Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Routeros Provider
  3. API Docs
  4. CapsmanSecurity
routeros 1.83.1 published on Monday, Apr 28, 2025 by terraform-routeros
terraform-routeros/terraform-provider-routeros

routeros.CapsmanSecurity

Explore with Pulumi AI

routeros logo
routeros 1.83.1 published on Monday, Apr 28, 2025 by terraform-routeros
terraform-routeros/terraform-provider-routeros

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as routeros from "@pulumi/routeros";

const testSecurity = new routeros.CapsmanSecurity("testSecurity", {
    authenticationTypes: [
        "wpa-psk",
        "wpa-eap",
        "wpa2-psk",
    ],
    comment: "test_security",
    disablePmkid: true,
    eapMethods: "eap-tls,passthrough",
    eapRadiusAccounting: true,
    encryptions: [
        "tkip",
        "aes-ccm",
    ],
    groupEncryption: "aes-ccm",
    groupKeyUpdate: "1h",
    passphrase: "0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDE",
    tlsCertificate: "none",
    tlsMode: "verify-certificate",
});

    import pulumi
import pulumi_routeros as routeros

test_security = routeros.CapsmanSecurity("testSecurity",
    authentication_types=[
        "wpa-psk",
        "wpa-eap",
        "wpa2-psk",
    ],
    comment="test_security",
    disable_pmkid=True,
    eap_methods="eap-tls,passthrough",
    eap_radius_accounting=True,
    encryptions=[
        "tkip",
        "aes-ccm",
    ],
    group_encryption="aes-ccm",
    group_key_update="1h",
    passphrase="0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDE",
    tls_certificate="none",
    tls_mode="verify-certificate")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/routeros/routeros"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := routeros.NewCapsmanSecurity(ctx, "testSecurity", &routeros.CapsmanSecurityArgs{
			AuthenticationTypes: pulumi.StringArray{
				pulumi.String("wpa-psk"),
				pulumi.String("wpa-eap"),
				pulumi.String("wpa2-psk"),
			},
			Comment:             pulumi.String("test_security"),
			DisablePmkid:        pulumi.Bool(true),
			EapMethods:          pulumi.String("eap-tls,passthrough"),
			EapRadiusAccounting: pulumi.Bool(true),
			Encryptions: pulumi.StringArray{
				pulumi.String("tkip"),
				pulumi.String("aes-ccm"),
			},
			GroupEncryption: pulumi.String("aes-ccm"),
			GroupKeyUpdate:  pulumi.String("1h"),
			Passphrase:      pulumi.String("0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDE"),
			TlsCertificate:  pulumi.String("none"),
			TlsMode:         pulumi.String("verify-certificate"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Routeros = Pulumi.Routeros;

return await Deployment.RunAsync(() => 
{
    var testSecurity = new Routeros.CapsmanSecurity("testSecurity", new()
    {
        AuthenticationTypes = new[]
        {
            "wpa-psk",
            "wpa-eap",
            "wpa2-psk",
        },
        Comment = "test_security",
        DisablePmkid = true,
        EapMethods = "eap-tls,passthrough",
        EapRadiusAccounting = true,
        Encryptions = new[]
        {
            "tkip",
            "aes-ccm",
        },
        GroupEncryption = "aes-ccm",
        GroupKeyUpdate = "1h",
        Passphrase = "0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDE",
        TlsCertificate = "none",
        TlsMode = "verify-certificate",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.routeros.CapsmanSecurity;
import com.pulumi.routeros.CapsmanSecurityArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var testSecurity = new CapsmanSecurity("testSecurity", CapsmanSecurityArgs.builder()
            .authenticationTypes(            
                "wpa-psk",
                "wpa-eap",
                "wpa2-psk")
            .comment("test_security")
            .disablePmkid(true)
            .eapMethods("eap-tls,passthrough")
            .eapRadiusAccounting(true)
            .encryptions(            
                "tkip",
                "aes-ccm")
            .groupEncryption("aes-ccm")
            .groupKeyUpdate("1h")
            .passphrase("0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDE")
            .tlsCertificate("none")
            .tlsMode("verify-certificate")
            .build());

    }
}

    resources:
  testSecurity:
    type: routeros:CapsmanSecurity
    properties:
      authenticationTypes:
        - wpa-psk
        - wpa-eap
        - wpa2-psk
      comment: test_security
      disablePmkid: true
      eapMethods: eap-tls,passthrough
      eapRadiusAccounting: true
      encryptions:
        - tkip
        - aes-ccm
      groupEncryption: aes-ccm
      groupKeyUpdate: 1h
      passphrase: 0123456789ABCDEF0123456789ABCDEF0123456789ABCDEF0123456789ABCDE
      tlsCertificate: none
      tlsMode: verify-certificate

    Create CapsmanSecurity Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CapsmanSecurity(name: string, args?: CapsmanSecurityArgs, opts?: CustomResourceOptions);
    @overload
def CapsmanSecurity(resource_name: str,
                    args: Optional[CapsmanSecurityArgs] = None,
                    opts: Optional[ResourceOptions] = None)

@overload
def CapsmanSecurity(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    ___id_: Optional[float] = None,
                    ___path_: Optional[str] = None,
                    authentication_types: Optional[Sequence[str]] = None,
                    capsman_security_id: Optional[str] = None,
                    comment: Optional[str] = None,
                    disable_pmkid: Optional[bool] = None,
                    eap_methods: Optional[str] = None,
                    eap_radius_accounting: Optional[bool] = None,
                    encryptions: Optional[Sequence[str]] = None,
                    group_encryption: Optional[str] = None,
                    group_key_update: Optional[str] = None,
                    name: Optional[str] = None,
                    passphrase: Optional[str] = None,
                    tls_certificate: Optional[str] = None,
                    tls_mode: Optional[str] = None)
    func NewCapsmanSecurity(ctx *Context, name string, args *CapsmanSecurityArgs, opts ...ResourceOption) (*CapsmanSecurity, error)
    public CapsmanSecurity(string name, CapsmanSecurityArgs? args = null, CustomResourceOptions? opts = null)
    public CapsmanSecurity(String name, CapsmanSecurityArgs args)
public CapsmanSecurity(String name, CapsmanSecurityArgs args, CustomResourceOptions options)

    type: routeros:CapsmanSecurity
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args CapsmanSecurityArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CapsmanSecurityArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CapsmanSecurityArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CapsmanSecurityArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CapsmanSecurityArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    CapsmanSecurity Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CapsmanSecurity resource accepts the following input properties:

    AuthenticationTypes List<string>
    Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
    CapsmanSecurityId string
    The ID of this resource.
    Comment string
    DisablePmkid bool
    Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
    EapMethods string
    eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
    EapRadiusAccounting bool
    Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
    Encryptions List<string>
    Set type of unicast encryption algorithm used.
    GroupEncryption string
    Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
    GroupKeyUpdate string
    Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
    Name string
    Passphrase string
    WPA or WPA2 pre-shared key.
    TlsCertificate string
    Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
    TlsMode string
    This property has effect only when security.eap-methods contains eap-tls.
    ___id_ double
    Resource ID type (.id / name). This is an internal service field, setting a value is not required.
    ___path_ string
    Resource path for CRUD operations. This is an internal service field, setting a value is not required.
    AuthenticationTypes []string
    Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
    CapsmanSecurityId string
    The ID of this resource.
    Comment string
    DisablePmkid bool
    Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
    EapMethods string
    eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
    EapRadiusAccounting bool
    Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
    Encryptions []string
    Set type of unicast encryption algorithm used.
    GroupEncryption string
    Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
    GroupKeyUpdate string
    Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
    Name string
    Passphrase string
    WPA or WPA2 pre-shared key.
    TlsCertificate string
    Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
    TlsMode string
    This property has effect only when security.eap-methods contains eap-tls.
    ___id_ float64
    Resource ID type (.id / name). This is an internal service field, setting a value is not required.
    ___path_ string
    Resource path for CRUD operations. This is an internal service field, setting a value is not required.
    ___id_ Double
    Resource ID type (.id / name). This is an internal service field, setting a value is not required.
    ___path_ String
    Resource path for CRUD operations. This is an internal service field, setting a value is not required.
    authenticationTypes List<String>
    Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
    capsmanSecurityId String
    The ID of this resource.
    comment String
    disablePmkid Boolean
    Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
    eapMethods String
    eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
    eapRadiusAccounting Boolean
    Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
    encryptions List<String>
    Set type of unicast encryption algorithm used.
    groupEncryption String
    Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
    groupKeyUpdate String
    Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
    name String
    passphrase String
    WPA or WPA2 pre-shared key.
    tlsCertificate String
    Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
    tlsMode String
    This property has effect only when security.eap-methods contains eap-tls.
    ___id_ number
    Resource ID type (.id / name). This is an internal service field, setting a value is not required.
    ___path_ string
    Resource path for CRUD operations. This is an internal service field, setting a value is not required.
    authenticationTypes string[]
    Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
    capsmanSecurityId string
    The ID of this resource.
    comment string
    disablePmkid boolean
    Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
    eapMethods string
    eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
    eapRadiusAccounting boolean
    Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
    encryptions string[]
    Set type of unicast encryption algorithm used.
    groupEncryption string
    Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
    groupKeyUpdate string
    Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
    name string
    passphrase string
    WPA or WPA2 pre-shared key.
    tlsCertificate string
    Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
    tlsMode string
    This property has effect only when security.eap-methods contains eap-tls.
    ___id_ float
    Resource ID type (.id / name). This is an internal service field, setting a value is not required.
    ___path_ str
    Resource path for CRUD operations. This is an internal service field, setting a value is not required.
    authentication_types Sequence[str]
    Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
    capsman_security_id str
    The ID of this resource.
    comment str
    disable_pmkid bool
    Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
    eap_methods str
    eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
    eap_radius_accounting bool
    Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
    encryptions Sequence[str]
    Set type of unicast encryption algorithm used.
    group_encryption str
    Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
    group_key_update str
    Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
    name str
    passphrase str
    WPA or WPA2 pre-shared key.
    tls_certificate str
    Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
    tls_mode str
    This property has effect only when security.eap-methods contains eap-tls.
    ___id_ Number
    Resource ID type (.id / name). This is an internal service field, setting a value is not required.
    ___path_ String
    Resource path for CRUD operations. This is an internal service field, setting a value is not required.
    authenticationTypes List<String>
    Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
    capsmanSecurityId String
    The ID of this resource.
    comment String
    disablePmkid Boolean
    Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
    eapMethods String
    eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
    eapRadiusAccounting Boolean
    Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
    encryptions List<String>
    Set type of unicast encryption algorithm used.
    groupEncryption String
    Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
    groupKeyUpdate String
    Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
    name String
    passphrase String
    WPA or WPA2 pre-shared key.
    tlsCertificate String
    Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
    tlsMode String
    This property has effect only when security.eap-methods contains eap-tls.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CapsmanSecurity resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing CapsmanSecurity Resource

    Get an existing CapsmanSecurity resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CapsmanSecurityState, opts?: CustomResourceOptions): CapsmanSecurity
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        ___id_: Optional[float] = None,
        ___path_: Optional[str] = None,
        authentication_types: Optional[Sequence[str]] = None,
        capsman_security_id: Optional[str] = None,
        comment: Optional[str] = None,
        disable_pmkid: Optional[bool] = None,
        eap_methods: Optional[str] = None,
        eap_radius_accounting: Optional[bool] = None,
        encryptions: Optional[Sequence[str]] = None,
        group_encryption: Optional[str] = None,
        group_key_update: Optional[str] = None,
        name: Optional[str] = None,
        passphrase: Optional[str] = None,
        tls_certificate: Optional[str] = None,
        tls_mode: Optional[str] = None) -> CapsmanSecurity
    func GetCapsmanSecurity(ctx *Context, name string, id IDInput, state *CapsmanSecurityState, opts ...ResourceOption) (*CapsmanSecurity, error)
    public static CapsmanSecurity Get(string name, Input<string> id, CapsmanSecurityState? state, CustomResourceOptions? opts = null)
    public static CapsmanSecurity get(String name, Output<String> id, CapsmanSecurityState state, CustomResourceOptions options)
    resources:  _:    type: routeros:CapsmanSecurity    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AuthenticationTypes List<string>
    Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
    CapsmanSecurityId string
    The ID of this resource.
    Comment string
    DisablePmkid bool
    Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
    EapMethods string
    eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
    EapRadiusAccounting bool
    Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
    Encryptions List<string>
    Set type of unicast encryption algorithm used.
    GroupEncryption string
    Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
    GroupKeyUpdate string
    Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
    Name string
    Passphrase string
    WPA or WPA2 pre-shared key.
    TlsCertificate string
    Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
    TlsMode string
    This property has effect only when security.eap-methods contains eap-tls.
    ___id_ double
    Resource ID type (.id / name). This is an internal service field, setting a value is not required.
    ___path_ string
    Resource path for CRUD operations. This is an internal service field, setting a value is not required.
    AuthenticationTypes []string
    Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
    CapsmanSecurityId string
    The ID of this resource.
    Comment string
    DisablePmkid bool
    Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
    EapMethods string
    eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
    EapRadiusAccounting bool
    Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
    Encryptions []string
    Set type of unicast encryption algorithm used.
    GroupEncryption string
    Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
    GroupKeyUpdate string
    Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
    Name string
    Passphrase string
    WPA or WPA2 pre-shared key.
    TlsCertificate string
    Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
    TlsMode string
    This property has effect only when security.eap-methods contains eap-tls.
    ___id_ float64
    Resource ID type (.id / name). This is an internal service field, setting a value is not required.
    ___path_ string
    Resource path for CRUD operations. This is an internal service field, setting a value is not required.
    ___id_ Double
    Resource ID type (.id / name). This is an internal service field, setting a value is not required.
    ___path_ String
    Resource path for CRUD operations. This is an internal service field, setting a value is not required.
    authenticationTypes List<String>
    Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
    capsmanSecurityId String
    The ID of this resource.
    comment String
    disablePmkid Boolean
    Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
    eapMethods String
    eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
    eapRadiusAccounting Boolean
    Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
    encryptions List<String>
    Set type of unicast encryption algorithm used.
    groupEncryption String
    Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
    groupKeyUpdate String
    Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
    name String
    passphrase String
    WPA or WPA2 pre-shared key.
    tlsCertificate String
    Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
    tlsMode String
    This property has effect only when security.eap-methods contains eap-tls.
    ___id_ number
    Resource ID type (.id / name). This is an internal service field, setting a value is not required.
    ___path_ string
    Resource path for CRUD operations. This is an internal service field, setting a value is not required.
    authenticationTypes string[]
    Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
    capsmanSecurityId string
    The ID of this resource.
    comment string
    disablePmkid boolean
    Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
    eapMethods string
    eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
    eapRadiusAccounting boolean
    Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
    encryptions string[]
    Set type of unicast encryption algorithm used.
    groupEncryption string
    Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
    groupKeyUpdate string
    Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
    name string
    passphrase string
    WPA or WPA2 pre-shared key.
    tlsCertificate string
    Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
    tlsMode string
    This property has effect only when security.eap-methods contains eap-tls.
    ___id_ float
    Resource ID type (.id / name). This is an internal service field, setting a value is not required.
    ___path_ str
    Resource path for CRUD operations. This is an internal service field, setting a value is not required.
    authentication_types Sequence[str]
    Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
    capsman_security_id str
    The ID of this resource.
    comment str
    disable_pmkid bool
    Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
    eap_methods str
    eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
    eap_radius_accounting bool
    Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
    encryptions Sequence[str]
    Set type of unicast encryption algorithm used.
    group_encryption str
    Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
    group_key_update str
    Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
    name str
    passphrase str
    WPA or WPA2 pre-shared key.
    tls_certificate str
    Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
    tls_mode str
    This property has effect only when security.eap-methods contains eap-tls.
    ___id_ Number
    Resource ID type (.id / name). This is an internal service field, setting a value is not required.
    ___path_ String
    Resource path for CRUD operations. This is an internal service field, setting a value is not required.
    authenticationTypes List<String>
    Specify the type of Authentication from wpa-psk, wpa2-psk, wpa-eap or wpa2-eap.
    capsmanSecurityId String
    The ID of this resource.
    comment String
    disablePmkid Boolean
    Whether to include PMKID into the EAPOL frame sent out by the Access Point. Disabling PMKID can cause compatibility issues with devices that use the PMKID to connect to an Access Point.
    eapMethods String
    eap-tls - Use built-in EAP TLS authentication; passthrough - Access point will relay authentication process to the RADIUS server.
    eapRadiusAccounting Boolean
    Specifies if RADIUS traffic accounting should be used if RADIUS authentication gets done for this client
    encryptions List<String>
    Set type of unicast encryption algorithm used.
    groupEncryption String
    Access Point advertises one of these ciphers, multiple values can be selected. Access Point uses it to encrypt all broadcast and multicast frames. Client attempts connection only to Access Points that use one of the specified group ciphers.
    groupKeyUpdate String
    Controls how often Access Point updates the group key. This key is used to encrypt all broadcast and multicast frames. property only has effect for Access Points. (30s..1h)
    name String
    passphrase String
    WPA or WPA2 pre-shared key.
    tlsCertificate String
    Access Point always needs a certificate when security.tls-mode is set to value other than no-certificates.
    tlsMode String
    This property has effect only when security.eap-methods contains eap-tls.

    Import

    #The ID can be found via API or the terminal

    #The command for the terminal is -> :put [/caps-man/security get [print show-ids]]

    $ pulumi import routeros:index/capsmanSecurity:CapsmanSecurity test_security "*1"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    routeros terraform-routeros/terraform-provider-routeros
    License
    Notes
    This Pulumi package is based on the routeros Terraform Provider.
    routeros logo
    routeros 1.83.1 published on Monday, Apr 28, 2025 by terraform-routeros
    terraform-routeros/terraform-provider-routeros