UNPKG

@pulumi/meraki

Version:

A Pulumi package for creating and managing Cisco Meraki resources. Based on terraform-provider-meraki: version v0.2.0

814 lines (813 loc) 35.2 kB
import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; import * as outputs from "../types/output"; /** * ## Example Usage * * ## Import * * ```sh * $ pulumi import meraki:networks/wirelessSsids:WirelessSsids example "network_id,number" * ``` */ export declare class WirelessSsids extends pulumi.CustomResource { /** * Get an existing WirelessSsids resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input<pulumi.ID>, state?: WirelessSsidsState, opts?: pulumi.CustomResourceOptions): WirelessSsids; /** * Returns true if the given object is an instance of WirelessSsids. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is WirelessSsids; /** * The current setting for Active Directory. Only valid if splashPage is 'Password-protected with Active Directory' */ readonly activeDirectory: pulumi.Output<outputs.networks.WirelessSsidsActiveDirectory | undefined>; readonly adminSplashUrl: pulumi.Output<string>; /** * Boolean indicating whether or not adult content will be blocked */ readonly adultContentFilteringEnabled: pulumi.Output<boolean | undefined>; /** * The list of tags and VLAN IDs used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming' */ readonly apTagsAndVlanIds: pulumi.Output<outputs.networks.WirelessSsidsApTagsAndVlanId[] | undefined>; /** * The association control method for the SSID */ readonly authMode: pulumi.Output<string>; /** * List of tags for this SSID. If availableOnAllAps is false, then the SSID is only broadcast by APs with tags matching any of the tags in this list */ readonly availabilityTags: pulumi.Output<string[] | undefined>; /** * Whether all APs broadcast the SSID or if it's restricted to APs matching any availability tags */ readonly availableOnAllAps: pulumi.Output<boolean>; /** * The client-serving radio frequencies of this SSID in the default indoor RF profile */ readonly bandSelection: pulumi.Output<string>; /** * The concentrator to use when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'. */ readonly concentratorNetworkId: pulumi.Output<string | undefined>; /** * The default VLAN ID used for 'all other APs'. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming' */ readonly defaultVlanId: pulumi.Output<number | undefined>; /** * Disassociate clients when 'VPN' concentrator failover occurs in order to trigger clients to re-associate and generate new DHCP requests. This param is only valid if ipAssignmentMode is 'VPN'. */ readonly disassociateClientsOnVpnFailover: pulumi.Output<boolean | undefined>; /** * DNS servers rewrite settings */ readonly dnsRewrite: pulumi.Output<outputs.networks.WirelessSsidsDnsRewrite | undefined>; /** * The current setting for 802.11r */ readonly dot11r: pulumi.Output<outputs.networks.WirelessSsidsDot11r | undefined>; /** * The current setting for Protected Management Frames (802.11w). */ readonly dot11w: pulumi.Output<outputs.networks.WirelessSsidsDot11w | undefined>; /** * Whether or not the SSID is enabled */ readonly enabled: pulumi.Output<boolean>; /** * The psk encryption mode for the SSID */ readonly encryptionMode: pulumi.Output<string>; /** * Whether or not an SSID is accessible by 'enterprise' administrators ('access disabled' or 'access enabled') */ readonly enterpriseAdminAccess: pulumi.Output<string | undefined>; /** * Ethernet over GRE settings */ readonly gre: pulumi.Output<outputs.networks.WirelessSsidsGre | undefined>; /** * The client IP assignment mode */ readonly ipAssignmentMode: pulumi.Output<string>; /** * Boolean indicating whether Layer 2 LAN isolation should be enabled or disabled. Only configurable when ipAssignmentMode is 'Bridge mode'. */ readonly lanIsolationEnabled: pulumi.Output<boolean | undefined>; /** * The current setting for LDAP. Only valid if splashPage is 'Password-protected with LDAP'. */ readonly ldap: pulumi.Output<outputs.networks.WirelessSsidsLdap | undefined>; /** * The current setting for Local Authentication, a built-in RADIUS server on the access point. Only valid if authMode is '8021x-localradius'. */ readonly localRadius: pulumi.Output<outputs.networks.WirelessSsidsLocalRadius | undefined>; /** * Whether clients connecting to this SSID must use the IP address assigned by the DHCP server */ readonly mandatoryDhcpEnabled: pulumi.Output<boolean>; /** * The minimum bitrate in Mbps of this SSID in the default indoor RF profile */ readonly minBitrate: pulumi.Output<number>; /** * The name of the SSID */ readonly name: pulumi.Output<string>; /** * Named VLAN settings. */ readonly namedVlans: pulumi.Output<outputs.networks.WirelessSsidsNamedVlans | undefined>; /** * networkId path parameter. Network ID */ readonly networkId: pulumi.Output<string>; /** * Unique identifier of the SSID */ readonly number: pulumi.Output<number>; /** * The OAuth settings of this SSID. Only valid if splashPage is 'Google OAuth'. */ readonly oauth: pulumi.Output<outputs.networks.WirelessSsidsOauth | undefined>; /** * The download bandwidth limit in Kbps. (0 represents no limit.) */ readonly perClientBandwidthLimitDown: pulumi.Output<number>; /** * The upload bandwidth limit in Kbps. (0 represents no limit.) */ readonly perClientBandwidthLimitUp: pulumi.Output<number>; /** * The total download bandwidth limit in Kbps (0 represents no limit) */ readonly perSsidBandwidthLimitDown: pulumi.Output<number>; /** * The total upload bandwidth limit in Kbps (0 represents no limit) */ readonly perSsidBandwidthLimitUp: pulumi.Output<number>; /** * The passkey for the SSID. This param is only valid if the authMode is 'psk' */ readonly psk: pulumi.Output<string | undefined>; /** * Whether or not RADIUS accounting is enabled */ readonly radiusAccountingEnabled: pulumi.Output<boolean>; /** * The interval (in seconds) in which accounting information is updated and sent to the RADIUS accounting server. */ readonly radiusAccountingInterimInterval: pulumi.Output<number | undefined>; /** * List of RADIUS accounting 802.1X servers to be used for authentication */ readonly radiusAccountingServers: pulumi.Output<outputs.networks.WirelessSsidsRadiusAccountingServer[] | undefined>; /** * List of RADIUS accounting 802.1X servers to be used for authentication */ readonly radiusAccountingServersResponses: pulumi.Output<outputs.networks.WirelessSsidsRadiusAccountingServersResponse[]>; /** * RADIUS attribute used to look up group policies */ readonly radiusAttributeForGroupPolicies: pulumi.Output<string>; /** * The template of the NAS identifier to be used for RADIUS authentication (ex. $NODE*MAC$:$VAP*NUM$). */ readonly radiusAuthenticationNasId: pulumi.Output<string | undefined>; /** * The template of the called station identifier to be used for RADIUS (ex. $NODE*MAC$:$VAP*NUM$). */ readonly radiusCalledStationId: pulumi.Output<string | undefined>; /** * If true, Meraki devices will act as a RADIUS Dynamic Authorization Server and will respond to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server. */ readonly radiusCoaEnabled: pulumi.Output<boolean | undefined>; /** * Policy which determines how authentication requests should be handled in the event that all of the configured RADIUS servers are unreachable */ readonly radiusFailoverPolicy: pulumi.Output<string>; /** * Whether or not higher priority RADIUS servers should be retried after 60 seconds. */ readonly radiusFallbackEnabled: pulumi.Output<boolean | undefined>; /** * Whether or not RADIUS Guest VLAN is enabled. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode */ readonly radiusGuestVlanEnabled: pulumi.Output<boolean | undefined>; /** * VLAN ID of the RADIUS Guest VLAN. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode */ readonly radiusGuestVlanId: pulumi.Output<number | undefined>; /** * Policy which determines which RADIUS server will be contacted first in an authentication attempt, and the ordering of any necessary retry attempts */ readonly radiusLoadBalancingPolicy: pulumi.Output<string>; /** * If true, the RADIUS response can override VLAN tag. This is not valid when ipAssignmentMode is 'NAT mode'. */ readonly radiusOverride: pulumi.Output<boolean | undefined>; /** * If true, Meraki devices will proxy RADIUS messages through the Meraki cloud to the configured RADIUS auth and accounting servers. */ readonly radiusProxyEnabled: pulumi.Output<boolean | undefined>; /** * The maximum number of transmit attempts after which a RADIUS server is failed over (must be between 1-5). */ readonly radiusServerAttemptsLimit: pulumi.Output<number | undefined>; /** * The amount of time for which a RADIUS client waits for a reply from the RADIUS server (must be between 1-10 seconds). */ readonly radiusServerTimeout: pulumi.Output<number | undefined>; /** * The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius' */ readonly radiusServers: pulumi.Output<outputs.networks.WirelessSsidsRadiusServer[] | undefined>; /** * The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius' */ readonly radiusServersResponses: pulumi.Output<outputs.networks.WirelessSsidsRadiusServersResponse[]>; /** * If true, Meraki devices will periodically send Access-Request messages to configured RADIUS servers using identity 'meraki*8021x*test' to ensure that the RADIUS servers are reachable. */ readonly radiusTestingEnabled: pulumi.Output<boolean | undefined>; /** * The secondary concentrator to use when the ipAssignmentMode is 'VPN'. If configured, the APs will switch to using this concentrator if the primary concentrator is unreachable. This param is optional. ('disabled' represents no secondary concentrator.) */ readonly secondaryConcentratorNetworkId: pulumi.Output<string | undefined>; /** * The SpeedBurst setting for this SSID' */ readonly speedBurst: pulumi.Output<outputs.networks.WirelessSsidsSpeedBurst | undefined>; /** * Array of valid sponsor email domains for sponsored guest splash type. */ readonly splashGuestSponsorDomains: pulumi.Output<string[] | undefined>; /** * The type of splash page for the SSID */ readonly splashPage: pulumi.Output<string>; /** * Splash page timeout */ readonly splashTimeout: pulumi.Output<string>; /** * SSID Administrator access status */ readonly ssidAdminAccessible: pulumi.Output<boolean>; /** * Whether or not traffic should be directed to use specific VLANs. This param is only valid if the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming' */ readonly useVlanTagging: pulumi.Output<boolean | undefined>; /** * Whether the SSID is advertised or hidden by the AP */ readonly visible: pulumi.Output<boolean>; /** * The VLAN ID used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN' */ readonly vlanId: pulumi.Output<number | undefined>; /** * Allow users to access a configurable list of IP ranges prior to sign-on */ readonly walledGardenEnabled: pulumi.Output<boolean | undefined>; /** * Domain names and IP address ranges available in Walled Garden mode */ readonly walledGardenRanges: pulumi.Output<string[] | undefined>; /** * The types of WPA encryption */ readonly wpaEncryptionMode: pulumi.Output<string>; /** * Create a WirelessSsids resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: WirelessSsidsArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering WirelessSsids resources. */ export interface WirelessSsidsState { /** * The current setting for Active Directory. Only valid if splashPage is 'Password-protected with Active Directory' */ activeDirectory?: pulumi.Input<inputs.networks.WirelessSsidsActiveDirectory>; adminSplashUrl?: pulumi.Input<string>; /** * Boolean indicating whether or not adult content will be blocked */ adultContentFilteringEnabled?: pulumi.Input<boolean>; /** * The list of tags and VLAN IDs used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming' */ apTagsAndVlanIds?: pulumi.Input<pulumi.Input<inputs.networks.WirelessSsidsApTagsAndVlanId>[]>; /** * The association control method for the SSID */ authMode?: pulumi.Input<string>; /** * List of tags for this SSID. If availableOnAllAps is false, then the SSID is only broadcast by APs with tags matching any of the tags in this list */ availabilityTags?: pulumi.Input<pulumi.Input<string>[]>; /** * Whether all APs broadcast the SSID or if it's restricted to APs matching any availability tags */ availableOnAllAps?: pulumi.Input<boolean>; /** * The client-serving radio frequencies of this SSID in the default indoor RF profile */ bandSelection?: pulumi.Input<string>; /** * The concentrator to use when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'. */ concentratorNetworkId?: pulumi.Input<string>; /** * The default VLAN ID used for 'all other APs'. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming' */ defaultVlanId?: pulumi.Input<number>; /** * Disassociate clients when 'VPN' concentrator failover occurs in order to trigger clients to re-associate and generate new DHCP requests. This param is only valid if ipAssignmentMode is 'VPN'. */ disassociateClientsOnVpnFailover?: pulumi.Input<boolean>; /** * DNS servers rewrite settings */ dnsRewrite?: pulumi.Input<inputs.networks.WirelessSsidsDnsRewrite>; /** * The current setting for 802.11r */ dot11r?: pulumi.Input<inputs.networks.WirelessSsidsDot11r>; /** * The current setting for Protected Management Frames (802.11w). */ dot11w?: pulumi.Input<inputs.networks.WirelessSsidsDot11w>; /** * Whether or not the SSID is enabled */ enabled?: pulumi.Input<boolean>; /** * The psk encryption mode for the SSID */ encryptionMode?: pulumi.Input<string>; /** * Whether or not an SSID is accessible by 'enterprise' administrators ('access disabled' or 'access enabled') */ enterpriseAdminAccess?: pulumi.Input<string>; /** * Ethernet over GRE settings */ gre?: pulumi.Input<inputs.networks.WirelessSsidsGre>; /** * The client IP assignment mode */ ipAssignmentMode?: pulumi.Input<string>; /** * Boolean indicating whether Layer 2 LAN isolation should be enabled or disabled. Only configurable when ipAssignmentMode is 'Bridge mode'. */ lanIsolationEnabled?: pulumi.Input<boolean>; /** * The current setting for LDAP. Only valid if splashPage is 'Password-protected with LDAP'. */ ldap?: pulumi.Input<inputs.networks.WirelessSsidsLdap>; /** * The current setting for Local Authentication, a built-in RADIUS server on the access point. Only valid if authMode is '8021x-localradius'. */ localRadius?: pulumi.Input<inputs.networks.WirelessSsidsLocalRadius>; /** * Whether clients connecting to this SSID must use the IP address assigned by the DHCP server */ mandatoryDhcpEnabled?: pulumi.Input<boolean>; /** * The minimum bitrate in Mbps of this SSID in the default indoor RF profile */ minBitrate?: pulumi.Input<number>; /** * The name of the SSID */ name?: pulumi.Input<string>; /** * Named VLAN settings. */ namedVlans?: pulumi.Input<inputs.networks.WirelessSsidsNamedVlans>; /** * networkId path parameter. Network ID */ networkId?: pulumi.Input<string>; /** * Unique identifier of the SSID */ number?: pulumi.Input<number>; /** * The OAuth settings of this SSID. Only valid if splashPage is 'Google OAuth'. */ oauth?: pulumi.Input<inputs.networks.WirelessSsidsOauth>; /** * The download bandwidth limit in Kbps. (0 represents no limit.) */ perClientBandwidthLimitDown?: pulumi.Input<number>; /** * The upload bandwidth limit in Kbps. (0 represents no limit.) */ perClientBandwidthLimitUp?: pulumi.Input<number>; /** * The total download bandwidth limit in Kbps (0 represents no limit) */ perSsidBandwidthLimitDown?: pulumi.Input<number>; /** * The total upload bandwidth limit in Kbps (0 represents no limit) */ perSsidBandwidthLimitUp?: pulumi.Input<number>; /** * The passkey for the SSID. This param is only valid if the authMode is 'psk' */ psk?: pulumi.Input<string>; /** * Whether or not RADIUS accounting is enabled */ radiusAccountingEnabled?: pulumi.Input<boolean>; /** * The interval (in seconds) in which accounting information is updated and sent to the RADIUS accounting server. */ radiusAccountingInterimInterval?: pulumi.Input<number>; /** * List of RADIUS accounting 802.1X servers to be used for authentication */ radiusAccountingServers?: pulumi.Input<pulumi.Input<inputs.networks.WirelessSsidsRadiusAccountingServer>[]>; /** * List of RADIUS accounting 802.1X servers to be used for authentication */ radiusAccountingServersResponses?: pulumi.Input<pulumi.Input<inputs.networks.WirelessSsidsRadiusAccountingServersResponse>[]>; /** * RADIUS attribute used to look up group policies */ radiusAttributeForGroupPolicies?: pulumi.Input<string>; /** * The template of the NAS identifier to be used for RADIUS authentication (ex. $NODE*MAC$:$VAP*NUM$). */ radiusAuthenticationNasId?: pulumi.Input<string>; /** * The template of the called station identifier to be used for RADIUS (ex. $NODE*MAC$:$VAP*NUM$). */ radiusCalledStationId?: pulumi.Input<string>; /** * If true, Meraki devices will act as a RADIUS Dynamic Authorization Server and will respond to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server. */ radiusCoaEnabled?: pulumi.Input<boolean>; /** * Policy which determines how authentication requests should be handled in the event that all of the configured RADIUS servers are unreachable */ radiusFailoverPolicy?: pulumi.Input<string>; /** * Whether or not higher priority RADIUS servers should be retried after 60 seconds. */ radiusFallbackEnabled?: pulumi.Input<boolean>; /** * Whether or not RADIUS Guest VLAN is enabled. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode */ radiusGuestVlanEnabled?: pulumi.Input<boolean>; /** * VLAN ID of the RADIUS Guest VLAN. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode */ radiusGuestVlanId?: pulumi.Input<number>; /** * Policy which determines which RADIUS server will be contacted first in an authentication attempt, and the ordering of any necessary retry attempts */ radiusLoadBalancingPolicy?: pulumi.Input<string>; /** * If true, the RADIUS response can override VLAN tag. This is not valid when ipAssignmentMode is 'NAT mode'. */ radiusOverride?: pulumi.Input<boolean>; /** * If true, Meraki devices will proxy RADIUS messages through the Meraki cloud to the configured RADIUS auth and accounting servers. */ radiusProxyEnabled?: pulumi.Input<boolean>; /** * The maximum number of transmit attempts after which a RADIUS server is failed over (must be between 1-5). */ radiusServerAttemptsLimit?: pulumi.Input<number>; /** * The amount of time for which a RADIUS client waits for a reply from the RADIUS server (must be between 1-10 seconds). */ radiusServerTimeout?: pulumi.Input<number>; /** * The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius' */ radiusServers?: pulumi.Input<pulumi.Input<inputs.networks.WirelessSsidsRadiusServer>[]>; /** * The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius' */ radiusServersResponses?: pulumi.Input<pulumi.Input<inputs.networks.WirelessSsidsRadiusServersResponse>[]>; /** * If true, Meraki devices will periodically send Access-Request messages to configured RADIUS servers using identity 'meraki*8021x*test' to ensure that the RADIUS servers are reachable. */ radiusTestingEnabled?: pulumi.Input<boolean>; /** * The secondary concentrator to use when the ipAssignmentMode is 'VPN'. If configured, the APs will switch to using this concentrator if the primary concentrator is unreachable. This param is optional. ('disabled' represents no secondary concentrator.) */ secondaryConcentratorNetworkId?: pulumi.Input<string>; /** * The SpeedBurst setting for this SSID' */ speedBurst?: pulumi.Input<inputs.networks.WirelessSsidsSpeedBurst>; /** * Array of valid sponsor email domains for sponsored guest splash type. */ splashGuestSponsorDomains?: pulumi.Input<pulumi.Input<string>[]>; /** * The type of splash page for the SSID */ splashPage?: pulumi.Input<string>; /** * Splash page timeout */ splashTimeout?: pulumi.Input<string>; /** * SSID Administrator access status */ ssidAdminAccessible?: pulumi.Input<boolean>; /** * Whether or not traffic should be directed to use specific VLANs. This param is only valid if the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming' */ useVlanTagging?: pulumi.Input<boolean>; /** * Whether the SSID is advertised or hidden by the AP */ visible?: pulumi.Input<boolean>; /** * The VLAN ID used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN' */ vlanId?: pulumi.Input<number>; /** * Allow users to access a configurable list of IP ranges prior to sign-on */ walledGardenEnabled?: pulumi.Input<boolean>; /** * Domain names and IP address ranges available in Walled Garden mode */ walledGardenRanges?: pulumi.Input<pulumi.Input<string>[]>; /** * The types of WPA encryption */ wpaEncryptionMode?: pulumi.Input<string>; } /** * The set of arguments for constructing a WirelessSsids resource. */ export interface WirelessSsidsArgs { /** * The current setting for Active Directory. Only valid if splashPage is 'Password-protected with Active Directory' */ activeDirectory?: pulumi.Input<inputs.networks.WirelessSsidsActiveDirectory>; /** * Boolean indicating whether or not adult content will be blocked */ adultContentFilteringEnabled?: pulumi.Input<boolean>; /** * The list of tags and VLAN IDs used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming' */ apTagsAndVlanIds?: pulumi.Input<pulumi.Input<inputs.networks.WirelessSsidsApTagsAndVlanId>[]>; /** * The association control method for the SSID */ authMode?: pulumi.Input<string>; /** * List of tags for this SSID. If availableOnAllAps is false, then the SSID is only broadcast by APs with tags matching any of the tags in this list */ availabilityTags?: pulumi.Input<pulumi.Input<string>[]>; /** * Whether all APs broadcast the SSID or if it's restricted to APs matching any availability tags */ availableOnAllAps?: pulumi.Input<boolean>; /** * The client-serving radio frequencies of this SSID in the default indoor RF profile */ bandSelection?: pulumi.Input<string>; /** * The concentrator to use when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'. */ concentratorNetworkId?: pulumi.Input<string>; /** * The default VLAN ID used for 'all other APs'. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming' */ defaultVlanId?: pulumi.Input<number>; /** * Disassociate clients when 'VPN' concentrator failover occurs in order to trigger clients to re-associate and generate new DHCP requests. This param is only valid if ipAssignmentMode is 'VPN'. */ disassociateClientsOnVpnFailover?: pulumi.Input<boolean>; /** * DNS servers rewrite settings */ dnsRewrite?: pulumi.Input<inputs.networks.WirelessSsidsDnsRewrite>; /** * The current setting for 802.11r */ dot11r?: pulumi.Input<inputs.networks.WirelessSsidsDot11r>; /** * The current setting for Protected Management Frames (802.11w). */ dot11w?: pulumi.Input<inputs.networks.WirelessSsidsDot11w>; /** * Whether or not the SSID is enabled */ enabled?: pulumi.Input<boolean>; /** * The psk encryption mode for the SSID */ encryptionMode?: pulumi.Input<string>; /** * Whether or not an SSID is accessible by 'enterprise' administrators ('access disabled' or 'access enabled') */ enterpriseAdminAccess?: pulumi.Input<string>; /** * Ethernet over GRE settings */ gre?: pulumi.Input<inputs.networks.WirelessSsidsGre>; /** * The client IP assignment mode */ ipAssignmentMode?: pulumi.Input<string>; /** * Boolean indicating whether Layer 2 LAN isolation should be enabled or disabled. Only configurable when ipAssignmentMode is 'Bridge mode'. */ lanIsolationEnabled?: pulumi.Input<boolean>; /** * The current setting for LDAP. Only valid if splashPage is 'Password-protected with LDAP'. */ ldap?: pulumi.Input<inputs.networks.WirelessSsidsLdap>; /** * The current setting for Local Authentication, a built-in RADIUS server on the access point. Only valid if authMode is '8021x-localradius'. */ localRadius?: pulumi.Input<inputs.networks.WirelessSsidsLocalRadius>; /** * Whether clients connecting to this SSID must use the IP address assigned by the DHCP server */ mandatoryDhcpEnabled?: pulumi.Input<boolean>; /** * The minimum bitrate in Mbps of this SSID in the default indoor RF profile */ minBitrate?: pulumi.Input<number>; /** * The name of the SSID */ name?: pulumi.Input<string>; /** * Named VLAN settings. */ namedVlans?: pulumi.Input<inputs.networks.WirelessSsidsNamedVlans>; /** * networkId path parameter. Network ID */ networkId: pulumi.Input<string>; /** * Unique identifier of the SSID */ number: pulumi.Input<number>; /** * The OAuth settings of this SSID. Only valid if splashPage is 'Google OAuth'. */ oauth?: pulumi.Input<inputs.networks.WirelessSsidsOauth>; /** * The download bandwidth limit in Kbps. (0 represents no limit.) */ perClientBandwidthLimitDown?: pulumi.Input<number>; /** * The upload bandwidth limit in Kbps. (0 represents no limit.) */ perClientBandwidthLimitUp?: pulumi.Input<number>; /** * The total download bandwidth limit in Kbps (0 represents no limit) */ perSsidBandwidthLimitDown?: pulumi.Input<number>; /** * The total upload bandwidth limit in Kbps (0 represents no limit) */ perSsidBandwidthLimitUp?: pulumi.Input<number>; /** * The passkey for the SSID. This param is only valid if the authMode is 'psk' */ psk?: pulumi.Input<string>; /** * Whether or not RADIUS accounting is enabled */ radiusAccountingEnabled?: pulumi.Input<boolean>; /** * The interval (in seconds) in which accounting information is updated and sent to the RADIUS accounting server. */ radiusAccountingInterimInterval?: pulumi.Input<number>; /** * List of RADIUS accounting 802.1X servers to be used for authentication */ radiusAccountingServers?: pulumi.Input<pulumi.Input<inputs.networks.WirelessSsidsRadiusAccountingServer>[]>; /** * RADIUS attribute used to look up group policies */ radiusAttributeForGroupPolicies?: pulumi.Input<string>; /** * The template of the NAS identifier to be used for RADIUS authentication (ex. $NODE*MAC$:$VAP*NUM$). */ radiusAuthenticationNasId?: pulumi.Input<string>; /** * The template of the called station identifier to be used for RADIUS (ex. $NODE*MAC$:$VAP*NUM$). */ radiusCalledStationId?: pulumi.Input<string>; /** * If true, Meraki devices will act as a RADIUS Dynamic Authorization Server and will respond to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server. */ radiusCoaEnabled?: pulumi.Input<boolean>; /** * Policy which determines how authentication requests should be handled in the event that all of the configured RADIUS servers are unreachable */ radiusFailoverPolicy?: pulumi.Input<string>; /** * Whether or not higher priority RADIUS servers should be retried after 60 seconds. */ radiusFallbackEnabled?: pulumi.Input<boolean>; /** * Whether or not RADIUS Guest VLAN is enabled. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode */ radiusGuestVlanEnabled?: pulumi.Input<boolean>; /** * VLAN ID of the RADIUS Guest VLAN. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode */ radiusGuestVlanId?: pulumi.Input<number>; /** * Policy which determines which RADIUS server will be contacted first in an authentication attempt, and the ordering of any necessary retry attempts */ radiusLoadBalancingPolicy?: pulumi.Input<string>; /** * If true, the RADIUS response can override VLAN tag. This is not valid when ipAssignmentMode is 'NAT mode'. */ radiusOverride?: pulumi.Input<boolean>; /** * If true, Meraki devices will proxy RADIUS messages through the Meraki cloud to the configured RADIUS auth and accounting servers. */ radiusProxyEnabled?: pulumi.Input<boolean>; /** * The maximum number of transmit attempts after which a RADIUS server is failed over (must be between 1-5). */ radiusServerAttemptsLimit?: pulumi.Input<number>; /** * The amount of time for which a RADIUS client waits for a reply from the RADIUS server (must be between 1-10 seconds). */ radiusServerTimeout?: pulumi.Input<number>; /** * The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius' */ radiusServers?: pulumi.Input<pulumi.Input<inputs.networks.WirelessSsidsRadiusServer>[]>; /** * If true, Meraki devices will periodically send Access-Request messages to configured RADIUS servers using identity 'meraki*8021x*test' to ensure that the RADIUS servers are reachable. */ radiusTestingEnabled?: pulumi.Input<boolean>; /** * The secondary concentrator to use when the ipAssignmentMode is 'VPN'. If configured, the APs will switch to using this concentrator if the primary concentrator is unreachable. This param is optional. ('disabled' represents no secondary concentrator.) */ secondaryConcentratorNetworkId?: pulumi.Input<string>; /** * The SpeedBurst setting for this SSID' */ speedBurst?: pulumi.Input<inputs.networks.WirelessSsidsSpeedBurst>; /** * Array of valid sponsor email domains for sponsored guest splash type. */ splashGuestSponsorDomains?: pulumi.Input<pulumi.Input<string>[]>; /** * The type of splash page for the SSID */ splashPage?: pulumi.Input<string>; /** * Whether or not traffic should be directed to use specific VLANs. This param is only valid if the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming' */ useVlanTagging?: pulumi.Input<boolean>; /** * Whether the SSID is advertised or hidden by the AP */ visible?: pulumi.Input<boolean>; /** * The VLAN ID used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN' */ vlanId?: pulumi.Input<number>; /** * Allow users to access a configurable list of IP ranges prior to sign-on */ walledGardenEnabled?: pulumi.Input<boolean>; /** * Domain names and IP address ranges available in Walled Garden mode */ walledGardenRanges?: pulumi.Input<pulumi.Input<string>[]>; /** * The types of WPA encryption */ wpaEncryptionMode?: pulumi.Input<string>; }