@pulumi/juniper-mist
Version:
A Pulumi package for creating and managing Juniper Mist resources.
273 lines • 10.6 kB
TypeScript
import * as pulumi from "@pulumi/pulumi";
/**
* This resource manages NAC Tags (Auth Policy Labels).
*
* The NAC Tags can be used in the NAC Rules to define the matching criteria or the returned RADIUS Attributes
*
* ## Example Usage
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as junipermist from "@pulumi/juniper-mist";
*
* const tagOne = new junipermist.org.Nactag("tag_one", {
* name: "tag_one",
* type: "match",
* match: "client_mac",
* orgId: terraformTest.id,
* values: ["5c5b35*"],
* });
* ```
*
* ## Import
*
* Using `pulumi import`, import `junipermist.org.Nactag` with:
* NAC Tag can be imported by specifying the orgId and the nactagId
*
* ```sh
* $ pulumi import junipermist:org/nactag:Nactag nactag_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309
* ```
*/
export declare class Nactag extends pulumi.CustomResource {
/**
* Get an existing Nactag resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: NactagState, opts?: pulumi.CustomResourceOptions): Nactag;
/**
* Returns true if the given object is an instance of Nactag. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj: any): obj is Nactag;
/**
* Whether usermac result values can override this NAC tag when the result type is also supported by usermac
*/
readonly allowUsermacOverride: pulumi.Output<boolean | undefined>;
/**
* If `type`==`egressVlanNames`, list of egress VLAN names returned by the NAC rule
*/
readonly egressVlanNames: pulumi.Output<string[] | undefined>;
/**
* If `type`==`gbpTag`, GBP tag value returned by the NAC rule
*/
readonly gbpTag: pulumi.Output<string | undefined>;
/**
* If `type`==`match`, client or authentication attribute used for rule matching
*/
readonly match: pulumi.Output<string | undefined>;
/**
* This field is applicable only when `type`==`match`
* * `false`: means it is sufficient to match any of the values (i.e., match-any behavior)
* * `true`: means all values should be matched (i.e., match-all behavior)
*
*
* Currently it makes sense to set this field to `true` only if the `match`==`idpRole`, `match`==`usermacLabel` and `edrStatus`
*/
readonly matchAll: pulumi.Output<boolean | undefined>;
/**
* If `type`==`redirectNacportalId`, NAC portal ID used for client redirection
*/
readonly nacportalId: pulumi.Output<string | undefined>;
/**
* Human-readable name of the NAC tag
*/
readonly name: pulumi.Output<string>;
/**
* Org identifier that owns the NAC tag
*/
readonly orgId: pulumi.Output<string>;
/**
* If `type`==`radiusAttrs`, standard RADIUS attributes returned by the NAC rule
*/
readonly radiusAttrs: pulumi.Output<string[] | undefined>;
/**
* If `type`==`radiusGroup`, RADIUS group value returned by the NAC rule
*/
readonly radiusGroup: pulumi.Output<string | undefined>;
/**
* If `type`==`radiusVendorAttrs`, vendor-specific RADIUS attributes returned by the NAC rule
*/
readonly radiusVendorAttrs: pulumi.Output<string[] | undefined>;
/**
* If `type`==`sessionTimeout`, session timeout returned by the NAC rule, in seconds
*/
readonly sessionTimeout: pulumi.Output<number | undefined>;
/**
* NAC tag type that determines whether the tag is a matcher or a result attribute
*/
readonly type: pulumi.Output<string>;
/**
* If `type`==`usernameAttr`, attribute used to derive the username returned by the NAC rule
*/
readonly usernameAttr: pulumi.Output<string | undefined>;
/**
* If `type`==`match`, attribute values used by the NAC tag matcher
*/
readonly values: pulumi.Output<string[] | undefined>;
/**
* If `type`==`vlan`, VLAN name or ID returned by the NAC rule
*/
readonly vlan: pulumi.Output<string | undefined>;
/**
* Create a Nactag resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name: string, args: NactagArgs, opts?: pulumi.CustomResourceOptions);
}
/**
* Input properties used for looking up and filtering Nactag resources.
*/
export interface NactagState {
/**
* Whether usermac result values can override this NAC tag when the result type is also supported by usermac
*/
allowUsermacOverride?: pulumi.Input<boolean | undefined>;
/**
* If `type`==`egressVlanNames`, list of egress VLAN names returned by the NAC rule
*/
egressVlanNames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* If `type`==`gbpTag`, GBP tag value returned by the NAC rule
*/
gbpTag?: pulumi.Input<string | undefined>;
/**
* If `type`==`match`, client or authentication attribute used for rule matching
*/
match?: pulumi.Input<string | undefined>;
/**
* This field is applicable only when `type`==`match`
* * `false`: means it is sufficient to match any of the values (i.e., match-any behavior)
* * `true`: means all values should be matched (i.e., match-all behavior)
*
*
* Currently it makes sense to set this field to `true` only if the `match`==`idpRole`, `match`==`usermacLabel` and `edrStatus`
*/
matchAll?: pulumi.Input<boolean | undefined>;
/**
* If `type`==`redirectNacportalId`, NAC portal ID used for client redirection
*/
nacportalId?: pulumi.Input<string | undefined>;
/**
* Human-readable name of the NAC tag
*/
name?: pulumi.Input<string | undefined>;
/**
* Org identifier that owns the NAC tag
*/
orgId?: pulumi.Input<string | undefined>;
/**
* If `type`==`radiusAttrs`, standard RADIUS attributes returned by the NAC rule
*/
radiusAttrs?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* If `type`==`radiusGroup`, RADIUS group value returned by the NAC rule
*/
radiusGroup?: pulumi.Input<string | undefined>;
/**
* If `type`==`radiusVendorAttrs`, vendor-specific RADIUS attributes returned by the NAC rule
*/
radiusVendorAttrs?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* If `type`==`sessionTimeout`, session timeout returned by the NAC rule, in seconds
*/
sessionTimeout?: pulumi.Input<number | undefined>;
/**
* NAC tag type that determines whether the tag is a matcher or a result attribute
*/
type?: pulumi.Input<string | undefined>;
/**
* If `type`==`usernameAttr`, attribute used to derive the username returned by the NAC rule
*/
usernameAttr?: pulumi.Input<string | undefined>;
/**
* If `type`==`match`, attribute values used by the NAC tag matcher
*/
values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* If `type`==`vlan`, VLAN name or ID returned by the NAC rule
*/
vlan?: pulumi.Input<string | undefined>;
}
/**
* The set of arguments for constructing a Nactag resource.
*/
export interface NactagArgs {
/**
* Whether usermac result values can override this NAC tag when the result type is also supported by usermac
*/
allowUsermacOverride?: pulumi.Input<boolean | undefined>;
/**
* If `type`==`egressVlanNames`, list of egress VLAN names returned by the NAC rule
*/
egressVlanNames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* If `type`==`gbpTag`, GBP tag value returned by the NAC rule
*/
gbpTag?: pulumi.Input<string | undefined>;
/**
* If `type`==`match`, client or authentication attribute used for rule matching
*/
match?: pulumi.Input<string | undefined>;
/**
* This field is applicable only when `type`==`match`
* * `false`: means it is sufficient to match any of the values (i.e., match-any behavior)
* * `true`: means all values should be matched (i.e., match-all behavior)
*
*
* Currently it makes sense to set this field to `true` only if the `match`==`idpRole`, `match`==`usermacLabel` and `edrStatus`
*/
matchAll?: pulumi.Input<boolean | undefined>;
/**
* If `type`==`redirectNacportalId`, NAC portal ID used for client redirection
*/
nacportalId?: pulumi.Input<string | undefined>;
/**
* Human-readable name of the NAC tag
*/
name?: pulumi.Input<string | undefined>;
/**
* Org identifier that owns the NAC tag
*/
orgId: pulumi.Input<string>;
/**
* If `type`==`radiusAttrs`, standard RADIUS attributes returned by the NAC rule
*/
radiusAttrs?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* If `type`==`radiusGroup`, RADIUS group value returned by the NAC rule
*/
radiusGroup?: pulumi.Input<string | undefined>;
/**
* If `type`==`radiusVendorAttrs`, vendor-specific RADIUS attributes returned by the NAC rule
*/
radiusVendorAttrs?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* If `type`==`sessionTimeout`, session timeout returned by the NAC rule, in seconds
*/
sessionTimeout?: pulumi.Input<number | undefined>;
/**
* NAC tag type that determines whether the tag is a matcher or a result attribute
*/
type: pulumi.Input<string>;
/**
* If `type`==`usernameAttr`, attribute used to derive the username returned by the NAC rule
*/
usernameAttr?: pulumi.Input<string | undefined>;
/**
* If `type`==`match`, attribute values used by the NAC tag matcher
*/
values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* If `type`==`vlan`, VLAN name or ID returned by the NAC rule
*/
vlan?: pulumi.Input<string | undefined>;
}
//# sourceMappingURL=nactag.d.ts.map