junipermist.site.Wlan

Enable coa-immediate-update and address-change-immediate-update on the access profile.

AcctServers List<Pulumi.JuniperMist.Site.Inputs.WlanAcctServer>

How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled

List of RADIUS accounting servers, optional, order matters where the first one is treated as primary

Airwatch Pulumi.JuniperMist.Site.Inputs.WlanAirwatch

Airwatch wlan settings

AppLimit Pulumi.JuniperMist.Site.Inputs.WlanAppLimit

Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through

AllowMdns bool

Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through

AllowSsdp bool

Only applicable when limit_bcast==true, which allows SSDP

ApIds List<string>

List of device ids

Bandwidth limiting for apps (applies to up/down)

AppQos Pulumi.JuniperMist.Site.Inputs.WlanAppQos

APp qos wlan settings

ApplyTo string

enum: aps, site, wxtags

ArpFilter bool

Whether to enable smart arp filter

Auth Pulumi.JuniperMist.Site.Inputs.WlanAuth

Authentication wlan settings

AuthServers List<Pulumi.JuniperMist.Site.Inputs.WlanAuthServer>

When ordered, AP will prefer and go back to the first server if possible. enum: ordered, unordered

List of RADIUS authentication servers, at least one is needed if auth type==eap, order matters where the first one is treated as primary

AuthServersNasId string

Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers

AuthServersNasIp string

Optional, NAS-IP-ADDRESS to use

Radius auth session retries. Following fast timers are set if "fast_dot1x_timers" knob is enabled. ‘retries’ are set to value of auth_servers_retries. ‘max-requests’ is also set when setting auth_servers_retries and is set to default value to 3.

Radius auth session timeout. Following fast timers are set if "fast_dot1x_timers" knob is enabled. ‘quite-period’ and ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when setting auth_servers_timeout and is set to default value of 10.

BandSteer bool

Whether to enable band_steering, this works only when band==both

Force dual_band capable client to connect to 5G

Bands List<string>

list of radios that the wlan should apply to. enum: 24, 5, 6

Bonjour Pulumi.JuniperMist.Site.Inputs.WlanBonjour

Whether to block the clients in the blacklist (up to first 256 macs)

Bonjour gateway wlan settings

CiscoCwa Pulumi.JuniperMist.Site.Inputs.WlanCiscoCwa

Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

ClientLimitDown string

If downlink limiting per-client is enabled

ClientLimitUp string

CoaServers List<Pulumi.JuniperMist.Site.Inputs.WlanCoaServer>

If uplink limiting per-client is enabled

List of COA (change of authorization) servers, optional

Disable11ax bool

Some old WLAN drivers may not be compatible

Disable11be bool

To disable Wi-Fi 7 EHT IEs

To disable ht or vht rates

Whether to disable U-APSD

Disable sending v2 roam notification messages

Disable sending v2 roam notification messages

When any of the following is true, this WLAN will be disabled

cannot get IP
cannot obtain default gateway
cannot reach default gateway

DnsServerRewrite Pulumi.JuniperMist.Site.Inputs.WlanDnsServerRewrite

DisableWmm bool

Whether to disable WMM

For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)

Dtim int

DynamicPsk Pulumi.JuniperMist.Site.Inputs.WlanDynamicPsk

For dynamic PSK where we get per_user PSK from Radius. dynamic_psk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)

PSK will come from RADIUS server
AP sends client MAC as username and password (i.e. enable_mac_auth is assumed)
AP sends BSSID:SSID as Caller-Station-ID
auth_servers is required
PSK will come from cloud WLC if source is cloud_psks
default_psk will be used if cloud WLC is not available
multi_psk_only and psk is ignored
pairwise can only be wpa2-ccmp (for now, wpa3 support on the roadmap)

DynamicVlan Pulumi.JuniperMist.Site.Inputs.WlanDynamicVlan

For 802.1x

Enable AP-AP keycaching via multicast

By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where client is a wireless bridge (DHCP packets for other MACs will need to be forwarded), wireless_bridging can be enabled

If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcp_tracking will cut down DHCP response packets to be forwarded to wireless

Enabled bool

If this wlan is enabled

Hotspot20 Pulumi.JuniperMist.Site.Inputs.WlanHotspot20

If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .

HideSsid bool

Whether to hide SSID in beacon

HostnameIe bool

Include hostname inside IE in AP beacons / probe responses

Hostspot 2.0 wlan settings

InjectDhcpOption82 Pulumi.JuniperMist.Site.Inputs.WlanInjectDhcpOption82

Interface string

where this WLAN will be connected to. enum: all, eth0, eth1, eth2, eth3, mxtunnel, site_mxedge, wxtunnel

Isolation bool

Whether to stop clients to talk to each other

L2Isolation bool

If isolation is enabled, whether to deny clients to talk to L2 on the LAN

Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.

LimitBcast bool

Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)

Limit probe response base on some heuristic rules

Max idle time in seconds

MistNac Pulumi.JuniperMist.Site.Inputs.WlanMistNac

Maximum number of client connected to the SSID. 0 means unlimited

MxtunnelIds List<string>

When interface=mxtunnel, id of the Mist Tunnel

MxtunnelNames List<string>

When interface=site_mxedge, name of the mxtunnel that in mxtunnels under Site Setting

NoStaticDns bool

Whether to only allow client to use DNS that we’ve learned from DHCP response

NoStaticIp bool

Whether to only allow client that we’ve learned from DHCP exchange to talk

Portal Pulumi.JuniperMist.Site.Inputs.WlanPortal

Portal wlan settings

PortalAllowedHostnames List<string>

List of hostnames without http(s):// (matched by substring)

PortalAllowedSubnets List<string>

List of CIDRs

PortalDeniedHostnames List<string>

List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames

Qos Pulumi.JuniperMist.Site.Inputs.WlanQos

Radsec Pulumi.JuniperMist.Site.Inputs.WlanRadsec

RadSec settings

Rateset Dictionary<string, Pulumi.JuniperMist.Site.Inputs.WlanRatesetArgs>

Property key is the RF band. enum: 24, 5, 6

Schedule Pulumi.JuniperMist.Site.Inputs.WlanSchedule

When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)

RoamMode string

enum: 11r, OKC, NONE

WLAN operating schedule, default is disabled

SleExcluded bool

Whether to exclude this WLAN from SLE metrics

UseEapolV1 bool

If auth.type==eap or auth.type==psk, should only be set for legacy client, such as pre-2004, 802.11b devices

VlanEnabled bool

If vlan tagging is enabled

VlanId string

VlanIds List<string>

if vlan_enabled==true and vlan_pooling==true. List of VLAN IDs (comma separated) to be used in the VLAN Pool

VlanPooling bool

Requires vlan_enabled==true to be set to true. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm

WlanLimitDown string

If downlink limiting for whole wlan is enabled

WlanLimitUp string

If uplink limiting for whole wlan is enabled

WxtagIds List<string>

List of wxtag_ids

WxtunnelId string

When interface=wxtunnel, id of the WXLAN Tunnel

WxtunnelRemoteId string

When interface=wxtunnel, remote tunnel identifier

SiteId string

Ssid string

Name of the SSID

Enable coa-immediate-update and address-change-immediate-update on the access profile.

AcctServers []WlanAcctServerArgs

List of RADIUS accounting servers, optional, order matters where the first one is treated as primary

Airwatch WlanAirwatchArgs

Airwatch wlan settings

AppLimit WlanAppLimitArgs

Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through

AllowMdns bool

Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through

AllowSsdp bool

Only applicable when limit_bcast==true, which allows SSDP

ApIds []string

List of device ids

Bandwidth limiting for apps (applies to up/down)

AppQos WlanAppQosArgs

APp qos wlan settings

ApplyTo string

enum: aps, site, wxtags

ArpFilter bool

Whether to enable smart arp filter

Auth WlanAuthArgs

Authentication wlan settings

AuthServers []WlanAuthServerArgs

When ordered, AP will prefer and go back to the first server if possible. enum: ordered, unordered

List of RADIUS authentication servers, at least one is needed if auth type==eap, order matters where the first one is treated as primary

AuthServersNasId string

Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers

AuthServersNasIp string

Optional, NAS-IP-ADDRESS to use

BandSteer bool

Whether to enable band_steering, this works only when band==both

Force dual_band capable client to connect to 5G

Bands []string

list of radios that the wlan should apply to. enum: 24, 5, 6

Bonjour WlanBonjourArgs

Whether to block the clients in the blacklist (up to first 256 macs)

Bonjour gateway wlan settings

CiscoCwa WlanCiscoCwaArgs

Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

ClientLimitDown string

If downlink limiting per-client is enabled

ClientLimitUp string

CoaServers []WlanCoaServerArgs

If uplink limiting per-client is enabled

List of COA (change of authorization) servers, optional

Disable11ax bool

Some old WLAN drivers may not be compatible

Disable11be bool

To disable Wi-Fi 7 EHT IEs

To disable ht or vht rates

Whether to disable U-APSD

Disable sending v2 roam notification messages

Disable sending v2 roam notification messages

When any of the following is true, this WLAN will be disabled

cannot get IP
cannot obtain default gateway
cannot reach default gateway

DnsServerRewrite WlanDnsServerRewriteArgs

DisableWmm bool

Whether to disable WMM

For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)

Dtim int

DynamicPsk WlanDynamicPskArgs

For dynamic PSK where we get per_user PSK from Radius. dynamic_psk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)

PSK will come from RADIUS server
AP sends client MAC as username and password (i.e. enable_mac_auth is assumed)
AP sends BSSID:SSID as Caller-Station-ID
auth_servers is required
PSK will come from cloud WLC if source is cloud_psks
default_psk will be used if cloud WLC is not available
multi_psk_only and psk is ignored
pairwise can only be wpa2-ccmp (for now, wpa3 support on the roadmap)

DynamicVlan WlanDynamicVlanArgs

For 802.1x

Enable AP-AP keycaching via multicast

If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcp_tracking will cut down DHCP response packets to be forwarded to wireless

Enabled bool

If this wlan is enabled

Hotspot20 WlanHotspot20Args

If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .

HideSsid bool

Whether to hide SSID in beacon

HostnameIe bool

Include hostname inside IE in AP beacons / probe responses

Hostspot 2.0 wlan settings

InjectDhcpOption82 WlanInjectDhcpOption82Args

Interface string

where this WLAN will be connected to. enum: all, eth0, eth1, eth2, eth3, mxtunnel, site_mxedge, wxtunnel

Isolation bool

Whether to stop clients to talk to each other

L2Isolation bool

If isolation is enabled, whether to deny clients to talk to L2 on the LAN

Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.

LimitBcast bool

Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)

Limit probe response base on some heuristic rules

Max idle time in seconds

MistNac WlanMistNacArgs

Maximum number of client connected to the SSID. 0 means unlimited

MxtunnelIds []string

When interface=mxtunnel, id of the Mist Tunnel

MxtunnelNames []string

When interface=site_mxedge, name of the mxtunnel that in mxtunnels under Site Setting

NoStaticDns bool

Whether to only allow client to use DNS that we’ve learned from DHCP response

NoStaticIp bool

Whether to only allow client that we’ve learned from DHCP exchange to talk

Portal WlanPortalArgs

Portal wlan settings

PortalAllowedHostnames []string

List of hostnames without http(s):// (matched by substring)

PortalAllowedSubnets []string

List of CIDRs

PortalDeniedHostnames []string

List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames

Qos WlanQosArgs

Radsec WlanRadsecArgs

RadSec settings

Rateset map[string]WlanRatesetArgs

Property key is the RF band. enum: 24, 5, 6

Schedule WlanScheduleArgs

When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)

RoamMode string

enum: 11r, OKC, NONE

WLAN operating schedule, default is disabled

SleExcluded bool

Whether to exclude this WLAN from SLE metrics

UseEapolV1 bool

If auth.type==eap or auth.type==psk, should only be set for legacy client, such as pre-2004, 802.11b devices

VlanEnabled bool

If vlan tagging is enabled

VlanId string

VlanIds []string

if vlan_enabled==true and vlan_pooling==true. List of VLAN IDs (comma separated) to be used in the VLAN Pool

VlanPooling bool

Requires vlan_enabled==true to be set to true. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm

WlanLimitDown string

If downlink limiting for whole wlan is enabled

WlanLimitUp string

If uplink limiting for whole wlan is enabled

WxtagIds []string

List of wxtag_ids

WxtunnelId string

When interface=wxtunnel, id of the WXLAN Tunnel

WxtunnelRemoteId string

When interface=wxtunnel, remote tunnel identifier

siteId String

ssid String

Name of the SSID

acctServers List<WlanAcctServer>

Enable coa-immediate-update and address-change-immediate-update on the access profile.

acctInterimInterval Integer

List of RADIUS accounting servers, optional, order matters where the first one is treated as primary

Airwatch wlan settings

allowIpv6Ndp Boolean

Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through

allowMdns Boolean

Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through

allowSsdp Boolean

Only applicable when limit_bcast==true, which allows SSDP

apIds List<String>

List of device ids

Bandwidth limiting for apps (applies to up/down)

APp qos wlan settings

applyTo String

enum: aps, site, wxtags

arpFilter Boolean

Whether to enable smart arp filter

Authentication wlan settings

authServers List<WlanAuthServer>

When ordered, AP will prefer and go back to the first server if possible. enum: ordered, unordered

List of RADIUS authentication servers, at least one is needed if auth type==eap, order matters where the first one is treated as primary

authServersNasId String

Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers

authServersNasIp String

Optional, NAS-IP-ADDRESS to use

authServersRetries Integer

authServersTimeout Integer

bandSteer Boolean

Whether to enable band_steering, this works only when band==both

Force dual_band capable client to connect to 5G

bands List<String>

list of radios that the wlan should apply to. enum: 24, 5, 6

Whether to block the clients in the blacklist (up to first 256 macs)

Bonjour gateway wlan settings

Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

clientLimitDown String

If downlink limiting per-client is enabled

clientLimitUp String

coaServers List<WlanCoaServer>

If uplink limiting per-client is enabled

List of COA (change of authorization) servers, optional

disable11ax Boolean

Some old WLAN drivers may not be compatible

disable11be Boolean

To disable Wi-Fi 7 EHT IEs

disableHtVhtRates Boolean

To disable ht or vht rates

disableUapsd Boolean

Whether to disable U-APSD

Disable sending v2 roam notification messages

Disable sending v2 roam notification messages

When any of the following is true, this WLAN will be disabled

cannot get IP
cannot obtain default gateway
cannot reach default gateway

disableWmm Boolean

Whether to disable WMM

For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)

dtim Integer

For dynamic PSK where we get per_user PSK from Radius. dynamic_psk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)

PSK will come from RADIUS server
AP sends client MAC as username and password (i.e. enable_mac_auth is assumed)
AP sends BSSID:SSID as Caller-Station-ID
auth_servers is required
PSK will come from cloud WLC if source is cloud_psks
default_psk will be used if cloud WLC is not available
multi_psk_only and psk is ignored
pairwise can only be wpa2-ccmp (for now, wpa3 support on the roadmap)

For 802.1x

Enable AP-AP keycaching via multicast

If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcp_tracking will cut down DHCP response packets to be forwarded to wireless

enabled Boolean

If this wlan is enabled

fastDot1xTimers Boolean

If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .

hideSsid Boolean

Whether to hide SSID in beacon

hostnameIe Boolean

Include hostname inside IE in AP beacons / probe responses

Hostspot 2.0 wlan settings

interface_ String

where this WLAN will be connected to. enum: all, eth0, eth1, eth2, eth3, mxtunnel, site_mxedge, wxtunnel

isolation Boolean

Whether to stop clients to talk to each other

l2Isolation Boolean

If isolation is enabled, whether to deny clients to talk to L2 on the LAN

legacyOverds Boolean

Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.

limitBcast Boolean

Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)

limitProbeResponse Boolean

Limit probe response base on some heuristic rules

maxIdletime Integer

Max idle time in seconds

maxNumClients Integer

Maximum number of client connected to the SSID. 0 means unlimited

mxtunnelIds List<String>

When interface=mxtunnel, id of the Mist Tunnel

mxtunnelNames List<String>

When interface=site_mxedge, name of the mxtunnel that in mxtunnels under Site Setting

noStaticDns Boolean

Whether to only allow client to use DNS that we’ve learned from DHCP response

noStaticIp Boolean

Whether to only allow client that we’ve learned from DHCP exchange to talk

Portal wlan settings

portalAllowedHostnames List<String>

List of hostnames without http(s):// (matched by substring)

portalAllowedSubnets List<String>

List of CIDRs

portalDeniedHostnames List<String>

List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames

RadSec settings

rateset Map<String,WlanRatesetArgs>

Property key is the RF band. enum: 24, 5, 6

When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)

roamMode String

enum: 11r, OKC, NONE

WLAN operating schedule, default is disabled

sleExcluded Boolean

Whether to exclude this WLAN from SLE metrics

useEapolV1 Boolean

If auth.type==eap or auth.type==psk, should only be set for legacy client, such as pre-2004, 802.11b devices

vlanEnabled Boolean

If vlan tagging is enabled

vlanId String

vlanIds List<String>

if vlan_enabled==true and vlan_pooling==true. List of VLAN IDs (comma separated) to be used in the VLAN Pool

vlanPooling Boolean

Requires vlan_enabled==true to be set to true. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm

wlanLimitDown String

acctServers WlanAcctServer[]

If downlink limiting for whole wlan is enabled

wlanLimitUp String

wlanLimitUpEnabled Boolean

If uplink limiting for whole wlan is enabled

wxtagIds List<String>

List of wxtag_ids

wxtunnelId String

When interface=wxtunnel, id of the WXLAN Tunnel

wxtunnelRemoteId String

When interface=wxtunnel, remote tunnel identifier

siteId string

ssid string

Name of the SSID

acctImmediateUpdate boolean

Enable coa-immediate-update and address-change-immediate-update on the access profile.

acctInterimInterval number

List of RADIUS accounting servers, optional, order matters where the first one is treated as primary

Airwatch wlan settings

allowIpv6Ndp boolean

Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through

allowMdns boolean

Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through

allowSsdp boolean

Only applicable when limit_bcast==true, which allows SSDP

apIds string[]

List of device ids

Bandwidth limiting for apps (applies to up/down)

APp qos wlan settings

applyTo string

enum: aps, site, wxtags

arpFilter boolean

Whether to enable smart arp filter

authServers WlanAuthServer[]

Authentication wlan settings

authServerSelection string

When ordered, AP will prefer and go back to the first server if possible. enum: ordered, unordered

List of RADIUS authentication servers, at least one is needed if auth type==eap, order matters where the first one is treated as primary

authServersNasId string

Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers

authServersNasIp string

Optional, NAS-IP-ADDRESS to use

authServersRetries number

authServersTimeout number

bandSteer boolean

Whether to enable band_steering, this works only when band==both

bandSteerForceBand5 boolean

Force dual_band capable client to connect to 5G

bands string[]

list of radios that the wlan should apply to. enum: 24, 5, 6

blockBlacklistClients boolean

Whether to block the clients in the blacklist (up to first 256 macs)

Bonjour gateway wlan settings

coaServers WlanCoaServer[]

Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

clientLimitDown string

clientLimitDownEnabled boolean

If downlink limiting per-client is enabled

clientLimitUp string

clientLimitUpEnabled boolean

If uplink limiting per-client is enabled

List of COA (change of authorization) servers, optional

disable11ax boolean

Some old WLAN drivers may not be compatible

disable11be boolean

To disable Wi-Fi 7 EHT IEs

disableHtVhtRates boolean

To disable ht or vht rates

disableUapsd boolean

Whether to disable U-APSD

disableV1RoamNotify boolean

Disable sending v2 roam notification messages

disableV2RoamNotify boolean

Disable sending v2 roam notification messages

disableWhenGatewayUnreachable boolean

When any of the following is true, this WLAN will be disabled

cannot get IP
cannot obtain default gateway
cannot reach default gateway

disableWhenMxtunnelDown boolean

disableWmm boolean

Whether to disable WMM

For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)

dtim number

For dynamic PSK where we get per_user PSK from Radius. dynamic_psk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)

PSK will come from RADIUS server
AP sends client MAC as username and password (i.e. enable_mac_auth is assumed)
AP sends BSSID:SSID as Caller-Station-ID
auth_servers is required
PSK will come from cloud WLC if source is cloud_psks
default_psk will be used if cloud WLC is not available
multi_psk_only and psk is ignored
pairwise can only be wpa2-ccmp (for now, wpa3 support on the roadmap)

For 802.1x

enableLocalKeycaching boolean

Enable AP-AP keycaching via multicast

enableWirelessBridging boolean

enableWirelessBridgingDhcpTracking boolean

If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcp_tracking will cut down DHCP response packets to be forwarded to wireless

enabled boolean

If this wlan is enabled

fastDot1xTimers boolean

If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .

hideSsid boolean

Whether to hide SSID in beacon

hostnameIe boolean

Include hostname inside IE in AP beacons / probe responses

Hostspot 2.0 wlan settings

interface string

where this WLAN will be connected to. enum: all, eth0, eth1, eth2, eth3, mxtunnel, site_mxedge, wxtunnel

isolation boolean

Whether to stop clients to talk to each other

l2Isolation boolean

If isolation is enabled, whether to deny clients to talk to L2 on the LAN

legacyOverds boolean

Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.

limitBcast boolean

Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)

limitProbeResponse boolean

Limit probe response base on some heuristic rules

maxIdletime number

Max idle time in seconds

maxNumClients number

Maximum number of client connected to the SSID. 0 means unlimited

mxtunnelIds string[]

When interface=mxtunnel, id of the Mist Tunnel

mxtunnelNames string[]

When interface=site_mxedge, name of the mxtunnel that in mxtunnels under Site Setting

noStaticDns boolean

Whether to only allow client to use DNS that we’ve learned from DHCP response

noStaticIp boolean

Whether to only allow client that we’ve learned from DHCP exchange to talk

Portal wlan settings

portalAllowedHostnames string[]

List of hostnames without http(s):// (matched by substring)

portalAllowedSubnets string[]

List of CIDRs

portalDeniedHostnames string[]

List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames

RadSec settings

rateset {[key: string]: WlanRatesetArgs}

Property key is the RF band. enum: 24, 5, 6

reconnectClientsWhenRoamingMxcluster boolean

When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)

roamMode string

enum: 11r, OKC, NONE

acct_servers Sequence[WlanAcctServerArgs]

WLAN operating schedule, default is disabled

sleExcluded boolean

Whether to exclude this WLAN from SLE metrics

useEapolV1 boolean

If auth.type==eap or auth.type==psk, should only be set for legacy client, such as pre-2004, 802.11b devices

vlanEnabled boolean

If vlan tagging is enabled

vlanId string

vlanIds string[]

if vlan_enabled==true and vlan_pooling==true. List of VLAN IDs (comma separated) to be used in the VLAN Pool

vlanPooling boolean

Requires vlan_enabled==true to be set to true. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm

wlanLimitDown string

wlanLimitDownEnabled boolean

If downlink limiting for whole wlan is enabled

wlanLimitUp string

wlanLimitUpEnabled boolean

If uplink limiting for whole wlan is enabled

wxtagIds string[]

List of wxtag_ids

wxtunnelId string

When interface=wxtunnel, id of the WXLAN Tunnel

wxtunnelRemoteId string

When interface=wxtunnel, remote tunnel identifier

site_id str

ssid str

Name of the SSID

acct_immediate_update bool

Enable coa-immediate-update and address-change-immediate-update on the access profile.

acct_interim_interval int

List of RADIUS accounting servers, optional, order matters where the first one is treated as primary

airwatch WlanAirwatchArgs

Airwatch wlan settings

allow_ipv6_ndp bool

Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through

allow_mdns bool

Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through

allow_ssdp bool

Only applicable when limit_bcast==true, which allows SSDP

ap_ids Sequence[str]

List of device ids

app_limit WlanAppLimitArgs

Bandwidth limiting for apps (applies to up/down)

app_qos WlanAppQosArgs

APp qos wlan settings

apply_to str

enum: aps, site, wxtags

arp_filter bool

Whether to enable smart arp filter

auth WlanAuthArgs

Authentication wlan settings

auth_server_selection str

When ordered, AP will prefer and go back to the first server if possible. enum: ordered, unordered

auth_servers Sequence[WlanAuthServerArgs]

List of RADIUS authentication servers, at least one is needed if auth type==eap, order matters where the first one is treated as primary

auth_servers_nas_id str

Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers

auth_servers_nas_ip str

Optional, NAS-IP-ADDRESS to use

auth_servers_retries int

auth_servers_timeout int

band_steer bool

Whether to enable band_steering, this works only when band==both

band_steer_force_band5 bool

Force dual_band capable client to connect to 5G

bands Sequence[str]

list of radios that the wlan should apply to. enum: 24, 5, 6

block_blacklist_clients bool

Whether to block the clients in the blacklist (up to first 256 macs)

bonjour WlanBonjourArgs

Bonjour gateway wlan settings

cisco_cwa WlanCiscoCwaArgs

Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

client_limit_down str

client_limit_down_enabled bool

If downlink limiting per-client is enabled

client_limit_up str

client_limit_up_enabled bool

If uplink limiting per-client is enabled

coa_servers Sequence[WlanCoaServerArgs]

List of COA (change of authorization) servers, optional

disable11ax bool

Some old WLAN drivers may not be compatible

disable11be bool

To disable Wi-Fi 7 EHT IEs

disable_ht_vht_rates bool

To disable ht or vht rates

disable_uapsd bool

Whether to disable U-APSD

disable_v1_roam_notify bool

Disable sending v2 roam notification messages

disable_v2_roam_notify bool

Disable sending v2 roam notification messages

disable_when_gateway_unreachable bool

When any of the following is true, this WLAN will be disabled

cannot get IP
cannot obtain default gateway
cannot reach default gateway

disable_when_mxtunnel_down bool

disable_wmm bool

Whether to disable WMM

dns_server_rewrite WlanDnsServerRewriteArgs

For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)

dtim int

dynamic_psk WlanDynamicPskArgs

For dynamic PSK where we get per_user PSK from Radius. dynamic_psk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)

PSK will come from RADIUS server
AP sends client MAC as username and password (i.e. enable_mac_auth is assumed)
AP sends BSSID:SSID as Caller-Station-ID
auth_servers is required
PSK will come from cloud WLC if source is cloud_psks
default_psk will be used if cloud WLC is not available
multi_psk_only and psk is ignored
pairwise can only be wpa2-ccmp (for now, wpa3 support on the roadmap)

dynamic_vlan WlanDynamicVlanArgs

For 802.1x

enable_local_keycaching bool

Enable AP-AP keycaching via multicast

enable_wireless_bridging bool

enable_wireless_bridging_dhcp_tracking bool

If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcp_tracking will cut down DHCP response packets to be forwarded to wireless

enabled bool

If this wlan is enabled

fast_dot1x_timers bool

If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .

hide_ssid bool

Whether to hide SSID in beacon

hostname_ie bool

Include hostname inside IE in AP beacons / probe responses

hotspot20 WlanHotspot20Args

Hostspot 2.0 wlan settings

inject_dhcp_option82 WlanInjectDhcpOption82Args

interface str

where this WLAN will be connected to. enum: all, eth0, eth1, eth2, eth3, mxtunnel, site_mxedge, wxtunnel

isolation bool

Whether to stop clients to talk to each other

l2_isolation bool

If isolation is enabled, whether to deny clients to talk to L2 on the LAN

legacy_overds bool

Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.

limit_bcast bool

Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)

limit_probe_response bool

Limit probe response base on some heuristic rules

max_idletime int

Max idle time in seconds

max_num_clients int

Maximum number of client connected to the SSID. 0 means unlimited

mist_nac WlanMistNacArgs

mxtunnel_ids Sequence[str]

When interface=mxtunnel, id of the Mist Tunnel

mxtunnel_names Sequence[str]

When interface=site_mxedge, name of the mxtunnel that in mxtunnels under Site Setting

no_static_dns bool

Whether to only allow client to use DNS that we’ve learned from DHCP response

no_static_ip bool

Whether to only allow client that we’ve learned from DHCP exchange to talk

portal WlanPortalArgs

Portal wlan settings

portal_allowed_hostnames Sequence[str]

List of hostnames without http(s):// (matched by substring)

portal_allowed_subnets Sequence[str]

List of CIDRs

portal_denied_hostnames Sequence[str]

List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames

qos WlanQosArgs

radsec WlanRadsecArgs

RadSec settings

rateset Mapping[str, WlanRatesetArgs]

Property key is the RF band. enum: 24, 5, 6

reconnect_clients_when_roaming_mxcluster bool

When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)

roam_mode str

enum: 11r, OKC, NONE

schedule WlanScheduleArgs

WLAN operating schedule, default is disabled

sle_excluded bool

Whether to exclude this WLAN from SLE metrics

use_eapol_v1 bool

If auth.type==eap or auth.type==psk, should only be set for legacy client, such as pre-2004, 802.11b devices

vlan_enabled bool

If vlan tagging is enabled

vlan_id str

vlan_ids Sequence[str]

if vlan_enabled==true and vlan_pooling==true. List of VLAN IDs (comma separated) to be used in the VLAN Pool

vlan_pooling bool

Requires vlan_enabled==true to be set to true. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm

wlan_limit_down str

wlan_limit_down_enabled bool

If downlink limiting for whole wlan is enabled

wlan_limit_up str

wlan_limit_up_enabled bool

If uplink limiting for whole wlan is enabled

wxtag_ids Sequence[str]

List of wxtag_ids

wxtunnel_id str

When interface=wxtunnel, id of the WXLAN Tunnel

wxtunnel_remote_id str

When interface=wxtunnel, remote tunnel identifier

siteId String

ssid String

Name of the SSID

acctServers List<Property Map>

Enable coa-immediate-update and address-change-immediate-update on the access profile.

acctInterimInterval Number

List of RADIUS accounting servers, optional, order matters where the first one is treated as primary

airwatch Property Map

Airwatch wlan settings

allowIpv6Ndp Boolean

Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through

allowMdns Boolean

Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through

allowSsdp Boolean

Only applicable when limit_bcast==true, which allows SSDP

apIds List<String>

List of device ids

appLimit Property Map

Bandwidth limiting for apps (applies to up/down)

appQos Property Map

APp qos wlan settings

applyTo String

enum: aps, site, wxtags

arpFilter Boolean

Whether to enable smart arp filter

auth Property Map

Authentication wlan settings

authServers List<Property Map>

When ordered, AP will prefer and go back to the first server if possible. enum: ordered, unordered

List of RADIUS authentication servers, at least one is needed if auth type==eap, order matters where the first one is treated as primary

authServersNasId String

Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers

authServersNasIp String

Optional, NAS-IP-ADDRESS to use

authServersRetries Number

authServersTimeout Number

bandSteer Boolean

Whether to enable band_steering, this works only when band==both

Force dual_band capable client to connect to 5G

bands List<String>

list of radios that the wlan should apply to. enum: 24, 5, 6

ciscoCwa Property Map

Whether to block the clients in the blacklist (up to first 256 macs)

bonjour Property Map

Bonjour gateway wlan settings

Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

clientLimitDown String

If downlink limiting per-client is enabled

clientLimitUp String

coaServers List<Property Map>

If uplink limiting per-client is enabled

List of COA (change of authorization) servers, optional

disable11ax Boolean

Some old WLAN drivers may not be compatible

disable11be Boolean

To disable Wi-Fi 7 EHT IEs

disableHtVhtRates Boolean

To disable ht or vht rates

disableUapsd Boolean

Whether to disable U-APSD

Disable sending v2 roam notification messages

Disable sending v2 roam notification messages

When any of the following is true, this WLAN will be disabled

cannot get IP
cannot obtain default gateway
cannot reach default gateway

dnsServerRewrite Property Map

disableWmm Boolean

Whether to disable WMM

For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)

dtim Number

dynamicPsk Property Map

For dynamic PSK where we get per_user PSK from Radius. dynamic_psk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)

PSK will come from RADIUS server
AP sends client MAC as username and password (i.e. enable_mac_auth is assumed)
AP sends BSSID:SSID as Caller-Station-ID
auth_servers is required
PSK will come from cloud WLC if source is cloud_psks
default_psk will be used if cloud WLC is not available
multi_psk_only and psk is ignored
pairwise can only be wpa2-ccmp (for now, wpa3 support on the roadmap)

dynamicVlan Property Map

For 802.1x

Enable AP-AP keycaching via multicast

hotspot20 Property Map

If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcp_tracking will cut down DHCP response packets to be forwarded to wireless

enabled Boolean

If this wlan is enabled

fastDot1xTimers Boolean

If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .

hideSsid Boolean

Whether to hide SSID in beacon

hostnameIe Boolean

Include hostname inside IE in AP beacons / probe responses

Hostspot 2.0 wlan settings

injectDhcpOption82 Property Map

interface String

where this WLAN will be connected to. enum: all, eth0, eth1, eth2, eth3, mxtunnel, site_mxedge, wxtunnel

isolation Boolean

Whether to stop clients to talk to each other

l2Isolation Boolean

If isolation is enabled, whether to deny clients to talk to L2 on the LAN

legacyOverds Boolean

Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.

limitBcast Boolean

Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)

limitProbeResponse Boolean

Limit probe response base on some heuristic rules

maxIdletime Number

Max idle time in seconds

maxNumClients Number

Maximum number of client connected to the SSID. 0 means unlimited

mistNac Property Map

mxtunnelIds List<String>

When interface=mxtunnel, id of the Mist Tunnel

mxtunnelNames List<String>

When interface=site_mxedge, name of the mxtunnel that in mxtunnels under Site Setting

noStaticDns Boolean

Whether to only allow client to use DNS that we’ve learned from DHCP response

noStaticIp Boolean

Whether to only allow client that we’ve learned from DHCP exchange to talk

portal Property Map

Portal wlan settings

portalAllowedHostnames List<String>

List of hostnames without http(s):// (matched by substring)

portalAllowedSubnets List<String>

List of CIDRs

portalDeniedHostnames List<String>

List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames

qos Property Map

radsec Property Map

RadSec settings

rateset Map<Property Map>

Property key is the RF band. enum: 24, 5, 6

schedule Property Map

When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)

roamMode String

enum: 11r, OKC, NONE

WLAN operating schedule, default is disabled

sleExcluded Boolean

Whether to exclude this WLAN from SLE metrics

useEapolV1 Boolean

If auth.type==eap or auth.type==psk, should only be set for legacy client, such as pre-2004, 802.11b devices

vlanEnabled Boolean

If vlan tagging is enabled

vlanId String

vlanIds List<String>

if vlan_enabled==true and vlan_pooling==true. List of VLAN IDs (comma separated) to be used in the VLAN Pool

vlanPooling Boolean

Requires vlan_enabled==true to be set to true. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm

wlanLimitDown String

If downlink limiting for whole wlan is enabled

wlanLimitUp String

wlanLimitUpEnabled Boolean

If uplink limiting for whole wlan is enabled

wxtagIds List<String>

List of wxtag_ids

wxtunnelId String

When interface=wxtunnel, id of the WXLAN Tunnel

wxtunnelRemoteId String

When interface=wxtunnel, remote tunnel identifier

Outputs

All input properties are implicitly available as output properties. Additionally, the Wlan resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.
MspId string
OrgId string
PortalApiSecret string: APi secret (auto-generated) that can be used to sign guest authorization requests
PortalImage string: Url of portal background image
PortalSsoUrl string

Id string: The provider-assigned unique ID for this managed resource.
MspId string
OrgId string
PortalApiSecret string: APi secret (auto-generated) that can be used to sign guest authorization requests
PortalImage string: Url of portal background image
PortalSsoUrl string

id String: The provider-assigned unique ID for this managed resource.
mspId String
orgId String
portalApiSecret String: APi secret (auto-generated) that can be used to sign guest authorization requests
portalImage String: Url of portal background image
portalSsoUrl String

id string: The provider-assigned unique ID for this managed resource.
mspId string
orgId string
portalApiSecret string: APi secret (auto-generated) that can be used to sign guest authorization requests
portalImage string: Url of portal background image
portalSsoUrl string

id str: The provider-assigned unique ID for this managed resource.
msp_id str
org_id str
portal_api_secret str: APi secret (auto-generated) that can be used to sign guest authorization requests
portal_image str: Url of portal background image
portal_sso_url str

id String: The provider-assigned unique ID for this managed resource.
mspId String
orgId String
portalApiSecret String: APi secret (auto-generated) that can be used to sign guest authorization requests
portalImage String: Url of portal background image
portalSsoUrl String

Look up Existing Wlan Resource

Get an existing Wlan resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: WlanState, opts?: CustomResourceOptions): Wlan

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        acct_immediate_update: Optional[bool] = None,
        acct_interim_interval: Optional[int] = None,
        acct_servers: Optional[Sequence[WlanAcctServerArgs]] = None,
        airwatch: Optional[WlanAirwatchArgs] = None,
        allow_ipv6_ndp: Optional[bool] = None,
        allow_mdns: Optional[bool] = None,
        allow_ssdp: Optional[bool] = None,
        ap_ids: Optional[Sequence[str]] = None,
        app_limit: Optional[WlanAppLimitArgs] = None,
        app_qos: Optional[WlanAppQosArgs] = None,
        apply_to: Optional[str] = None,
        arp_filter: Optional[bool] = None,
        auth: Optional[WlanAuthArgs] = None,
        auth_server_selection: Optional[str] = None,
        auth_servers: Optional[Sequence[WlanAuthServerArgs]] = None,
        auth_servers_nas_id: Optional[str] = None,
        auth_servers_nas_ip: Optional[str] = None,
        auth_servers_retries: Optional[int] = None,
        auth_servers_timeout: Optional[int] = None,
        band_steer: Optional[bool] = None,
        band_steer_force_band5: Optional[bool] = None,
        bands: Optional[Sequence[str]] = None,
        block_blacklist_clients: Optional[bool] = None,
        bonjour: Optional[WlanBonjourArgs] = None,
        cisco_cwa: Optional[WlanCiscoCwaArgs] = None,
        client_limit_down: Optional[str] = None,
        client_limit_down_enabled: Optional[bool] = None,
        client_limit_up: Optional[str] = None,
        client_limit_up_enabled: Optional[bool] = None,
        coa_servers: Optional[Sequence[WlanCoaServerArgs]] = None,
        disable11ax: Optional[bool] = None,
        disable11be: Optional[bool] = None,
        disable_ht_vht_rates: Optional[bool] = None,
        disable_uapsd: Optional[bool] = None,
        disable_v1_roam_notify: Optional[bool] = None,
        disable_v2_roam_notify: Optional[bool] = None,
        disable_when_gateway_unreachable: Optional[bool] = None,
        disable_when_mxtunnel_down: Optional[bool] = None,
        disable_wmm: Optional[bool] = None,
        dns_server_rewrite: Optional[WlanDnsServerRewriteArgs] = None,
        dtim: Optional[int] = None,
        dynamic_psk: Optional[WlanDynamicPskArgs] = None,
        dynamic_vlan: Optional[WlanDynamicVlanArgs] = None,
        enable_local_keycaching: Optional[bool] = None,
        enable_wireless_bridging: Optional[bool] = None,
        enable_wireless_bridging_dhcp_tracking: Optional[bool] = None,
        enabled: Optional[bool] = None,
        fast_dot1x_timers: Optional[bool] = None,
        hide_ssid: Optional[bool] = None,
        hostname_ie: Optional[bool] = None,
        hotspot20: Optional[WlanHotspot20Args] = None,
        inject_dhcp_option82: Optional[WlanInjectDhcpOption82Args] = None,
        interface: Optional[str] = None,
        isolation: Optional[bool] = None,
        l2_isolation: Optional[bool] = None,
        legacy_overds: Optional[bool] = None,
        limit_bcast: Optional[bool] = None,
        limit_probe_response: Optional[bool] = None,
        max_idletime: Optional[int] = None,
        max_num_clients: Optional[int] = None,
        mist_nac: Optional[WlanMistNacArgs] = None,
        msp_id: Optional[str] = None,
        mxtunnel_ids: Optional[Sequence[str]] = None,
        mxtunnel_names: Optional[Sequence[str]] = None,
        no_static_dns: Optional[bool] = None,
        no_static_ip: Optional[bool] = None,
        org_id: Optional[str] = None,
        portal: Optional[WlanPortalArgs] = None,
        portal_allowed_hostnames: Optional[Sequence[str]] = None,
        portal_allowed_subnets: Optional[Sequence[str]] = None,
        portal_api_secret: Optional[str] = None,
        portal_denied_hostnames: Optional[Sequence[str]] = None,
        portal_image: Optional[str] = None,
        portal_sso_url: Optional[str] = None,
        qos: Optional[WlanQosArgs] = None,
        radsec: Optional[WlanRadsecArgs] = None,
        rateset: Optional[Mapping[str, WlanRatesetArgs]] = None,
        reconnect_clients_when_roaming_mxcluster: Optional[bool] = None,
        roam_mode: Optional[str] = None,
        schedule: Optional[WlanScheduleArgs] = None,
        site_id: Optional[str] = None,
        sle_excluded: Optional[bool] = None,
        ssid: Optional[str] = None,
        use_eapol_v1: Optional[bool] = None,
        vlan_enabled: Optional[bool] = None,
        vlan_id: Optional[str] = None,
        vlan_ids: Optional[Sequence[str]] = None,
        vlan_pooling: Optional[bool] = None,
        wlan_limit_down: Optional[str] = None,
        wlan_limit_down_enabled: Optional[bool] = None,
        wlan_limit_up: Optional[str] = None,
        wlan_limit_up_enabled: Optional[bool] = None,
        wxtag_ids: Optional[Sequence[str]] = None,
        wxtunnel_id: Optional[str] = None,
        wxtunnel_remote_id: Optional[str] = None) -> Wlan

func GetWlan(ctx *Context, name string, id IDInput, state *WlanState, opts ...ResourceOption) (*Wlan, error)

public static Wlan Get(string name, Input<string> id, WlanState? state, CustomResourceOptions? opts = null)

public static Wlan get(String name, Output<String> id, WlanState state, CustomResourceOptions options)

resources:  _:    type: junipermist:site:Wlan    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Enable coa-immediate-update and address-change-immediate-update on the access profile.

AcctServers List<Pulumi.JuniperMist.Site.Inputs.WlanAcctServer>

List of RADIUS accounting servers, optional, order matters where the first one is treated as primary

Airwatch Pulumi.JuniperMist.Site.Inputs.WlanAirwatch

Airwatch wlan settings

AppLimit Pulumi.JuniperMist.Site.Inputs.WlanAppLimit

Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through

AllowMdns bool

Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through

AllowSsdp bool

Only applicable when limit_bcast==true, which allows SSDP

ApIds List<string>

List of device ids

Bandwidth limiting for apps (applies to up/down)

AppQos Pulumi.JuniperMist.Site.Inputs.WlanAppQos

APp qos wlan settings

ApplyTo string

enum: aps, site, wxtags

ArpFilter bool

Whether to enable smart arp filter

Auth Pulumi.JuniperMist.Site.Inputs.WlanAuth

Authentication wlan settings

AuthServers List<Pulumi.JuniperMist.Site.Inputs.WlanAuthServer>

When ordered, AP will prefer and go back to the first server if possible. enum: ordered, unordered

List of RADIUS authentication servers, at least one is needed if auth type==eap, order matters where the first one is treated as primary

AuthServersNasId string

Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers

AuthServersNasIp string

Optional, NAS-IP-ADDRESS to use

BandSteer bool

Whether to enable band_steering, this works only when band==both

Force dual_band capable client to connect to 5G

Bands List<string>

list of radios that the wlan should apply to. enum: 24, 5, 6

Bonjour Pulumi.JuniperMist.Site.Inputs.WlanBonjour

Whether to block the clients in the blacklist (up to first 256 macs)

Bonjour gateway wlan settings

CiscoCwa Pulumi.JuniperMist.Site.Inputs.WlanCiscoCwa

Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

ClientLimitDown string

If downlink limiting per-client is enabled

ClientLimitUp string

CoaServers List<Pulumi.JuniperMist.Site.Inputs.WlanCoaServer>

If uplink limiting per-client is enabled

List of COA (change of authorization) servers, optional

Disable11ax bool

Some old WLAN drivers may not be compatible

Disable11be bool

To disable Wi-Fi 7 EHT IEs

To disable ht or vht rates

Whether to disable U-APSD

Disable sending v2 roam notification messages

Disable sending v2 roam notification messages

When any of the following is true, this WLAN will be disabled

cannot get IP
cannot obtain default gateway
cannot reach default gateway

DnsServerRewrite Pulumi.JuniperMist.Site.Inputs.WlanDnsServerRewrite

DisableWmm bool

Whether to disable WMM

For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)

Dtim int

DynamicPsk Pulumi.JuniperMist.Site.Inputs.WlanDynamicPsk

For dynamic PSK where we get per_user PSK from Radius. dynamic_psk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)

PSK will come from RADIUS server
AP sends client MAC as username and password (i.e. enable_mac_auth is assumed)
AP sends BSSID:SSID as Caller-Station-ID
auth_servers is required
PSK will come from cloud WLC if source is cloud_psks
default_psk will be used if cloud WLC is not available
multi_psk_only and psk is ignored
pairwise can only be wpa2-ccmp (for now, wpa3 support on the roadmap)

DynamicVlan Pulumi.JuniperMist.Site.Inputs.WlanDynamicVlan

For 802.1x

Enable AP-AP keycaching via multicast

If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcp_tracking will cut down DHCP response packets to be forwarded to wireless

Enabled bool

If this wlan is enabled

Hotspot20 Pulumi.JuniperMist.Site.Inputs.WlanHotspot20

If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .

HideSsid bool

Whether to hide SSID in beacon

HostnameIe bool

Include hostname inside IE in AP beacons / probe responses

Hostspot 2.0 wlan settings

InjectDhcpOption82 Pulumi.JuniperMist.Site.Inputs.WlanInjectDhcpOption82

Interface string

where this WLAN will be connected to. enum: all, eth0, eth1, eth2, eth3, mxtunnel, site_mxedge, wxtunnel

Isolation bool

Whether to stop clients to talk to each other

L2Isolation bool

If isolation is enabled, whether to deny clients to talk to L2 on the LAN

Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.

LimitBcast bool

Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)

Limit probe response base on some heuristic rules

Max idle time in seconds

MistNac Pulumi.JuniperMist.Site.Inputs.WlanMistNac

Maximum number of client connected to the SSID. 0 means unlimited

MspId string

MxtunnelIds List<string>

When interface=mxtunnel, id of the Mist Tunnel

MxtunnelNames List<string>

When interface=site_mxedge, name of the mxtunnel that in mxtunnels under Site Setting

NoStaticDns bool

Whether to only allow client to use DNS that we’ve learned from DHCP response

NoStaticIp bool

Whether to only allow client that we’ve learned from DHCP exchange to talk

OrgId string

Portal Pulumi.JuniperMist.Site.Inputs.WlanPortal

Portal wlan settings

PortalAllowedHostnames List<string>

List of hostnames without http(s):// (matched by substring)

PortalAllowedSubnets List<string>

List of CIDRs

PortalApiSecret string

APi secret (auto-generated) that can be used to sign guest authorization requests

PortalDeniedHostnames List<string>

List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames

PortalImage string

Url of portal background image

PortalSsoUrl string

Qos Pulumi.JuniperMist.Site.Inputs.WlanQos

Radsec Pulumi.JuniperMist.Site.Inputs.WlanRadsec

RadSec settings

Rateset Dictionary<string, Pulumi.JuniperMist.Site.Inputs.WlanRatesetArgs>

Property key is the RF band. enum: 24, 5, 6

Schedule Pulumi.JuniperMist.Site.Inputs.WlanSchedule

When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)

RoamMode string

enum: 11r, OKC, NONE

WLAN operating schedule, default is disabled

SiteId string

SleExcluded bool

Whether to exclude this WLAN from SLE metrics

Ssid string

Name of the SSID

UseEapolV1 bool

If auth.type==eap or auth.type==psk, should only be set for legacy client, such as pre-2004, 802.11b devices

VlanEnabled bool

If vlan tagging is enabled

VlanId string

VlanIds List<string>

if vlan_enabled==true and vlan_pooling==true. List of VLAN IDs (comma separated) to be used in the VLAN Pool

VlanPooling bool

Requires vlan_enabled==true to be set to true. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm

WlanLimitDown string

If downlink limiting for whole wlan is enabled

WlanLimitUp string

If uplink limiting for whole wlan is enabled

WxtagIds List<string>

List of wxtag_ids

WxtunnelId string

When interface=wxtunnel, id of the WXLAN Tunnel

WxtunnelRemoteId string

When interface=wxtunnel, remote tunnel identifier

Enable coa-immediate-update and address-change-immediate-update on the access profile.

AcctServers []WlanAcctServerArgs

List of RADIUS accounting servers, optional, order matters where the first one is treated as primary

Airwatch WlanAirwatchArgs

Airwatch wlan settings

AppLimit WlanAppLimitArgs

Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through

AllowMdns bool

Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through

AllowSsdp bool

Only applicable when limit_bcast==true, which allows SSDP

ApIds []string

List of device ids

Bandwidth limiting for apps (applies to up/down)

AppQos WlanAppQosArgs

APp qos wlan settings

ApplyTo string

enum: aps, site, wxtags

ArpFilter bool

Whether to enable smart arp filter

Auth WlanAuthArgs

Authentication wlan settings

AuthServers []WlanAuthServerArgs

When ordered, AP will prefer and go back to the first server if possible. enum: ordered, unordered

List of RADIUS authentication servers, at least one is needed if auth type==eap, order matters where the first one is treated as primary

AuthServersNasId string

Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers

AuthServersNasIp string

Optional, NAS-IP-ADDRESS to use

BandSteer bool

Whether to enable band_steering, this works only when band==both

Force dual_band capable client to connect to 5G

Bands []string

list of radios that the wlan should apply to. enum: 24, 5, 6

Bonjour WlanBonjourArgs

Whether to block the clients in the blacklist (up to first 256 macs)

Bonjour gateway wlan settings

CiscoCwa WlanCiscoCwaArgs

Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

ClientLimitDown string

If downlink limiting per-client is enabled

ClientLimitUp string

CoaServers []WlanCoaServerArgs

If uplink limiting per-client is enabled

List of COA (change of authorization) servers, optional

Disable11ax bool

Some old WLAN drivers may not be compatible

Disable11be bool

To disable Wi-Fi 7 EHT IEs

To disable ht or vht rates

Whether to disable U-APSD

Disable sending v2 roam notification messages

Disable sending v2 roam notification messages

When any of the following is true, this WLAN will be disabled

cannot get IP
cannot obtain default gateway
cannot reach default gateway

DnsServerRewrite WlanDnsServerRewriteArgs

DisableWmm bool

Whether to disable WMM

For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)

Dtim int

DynamicPsk WlanDynamicPskArgs

For dynamic PSK where we get per_user PSK from Radius. dynamic_psk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)

PSK will come from RADIUS server
AP sends client MAC as username and password (i.e. enable_mac_auth is assumed)
AP sends BSSID:SSID as Caller-Station-ID
auth_servers is required
PSK will come from cloud WLC if source is cloud_psks
default_psk will be used if cloud WLC is not available
multi_psk_only and psk is ignored
pairwise can only be wpa2-ccmp (for now, wpa3 support on the roadmap)

DynamicVlan WlanDynamicVlanArgs

For 802.1x

Enable AP-AP keycaching via multicast

If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcp_tracking will cut down DHCP response packets to be forwarded to wireless

Enabled bool

If this wlan is enabled

Hotspot20 WlanHotspot20Args

If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .

HideSsid bool

Whether to hide SSID in beacon

HostnameIe bool

Include hostname inside IE in AP beacons / probe responses

Hostspot 2.0 wlan settings

InjectDhcpOption82 WlanInjectDhcpOption82Args

Interface string

where this WLAN will be connected to. enum: all, eth0, eth1, eth2, eth3, mxtunnel, site_mxedge, wxtunnel

Isolation bool

Whether to stop clients to talk to each other

L2Isolation bool

If isolation is enabled, whether to deny clients to talk to L2 on the LAN

Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.

LimitBcast bool

Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)

Limit probe response base on some heuristic rules

Max idle time in seconds

MistNac WlanMistNacArgs

Maximum number of client connected to the SSID. 0 means unlimited

MspId string

MxtunnelIds []string

When interface=mxtunnel, id of the Mist Tunnel

MxtunnelNames []string

When interface=site_mxedge, name of the mxtunnel that in mxtunnels under Site Setting

NoStaticDns bool

Whether to only allow client to use DNS that we’ve learned from DHCP response

NoStaticIp bool

Whether to only allow client that we’ve learned from DHCP exchange to talk

OrgId string

Portal WlanPortalArgs

Portal wlan settings

PortalAllowedHostnames []string

List of hostnames without http(s):// (matched by substring)

PortalAllowedSubnets []string

List of CIDRs

PortalApiSecret string

APi secret (auto-generated) that can be used to sign guest authorization requests

PortalDeniedHostnames []string

List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames

PortalImage string

Url of portal background image

PortalSsoUrl string

Qos WlanQosArgs

Radsec WlanRadsecArgs

RadSec settings

Rateset map[string]WlanRatesetArgs

Property key is the RF band. enum: 24, 5, 6

Schedule WlanScheduleArgs

When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)

RoamMode string

enum: 11r, OKC, NONE

WLAN operating schedule, default is disabled

SiteId string

SleExcluded bool

Whether to exclude this WLAN from SLE metrics

Ssid string

Name of the SSID

UseEapolV1 bool

If auth.type==eap or auth.type==psk, should only be set for legacy client, such as pre-2004, 802.11b devices

VlanEnabled bool

If vlan tagging is enabled

VlanId string

VlanIds []string

if vlan_enabled==true and vlan_pooling==true. List of VLAN IDs (comma separated) to be used in the VLAN Pool

VlanPooling bool

Requires vlan_enabled==true to be set to true. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm

WlanLimitDown string

If downlink limiting for whole wlan is enabled

WlanLimitUp string

If uplink limiting for whole wlan is enabled

WxtagIds []string

List of wxtag_ids

WxtunnelId string

When interface=wxtunnel, id of the WXLAN Tunnel

WxtunnelRemoteId string

When interface=wxtunnel, remote tunnel identifier

acctServers List<WlanAcctServer>

Enable coa-immediate-update and address-change-immediate-update on the access profile.

acctInterimInterval Integer

List of RADIUS accounting servers, optional, order matters where the first one is treated as primary

Airwatch wlan settings

allowIpv6Ndp Boolean

Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through

allowMdns Boolean

Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through

allowSsdp Boolean

Only applicable when limit_bcast==true, which allows SSDP

apIds List<String>

List of device ids

Bandwidth limiting for apps (applies to up/down)

APp qos wlan settings

applyTo String

enum: aps, site, wxtags

arpFilter Boolean

Whether to enable smart arp filter

Authentication wlan settings

authServers List<WlanAuthServer>

When ordered, AP will prefer and go back to the first server if possible. enum: ordered, unordered

List of RADIUS authentication servers, at least one is needed if auth type==eap, order matters where the first one is treated as primary

authServersNasId String

Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers

authServersNasIp String

Optional, NAS-IP-ADDRESS to use

authServersRetries Integer

authServersTimeout Integer

bandSteer Boolean

Whether to enable band_steering, this works only when band==both

Force dual_band capable client to connect to 5G

bands List<String>

list of radios that the wlan should apply to. enum: 24, 5, 6

Whether to block the clients in the blacklist (up to first 256 macs)

Bonjour gateway wlan settings

Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

clientLimitDown String

If downlink limiting per-client is enabled

clientLimitUp String

coaServers List<WlanCoaServer>

If uplink limiting per-client is enabled

List of COA (change of authorization) servers, optional

disable11ax Boolean

Some old WLAN drivers may not be compatible

disable11be Boolean

To disable Wi-Fi 7 EHT IEs

disableHtVhtRates Boolean

To disable ht or vht rates

disableUapsd Boolean

Whether to disable U-APSD

Disable sending v2 roam notification messages

Disable sending v2 roam notification messages

When any of the following is true, this WLAN will be disabled

cannot get IP
cannot obtain default gateway
cannot reach default gateway

disableWmm Boolean

Whether to disable WMM

For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)

dtim Integer

For dynamic PSK where we get per_user PSK from Radius. dynamic_psk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)

PSK will come from RADIUS server
AP sends client MAC as username and password (i.e. enable_mac_auth is assumed)
AP sends BSSID:SSID as Caller-Station-ID
auth_servers is required
PSK will come from cloud WLC if source is cloud_psks
default_psk will be used if cloud WLC is not available
multi_psk_only and psk is ignored
pairwise can only be wpa2-ccmp (for now, wpa3 support on the roadmap)

For 802.1x

Enable AP-AP keycaching via multicast

If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcp_tracking will cut down DHCP response packets to be forwarded to wireless

enabled Boolean

If this wlan is enabled

fastDot1xTimers Boolean

If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .

hideSsid Boolean

Whether to hide SSID in beacon

hostnameIe Boolean

Include hostname inside IE in AP beacons / probe responses

Hostspot 2.0 wlan settings

interface_ String

where this WLAN will be connected to. enum: all, eth0, eth1, eth2, eth3, mxtunnel, site_mxedge, wxtunnel

isolation Boolean

Whether to stop clients to talk to each other

l2Isolation Boolean

If isolation is enabled, whether to deny clients to talk to L2 on the LAN

legacyOverds Boolean

Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.

limitBcast Boolean

Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)

limitProbeResponse Boolean

Limit probe response base on some heuristic rules

maxIdletime Integer

Max idle time in seconds

maxNumClients Integer

Maximum number of client connected to the SSID. 0 means unlimited

mspId String

mxtunnelIds List<String>

When interface=mxtunnel, id of the Mist Tunnel

mxtunnelNames List<String>

When interface=site_mxedge, name of the mxtunnel that in mxtunnels under Site Setting

noStaticDns Boolean

Whether to only allow client to use DNS that we’ve learned from DHCP response

noStaticIp Boolean

Whether to only allow client that we’ve learned from DHCP exchange to talk

orgId String

Portal wlan settings

portalAllowedHostnames List<String>

List of hostnames without http(s):// (matched by substring)

portalAllowedSubnets List<String>

List of CIDRs

portalApiSecret String

APi secret (auto-generated) that can be used to sign guest authorization requests

portalDeniedHostnames List<String>

List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames

portalImage String

Url of portal background image

portalSsoUrl String

RadSec settings

rateset Map<String,WlanRatesetArgs>

Property key is the RF band. enum: 24, 5, 6

When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)

roamMode String

enum: 11r, OKC, NONE

WLAN operating schedule, default is disabled

siteId String

sleExcluded Boolean

Whether to exclude this WLAN from SLE metrics

ssid String

Name of the SSID

useEapolV1 Boolean

If auth.type==eap or auth.type==psk, should only be set for legacy client, such as pre-2004, 802.11b devices

vlanEnabled Boolean

If vlan tagging is enabled

vlanId String

vlanIds List<String>

if vlan_enabled==true and vlan_pooling==true. List of VLAN IDs (comma separated) to be used in the VLAN Pool

vlanPooling Boolean

Requires vlan_enabled==true to be set to true. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm

wlanLimitDown String

acctServers WlanAcctServer[]

If downlink limiting for whole wlan is enabled

wlanLimitUp String

wlanLimitUpEnabled Boolean

If uplink limiting for whole wlan is enabled

wxtagIds List<String>

List of wxtag_ids

wxtunnelId String

When interface=wxtunnel, id of the WXLAN Tunnel

wxtunnelRemoteId String

When interface=wxtunnel, remote tunnel identifier

acctImmediateUpdate boolean

Enable coa-immediate-update and address-change-immediate-update on the access profile.

acctInterimInterval number

List of RADIUS accounting servers, optional, order matters where the first one is treated as primary

Airwatch wlan settings

allowIpv6Ndp boolean

Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through

allowMdns boolean

Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through

allowSsdp boolean

Only applicable when limit_bcast==true, which allows SSDP

apIds string[]

List of device ids

Bandwidth limiting for apps (applies to up/down)

APp qos wlan settings

applyTo string

enum: aps, site, wxtags

arpFilter boolean

Whether to enable smart arp filter

authServers WlanAuthServer[]

Authentication wlan settings

authServerSelection string

When ordered, AP will prefer and go back to the first server if possible. enum: ordered, unordered

List of RADIUS authentication servers, at least one is needed if auth type==eap, order matters where the first one is treated as primary

authServersNasId string

Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers

authServersNasIp string

Optional, NAS-IP-ADDRESS to use

authServersRetries number

authServersTimeout number

bandSteer boolean

Whether to enable band_steering, this works only when band==both

bandSteerForceBand5 boolean

Force dual_band capable client to connect to 5G

bands string[]

list of radios that the wlan should apply to. enum: 24, 5, 6

blockBlacklistClients boolean

Whether to block the clients in the blacklist (up to first 256 macs)

Bonjour gateway wlan settings

coaServers WlanCoaServer[]

Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

clientLimitDown string

clientLimitDownEnabled boolean

If downlink limiting per-client is enabled

clientLimitUp string

clientLimitUpEnabled boolean

If uplink limiting per-client is enabled

List of COA (change of authorization) servers, optional

disable11ax boolean

Some old WLAN drivers may not be compatible

disable11be boolean

To disable Wi-Fi 7 EHT IEs

disableHtVhtRates boolean

To disable ht or vht rates

disableUapsd boolean

Whether to disable U-APSD

disableV1RoamNotify boolean

Disable sending v2 roam notification messages

disableV2RoamNotify boolean

Disable sending v2 roam notification messages

disableWhenGatewayUnreachable boolean

When any of the following is true, this WLAN will be disabled

cannot get IP
cannot obtain default gateway
cannot reach default gateway

disableWhenMxtunnelDown boolean

disableWmm boolean

Whether to disable WMM

For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)

dtim number

For dynamic PSK where we get per_user PSK from Radius. dynamic_psk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)

PSK will come from RADIUS server
AP sends client MAC as username and password (i.e. enable_mac_auth is assumed)
AP sends BSSID:SSID as Caller-Station-ID
auth_servers is required
PSK will come from cloud WLC if source is cloud_psks
default_psk will be used if cloud WLC is not available
multi_psk_only and psk is ignored
pairwise can only be wpa2-ccmp (for now, wpa3 support on the roadmap)

For 802.1x

enableLocalKeycaching boolean

Enable AP-AP keycaching via multicast

enableWirelessBridging boolean

enableWirelessBridgingDhcpTracking boolean

If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcp_tracking will cut down DHCP response packets to be forwarded to wireless

enabled boolean

If this wlan is enabled

fastDot1xTimers boolean

If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .

hideSsid boolean

Whether to hide SSID in beacon

hostnameIe boolean

Include hostname inside IE in AP beacons / probe responses

Hostspot 2.0 wlan settings

interface string

where this WLAN will be connected to. enum: all, eth0, eth1, eth2, eth3, mxtunnel, site_mxedge, wxtunnel

isolation boolean

Whether to stop clients to talk to each other

l2Isolation boolean

If isolation is enabled, whether to deny clients to talk to L2 on the LAN

legacyOverds boolean

Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.

limitBcast boolean

Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)

limitProbeResponse boolean

Limit probe response base on some heuristic rules

maxIdletime number

Max idle time in seconds

maxNumClients number

Maximum number of client connected to the SSID. 0 means unlimited

mspId string

mxtunnelIds string[]

When interface=mxtunnel, id of the Mist Tunnel

mxtunnelNames string[]

When interface=site_mxedge, name of the mxtunnel that in mxtunnels under Site Setting

noStaticDns boolean

Whether to only allow client to use DNS that we’ve learned from DHCP response

noStaticIp boolean

Whether to only allow client that we’ve learned from DHCP exchange to talk

orgId string

Portal wlan settings

portalAllowedHostnames string[]

List of hostnames without http(s):// (matched by substring)

portalAllowedSubnets string[]

List of CIDRs

portalApiSecret string

APi secret (auto-generated) that can be used to sign guest authorization requests

portalDeniedHostnames string[]

List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames

portalImage string

Url of portal background image

portalSsoUrl string

RadSec settings

rateset {[key: string]: WlanRatesetArgs}

Property key is the RF band. enum: 24, 5, 6

reconnectClientsWhenRoamingMxcluster boolean

When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)

roamMode string

enum: 11r, OKC, NONE

acct_servers Sequence[WlanAcctServerArgs]

WLAN operating schedule, default is disabled

siteId string

sleExcluded boolean

Whether to exclude this WLAN from SLE metrics

ssid string

Name of the SSID

useEapolV1 boolean

If auth.type==eap or auth.type==psk, should only be set for legacy client, such as pre-2004, 802.11b devices

vlanEnabled boolean

If vlan tagging is enabled

vlanId string

vlanIds string[]

if vlan_enabled==true and vlan_pooling==true. List of VLAN IDs (comma separated) to be used in the VLAN Pool

vlanPooling boolean

Requires vlan_enabled==true to be set to true. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm

wlanLimitDown string

wlanLimitDownEnabled boolean

If downlink limiting for whole wlan is enabled

wlanLimitUp string

wlanLimitUpEnabled boolean

If uplink limiting for whole wlan is enabled

wxtagIds string[]

List of wxtag_ids

wxtunnelId string

When interface=wxtunnel, id of the WXLAN Tunnel

wxtunnelRemoteId string

When interface=wxtunnel, remote tunnel identifier

acct_immediate_update bool

Enable coa-immediate-update and address-change-immediate-update on the access profile.

acct_interim_interval int

List of RADIUS accounting servers, optional, order matters where the first one is treated as primary

airwatch WlanAirwatchArgs

Airwatch wlan settings

allow_ipv6_ndp bool

Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through

allow_mdns bool

Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through

allow_ssdp bool

Only applicable when limit_bcast==true, which allows SSDP

ap_ids Sequence[str]

List of device ids

app_limit WlanAppLimitArgs

Bandwidth limiting for apps (applies to up/down)

app_qos WlanAppQosArgs

APp qos wlan settings

apply_to str

enum: aps, site, wxtags

arp_filter bool

Whether to enable smart arp filter

auth WlanAuthArgs

Authentication wlan settings

auth_server_selection str

When ordered, AP will prefer and go back to the first server if possible. enum: ordered, unordered

auth_servers Sequence[WlanAuthServerArgs]

List of RADIUS authentication servers, at least one is needed if auth type==eap, order matters where the first one is treated as primary

auth_servers_nas_id str

Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers

auth_servers_nas_ip str

Optional, NAS-IP-ADDRESS to use

auth_servers_retries int

auth_servers_timeout int

band_steer bool

Whether to enable band_steering, this works only when band==both

band_steer_force_band5 bool

Force dual_band capable client to connect to 5G

bands Sequence[str]

list of radios that the wlan should apply to. enum: 24, 5, 6

block_blacklist_clients bool

Whether to block the clients in the blacklist (up to first 256 macs)

bonjour WlanBonjourArgs

Bonjour gateway wlan settings

cisco_cwa WlanCiscoCwaArgs

Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

client_limit_down str

client_limit_down_enabled bool

If downlink limiting per-client is enabled

client_limit_up str

client_limit_up_enabled bool

If uplink limiting per-client is enabled

coa_servers Sequence[WlanCoaServerArgs]

List of COA (change of authorization) servers, optional

disable11ax bool

Some old WLAN drivers may not be compatible

disable11be bool

To disable Wi-Fi 7 EHT IEs

disable_ht_vht_rates bool

To disable ht or vht rates

disable_uapsd bool

Whether to disable U-APSD

disable_v1_roam_notify bool

Disable sending v2 roam notification messages

disable_v2_roam_notify bool

Disable sending v2 roam notification messages

disable_when_gateway_unreachable bool

When any of the following is true, this WLAN will be disabled

cannot get IP
cannot obtain default gateway
cannot reach default gateway

disable_when_mxtunnel_down bool

disable_wmm bool

Whether to disable WMM

dns_server_rewrite WlanDnsServerRewriteArgs

For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)

dtim int

dynamic_psk WlanDynamicPskArgs

For dynamic PSK where we get per_user PSK from Radius. dynamic_psk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)

PSK will come from RADIUS server
AP sends client MAC as username and password (i.e. enable_mac_auth is assumed)
AP sends BSSID:SSID as Caller-Station-ID
auth_servers is required
PSK will come from cloud WLC if source is cloud_psks
default_psk will be used if cloud WLC is not available
multi_psk_only and psk is ignored
pairwise can only be wpa2-ccmp (for now, wpa3 support on the roadmap)

dynamic_vlan WlanDynamicVlanArgs

For 802.1x

enable_local_keycaching bool

Enable AP-AP keycaching via multicast

enable_wireless_bridging bool

enable_wireless_bridging_dhcp_tracking bool

If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcp_tracking will cut down DHCP response packets to be forwarded to wireless

enabled bool

If this wlan is enabled

fast_dot1x_timers bool

If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .

hide_ssid bool

Whether to hide SSID in beacon

hostname_ie bool

Include hostname inside IE in AP beacons / probe responses

hotspot20 WlanHotspot20Args

Hostspot 2.0 wlan settings

inject_dhcp_option82 WlanInjectDhcpOption82Args

interface str

where this WLAN will be connected to. enum: all, eth0, eth1, eth2, eth3, mxtunnel, site_mxedge, wxtunnel

isolation bool

Whether to stop clients to talk to each other

l2_isolation bool

If isolation is enabled, whether to deny clients to talk to L2 on the LAN

legacy_overds bool

Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.

limit_bcast bool

Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)

limit_probe_response bool

Limit probe response base on some heuristic rules

max_idletime int

Max idle time in seconds

max_num_clients int

Maximum number of client connected to the SSID. 0 means unlimited

mist_nac WlanMistNacArgs

msp_id str

mxtunnel_ids Sequence[str]

When interface=mxtunnel, id of the Mist Tunnel

mxtunnel_names Sequence[str]

When interface=site_mxedge, name of the mxtunnel that in mxtunnels under Site Setting

no_static_dns bool

Whether to only allow client to use DNS that we’ve learned from DHCP response

no_static_ip bool

Whether to only allow client that we’ve learned from DHCP exchange to talk

org_id str

portal WlanPortalArgs

Portal wlan settings

portal_allowed_hostnames Sequence[str]

List of hostnames without http(s):// (matched by substring)

portal_allowed_subnets Sequence[str]

List of CIDRs

portal_api_secret str

APi secret (auto-generated) that can be used to sign guest authorization requests

portal_denied_hostnames Sequence[str]

List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames

portal_image str

Url of portal background image

portal_sso_url str

qos WlanQosArgs

radsec WlanRadsecArgs

RadSec settings

rateset Mapping[str, WlanRatesetArgs]

Property key is the RF band. enum: 24, 5, 6

reconnect_clients_when_roaming_mxcluster bool

When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)

roam_mode str

enum: 11r, OKC, NONE

schedule WlanScheduleArgs

WLAN operating schedule, default is disabled

site_id str

sle_excluded bool

Whether to exclude this WLAN from SLE metrics

ssid str

Name of the SSID

use_eapol_v1 bool

If auth.type==eap or auth.type==psk, should only be set for legacy client, such as pre-2004, 802.11b devices

vlan_enabled bool

If vlan tagging is enabled

vlan_id str

vlan_ids Sequence[str]

if vlan_enabled==true and vlan_pooling==true. List of VLAN IDs (comma separated) to be used in the VLAN Pool

vlan_pooling bool

Requires vlan_enabled==true to be set to true. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm

wlan_limit_down str

wlan_limit_down_enabled bool

If downlink limiting for whole wlan is enabled

wlan_limit_up str

wlan_limit_up_enabled bool

If uplink limiting for whole wlan is enabled

wxtag_ids Sequence[str]

List of wxtag_ids

wxtunnel_id str

When interface=wxtunnel, id of the WXLAN Tunnel

wxtunnel_remote_id str

When interface=wxtunnel, remote tunnel identifier

acctServers List<Property Map>

Enable coa-immediate-update and address-change-immediate-update on the access profile.

acctInterimInterval Number

List of RADIUS accounting servers, optional, order matters where the first one is treated as primary

airwatch Property Map

Airwatch wlan settings

allowIpv6Ndp Boolean

Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through

allowMdns Boolean

Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through

allowSsdp Boolean

Only applicable when limit_bcast==true, which allows SSDP

apIds List<String>

List of device ids

appLimit Property Map

Bandwidth limiting for apps (applies to up/down)

appQos Property Map

APp qos wlan settings

applyTo String

enum: aps, site, wxtags

arpFilter Boolean

Whether to enable smart arp filter

auth Property Map

Authentication wlan settings

authServers List<Property Map>

When ordered, AP will prefer and go back to the first server if possible. enum: ordered, unordered

List of RADIUS authentication servers, at least one is needed if auth type==eap, order matters where the first one is treated as primary

authServersNasId String

Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers

authServersNasIp String

Optional, NAS-IP-ADDRESS to use

authServersRetries Number

authServersTimeout Number

bandSteer Boolean

Whether to enable band_steering, this works only when band==both

Force dual_band capable client to connect to 5G

bands List<String>

list of radios that the wlan should apply to. enum: 24, 5, 6

ciscoCwa Property Map

Whether to block the clients in the blacklist (up to first 256 macs)

bonjour Property Map

Bonjour gateway wlan settings

Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

clientLimitDown String

If downlink limiting per-client is enabled

clientLimitUp String

coaServers List<Property Map>

If uplink limiting per-client is enabled

List of COA (change of authorization) servers, optional

disable11ax Boolean

Some old WLAN drivers may not be compatible

disable11be Boolean

To disable Wi-Fi 7 EHT IEs

disableHtVhtRates Boolean

To disable ht or vht rates

disableUapsd Boolean

Whether to disable U-APSD

Disable sending v2 roam notification messages

Disable sending v2 roam notification messages

When any of the following is true, this WLAN will be disabled

cannot get IP
cannot obtain default gateway
cannot reach default gateway

dnsServerRewrite Property Map

disableWmm Boolean

Whether to disable WMM

For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)

dtim Number

dynamicPsk Property Map

For dynamic PSK where we get per_user PSK from Radius. dynamic_psk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)

PSK will come from RADIUS server
AP sends client MAC as username and password (i.e. enable_mac_auth is assumed)
AP sends BSSID:SSID as Caller-Station-ID
auth_servers is required
PSK will come from cloud WLC if source is cloud_psks
default_psk will be used if cloud WLC is not available
multi_psk_only and psk is ignored
pairwise can only be wpa2-ccmp (for now, wpa3 support on the roadmap)

dynamicVlan Property Map

For 802.1x

Enable AP-AP keycaching via multicast

hotspot20 Property Map

If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcp_tracking will cut down DHCP response packets to be forwarded to wireless

enabled Boolean

If this wlan is enabled

fastDot1xTimers Boolean

If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .

hideSsid Boolean

Whether to hide SSID in beacon

hostnameIe Boolean

Include hostname inside IE in AP beacons / probe responses

Hostspot 2.0 wlan settings

injectDhcpOption82 Property Map

interface String

where this WLAN will be connected to. enum: all, eth0, eth1, eth2, eth3, mxtunnel, site_mxedge, wxtunnel

isolation Boolean

Whether to stop clients to talk to each other

l2Isolation Boolean

If isolation is enabled, whether to deny clients to talk to L2 on the LAN

legacyOverds Boolean

Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.

limitBcast Boolean

Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)

limitProbeResponse Boolean

Limit probe response base on some heuristic rules

maxIdletime Number

Max idle time in seconds

maxNumClients Number

Maximum number of client connected to the SSID. 0 means unlimited

mistNac Property Map

mspId String

mxtunnelIds List<String>

When interface=mxtunnel, id of the Mist Tunnel

mxtunnelNames List<String>

When interface=site_mxedge, name of the mxtunnel that in mxtunnels under Site Setting

noStaticDns Boolean

Whether to only allow client to use DNS that we’ve learned from DHCP response

noStaticIp Boolean

Whether to only allow client that we’ve learned from DHCP exchange to talk

orgId String

portal Property Map

Portal wlan settings

portalAllowedHostnames List<String>

List of hostnames without http(s):// (matched by substring)

portalAllowedSubnets List<String>

List of CIDRs

portalApiSecret String

APi secret (auto-generated) that can be used to sign guest authorization requests

portalDeniedHostnames List<String>

List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames

portalImage String

Url of portal background image

portalSsoUrl String

qos Property Map

radsec Property Map

RadSec settings

rateset Map<Property Map>

Property key is the RF band. enum: 24, 5, 6

schedule Property Map

When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)

roamMode String

enum: 11r, OKC, NONE

WLAN operating schedule, default is disabled

siteId String

sleExcluded Boolean

Whether to exclude this WLAN from SLE metrics

ssid String

Name of the SSID

useEapolV1 Boolean

If auth.type==eap or auth.type==psk, should only be set for legacy client, such as pre-2004, 802.11b devices

vlanEnabled Boolean

If vlan tagging is enabled

vlanId String

vlanIds List<String>

if vlan_enabled==true and vlan_pooling==true. List of VLAN IDs (comma separated) to be used in the VLAN Pool

vlanPooling Boolean

Requires vlan_enabled==true to be set to true. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm

wlanLimitDown String

If downlink limiting for whole wlan is enabled

wlanLimitUp String

wlanLimitUpEnabled Boolean

If uplink limiting for whole wlan is enabled

wxtagIds List<String>

List of wxtag_ids

wxtunnelId String

When interface=wxtunnel, id of the WXLAN Tunnel

wxtunnelRemoteId String

When interface=wxtunnel, remote tunnel identifier

Supporting Types

WlanAcctServer, WlanAcctServerArgs

Host string: IP/ hostname of RADIUS server
Secret string: Secret of RADIUS server
KeywrapEnabled bool
KeywrapFormat string: enum: ascii, hex
KeywrapKek string
KeywrapMack string
Port string

Host string: IP/ hostname of RADIUS server
Secret string: Secret of RADIUS server
KeywrapEnabled bool
KeywrapFormat string: enum: ascii, hex
KeywrapKek string
KeywrapMack string
Port string

host String: IP/ hostname of RADIUS server
secret String: Secret of RADIUS server
keywrapEnabled Boolean
keywrapFormat String: enum: ascii, hex
keywrapKek String
keywrapMack String
port String

host string: IP/ hostname of RADIUS server
secret string: Secret of RADIUS server
keywrapEnabled boolean
keywrapFormat string: enum: ascii, hex
keywrapKek string
keywrapMack string
port string

host str: IP/ hostname of RADIUS server
secret str: Secret of RADIUS server
keywrap_enabled bool
keywrap_format str: enum: ascii, hex
keywrap_kek str
keywrap_mack str
port str

host String: IP/ hostname of RADIUS server
secret String: Secret of RADIUS server
keywrapEnabled Boolean
keywrapFormat String: enum: ascii, hex
keywrapKek String
keywrapMack String
port String

WlanAirwatch, WlanAirwatchArgs

ApiKey string: API Key
ConsoleUrl string: Console URL
Enabled bool
Password string: Password
Username string: Username

ApiKey string: API Key
ConsoleUrl string: Console URL
Enabled bool
Password string: Password
Username string: Username

apiKey String: API Key
consoleUrl String: Console URL
enabled Boolean
password String: Password
username String: Username

apiKey string: API Key
consoleUrl string: Console URL
enabled boolean
password string: Password
username string: Username

api_key str: API Key
console_url str: Console URL
enabled bool
password str: Password
username str: Username

apiKey String: API Key
consoleUrl String: Console URL
enabled Boolean
password String: Password
username String: Username

WlanAppLimit, WlanAppLimitArgs

Apps Dictionary<string, int>: Map from app key to bandwidth in kbps. Property key is the app key, defined in Get Application List
Enabled bool
WxtagIds Dictionary<string, int>: Map from wxtag_id of Hostname Wxlan Tags to bandwidth in kbps. Property key is the wxtag_id

Apps map[string]int: Map from app key to bandwidth in kbps. Property key is the app key, defined in Get Application List
Enabled bool
WxtagIds map[string]int: Map from wxtag_id of Hostname Wxlan Tags to bandwidth in kbps. Property key is the wxtag_id

apps Map<String,Integer>: Map from app key to bandwidth in kbps. Property key is the app key, defined in Get Application List
enabled Boolean
wxtagIds Map<String,Integer>: Map from wxtag_id of Hostname Wxlan Tags to bandwidth in kbps. Property key is the wxtag_id

apps {[key: string]: number}: Map from app key to bandwidth in kbps. Property key is the app key, defined in Get Application List
enabled boolean
wxtagIds {[key: string]: number}: Map from wxtag_id of Hostname Wxlan Tags to bandwidth in kbps. Property key is the wxtag_id

apps Mapping[str, int]: Map from app key to bandwidth in kbps. Property key is the app key, defined in Get Application List
enabled bool
wxtag_ids Mapping[str, int]: Map from wxtag_id of Hostname Wxlan Tags to bandwidth in kbps. Property key is the wxtag_id

apps Map<Number>: Map from app key to bandwidth in kbps. Property key is the app key, defined in Get Application List
enabled Boolean
wxtagIds Map<Number>: Map from wxtag_id of Hostname Wxlan Tags to bandwidth in kbps. Property key is the wxtag_id

WlanAppQos, WlanAppQosArgs

Apps Dictionary<string, Pulumi.JuniperMist.Site.Inputs.WlanAppQosApps>
Enabled bool
Others List<Pulumi.JuniperMist.Site.Inputs.WlanAppQosOther>

Apps map[string]WlanAppQosApps
Enabled bool
Others []WlanAppQosOther

apps Map<String,WlanAppQosApps>
enabled Boolean
others List<WlanAppQosOther>

apps {[key: string]: WlanAppQosApps}
enabled boolean
others WlanAppQosOther[]

apps Mapping[str, WlanAppQosApps]
enabled bool
others Sequence[WlanAppQosOther]

apps Map<Property Map>
enabled Boolean
others List<Property Map>

WlanAppQosApps, WlanAppQosAppsArgs

Dscp string: DSCP value range between 0 and 63
DstSubnet string: Subnet filter is not required but helps AP to only inspect certain traffic (thus reducing AP load)
SrcSubnet string: Subnet filter is not required but helps AP to only inspect certain traffic (thus reducing AP load)

Dscp string: DSCP value range between 0 and 63
DstSubnet string: Subnet filter is not required but helps AP to only inspect certain traffic (thus reducing AP load)
SrcSubnet string: Subnet filter is not required but helps AP to only inspect certain traffic (thus reducing AP load)

dscp String: DSCP value range between 0 and 63
dstSubnet String: Subnet filter is not required but helps AP to only inspect certain traffic (thus reducing AP load)
srcSubnet String: Subnet filter is not required but helps AP to only inspect certain traffic (thus reducing AP load)

dscp string: DSCP value range between 0 and 63
dstSubnet string: Subnet filter is not required but helps AP to only inspect certain traffic (thus reducing AP load)
srcSubnet string: Subnet filter is not required but helps AP to only inspect certain traffic (thus reducing AP load)

dscp str: DSCP value range between 0 and 63
dst_subnet str: Subnet filter is not required but helps AP to only inspect certain traffic (thus reducing AP load)
src_subnet str: Subnet filter is not required but helps AP to only inspect certain traffic (thus reducing AP load)

dscp String: DSCP value range between 0 and 63
dstSubnet String: Subnet filter is not required but helps AP to only inspect certain traffic (thus reducing AP load)
srcSubnet String: Subnet filter is not required but helps AP to only inspect certain traffic (thus reducing AP load)

WlanAppQosOther, WlanAppQosOtherArgs

Dscp string
DstSubnet string
PortRanges string
Protocol string
SrcSubnet string

Dscp string
DstSubnet string
PortRanges string
Protocol string
SrcSubnet string

dscp String
dstSubnet String
portRanges String
protocol String
srcSubnet String

dscp string
dstSubnet string
portRanges string
protocol string
srcSubnet string

dscp str
dst_subnet str
port_ranges str
protocol str
src_subnet str

dscp String
dstSubnet String
portRanges String
protocol String
srcSubnet String

WlanAuth, WlanAuthArgs

AnticlogThreshold int: SAE anti-clogging token threshold
EapReauth bool: Whether to trigger EAP reauth when the session ends
EnableMacAuth bool: Whether to enable MAC Auth, uses the same auth_servers
KeyIdx int: When type==wep
Keys List<string>: When type=wep, four 10-character or 26-character hex string, null can be used. All keys, if provided, have to be in the same length
MultiPskOnly bool: When type==psk, whether to only use multi_psk
Owe string: if type==open. enum: disabled, enabled (means transition mode), required
Pairwises List<string>: When type=psk or type=eap, one or more of wpa1-ccmp, wpa1-tkip, wpa2-ccmp, wpa2-tkip, wpa3
PrivateWlan bool: When multi_psk_only==true, whether private wlan is enabled
Psk string: When type==psk, 8-64 characters, or 64 hex characters
Type string: enum: eap, eap192, open, psk, psk-tkip, psk-wpa2-tkip, wep
WepAsSecondaryAuth bool: Enable WEP as secondary auth

AnticlogThreshold int: SAE anti-clogging token threshold
EapReauth bool: Whether to trigger EAP reauth when the session ends
EnableMacAuth bool: Whether to enable MAC Auth, uses the same auth_servers
KeyIdx int: When type==wep
Keys []string: When type=wep, four 10-character or 26-character hex string, null can be used. All keys, if provided, have to be in the same length
MultiPskOnly bool: When type==psk, whether to only use multi_psk
Owe string: if type==open. enum: disabled, enabled (means transition mode), required
Pairwises []string: When type=psk or type=eap, one or more of wpa1-ccmp, wpa1-tkip, wpa2-ccmp, wpa2-tkip, wpa3
PrivateWlan bool: When multi_psk_only==true, whether private wlan is enabled
Psk string: When type==psk, 8-64 characters, or 64 hex characters
Type string: enum: eap, eap192, open, psk, psk-tkip, psk-wpa2-tkip, wep
WepAsSecondaryAuth bool: Enable WEP as secondary auth

anticlogThreshold Integer: SAE anti-clogging token threshold
eapReauth Boolean: Whether to trigger EAP reauth when the session ends
enableMacAuth Boolean: Whether to enable MAC Auth, uses the same auth_servers
keyIdx Integer: When type==wep
keys List<String>: When type=wep, four 10-character or 26-character hex string, null can be used. All keys, if provided, have to be in the same length
multiPskOnly Boolean: When type==psk, whether to only use multi_psk
owe String: if type==open. enum: disabled, enabled (means transition mode), required
pairwises List<String>: When type=psk or type=eap, one or more of wpa1-ccmp, wpa1-tkip, wpa2-ccmp, wpa2-tkip, wpa3
privateWlan Boolean: When multi_psk_only==true, whether private wlan is enabled
psk String: When type==psk, 8-64 characters, or 64 hex characters
type String: enum: eap, eap192, open, psk, psk-tkip, psk-wpa2-tkip, wep
wepAsSecondaryAuth Boolean: Enable WEP as secondary auth

anticlogThreshold number: SAE anti-clogging token threshold
eapReauth boolean: Whether to trigger EAP reauth when the session ends
enableMacAuth boolean: Whether to enable MAC Auth, uses the same auth_servers
keyIdx number: When type==wep
keys string[]: When type=wep, four 10-character or 26-character hex string, null can be used. All keys, if provided, have to be in the same length
multiPskOnly boolean: When type==psk, whether to only use multi_psk
owe string: if type==open. enum: disabled, enabled (means transition mode), required
pairwises string[]: When type=psk or type=eap, one or more of wpa1-ccmp, wpa1-tkip, wpa2-ccmp, wpa2-tkip, wpa3
privateWlan boolean: When multi_psk_only==true, whether private wlan is enabled
psk string: When type==psk, 8-64 characters, or 64 hex characters
type string: enum: eap, eap192, open, psk, psk-tkip, psk-wpa2-tkip, wep
wepAsSecondaryAuth boolean: Enable WEP as secondary auth

anticlog_threshold int: SAE anti-clogging token threshold
eap_reauth bool: Whether to trigger EAP reauth when the session ends
enable_mac_auth bool: Whether to enable MAC Auth, uses the same auth_servers
key_idx int: When type==wep
keys Sequence[str]: When type=wep, four 10-character or 26-character hex string, null can be used. All keys, if provided, have to be in the same length
multi_psk_only bool: When type==psk, whether to only use multi_psk
owe str: if type==open. enum: disabled, enabled (means transition mode), required
pairwises Sequence[str]: When type=psk or type=eap, one or more of wpa1-ccmp, wpa1-tkip, wpa2-ccmp, wpa2-tkip, wpa3
private_wlan bool: When multi_psk_only==true, whether private wlan is enabled
psk str: When type==psk, 8-64 characters, or 64 hex characters
type str: enum: eap, eap192, open, psk, psk-tkip, psk-wpa2-tkip, wep
wep_as_secondary_auth bool: Enable WEP as secondary auth

anticlogThreshold Number: SAE anti-clogging token threshold
eapReauth Boolean: Whether to trigger EAP reauth when the session ends
enableMacAuth Boolean: Whether to enable MAC Auth, uses the same auth_servers
keyIdx Number: When type==wep
keys List<String>: When type=wep, four 10-character or 26-character hex string, null can be used. All keys, if provided, have to be in the same length
multiPskOnly Boolean: When type==psk, whether to only use multi_psk
owe String: if type==open. enum: disabled, enabled (means transition mode), required
pairwises List<String>: When type=psk or type=eap, one or more of wpa1-ccmp, wpa1-tkip, wpa2-ccmp, wpa2-tkip, wpa3
privateWlan Boolean: When multi_psk_only==true, whether private wlan is enabled
psk String: When type==psk, 8-64 characters, or 64 hex characters
type String: enum: eap, eap192, open, psk, psk-tkip, psk-wpa2-tkip, wep
wepAsSecondaryAuth Boolean: Enable WEP as secondary auth

WlanAuthServer, WlanAuthServerArgs

Host string: IP/ hostname of RADIUS server
Secret string: Secret of RADIUS server
KeywrapEnabled bool
KeywrapFormat string: enum: ascii, hex
KeywrapKek string
KeywrapMack string
Port string
RequireMessageAuthenticator bool: Whether to require Message-Authenticator in requests

Host string: IP/ hostname of RADIUS server
Secret string: Secret of RADIUS server
KeywrapEnabled bool
KeywrapFormat string: enum: ascii, hex
KeywrapKek string
KeywrapMack string
Port string
RequireMessageAuthenticator bool: Whether to require Message-Authenticator in requests

host String: IP/ hostname of RADIUS server
secret String: Secret of RADIUS server
keywrapEnabled Boolean
keywrapFormat String: enum: ascii, hex
keywrapKek String
keywrapMack String
port String
requireMessageAuthenticator Boolean: Whether to require Message-Authenticator in requests

host string: IP/ hostname of RADIUS server
secret string: Secret of RADIUS server
keywrapEnabled boolean
keywrapFormat string: enum: ascii, hex
keywrapKek string
keywrapMack string
port string
requireMessageAuthenticator boolean: Whether to require Message-Authenticator in requests

host str: IP/ hostname of RADIUS server
secret str: Secret of RADIUS server
keywrap_enabled bool
keywrap_format str: enum: ascii, hex
keywrap_kek str
keywrap_mack str
port str
require_message_authenticator bool: Whether to require Message-Authenticator in requests

host String: IP/ hostname of RADIUS server
secret String: Secret of RADIUS server
keywrapEnabled Boolean
keywrapFormat String: enum: ascii, hex
keywrapKek String
keywrapMack String
port String
requireMessageAuthenticator Boolean: Whether to require Message-Authenticator in requests

WlanBonjour, WlanBonjourArgs

AdditionalVlanIds List<string>: additional VLAN IDs (on the LAN side or from other WLANs) should we be forwarding bonjour queries/responses
Enabled bool: Whether to enable bonjour for this WLAN. Once enabled, limit_bcast is assumed true, allow_mdns is assumed false
Services Dictionary<string, Pulumi.JuniperMist.Site.Inputs.WlanBonjourServices>: What services are allowed. Property key is the service name

AdditionalVlanIds []string: additional VLAN IDs (on the LAN side or from other WLANs) should we be forwarding bonjour queries/responses
Enabled bool: Whether to enable bonjour for this WLAN. Once enabled, limit_bcast is assumed true, allow_mdns is assumed false
Services map[string]WlanBonjourServices: What services are allowed. Property key is the service name

additionalVlanIds List<String>: additional VLAN IDs (on the LAN side or from other WLANs) should we be forwarding bonjour queries/responses
enabled Boolean: Whether to enable bonjour for this WLAN. Once enabled, limit_bcast is assumed true, allow_mdns is assumed false
services Map<String,WlanBonjourServices>: What services are allowed. Property key is the service name

additionalVlanIds string[]: additional VLAN IDs (on the LAN side or from other WLANs) should we be forwarding bonjour queries/responses
enabled boolean: Whether to enable bonjour for this WLAN. Once enabled, limit_bcast is assumed true, allow_mdns is assumed false
services {[key: string]: WlanBonjourServices}: What services are allowed. Property key is the service name

additional_vlan_ids Sequence[str]: additional VLAN IDs (on the LAN side or from other WLANs) should we be forwarding bonjour queries/responses
enabled bool: Whether to enable bonjour for this WLAN. Once enabled, limit_bcast is assumed true, allow_mdns is assumed false
services Mapping[str, WlanBonjourServices]: What services are allowed. Property key is the service name

additionalVlanIds List<String>: additional VLAN IDs (on the LAN side or from other WLANs) should we be forwarding bonjour queries/responses
enabled Boolean: Whether to enable bonjour for this WLAN. Once enabled, limit_bcast is assumed true, allow_mdns is assumed false
services Map<Property Map>: What services are allowed. Property key is the service name

WlanBonjourServices, WlanBonjourServicesArgs

DisableLocal bool: Whether to prevent wireless clients to discover bonjour devices on the same WLAN
RadiusGroups List<string>: Optional, if the service is further restricted for certain RADIUS groups
Scope string: how bonjour services should be discovered for the same WLAN. enum: same_ap, same_map, same_site

DisableLocal bool: Whether to prevent wireless clients to discover bonjour devices on the same WLAN
RadiusGroups []string: Optional, if the service is further restricted for certain RADIUS groups
Scope string: how bonjour services should be discovered for the same WLAN. enum: same_ap, same_map, same_site

disableLocal Boolean: Whether to prevent wireless clients to discover bonjour devices on the same WLAN
radiusGroups List<String>: Optional, if the service is further restricted for certain RADIUS groups
scope String: how bonjour services should be discovered for the same WLAN. enum: same_ap, same_map, same_site

disableLocal boolean: Whether to prevent wireless clients to discover bonjour devices on the same WLAN
radiusGroups string[]: Optional, if the service is further restricted for certain RADIUS groups
scope string: how bonjour services should be discovered for the same WLAN. enum: same_ap, same_map, same_site

disable_local bool: Whether to prevent wireless clients to discover bonjour devices on the same WLAN
radius_groups Sequence[str]: Optional, if the service is further restricted for certain RADIUS groups
scope str: how bonjour services should be discovered for the same WLAN. enum: same_ap, same_map, same_site

disableLocal Boolean: Whether to prevent wireless clients to discover bonjour devices on the same WLAN
radiusGroups List<String>: Optional, if the service is further restricted for certain RADIUS groups
scope String: how bonjour services should be discovered for the same WLAN. enum: same_ap, same_map, same_site

WlanCiscoCwa, WlanCiscoCwaArgs

AllowedHostnames List<string>: List of hostnames without http(s):// (matched by substring)
AllowedSubnets List<string>: List of CIDRs
BlockedSubnets List<string>: List of blocked CIDRs
Enabled bool

AllowedHostnames []string: List of hostnames without http(s):// (matched by substring)
AllowedSubnets []string: List of CIDRs
BlockedSubnets []string: List of blocked CIDRs
Enabled bool

allowedHostnames List<String>: List of hostnames without http(s):// (matched by substring)
allowedSubnets List<String>: List of CIDRs
blockedSubnets List<String>: List of blocked CIDRs
enabled Boolean

allowedHostnames string[]: List of hostnames without http(s):// (matched by substring)
allowedSubnets string[]: List of CIDRs
blockedSubnets string[]: List of blocked CIDRs
enabled boolean

allowed_hostnames Sequence[str]: List of hostnames without http(s):// (matched by substring)
allowed_subnets Sequence[str]: List of CIDRs
blocked_subnets Sequence[str]: List of blocked CIDRs
enabled bool

allowedHostnames List<String>: List of hostnames without http(s):// (matched by substring)
allowedSubnets List<String>: List of CIDRs
blockedSubnets List<String>: List of blocked CIDRs
enabled Boolean

WlanCoaServer, WlanCoaServerArgs

Ip string
Secret string
DisableEventTimestampCheck bool: Whether to disable Event-Timestamp Check
Enabled bool
Port string

Ip string
Secret string
DisableEventTimestampCheck bool: Whether to disable Event-Timestamp Check
Enabled bool
Port string

ip String
secret String
disableEventTimestampCheck Boolean: Whether to disable Event-Timestamp Check
enabled Boolean
port String

ip string
secret string
disableEventTimestampCheck boolean: Whether to disable Event-Timestamp Check
enabled boolean
port string

ip str
secret str
disable_event_timestamp_check bool: Whether to disable Event-Timestamp Check
enabled bool
port str

ip String
secret String
disableEventTimestampCheck Boolean: Whether to disable Event-Timestamp Check
enabled Boolean
port String

WlanDnsServerRewrite, WlanDnsServerRewriteArgs

Enabled bool
RadiusGroups Dictionary<string, string>: Map between radius_group and the desired DNS server (IPv4 only). Property key is the RADIUS group, property value is the desired DNS Server

Enabled bool
RadiusGroups map[string]string: Map between radius_group and the desired DNS server (IPv4 only). Property key is the RADIUS group, property value is the desired DNS Server

enabled Boolean
radiusGroups Map<String,String>: Map between radius_group and the desired DNS server (IPv4 only). Property key is the RADIUS group, property value is the desired DNS Server

enabled boolean
radiusGroups {[key: string]: string}: Map between radius_group and the desired DNS server (IPv4 only). Property key is the RADIUS group, property value is the desired DNS Server

enabled bool
radius_groups Mapping[str, str]: Map between radius_group and the desired DNS server (IPv4 only). Property key is the RADIUS group, property value is the desired DNS Server

enabled Boolean
radiusGroups Map<String>: Map between radius_group and the desired DNS server (IPv4 only). Property key is the RADIUS group, property value is the desired DNS Server

WlanDynamicPsk, WlanDynamicPskArgs

DefaultPsk string: Default PSK to use if cloud WLC is not available, 8-63 characters
DefaultVlanId string
Enabled bool
ForceLookup bool: When 11r is enabled, we'll try to use the cached PMK, this can be disabled. false means auto
Source string: enum: cloud_psks, radius

DefaultPsk string: Default PSK to use if cloud WLC is not available, 8-63 characters
DefaultVlanId string
Enabled bool
ForceLookup bool: When 11r is enabled, we'll try to use the cached PMK, this can be disabled. false means auto
Source string: enum: cloud_psks, radius

defaultPsk String: Default PSK to use if cloud WLC is not available, 8-63 characters
defaultVlanId String
enabled Boolean
forceLookup Boolean: When 11r is enabled, we'll try to use the cached PMK, this can be disabled. false means auto
source String: enum: cloud_psks, radius

defaultPsk string: Default PSK to use if cloud WLC is not available, 8-63 characters
defaultVlanId string
enabled boolean
forceLookup boolean: When 11r is enabled, we'll try to use the cached PMK, this can be disabled. false means auto
source string: enum: cloud_psks, radius

default_psk str: Default PSK to use if cloud WLC is not available, 8-63 characters
default_vlan_id str
enabled bool
force_lookup bool: When 11r is enabled, we'll try to use the cached PMK, this can be disabled. false means auto
source str: enum: cloud_psks, radius

defaultPsk String: Default PSK to use if cloud WLC is not available, 8-63 characters
defaultVlanId String
enabled Boolean
forceLookup Boolean: When 11r is enabled, we'll try to use the cached PMK, this can be disabled. false means auto
source String: enum: cloud_psks, radius

WlanDynamicVlan, WlanDynamicVlanArgs

DefaultVlanIds List<string>

Default VLAN ID(s) can be a number, a range of VLAN IDs, a variable or multiple numbers, ranges or variables as a VLAN pool. Default VLAN as a pool of VLANS requires 0.14.x or newer firmware

Enabled bool

Requires vlan_enabled==true to be set to true. Whether to enable dynamic vlan

LocalVlanIds List<string>

VLAN_ids to be locally bridged

Type string

standard (using Tunnel-Private-Group-ID, widely supported), airespace-interface-name (Airespace/Cisco). enum: airespace-interface-name, standard

Vlans Dictionary<string, string>

Map between vlan_id (as string) to airespace interface names (comma-separated) or null for standard mapping

if dynamic_vlan.type==standard, property key is the Vlan ID and property value is ""
if dynamic_vlan.type==airespace-interface-name, property key is the Vlan ID and property value is the Airespace Interface Name

DefaultVlanIds []string

Default VLAN ID(s) can be a number, a range of VLAN IDs, a variable or multiple numbers, ranges or variables as a VLAN pool. Default VLAN as a pool of VLANS requires 0.14.x or newer firmware

Enabled bool

Requires vlan_enabled==true to be set to true. Whether to enable dynamic vlan

LocalVlanIds []string

VLAN_ids to be locally bridged

Type string

standard (using Tunnel-Private-Group-ID, widely supported), airespace-interface-name (Airespace/Cisco). enum: airespace-interface-name, standard

Vlans map[string]string

Map between vlan_id (as string) to airespace interface names (comma-separated) or null for standard mapping

if dynamic_vlan.type==standard, property key is the Vlan ID and property value is ""
if dynamic_vlan.type==airespace-interface-name, property key is the Vlan ID and property value is the Airespace Interface Name

defaultVlanIds List<String>

Default VLAN ID(s) can be a number, a range of VLAN IDs, a variable or multiple numbers, ranges or variables as a VLAN pool. Default VLAN as a pool of VLANS requires 0.14.x or newer firmware

enabled Boolean

Requires vlan_enabled==true to be set to true. Whether to enable dynamic vlan

localVlanIds List<String>

VLAN_ids to be locally bridged

type String

standard (using Tunnel-Private-Group-ID, widely supported), airespace-interface-name (Airespace/Cisco). enum: airespace-interface-name, standard

vlans Map<String,String>

Map between vlan_id (as string) to airespace interface names (comma-separated) or null for standard mapping

if dynamic_vlan.type==standard, property key is the Vlan ID and property value is ""
if dynamic_vlan.type==airespace-interface-name, property key is the Vlan ID and property value is the Airespace Interface Name

defaultVlanIds string[]

Default VLAN ID(s) can be a number, a range of VLAN IDs, a variable or multiple numbers, ranges or variables as a VLAN pool. Default VLAN as a pool of VLANS requires 0.14.x or newer firmware

enabled boolean

Requires vlan_enabled==true to be set to true. Whether to enable dynamic vlan

localVlanIds string[]

VLAN_ids to be locally bridged

type string

standard (using Tunnel-Private-Group-ID, widely supported), airespace-interface-name (Airespace/Cisco). enum: airespace-interface-name, standard

vlans {[key: string]: string}

Map between vlan_id (as string) to airespace interface names (comma-separated) or null for standard mapping

if dynamic_vlan.type==standard, property key is the Vlan ID and property value is ""
if dynamic_vlan.type==airespace-interface-name, property key is the Vlan ID and property value is the Airespace Interface Name

default_vlan_ids Sequence[str]

Default VLAN ID(s) can be a number, a range of VLAN IDs, a variable or multiple numbers, ranges or variables as a VLAN pool. Default VLAN as a pool of VLANS requires 0.14.x or newer firmware

enabled bool

Requires vlan_enabled==true to be set to true. Whether to enable dynamic vlan

local_vlan_ids Sequence[str]

VLAN_ids to be locally bridged

type str

standard (using Tunnel-Private-Group-ID, widely supported), airespace-interface-name (Airespace/Cisco). enum: airespace-interface-name, standard

vlans Mapping[str, str]

Map between vlan_id (as string) to airespace interface names (comma-separated) or null for standard mapping

if dynamic_vlan.type==standard, property key is the Vlan ID and property value is ""
if dynamic_vlan.type==airespace-interface-name, property key is the Vlan ID and property value is the Airespace Interface Name

defaultVlanIds List<String>

Default VLAN ID(s) can be a number, a range of VLAN IDs, a variable or multiple numbers, ranges or variables as a VLAN pool. Default VLAN as a pool of VLANS requires 0.14.x or newer firmware

enabled Boolean

Requires vlan_enabled==true to be set to true. Whether to enable dynamic vlan

localVlanIds List<String>

VLAN_ids to be locally bridged

type String

standard (using Tunnel-Private-Group-ID, widely supported), airespace-interface-name (Airespace/Cisco). enum: airespace-interface-name, standard

vlans Map<String>

Map between vlan_id (as string) to airespace interface names (comma-separated) or null for standard mapping

if dynamic_vlan.type==standard, property key is the Vlan ID and property value is ""
if dynamic_vlan.type==airespace-interface-name, property key is the Vlan ID and property value is the Airespace Interface Name

WlanHotspot20, WlanHotspot20Args

DomainNames List<string>
Enabled bool: Whether to enable hotspot 2.0 config
NaiRealms List<string>
Operators List<string>: List of operators to support
Rcois List<string>
VenueName string: Venue name, default is site name

DomainNames []string
Enabled bool: Whether to enable hotspot 2.0 config
NaiRealms []string
Operators []string: List of operators to support
Rcois []string
VenueName string: Venue name, default is site name

domainNames List<String>
enabled Boolean: Whether to enable hotspot 2.0 config
naiRealms List<String>
operators List<String>: List of operators to support
rcois List<String>
venueName String: Venue name, default is site name

domainNames string[]
enabled boolean: Whether to enable hotspot 2.0 config
naiRealms string[]
operators string[]: List of operators to support
rcois string[]
venueName string: Venue name, default is site name

domain_names Sequence[str]
enabled bool: Whether to enable hotspot 2.0 config
nai_realms Sequence[str]
operators Sequence[str]: List of operators to support
rcois Sequence[str]
venue_name str: Venue name, default is site name

domainNames List<String>
enabled Boolean: Whether to enable hotspot 2.0 config
naiRealms List<String>
operators List<String>: List of operators to support
rcois List<String>
venueName String: Venue name, default is site name

WlanInjectDhcpOption82, WlanInjectDhcpOption82Args

CircuitId string

Information to set in the circuit_id field of the DHCP Option 82. It is possible to use static string or the following variables (e.g. {{SSID}}:{{AP_MAC}}):

{{AP_MAC}}
{{AP_MAC_DASHED}}
{{AP_MODEL}}
{{AP_NAME}}
{{SITE_NAME}}
{{SSID}}

Enabled bool

Whether to inject option 82 when forwarding DHCP packets

CircuitId string

Information to set in the circuit_id field of the DHCP Option 82. It is possible to use static string or the following variables (e.g. {{SSID}}:{{AP_MAC}}):

{{AP_MAC}}
{{AP_MAC_DASHED}}
{{AP_MODEL}}
{{AP_NAME}}
{{SITE_NAME}}
{{SSID}}

Enabled bool

Whether to inject option 82 when forwarding DHCP packets

circuitId String

Information to set in the circuit_id field of the DHCP Option 82. It is possible to use static string or the following variables (e.g. {{SSID}}:{{AP_MAC}}):

{{AP_MAC}}
{{AP_MAC_DASHED}}
{{AP_MODEL}}
{{AP_NAME}}
{{SITE_NAME}}
{{SSID}}

enabled Boolean

Whether to inject option 82 when forwarding DHCP packets

circuitId string

Information to set in the circuit_id field of the DHCP Option 82. It is possible to use static string or the following variables (e.g. {{SSID}}:{{AP_MAC}}):

{{AP_MAC}}
{{AP_MAC_DASHED}}
{{AP_MODEL}}
{{AP_NAME}}
{{SITE_NAME}}
{{SSID}}

enabled boolean

Whether to inject option 82 when forwarding DHCP packets

circuit_id str

Information to set in the circuit_id field of the DHCP Option 82. It is possible to use static string or the following variables (e.g. {{SSID}}:{{AP_MAC}}):

{{AP_MAC}}
{{AP_MAC_DASHED}}
{{AP_MODEL}}
{{AP_NAME}}
{{SITE_NAME}}
{{SSID}}

enabled bool

Whether to inject option 82 when forwarding DHCP packets

circuitId String

Information to set in the circuit_id field of the DHCP Option 82. It is possible to use static string or the following variables (e.g. {{SSID}}:{{AP_MAC}}):

{{AP_MAC}}
{{AP_MAC_DASHED}}
{{AP_MODEL}}
{{AP_NAME}}
{{SITE_NAME}}
{{SSID}}

enabled Boolean

Whether to inject option 82 when forwarding DHCP packets

WlanMistNac, WlanMistNacArgs

How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled.

Radius auth session retries. Following fast timers are set if fast_dot1x_timers knob is enabled. "retries" are set to value of auth_servers_timeout. "max-requests" is also set when setting auth_servers_retries is set to default value to 3.

Radius auth session timeout. Following fast timers are set if fast_dot1x_timers knob is enabled. "quite-period" and "transmit-period" are set to half the value of auth_servers_timeout. "supplicant-timeout" is also set when setting auth_servers_timeout is set to default value of 10.

CoaEnabled bool

Allows a RADIUS server to dynamically modify the authorization status of a user session.

CoaPort int

the communication port used for “Change of Authorization” (CoA) messages

Enabled bool

When enabled:

auth_servers is ignored
acct_servers is ignored
auth_servers_* are ignored
coa_servers is ignored
radsec is ignored
coa_enabled is assumed

If set to true, sets default fast-timers with values calculated from auth_servers_timeout and auth_server_retries.

Network string

Which network the mist nac server resides in

SourceIp string

In case there is a static IP for this network, we can specify it using source ip

CoaEnabled bool

Allows a RADIUS server to dynamically modify the authorization status of a user session.

CoaPort int

the communication port used for “Change of Authorization” (CoA) messages

Enabled bool

When enabled:

auth_servers is ignored
acct_servers is ignored
auth_servers_* are ignored
coa_servers is ignored
radsec is ignored
coa_enabled is assumed