuration applied when this matching rule matches
- Port
Mirroring Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Switch Matching Rule Port Mirroring> - Port mirroring configuration applied when this matching rule matches
- Stp
Config Pulumi.Juniper Mist. Org. Inputs. Networktemplate Switch Matching Rule Stp Config - Spanning Tree Protocol configuration applied when this matching rule matches
- Additional
Config []stringCmds - Additional Junos CLI commands applied when this matching rule matches
- Default
Port stringUsage - Port usage to assign to switch ports without any port usage assigned. Default:
defaultto preserve default behavior - Ip
Config NetworktemplateSwitch Matching Rule Ip Config - In-band management IP configuration applied when this matching rule matches
- Match
Model string - string the switch model must start with to use this rule. It is possible to combine with the
matchNameandmatchRoleattributes - Match
Name string - string the switch name must start with to use this rule. Use the
matchNameOffsetto indicate the first character of the switch name to compare to. It is possible to combine with thematchModelandmatchRoleattributes - Match
Name intOffset - first character of the switch name to compare to the
matchNamevalue - Match
Role string - string the switch role must start with to use this rule. It is possible to combine with the
matchNameandmatchModelattributes - Name string
- Rule name. WARNING: the name
defaultis reserved and can only be used for the last rule in the list - Oob
Ip NetworktemplateConfig Switch Matching Rule Oob Ip Config - Out-of-band management IP configuration applied when this matching rule matches
- Port
Config map[string]NetworktemplateSwitch Matching Rule Port Config - Per-port wired configuration applied when this matching rule matches
- Port
Mirroring map[string]NetworktemplateSwitch Matching Rule Port Mirroring - Port mirroring configuration applied when this matching rule matches
- Stp
Config NetworktemplateSwitch Matching Rule Stp Config - Spanning Tree Protocol configuration applied when this matching rule matches
- additional_
config_ list(string)cmds - Additional Junos CLI commands applied when this matching rule matches
- default_
port_ stringusage - Port usage to assign to switch ports without any port usage assigned. Default:
defaultto preserve default behavior - ip_
config object - In-band management IP configuration applied when this matching rule matches
- match_
model string - string the switch model must start with to use this rule. It is possible to combine with the
matchNameandmatchRoleattributes - match_
name string - string the switch name must start with to use this rule. Use the
matchNameOffsetto indicate the first character of the switch name to compare to. It is possible to combine with thematchModelandmatchRoleattributes - match_
name_ numberoffset - first character of the switch name to compare to the
matchNamevalue - match_
role string - string the switch role must start with to use this rule. It is possible to combine with the
matchNameandmatchModelattributes - name string
- Rule name. WARNING: the name
defaultis reserved and can only be used for the last rule in the list - oob_
ip_ objectconfig - Out-of-band management IP configuration applied when this matching rule matches
- port_
config map(object) - Per-port wired configuration applied when this matching rule matches
- port_
mirroring map(object) - Port mirroring configuration applied when this matching rule matches
- stp_
config object - Spanning Tree Protocol configuration applied when this matching rule matches
- additional
Config List<String>Cmds - Additional Junos CLI commands applied when this matching rule matches
- default
Port StringUsage - Port usage to assign to switch ports without any port usage assigned. Default:
defaultto preserve default behavior - ip
Config NetworktemplateSwitch Matching Rule Ip Config - In-band management IP configuration applied when this matching rule matches
- match
Model String - string the switch model must start with to use this rule. It is possible to combine with the
matchNameandmatchRoleattributes - match
Name String - string the switch name must start with to use this rule. Use the
matchNameOffsetto indicate the first character of the switch name to compare to. It is possible to combine with thematchModelandmatchRoleattributes - match
Name IntegerOffset - first character of the switch name to compare to the
matchNamevalue - match
Role String - string the switch role must start with to use this rule. It is possible to combine with the
matchNameandmatchModelattributes - name String
- Rule name. WARNING: the name
defaultis reserved and can only be used for the last rule in the list - oob
Ip NetworktemplateConfig Switch Matching Rule Oob Ip Config - Out-of-band management IP configuration applied when this matching rule matches
- port
Config Map<String,NetworktemplateSwitch Matching Rule Port Config> - Per-port wired configuration applied when this matching rule matches
- port
Mirroring Map<String,NetworktemplateSwitch Matching Rule Port Mirroring> - Port mirroring configuration applied when this matching rule matches
- stp
Config NetworktemplateSwitch Matching Rule Stp Config - Spanning Tree Protocol configuration applied when this matching rule matches
- additional
Config string[]Cmds - Additional Junos CLI commands applied when this matching rule matches
- default
Port stringUsage - Port usage to assign to switch ports without any port usage assigned. Default:
defaultto preserve default behavior - ip
Config NetworktemplateSwitch Matching Rule Ip Config - In-band management IP configuration applied when this matching rule matches
- match
Model string - string the switch model must start with to use this rule. It is possible to combine with the
matchNameandmatchRoleattributes - match
Name string - string the switch name must start with to use this rule. Use the
matchNameOffsetto indicate the first character of the switch name to compare to. It is possible to combine with thematchModelandmatchRoleattributes - match
Name numberOffset - first character of the switch name to compare to the
matchNamevalue - match
Role string - string the switch role must start with to use this rule. It is possible to combine with the
matchNameandmatchModelattributes - name string
- Rule name. WARNING: the name
defaultis reserved and can only be used for the last rule in the list - oob
Ip NetworktemplateConfig Switch Matching Rule Oob Ip Config - Out-of-band management IP configuration applied when this matching rule matches
- port
Config {[key: string]: NetworktemplateSwitch Matching Rule Port Config} - Per-port wired configuration applied when this matching rule matches
- port
Mirroring {[key: string]: NetworktemplateSwitch Matching Rule Port Mirroring} - Port mirroring configuration applied when this matching rule matches
- stp
Config NetworktemplateSwitch Matching Rule Stp Config - Spanning Tree Protocol configuration applied when this matching rule matches
- additional_
config_ Sequence[str]cmds - Additional Junos CLI commands applied when this matching rule matches
- default_
port_ strusage - Port usage to assign to switch ports without any port usage assigned. Default:
defaultto preserve default behavior - ip_
config NetworktemplateSwitch Matching Rule Ip Config - In-band management IP configuration applied when this matching rule matches
- match_
model str - string the switch model must start with to use this rule. It is possible to combine with the
matchNameandmatchRoleattributes - match_
name str - string the switch name must start with to use this rule. Use the
matchNameOffsetto indicate the first character of the switch name to compare to. It is possible to combine with thematchModelandmatchRoleattributes - match_
name_ intoffset - first character of the switch name to compare to the
matchNamevalue - match_
role str - string the switch role must start with to use this rule. It is possible to combine with the
matchNameandmatchModelattributes - name str
- Rule name. WARNING: the name
defaultis reserved and can only be used for the last rule in the list - oob_
ip_ Networktemplateconfig Switch Matching Rule Oob Ip Config - Out-of-band management IP configuration applied when this matching rule matches
- port_
config Mapping[str, NetworktemplateSwitch Matching Rule Port Config] - Per-port wired configuration applied when this matching rule matches
- port_
mirroring Mapping[str, NetworktemplateSwitch Matching Rule Port Mirroring] - Port mirroring configuration applied when this matching rule matches
- stp_
config NetworktemplateSwitch Matching Rule Stp Config - Spanning Tree Protocol configuration applied when this matching rule matches
- additional
Config List<String>Cmds - Additional Junos CLI commands applied when this matching rule matches
- default
Port StringUsage - Port usage to assign to switch ports without any port usage assigned. Default:
defaultto preserve default behavior - ip
Config Property Map - In-band management IP configuration applied when this matching rule matches
- match
Model String - string the switch model must start with to use this rule. It is possible to combine with the
matchNameandmatchRoleattributes - match
Name String - string the switch name must start with to use this rule. Use the
matchNameOffsetto indicate the first character of the switch name to compare to. It is possible to combine with thematchModelandmatchRoleattributes - match
Name NumberOffset - first character of the switch name to compare to the
matchNamevalue - match
Role String - string the switch role must start with to use this rule. It is possible to combine with the
matchNameandmatchModelattributes - name String
- Rule name. WARNING: the name
defaultis reserved and can only be used for the last rule in the list - oob
Ip Property MapConfig - Out-of-band management IP configuration applied when this matching rule matches
- port
Config Map<Property Map> - Per-port wired configuration applied when this matching rule matches
- port
Mirroring Map<Property Map> - Port mirroring configuration applied when this matching rule matches
- stp
Config Property Map - Spanning Tree Protocol configuration applied when this matching rule matches
NetworktemplateSwitchMatchingRuleIpConfig, NetworktemplateSwitchMatchingRuleIpConfigArgs
NetworktemplateSwitchMatchingRuleOobIpConfig, NetworktemplateSwitchMatchingRuleOobIpConfigArgs
- Type string
- IP assignment mode for out-of-band switch management
- Use
Mgmt boolVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- Use
Mgmt boolVrf For Host Out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- Type string
- IP assignment mode for out-of-band switch management
- Use
Mgmt boolVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- Use
Mgmt boolVrf For Host Out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- type string
- IP assignment mode for out-of-band switch management
- use_
mgmt_ boolvrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use_
mgmt_ boolvrf_ for_ host_ out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- type String
- IP assignment mode for out-of-band switch management
- use
Mgmt BooleanVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt BooleanVrf For Host Out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- type string
- IP assignment mode for out-of-band switch management
- use
Mgmt booleanVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt booleanVrf For Host Out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- type str
- IP assignment mode for out-of-band switch management
- use_
mgmt_ boolvrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use_
mgmt_ boolvrf_ for_ host_ out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
- type String
- IP assignment mode for out-of-band switch management
- use
Mgmt BooleanVrf - If supported on the platform. If enabled, DNS will be using this routing-instance, too
- use
Mgmt BooleanVrf For Host Out - For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
NetworktemplateSwitchMatchingRulePortConfig, NetworktemplateSwitchMatchingRulePortConfigArgs
- Usage string
- Port usage name. For Q-in-Q, use
vlanTunnel. If EVPN is used, useevpnUplinkorevpnDownlink - Ae
Disable boolLacp - To disable LACP support for the AE interface
- Ae
Idx int - Users could force to use the designated AE name
- Ae
Lacp boolForce Up - If
aggregated==true, sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - Ae
Lacp boolPassive - If
aggregated==true, sets LACP to passive mode on this AE interface; by default, active (fast) mode is used - Ae
Lacp boolSlow - To use slow timeout
- Aggregated bool
- Whether this port is configured as an aggregated Ethernet member
- Critical bool
- To generate port up/down alarm
- Description string
- Human-readable description for this Junos port
- Disable
Autoneg bool - If
speedandduplexare specified, whether to disable autonegotiation - Duplex string
- Link duplex mode for this Junos port
- Dynamic
Usage string - Enable dynamic usage for this port. Set to
dynamicto enable. - Esilag bool
- Whether this Junos port participates in an ESI-LAG
- Mtu int
- Media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- Networks List<string>
- List of network names. Required if
usage==inet - No
Local boolOverwrite - Prevent helpdesk to override the port config
- Poe
Disabled bool - Whether PoE capabilities are disabled for this Junos port
- Port
Network string - Required if
usage==vlanTunnel. Q-in-Q tunneling using All-in-one bundling. This also enables standard L2PT for interfaces that are not encapsulation tunnel interfaces and uses MAC rewrite operation. View more information - Speed string
- Link speed for this Junos port
- Usage string
- Port usage name. For Q-in-Q, use
vlanTunnel. If EVPN is used, useevpnUplinkorevpnDownlink - Ae
Disable boolLacp - To disable LACP support for the AE interface
- Ae
Idx int - Users could force to use the designated AE name
- Ae
Lacp boolForce Up - If
aggregated==true, sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - Ae
Lacp boolPassive - If
aggregated==true, sets LACP to passive mode on this AE interface; by default, active (fast) mode is used - Ae
Lacp boolSlow - To use slow timeout
- Aggregated bool
- Whether this port is configured as an aggregated Ethernet member
- Critical bool
- To generate port up/down alarm
- Description string
- Human-readable description for this Junos port
- Disable
Autoneg bool - If
speedandduplexare specified, whether to disable autonegotiation - Duplex string
- Link duplex mode for this Junos port
- Dynamic
Usage string - Enable dynamic usage for this port. Set to
dynamicto enable. - Esilag bool
- Whether this Junos port participates in an ESI-LAG
- Mtu int
- Media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- Networks []string
- List of network names. Required if
usage==inet - No
Local boolOverwrite - Prevent helpdesk to override the port config
- Poe
Disabled bool - Whether PoE capabilities are disabled for this Junos port
- Port
Network string - Required if
usage==vlanTunnel. Q-in-Q tunneling using All-in-one bundling. This also enables standard L2PT for interfaces that are not encapsulation tunnel interfaces and uses MAC rewrite operation. View more information - Speed string
- Link speed for this Junos port
- usage string
- Port usage name. For Q-in-Q, use
vlanTunnel. If EVPN is used, useevpnUplinkorevpnDownlink - ae_
disable_ boollacp - To disable LACP support for the AE interface
- ae_
idx number - Users could force to use the designated AE name
- ae_
lacp_ boolforce_ up - If
aggregated==true, sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - ae_
lacp_ boolpassive - If
aggregated==true, sets LACP to passive mode on this AE interface; by default, active (fast) mode is used - ae_
lacp_ boolslow - To use slow timeout
- aggregated bool
- Whether this port is configured as an aggregated Ethernet member
- critical bool
- To generate port up/down alarm
- description string
- Human-readable description for this Junos port
- disable_
autoneg bool - If
speedandduplexare specified, whether to disable autonegotiation - duplex string
- Link duplex mode for this Junos port
- dynamic_
usage string - Enable dynamic usage for this port. Set to
dynamicto enable. - esilag bool
- Whether this Junos port participates in an ESI-LAG
- mtu number
- Media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- networks list(string)
- List of network names. Required if
usage==inet - no_
local_ booloverwrite - Prevent helpdesk to override the port config
- poe_
disabled bool - Whether PoE capabilities are disabled for this Junos port
- port_
network string - Required if
usage==vlanTunnel. Q-in-Q tunneling using All-in-one bundling. This also enables standard L2PT for interfaces that are not encapsulation tunnel interfaces and uses MAC rewrite operation. View more information - speed string
- Link speed for this Junos port
- usage String
- Port usage name. For Q-in-Q, use
vlanTunnel. If EVPN is used, useevpnUplinkorevpnDownlink - ae
Disable BooleanLacp - To disable LACP support for the AE interface
- ae
Idx Integer - Users could force to use the designated AE name
- ae
Lacp BooleanForce Up - If
aggregated==true, sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - ae
Lacp BooleanPassive - If
aggregated==true, sets LACP to passive mode on this AE interface; by default, active (fast) mode is used - ae
Lacp BooleanSlow - To use slow timeout
- aggregated Boolean
- Whether this port is configured as an aggregated Ethernet member
- critical Boolean
- To generate port up/down alarm
- description String
- Human-readable description for this Junos port
- disable
Autoneg Boolean - If
speedandduplexare specified, whether to disable autonegotiation - duplex String
- Link duplex mode for this Junos port
- dynamic
Usage String - Enable dynamic usage for this port. Set to
dynamicto enable. - esilag Boolean
- Whether this Junos port participates in an ESI-LAG
- mtu Integer
- Media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- networks List<String>
- List of network names. Required if
usage==inet - no
Local BooleanOverwrite - Prevent helpdesk to override the port config
- poe
Disabled Boolean - Whether PoE capabilities are disabled for this Junos port
- port
Network String - Required if
usage==vlanTunnel. Q-in-Q tunneling using All-in-one bundling. This also enables standard L2PT for interfaces that are not encapsulation tunnel interfaces and uses MAC rewrite operation. View more information - speed String
- Link speed for this Junos port
- usage string
- Port usage name. For Q-in-Q, use
vlanTunnel. If EVPN is used, useevpnUplinkorevpnDownlink - ae
Disable booleanLacp - To disable LACP support for the AE interface
- ae
Idx number - Users could force to use the designated AE name
- ae
Lacp booleanForce Up - If
aggregated==true, sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - ae
Lacp booleanPassive - If
aggregated==true, sets LACP to passive mode on this AE interface; by default, active (fast) mode is used - ae
Lacp booleanSlow - To use slow timeout
- aggregated boolean
- Whether this port is configured as an aggregated Ethernet member
- critical boolean
- To generate port up/down alarm
- description string
- Human-readable description for this Junos port
- disable
Autoneg boolean - If
speedandduplexare specified, whether to disable autonegotiation - duplex string
- Link duplex mode for this Junos port
- dynamic
Usage string - Enable dynamic usage for this port. Set to
dynamicto enable. - esilag boolean
- Whether this Junos port participates in an ESI-LAG
- mtu number
- Media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- networks string[]
- List of network names. Required if
usage==inet - no
Local booleanOverwrite - Prevent helpdesk to override the port config
- poe
Disabled boolean - Whether PoE capabilities are disabled for this Junos port
- port
Network string - Required if
usage==vlanTunnel. Q-in-Q tunneling using All-in-one bundling. This also enables standard L2PT for interfaces that are not encapsulation tunnel interfaces and uses MAC rewrite operation. View more information - speed string
- Link speed for this Junos port
- usage str
- Port usage name. For Q-in-Q, use
vlanTunnel. If EVPN is used, useevpnUplinkorevpnDownlink - ae_
disable_ boollacp - To disable LACP support for the AE interface
- ae_
idx int - Users could force to use the designated AE name
- ae_
lacp_ boolforce_ up - If
aggregated==true, sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - ae_
lacp_ boolpassive - If
aggregated==true, sets LACP to passive mode on this AE interface; by default, active (fast) mode is used - ae_
lacp_ boolslow - To use slow timeout
- aggregated bool
- Whether this port is configured as an aggregated Ethernet member
- critical bool
- To generate port up/down alarm
- description str
- Human-readable description for this Junos port
- disable_
autoneg bool - If
speedandduplexare specified, whether to disable autonegotiation - duplex str
- Link duplex mode for this Junos port
- dynamic_
usage str - Enable dynamic usage for this port. Set to
dynamicto enable. - esilag bool
- Whether this Junos port participates in an ESI-LAG
- mtu int
- Media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- networks Sequence[str]
- List of network names. Required if
usage==inet - no_
local_ booloverwrite - Prevent helpdesk to override the port config
- poe_
disabled bool - Whether PoE capabilities are disabled for this Junos port
- port_
network str - Required if
usage==vlanTunnel. Q-in-Q tunneling using All-in-one bundling. This also enables standard L2PT for interfaces that are not encapsulation tunnel interfaces and uses MAC rewrite operation. View more information - speed str
- Link speed for this Junos port
- usage String
- Port usage name. For Q-in-Q, use
vlanTunnel. If EVPN is used, useevpnUplinkorevpnDownlink - ae
Disable BooleanLacp - To disable LACP support for the AE interface
- ae
Idx Number - Users could force to use the designated AE name
- ae
Lacp BooleanForce Up - If
aggregated==true, sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. Note: Turning this on will enable force-up on one of the interfaces in the bundle only - ae
Lacp BooleanPassive - If
aggregated==true, sets LACP to passive mode on this AE interface; by default, active (fast) mode is used - ae
Lacp BooleanSlow - To use slow timeout
- aggregated Boolean
- Whether this port is configured as an aggregated Ethernet member
- critical Boolean
- To generate port up/down alarm
- description String
- Human-readable description for this Junos port
- disable
Autoneg Boolean - If
speedandduplexare specified, whether to disable autonegotiation - duplex String
- Link duplex mode for this Junos port
- dynamic
Usage String - Enable dynamic usage for this port. Set to
dynamicto enable. - esilag Boolean
- Whether this Junos port participates in an ESI-LAG
- mtu Number
- Media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
- networks List<String>
- List of network names. Required if
usage==inet - no
Local BooleanOverwrite - Prevent helpdesk to override the port config
- poe
Disabled Boolean - Whether PoE capabilities are disabled for this Junos port
- port
Network String - Required if
usage==vlanTunnel. Q-in-Q tunneling using All-in-one bundling. This also enables standard L2PT for interfaces that are not encapsulation tunnel interfaces and uses MAC rewrite operation. View more information - speed String
- Link speed for this Junos port
NetworktemplateSwitchMatchingRulePortMirroring, NetworktemplateSwitchMatchingRulePortMirroringArgs
- Input
Networks List<string>Ingresses - At least one mirror input source should be specified. Networks whose ingress traffic is mirrored
- Input
Port List<string>Ids Egresses - At least one mirror input source should be specified. Switch ports whose egress traffic is mirrored
- Input
Port List<string>Ids Ingresses - At least one mirror input source should be specified. Switch ports whose ingress traffic is mirrored
- Output
Ip stringAddress - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - Output
Network string - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - Output
Port stringId - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided
- Input
Networks []stringIngresses - At least one mirror input source should be specified. Networks whose ingress traffic is mirrored
- Input
Port []stringIds Egresses - At least one mirror input source should be specified. Switch ports whose egress traffic is mirrored
- Input
Port []stringIds Ingresses - At least one mirror input source should be specified. Switch ports whose ingress traffic is mirrored
- Output
Ip stringAddress - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - Output
Network string - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - Output
Port stringId - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided
- input_
networks_ list(string)ingresses - At least one mirror input source should be specified. Networks whose ingress traffic is mirrored
- input_
port_ list(string)ids_ egresses - At least one mirror input source should be specified. Switch ports whose egress traffic is mirrored
- input_
port_ list(string)ids_ ingresses - At least one mirror input source should be specified. Switch ports whose ingress traffic is mirrored
- output_
ip_ stringaddress - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output_
network string - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output_
port_ stringid - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided
- input
Networks List<String>Ingresses - At least one mirror input source should be specified. Networks whose ingress traffic is mirrored
- input
Port List<String>Ids Egresses - At least one mirror input source should be specified. Switch ports whose egress traffic is mirrored
- input
Port List<String>Ids Ingresses - At least one mirror input source should be specified. Switch ports whose ingress traffic is mirrored
- output
Ip StringAddress - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output
Network String - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output
Port StringId - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided
- input
Networks string[]Ingresses - At least one mirror input source should be specified. Networks whose ingress traffic is mirrored
- input
Port string[]Ids Egresses - At least one mirror input source should be specified. Switch ports whose egress traffic is mirrored
- input
Port string[]Ids Ingresses - At least one mirror input source should be specified. Switch ports whose ingress traffic is mirrored
- output
Ip stringAddress - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output
Network string - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output
Port stringId - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided
- input_
networks_ Sequence[str]ingresses - At least one mirror input source should be specified. Networks whose ingress traffic is mirrored
- input_
port_ Sequence[str]ids_ egresses - At least one mirror input source should be specified. Switch ports whose egress traffic is mirrored
- input_
port_ Sequence[str]ids_ ingresses - At least one mirror input source should be specified. Switch ports whose ingress traffic is mirrored
- output_
ip_ straddress - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output_
network str - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output_
port_ strid - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided
- input
Networks List<String>Ingresses - At least one mirror input source should be specified. Networks whose ingress traffic is mirrored
- input
Port List<String>Ids Egresses - At least one mirror input source should be specified. Switch ports whose egress traffic is mirrored
- input
Port List<String>Ids Ingresses - At least one mirror input source should be specified. Switch ports whose ingress traffic is mirrored
- output
Ip StringAddress - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output
Network String - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided - output
Port StringId - Exactly one of the
outputIpAddress,outputPortIdoroutputNetworkshould be provided
NetworktemplateSwitchMatchingRuleStpConfig, NetworktemplateSwitchMatchingRuleStpConfigArgs
- Bridge
Priority string - Switch STP priority. Range [0, 4k, 8k.. 60k] in steps of 4k. Bridge priority applies to both VSTP and RSTP.
- Bridge
Priority string - Switch STP priority. Range [0, 4k, 8k.. 60k] in steps of 4k. Bridge priority applies to both VSTP and RSTP.
- bridge_
priority string - Switch STP priority. Range [0, 4k, 8k.. 60k] in steps of 4k. Bridge priority applies to both VSTP and RSTP.
- bridge
Priority String - Switch STP priority. Range [0, 4k, 8k.. 60k] in steps of 4k. Bridge priority applies to both VSTP and RSTP.
- bridge
Priority string - Switch STP priority. Range [0, 4k, 8k.. 60k] in steps of 4k. Bridge priority applies to both VSTP and RSTP.
- bridge_
priority str - Switch STP priority. Range [0, 4k, 8k.. 60k] in steps of 4k. Bridge priority applies to both VSTP and RSTP.
- bridge
Priority String - Switch STP priority. Range [0, 4k, 8k.. 60k] in steps of 4k. Bridge priority applies to both VSTP and RSTP.
NetworktemplateSwitchMgmt, NetworktemplateSwitchMgmtArgs
- Ap
Affinity intThreshold - AP affinity threshold for switch management. If set in both site settings and organization settings, the site setting value is used.
- string
- Set Banners for switches. Allows markup formatting
- Cli
Idle intTimeout - Sets timeout for switches
- Config
Revert intTimer - Rollback timer for commit confirmed
- Dhcp
Option boolFqdn - Enable to provide the FQDN with DHCP option 81
- Disable
Oob boolDown Alarm - Whether to suppress alarms when the switch out-of-band management interface is down
- Fips
Enabled bool - Whether FIPS mode is enabled on the switch
- Local
Accounts Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Switch Mgmt Local Accounts> - Local switch user accounts keyed by username
- Mxedge
Proxy stringHost - IP address or FQDN of the Mist Edge used to proxy the switch management traffic to the Mist Cloud
- Mxedge
Proxy stringPort - Mist Edge port used to proxy the switch management traffic to the Mist Cloud. Value in range 1-65535
- Protect
Re Pulumi.Juniper Mist. Org. Inputs. Networktemplate Switch Mgmt Protect Re - Control-plane protection settings for the switch
- Remove
Existing boolConfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - Root
Password string - Root password for local switch access
- Tacacs
Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Switch Mgmt Tacacs - Management authentication settings using TACACS+
- Use
Mxedge boolProxy - Whether to use Mist Edge as a proxy for switch management traffic
- Ap
Affinity intThreshold - AP affinity threshold for switch management. If set in both site settings and organization settings, the site setting value is used.
- string
- Set Banners for switches. Allows markup formatting
- Cli
Idle intTimeout - Sets timeout for switches
- Config
Revert intTimer - Rollback timer for commit confirmed
- Dhcp
Option boolFqdn - Enable to provide the FQDN with DHCP option 81
- Disable
Oob boolDown Alarm - Whether to suppress alarms when the switch out-of-band management interface is down
- Fips
Enabled bool - Whether FIPS mode is enabled on the switch
- Local
Accounts map[string]NetworktemplateSwitch Mgmt Local Accounts - Local switch user accounts keyed by username
- Mxedge
Proxy stringHost - IP address or FQDN of the Mist Edge used to proxy the switch management traffic to the Mist Cloud
- Mxedge
Proxy stringPort - Mist Edge port used to proxy the switch management traffic to the Mist Cloud. Value in range 1-65535
- Protect
Re NetworktemplateSwitch Mgmt Protect Re - Control-plane protection settings for the switch
- Remove
Existing boolConfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - Root
Password string - Root password for local switch access
- Tacacs
Networktemplate
Switch Mgmt Tacacs - Management authentication settings using TACACS+
- Use
Mxedge boolProxy - Whether to use Mist Edge as a proxy for switch management traffic
- ap_
affinity_ numberthreshold - AP affinity threshold for switch management. If set in both site settings and organization settings, the site setting value is used.
- string
- Set Banners for switches. Allows markup formatting
- cli_
idle_ numbertimeout - Sets timeout for switches
- config_
revert_ numbertimer - Rollback timer for commit confirmed
- dhcp_
option_ boolfqdn - Enable to provide the FQDN with DHCP option 81
- disable_
oob_ booldown_ alarm - Whether to suppress alarms when the switch out-of-band management interface is down
- fips_
enabled bool - Whether FIPS mode is enabled on the switch
- local_
accounts map(object) - Local switch user accounts keyed by username
- mxedge_
proxy_ stringhost - IP address or FQDN of the Mist Edge used to proxy the switch management traffic to the Mist Cloud
- mxedge_
proxy_ stringport - Mist Edge port used to proxy the switch management traffic to the Mist Cloud. Value in range 1-65535
- protect_
re object - Control-plane protection settings for the switch
- remove_
existing_ boolconfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - root_
password string - Root password for local switch access
- tacacs object
- Management authentication settings using TACACS+
- use_
mxedge_ boolproxy - Whether to use Mist Edge as a proxy for switch management traffic
- ap
Affinity IntegerThreshold - AP affinity threshold for switch management. If set in both site settings and organization settings, the site setting value is used.
- String
- Set Banners for switches. Allows markup formatting
- cli
Idle IntegerTimeout - Sets timeout for switches
- config
Revert IntegerTimer - Rollback timer for commit confirmed
- dhcp
Option BooleanFqdn - Enable to provide the FQDN with DHCP option 81
- disable
Oob BooleanDown Alarm - Whether to suppress alarms when the switch out-of-band management interface is down
- fips
Enabled Boolean - Whether FIPS mode is enabled on the switch
- local
Accounts Map<String,NetworktemplateSwitch Mgmt Local Accounts> - Local switch user accounts keyed by username
- mxedge
Proxy StringHost - IP address or FQDN of the Mist Edge used to proxy the switch management traffic to the Mist Cloud
- mxedge
Proxy StringPort - Mist Edge port used to proxy the switch management traffic to the Mist Cloud. Value in range 1-65535
- protect
Re NetworktemplateSwitch Mgmt Protect Re - Control-plane protection settings for the switch
- remove
Existing BooleanConfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - root
Password String - Root password for local switch access
- tacacs
Networktemplate
Switch Mgmt Tacacs - Management authentication settings using TACACS+
- use
Mxedge BooleanProxy - Whether to use Mist Edge as a proxy for switch management traffic
- ap
Affinity numberThreshold - AP affinity threshold for switch management. If set in both site settings and organization settings, the site setting value is used.
- string
- Set Banners for switches. Allows markup formatting
- cli
Idle numberTimeout - Sets timeout for switches
- config
Revert numberTimer - Rollback timer for commit confirmed
- dhcp
Option booleanFqdn - Enable to provide the FQDN with DHCP option 81
- disable
Oob booleanDown Alarm - Whether to suppress alarms when the switch out-of-band management interface is down
- fips
Enabled boolean - Whether FIPS mode is enabled on the switch
- local
Accounts {[key: string]: NetworktemplateSwitch Mgmt Local Accounts} - Local switch user accounts keyed by username
- mxedge
Proxy stringHost - IP address or FQDN of the Mist Edge used to proxy the switch management traffic to the Mist Cloud
- mxedge
Proxy stringPort - Mist Edge port used to proxy the switch management traffic to the Mist Cloud. Value in range 1-65535
- protect
Re NetworktemplateSwitch Mgmt Protect Re - Control-plane protection settings for the switch
- remove
Existing booleanConfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - root
Password string - Root password for local switch access
- tacacs
Networktemplate
Switch Mgmt Tacacs - Management authentication settings using TACACS+
- use
Mxedge booleanProxy - Whether to use Mist Edge as a proxy for switch management traffic
- ap_
affinity_ intthreshold - AP affinity threshold for switch management. If set in both site settings and organization settings, the site setting value is used.
- str
- Set Banners for switches. Allows markup formatting
- cli_
idle_ inttimeout - Sets timeout for switches
- config_
revert_ inttimer - Rollback timer for commit confirmed
- dhcp_
option_ boolfqdn - Enable to provide the FQDN with DHCP option 81
- disable_
oob_ booldown_ alarm - Whether to suppress alarms when the switch out-of-band management interface is down
- fips_
enabled bool - Whether FIPS mode is enabled on the switch
- local_
accounts Mapping[str, NetworktemplateSwitch Mgmt Local Accounts] - Local switch user accounts keyed by username
- mxedge_
proxy_ strhost - IP address or FQDN of the Mist Edge used to proxy the switch management traffic to the Mist Cloud
- mxedge_
proxy_ strport - Mist Edge port used to proxy the switch management traffic to the Mist Cloud. Value in range 1-65535
- protect_
re NetworktemplateSwitch Mgmt Protect Re - Control-plane protection settings for the switch
- remove_
existing_ boolconfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - root_
password str - Root password for local switch access
- tacacs
Networktemplate
Switch Mgmt Tacacs - Management authentication settings using TACACS+
- use_
mxedge_ boolproxy - Whether to use Mist Edge as a proxy for switch management traffic
- ap
Affinity NumberThreshold - AP affinity threshold for switch management. If set in both site settings and organization settings, the site setting value is used.
- String
- Set Banners for switches. Allows markup formatting
- cli
Idle NumberTimeout - Sets timeout for switches
- config
Revert NumberTimer - Rollback timer for commit confirmed
- dhcp
Option BooleanFqdn - Enable to provide the FQDN with DHCP option 81
- disable
Oob BooleanDown Alarm - Whether to suppress alarms when the switch out-of-band management interface is down
- fips
Enabled Boolean - Whether FIPS mode is enabled on the switch
- local
Accounts Map<Property Map> - Local switch user accounts keyed by username
- mxedge
Proxy StringHost - IP address or FQDN of the Mist Edge used to proxy the switch management traffic to the Mist Cloud
- mxedge
Proxy StringPort - Mist Edge port used to proxy the switch management traffic to the Mist Cloud. Value in range 1-65535
- protect
Re Property Map - Control-plane protection settings for the switch
- remove
Existing BooleanConfigs - By default, only the configuration generated by Mist is cleaned up during the configuration process. If
true, all the existing configuration will be removed. - root
Password String - Root password for local switch access
- tacacs Property Map
- Management authentication settings using TACACS+
- use
Mxedge BooleanProxy - Whether to use Mist Edge as a proxy for switch management traffic
NetworktemplateSwitchMgmtLocalAccounts, NetworktemplateSwitchMgmtLocalAccountsArgs
NetworktemplateSwitchMgmtProtectRe, NetworktemplateSwitchMgmtProtectReArgs
- Allowed
Services List<string> - optionally, services we'll allow. enum:
icmp,ssh - Customs
List<Pulumi.
Juniper Mist. Org. Inputs. Networktemplate Switch Mgmt Protect Re Custom> - Additional ACL entries allowed by the Protect RE policy
- Enabled bool
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- Hit
Count bool - Whether to enable hit count for Protect_RE policy
- Trusted
Hosts List<string> - Trusted host or subnet entries allowed by the Protect RE policy
- Allowed
Services []string - optionally, services we'll allow. enum:
icmp,ssh - Customs
[]Networktemplate
Switch Mgmt Protect Re Custom - Additional ACL entries allowed by the Protect RE policy
- Enabled bool
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- Hit
Count bool - Whether to enable hit count for Protect_RE policy
- Trusted
Hosts []string - Trusted host or subnet entries allowed by the Protect RE policy
- allowed_
services list(string) - optionally, services we'll allow. enum:
icmp,ssh - customs list(object)
- Additional ACL entries allowed by the Protect RE policy
- enabled bool
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- hit_
count bool - Whether to enable hit count for Protect_RE policy
- trusted_
hosts list(string) - Trusted host or subnet entries allowed by the Protect RE policy
- allowed
Services List<String> - optionally, services we'll allow. enum:
icmp,ssh - customs
List<Networktemplate
Switch Mgmt Protect Re Custom> - Additional ACL entries allowed by the Protect RE policy
- enabled Boolean
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- hit
Count Boolean - Whether to enable hit count for Protect_RE policy
- trusted
Hosts List<String> - Trusted host or subnet entries allowed by the Protect RE policy
- allowed
Services string[] - optionally, services we'll allow. enum:
icmp,ssh - customs
Networktemplate
Switch Mgmt Protect Re Custom[] - Additional ACL entries allowed by the Protect RE policy
- enabled boolean
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- hit
Count boolean - Whether to enable hit count for Protect_RE policy
- trusted
Hosts string[] - Trusted host or subnet entries allowed by the Protect RE policy
- allowed_
services Sequence[str] - optionally, services we'll allow. enum:
icmp,ssh - customs
Sequence[Networktemplate
Switch Mgmt Protect Re Custom] - Additional ACL entries allowed by the Protect RE policy
- enabled bool
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- hit_
count bool - Whether to enable hit count for Protect_RE policy
- trusted_
hosts Sequence[str] - Trusted host or subnet entries allowed by the Protect RE policy
- allowed
Services List<String> - optionally, services we'll allow. enum:
icmp,ssh - customs List<Property Map>
- Additional ACL entries allowed by the Protect RE policy
- enabled Boolean
- When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
- hit
Count Boolean - Whether to enable hit count for Protect_RE policy
- trusted
Hosts List<String> - Trusted host or subnet entries allowed by the Protect RE policy
NetworktemplateSwitchMgmtProtectReCustom, NetworktemplateSwitchMgmtProtectReCustomArgs
- Subnets List<string>
- Source subnets matched by this custom Protect RE ACL
- Port
Range string - matched dst port, "0" means any. Note: For
protocol==anyandportRange==any, configuretrustedHostsinstead - Protocol string
- enum:
any,icmp,tcp,udp. Note: Forprotocol==anyandportRange==any, configuretrustedHostsinstead
- Subnets []string
- Source subnets matched by this custom Protect RE ACL
- Port
Range string - matched dst port, "0" means any. Note: For
protocol==anyandportRange==any, configuretrustedHostsinstead - Protocol string
- enum:
any,icmp,tcp,udp. Note: Forprotocol==anyandportRange==any, configuretrustedHostsinstead
- subnets list(string)
- Source subnets matched by this custom Protect RE ACL
- port_
range string - matched dst port, "0" means any. Note: For
protocol==anyandportRange==any, configuretrustedHostsinstead - protocol string
- enum:
any,icmp,tcp,udp. Note: Forprotocol==anyandportRange==any, configuretrustedHostsinstead
- subnets List<String>
- Source subnets matched by this custom Protect RE ACL
- port
Range String - matched dst port, "0" means any. Note: For
protocol==anyandportRange==any, configuretrustedHostsinstead - protocol String
- enum:
any,icmp,tcp,udp. Note: Forprotocol==anyandportRange==any, configuretrustedHostsinstead
- subnets string[]
- Source subnets matched by this custom Protect RE ACL
- port
Range string - matched dst port, "0" means any. Note: For
protocol==anyandportRange==any, configuretrustedHostsinstead - protocol string
- enum:
any,icmp,tcp,udp. Note: Forprotocol==anyandportRange==any, configuretrustedHostsinstead
- subnets Sequence[str]
- Source subnets matched by this custom Protect RE ACL
- port_
range str - matched dst port, "0" means any. Note: For
protocol==anyandportRange==any, configuretrustedHostsinstead - protocol str
- enum:
any,icmp,tcp,udp. Note: Forprotocol==anyandportRange==any, configuretrustedHostsinstead
- subnets List<String>
- Source subnets matched by this custom Protect RE ACL
- port
Range String - matched dst port, "0" means any. Note: For
protocol==anyandportRange==any, configuretrustedHostsinstead - protocol String
- enum:
any,icmp,tcp,udp. Note: Forprotocol==anyandportRange==any, configuretrustedHostsinstead
NetworktemplateSwitchMgmtTacacs, NetworktemplateSwitchMgmtTacacsArgs
- Acct
Servers List<Pulumi.Juniper Mist. Org. Inputs. Networktemplate Switch Mgmt Tacacs Acct Server> - TACACS+ accounting servers used for switch management sessions
- Default
Role string - Default switch-management role to use for TACACS+ logins
- Enabled bool
- Whether TACACS+ is enabled for switch management authentication
- Network string
- Source network used for connectivity to the TACACS+ servers
- Tacplus
Servers List<Pulumi.Juniper Mist. Org. Inputs. Networktemplate Switch Mgmt Tacacs Tacplus Server> - TACACS+ authentication servers used for switch management logins
- Acct
Servers []NetworktemplateSwitch Mgmt Tacacs Acct Server - TACACS+ accounting servers used for switch management sessions
- Default
Role string - Default switch-management role to use for TACACS+ logins
- Enabled bool
- Whether TACACS+ is enabled for switch management authentication
- Network string
- Source network used for connectivity to the TACACS+ servers
- Tacplus
Servers []NetworktemplateSwitch Mgmt Tacacs Tacplus Server - TACACS+ authentication servers used for switch management logins
- acct_
servers list(object) - TACACS+ accounting servers used for switch management sessions
- default_
role string - Default switch-management role to use for TACACS+ logins
- enabled bool
- Whether TACACS+ is enabled for switch management authentication
- network string
- Source network used for connectivity to the TACACS+ servers
- tacplus_
servers list(object) - TACACS+ authentication servers used for switch management logins
- acct
Servers List<NetworktemplateSwitch Mgmt Tacacs Acct Server> - TACACS+ accounting servers used for switch management sessions
- default
Role String - Default switch-management role to use for TACACS+ logins
- enabled Boolean
- Whether TACACS+ is enabled for switch management authentication
- network String
- Source network used for connectivity to the TACACS+ servers
- tacplus
Servers List<NetworktemplateSwitch Mgmt Tacacs Tacplus Server> - TACACS+ authentication servers used for switch management logins
- acct
Servers NetworktemplateSwitch Mgmt Tacacs Acct Server[] - TACACS+ accounting servers used for switch management sessions
- default
Role string - Default switch-management role to use for TACACS+ logins
- enabled boolean
- Whether TACACS+ is enabled for switch management authentication
- network string
- Source network used for connectivity to the TACACS+ servers
- tacplus
Servers NetworktemplateSwitch Mgmt Tacacs Tacplus Server[] - TACACS+ authentication servers used for switch management logins
- acct_
servers Sequence[NetworktemplateSwitch Mgmt Tacacs Acct Server] - TACACS+ accounting servers used for switch management sessions
- default_
role str - Default switch-management role to use for TACACS+ logins
- enabled bool
- Whether TACACS+ is enabled for switch management authentication
- network str
- Source network used for connectivity to the TACACS+ servers
- tacplus_
servers Sequence[NetworktemplateSwitch Mgmt Tacacs Tacplus Server] - TACACS+ authentication servers used for switch management logins
- acct
Servers List<Property Map> - TACACS+ accounting servers used for switch management sessions
- default
Role String - Default switch-management role to use for TACACS+ logins
- enabled Boolean
- Whether TACACS+ is enabled for switch management authentication
- network String
- Source network used for connectivity to the TACACS+ servers
- tacplus
Servers List<Property Map> - TACACS+ authentication servers used for switch management logins
NetworktemplateSwitchMgmtTacacsAcctServer, NetworktemplateSwitchMgmtTacacsAcctServerArgs
NetworktemplateSwitchMgmtTacacsTacplusServer, NetworktemplateSwitchMgmtTacacsTacplusServerArgs
NetworktemplateVrfConfig, NetworktemplateVrfConfigArgs
- Enabled bool
- Whether to enable VRF (when supported on the device)
- Enabled bool
- Whether to enable VRF (when supported on the device)
- enabled bool
- Whether to enable VRF (when supported on the device)
- enabled Boolean
- Whether to enable VRF (when supported on the device)
- enabled boolean
- Whether to enable VRF (when supported on the device)
- enabled bool
- Whether to enable VRF (when supported on the device)
- enabled Boolean
- Whether to enable VRF (when supported on the device)
NetworktemplateVrfInstances, NetworktemplateVrfInstancesArgs
- Evpn
Auto stringLoopback Subnet - IPv4 subnet used for automatic EVPN loopback addresses in this VRF instance
- Evpn
Auto stringLoopback Subnet6 - IPv6 subnet used for automatic EVPN loopback addresses in this VRF instance
- Extra
Routes Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Vrf Instances Extra Routes> - Additional IPv4 static routes configured for this VRF instance
- Extra
Routes6 Dictionary<string, Pulumi.Juniper Mist. Org. Inputs. Networktemplate Vrf Instances Extra Routes6> - Additional IPv6 static routes configured for this VRF instance
- Networks List<string>
- Names of switch networks included in this VRF instance
- Evpn
Auto stringLoopback Subnet - IPv4 subnet used for automatic EVPN loopback addresses in this VRF instance
- Evpn
Auto stringLoopback Subnet6 - IPv6 subnet used for automatic EVPN loopback addresses in this VRF instance
- Extra
Routes map[string]NetworktemplateVrf Instances Extra Routes - Additional IPv4 static routes configured for this VRF instance
- Extra
Routes6 map[string]NetworktemplateVrf Instances Extra Routes6 - Additional IPv6 static routes configured for this VRF instance
- Networks []string
- Names of switch networks included in this VRF instance
- evpn_
auto_ stringloopback_ subnet - IPv4 subnet used for automatic EVPN loopback addresses in this VRF instance
- evpn_
auto_ stringloopback_ subnet6 - IPv6 subnet used for automatic EVPN loopback addresses in this VRF instance
- extra_
routes map(object) - Additional IPv4 static routes configured for this VRF instance
- extra_
routes6 map(object) - Additional IPv6 static routes configured for this VRF instance
- networks list(string)
- Names of switch networks included in this VRF instance
- evpn
Auto StringLoopback Subnet - IPv4 subnet used for automatic EVPN loopback addresses in this VRF instance
- evpn
Auto StringLoopback Subnet6 - IPv6 subnet used for automatic EVPN loopback addresses in this VRF instance
- extra
Routes Map<String,NetworktemplateVrf Instances Extra Routes> - Additional IPv4 static routes configured for this VRF instance
- extra
Routes6 Map<String,NetworktemplateVrf Instances Extra Routes6> - Additional IPv6 static routes configured for this VRF instance
- networks List<String>
- Names of switch networks included in this VRF instance
- evpn
Auto stringLoopback Subnet - IPv4 subnet used for automatic EVPN loopback addresses in this VRF instance
- evpn
Auto stringLoopback Subnet6 - IPv6 subnet used for automatic EVPN loopback addresses in this VRF instance
- extra
Routes {[key: string]: NetworktemplateVrf Instances Extra Routes} - Additional IPv4 static routes configured for this VRF instance
- extra
Routes6 {[key: string]: NetworktemplateVrf Instances Extra Routes6} - Additional IPv6 static routes configured for this VRF instance
- networks string[]
- Names of switch networks included in this VRF instance
- evpn_
auto_ strloopback_ subnet - IPv4 subnet used for automatic EVPN loopback addresses in this VRF instance
- evpn_
auto_ strloopback_ subnet6 - IPv6 subnet used for automatic EVPN loopback addresses in this VRF instance
- extra_
routes Mapping[str, NetworktemplateVrf Instances Extra Routes] - Additional IPv4 static routes configured for this VRF instance
- extra_
routes6 Mapping[str, NetworktemplateVrf Instances Extra Routes6] - Additional IPv6 static routes configured for this VRF instance
- networks Sequence[str]
- Names of switch networks included in this VRF instance
- evpn
Auto StringLoopback Subnet - IPv4 subnet used for automatic EVPN loopback addresses in this VRF instance
- evpn
Auto StringLoopback Subnet6 - IPv6 subnet used for automatic EVPN loopback addresses in this VRF instance
- extra
Routes Map<Property Map> - Additional IPv4 static routes configured for this VRF instance
- extra
Routes6 Map<Property Map> - Additional IPv6 static routes configured for this VRF instance
- networks List<String>
- Names of switch networks included in this VRF instance
NetworktemplateVrfInstancesExtraRoutes, NetworktemplateVrfInstancesExtraRoutesArgs
- Via string
- IPv4 next-hop address for this VRF extra route
- Via string
- IPv4 next-hop address for this VRF extra route
- via string
- IPv4 next-hop address for this VRF extra route
- via String
- IPv4 next-hop address for this VRF extra route
- via string
- IPv4 next-hop address for this VRF extra route
- via str
- IPv4 next-hop address for this VRF extra route
- via String
- IPv4 next-hop address for this VRF extra route
NetworktemplateVrfInstancesExtraRoutes6, NetworktemplateVrfInstancesExtraRoutes6Args
- Via string
- IPv6 next-hop address for this VRF extra route
- Via string
- IPv6 next-hop address for this VRF extra route
- via string
- IPv6 next-hop address for this VRF extra route
- via String
- IPv6 next-hop address for this VRF extra route
- via string
- IPv6 next-hop address for this VRF extra route
- via str
- IPv6 next-hop address for this VRF extra route
- via String
- IPv6 next-hop address for this VRF extra route
Import
Using pulumi import, import junipermist.org.Networktemplate with:
Org Network Template can be imported by specifying the orgId and the networktemplateId
$ pulumi import junipermist:org/networktemplate:Networktemplate networktemplate_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- junipermist pulumi/pulumi-junipermist
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
mistTerraform Provider.
Viewing docs for Juniper Mist v0.11.1
published on Friday, Jul 10, 2026 by Pulumi
published on Friday, Jul 10, 2026 by Pulumi