@pulumi/juniper-mist
Version:
A Pulumi package for creating and managing Juniper Mist resources.
1,244 lines • 47.3 kB
TypeScript
import * as pulumi from "@pulumi/pulumi";
import * as inputs from "../types/input";
import * as outputs from "../types/output";
/**
* This resource manages the Org Wlans.
*
* The WLAN object contains all the required configuration to broadcast an SSID (Authentication, VLAN, ...)
*
* ## Example Usage
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as junipermist from "@pulumi/juniper-mist";
*
* const wlanOne = new junipermist.org.Wlan("wlan_one", {
* ssid: "wlan_one",
* orgId: terraformTest.id,
* templateId: test101.id,
* bands: [
* "5",
* "6",
* ],
* vlanEnabled: true,
* vlanId: "143",
* wlanLimitUp: "10000",
* wlanLimitDown: "20000",
* clientLimitUp: "512",
* clientLimitDown: "1000",
* auth: {
* type: "psk",
* psk: "secretpsk",
* },
* "interface": "all",
* });
* ```
*
* ## Import
*
* Using `pulumi import`, import `junipermist.org.Wlan` with:
* Org WLAN can be imported by specifying the orgId and the wlanId
*
* ```sh
* $ pulumi import junipermist:org/wlan:Wlan wlan_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309
* ```
*/
export declare class Wlan extends pulumi.CustomResource {
/**
* Get an existing Wlan resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: WlanState, opts?: pulumi.CustomResourceOptions): Wlan;
/**
* Returns true if the given object is an instance of Wlan. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj: any): obj is Wlan;
/**
* Enable coa-immediate-update and address-change-immediate-update on the access profile.
*/
readonly acctImmediateUpdate: pulumi.Output<boolean>;
/**
* How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled
*/
readonly acctInterimInterval: pulumi.Output<number>;
/**
* RADIUS accounting servers used by this WLAN
*/
readonly acctServers: pulumi.Output<outputs.org.WlanAcctServer[]>;
/**
* Integration settings for AirWatch device compliance on this WLAN
*/
readonly airwatch: pulumi.Output<outputs.org.WlanAirwatch>;
/**
* Only applicable when `limitBcast`==`true`, which allows or disallows ipv6 Neighbor Discovery packets to go through
*/
readonly allowIpv6Ndp: pulumi.Output<boolean>;
/**
* Only applicable when `limitBcast`==`true`, which allows mDNS / Bonjour packets to go through
*/
readonly allowMdns: pulumi.Output<boolean>;
/**
* Only applicable when `limitBcast`==`true`, which allows SSDP
*/
readonly allowSsdp: pulumi.Output<boolean>;
/**
* Access point identifiers used when `applyTo`==`aps`
*/
readonly apIds: pulumi.Output<string[]>;
/**
* Bandwidth limits for applications on this WLAN
*/
readonly appLimit: pulumi.Output<outputs.org.WlanAppLimit | undefined>;
/**
* QoS rules for application traffic on this WLAN
*/
readonly appQos: pulumi.Output<outputs.org.WlanAppQos>;
/**
* Scope that determines where this WLAN is applied
*/
readonly applyTo: pulumi.Output<string>;
/**
* Whether to enable smart arp filter
*/
readonly arpFilter: pulumi.Output<boolean>;
/**
* Settings that control client authentication for this WLAN
*/
readonly auth: pulumi.Output<outputs.org.WlanAuth | undefined>;
/**
* RADIUS authentication server selection behavior for this WLAN
*/
readonly authServerSelection: pulumi.Output<string>;
/**
* RADIUS authentication servers used by this WLAN. Required when `auth.type`==`eap`
*/
readonly authServers: pulumi.Output<outputs.org.WlanAuthServer[]>;
/**
* Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers
*/
readonly authServersNasId: pulumi.Output<string>;
/**
* Optional, NAS-IP-ADDRESS to use
*/
readonly authServersNasIp: pulumi.Output<string>;
/**
* RADIUS auth session retries. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘retries’ are set to value of auth_servers_retries. ‘max-requests’ is also set when setting authServersRetries and is set to default value to 3.
*/
readonly authServersRetries: pulumi.Output<number | undefined>;
/**
* RADIUS auth session timeout. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘quite-period’ and ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when setting authServersTimeout and is set to default value of 10.
*/
readonly authServersTimeout: pulumi.Output<number | undefined>;
/**
* Whether to enable band_steering, this works only when band==both
*/
readonly bandSteer: pulumi.Output<boolean>;
/**
* Force dualBand capable client to connect to 5G
*/
readonly bandSteerForceBand5: pulumi.Output<boolean | undefined>;
/**
* list of radios that the wlan should apply to. enum: `24`, `5`, `6`
*/
readonly bands: pulumi.Output<string[] | undefined>;
/**
* Whether to block the clients in the blacklist (up to first 256 macs)
*/
readonly blockBlacklistClients: pulumi.Output<boolean | undefined>;
/**
* Service discovery gateway settings for Bonjour traffic on this WLAN
*/
readonly bonjour: pulumi.Output<outputs.org.WlanBonjour | undefined>;
/**
* Central web authentication settings for Cisco CWA on this WLAN
*/
readonly ciscoCwa: pulumi.Output<outputs.org.WlanCiscoCwa>;
/**
* Downlink bandwidth limit applied per client
*/
readonly clientLimitDown: pulumi.Output<string>;
/**
* If downlink limiting per-client is enabled
*/
readonly clientLimitDownEnabled: pulumi.Output<boolean | undefined>;
/**
* Uplink bandwidth limit applied per client
*/
readonly clientLimitUp: pulumi.Output<string>;
/**
* If uplink limiting per-client is enabled
*/
readonly clientLimitUpEnabled: pulumi.Output<boolean | undefined>;
/**
* RADIUS Change of Authorization servers available to this WLAN
*/
readonly coaServers: pulumi.Output<outputs.org.WlanCoaServer[] | undefined>;
/**
* Some old WLAN drivers may not be compatible
*/
readonly disable11ax: pulumi.Output<boolean>;
/**
* To disable Wi-Fi 7 EHT IEs
*/
readonly disable11be: pulumi.Output<boolean | undefined>;
/**
* To disable ht or vht rates
*/
readonly disableHtVhtRates: pulumi.Output<boolean | undefined>;
/**
* whether to disable Message-Authenticator Check, which is used to verify the integrity of RADIUS messages, default is false (i.e. for better security)
*/
readonly disableMessageAuthenticatorCheck: pulumi.Output<boolean | undefined>;
/**
* Whether to disable U-APSD
*/
readonly disableUapsd: pulumi.Output<boolean>;
/**
* Disable sending v2 roam notification messages
*/
readonly disableV1RoamNotify: pulumi.Output<boolean | undefined>;
/**
* Disable sending v2 roam notification messages
*/
readonly disableV2RoamNotify: pulumi.Output<boolean | undefined>;
/**
* When any of the following is true, this WLAN will be disabled
* * cannot get IP
* * cannot obtain default gateway
* * cannot reach default gateway
*/
readonly disableWhenGatewayUnreachable: pulumi.Output<boolean | undefined>;
/**
* Whether to disable this WLAN when the configured Mist tunnel is down
*/
readonly disableWhenMxtunnelDown: pulumi.Output<boolean | undefined>;
/**
* Whether to disable WMM
*/
readonly disableWmm: pulumi.Output<boolean>;
/**
* RADIUS group based DNS server rewrite settings for this WLAN
*/
readonly dnsServerRewrite: pulumi.Output<outputs.org.WlanDnsServerRewrite | undefined>;
/**
* Delivery Traffic Indication Message interval for this WLAN
*/
readonly dtim: pulumi.Output<number>;
/**
* Per-user PSK selection settings for this WLAN
*/
readonly dynamicPsk: pulumi.Output<outputs.org.WlanDynamicPsk | undefined>;
/**
* VLAN assignment settings for 802.1X dynamic VLANs
*/
readonly dynamicVlan: pulumi.Output<outputs.org.WlanDynamicVlan | undefined>;
/**
* Enable FTM (Fine-Time Measurement, 802.11mc); configures the AP as an FTM Responder (target), allowing clients to perform ranging requests against it
*/
readonly enableFtm: pulumi.Output<boolean>;
/**
* Enable AP-AP keycaching via multicast
*/
readonly enableLocalKeycaching: pulumi.Output<boolean | undefined>;
/**
* By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where client is a wireless bridge (DHCP packets for other MACs will need to be forwarded), wirelessBridging can be enabled
*/
readonly enableWirelessBridging: pulumi.Output<boolean | undefined>;
/**
* If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcpTracking will cut down DHCP response packets to be forwarded to wireless
*/
readonly enableWirelessBridgingDhcpTracking: pulumi.Output<boolean | undefined>;
/**
* If this wlan is enabled
*/
readonly enabled: pulumi.Output<boolean>;
/**
* If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .
*/
readonly fastDot1xTimers: pulumi.Output<boolean | undefined>;
/**
* Whether to hide SSID in beacon
*/
readonly hideSsid: pulumi.Output<boolean>;
/**
* Include hostname inside IE in AP beacons / probe responses
*/
readonly hostnameIe: pulumi.Output<boolean>;
/**
* Passpoint and Hotspot 2.0 settings for this WLAN
*/
readonly hotspot20: pulumi.Output<outputs.org.WlanHotspot20 | undefined>;
/**
* DHCP Option 82 insertion settings for this WLAN
*/
readonly injectDhcpOption82: pulumi.Output<outputs.org.WlanInjectDhcpOption82 | undefined>;
/**
* Network interface or tunnel where this WLAN bridges client traffic
*/
readonly interface: pulumi.Output<string>;
/**
* Whether to stop clients to talk to each other
*/
readonly isolation: pulumi.Output<boolean | undefined>;
/**
* If isolation is enabled, whether to deny clients to talk to L2 on the LAN
*/
readonly l2Isolation: pulumi.Output<boolean | undefined>;
/**
* Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.
*/
readonly legacyOverds: pulumi.Output<boolean | undefined>;
/**
* Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)
*/
readonly limitBcast: pulumi.Output<boolean>;
/**
* Limit probe response base on some heuristic rules
*/
readonly limitProbeResponse: pulumi.Output<boolean>;
/**
* Max idle time in seconds
*/
readonly maxIdletime: pulumi.Output<number>;
/**
* Maximum number of client connected to the SSID. `0` means unlimited
*/
readonly maxNumClients: pulumi.Output<number | undefined>;
/**
* Juniper Mist NAC settings used by this WLAN
*/
readonly mistNac: pulumi.Output<outputs.org.WlanMistNac>;
/**
* Managed service provider identifier associated with this WLAN
*/
readonly mspId: pulumi.Output<string>;
/**
* Mist Tunnel identifiers used when `interface`==`mxtunnel`
*/
readonly mxtunnelIds: pulumi.Output<string[]>;
/**
* Mist Tunnel names used when `interface`==`siteMxedge`
*/
readonly mxtunnelNames: pulumi.Output<string[]>;
/**
* Whether to only allow client to use DNS that we’ve learned from DHCP response
*/
readonly noStaticDns: pulumi.Output<boolean>;
/**
* Whether to only allow client that we’ve learned from DHCP exchange to talk
*/
readonly noStaticIp: pulumi.Output<boolean>;
/**
* Owning organization associated with this WLAN
*/
readonly orgId: pulumi.Output<string>;
/**
* Guest portal settings for this WLAN
*/
readonly portal: pulumi.Output<outputs.org.WlanPortal>;
/**
* Guest portal hostnames that clients may reach before authorization
*/
readonly portalAllowedHostnames: pulumi.Output<string[]>;
/**
* Guest portal CIDR subnets that clients may reach before authorization
*/
readonly portalAllowedSubnets: pulumi.Output<string[]>;
/**
* API secret (auto-generated) that can be used to sign guest authorization requests, only generated when auth is set to `external`
*/
readonly portalApiSecret: pulumi.Output<string>;
/**
* Guest portal hostnames denied before authorization, taking precedence over allowed hostnames
*/
readonly portalDeniedHostnames: pulumi.Output<string[]>;
/**
* Url of portal background image
*/
readonly portalImage: pulumi.Output<string>;
/**
* URL used in the SSO process, auto-generated when auth is set to `sso`
*/
readonly portalSsoUrl: pulumi.Output<string>;
/**
* Quality-of-service settings for WLAN client traffic
*/
readonly qos: pulumi.Output<outputs.org.WlanQos>;
/**
* TLS-secured RADIUS transport settings for this WLAN
*/
readonly radsec: pulumi.Output<outputs.org.WlanRadsec>;
/**
* Data rate settings by RF band for this WLAN
*/
readonly rateset: pulumi.Output<{
[key: string]: outputs.org.WlanRateset;
}>;
/**
* When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)
*/
readonly reconnectClientsWhenRoamingMxcluster: pulumi.Output<boolean | undefined>;
/**
* Fast roaming mode configured for this WLAN
*/
readonly roamMode: pulumi.Output<string | undefined>;
/**
* Operating schedule controlling when this WLAN is active
*/
readonly schedule: pulumi.Output<outputs.org.WlanSchedule>;
/**
* Whether to exclude this WLAN from SLE metrics
*/
readonly sleExcluded: pulumi.Output<boolean | undefined>;
/**
* Name of the SSID
*/
readonly ssid: pulumi.Output<string>;
/**
* Identifier of the WLAN template associated with this WLAN
*/
readonly templateId: pulumi.Output<string>;
/**
* If `auth.type`==`eap` or `auth.type`==`psk`, should only be set for legacy client, such as pre-2004, 802.11b devices
*/
readonly useEapolV1: pulumi.Output<boolean>;
/**
* If vlan tagging is enabled
*/
readonly vlanEnabled: pulumi.Output<boolean>;
/**
* Default VLAN ID, range, or variable used when `vlanEnabled`==`true`
*/
readonly vlanId: pulumi.Output<string | undefined>;
/**
* Pool of VLAN IDs used when `vlanEnabled`==`true` and `vlanPooling`==`true`
*/
readonly vlanIds: pulumi.Output<string[]>;
/**
* Requires `vlanEnabled`==`true` to be set to `true`. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm
*/
readonly vlanPooling: pulumi.Output<boolean>;
/**
* Downlink bandwidth limit applied to the whole WLAN
*/
readonly wlanLimitDown: pulumi.Output<string>;
/**
* If downlink limiting for whole wlan is enabled
*/
readonly wlanLimitDownEnabled: pulumi.Output<boolean | undefined>;
/**
* Uplink bandwidth limit applied to the whole WLAN
*/
readonly wlanLimitUp: pulumi.Output<string>;
/**
* If uplink limiting for whole wlan is enabled
*/
readonly wlanLimitUpEnabled: pulumi.Output<boolean | undefined>;
/**
* Identifiers of WxLAN tags used when `applyTo`==`wxtags`
*/
readonly wxtagIds: pulumi.Output<string[]>;
/**
* When `interface`=`wxtunnel`, id of the WXLAN Tunnel
*/
readonly wxtunnelId: pulumi.Output<string>;
/**
* When `interface`=`wxtunnel`, remote tunnel identifier
*/
readonly wxtunnelRemoteId: pulumi.Output<string>;
/**
* Create a Wlan resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name: string, args: WlanArgs, opts?: pulumi.CustomResourceOptions);
}
/**
* Input properties used for looking up and filtering Wlan resources.
*/
export interface WlanState {
/**
* Enable coa-immediate-update and address-change-immediate-update on the access profile.
*/
acctImmediateUpdate?: pulumi.Input<boolean | undefined>;
/**
* How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled
*/
acctInterimInterval?: pulumi.Input<number | undefined>;
/**
* RADIUS accounting servers used by this WLAN
*/
acctServers?: pulumi.Input<pulumi.Input<inputs.org.WlanAcctServer>[] | undefined>;
/**
* Integration settings for AirWatch device compliance on this WLAN
*/
airwatch?: pulumi.Input<inputs.org.WlanAirwatch | undefined>;
/**
* Only applicable when `limitBcast`==`true`, which allows or disallows ipv6 Neighbor Discovery packets to go through
*/
allowIpv6Ndp?: pulumi.Input<boolean | undefined>;
/**
* Only applicable when `limitBcast`==`true`, which allows mDNS / Bonjour packets to go through
*/
allowMdns?: pulumi.Input<boolean | undefined>;
/**
* Only applicable when `limitBcast`==`true`, which allows SSDP
*/
allowSsdp?: pulumi.Input<boolean | undefined>;
/**
* Access point identifiers used when `applyTo`==`aps`
*/
apIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Bandwidth limits for applications on this WLAN
*/
appLimit?: pulumi.Input<inputs.org.WlanAppLimit | undefined>;
/**
* QoS rules for application traffic on this WLAN
*/
appQos?: pulumi.Input<inputs.org.WlanAppQos | undefined>;
/**
* Scope that determines where this WLAN is applied
*/
applyTo?: pulumi.Input<string | undefined>;
/**
* Whether to enable smart arp filter
*/
arpFilter?: pulumi.Input<boolean | undefined>;
/**
* Settings that control client authentication for this WLAN
*/
auth?: pulumi.Input<inputs.org.WlanAuth | undefined>;
/**
* RADIUS authentication server selection behavior for this WLAN
*/
authServerSelection?: pulumi.Input<string | undefined>;
/**
* RADIUS authentication servers used by this WLAN. Required when `auth.type`==`eap`
*/
authServers?: pulumi.Input<pulumi.Input<inputs.org.WlanAuthServer>[] | undefined>;
/**
* Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers
*/
authServersNasId?: pulumi.Input<string | undefined>;
/**
* Optional, NAS-IP-ADDRESS to use
*/
authServersNasIp?: pulumi.Input<string | undefined>;
/**
* RADIUS auth session retries. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘retries’ are set to value of auth_servers_retries. ‘max-requests’ is also set when setting authServersRetries and is set to default value to 3.
*/
authServersRetries?: pulumi.Input<number | undefined>;
/**
* RADIUS auth session timeout. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘quite-period’ and ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when setting authServersTimeout and is set to default value of 10.
*/
authServersTimeout?: pulumi.Input<number | undefined>;
/**
* Whether to enable band_steering, this works only when band==both
*/
bandSteer?: pulumi.Input<boolean | undefined>;
/**
* Force dualBand capable client to connect to 5G
*/
bandSteerForceBand5?: pulumi.Input<boolean | undefined>;
/**
* list of radios that the wlan should apply to. enum: `24`, `5`, `6`
*/
bands?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Whether to block the clients in the blacklist (up to first 256 macs)
*/
blockBlacklistClients?: pulumi.Input<boolean | undefined>;
/**
* Service discovery gateway settings for Bonjour traffic on this WLAN
*/
bonjour?: pulumi.Input<inputs.org.WlanBonjour | undefined>;
/**
* Central web authentication settings for Cisco CWA on this WLAN
*/
ciscoCwa?: pulumi.Input<inputs.org.WlanCiscoCwa | undefined>;
/**
* Downlink bandwidth limit applied per client
*/
clientLimitDown?: pulumi.Input<string | undefined>;
/**
* If downlink limiting per-client is enabled
*/
clientLimitDownEnabled?: pulumi.Input<boolean | undefined>;
/**
* Uplink bandwidth limit applied per client
*/
clientLimitUp?: pulumi.Input<string | undefined>;
/**
* If uplink limiting per-client is enabled
*/
clientLimitUpEnabled?: pulumi.Input<boolean | undefined>;
/**
* RADIUS Change of Authorization servers available to this WLAN
*/
coaServers?: pulumi.Input<pulumi.Input<inputs.org.WlanCoaServer>[] | undefined>;
/**
* Some old WLAN drivers may not be compatible
*/
disable11ax?: pulumi.Input<boolean | undefined>;
/**
* To disable Wi-Fi 7 EHT IEs
*/
disable11be?: pulumi.Input<boolean | undefined>;
/**
* To disable ht or vht rates
*/
disableHtVhtRates?: pulumi.Input<boolean | undefined>;
/**
* whether to disable Message-Authenticator Check, which is used to verify the integrity of RADIUS messages, default is false (i.e. for better security)
*/
disableMessageAuthenticatorCheck?: pulumi.Input<boolean | undefined>;
/**
* Whether to disable U-APSD
*/
disableUapsd?: pulumi.Input<boolean | undefined>;
/**
* Disable sending v2 roam notification messages
*/
disableV1RoamNotify?: pulumi.Input<boolean | undefined>;
/**
* Disable sending v2 roam notification messages
*/
disableV2RoamNotify?: pulumi.Input<boolean | undefined>;
/**
* When any of the following is true, this WLAN will be disabled
* * cannot get IP
* * cannot obtain default gateway
* * cannot reach default gateway
*/
disableWhenGatewayUnreachable?: pulumi.Input<boolean | undefined>;
/**
* Whether to disable this WLAN when the configured Mist tunnel is down
*/
disableWhenMxtunnelDown?: pulumi.Input<boolean | undefined>;
/**
* Whether to disable WMM
*/
disableWmm?: pulumi.Input<boolean | undefined>;
/**
* RADIUS group based DNS server rewrite settings for this WLAN
*/
dnsServerRewrite?: pulumi.Input<inputs.org.WlanDnsServerRewrite | undefined>;
/**
* Delivery Traffic Indication Message interval for this WLAN
*/
dtim?: pulumi.Input<number | undefined>;
/**
* Per-user PSK selection settings for this WLAN
*/
dynamicPsk?: pulumi.Input<inputs.org.WlanDynamicPsk | undefined>;
/**
* VLAN assignment settings for 802.1X dynamic VLANs
*/
dynamicVlan?: pulumi.Input<inputs.org.WlanDynamicVlan | undefined>;
/**
* Enable FTM (Fine-Time Measurement, 802.11mc); configures the AP as an FTM Responder (target), allowing clients to perform ranging requests against it
*/
enableFtm?: pulumi.Input<boolean | undefined>;
/**
* Enable AP-AP keycaching via multicast
*/
enableLocalKeycaching?: pulumi.Input<boolean | undefined>;
/**
* By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where client is a wireless bridge (DHCP packets for other MACs will need to be forwarded), wirelessBridging can be enabled
*/
enableWirelessBridging?: pulumi.Input<boolean | undefined>;
/**
* If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcpTracking will cut down DHCP response packets to be forwarded to wireless
*/
enableWirelessBridgingDhcpTracking?: pulumi.Input<boolean | undefined>;
/**
* If this wlan is enabled
*/
enabled?: pulumi.Input<boolean | undefined>;
/**
* If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .
*/
fastDot1xTimers?: pulumi.Input<boolean | undefined>;
/**
* Whether to hide SSID in beacon
*/
hideSsid?: pulumi.Input<boolean | undefined>;
/**
* Include hostname inside IE in AP beacons / probe responses
*/
hostnameIe?: pulumi.Input<boolean | undefined>;
/**
* Passpoint and Hotspot 2.0 settings for this WLAN
*/
hotspot20?: pulumi.Input<inputs.org.WlanHotspot20 | undefined>;
/**
* DHCP Option 82 insertion settings for this WLAN
*/
injectDhcpOption82?: pulumi.Input<inputs.org.WlanInjectDhcpOption82 | undefined>;
/**
* Network interface or tunnel where this WLAN bridges client traffic
*/
interface?: pulumi.Input<string | undefined>;
/**
* Whether to stop clients to talk to each other
*/
isolation?: pulumi.Input<boolean | undefined>;
/**
* If isolation is enabled, whether to deny clients to talk to L2 on the LAN
*/
l2Isolation?: pulumi.Input<boolean | undefined>;
/**
* Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.
*/
legacyOverds?: pulumi.Input<boolean | undefined>;
/**
* Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)
*/
limitBcast?: pulumi.Input<boolean | undefined>;
/**
* Limit probe response base on some heuristic rules
*/
limitProbeResponse?: pulumi.Input<boolean | undefined>;
/**
* Max idle time in seconds
*/
maxIdletime?: pulumi.Input<number | undefined>;
/**
* Maximum number of client connected to the SSID. `0` means unlimited
*/
maxNumClients?: pulumi.Input<number | undefined>;
/**
* Juniper Mist NAC settings used by this WLAN
*/
mistNac?: pulumi.Input<inputs.org.WlanMistNac | undefined>;
/**
* Managed service provider identifier associated with this WLAN
*/
mspId?: pulumi.Input<string | undefined>;
/**
* Mist Tunnel identifiers used when `interface`==`mxtunnel`
*/
mxtunnelIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Mist Tunnel names used when `interface`==`siteMxedge`
*/
mxtunnelNames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Whether to only allow client to use DNS that we’ve learned from DHCP response
*/
noStaticDns?: pulumi.Input<boolean | undefined>;
/**
* Whether to only allow client that we’ve learned from DHCP exchange to talk
*/
noStaticIp?: pulumi.Input<boolean | undefined>;
/**
* Owning organization associated with this WLAN
*/
orgId?: pulumi.Input<string | undefined>;
/**
* Guest portal settings for this WLAN
*/
portal?: pulumi.Input<inputs.org.WlanPortal | undefined>;
/**
* Guest portal hostnames that clients may reach before authorization
*/
portalAllowedHostnames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Guest portal CIDR subnets that clients may reach before authorization
*/
portalAllowedSubnets?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* API secret (auto-generated) that can be used to sign guest authorization requests, only generated when auth is set to `external`
*/
portalApiSecret?: pulumi.Input<string | undefined>;
/**
* Guest portal hostnames denied before authorization, taking precedence over allowed hostnames
*/
portalDeniedHostnames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Url of portal background image
*/
portalImage?: pulumi.Input<string | undefined>;
/**
* URL used in the SSO process, auto-generated when auth is set to `sso`
*/
portalSsoUrl?: pulumi.Input<string | undefined>;
/**
* Quality-of-service settings for WLAN client traffic
*/
qos?: pulumi.Input<inputs.org.WlanQos | undefined>;
/**
* TLS-secured RADIUS transport settings for this WLAN
*/
radsec?: pulumi.Input<inputs.org.WlanRadsec | undefined>;
/**
* Data rate settings by RF band for this WLAN
*/
rateset?: pulumi.Input<{
[key: string]: pulumi.Input<inputs.org.WlanRateset>;
} | undefined>;
/**
* When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)
*/
reconnectClientsWhenRoamingMxcluster?: pulumi.Input<boolean | undefined>;
/**
* Fast roaming mode configured for this WLAN
*/
roamMode?: pulumi.Input<string | undefined>;
/**
* Operating schedule controlling when this WLAN is active
*/
schedule?: pulumi.Input<inputs.org.WlanSchedule | undefined>;
/**
* Whether to exclude this WLAN from SLE metrics
*/
sleExcluded?: pulumi.Input<boolean | undefined>;
/**
* Name of the SSID
*/
ssid?: pulumi.Input<string | undefined>;
/**
* Identifier of the WLAN template associated with this WLAN
*/
templateId?: pulumi.Input<string | undefined>;
/**
* If `auth.type`==`eap` or `auth.type`==`psk`, should only be set for legacy client, such as pre-2004, 802.11b devices
*/
useEapolV1?: pulumi.Input<boolean | undefined>;
/**
* If vlan tagging is enabled
*/
vlanEnabled?: pulumi.Input<boolean | undefined>;
/**
* Default VLAN ID, range, or variable used when `vlanEnabled`==`true`
*/
vlanId?: pulumi.Input<string | undefined>;
/**
* Pool of VLAN IDs used when `vlanEnabled`==`true` and `vlanPooling`==`true`
*/
vlanIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Requires `vlanEnabled`==`true` to be set to `true`. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm
*/
vlanPooling?: pulumi.Input<boolean | undefined>;
/**
* Downlink bandwidth limit applied to the whole WLAN
*/
wlanLimitDown?: pulumi.Input<string | undefined>;
/**
* If downlink limiting for whole wlan is enabled
*/
wlanLimitDownEnabled?: pulumi.Input<boolean | undefined>;
/**
* Uplink bandwidth limit applied to the whole WLAN
*/
wlanLimitUp?: pulumi.Input<string | undefined>;
/**
* If uplink limiting for whole wlan is enabled
*/
wlanLimitUpEnabled?: pulumi.Input<boolean | undefined>;
/**
* Identifiers of WxLAN tags used when `applyTo`==`wxtags`
*/
wxtagIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* When `interface`=`wxtunnel`, id of the WXLAN Tunnel
*/
wxtunnelId?: pulumi.Input<string | undefined>;
/**
* When `interface`=`wxtunnel`, remote tunnel identifier
*/
wxtunnelRemoteId?: pulumi.Input<string | undefined>;
}
/**
* The set of arguments for constructing a Wlan resource.
*/
export interface WlanArgs {
/**
* Enable coa-immediate-update and address-change-immediate-update on the access profile.
*/
acctImmediateUpdate?: pulumi.Input<boolean | undefined>;
/**
* How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled
*/
acctInterimInterval?: pulumi.Input<number | undefined>;
/**
* RADIUS accounting servers used by this WLAN
*/
acctServers?: pulumi.Input<pulumi.Input<inputs.org.WlanAcctServer>[] | undefined>;
/**
* Integration settings for AirWatch device compliance on this WLAN
*/
airwatch?: pulumi.Input<inputs.org.WlanAirwatch | undefined>;
/**
* Only applicable when `limitBcast`==`true`, which allows or disallows ipv6 Neighbor Discovery packets to go through
*/
allowIpv6Ndp?: pulumi.Input<boolean | undefined>;
/**
* Only applicable when `limitBcast`==`true`, which allows mDNS / Bonjour packets to go through
*/
allowMdns?: pulumi.Input<boolean | undefined>;
/**
* Only applicable when `limitBcast`==`true`, which allows SSDP
*/
allowSsdp?: pulumi.Input<boolean | undefined>;
/**
* Access point identifiers used when `applyTo`==`aps`
*/
apIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Bandwidth limits for applications on this WLAN
*/
appLimit?: pulumi.Input<inputs.org.WlanAppLimit | undefined>;
/**
* QoS rules for application traffic on this WLAN
*/
appQos?: pulumi.Input<inputs.org.WlanAppQos | undefined>;
/**
* Scope that determines where this WLAN is applied
*/
applyTo?: pulumi.Input<string | undefined>;
/**
* Whether to enable smart arp filter
*/
arpFilter?: pulumi.Input<boolean | undefined>;
/**
* Settings that control client authentication for this WLAN
*/
auth?: pulumi.Input<inputs.org.WlanAuth | undefined>;
/**
* RADIUS authentication server selection behavior for this WLAN
*/
authServerSelection?: pulumi.Input<string | undefined>;
/**
* RADIUS authentication servers used by this WLAN. Required when `auth.type`==`eap`
*/
authServers?: pulumi.Input<pulumi.Input<inputs.org.WlanAuthServer>[] | undefined>;
/**
* Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers
*/
authServersNasId?: pulumi.Input<string | undefined>;
/**
* Optional, NAS-IP-ADDRESS to use
*/
authServersNasIp?: pulumi.Input<string | undefined>;
/**
* RADIUS auth session retries. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘retries’ are set to value of auth_servers_retries. ‘max-requests’ is also set when setting authServersRetries and is set to default value to 3.
*/
authServersRetries?: pulumi.Input<number | undefined>;
/**
* RADIUS auth session timeout. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘quite-period’ and ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when setting authServersTimeout and is set to default value of 10.
*/
authServersTimeout?: pulumi.Input<number | undefined>;
/**
* Whether to enable band_steering, this works only when band==both
*/
bandSteer?: pulumi.Input<boolean | undefined>;
/**
* Force dualBand capable client to connect to 5G
*/
bandSteerForceBand5?: pulumi.Input<boolean | undefined>;
/**
* list of radios that the wlan should apply to. enum: `24`, `5`, `6`
*/
bands?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Whether to block the clients in the blacklist (up to first 256 macs)
*/
blockBlacklistClients?: pulumi.Input<boolean | undefined>;
/**
* Service discovery gateway settings for Bonjour traffic on this WLAN
*/
bonjour?: pulumi.Input<inputs.org.WlanBonjour | undefined>;
/**
* Central web authentication settings for Cisco CWA on this WLAN
*/
ciscoCwa?: pulumi.Input<inputs.org.WlanCiscoCwa | undefined>;
/**
* Downlink bandwidth limit applied per client
*/
clientLimitDown?: pulumi.Input<string | undefined>;
/**
* If downlink limiting per-client is enabled
*/
clientLimitDownEnabled?: pulumi.Input<boolean | undefined>;
/**
* Uplink bandwidth limit applied per client
*/
clientLimitUp?: pulumi.Input<string | undefined>;
/**
* If uplink limiting per-client is enabled
*/
clientLimitUpEnabled?: pulumi.Input<boolean | undefined>;
/**
* RADIUS Change of Authorization servers available to this WLAN
*/
coaServers?: pulumi.Input<pulumi.Input<inputs.org.WlanCoaServer>[] | undefined>;
/**
* Some old WLAN drivers may not be compatible
*/
disable11ax?: pulumi.Input<boolean | undefined>;
/**
* To disable Wi-Fi 7 EHT IEs
*/
disable11be?: pulumi.Input<boolean | undefined>;
/**
* To disable ht or vht rates
*/
disableHtVhtRates?: pulumi.Input<boolean | undefined>;
/**
* whether to disable Message-Authenticator Check, which is used to verify the integrity of RADIUS messages, default is false (i.e. for better security)
*/
disableMessageAuthenticatorCheck?: pulumi.Input<boolean | undefined>;
/**
* Whether to disable U-APSD
*/
disableUapsd?: pulumi.Input<boolean | undefined>;
/**
* Disable sending v2 roam notification messages
*/
disableV1RoamNotify?: pulumi.Input<boolean | undefined>;
/**
* Disable sending v2 roam notification messages
*/
disableV2RoamNotify?: pulumi.Input<boolean | undefined>;
/**
* When any of the following is true, this WLAN will be disabled
* * cannot get IP
* * cannot obtain default gateway
* * cannot reach default gateway
*/
disableWhenGatewayUnreachable?: pulumi.Input<boolean | undefined>;
/**
* Whether to disable this WLAN when the configured Mist tunnel is down
*/
disableWhenMxtunnelDown?: pulumi.Input<boolean | undefined>;
/**
* Whether to disable WMM
*/
disableWmm?: pulumi.Input<boolean | undefined>;
/**
* RADIUS group based DNS server rewrite settings for this WLAN
*/
dnsServerRewrite?: pulumi.Input<inputs.org.WlanDnsServerRewrite | undefined>;
/**
* Delivery Traffic Indication Message interval for this WLAN
*/
dtim?: pulumi.Input<number | undefined>;
/**
* Per-user PSK selection settings for this WLAN
*/
dynamicPsk?: pulumi.Input<inputs.org.WlanDynamicPsk | undefined>;
/**
* VLAN assignment settings for 802.1X dynamic VLANs
*/
dynamicVlan?: pulumi.Input<inputs.org.WlanDynamicVlan | undefined>;
/**
* Enable FTM (Fine-Time Measurement, 802.11mc); configures the AP as an FTM Responder (target), allowing clients to perform ranging requests against it
*/
enableFtm?: pulumi.Input<boolean | undefined>;
/**
* Enable AP-AP keycaching via multicast
*/
enableLocalKeycaching?: pulumi.Input<boolean | undefined>;
/**
* By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where client is a wireless bridge (DHCP packets for other MACs will need to be forwarded), wirelessBridging can be enabled
*/
enableWirelessBridging?: pulumi.Input<boolean | undefined>;
/**
* If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcpTracking will cut down DHCP response packets to be forwarded to wireless
*/
enableWirelessBridgingDhcpTracking?: pulumi.Input<boolean | undefined>;
/**
* If this wlan is enabled
*/
enabled?: pulumi.Input<boolean | undefined>;
/**
* If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .
*/
fastDot1xTimers?: pulumi.Input<boolean | undefined>;
/**
* Whether to hide SSID in beacon
*/
hideSsid?: pulumi.Input<boolean | undefined>;
/**
* Include hostname inside IE in AP beacons / probe responses
*/
hostnameIe?: pulumi.Input<boolean | undefined>;
/**
* Passpoint and Hotspot 2.0 settings for this WLAN
*/
hotspot20?: pulumi.Input<inputs.org.WlanHotspot20 | undefined>;
/**
* DHCP Option 82 insertion settings for this WLAN
*/
injectDhcpOption82?: pulumi.Input<inputs.org.WlanInjectDhcpOption82 | undefined>;
/**
* Network interface or tunnel where this WLAN bridges client traffic
*/
interface?: pulumi.Input<string | undefined>;
/**
* Whether to stop clients to talk to each other
*/
isolation?: pulumi.Input<boolean | undefined>;
/**
* If isolation is enabled, whether to deny clients to talk to L2 on the LAN
*/
l2Isolation?: pulumi.Input<boolean | undefined>;
/**
* Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.
*/
legacyOverds?: pulumi.Input<boolean | undefined>;
/**
* Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)
*/
limitBcast?: pulumi.Input<boolean | undefined>;
/**
* Limit probe response base on some heuristic rules
*/
limitProbeResponse?: pulumi.Input<boolean | undefined>;
/**
* Max idle time in seconds
*/
maxIdletime?: pulumi.Input<number | undefined>;
/**
* Maximum number of client connected to the SSID. `0` means unlimited
*/
maxNumClients?: pulumi.Input<number | undefined>;
/**
* Juniper Mist NAC settings used by this WLAN
*/
mistNac?: pulumi.Input<inputs.org.WlanMistNac | undefined>;
/**
* Mist Tunnel identifiers used when `interface`==`mxtunnel`
*/
mxtunnelIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Mist Tunnel names used when `interface`==`siteMxedge`
*/
mxtunnelNames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Whether to only allow client to use DNS that we’ve learned from DHCP response
*/
noStaticDns?: pulumi.Input<boolean | undefined>;
/**
* Whether to only allow client that we’ve learned from DHCP exchange to talk
*/
noStaticIp?: pulumi.Input<boolean | undefined>;
/**
* Owning organization associated with this WLAN
*/
orgId: pulumi.Input<string>;
/**
* Guest portal settings for this WLAN
*/
portal?: pulumi.Input<inputs.org.WlanPortal | undefined>;
/**
* Guest portal hostnames that clients may reach before authorization
*/
portalAllowedHostnames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Guest portal CIDR subnets that clients may reach before authorization
*/
portalAllowedSubnets?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Guest portal hostnames denied before authorization, taking precedence over allowed hostnames
*/
portalDeniedHostnames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Quality-of-service settings for WLAN client traffic
*/
qos?: pulumi.Input<inputs.org.WlanQos | undefined>;
/**
* TLS-secured RADIUS transport settings for this WLAN
*/
radsec?: pulumi.Input<inputs.org.WlanRadsec | undefined>;
/**
* Data rate settings by RF band for this WLAN
*/
rateset?: pulumi.Input<{
[key: string]: pulumi.Input<inputs.org.WlanRateset>;
} | undefined>;
/**
* When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)
*/
reconnectClientsWhenRoamingMxcluster?: pulumi.Input<boolean | undefined>;
/**
* Fast roaming mode configured for this WLAN
*/
roamMode?: pulumi.Input<string | undefined>;
/**
* Operating schedule controlling when this WLAN is active
*/
schedule?: pulumi.Input<inputs.org.WlanSchedule | undefined>;
/**
* Whether to exclude this WLAN from SLE metrics
*/
sleExcluded?: pulumi.Input<boolean | undefined>;
/**
* Name of the SSID
*/
ssid: pulumi.Input<string>;
/**
* Identifier of the WLAN template associated with this WLAN
*/
templateId: pulumi.Input<string>;
/**
* If `auth.type`==`eap` or `auth.type`==`psk`, should only be set for legacy client, such as pre-2004, 802.11b devices
*/
useEapolV1?: pulumi.Input<boolean | undefined>;
/**
* If vlan tagging is enabled
*/
vlanEnabled?: pulumi.Input<boolean | undefined>;
/**
* Default VLAN ID, range, or variable used when `vlanEnabled`==`true`
*/
vlanId?: pulumi.Input<string | undefined>;
/**
* Pool of VLAN IDs used when `vlanEnabled`==`true` and `vlanPooling`==`true`
*/
vlanIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* Requires `vlanEnabled`==`true` to be set to `true`. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm
*/
vlanPooling?: pulumi.Input<boolean | undefined>;
/**
* Downlink bandwidth limit applied to the whole WLAN
*/
wlanLimitDown?: pulumi.Input<string | undefined>;
/**
* If downlink limiting for whole wlan is enabled
*/
wlanLimitDownEnabled?: pulumi.Input<boolean | undefined>;
/**
* Uplink bandwidth limit applied to the whole WLAN
*/
wlanLimitUp?: pulumi.Input<string | undefined>;
/**
* If uplink limiting for whole wlan is enabled
*/
wlanLimitUpEnabled?: pulumi.Input<boolean | undefined>;
/**
* Identifiers of WxLAN tags used when `applyTo`==`wxtags`
*/
wxtagIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
/**
* When `interface`=`wxtunnel`, id of the WXLAN Tunnel
*/
wxtunnelId?: pulumi.Input<string | undefined>;
/**
* When `interface`=`wxtunnel`, remote tunnel identifier
*/
wxtunnelRemoteId?: pulumi.Input<string | undefined>;
}
//# sourceMappingURL=wlan.d.ts.map