1. Packages
  2. Unifi
  3. API Docs
  4. Wlan
Unifi v0.2.0 published on Tuesday, Feb 17, 2026 by Pulumiverse
Schema (JSON)
pulumiverse/pulumi-unifi

unifi.Wlan

unifi logo
Unifi v0.2.0 published on Tuesday, Feb 17, 2026 by Pulumiverse
Schema (JSON)
pulumiverse/pulumi-unifi

    The unifi.Wlan resource manages wireless networks (SSIDs) on UniFi access points.

    This resource allows you to create and manage WiFi networks with various security options including WPA2, WPA3, and enterprise authentication. You can configure features such as guest policies, minimum data rates, band steering, and scheduled availability.

    Each WLAN can be customized with different security settings, VLAN assignments, and client options to meet specific networking requirements.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as unifi from "@pulumiverse/unifi";

const config = new pulumi.Config();
const vlanId = config.getNumber("vlanId") || 10;
const _default = unifi.getApGroup({});
const defaultGetGroup = unifi.iam.getGroup({});
const vlan = new unifi.Network("vlan", {
    name: "wifi-vlan",
    purpose: "corporate",
    subnet: "10.0.0.1/24",
    vlanId: vlanId,
    dhcpStart: "10.0.0.6",
    dhcpStop: "10.0.0.254",
    dhcpEnabled: true,
});
const wifi = new unifi.Wlan("wifi", {
    name: "myssid",
    passphrase: "12345678",
    security: "wpapsk",
    wpa3Support: true,
    wpa3Transition: true,
    pmfMode: "optional",
    networkId: vlan.id,
    apGroupIds: [_default.then(_default => _default.id)],
    userGroupId: defaultGetGroup.then(defaultGetGroup => defaultGetGroup.id),
});

    import pulumi
import pulumi_unifi as unifi
import pulumiverse_unifi as unifi

config = pulumi.Config()
vlan_id = config.get_float("vlanId")
if vlan_id is None:
    vlan_id = 10
default = unifi.get_ap_group()
default_get_group = unifi.iam.get_group()
vlan = unifi.Network("vlan",
    name="wifi-vlan",
    purpose="corporate",
    subnet="10.0.0.1/24",
    vlan_id=vlan_id,
    dhcp_start="10.0.0.6",
    dhcp_stop="10.0.0.254",
    dhcp_enabled=True)
wifi = unifi.Wlan("wifi",
    name="myssid",
    passphrase="12345678",
    security="wpapsk",
    wpa3_support=True,
    wpa3_transition=True,
    pmf_mode="optional",
    network_id=vlan.id,
    ap_group_ids=[default.id],
    user_group_id=default_get_group.id)

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
	"github.com/pulumiverse/pulumi-unifi/sdk/go/unifi"
	"github.com/pulumiverse/pulumi-unifi/sdk/go/unifi/iam"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		cfg := config.New(ctx, "")
		vlanId := float64(10)
		if param := cfg.GetFloat64("vlanId"); param != 0 {
			vlanId = param
		}
		_default, err := unifi.GetApGroup(ctx, &unifi.GetApGroupArgs{}, nil)
		if err != nil {
			return err
		}
		defaultGetGroup, err := iam.LookupGroup(ctx, &iam.LookupGroupArgs{}, nil)
		if err != nil {
			return err
		}
		vlan, err := unifi.NewNetwork(ctx, "vlan", &unifi.NetworkArgs{
			Name:        pulumi.String("wifi-vlan"),
			Purpose:     pulumi.String("corporate"),
			Subnet:      pulumi.String("10.0.0.1/24"),
			VlanId:      pulumi.Float64(vlanId),
			DhcpStart:   pulumi.String("10.0.0.6"),
			DhcpStop:    pulumi.String("10.0.0.254"),
			DhcpEnabled: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = unifi.NewWlan(ctx, "wifi", &unifi.WlanArgs{
			Name:           pulumi.String("myssid"),
			Passphrase:     pulumi.String("12345678"),
			Security:       pulumi.String("wpapsk"),
			Wpa3Support:    pulumi.Bool(true),
			Wpa3Transition: pulumi.Bool(true),
			PmfMode:        pulumi.String("optional"),
			NetworkId:      vlan.ID(),
			ApGroupIds: pulumi.StringArray{
				pulumi.String(_default.Id),
			},
			UserGroupId: pulumi.String(defaultGetGroup.Id),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Unifi = Pulumiverse.Unifi;

return await Deployment.RunAsync(() => 
{
    var config = new Config();
    var vlanId = config.GetDouble("vlanId") ?? 10;
    var @default = Unifi.GetApGroup.Invoke();

    var defaultGetGroup = Unifi.IAM.GetGroup.Invoke();

    var vlan = new Unifi.Network("vlan", new()
    {
        Name = "wifi-vlan",
        Purpose = "corporate",
        Subnet = "10.0.0.1/24",
        VlanId = vlanId,
        DhcpStart = "10.0.0.6",
        DhcpStop = "10.0.0.254",
        DhcpEnabled = true,
    });

    var wifi = new Unifi.Wlan("wifi", new()
    {
        Name = "myssid",
        Passphrase = "12345678",
        Security = "wpapsk",
        Wpa3Support = true,
        Wpa3Transition = true,
        PmfMode = "optional",
        NetworkId = vlan.Id,
        ApGroupIds = new[]
        {
            @default.Apply(@default => @default.Apply(getApGroupResult => getApGroupResult.Id)),
        },
        UserGroupId = defaultGetGroup.Apply(getGroupResult => getGroupResult.Id),
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.unifi.UnifiFunctions;
import com.pulumi.unifi.inputs.GetApGroupArgs;
import com.pulumi.unifi.iam.IamFunctions;
import com.pulumi.unifi.iam.inputs.GetGroupArgs;
import com.pulumiverse.unifi.Network;
import com.pulumiverse.unifi.NetworkArgs;
import com.pulumiverse.unifi.Wlan;
import com.pulumiverse.unifi.WlanArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var config = ctx.config();
        final var vlanId = config.get("vlanId").orElse(10);
        final var default = UnifiFunctions.getApGroup(GetApGroupArgs.builder()
            .build());

        final var defaultGetGroup = IamFunctions.getGroup(GetGroupArgs.builder()
            .build());

        var vlan = new Network("vlan", NetworkArgs.builder()
            .name("wifi-vlan")
            .purpose("corporate")
            .subnet("10.0.0.1/24")
            .vlanId(vlanId)
            .dhcpStart("10.0.0.6")
            .dhcpStop("10.0.0.254")
            .dhcpEnabled(true)
            .build());

        var wifi = new Wlan("wifi", WlanArgs.builder()
            .name("myssid")
            .passphrase("12345678")
            .security("wpapsk")
            .wpa3Support(true)
            .wpa3Transition(true)
            .pmfMode("optional")
            .networkId(vlan.id())
            .apGroupIds(default_.id())
            .userGroupId(defaultGetGroup.id())
            .build());

    }
}

    configuration:
  vlanId:
    type: number
    default: 10
resources:
  vlan:
    type: unifi:Network
    properties:
      name: wifi-vlan
      purpose: corporate
      subnet: 10.0.0.1/24
      vlanId: ${vlanId}
      dhcpStart: 10.0.0.6
      dhcpStop: 10.0.0.254
      dhcpEnabled: true
  wifi:
    type: unifi:Wlan
    properties:
      name: myssid
      passphrase: '12345678'
      security: wpapsk
      wpa3Support: true
      wpa3Transition: true
      pmfMode: optional
      networkId: ${vlan.id}
      apGroupIds:
        - ${default.id}
      userGroupId: ${defaultGetGroup.id}
variables:
  default:
    fn::invoke:
      function: unifi:getApGroup
      arguments: {}
  defaultGetGroup:
    fn::invoke:
      function: unifi:iam:getGroup
      arguments: {}

    Create Wlan Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Wlan(name: string, args: WlanArgs, opts?: CustomResourceOptions);
    @overload
def Wlan(resource_name: str,
         args: WlanArgs,
         opts: Optional[ResourceOptions] = None)

@overload
def Wlan(resource_name: str,
         opts: Optional[ResourceOptions] = None,
         security: Optional[str] = None,
         user_group_id: Optional[str] = None,
         name: Optional[str] = None,
         bss_transition: Optional[bool] = None,
         is_guest: Optional[bool] = None,
         l2_isolation: Optional[bool] = None,
         mac_filter_enabled: Optional[bool] = None,
         mac_filter_lists: Optional[Sequence[str]] = None,
         mac_filter_policy: Optional[str] = None,
         minimum_data_rate2g_kbps: Optional[int] = None,
         minimum_data_rate5g_kbps: Optional[int] = None,
         multicast_enhance: Optional[bool] = None,
         ap_group_ids: Optional[Sequence[str]] = None,
         network_id: Optional[str] = None,
         hide_ssid: Optional[bool] = None,
         pmf_mode: Optional[str] = None,
         no2ghz_oui: Optional[bool] = None,
         proxy_arp: Optional[bool] = None,
         radius_profile_id: Optional[str] = None,
         schedules: Optional[Sequence[WlanScheduleArgs]] = None,
         fast_roaming_enabled: Optional[bool] = None,
         site: Optional[str] = None,
         uapsd: Optional[bool] = None,
         passphrase: Optional[str] = None,
         wlan_band: Optional[str] = None,
         wpa3_support: Optional[bool] = None,
         wpa3_transition: Optional[bool] = None)
    func NewWlan(ctx *Context, name string, args WlanArgs, opts ...ResourceOption) (*Wlan, error)
    public Wlan(string name, WlanArgs args, CustomResourceOptions? opts = null)
    public Wlan(String name, WlanArgs args)
public Wlan(String name, WlanArgs args, CustomResourceOptions options)

    type: unifi:Wlan
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args WlanArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args WlanArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args WlanArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args WlanArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args WlanArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var wlanResource = new Unifi.Wlan("wlanResource", new()
{
    Security = "string",
    UserGroupId = "string",
    Name = "string",
    BssTransition = false,
    IsGuest = false,
    L2Isolation = false,
    MacFilterEnabled = false,
    MacFilterLists = new[]
    {
        "string",
    },
    MacFilterPolicy = "string",
    MinimumDataRate2gKbps = 0,
    MinimumDataRate5gKbps = 0,
    MulticastEnhance = false,
    ApGroupIds = new[]
    {
        "string",
    },
    NetworkId = "string",
    HideSsid = false,
    PmfMode = "string",
    No2ghzOui = false,
    ProxyArp = false,
    RadiusProfileId = "string",
    Schedules = new[]
    {
        new Unifi.Inputs.WlanScheduleArgs
        {
            DayOfWeek = "string",
            Duration = 0,
            StartHour = 0,
            Name = "string",
            StartMinute = 0,
        },
    },
    FastRoamingEnabled = false,
    Site = "string",
    Uapsd = false,
    Passphrase = "string",
    WlanBand = "string",
    Wpa3Support = false,
    Wpa3Transition = false,
});

    example, err := unifi.NewWlan(ctx, "wlanResource", &unifi.WlanArgs{
	Security:         pulumi.String("string"),
	UserGroupId:      pulumi.String("string"),
	Name:             pulumi.String("string"),
	BssTransition:    pulumi.Bool(false),
	IsGuest:          pulumi.Bool(false),
	L2Isolation:      pulumi.Bool(false),
	MacFilterEnabled: pulumi.Bool(false),
	MacFilterLists: pulumi.StringArray{
		pulumi.String("string"),
	},
	MacFilterPolicy:       pulumi.String("string"),
	MinimumDataRate2gKbps: pulumi.Int(0),
	MinimumDataRate5gKbps: pulumi.Int(0),
	MulticastEnhance:      pulumi.Bool(false),
	ApGroupIds: pulumi.StringArray{
		pulumi.String("string"),
	},
	NetworkId:       pulumi.String("string"),
	HideSsid:        pulumi.Bool(false),
	PmfMode:         pulumi.String("string"),
	No2ghzOui:       pulumi.Bool(false),
	ProxyArp:        pulumi.Bool(false),
	RadiusProfileId: pulumi.String("string"),
	Schedules: unifi.WlanScheduleArray{
		&unifi.WlanScheduleArgs{
			DayOfWeek:   pulumi.String("string"),
			Duration:    pulumi.Int(0),
			StartHour:   pulumi.Int(0),
			Name:        pulumi.String("string"),
			StartMinute: pulumi.Int(0),
		},
	},
	FastRoamingEnabled: pulumi.Bool(false),
	Site:               pulumi.String("string"),
	Uapsd:              pulumi.Bool(false),
	Passphrase:         pulumi.String("string"),
	WlanBand:           pulumi.String("string"),
	Wpa3Support:        pulumi.Bool(false),
	Wpa3Transition:     pulumi.Bool(false),
})

    var wlanResource = new Wlan("wlanResource", WlanArgs.builder()
    .security("string")
    .userGroupId("string")
    .name("string")
    .bssTransition(false)
    .isGuest(false)
    .l2Isolation(false)
    .macFilterEnabled(false)
    .macFilterLists("string")
    .macFilterPolicy("string")
    .minimumDataRate2gKbps(0)
    .minimumDataRate5gKbps(0)
    .multicastEnhance(false)
    .apGroupIds("string")
    .networkId("string")
    .hideSsid(false)
    .pmfMode("string")
    .no2ghzOui(false)
    .proxyArp(false)
    .radiusProfileId("string")
    .schedules(WlanScheduleArgs.builder()
        .dayOfWeek("string")
        .duration(0)
        .startHour(0)
        .name("string")
        .startMinute(0)
        .build())
    .fastRoamingEnabled(false)
    .site("string")
    .uapsd(false)
    .passphrase("string")
    .wlanBand("string")
    .wpa3Support(false)
    .wpa3Transition(false)
    .build());

    wlan_resource = unifi.Wlan("wlanResource",
    security="string",
    user_group_id="string",
    name="string",
    bss_transition=False,
    is_guest=False,
    l2_isolation=False,
    mac_filter_enabled=False,
    mac_filter_lists=["string"],
    mac_filter_policy="string",
    minimum_data_rate2g_kbps=0,
    minimum_data_rate5g_kbps=0,
    multicast_enhance=False,
    ap_group_ids=["string"],
    network_id="string",
    hide_ssid=False,
    pmf_mode="string",
    no2ghz_oui=False,
    proxy_arp=False,
    radius_profile_id="string",
    schedules=[{
        "day_of_week": "string",
        "duration": 0,
        "start_hour": 0,
        "name": "string",
        "start_minute": 0,
    }],
    fast_roaming_enabled=False,
    site="string",
    uapsd=False,
    passphrase="string",
    wlan_band="string",
    wpa3_support=False,
    wpa3_transition=False)

    const wlanResource = new unifi.Wlan("wlanResource", {
    security: "string",
    userGroupId: "string",
    name: "string",
    bssTransition: false,
    isGuest: false,
    l2Isolation: false,
    macFilterEnabled: false,
    macFilterLists: ["string"],
    macFilterPolicy: "string",
    minimumDataRate2gKbps: 0,
    minimumDataRate5gKbps: 0,
    multicastEnhance: false,
    apGroupIds: ["string"],
    networkId: "string",
    hideSsid: false,
    pmfMode: "string",
    no2ghzOui: false,
    proxyArp: false,
    radiusProfileId: "string",
    schedules: [{
        dayOfWeek: "string",
        duration: 0,
        startHour: 0,
        name: "string",
        startMinute: 0,
    }],
    fastRoamingEnabled: false,
    site: "string",
    uapsd: false,
    passphrase: "string",
    wlanBand: "string",
    wpa3Support: false,
    wpa3Transition: false,
});

    type: unifi:Wlan
properties:
    apGroupIds:
        - string
    bssTransition: false
    fastRoamingEnabled: false
    hideSsid: false
    isGuest: false
    l2Isolation: false
    macFilterEnabled: false
    macFilterLists:
        - string
    macFilterPolicy: string
    minimumDataRate2gKbps: 0
    minimumDataRate5gKbps: 0
    multicastEnhance: false
    name: string
    networkId: string
    no2ghzOui: false
    passphrase: string
    pmfMode: string
    proxyArp: false
    radiusProfileId: string
    schedules:
        - dayOfWeek: string
          duration: 0
          name: string
          startHour: 0
          startMinute: 0
    security: string
    site: string
    uapsd: false
    userGroupId: string
    wlanBand: string
    wpa3Support: false
    wpa3Transition: false

    Wlan Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Wlan resource accepts the following input properties:

    Security string
    The security protocol for the wireless network. Valid values are:

    • wpapsk - WPA Personal (PSK) with WPA2/WPA3 options
    • wpaeap - WPA Enterprise (802.1x)
    • open - Open network (no encryption)
    UserGroupId string
    The ID of the user group that defines the rate limiting and firewall rules for clients on this network.
    ApGroupIds List<string>
    IDs of the AP groups that should broadcast this SSID. Used to control which access points broadcast this network.
    BssTransition bool
    Enable BSS Transition Management to help clients roam between APs more efficiently.
    FastRoamingEnabled bool
    Enable 802.11r Fast BSS Transition for seamless roaming between APs. Requires client device support.
    HideSsid bool
    When enabled, the access points will not broadcast the network name (SSID). Clients will need to manually enter the SSID to connect.
    IsGuest bool
    Mark this as a guest network. Guest networks are isolated from other networks and can have special restrictions like captive portals.
    L2Isolation bool
    Isolates wireless clients from each other at layer 2 (ethernet) level. When enabled, devices on this WLAN cannot communicate directly with each other, improving security especially for guest networks or IoT devices. Each client can only communicate with the gateway/router.
    MacFilterEnabled bool
    Enable MAC address filtering to control network access based on client MAC addresses. Works in conjunction with mac_filter_list and mac_filter_policy.
    MacFilterLists List<string>
    List of MAC addresses to filter in XX:XX:XX:XX:XX:XX format. Only applied when mac_filter_enabled is true. MAC addresses are case-insensitive.
    MacFilterPolicy string
    MAC address filter policy. Valid values are:

    • allow - Only allow listed MAC addresses
    • deny - Block listed MAC addresses
    MinimumDataRate2gKbps int
    Minimum data rate for 2.4GHz devices in Kbps. Use 0 to disable. Valid values: 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, and 54000
    MinimumDataRate5gKbps int
    Minimum data rate for 5GHz devices in Kbps. Use 0 to disable. Valid values: 6000, 9000, 12000, 18000, 24000, 36000, 48000, and 54000
    MulticastEnhance bool
    Enable multicast enhancement to convert multicast traffic to unicast for better reliability and performance, especially for applications like video streaming.
    Name string
    The SSID (network name) that will be broadcast by the access points. Must be between 1 and 32 characters long.
    NetworkId string
    ID of the network (VLAN) for this SSID. Used to assign the WLAN to a specific network segment.
    No2ghzOui bool
    When enabled, devices from specific manufacturers (identified by their OUI - Organizationally Unique Identifier) will be prevented from connecting on 2.4GHz and forced to use 5GHz. This improves overall network performance by ensuring capable devices use the less congested 5GHz band. Common examples include newer smartphones and laptops.
    Passphrase string
    The WPA pre-shared key (password) for the network. Required when security is not set to open.
    PmfMode string
    Protected Management Frames (PMF) mode. It cannot be disabled if using WPA3. Valid values are:

    • required - All clients must support PMF (required for WPA3)
    • optional - Clients can optionally use PMF (recommended when transitioning from WPA2 to WPA3)
    • disabled - PMF is disabled (not compatible with WPA3)
    ProxyArp bool
    Enable ARP proxy on this WLAN. When enabled, the UniFi controller will respond to ARP requests on behalf of clients, reducing broadcast traffic and potentially improving network performance. This is particularly useful in high-density wireless environments.
    RadiusProfileId string
    ID of the RADIUS profile to use for WPA Enterprise authentication (when security is 'wpaeap'). Reference existing profiles using the unifi.RadiusProfile data source.
    Schedules List<Pulumiverse.Unifi.Inputs.WlanSchedule>
    Time-based access control configuration for the wireless network. Allows automatic enabling/disabling of the network on specified schedules.
    Site string
    The name of the UniFi site where the wireless network should be created. If not specified, the default site will be used.
    Uapsd bool
    Enable Unscheduled Automatic Power Save Delivery to improve battery life for mobile devices.
    WlanBand string
    Radio band selection. Valid values:

    • both - Both 2.4GHz and 5GHz (default)
    • 2g - 2.4GHz only
    • 5g - 5GHz only
    Wpa3Support bool
    Enable WPA3 security protocol. Requires security to be set to wpapsk and PMF mode to be enabled. WPA3 provides enhanced security features over WPA2.
    Wpa3Transition bool
    Enable WPA3 transition mode, which allows both WPA2 and WPA3 clients to connect. This provides backward compatibility while gradually transitioning to WPA3. Requires security to be set to wpapsk and wpa3_support to be true.
    Security string
    The security protocol for the wireless network. Valid values are:

    • wpapsk - WPA Personal (PSK) with WPA2/WPA3 options
    • wpaeap - WPA Enterprise (802.1x)
    • open - Open network (no encryption)
    UserGroupId string
    The ID of the user group that defines the rate limiting and firewall rules for clients on this network.
    ApGroupIds []string
    IDs of the AP groups that should broadcast this SSID. Used to control which access points broadcast this network.
    BssTransition bool
    Enable BSS Transition Management to help clients roam between APs more efficiently.
    FastRoamingEnabled bool
    Enable 802.11r Fast BSS Transition for seamless roaming between APs. Requires client device support.
    HideSsid bool
    When enabled, the access points will not broadcast the network name (SSID). Clients will need to manually enter the SSID to connect.
    IsGuest bool
    Mark this as a guest network. Guest networks are isolated from other networks and can have special restrictions like captive portals.
    L2Isolation bool
    Isolates wireless clients from each other at layer 2 (ethernet) level. When enabled, devices on this WLAN cannot communicate directly with each other, improving security especially for guest networks or IoT devices. Each client can only communicate with the gateway/router.
    MacFilterEnabled bool
    Enable MAC address filtering to control network access based on client MAC addresses. Works in conjunction with mac_filter_list and mac_filter_policy.
    MacFilterLists []string
    List of MAC addresses to filter in XX:XX:XX:XX:XX:XX format. Only applied when mac_filter_enabled is true. MAC addresses are case-insensitive.
    MacFilterPolicy string
    MAC address filter policy. Valid values are:

    • allow - Only allow listed MAC addresses
    • deny - Block listed MAC addresses
    MinimumDataRate2gKbps int
    Minimum data rate for 2.4GHz devices in Kbps. Use 0 to disable. Valid values: 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, and 54000
    MinimumDataRate5gKbps int
    Minimum data rate for 5GHz devices in Kbps. Use 0 to disable. Valid values: 6000, 9000, 12000, 18000, 24000, 36000, 48000, and 54000
    MulticastEnhance bool
    Enable multicast enhancement to convert multicast traffic to unicast for better reliability and performance, especially for applications like video streaming.
    Name string
    The SSID (network name) that will be broadcast by the access points. Must be between 1 and 32 characters long.
    NetworkId string
    ID of the network (VLAN) for this SSID. Used to assign the WLAN to a specific network segment.
    No2ghzOui bool
    When enabled, devices from specific manufacturers (identified by their OUI - Organizationally Unique Identifier) will be prevented from connecting on 2.4GHz and forced to use 5GHz. This improves overall network performance by ensuring capable devices use the less congested 5GHz band. Common examples include newer smartphones and laptops.
    Passphrase string
    The WPA pre-shared key (password) for the network. Required when security is not set to open.
    PmfMode string
    Protected Management Frames (PMF) mode. It cannot be disabled if using WPA3. Valid values are:

    • required - All clients must support PMF (required for WPA3)
    • optional - Clients can optionally use PMF (recommended when transitioning from WPA2 to WPA3)
    • disabled - PMF is disabled (not compatible with WPA3)
    ProxyArp bool
    Enable ARP proxy on this WLAN. When enabled, the UniFi controller will respond to ARP requests on behalf of clients, reducing broadcast traffic and potentially improving network performance. This is particularly useful in high-density wireless environments.
    RadiusProfileId string
    ID of the RADIUS profile to use for WPA Enterprise authentication (when security is 'wpaeap'). Reference existing profiles using the unifi.RadiusProfile data source.
    Schedules []WlanScheduleArgs
    Time-based access control configuration for the wireless network. Allows automatic enabling/disabling of the network on specified schedules.
    Site string
    The name of the UniFi site where the wireless network should be created. If not specified, the default site will be used.
    Uapsd bool
    Enable Unscheduled Automatic Power Save Delivery to improve battery life for mobile devices.
    WlanBand string
    Radio band selection. Valid values:

    • both - Both 2.4GHz and 5GHz (default)
    • 2g - 2.4GHz only
    • 5g - 5GHz only
    Wpa3Support bool
    Enable WPA3 security protocol. Requires security to be set to wpapsk and PMF mode to be enabled. WPA3 provides enhanced security features over WPA2.
    Wpa3Transition bool
    Enable WPA3 transition mode, which allows both WPA2 and WPA3 clients to connect. This provides backward compatibility while gradually transitioning to WPA3. Requires security to be set to wpapsk and wpa3_support to be true.
    security String
    The security protocol for the wireless network. Valid values are:

    • wpapsk - WPA Personal (PSK) with WPA2/WPA3 options
    • wpaeap - WPA Enterprise (802.1x)
    • open - Open network (no encryption)
    userGroupId String
    The ID of the user group that defines the rate limiting and firewall rules for clients on this network.
    apGroupIds List<String>
    IDs of the AP groups that should broadcast this SSID. Used to control which access points broadcast this network.
    bssTransition Boolean
    Enable BSS Transition Management to help clients roam between APs more efficiently.
    fastRoamingEnabled Boolean
    Enable 802.11r Fast BSS Transition for seamless roaming between APs. Requires client device support.
    hideSsid Boolean
    When enabled, the access points will not broadcast the network name (SSID). Clients will need to manually enter the SSID to connect.
    isGuest Boolean
    Mark this as a guest network. Guest networks are isolated from other networks and can have special restrictions like captive portals.
    l2Isolation Boolean
    Isolates wireless clients from each other at layer 2 (ethernet) level. When enabled, devices on this WLAN cannot communicate directly with each other, improving security especially for guest networks or IoT devices. Each client can only communicate with the gateway/router.
    macFilterEnabled Boolean
    Enable MAC address filtering to control network access based on client MAC addresses. Works in conjunction with mac_filter_list and mac_filter_policy.
    macFilterLists List<String>
    List of MAC addresses to filter in XX:XX:XX:XX:XX:XX format. Only applied when mac_filter_enabled is true. MAC addresses are case-insensitive.
    macFilterPolicy String
    MAC address filter policy. Valid values are:

    • allow - Only allow listed MAC addresses
    • deny - Block listed MAC addresses
    minimumDataRate2gKbps Integer
    Minimum data rate for 2.4GHz devices in Kbps. Use 0 to disable. Valid values: 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, and 54000
    minimumDataRate5gKbps Integer
    Minimum data rate for 5GHz devices in Kbps. Use 0 to disable. Valid values: 6000, 9000, 12000, 18000, 24000, 36000, 48000, and 54000
    multicastEnhance Boolean
    Enable multicast enhancement to convert multicast traffic to unicast for better reliability and performance, especially for applications like video streaming.
    name String
    The SSID (network name) that will be broadcast by the access points. Must be between 1 and 32 characters long.
    networkId String
    ID of the network (VLAN) for this SSID. Used to assign the WLAN to a specific network segment.
    no2ghzOui Boolean
    When enabled, devices from specific manufacturers (identified by their OUI - Organizationally Unique Identifier) will be prevented from connecting on 2.4GHz and forced to use 5GHz. This improves overall network performance by ensuring capable devices use the less congested 5GHz band. Common examples include newer smartphones and laptops.
    passphrase String
    The WPA pre-shared key (password) for the network. Required when security is not set to open.
    pmfMode String
    Protected Management Frames (PMF) mode. It cannot be disabled if using WPA3. Valid values are:

    • required - All clients must support PMF (required for WPA3)
    • optional - Clients can optionally use PMF (recommended when transitioning from WPA2 to WPA3)
    • disabled - PMF is disabled (not compatible with WPA3)
    proxyArp Boolean
    Enable ARP proxy on this WLAN. When enabled, the UniFi controller will respond to ARP requests on behalf of clients, reducing broadcast traffic and potentially improving network performance. This is particularly useful in high-density wireless environments.
    radiusProfileId String
    ID of the RADIUS profile to use for WPA Enterprise authentication (when security is 'wpaeap'). Reference existing profiles using the unifi.RadiusProfile data source.
    schedules List<WlanSchedule>
    Time-based access control configuration for the wireless network. Allows automatic enabling/disabling of the network on specified schedules.
    site String
    The name of the UniFi site where the wireless network should be created. If not specified, the default site will be used.
    uapsd Boolean
    Enable Unscheduled Automatic Power Save Delivery to improve battery life for mobile devices.
    wlanBand String
    Radio band selection. Valid values:

    • both - Both 2.4GHz and 5GHz (default)
    • 2g - 2.4GHz only
    • 5g - 5GHz only
    wpa3Support Boolean
    Enable WPA3 security protocol. Requires security to be set to wpapsk and PMF mode to be enabled. WPA3 provides enhanced security features over WPA2.
    wpa3Transition Boolean
    Enable WPA3 transition mode, which allows both WPA2 and WPA3 clients to connect. This provides backward compatibility while gradually transitioning to WPA3. Requires security to be set to wpapsk and wpa3_support to be true.
    security string
    The security protocol for the wireless network. Valid values are:

    • wpapsk - WPA Personal (PSK) with WPA2/WPA3 options
    • wpaeap - WPA Enterprise (802.1x)
    • open - Open network (no encryption)
    userGroupId string
    The ID of the user group that defines the rate limiting and firewall rules for clients on this network.
    apGroupIds string[]
    IDs of the AP groups that should broadcast this SSID. Used to control which access points broadcast this network.
    bssTransition boolean
    Enable BSS Transition Management to help clients roam between APs more efficiently.
    fastRoamingEnabled boolean
    Enable 802.11r Fast BSS Transition for seamless roaming between APs. Requires client device support.
    hideSsid boolean
    When enabled, the access points will not broadcast the network name (SSID). Clients will need to manually enter the SSID to connect.
    isGuest boolean
    Mark this as a guest network. Guest networks are isolated from other networks and can have special restrictions like captive portals.
    l2Isolation boolean
    Isolates wireless clients from each other at layer 2 (ethernet) level. When enabled, devices on this WLAN cannot communicate directly with each other, improving security especially for guest networks or IoT devices. Each client can only communicate with the gateway/router.
    macFilterEnabled boolean
    Enable MAC address filtering to control network access based on client MAC addresses. Works in conjunction with mac_filter_list and mac_filter_policy.
    macFilterLists string[]
    List of MAC addresses to filter in XX:XX:XX:XX:XX:XX format. Only applied when mac_filter_enabled is true. MAC addresses are case-insensitive.
    macFilterPolicy string
    MAC address filter policy. Valid values are:

    • allow - Only allow listed MAC addresses
    • deny - Block listed MAC addresses
    minimumDataRate2gKbps number
    Minimum data rate for 2.4GHz devices in Kbps. Use 0 to disable. Valid values: 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, and 54000
    minimumDataRate5gKbps number
    Minimum data rate for 5GHz devices in Kbps. Use 0 to disable. Valid values: 6000, 9000, 12000, 18000, 24000, 36000, 48000, and 54000
    multicastEnhance boolean
    Enable multicast enhancement to convert multicast traffic to unicast for better reliability and performance, especially for applications like video streaming.
    name string
    The SSID (network name) that will be broadcast by the access points. Must be between 1 and 32 characters long.
    networkId string
    ID of the network (VLAN) for this SSID. Used to assign the WLAN to a specific network segment.
    no2ghzOui boolean
    When enabled, devices from specific manufacturers (identified by their OUI - Organizationally Unique Identifier) will be prevented from connecting on 2.4GHz and forced to use 5GHz. This improves overall network performance by ensuring capable devices use the less congested 5GHz band. Common examples include newer smartphones and laptops.
    passphrase string
    The WPA pre-shared key (password) for the network. Required when security is not set to open.
    pmfMode string
    Protected Management Frames (PMF) mode. It cannot be disabled if using WPA3. Valid values are:

    • required - All clients must support PMF (required for WPA3)
    • optional - Clients can optionally use PMF (recommended when transitioning from WPA2 to WPA3)
    • disabled - PMF is disabled (not compatible with WPA3)
    proxyArp boolean
    Enable ARP proxy on this WLAN. When enabled, the UniFi controller will respond to ARP requests on behalf of clients, reducing broadcast traffic and potentially improving network performance. This is particularly useful in high-density wireless environments.
    radiusProfileId string
    ID of the RADIUS profile to use for WPA Enterprise authentication (when security is 'wpaeap'). Reference existing profiles using the unifi.RadiusProfile data source.
    schedules WlanSchedule[]
    Time-based access control configuration for the wireless network. Allows automatic enabling/disabling of the network on specified schedules.
    site string
    The name of the UniFi site where the wireless network should be created. If not specified, the default site will be used.
    uapsd boolean
    Enable Unscheduled Automatic Power Save Delivery to improve battery life for mobile devices.
    wlanBand string
    Radio band selection. Valid values:

    • both - Both 2.4GHz and 5GHz (default)
    • 2g - 2.4GHz only
    • 5g - 5GHz only
    wpa3Support boolean
    Enable WPA3 security protocol. Requires security to be set to wpapsk and PMF mode to be enabled. WPA3 provides enhanced security features over WPA2.
    wpa3Transition boolean
    Enable WPA3 transition mode, which allows both WPA2 and WPA3 clients to connect. This provides backward compatibility while gradually transitioning to WPA3. Requires security to be set to wpapsk and wpa3_support to be true.
    security str
    The security protocol for the wireless network. Valid values are:

    • wpapsk - WPA Personal (PSK) with WPA2/WPA3 options
    • wpaeap - WPA Enterprise (802.1x)
    • open - Open network (no encryption)
    user_group_id str
    The ID of the user group that defines the rate limiting and firewall rules for clients on this network.
    ap_group_ids Sequence[str]
    IDs of the AP groups that should broadcast this SSID. Used to control which access points broadcast this network.
    bss_transition bool
    Enable BSS Transition Management to help clients roam between APs more efficiently.
    fast_roaming_enabled bool
    Enable 802.11r Fast BSS Transition for seamless roaming between APs. Requires client device support.
    hide_ssid bool
    When enabled, the access points will not broadcast the network name (SSID). Clients will need to manually enter the SSID to connect.
    is_guest bool
    Mark this as a guest network. Guest networks are isolated from other networks and can have special restrictions like captive portals.
    l2_isolation bool
    Isolates wireless clients from each other at layer 2 (ethernet) level. When enabled, devices on this WLAN cannot communicate directly with each other, improving security especially for guest networks or IoT devices. Each client can only communicate with the gateway/router.
    mac_filter_enabled bool
    Enable MAC address filtering to control network access based on client MAC addresses. Works in conjunction with mac_filter_list and mac_filter_policy.
    mac_filter_lists Sequence[str]
    List of MAC addresses to filter in XX:XX:XX:XX:XX:XX format. Only applied when mac_filter_enabled is true. MAC addresses are case-insensitive.
    mac_filter_policy str
    MAC address filter policy. Valid values are:

    • allow - Only allow listed MAC addresses
    • deny - Block listed MAC addresses
    minimum_data_rate2g_kbps int
    Minimum data rate for 2.4GHz devices in Kbps. Use 0 to disable. Valid values: 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, and 54000
    minimum_data_rate5g_kbps int
    Minimum data rate for 5GHz devices in Kbps. Use 0 to disable. Valid values: 6000, 9000, 12000, 18000, 24000, 36000, 48000, and 54000
    multicast_enhance bool
    Enable multicast enhancement to convert multicast traffic to unicast for better reliability and performance, especially for applications like video streaming.
    name str
    The SSID (network name) that will be broadcast by the access points. Must be between 1 and 32 characters long.
    network_id str
    ID of the network (VLAN) for this SSID. Used to assign the WLAN to a specific network segment.
    no2ghz_oui bool
    When enabled, devices from specific manufacturers (identified by their OUI - Organizationally Unique Identifier) will be prevented from connecting on 2.4GHz and forced to use 5GHz. This improves overall network performance by ensuring capable devices use the less congested 5GHz band. Common examples include newer smartphones and laptops.
    passphrase str
    The WPA pre-shared key (password) for the network. Required when security is not set to open.
    pmf_mode str
    Protected Management Frames (PMF) mode. It cannot be disabled if using WPA3. Valid values are:

    • required - All clients must support PMF (required for WPA3)
    • optional - Clients can optionally use PMF (recommended when transitioning from WPA2 to WPA3)
    • disabled - PMF is disabled (not compatible with WPA3)
    proxy_arp bool
    Enable ARP proxy on this WLAN. When enabled, the UniFi controller will respond to ARP requests on behalf of clients, reducing broadcast traffic and potentially improving network performance. This is particularly useful in high-density wireless environments.
    radius_profile_id str
    ID of the RADIUS profile to use for WPA Enterprise authentication (when security is 'wpaeap'). Reference existing profiles using the unifi.RadiusProfile data source.
    schedules Sequence[WlanScheduleArgs]
    Time-based access control configuration for the wireless network. Allows automatic enabling/disabling of the network on specified schedules.
    site str
    The name of the UniFi site where the wireless network should be created. If not specified, the default site will be used.
    uapsd bool
    Enable Unscheduled Automatic Power Save Delivery to improve battery life for mobile devices.
    wlan_band str
    Radio band selection. Valid values:

    • both - Both 2.4GHz and 5GHz (default)
    • 2g - 2.4GHz only
    • 5g - 5GHz only
    wpa3_support bool
    Enable WPA3 security protocol. Requires security to be set to wpapsk and PMF mode to be enabled. WPA3 provides enhanced security features over WPA2.
    wpa3_transition bool
    Enable WPA3 transition mode, which allows both WPA2 and WPA3 clients to connect. This provides backward compatibility while gradually transitioning to WPA3. Requires security to be set to wpapsk and wpa3_support to be true.
    security String
    The security protocol for the wireless network. Valid values are:

    • wpapsk - WPA Personal (PSK) with WPA2/WPA3 options
    • wpaeap - WPA Enterprise (802.1x)
    • open - Open network (no encryption)
    userGroupId String
    The ID of the user group that defines the rate limiting and firewall rules for clients on this network.
    apGroupIds List<String>
    IDs of the AP groups that should broadcast this SSID. Used to control which access points broadcast this network.
    bssTransition Boolean
    Enable BSS Transition Management to help clients roam between APs more efficiently.
    fastRoamingEnabled Boolean
    Enable 802.11r Fast BSS Transition for seamless roaming between APs. Requires client device support.
    hideSsid Boolean
    When enabled, the access points will not broadcast the network name (SSID). Clients will need to manually enter the SSID to connect.
    isGuest Boolean
    Mark this as a guest network. Guest networks are isolated from other networks and can have special restrictions like captive portals.
    l2Isolation Boolean
    Isolates wireless clients from each other at layer 2 (ethernet) level. When enabled, devices on this WLAN cannot communicate directly with each other, improving security especially for guest networks or IoT devices. Each client can only communicate with the gateway/router.
    macFilterEnabled Boolean
    Enable MAC address filtering to control network access based on client MAC addresses. Works in conjunction with mac_filter_list and mac_filter_policy.
    macFilterLists List<String>
    List of MAC addresses to filter in XX:XX:XX:XX:XX:XX format. Only applied when mac_filter_enabled is true. MAC addresses are case-insensitive.
    macFilterPolicy String
    MAC address filter policy. Valid values are:

    • allow - Only allow listed MAC addresses
    • deny - Block listed MAC addresses
    minimumDataRate2gKbps Number
    Minimum data rate for 2.4GHz devices in Kbps. Use 0 to disable. Valid values: 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, and 54000
    minimumDataRate5gKbps Number
    Minimum data rate for 5GHz devices in Kbps. Use 0 to disable. Valid values: 6000, 9000, 12000, 18000, 24000, 36000, 48000, and 54000
    multicastEnhance Boolean
    Enable multicast enhancement to convert multicast traffic to unicast for better reliability and performance, especially for applications like video streaming.
    name String
    The SSID (network name) that will be broadcast by the access points. Must be between 1 and 32 characters long.
    networkId String
    ID of the network (VLAN) for this SSID. Used to assign the WLAN to a specific network segment.
    no2ghzOui Boolean
    When enabled, devices from specific manufacturers (identified by their OUI - Organizationally Unique Identifier) will be prevented from connecting on 2.4GHz and forced to use 5GHz. This improves overall network performance by ensuring capable devices use the less congested 5GHz band. Common examples include newer smartphones and laptops.
    passphrase String
    The WPA pre-shared key (password) for the network. Required when security is not set to open.
    pmfMode String
    Protected Management Frames (PMF) mode. It cannot be disabled if using WPA3. Valid values are:

    • required - All clients must support PMF (required for WPA3)
    • optional - Clients can optionally use PMF (recommended when transitioning from WPA2 to WPA3)
    • disabled - PMF is disabled (not compatible with WPA3)
    proxyArp Boolean
    Enable ARP proxy on this WLAN. When enabled, the UniFi controller will respond to ARP requests on behalf of clients, reducing broadcast traffic and potentially improving network performance. This is particularly useful in high-density wireless environments.
    radiusProfileId String
    ID of the RADIUS profile to use for WPA Enterprise authentication (when security is 'wpaeap'). Reference existing profiles using the unifi.RadiusProfile data source.
    schedules List<Property Map>
    Time-based access control configuration for the wireless network. Allows automatic enabling/disabling of the network on specified schedules.
    site String
    The name of the UniFi site where the wireless network should be created. If not specified, the default site will be used.
    uapsd Boolean
    Enable Unscheduled Automatic Power Save Delivery to improve battery life for mobile devices.
    wlanBand String
    Radio band selection. Valid values:

    • both - Both 2.4GHz and 5GHz (default)
    • 2g - 2.4GHz only
    • 5g - 5GHz only
    wpa3Support Boolean
    Enable WPA3 security protocol. Requires security to be set to wpapsk and PMF mode to be enabled. WPA3 provides enhanced security features over WPA2.
    wpa3Transition Boolean
    Enable WPA3 transition mode, which allows both WPA2 and WPA3 clients to connect. This provides backward compatibility while gradually transitioning to WPA3. Requires security to be set to wpapsk and wpa3_support to be true.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Wlan resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing Wlan Resource

    Get an existing Wlan resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: WlanState, opts?: CustomResourceOptions): Wlan
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        ap_group_ids: Optional[Sequence[str]] = None,
        bss_transition: Optional[bool] = None,
        fast_roaming_enabled: Optional[bool] = None,
        hide_ssid: Optional[bool] = None,
        is_guest: Optional[bool] = None,
        l2_isolation: Optional[bool] = None,
        mac_filter_enabled: Optional[bool] = None,
        mac_filter_lists: Optional[Sequence[str]] = None,
        mac_filter_policy: Optional[str] = None,
        minimum_data_rate2g_kbps: Optional[int] = None,
        minimum_data_rate5g_kbps: Optional[int] = None,
        multicast_enhance: Optional[bool] = None,
        name: Optional[str] = None,
        network_id: Optional[str] = None,
        no2ghz_oui: Optional[bool] = None,
        passphrase: Optional[str] = None,
        pmf_mode: Optional[str] = None,
        proxy_arp: Optional[bool] = None,
        radius_profile_id: Optional[str] = None,
        schedules: Optional[Sequence[WlanScheduleArgs]] = None,
        security: Optional[str] = None,
        site: Optional[str] = None,
        uapsd: Optional[bool] = None,
        user_group_id: Optional[str] = None,
        wlan_band: Optional[str] = None,
        wpa3_support: Optional[bool] = None,
        wpa3_transition: Optional[bool] = None) -> Wlan
    func GetWlan(ctx *Context, name string, id IDInput, state *WlanState, opts ...ResourceOption) (*Wlan, error)
    public static Wlan Get(string name, Input<string> id, WlanState? state, CustomResourceOptions? opts = null)
    public static Wlan get(String name, Output<String> id, WlanState state, CustomResourceOptions options)
    resources:  _:    type: unifi:Wlan    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ApGroupIds List<string>
    IDs of the AP groups that should broadcast this SSID. Used to control which access points broadcast this network.
    BssTransition bool
    Enable BSS Transition Management to help clients roam between APs more efficiently.
    FastRoamingEnabled bool
    Enable 802.11r Fast BSS Transition for seamless roaming between APs. Requires client device support.
    HideSsid bool
    When enabled, the access points will not broadcast the network name (SSID). Clients will need to manually enter the SSID to connect.
    IsGuest bool
    Mark this as a guest network. Guest networks are isolated from other networks and can have special restrictions like captive portals.
    L2Isolation bool
    Isolates wireless clients from each other at layer 2 (ethernet) level. When enabled, devices on this WLAN cannot communicate directly with each other, improving security especially for guest networks or IoT devices. Each client can only communicate with the gateway/router.
    MacFilterEnabled bool
    Enable MAC address filtering to control network access based on client MAC addresses. Works in conjunction with mac_filter_list and mac_filter_policy.
    MacFilterLists List<string>
    List of MAC addresses to filter in XX:XX:XX:XX:XX:XX format. Only applied when mac_filter_enabled is true. MAC addresses are case-insensitive.
    MacFilterPolicy string
    MAC address filter policy. Valid values are:

    • allow - Only allow listed MAC addresses
    • deny - Block listed MAC addresses
    MinimumDataRate2gKbps int
    Minimum data rate for 2.4GHz devices in Kbps. Use 0 to disable. Valid values: 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, and 54000
    MinimumDataRate5gKbps int
    Minimum data rate for 5GHz devices in Kbps. Use 0 to disable. Valid values: 6000, 9000, 12000, 18000, 24000, 36000, 48000, and 54000
    MulticastEnhance bool
    Enable multicast enhancement to convert multicast traffic to unicast for better reliability and performance, especially for applications like video streaming.
    Name string
    The SSID (network name) that will be broadcast by the access points. Must be between 1 and 32 characters long.
    NetworkId string
    ID of the network (VLAN) for this SSID. Used to assign the WLAN to a specific network segment.
    No2ghzOui bool
    When enabled, devices from specific manufacturers (identified by their OUI - Organizationally Unique Identifier) will be prevented from connecting on 2.4GHz and forced to use 5GHz. This improves overall network performance by ensuring capable devices use the less congested 5GHz band. Common examples include newer smartphones and laptops.
    Passphrase string
    The WPA pre-shared key (password) for the network. Required when security is not set to open.
    PmfMode string
    Protected Management Frames (PMF) mode. It cannot be disabled if using WPA3. Valid values are:

    • required - All clients must support PMF (required for WPA3)
    • optional - Clients can optionally use PMF (recommended when transitioning from WPA2 to WPA3)
    • disabled - PMF is disabled (not compatible with WPA3)
    ProxyArp bool
    Enable ARP proxy on this WLAN. When enabled, the UniFi controller will respond to ARP requests on behalf of clients, reducing broadcast traffic and potentially improving network performance. This is particularly useful in high-density wireless environments.
    RadiusProfileId string
    ID of the RADIUS profile to use for WPA Enterprise authentication (when security is 'wpaeap'). Reference existing profiles using the unifi.RadiusProfile data source.
    Schedules List<Pulumiverse.Unifi.Inputs.WlanSchedule>
    Time-based access control configuration for the wireless network. Allows automatic enabling/disabling of the network on specified schedules.
    Security string
    The security protocol for the wireless network. Valid values are:

    • wpapsk - WPA Personal (PSK) with WPA2/WPA3 options
    • wpaeap - WPA Enterprise (802.1x)
    • open - Open network (no encryption)
    Site string
    The name of the UniFi site where the wireless network should be created. If not specified, the default site will be used.
    Uapsd bool
    Enable Unscheduled Automatic Power Save Delivery to improve battery life for mobile devices.
    UserGroupId string
    The ID of the user group that defines the rate limiting and firewall rules for clients on this network.
    WlanBand string
    Radio band selection. Valid values:

    • both - Both 2.4GHz and 5GHz (default)
    • 2g - 2.4GHz only
    • 5g - 5GHz only
    Wpa3Support bool
    Enable WPA3 security protocol. Requires security to be set to wpapsk and PMF mode to be enabled. WPA3 provides enhanced security features over WPA2.
    Wpa3Transition bool
    Enable WPA3 transition mode, which allows both WPA2 and WPA3 clients to connect. This provides backward compatibility while gradually transitioning to WPA3. Requires security to be set to wpapsk and wpa3_support to be true.
    ApGroupIds []string
    IDs of the AP groups that should broadcast this SSID. Used to control which access points broadcast this network.
    BssTransition bool
    Enable BSS Transition Management to help clients roam between APs more efficiently.
    FastRoamingEnabled bool
    Enable 802.11r Fast BSS Transition for seamless roaming between APs. Requires client device support.
    HideSsid bool
    When enabled, the access points will not broadcast the network name (SSID). Clients will need to manually enter the SSID to connect.
    IsGuest bool
    Mark this as a guest network. Guest networks are isolated from other networks and can have special restrictions like captive portals.
    L2Isolation bool
    Isolates wireless clients from each other at layer 2 (ethernet) level. When enabled, devices on this WLAN cannot communicate directly with each other, improving security especially for guest networks or IoT devices. Each client can only communicate with the gateway/router.
    MacFilterEnabled bool
    Enable MAC address filtering to control network access based on client MAC addresses. Works in conjunction with mac_filter_list and mac_filter_policy.
    MacFilterLists []string
    List of MAC addresses to filter in XX:XX:XX:XX:XX:XX format. Only applied when mac_filter_enabled is true. MAC addresses are case-insensitive.
    MacFilterPolicy string
    MAC address filter policy. Valid values are:

    • allow - Only allow listed MAC addresses
    • deny - Block listed MAC addresses
    MinimumDataRate2gKbps int
    Minimum data rate for 2.4GHz devices in Kbps. Use 0 to disable. Valid values: 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, and 54000
    MinimumDataRate5gKbps int
    Minimum data rate for 5GHz devices in Kbps. Use 0 to disable. Valid values: 6000, 9000, 12000, 18000, 24000, 36000, 48000, and 54000
    MulticastEnhance bool
    Enable multicast enhancement to convert multicast traffic to unicast for better reliability and performance, especially for applications like video streaming.
    Name string
    The SSID (network name) that will be broadcast by the access points. Must be between 1 and 32 characters long.
    NetworkId string
    ID of the network (VLAN) for this SSID. Used to assign the WLAN to a specific network segment.
    No2ghzOui bool
    When enabled, devices from specific manufacturers (identified by their OUI - Organizationally Unique Identifier) will be prevented from connecting on 2.4GHz and forced to use 5GHz. This improves overall network performance by ensuring capable devices use the less congested 5GHz band. Common examples include newer smartphones and laptops.
    Passphrase string
    The WPA pre-shared key (password) for the network. Required when security is not set to open.
    PmfMode string
    Protected Management Frames (PMF) mode. It cannot be disabled if using WPA3. Valid values are:

    • required - All clients must support PMF (required for WPA3)
    • optional - Clients can optionally use PMF (recommended when transitioning from WPA2 to WPA3)
    • disabled - PMF is disabled (not compatible with WPA3)
    ProxyArp bool
    Enable ARP proxy on this WLAN. When enabled, the UniFi controller will respond to ARP requests on behalf of clients, reducing broadcast traffic and potentially improving network performance. This is particularly useful in high-density wireless environments.
    RadiusProfileId string
    ID of the RADIUS profile to use for WPA Enterprise authentication (when security is 'wpaeap'). Reference existing profiles using the unifi.RadiusProfile data source.
    Schedules []WlanScheduleArgs
    Time-based access control configuration for the wireless network. Allows automatic enabling/disabling of the network on specified schedules.
    Security string
    The security protocol for the wireless network. Valid values are:

    • wpapsk - WPA Personal (PSK) with WPA2/WPA3 options
    • wpaeap - WPA Enterprise (802.1x)
    • open - Open network (no encryption)
    Site string
    The name of the UniFi site where the wireless network should be created. If not specified, the default site will be used.
    Uapsd bool
    Enable Unscheduled Automatic Power Save Delivery to improve battery life for mobile devices.
    UserGroupId string
    The ID of the user group that defines the rate limiting and firewall rules for clients on this network.
    WlanBand string
    Radio band selection. Valid values:

    • both - Both 2.4GHz and 5GHz (default)
    • 2g - 2.4GHz only
    • 5g - 5GHz only
    Wpa3Support bool
    Enable WPA3 security protocol. Requires security to be set to wpapsk and PMF mode to be enabled. WPA3 provides enhanced security features over WPA2.
    Wpa3Transition bool
    Enable WPA3 transition mode, which allows both WPA2 and WPA3 clients to connect. This provides backward compatibility while gradually transitioning to WPA3. Requires security to be set to wpapsk and wpa3_support to be true.
    apGroupIds List<String>
    IDs of the AP groups that should broadcast this SSID. Used to control which access points broadcast this network.
    bssTransition Boolean
    Enable BSS Transition Management to help clients roam between APs more efficiently.
    fastRoamingEnabled Boolean
    Enable 802.11r Fast BSS Transition for seamless roaming between APs. Requires client device support.
    hideSsid Boolean
    When enabled, the access points will not broadcast the network name (SSID). Clients will need to manually enter the SSID to connect.
    isGuest Boolean
    Mark this as a guest network. Guest networks are isolated from other networks and can have special restrictions like captive portals.
    l2Isolation Boolean
    Isolates wireless clients from each other at layer 2 (ethernet) level. When enabled, devices on this WLAN cannot communicate directly with each other, improving security especially for guest networks or IoT devices. Each client can only communicate with the gateway/router.
    macFilterEnabled Boolean
    Enable MAC address filtering to control network access based on client MAC addresses. Works in conjunction with mac_filter_list and mac_filter_policy.
    macFilterLists List<String>
    List of MAC addresses to filter in XX:XX:XX:XX:XX:XX format. Only applied when mac_filter_enabled is true. MAC addresses are case-insensitive.
    macFilterPolicy String
    MAC address filter policy. Valid values are:

    • allow - Only allow listed MAC addresses
    • deny - Block listed MAC addresses
    minimumDataRate2gKbps Integer
    Minimum data rate for 2.4GHz devices in Kbps. Use 0 to disable. Valid values: 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, and 54000
    minimumDataRate5gKbps Integer
    Minimum data rate for 5GHz devices in Kbps. Use 0 to disable. Valid values: 6000, 9000, 12000, 18000, 24000, 36000, 48000, and 54000
    multicastEnhance Boolean
    Enable multicast enhancement to convert multicast traffic to unicast for better reliability and performance, especially for applications like video streaming.
    name String
    The SSID (network name) that will be broadcast by the access points. Must be between 1 and 32 characters long.
    networkId String
    ID of the network (VLAN) for this SSID. Used to assign the WLAN to a specific network segment.
    no2ghzOui Boolean
    When enabled, devices from specific manufacturers (identified by their OUI - Organizationally Unique Identifier) will be prevented from connecting on 2.4GHz and forced to use 5GHz. This improves overall network performance by ensuring capable devices use the less congested 5GHz band. Common examples include newer smartphones and laptops.
    passphrase String
    The WPA pre-shared key (password) for the network. Required when security is not set to open.
    pmfMode String
    Protected Management Frames (PMF) mode. It cannot be disabled if using WPA3. Valid values are:

    • required - All clients must support PMF (required for WPA3)
    • optional - Clients can optionally use PMF (recommended when transitioning from WPA2 to WPA3)
    • disabled - PMF is disabled (not compatible with WPA3)
    proxyArp Boolean
    Enable ARP proxy on this WLAN. When enabled, the UniFi controller will respond to ARP requests on behalf of clients, reducing broadcast traffic and potentially improving network performance. This is particularly useful in high-density wireless environments.
    radiusProfileId String
    ID of the RADIUS profile to use for WPA Enterprise authentication (when security is 'wpaeap'). Reference existing profiles using the unifi.RadiusProfile data source.
    schedules List<WlanSchedule>
    Time-based access control configuration for the wireless network. Allows automatic enabling/disabling of the network on specified schedules.
    security String
    The security protocol for the wireless network. Valid values are:

    • wpapsk - WPA Personal (PSK) with WPA2/WPA3 options
    • wpaeap - WPA Enterprise (802.1x)
    • open - Open network (no encryption)
    site String
    The name of the UniFi site where the wireless network should be created. If not specified, the default site will be used.
    uapsd Boolean
    Enable Unscheduled Automatic Power Save Delivery to improve battery life for mobile devices.
    userGroupId String
    The ID of the user group that defines the rate limiting and firewall rules for clients on this network.
    wlanBand String
    Radio band selection. Valid values:

    • both - Both 2.4GHz and 5GHz (default)
    • 2g - 2.4GHz only
    • 5g - 5GHz only
    wpa3Support Boolean
    Enable WPA3 security protocol. Requires security to be set to wpapsk and PMF mode to be enabled. WPA3 provides enhanced security features over WPA2.
    wpa3Transition Boolean
    Enable WPA3 transition mode, which allows both WPA2 and WPA3 clients to connect. This provides backward compatibility while gradually transitioning to WPA3. Requires security to be set to wpapsk and wpa3_support to be true.
    apGroupIds string[]
    IDs of the AP groups that should broadcast this SSID. Used to control which access points broadcast this network.
    bssTransition boolean
    Enable BSS Transition Management to help clients roam between APs more efficiently.
    fastRoamingEnabled boolean
    Enable 802.11r Fast BSS Transition for seamless roaming between APs. Requires client device support.
    hideSsid boolean
    When enabled, the access points will not broadcast the network name (SSID). Clients will need to manually enter the SSID to connect.
    isGuest boolean
    Mark this as a guest network. Guest networks are isolated from other networks and can have special restrictions like captive portals.
    l2Isolation boolean
    Isolates wireless clients from each other at layer 2 (ethernet) level. When enabled, devices on this WLAN cannot communicate directly with each other, improving security especially for guest networks or IoT devices. Each client can only communicate with the gateway/router.
    macFilterEnabled boolean
    Enable MAC address filtering to control network access based on client MAC addresses. Works in conjunction with mac_filter_list and mac_filter_policy.
    macFilterLists string[]
    List of MAC addresses to filter in XX:XX:XX:XX:XX:XX format. Only applied when mac_filter_enabled is true. MAC addresses are case-insensitive.
    macFilterPolicy string
    MAC address filter policy. Valid values are:

    • allow - Only allow listed MAC addresses
    • deny - Block listed MAC addresses
    minimumDataRate2gKbps number
    Minimum data rate for 2.4GHz devices in Kbps. Use 0 to disable. Valid values: 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, and 54000
    minimumDataRate5gKbps number
    Minimum data rate for 5GHz devices in Kbps. Use 0 to disable. Valid values: 6000, 9000, 12000, 18000, 24000, 36000, 48000, and 54000
    multicastEnhance boolean
    Enable multicast enhancement to convert multicast traffic to unicast for better reliability and performance, especially for applications like video streaming.
    name string
    The SSID (network name) that will be broadcast by the access points. Must be between 1 and 32 characters long.
    networkId string
    ID of the network (VLAN) for this SSID. Used to assign the WLAN to a specific network segment.
    no2ghzOui boolean
    When enabled, devices from specific manufacturers (identified by their OUI - Organizationally Unique Identifier) will be prevented from connecting on 2.4GHz and forced to use 5GHz. This improves overall network performance by ensuring capable devices use the less congested 5GHz band. Common examples include newer smartphones and laptops.
    passphrase string
    The WPA pre-shared key (password) for the network. Required when security is not set to open.
    pmfMode string
    Protected Management Frames (PMF) mode. It cannot be disabled if using WPA3. Valid values are:

    • required - All clients must support PMF (required for WPA3)
    • optional - Clients can optionally use PMF (recommended when transitioning from WPA2 to WPA3)
    • disabled - PMF is disabled (not compatible with WPA3)
    proxyArp boolean
    Enable ARP proxy on this WLAN. When enabled, the UniFi controller will respond to ARP requests on behalf of clients, reducing broadcast traffic and potentially improving network performance. This is particularly useful in high-density wireless environments.
    radiusProfileId string
    ID of the RADIUS profile to use for WPA Enterprise authentication (when security is 'wpaeap'). Reference existing profiles using the unifi.RadiusProfile data source.
    schedules WlanSchedule[]
    Time-based access control configuration for the wireless network. Allows automatic enabling/disabling of the network on specified schedules.
    security string
    The security protocol for the wireless network. Valid values are:

    • wpapsk - WPA Personal (PSK) with WPA2/WPA3 options
    • wpaeap - WPA Enterprise (802.1x)
    • open - Open network (no encryption)
    site string
    The name of the UniFi site where the wireless network should be created. If not specified, the default site will be used.
    uapsd boolean
    Enable Unscheduled Automatic Power Save Delivery to improve battery life for mobile devices.
    userGroupId string
    The ID of the user group that defines the rate limiting and firewall rules for clients on this network.
    wlanBand string
    Radio band selection. Valid values:

    • both - Both 2.4GHz and 5GHz (default)
    • 2g - 2.4GHz only
    • 5g - 5GHz only
    wpa3Support boolean
    Enable WPA3 security protocol. Requires security to be set to wpapsk and PMF mode to be enabled. WPA3 provides enhanced security features over WPA2.
    wpa3Transition boolean
    Enable WPA3 transition mode, which allows both WPA2 and WPA3 clients to connect. This provides backward compatibility while gradually transitioning to WPA3. Requires security to be set to wpapsk and wpa3_support to be true.
    ap_group_ids Sequence[str]
    IDs of the AP groups that should broadcast this SSID. Used to control which access points broadcast this network.
    bss_transition bool
    Enable BSS Transition Management to help clients roam between APs more efficiently.
    fast_roaming_enabled bool
    Enable 802.11r Fast BSS Transition for seamless roaming between APs. Requires client device support.
    hide_ssid bool
    When enabled, the access points will not broadcast the network name (SSID). Clients will need to manually enter the SSID to connect.
    is_guest bool
    Mark this as a guest network. Guest networks are isolated from other networks and can have special restrictions like captive portals.
    l2_isolation bool
    Isolates wireless clients from each other at layer 2 (ethernet) level. When enabled, devices on this WLAN cannot communicate directly with each other, improving security especially for guest networks or IoT devices. Each client can only communicate with the gateway/router.
    mac_filter_enabled bool
    Enable MAC address filtering to control network access based on client MAC addresses. Works in conjunction with mac_filter_list and mac_filter_policy.
    mac_filter_lists Sequence[str]
    List of MAC addresses to filter in XX:XX:XX:XX:XX:XX format. Only applied when mac_filter_enabled is true. MAC addresses are case-insensitive.
    mac_filter_policy str
    MAC address filter policy. Valid values are:

    • allow - Only allow listed MAC addresses
    • deny - Block listed MAC addresses
    minimum_data_rate2g_kbps int
    Minimum data rate for 2.4GHz devices in Kbps. Use 0 to disable. Valid values: 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, and 54000
    minimum_data_rate5g_kbps int
    Minimum data rate for 5GHz devices in Kbps. Use 0 to disable. Valid values: 6000, 9000, 12000, 18000, 24000, 36000, 48000, and 54000
    multicast_enhance bool
    Enable multicast enhancement to convert multicast traffic to unicast for better reliability and performance, especially for applications like video streaming.
    name str
    The SSID (network name) that will be broadcast by the access points. Must be between 1 and 32 characters long.
    network_id str
    ID of the network (VLAN) for this SSID. Used to assign the WLAN to a specific network segment.
    no2ghz_oui bool
    When enabled, devices from specific manufacturers (identified by their OUI - Organizationally Unique Identifier) will be prevented from connecting on 2.4GHz and forced to use 5GHz. This improves overall network performance by ensuring capable devices use the less congested 5GHz band. Common examples include newer smartphones and laptops.
    passphrase str
    The WPA pre-shared key (password) for the network. Required when security is not set to open.
    pmf_mode str
    Protected Management Frames (PMF) mode. It cannot be disabled if using WPA3. Valid values are:

    • required - All clients must support PMF (required for WPA3)
    • optional - Clients can optionally use PMF (recommended when transitioning from WPA2 to WPA3)
    • disabled - PMF is disabled (not compatible with WPA3)
    proxy_arp bool
    Enable ARP proxy on this WLAN. When enabled, the UniFi controller will respond to ARP requests on behalf of clients, reducing broadcast traffic and potentially improving network performance. This is particularly useful in high-density wireless environments.
    radius_profile_id str
    ID of the RADIUS profile to use for WPA Enterprise authentication (when security is 'wpaeap'). Reference existing profiles using the unifi.RadiusProfile data source.
    schedules Sequence[WlanScheduleArgs]
    Time-based access control configuration for the wireless network. Allows automatic enabling/disabling of the network on specified schedules.
    security str
    The security protocol for the wireless network. Valid values are:

    • wpapsk - WPA Personal (PSK) with WPA2/WPA3 options
    • wpaeap - WPA Enterprise (802.1x)
    • open - Open network (no encryption)
    site str
    The name of the UniFi site where the wireless network should be created. If not specified, the default site will be used.
    uapsd bool
    Enable Unscheduled Automatic Power Save Delivery to improve battery life for mobile devices.
    user_group_id str
    The ID of the user group that defines the rate limiting and firewall rules for clients on this network.
    wlan_band str
    Radio band selection. Valid values:

    • both - Both 2.4GHz and 5GHz (default)
    • 2g - 2.4GHz only
    • 5g - 5GHz only
    wpa3_support bool
    Enable WPA3 security protocol. Requires security to be set to wpapsk and PMF mode to be enabled. WPA3 provides enhanced security features over WPA2.
    wpa3_transition bool
    Enable WPA3 transition mode, which allows both WPA2 and WPA3 clients to connect. This provides backward compatibility while gradually transitioning to WPA3. Requires security to be set to wpapsk and wpa3_support to be true.
    apGroupIds List<String>
    IDs of the AP groups that should broadcast this SSID. Used to control which access points broadcast this network.
    bssTransition Boolean
    Enable BSS Transition Management to help clients roam between APs more efficiently.
    fastRoamingEnabled Boolean
    Enable 802.11r Fast BSS Transition for seamless roaming between APs. Requires client device support.
    hideSsid Boolean
    When enabled, the access points will not broadcast the network name (SSID). Clients will need to manually enter the SSID to connect.
    isGuest Boolean
    Mark this as a guest network. Guest networks are isolated from other networks and can have special restrictions like captive portals.
    l2Isolation Boolean
    Isolates wireless clients from each other at layer 2 (ethernet) level. When enabled, devices on this WLAN cannot communicate directly with each other, improving security especially for guest networks or IoT devices. Each client can only communicate with the gateway/router.
    macFilterEnabled Boolean
    Enable MAC address filtering to control network access based on client MAC addresses. Works in conjunction with mac_filter_list and mac_filter_policy.
    macFilterLists List<String>
    List of MAC addresses to filter in XX:XX:XX:XX:XX:XX format. Only applied when mac_filter_enabled is true. MAC addresses are case-insensitive.
    macFilterPolicy String
    MAC address filter policy. Valid values are:

    • allow - Only allow listed MAC addresses
    • deny - Block listed MAC addresses
    minimumDataRate2gKbps Number
    Minimum data rate for 2.4GHz devices in Kbps. Use 0 to disable. Valid values: 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, and 54000
    minimumDataRate5gKbps Number
    Minimum data rate for 5GHz devices in Kbps. Use 0 to disable. Valid values: 6000, 9000, 12000, 18000, 24000, 36000, 48000, and 54000
    multicastEnhance Boolean
    Enable multicast enhancement to convert multicast traffic to unicast for better reliability and performance, especially for applications like video streaming.
    name String
    The SSID (network name) that will be broadcast by the access points. Must be between 1 and 32 characters long.
    networkId String
    ID of the network (VLAN) for this SSID. Used to assign the WLAN to a specific network segment.
    no2ghzOui Boolean
    When enabled, devices from specific manufacturers (identified by their OUI - Organizationally Unique Identifier) will be prevented from connecting on 2.4GHz and forced to use 5GHz. This improves overall network performance by ensuring capable devices use the less congested 5GHz band. Common examples include newer smartphones and laptops.
    passphrase String
    The WPA pre-shared key (password) for the network. Required when security is not set to open.
    pmfMode String
    Protected Management Frames (PMF) mode. It cannot be disabled if using WPA3. Valid values are:

    • required - All clients must support PMF (required for WPA3)
    • optional - Clients can optionally use PMF (recommended when transitioning from WPA2 to WPA3)
    • disabled - PMF is disabled (not compatible with WPA3)
    proxyArp Boolean
    Enable ARP proxy on this WLAN. When enabled, the UniFi controller will respond to ARP requests on behalf of clients, reducing broadcast traffic and potentially improving network performance. This is particularly useful in high-density wireless environments.
    radiusProfileId String
    ID of the RADIUS profile to use for WPA Enterprise authentication (when security is 'wpaeap'). Reference existing profiles using the unifi.RadiusProfile data source.
    schedules List<Property Map>
    Time-based access control configuration for the wireless network. Allows automatic enabling/disabling of the network on specified schedules.
    security String
    The security protocol for the wireless network. Valid values are:

    • wpapsk - WPA Personal (PSK) with WPA2/WPA3 options
    • wpaeap - WPA Enterprise (802.1x)
    • open - Open network (no encryption)
    site String
    The name of the UniFi site where the wireless network should be created. If not specified, the default site will be used.
    uapsd Boolean
    Enable Unscheduled Automatic Power Save Delivery to improve battery life for mobile devices.
    userGroupId String
    The ID of the user group that defines the rate limiting and firewall rules for clients on this network.
    wlanBand String
    Radio band selection. Valid values:

    • both - Both 2.4GHz and 5GHz (default)
    • 2g - 2.4GHz only
    • 5g - 5GHz only
    wpa3Support Boolean
    Enable WPA3 security protocol. Requires security to be set to wpapsk and PMF mode to be enabled. WPA3 provides enhanced security features over WPA2.
    wpa3Transition Boolean
    Enable WPA3 transition mode, which allows both WPA2 and WPA3 clients to connect. This provides backward compatibility while gradually transitioning to WPA3. Requires security to be set to wpapsk and wpa3_support to be true.

    Supporting Types

    WlanSchedule, WlanScheduleArgs

    DayOfWeek string
    Day of week. Valid values: sun, mon, tue, wed, thu, fri, sat.
    Duration int
    Duration in minutes that the network should remain active.
    StartHour int
    Start hour in 24-hour format (0-23).
    Name string
    Friendly name for this schedule block (e.g., 'Business Hours', 'Weekend Access').
    StartMinute int
    Start minute (0-59).
    DayOfWeek string
    Day of week. Valid values: sun, mon, tue, wed, thu, fri, sat.
    Duration int
    Duration in minutes that the network should remain active.
    StartHour int
    Start hour in 24-hour format (0-23).
    Name string
    Friendly name for this schedule block (e.g., 'Business Hours', 'Weekend Access').
    StartMinute int
    Start minute (0-59).
    dayOfWeek String
    Day of week. Valid values: sun, mon, tue, wed, thu, fri, sat.
    duration Integer
    Duration in minutes that the network should remain active.
    startHour Integer
    Start hour in 24-hour format (0-23).
    name String
    Friendly name for this schedule block (e.g., 'Business Hours', 'Weekend Access').
    startMinute Integer
    Start minute (0-59).
    dayOfWeek string
    Day of week. Valid values: sun, mon, tue, wed, thu, fri, sat.
    duration number
    Duration in minutes that the network should remain active.
    startHour number
    Start hour in 24-hour format (0-23).
    name string
    Friendly name for this schedule block (e.g., 'Business Hours', 'Weekend Access').
    startMinute number
    Start minute (0-59).
    day_of_week str
    Day of week. Valid values: sun, mon, tue, wed, thu, fri, sat.
    duration int
    Duration in minutes that the network should remain active.
    start_hour int
    Start hour in 24-hour format (0-23).
    name str
    Friendly name for this schedule block (e.g., 'Business Hours', 'Weekend Access').
    start_minute int
    Start minute (0-59).
    dayOfWeek String
    Day of week. Valid values: sun, mon, tue, wed, thu, fri, sat.
    duration Number
    Duration in minutes that the network should remain active.
    startHour Number
    Start hour in 24-hour format (0-23).
    name String
    Friendly name for this schedule block (e.g., 'Business Hours', 'Weekend Access').
    startMinute Number
    Start minute (0-59).

    Import

    import from provider configured site

    $ pulumi import unifi:index/wlan:Wlan mywlan 5dc28e5e9106d105bdc87217

    import from another site

    $ pulumi import unifi:index/wlan:Wlan mywlan bfa2l6i7:5dc28e5e9106d105bdc87217

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    unifi pulumiverse/pulumi-unifi
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the unifi Terraform Provider.
    unifi logo
    Unifi v0.2.0 published on Tuesday, Feb 17, 2026 by Pulumiverse
    Schema (JSON)
    pulumiverse/pulumi-unifi
      Meet Neo: Your AI Platform Teammate