1. Packages
  2. Juniper Mist Provider
  3. API Docs
  4. site
  5. Networktemplate
Juniper Mist v0.3.0 published on Wednesday, Apr 9, 2025 by Pulumi

junipermist.site.Networktemplate

Explore with Pulumi AI

This resource manages the Site Network configuration (Switch configuration).

The Site Network template can be used to override the Org Network template assign to the site, or to configure common switch settings across the site without having to create an Org Network template.

When using the Mist APIs, all the switch settings defined at the site level are stored under the site settings with all the rest of the site configuration (/api/v1/sites/{site_id}/setting Mist API Endpoint). To simplify this resource, the junipermist.site.Networktemplate resource has been created to centralize all the site level switches related settings.

!> Only ONE junipermist.site.Networktemplate resource can be configured per site. If multiple ones are configured, only the last one defined we be successfully deployed to Mist

Example Usage

Coming soon!
Coming soon!
Coming soon!
Coming soon!
Coming soon!
resources:
  networktemplateOne:
    type: junipermist:site:Networktemplate
    name: networktemplate_one
    properties:
      siteId: ${terraformTest.id}
      dnsServers:
        - 8.8.8.8
        - 1.1.1.1
      dnsSuffixes:
        - mycorp.com
      ntpServers:
        - pool.ntp.org
      additionalConfigCmds:
        - set system hostname test
        - set system services ssh root-login allow
      networks:
        network_one:
          vlanId: 10
        network_two:
          vlanId: 11
      portUsages:
        trunk:
          allNetworks: true
          enableQos: true
          mode: port_usage_one
          portNetwork: network_one
      radiusConfig:
        acct_interim_interval: 60
        coa_enabled: true
        network: network_one
        acct_servers:
          - host: 1.2.3.4
            secret: secret
        auth_servers:
          - host: 1.2.3.4
            secret: secret
      switchMatching:
        enable: true
        rules:
          - name: switch_rule_one
            matchName: corp
            matchNameOffset: 3
            matchRole: core
            portConfig:
              ge-0/0/0-10:
                usage: port_usage_one
Copy

Create Networktemplate Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Networktemplate(name: string, args: NetworktemplateArgs, opts?: CustomResourceOptions);
@overload
def Networktemplate(resource_name: str,
                    args: NetworktemplateArgs,
                    opts: Optional[ResourceOptions] = None)

@overload
def Networktemplate(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    site_id: Optional[str] = None,
                    ntp_servers: Optional[Sequence[str]] = None,
                    switch_mgmt: Optional[NetworktemplateSwitchMgmtArgs] = None,
                    auto_upgrade_linecard: Optional[bool] = None,
                    dhcp_snooping: Optional[NetworktemplateDhcpSnoopingArgs] = None,
                    disabled_system_defined_port_usages: Optional[Sequence[str]] = None,
                    dns_servers: Optional[Sequence[str]] = None,
                    dns_suffixes: Optional[Sequence[str]] = None,
                    extra_routes: Optional[Mapping[str, NetworktemplateExtraRoutesArgs]] = None,
                    extra_routes6: Optional[Mapping[str, NetworktemplateExtraRoutes6Args]] = None,
                    mist_nac: Optional[NetworktemplateMistNacArgs] = None,
                    vrf_instances: Optional[Mapping[str, NetworktemplateVrfInstancesArgs]] = None,
                    additional_config_cmds: Optional[Sequence[str]] = None,
                    port_usages: Optional[Mapping[str, NetworktemplatePortUsagesArgs]] = None,
                    port_mirroring: Optional[Mapping[str, NetworktemplatePortMirroringArgs]] = None,
                    ospf_areas: Optional[Mapping[str, NetworktemplateOspfAreasArgs]] = None,
                    radius_config: Optional[NetworktemplateRadiusConfigArgs] = None,
                    remote_syslog: Optional[NetworktemplateRemoteSyslogArgs] = None,
                    remove_existing_configs: Optional[bool] = None,
                    acl_tags: Optional[Mapping[str, NetworktemplateAclTagsArgs]] = None,
                    snmp_config: Optional[NetworktemplateSnmpConfigArgs] = None,
                    switch_matching: Optional[NetworktemplateSwitchMatchingArgs] = None,
                    acl_policies: Optional[Sequence[NetworktemplateAclPolicyArgs]] = None,
                    vrf_config: Optional[NetworktemplateVrfConfigArgs] = None,
                    networks: Optional[Mapping[str, NetworktemplateNetworksArgs]] = None)
func NewNetworktemplate(ctx *Context, name string, args NetworktemplateArgs, opts ...ResourceOption) (*Networktemplate, error)
public Networktemplate(string name, NetworktemplateArgs args, CustomResourceOptions? opts = null)
public Networktemplate(String name, NetworktemplateArgs args)
public Networktemplate(String name, NetworktemplateArgs args, CustomResourceOptions options)
type: junipermist:site:Networktemplate
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. NetworktemplateArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. NetworktemplateArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. NetworktemplateArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. NetworktemplateArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. NetworktemplateArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var junipermistNetworktemplateResource = new JuniperMist.Site.Networktemplate("junipermistNetworktemplateResource", new()
{
    SiteId = "string",
    NtpServers = new[]
    {
        "string",
    },
    SwitchMgmt = new JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtArgs
    {
        ApAffinityThreshold = 0,
        CliBanner = "string",
        CliIdleTimeout = 0,
        ConfigRevertTimer = 0,
        DhcpOptionFqdn = false,
        DisableOobDownAlarm = false,
        FipsEnabled = false,
        LocalAccounts = 
        {
            { "string", new JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtLocalAccountsArgs
            {
                Password = "string",
                Role = "string",
            } },
        },
        MxedgeProxyHost = "string",
        MxedgeProxyPort = "string",
        ProtectRe = new JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtProtectReArgs
        {
            AllowedServices = new[]
            {
                "string",
            },
            Customs = new[]
            {
                new JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtProtectReCustomArgs
                {
                    Subnets = new[]
                    {
                        "string",
                    },
                    PortRange = "string",
                    Protocol = "string",
                },
            },
            Enabled = false,
            TrustedHosts = new[]
            {
                "string",
            },
        },
        RootPassword = "string",
        Tacacs = new JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtTacacsArgs
        {
            AcctServers = new[]
            {
                new JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtTacacsAcctServerArgs
                {
                    Host = "string",
                    Port = "string",
                    Secret = "string",
                    Timeout = 0,
                },
            },
            DefaultRole = "string",
            Enabled = false,
            Network = "string",
            TacplusServers = new[]
            {
                new JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtTacacsTacplusServerArgs
                {
                    Host = "string",
                    Port = "string",
                    Secret = "string",
                    Timeout = 0,
                },
            },
        },
        UseMxedgeProxy = false,
    },
    AutoUpgradeLinecard = false,
    DhcpSnooping = new JuniperMist.Site.Inputs.NetworktemplateDhcpSnoopingArgs
    {
        AllNetworks = false,
        EnableArpSpoofCheck = false,
        EnableIpSourceGuard = false,
        Enabled = false,
        Networks = new[]
        {
            "string",
        },
    },
    DisabledSystemDefinedPortUsages = new[]
    {
        "string",
    },
    DnsServers = new[]
    {
        "string",
    },
    DnsSuffixes = new[]
    {
        "string",
    },
    ExtraRoutes = 
    {
        { "string", new JuniperMist.Site.Inputs.NetworktemplateExtraRoutesArgs
        {
            Via = "string",
            Discard = false,
            Metric = 0,
            NextQualified = 
            {
                { "string", new JuniperMist.Site.Inputs.NetworktemplateExtraRoutesNextQualifiedArgs
                {
                    Metric = 0,
                    Preference = 0,
                } },
            },
            NoResolve = false,
            Preference = 0,
        } },
    },
    ExtraRoutes6 = 
    {
        { "string", new JuniperMist.Site.Inputs.NetworktemplateExtraRoutes6Args
        {
            Via = "string",
            Discard = false,
            Metric = 0,
            NextQualified = 
            {
                { "string", new JuniperMist.Site.Inputs.NetworktemplateExtraRoutes6NextQualifiedArgs
                {
                    Metric = 0,
                    Preference = 0,
                } },
            },
            NoResolve = false,
            Preference = 0,
        } },
    },
    MistNac = new JuniperMist.Site.Inputs.NetworktemplateMistNacArgs
    {
        Enabled = false,
        Network = "string",
    },
    VrfInstances = 
    {
        { "string", new JuniperMist.Site.Inputs.NetworktemplateVrfInstancesArgs
        {
            EvpnAutoLoopbackSubnet = "string",
            EvpnAutoLoopbackSubnet6 = "string",
            ExtraRoutes = 
            {
                { "string", new JuniperMist.Site.Inputs.NetworktemplateVrfInstancesExtraRoutesArgs
                {
                    Via = "string",
                } },
            },
            ExtraRoutes6 = 
            {
                { "string", new JuniperMist.Site.Inputs.NetworktemplateVrfInstancesExtraRoutes6Args
                {
                    Via = "string",
                } },
            },
            Networks = new[]
            {
                "string",
            },
        } },
    },
    AdditionalConfigCmds = new[]
    {
        "string",
    },
    PortUsages = 
    {
        { "string", new JuniperMist.Site.Inputs.NetworktemplatePortUsagesArgs
        {
            AllNetworks = false,
            AllowDhcpd = false,
            AllowMultipleSupplicants = false,
            BypassAuthWhenServerDown = false,
            BypassAuthWhenServerDownForUnknownClient = false,
            Description = "string",
            DisableAutoneg = false,
            Disabled = false,
            Duplex = "string",
            DynamicVlanNetworks = new[]
            {
                "string",
            },
            EnableMacAuth = false,
            EnableQos = false,
            GuestNetwork = "string",
            InterIsolationNetworkLink = false,
            InterSwitchLink = false,
            MacAuthOnly = false,
            MacAuthPreferred = false,
            MacAuthProtocol = "string",
            MacLimit = "string",
            Mode = "string",
            Mtu = "string",
            Networks = new[]
            {
                "string",
            },
            PersistMac = false,
            PoeDisabled = false,
            PortAuth = "string",
            PortNetwork = "string",
            ReauthInterval = "string",
            ResetDefaultWhen = "string",
            Rules = new[]
            {
                new JuniperMist.Site.Inputs.NetworktemplatePortUsagesRuleArgs
                {
                    Src = "string",
                    Equals = "string",
                    EqualsAnies = new[]
                    {
                        "string",
                    },
                    Expression = "string",
                    Usage = "string",
                },
            },
            ServerFailNetwork = "string",
            ServerRejectNetwork = "string",
            Speed = "string",
            StormControl = new JuniperMist.Site.Inputs.NetworktemplatePortUsagesStormControlArgs
            {
                NoBroadcast = false,
                NoMulticast = false,
                NoRegisteredMulticast = false,
                NoUnknownUnicast = false,
                Percentage = 0,
            },
            StpEdge = false,
            StpNoRootPort = false,
            StpP2p = false,
            UiEvpntopoId = "string",
            UseVstp = false,
            VoipNetwork = "string",
        } },
    },
    PortMirroring = 
    {
        { "string", new JuniperMist.Site.Inputs.NetworktemplatePortMirroringArgs
        {
            InputNetworksIngresses = new[]
            {
                "string",
            },
            InputPortIdsEgresses = new[]
            {
                "string",
            },
            InputPortIdsIngresses = new[]
            {
                "string",
            },
            OutputNetwork = "string",
            OutputPortId = "string",
        } },
    },
    OspfAreas = 
    {
        { "string", new JuniperMist.Site.Inputs.NetworktemplateOspfAreasArgs
        {
            Networks = 
            {
                { "string", new JuniperMist.Site.Inputs.NetworktemplateOspfAreasNetworksArgs
                {
                    AuthKeys = 
                    {
                        { "string", "string" },
                    },
                    AuthPassword = "string",
                    AuthType = "string",
                    BfdMinimumInterval = 0,
                    DeadInterval = 0,
                    ExportPolicy = "string",
                    HelloInterval = 0,
                    ImportPolicy = "string",
                    InterfaceType = "string",
                    Metric = 0,
                    NoReadvertiseToOverlay = false,
                    Passive = false,
                } },
            },
            IncludeLoopback = false,
            Type = "string",
        } },
    },
    RadiusConfig = new JuniperMist.Site.Inputs.NetworktemplateRadiusConfigArgs
    {
        AcctImmediateUpdate = false,
        AcctInterimInterval = 0,
        AcctServers = new[]
        {
            new JuniperMist.Site.Inputs.NetworktemplateRadiusConfigAcctServerArgs
            {
                Host = "string",
                Secret = "string",
                KeywrapEnabled = false,
                KeywrapFormat = "string",
                KeywrapKek = "string",
                KeywrapMack = "string",
                Port = 0,
            },
        },
        AuthServerSelection = "string",
        AuthServers = new[]
        {
            new JuniperMist.Site.Inputs.NetworktemplateRadiusConfigAuthServerArgs
            {
                Host = "string",
                Secret = "string",
                KeywrapEnabled = false,
                KeywrapFormat = "string",
                KeywrapKek = "string",
                KeywrapMack = "string",
                Port = 0,
                RequireMessageAuthenticator = false,
            },
        },
        AuthServersRetries = 0,
        AuthServersTimeout = 0,
        CoaEnabled = false,
        CoaPort = "string",
        FastDot1xTimers = false,
        Network = "string",
        SourceIp = "string",
    },
    RemoteSyslog = new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogArgs
    {
        Archive = new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogArchiveArgs
        {
            Files = "string",
            Size = "string",
        },
        Console = new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogConsoleArgs
        {
            Contents = new[]
            {
                new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogConsoleContentArgs
                {
                    Facility = "string",
                    Severity = "string",
                },
            },
        },
        Enabled = false,
        Files = new[]
        {
            new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogFileArgs
            {
                Archive = new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogFileArchiveArgs
                {
                    Files = "string",
                    Size = "string",
                },
                Contents = new[]
                {
                    new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogFileContentArgs
                    {
                        Facility = "string",
                        Severity = "string",
                    },
                },
                ExplicitPriority = false,
                File = "string",
                Match = "string",
                StructuredData = false,
            },
        },
        Network = "string",
        SendToAllServers = false,
        Servers = new[]
        {
            new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogServerArgs
            {
                Contents = new[]
                {
                    new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogServerContentArgs
                    {
                        Facility = "string",
                        Severity = "string",
                    },
                },
                ExplicitPriority = false,
                Facility = "string",
                Host = "string",
                Match = "string",
                Port = "string",
                Protocol = "string",
                RoutingInstance = "string",
                Severity = "string",
                SourceAddress = "string",
                StructuredData = false,
                Tag = "string",
            },
        },
        TimeFormat = "string",
        Users = new[]
        {
            new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogUserArgs
            {
                Contents = new[]
                {
                    new JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogUserContentArgs
                    {
                        Facility = "string",
                        Severity = "string",
                    },
                },
                Match = "string",
                User = "string",
            },
        },
    },
    RemoveExistingConfigs = false,
    AclTags = 
    {
        { "string", new JuniperMist.Site.Inputs.NetworktemplateAclTagsArgs
        {
            Type = "string",
            GbpTag = 0,
            Macs = new[]
            {
                "string",
            },
            Network = "string",
            RadiusGroup = "string",
            Specs = new[]
            {
                new JuniperMist.Site.Inputs.NetworktemplateAclTagsSpecArgs
                {
                    PortRange = "string",
                    Protocol = "string",
                },
            },
            Subnets = new[]
            {
                "string",
            },
        } },
    },
    SnmpConfig = new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigArgs
    {
        ClientLists = new[]
        {
            new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigClientListArgs
            {
                ClientListName = "string",
                Clients = new[]
                {
                    "string",
                },
            },
        },
        Contact = "string",
        Description = "string",
        Enabled = false,
        EngineId = "string",
        Location = "string",
        Name = "string",
        Network = "string",
        TrapGroups = new[]
        {
            new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigTrapGroupArgs
            {
                Categories = new[]
                {
                    "string",
                },
                GroupName = "string",
                Targets = new[]
                {
                    "string",
                },
                Version = "string",
            },
        },
        V2cConfigs = new[]
        {
            new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV2cConfigArgs
            {
                Authorization = "string",
                ClientListName = "string",
                CommunityName = "string",
                View = "string",
            },
        },
        V3Config = new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigArgs
        {
            Notifies = new[]
            {
                new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigNotifyArgs
                {
                    Name = "string",
                    Tag = "string",
                    Type = "string",
                },
            },
            NotifyFilters = new[]
            {
                new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigNotifyFilterArgs
                {
                    Contents = new[]
                    {
                        new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArgs
                        {
                            Oid = "string",
                            Include = false,
                        },
                    },
                    ProfileName = "string",
                },
            },
            TargetAddresses = new[]
            {
                new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigTargetAddressArgs
                {
                    Address = "string",
                    AddressMask = "string",
                    TargetAddressName = "string",
                    Port = "string",
                    TagList = "string",
                    TargetParameters = "string",
                },
            },
            TargetParameters = new[]
            {
                new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigTargetParameterArgs
                {
                    MessageProcessingModel = "string",
                    Name = "string",
                    NotifyFilter = "string",
                    SecurityLevel = "string",
                    SecurityModel = "string",
                    SecurityName = "string",
                },
            },
            Usms = new[]
            {
                new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigUsmArgs
                {
                    EngineType = "string",
                    RemoteEngineId = "string",
                    Users = new[]
                    {
                        new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigUsmUserArgs
                        {
                            AuthenticationPassword = "string",
                            AuthenticationType = "string",
                            EncryptionPassword = "string",
                            EncryptionType = "string",
                            Name = "string",
                        },
                    },
                },
            },
            Vacm = new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigVacmArgs
            {
                Accesses = new[]
                {
                    new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigVacmAccessArgs
                    {
                        GroupName = "string",
                        PrefixLists = new[]
                        {
                            new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArgs
                            {
                                ContextPrefix = "string",
                                NotifyView = "string",
                                ReadView = "string",
                                SecurityLevel = "string",
                                SecurityModel = "string",
                                Type = "string",
                                WriteView = "string",
                            },
                        },
                    },
                },
                SecurityToGroup = new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupArgs
                {
                    Contents = new[]
                    {
                        new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArgs
                        {
                            Group = "string",
                            SecurityName = "string",
                        },
                    },
                    SecurityModel = "string",
                },
            },
        },
        Views = new[]
        {
            new JuniperMist.Site.Inputs.NetworktemplateSnmpConfigViewArgs
            {
                Include = false,
                Oid = "string",
                ViewName = "string",
            },
        },
    },
    SwitchMatching = new JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingArgs
    {
        Enable = false,
        Rules = new[]
        {
            new JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingRuleArgs
            {
                AdditionalConfigCmds = new[]
                {
                    "string",
                },
                IpConfig = new JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingRuleIpConfigArgs
                {
                    Network = "string",
                    Type = "string",
                },
                MatchModel = "string",
                MatchName = "string",
                MatchNameOffset = 0,
                MatchRole = "string",
                Name = "string",
                OobIpConfig = new JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingRuleOobIpConfigArgs
                {
                    Type = "string",
                    UseMgmtVrf = false,
                    UseMgmtVrfForHostOut = false,
                },
                PortConfig = 
                {
                    { "string", new JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingRulePortConfigArgs
                    {
                        Usage = "string",
                        DisableAutoneg = false,
                        DynamicUsage = "string",
                        Aggregated = false,
                        Critical = false,
                        Description = "string",
                        AeDisableLacp = false,
                        Duplex = "string",
                        AeLacpSlow = false,
                        Esilag = false,
                        Mtu = 0,
                        NoLocalOverwrite = false,
                        PoeDisabled = false,
                        Speed = "string",
                        AeIdx = 0,
                    } },
                },
                PortMirroring = 
                {
                    { "string", new JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingRulePortMirroringArgs
                    {
                        InputNetworksIngresses = new[]
                        {
                            "string",
                        },
                        InputPortIdsEgresses = new[]
                        {
                            "string",
                        },
                        InputPortIdsIngresses = new[]
                        {
                            "string",
                        },
                        OutputNetwork = "string",
                        OutputPortId = "string",
                    } },
                },
            },
        },
    },
    AclPolicies = new[]
    {
        new JuniperMist.Site.Inputs.NetworktemplateAclPolicyArgs
        {
            Actions = new[]
            {
                new JuniperMist.Site.Inputs.NetworktemplateAclPolicyActionArgs
                {
                    DstTag = "string",
                    Action = "string",
                },
            },
            Name = "string",
            SrcTags = new[]
            {
                "string",
            },
        },
    },
    VrfConfig = new JuniperMist.Site.Inputs.NetworktemplateVrfConfigArgs
    {
        Enabled = false,
    },
    Networks = 
    {
        { "string", new JuniperMist.Site.Inputs.NetworktemplateNetworksArgs
        {
            VlanId = "string",
            Gateway = "string",
            Gateway6 = "string",
            Isolation = false,
            IsolationVlanId = "string",
            Subnet = "string",
            Subnet6 = "string",
        } },
    },
});
Copy
example, err := site.NewNetworktemplate(ctx, "junipermistNetworktemplateResource", &site.NetworktemplateArgs{
	SiteId: pulumi.String("string"),
	NtpServers: pulumi.StringArray{
		pulumi.String("string"),
	},
	SwitchMgmt: &site.NetworktemplateSwitchMgmtArgs{
		ApAffinityThreshold: pulumi.Int(0),
		CliBanner:           pulumi.String("string"),
		CliIdleTimeout:      pulumi.Int(0),
		ConfigRevertTimer:   pulumi.Int(0),
		DhcpOptionFqdn:      pulumi.Bool(false),
		DisableOobDownAlarm: pulumi.Bool(false),
		FipsEnabled:         pulumi.Bool(false),
		LocalAccounts: site.NetworktemplateSwitchMgmtLocalAccountsMap{
			"string": &site.NetworktemplateSwitchMgmtLocalAccountsArgs{
				Password: pulumi.String("string"),
				Role:     pulumi.String("string"),
			},
		},
		MxedgeProxyHost: pulumi.String("string"),
		MxedgeProxyPort: pulumi.String("string"),
		ProtectRe: &site.NetworktemplateSwitchMgmtProtectReArgs{
			AllowedServices: pulumi.StringArray{
				pulumi.String("string"),
			},
			Customs: site.NetworktemplateSwitchMgmtProtectReCustomArray{
				&site.NetworktemplateSwitchMgmtProtectReCustomArgs{
					Subnets: pulumi.StringArray{
						pulumi.String("string"),
					},
					PortRange: pulumi.String("string"),
					Protocol:  pulumi.String("string"),
				},
			},
			Enabled: pulumi.Bool(false),
			TrustedHosts: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
		RootPassword: pulumi.String("string"),
		Tacacs: &site.NetworktemplateSwitchMgmtTacacsArgs{
			AcctServers: site.NetworktemplateSwitchMgmtTacacsAcctServerArray{
				&site.NetworktemplateSwitchMgmtTacacsAcctServerArgs{
					Host:    pulumi.String("string"),
					Port:    pulumi.String("string"),
					Secret:  pulumi.String("string"),
					Timeout: pulumi.Int(0),
				},
			},
			DefaultRole: pulumi.String("string"),
			Enabled:     pulumi.Bool(false),
			Network:     pulumi.String("string"),
			TacplusServers: site.NetworktemplateSwitchMgmtTacacsTacplusServerArray{
				&site.NetworktemplateSwitchMgmtTacacsTacplusServerArgs{
					Host:    pulumi.String("string"),
					Port:    pulumi.String("string"),
					Secret:  pulumi.String("string"),
					Timeout: pulumi.Int(0),
				},
			},
		},
		UseMxedgeProxy: pulumi.Bool(false),
	},
	AutoUpgradeLinecard: pulumi.Bool(false),
	DhcpSnooping: &site.NetworktemplateDhcpSnoopingArgs{
		AllNetworks:         pulumi.Bool(false),
		EnableArpSpoofCheck: pulumi.Bool(false),
		EnableIpSourceGuard: pulumi.Bool(false),
		Enabled:             pulumi.Bool(false),
		Networks: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	DisabledSystemDefinedPortUsages: pulumi.StringArray{
		pulumi.String("string"),
	},
	DnsServers: pulumi.StringArray{
		pulumi.String("string"),
	},
	DnsSuffixes: pulumi.StringArray{
		pulumi.String("string"),
	},
	ExtraRoutes: site.NetworktemplateExtraRoutesMap{
		"string": &site.NetworktemplateExtraRoutesArgs{
			Via:     pulumi.String("string"),
			Discard: pulumi.Bool(false),
			Metric:  pulumi.Int(0),
			NextQualified: site.NetworktemplateExtraRoutesNextQualifiedMap{
				"string": &site.NetworktemplateExtraRoutesNextQualifiedArgs{
					Metric:     pulumi.Int(0),
					Preference: pulumi.Int(0),
				},
			},
			NoResolve:  pulumi.Bool(false),
			Preference: pulumi.Int(0),
		},
	},
	ExtraRoutes6: site.NetworktemplateExtraRoutes6Map{
		"string": &site.NetworktemplateExtraRoutes6Args{
			Via:     pulumi.String("string"),
			Discard: pulumi.Bool(false),
			Metric:  pulumi.Int(0),
			NextQualified: site.NetworktemplateExtraRoutes6NextQualifiedMap{
				"string": &site.NetworktemplateExtraRoutes6NextQualifiedArgs{
					Metric:     pulumi.Int(0),
					Preference: pulumi.Int(0),
				},
			},
			NoResolve:  pulumi.Bool(false),
			Preference: pulumi.Int(0),
		},
	},
	MistNac: &site.NetworktemplateMistNacArgs{
		Enabled: pulumi.Bool(false),
		Network: pulumi.String("string"),
	},
	VrfInstances: site.NetworktemplateVrfInstancesMap{
		"string": &site.NetworktemplateVrfInstancesArgs{
			EvpnAutoLoopbackSubnet:  pulumi.String("string"),
			EvpnAutoLoopbackSubnet6: pulumi.String("string"),
			ExtraRoutes: site.NetworktemplateVrfInstancesExtraRoutesMap{
				"string": &site.NetworktemplateVrfInstancesExtraRoutesArgs{
					Via: pulumi.String("string"),
				},
			},
			ExtraRoutes6: site.NetworktemplateVrfInstancesExtraRoutes6Map{
				"string": &site.NetworktemplateVrfInstancesExtraRoutes6Args{
					Via: pulumi.String("string"),
				},
			},
			Networks: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	AdditionalConfigCmds: pulumi.StringArray{
		pulumi.String("string"),
	},
	PortUsages: site.NetworktemplatePortUsagesMap{
		"string": &site.NetworktemplatePortUsagesArgs{
			AllNetworks:                              pulumi.Bool(false),
			AllowDhcpd:                               pulumi.Bool(false),
			AllowMultipleSupplicants:                 pulumi.Bool(false),
			BypassAuthWhenServerDown:                 pulumi.Bool(false),
			BypassAuthWhenServerDownForUnknownClient: pulumi.Bool(false),
			Description:                              pulumi.String("string"),
			DisableAutoneg:                           pulumi.Bool(false),
			Disabled:                                 pulumi.Bool(false),
			Duplex:                                   pulumi.String("string"),
			DynamicVlanNetworks: pulumi.StringArray{
				pulumi.String("string"),
			},
			EnableMacAuth:             pulumi.Bool(false),
			EnableQos:                 pulumi.Bool(false),
			GuestNetwork:              pulumi.String("string"),
			InterIsolationNetworkLink: pulumi.Bool(false),
			InterSwitchLink:           pulumi.Bool(false),
			MacAuthOnly:               pulumi.Bool(false),
			MacAuthPreferred:          pulumi.Bool(false),
			MacAuthProtocol:           pulumi.String("string"),
			MacLimit:                  pulumi.String("string"),
			Mode:                      pulumi.String("string"),
			Mtu:                       pulumi.String("string"),
			Networks: pulumi.StringArray{
				pulumi.String("string"),
			},
			PersistMac:       pulumi.Bool(false),
			PoeDisabled:      pulumi.Bool(false),
			PortAuth:         pulumi.String("string"),
			PortNetwork:      pulumi.String("string"),
			ReauthInterval:   pulumi.String("string"),
			ResetDefaultWhen: pulumi.String("string"),
			Rules: site.NetworktemplatePortUsagesRuleArray{
				&site.NetworktemplatePortUsagesRuleArgs{
					Src:    pulumi.String("string"),
					Equals: pulumi.String("string"),
					EqualsAnies: pulumi.StringArray{
						pulumi.String("string"),
					},
					Expression: pulumi.String("string"),
					Usage:      pulumi.String("string"),
				},
			},
			ServerFailNetwork:   pulumi.String("string"),
			ServerRejectNetwork: pulumi.String("string"),
			Speed:               pulumi.String("string"),
			StormControl: &site.NetworktemplatePortUsagesStormControlArgs{
				NoBroadcast:           pulumi.Bool(false),
				NoMulticast:           pulumi.Bool(false),
				NoRegisteredMulticast: pulumi.Bool(false),
				NoUnknownUnicast:      pulumi.Bool(false),
				Percentage:            pulumi.Int(0),
			},
			StpEdge:       pulumi.Bool(false),
			StpNoRootPort: pulumi.Bool(false),
			StpP2p:        pulumi.Bool(false),
			UiEvpntopoId:  pulumi.String("string"),
			UseVstp:       pulumi.Bool(false),
			VoipNetwork:   pulumi.String("string"),
		},
	},
	PortMirroring: site.NetworktemplatePortMirroringMap{
		"string": &site.NetworktemplatePortMirroringArgs{
			InputNetworksIngresses: pulumi.StringArray{
				pulumi.String("string"),
			},
			InputPortIdsEgresses: pulumi.StringArray{
				pulumi.String("string"),
			},
			InputPortIdsIngresses: pulumi.StringArray{
				pulumi.String("string"),
			},
			OutputNetwork: pulumi.String("string"),
			OutputPortId:  pulumi.String("string"),
		},
	},
	OspfAreas: site.NetworktemplateOspfAreasMap{
		"string": &site.NetworktemplateOspfAreasArgs{
			Networks: site.NetworktemplateOspfAreasNetworksMap{
				"string": &site.NetworktemplateOspfAreasNetworksArgs{
					AuthKeys: pulumi.StringMap{
						"string": pulumi.String("string"),
					},
					AuthPassword:           pulumi.String("string"),
					AuthType:               pulumi.String("string"),
					BfdMinimumInterval:     pulumi.Int(0),
					DeadInterval:           pulumi.Int(0),
					ExportPolicy:           pulumi.String("string"),
					HelloInterval:          pulumi.Int(0),
					ImportPolicy:           pulumi.String("string"),
					InterfaceType:          pulumi.String("string"),
					Metric:                 pulumi.Int(0),
					NoReadvertiseToOverlay: pulumi.Bool(false),
					Passive:                pulumi.Bool(false),
				},
			},
			IncludeLoopback: pulumi.Bool(false),
			Type:            pulumi.String("string"),
		},
	},
	RadiusConfig: &site.NetworktemplateRadiusConfigArgs{
		AcctImmediateUpdate: pulumi.Bool(false),
		AcctInterimInterval: pulumi.Int(0),
		AcctServers: site.NetworktemplateRadiusConfigAcctServerArray{
			&site.NetworktemplateRadiusConfigAcctServerArgs{
				Host:           pulumi.String("string"),
				Secret:         pulumi.String("string"),
				KeywrapEnabled: pulumi.Bool(false),
				KeywrapFormat:  pulumi.String("string"),
				KeywrapKek:     pulumi.String("string"),
				KeywrapMack:    pulumi.String("string"),
				Port:           pulumi.Int(0),
			},
		},
		AuthServerSelection: pulumi.String("string"),
		AuthServers: site.NetworktemplateRadiusConfigAuthServerArray{
			&site.NetworktemplateRadiusConfigAuthServerArgs{
				Host:                        pulumi.String("string"),
				Secret:                      pulumi.String("string"),
				KeywrapEnabled:              pulumi.Bool(false),
				KeywrapFormat:               pulumi.String("string"),
				KeywrapKek:                  pulumi.String("string"),
				KeywrapMack:                 pulumi.String("string"),
				Port:                        pulumi.Int(0),
				RequireMessageAuthenticator: pulumi.Bool(false),
			},
		},
		AuthServersRetries: pulumi.Int(0),
		AuthServersTimeout: pulumi.Int(0),
		CoaEnabled:         pulumi.Bool(false),
		CoaPort:            pulumi.String("string"),
		FastDot1xTimers:    pulumi.Bool(false),
		Network:            pulumi.String("string"),
		SourceIp:           pulumi.String("string"),
	},
	RemoteSyslog: &site.NetworktemplateRemoteSyslogArgs{
		Archive: &site.NetworktemplateRemoteSyslogArchiveArgs{
			Files: pulumi.String("string"),
			Size:  pulumi.String("string"),
		},
		Console: &site.NetworktemplateRemoteSyslogConsoleArgs{
			Contents: site.NetworktemplateRemoteSyslogConsoleContentArray{
				&site.NetworktemplateRemoteSyslogConsoleContentArgs{
					Facility: pulumi.String("string"),
					Severity: pulumi.String("string"),
				},
			},
		},
		Enabled: pulumi.Bool(false),
		Files: site.NetworktemplateRemoteSyslogFileArray{
			&site.NetworktemplateRemoteSyslogFileArgs{
				Archive: &site.NetworktemplateRemoteSyslogFileArchiveArgs{
					Files: pulumi.String("string"),
					Size:  pulumi.String("string"),
				},
				Contents: site.NetworktemplateRemoteSyslogFileContentArray{
					&site.NetworktemplateRemoteSyslogFileContentArgs{
						Facility: pulumi.String("string"),
						Severity: pulumi.String("string"),
					},
				},
				ExplicitPriority: pulumi.Bool(false),
				File:             pulumi.String("string"),
				Match:            pulumi.String("string"),
				StructuredData:   pulumi.Bool(false),
			},
		},
		Network:          pulumi.String("string"),
		SendToAllServers: pulumi.Bool(false),
		Servers: site.NetworktemplateRemoteSyslogServerArray{
			&site.NetworktemplateRemoteSyslogServerArgs{
				Contents: site.NetworktemplateRemoteSyslogServerContentArray{
					&site.NetworktemplateRemoteSyslogServerContentArgs{
						Facility: pulumi.String("string"),
						Severity: pulumi.String("string"),
					},
				},
				ExplicitPriority: pulumi.Bool(false),
				Facility:         pulumi.String("string"),
				Host:             pulumi.String("string"),
				Match:            pulumi.String("string"),
				Port:             pulumi.String("string"),
				Protocol:         pulumi.String("string"),
				RoutingInstance:  pulumi.String("string"),
				Severity:         pulumi.String("string"),
				SourceAddress:    pulumi.String("string"),
				StructuredData:   pulumi.Bool(false),
				Tag:              pulumi.String("string"),
			},
		},
		TimeFormat: pulumi.String("string"),
		Users: site.NetworktemplateRemoteSyslogUserArray{
			&site.NetworktemplateRemoteSyslogUserArgs{
				Contents: site.NetworktemplateRemoteSyslogUserContentArray{
					&site.NetworktemplateRemoteSyslogUserContentArgs{
						Facility: pulumi.String("string"),
						Severity: pulumi.String("string"),
					},
				},
				Match: pulumi.String("string"),
				User:  pulumi.String("string"),
			},
		},
	},
	RemoveExistingConfigs: pulumi.Bool(false),
	AclTags: site.NetworktemplateAclTagsMap{
		"string": &site.NetworktemplateAclTagsArgs{
			Type:   pulumi.String("string"),
			GbpTag: pulumi.Int(0),
			Macs: pulumi.StringArray{
				pulumi.String("string"),
			},
			Network:     pulumi.String("string"),
			RadiusGroup: pulumi.String("string"),
			Specs: site.NetworktemplateAclTagsSpecArray{
				&site.NetworktemplateAclTagsSpecArgs{
					PortRange: pulumi.String("string"),
					Protocol:  pulumi.String("string"),
				},
			},
			Subnets: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	SnmpConfig: &site.NetworktemplateSnmpConfigArgs{
		ClientLists: site.NetworktemplateSnmpConfigClientListArray{
			&site.NetworktemplateSnmpConfigClientListArgs{
				ClientListName: pulumi.String("string"),
				Clients: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
		Contact:     pulumi.String("string"),
		Description: pulumi.String("string"),
		Enabled:     pulumi.Bool(false),
		EngineId:    pulumi.String("string"),
		Location:    pulumi.String("string"),
		Name:        pulumi.String("string"),
		Network:     pulumi.String("string"),
		TrapGroups: site.NetworktemplateSnmpConfigTrapGroupArray{
			&site.NetworktemplateSnmpConfigTrapGroupArgs{
				Categories: pulumi.StringArray{
					pulumi.String("string"),
				},
				GroupName: pulumi.String("string"),
				Targets: pulumi.StringArray{
					pulumi.String("string"),
				},
				Version: pulumi.String("string"),
			},
		},
		V2cConfigs: site.NetworktemplateSnmpConfigV2cConfigArray{
			&site.NetworktemplateSnmpConfigV2cConfigArgs{
				Authorization:  pulumi.String("string"),
				ClientListName: pulumi.String("string"),
				CommunityName:  pulumi.String("string"),
				View:           pulumi.String("string"),
			},
		},
		V3Config: &site.NetworktemplateSnmpConfigV3ConfigArgs{
			Notifies: site.NetworktemplateSnmpConfigV3ConfigNotifyArray{
				&site.NetworktemplateSnmpConfigV3ConfigNotifyArgs{
					Name: pulumi.String("string"),
					Tag:  pulumi.String("string"),
					Type: pulumi.String("string"),
				},
			},
			NotifyFilters: site.NetworktemplateSnmpConfigV3ConfigNotifyFilterArray{
				&site.NetworktemplateSnmpConfigV3ConfigNotifyFilterArgs{
					Contents: site.NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArray{
						&site.NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArgs{
							Oid:     pulumi.String("string"),
							Include: pulumi.Bool(false),
						},
					},
					ProfileName: pulumi.String("string"),
				},
			},
			TargetAddresses: site.NetworktemplateSnmpConfigV3ConfigTargetAddressArray{
				&site.NetworktemplateSnmpConfigV3ConfigTargetAddressArgs{
					Address:           pulumi.String("string"),
					AddressMask:       pulumi.String("string"),
					TargetAddressName: pulumi.String("string"),
					Port:              pulumi.String("string"),
					TagList:           pulumi.String("string"),
					TargetParameters:  pulumi.String("string"),
				},
			},
			TargetParameters: site.NetworktemplateSnmpConfigV3ConfigTargetParameterArray{
				&site.NetworktemplateSnmpConfigV3ConfigTargetParameterArgs{
					MessageProcessingModel: pulumi.String("string"),
					Name:                   pulumi.String("string"),
					NotifyFilter:           pulumi.String("string"),
					SecurityLevel:          pulumi.String("string"),
					SecurityModel:          pulumi.String("string"),
					SecurityName:           pulumi.String("string"),
				},
			},
			Usms: site.NetworktemplateSnmpConfigV3ConfigUsmArray{
				&site.NetworktemplateSnmpConfigV3ConfigUsmArgs{
					EngineType:     pulumi.String("string"),
					RemoteEngineId: pulumi.String("string"),
					Users: site.NetworktemplateSnmpConfigV3ConfigUsmUserArray{
						&site.NetworktemplateSnmpConfigV3ConfigUsmUserArgs{
							AuthenticationPassword: pulumi.String("string"),
							AuthenticationType:     pulumi.String("string"),
							EncryptionPassword:     pulumi.String("string"),
							EncryptionType:         pulumi.String("string"),
							Name:                   pulumi.String("string"),
						},
					},
				},
			},
			Vacm: &site.NetworktemplateSnmpConfigV3ConfigVacmArgs{
				Accesses: site.NetworktemplateSnmpConfigV3ConfigVacmAccessArray{
					&site.NetworktemplateSnmpConfigV3ConfigVacmAccessArgs{
						GroupName: pulumi.String("string"),
						PrefixLists: site.NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArray{
							&site.NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArgs{
								ContextPrefix: pulumi.String("string"),
								NotifyView:    pulumi.String("string"),
								ReadView:      pulumi.String("string"),
								SecurityLevel: pulumi.String("string"),
								SecurityModel: pulumi.String("string"),
								Type:          pulumi.String("string"),
								WriteView:     pulumi.String("string"),
							},
						},
					},
				},
				SecurityToGroup: &site.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupArgs{
					Contents: site.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArray{
						&site.NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArgs{
							Group:        pulumi.String("string"),
							SecurityName: pulumi.String("string"),
						},
					},
					SecurityModel: pulumi.String("string"),
				},
			},
		},
		Views: site.NetworktemplateSnmpConfigViewArray{
			&site.NetworktemplateSnmpConfigViewArgs{
				Include:  pulumi.Bool(false),
				Oid:      pulumi.String("string"),
				ViewName: pulumi.String("string"),
			},
		},
	},
	SwitchMatching: &site.NetworktemplateSwitchMatchingArgs{
		Enable: pulumi.Bool(false),
		Rules: site.NetworktemplateSwitchMatchingRuleArray{
			&site.NetworktemplateSwitchMatchingRuleArgs{
				AdditionalConfigCmds: pulumi.StringArray{
					pulumi.String("string"),
				},
				IpConfig: &site.NetworktemplateSwitchMatchingRuleIpConfigArgs{
					Network: pulumi.String("string"),
					Type:    pulumi.String("string"),
				},
				MatchModel:      pulumi.String("string"),
				MatchName:       pulumi.String("string"),
				MatchNameOffset: pulumi.Int(0),
				MatchRole:       pulumi.String("string"),
				Name:            pulumi.String("string"),
				OobIpConfig: &site.NetworktemplateSwitchMatchingRuleOobIpConfigArgs{
					Type:                 pulumi.String("string"),
					UseMgmtVrf:           pulumi.Bool(false),
					UseMgmtVrfForHostOut: pulumi.Bool(false),
				},
				PortConfig: site.NetworktemplateSwitchMatchingRulePortConfigMap{
					"string": &site.NetworktemplateSwitchMatchingRulePortConfigArgs{
						Usage:            pulumi.String("string"),
						DisableAutoneg:   pulumi.Bool(false),
						DynamicUsage:     pulumi.String("string"),
						Aggregated:       pulumi.Bool(false),
						Critical:         pulumi.Bool(false),
						Description:      pulumi.String("string"),
						AeDisableLacp:    pulumi.Bool(false),
						Duplex:           pulumi.String("string"),
						AeLacpSlow:       pulumi.Bool(false),
						Esilag:           pulumi.Bool(false),
						Mtu:              pulumi.Int(0),
						NoLocalOverwrite: pulumi.Bool(false),
						PoeDisabled:      pulumi.Bool(false),
						Speed:            pulumi.String("string"),
						AeIdx:            pulumi.Int(0),
					},
				},
				PortMirroring: site.NetworktemplateSwitchMatchingRulePortMirroringMap{
					"string": &site.NetworktemplateSwitchMatchingRulePortMirroringArgs{
						InputNetworksIngresses: pulumi.StringArray{
							pulumi.String("string"),
						},
						InputPortIdsEgresses: pulumi.StringArray{
							pulumi.String("string"),
						},
						InputPortIdsIngresses: pulumi.StringArray{
							pulumi.String("string"),
						},
						OutputNetwork: pulumi.String("string"),
						OutputPortId:  pulumi.String("string"),
					},
				},
			},
		},
	},
	AclPolicies: site.NetworktemplateAclPolicyArray{
		&site.NetworktemplateAclPolicyArgs{
			Actions: site.NetworktemplateAclPolicyActionArray{
				&site.NetworktemplateAclPolicyActionArgs{
					DstTag: pulumi.String("string"),
					Action: pulumi.String("string"),
				},
			},
			Name: pulumi.String("string"),
			SrcTags: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	VrfConfig: &site.NetworktemplateVrfConfigArgs{
		Enabled: pulumi.Bool(false),
	},
	Networks: site.NetworktemplateNetworksMap{
		"string": &site.NetworktemplateNetworksArgs{
			VlanId:          pulumi.String("string"),
			Gateway:         pulumi.String("string"),
			Gateway6:        pulumi.String("string"),
			Isolation:       pulumi.Bool(false),
			IsolationVlanId: pulumi.String("string"),
			Subnet:          pulumi.String("string"),
			Subnet6:         pulumi.String("string"),
		},
	},
})
Copy
var junipermistNetworktemplateResource = new Networktemplate("junipermistNetworktemplateResource", NetworktemplateArgs.builder()
    .siteId("string")
    .ntpServers("string")
    .switchMgmt(NetworktemplateSwitchMgmtArgs.builder()
        .apAffinityThreshold(0)
        .cliBanner("string")
        .cliIdleTimeout(0)
        .configRevertTimer(0)
        .dhcpOptionFqdn(false)
        .disableOobDownAlarm(false)
        .fipsEnabled(false)
        .localAccounts(Map.of("string", Map.ofEntries(
            Map.entry("password", "string"),
            Map.entry("role", "string")
        )))
        .mxedgeProxyHost("string")
        .mxedgeProxyPort("string")
        .protectRe(NetworktemplateSwitchMgmtProtectReArgs.builder()
            .allowedServices("string")
            .customs(NetworktemplateSwitchMgmtProtectReCustomArgs.builder()
                .subnets("string")
                .portRange("string")
                .protocol("string")
                .build())
            .enabled(false)
            .trustedHosts("string")
            .build())
        .rootPassword("string")
        .tacacs(NetworktemplateSwitchMgmtTacacsArgs.builder()
            .acctServers(NetworktemplateSwitchMgmtTacacsAcctServerArgs.builder()
                .host("string")
                .port("string")
                .secret("string")
                .timeout(0)
                .build())
            .defaultRole("string")
            .enabled(false)
            .network("string")
            .tacplusServers(NetworktemplateSwitchMgmtTacacsTacplusServerArgs.builder()
                .host("string")
                .port("string")
                .secret("string")
                .timeout(0)
                .build())
            .build())
        .useMxedgeProxy(false)
        .build())
    .autoUpgradeLinecard(false)
    .dhcpSnooping(NetworktemplateDhcpSnoopingArgs.builder()
        .allNetworks(false)
        .enableArpSpoofCheck(false)
        .enableIpSourceGuard(false)
        .enabled(false)
        .networks("string")
        .build())
    .disabledSystemDefinedPortUsages("string")
    .dnsServers("string")
    .dnsSuffixes("string")
    .extraRoutes(Map.of("string", Map.ofEntries(
        Map.entry("via", "string"),
        Map.entry("discard", false),
        Map.entry("metric", 0),
        Map.entry("nextQualified", Map.of("string", Map.ofEntries(
            Map.entry("metric", 0),
            Map.entry("preference", 0)
        ))),
        Map.entry("noResolve", false),
        Map.entry("preference", 0)
    )))
    .extraRoutes6(Map.of("string", Map.ofEntries(
        Map.entry("via", "string"),
        Map.entry("discard", false),
        Map.entry("metric", 0),
        Map.entry("nextQualified", Map.of("string", Map.ofEntries(
            Map.entry("metric", 0),
            Map.entry("preference", 0)
        ))),
        Map.entry("noResolve", false),
        Map.entry("preference", 0)
    )))
    .mistNac(NetworktemplateMistNacArgs.builder()
        .enabled(false)
        .network("string")
        .build())
    .vrfInstances(Map.of("string", Map.ofEntries(
        Map.entry("evpnAutoLoopbackSubnet", "string"),
        Map.entry("evpnAutoLoopbackSubnet6", "string"),
        Map.entry("extraRoutes", Map.of("string", Map.of("via", "string"))),
        Map.entry("extraRoutes6", Map.of("string", Map.of("via", "string"))),
        Map.entry("networks", "string")
    )))
    .additionalConfigCmds("string")
    .portUsages(Map.of("string", Map.ofEntries(
        Map.entry("allNetworks", false),
        Map.entry("allowDhcpd", false),
        Map.entry("allowMultipleSupplicants", false),
        Map.entry("bypassAuthWhenServerDown", false),
        Map.entry("bypassAuthWhenServerDownForUnknownClient", false),
        Map.entry("description", "string"),
        Map.entry("disableAutoneg", false),
        Map.entry("disabled", false),
        Map.entry("duplex", "string"),
        Map.entry("dynamicVlanNetworks", "string"),
        Map.entry("enableMacAuth", false),
        Map.entry("enableQos", false),
        Map.entry("guestNetwork", "string"),
        Map.entry("interIsolationNetworkLink", false),
        Map.entry("interSwitchLink", false),
        Map.entry("macAuthOnly", false),
        Map.entry("macAuthPreferred", false),
        Map.entry("macAuthProtocol", "string"),
        Map.entry("macLimit", "string"),
        Map.entry("mode", "string"),
        Map.entry("mtu", "string"),
        Map.entry("networks", "string"),
        Map.entry("persistMac", false),
        Map.entry("poeDisabled", false),
        Map.entry("portAuth", "string"),
        Map.entry("portNetwork", "string"),
        Map.entry("reauthInterval", "string"),
        Map.entry("resetDefaultWhen", "string"),
        Map.entry("rules", Map.ofEntries(
            Map.entry("src", "string"),
            Map.entry("equals", "string"),
            Map.entry("equalsAnies", "string"),
            Map.entry("expression", "string"),
            Map.entry("usage", "string")
        )),
        Map.entry("serverFailNetwork", "string"),
        Map.entry("serverRejectNetwork", "string"),
        Map.entry("speed", "string"),
        Map.entry("stormControl", Map.ofEntries(
            Map.entry("noBroadcast", false),
            Map.entry("noMulticast", false),
            Map.entry("noRegisteredMulticast", false),
            Map.entry("noUnknownUnicast", false),
            Map.entry("percentage", 0)
        )),
        Map.entry("stpEdge", false),
        Map.entry("stpNoRootPort", false),
        Map.entry("stpP2p", false),
        Map.entry("uiEvpntopoId", "string"),
        Map.entry("useVstp", false),
        Map.entry("voipNetwork", "string")
    )))
    .portMirroring(Map.of("string", Map.ofEntries(
        Map.entry("inputNetworksIngresses", "string"),
        Map.entry("inputPortIdsEgresses", "string"),
        Map.entry("inputPortIdsIngresses", "string"),
        Map.entry("outputNetwork", "string"),
        Map.entry("outputPortId", "string")
    )))
    .ospfAreas(Map.of("string", Map.ofEntries(
        Map.entry("networks", Map.of("string", Map.ofEntries(
            Map.entry("authKeys", Map.of("string", "string")),
            Map.entry("authPassword", "string"),
            Map.entry("authType", "string"),
            Map.entry("bfdMinimumInterval", 0),
            Map.entry("deadInterval", 0),
            Map.entry("exportPolicy", "string"),
            Map.entry("helloInterval", 0),
            Map.entry("importPolicy", "string"),
            Map.entry("interfaceType", "string"),
            Map.entry("metric", 0),
            Map.entry("noReadvertiseToOverlay", false),
            Map.entry("passive", false)
        ))),
        Map.entry("includeLoopback", false),
        Map.entry("type", "string")
    )))
    .radiusConfig(NetworktemplateRadiusConfigArgs.builder()
        .acctImmediateUpdate(false)
        .acctInterimInterval(0)
        .acctServers(NetworktemplateRadiusConfigAcctServerArgs.builder()
            .host("string")
            .secret("string")
            .keywrapEnabled(false)
            .keywrapFormat("string")
            .keywrapKek("string")
            .keywrapMack("string")
            .port(0)
            .build())
        .authServerSelection("string")
        .authServers(NetworktemplateRadiusConfigAuthServerArgs.builder()
            .host("string")
            .secret("string")
            .keywrapEnabled(false)
            .keywrapFormat("string")
            .keywrapKek("string")
            .keywrapMack("string")
            .port(0)
            .requireMessageAuthenticator(false)
            .build())
        .authServersRetries(0)
        .authServersTimeout(0)
        .coaEnabled(false)
        .coaPort("string")
        .fastDot1xTimers(false)
        .network("string")
        .sourceIp("string")
        .build())
    .remoteSyslog(NetworktemplateRemoteSyslogArgs.builder()
        .archive(NetworktemplateRemoteSyslogArchiveArgs.builder()
            .files("string")
            .size("string")
            .build())
        .console(NetworktemplateRemoteSyslogConsoleArgs.builder()
            .contents(NetworktemplateRemoteSyslogConsoleContentArgs.builder()
                .facility("string")
                .severity("string")
                .build())
            .build())
        .enabled(false)
        .files(NetworktemplateRemoteSyslogFileArgs.builder()
            .archive(NetworktemplateRemoteSyslogFileArchiveArgs.builder()
                .files("string")
                .size("string")
                .build())
            .contents(NetworktemplateRemoteSyslogFileContentArgs.builder()
                .facility("string")
                .severity("string")
                .build())
            .explicitPriority(false)
            .file("string")
            .match("string")
            .structuredData(false)
            .build())
        .network("string")
        .sendToAllServers(false)
        .servers(NetworktemplateRemoteSyslogServerArgs.builder()
            .contents(NetworktemplateRemoteSyslogServerContentArgs.builder()
                .facility("string")
                .severity("string")
                .build())
            .explicitPriority(false)
            .facility("string")
            .host("string")
            .match("string")
            .port("string")
            .protocol("string")
            .routingInstance("string")
            .severity("string")
            .sourceAddress("string")
            .structuredData(false)
            .tag("string")
            .build())
        .timeFormat("string")
        .users(NetworktemplateRemoteSyslogUserArgs.builder()
            .contents(NetworktemplateRemoteSyslogUserContentArgs.builder()
                .facility("string")
                .severity("string")
                .build())
            .match("string")
            .user("string")
            .build())
        .build())
    .removeExistingConfigs(false)
    .aclTags(Map.of("string", Map.ofEntries(
        Map.entry("type", "string"),
        Map.entry("gbpTag", 0),
        Map.entry("macs", "string"),
        Map.entry("network", "string"),
        Map.entry("radiusGroup", "string"),
        Map.entry("specs", Map.ofEntries(
            Map.entry("portRange", "string"),
            Map.entry("protocol", "string")
        )),
        Map.entry("subnets", "string")
    )))
    .snmpConfig(NetworktemplateSnmpConfigArgs.builder()
        .clientLists(NetworktemplateSnmpConfigClientListArgs.builder()
            .clientListName("string")
            .clients("string")
            .build())
        .contact("string")
        .description("string")
        .enabled(false)
        .engineId("string")
        .location("string")
        .name("string")
        .network("string")
        .trapGroups(NetworktemplateSnmpConfigTrapGroupArgs.builder()
            .categories("string")
            .groupName("string")
            .targets("string")
            .version("string")
            .build())
        .v2cConfigs(NetworktemplateSnmpConfigV2cConfigArgs.builder()
            .authorization("string")
            .clientListName("string")
            .communityName("string")
            .view("string")
            .build())
        .v3Config(NetworktemplateSnmpConfigV3ConfigArgs.builder()
            .notifies(NetworktemplateSnmpConfigV3ConfigNotifyArgs.builder()
                .name("string")
                .tag("string")
                .type("string")
                .build())
            .notifyFilters(NetworktemplateSnmpConfigV3ConfigNotifyFilterArgs.builder()
                .contents(NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArgs.builder()
                    .oid("string")
                    .include(false)
                    .build())
                .profileName("string")
                .build())
            .targetAddresses(NetworktemplateSnmpConfigV3ConfigTargetAddressArgs.builder()
                .address("string")
                .addressMask("string")
                .targetAddressName("string")
                .port("string")
                .tagList("string")
                .targetParameters("string")
                .build())
            .targetParameters(NetworktemplateSnmpConfigV3ConfigTargetParameterArgs.builder()
                .messageProcessingModel("string")
                .name("string")
                .notifyFilter("string")
                .securityLevel("string")
                .securityModel("string")
                .securityName("string")
                .build())
            .usms(NetworktemplateSnmpConfigV3ConfigUsmArgs.builder()
                .engineType("string")
                .remoteEngineId("string")
                .users(NetworktemplateSnmpConfigV3ConfigUsmUserArgs.builder()
                    .authenticationPassword("string")
                    .authenticationType("string")
                    .encryptionPassword("string")
                    .encryptionType("string")
                    .name("string")
                    .build())
                .build())
            .vacm(NetworktemplateSnmpConfigV3ConfigVacmArgs.builder()
                .accesses(NetworktemplateSnmpConfigV3ConfigVacmAccessArgs.builder()
                    .groupName("string")
                    .prefixLists(NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArgs.builder()
                        .contextPrefix("string")
                        .notifyView("string")
                        .readView("string")
                        .securityLevel("string")
                        .securityModel("string")
                        .type("string")
                        .writeView("string")
                        .build())
                    .build())
                .securityToGroup(NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupArgs.builder()
                    .contents(NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArgs.builder()
                        .group("string")
                        .securityName("string")
                        .build())
                    .securityModel("string")
                    .build())
                .build())
            .build())
        .views(NetworktemplateSnmpConfigViewArgs.builder()
            .include(false)
            .oid("string")
            .viewName("string")
            .build())
        .build())
    .switchMatching(NetworktemplateSwitchMatchingArgs.builder()
        .enable(false)
        .rules(NetworktemplateSwitchMatchingRuleArgs.builder()
            .additionalConfigCmds("string")
            .ipConfig(NetworktemplateSwitchMatchingRuleIpConfigArgs.builder()
                .network("string")
                .type("string")
                .build())
            .matchModel("string")
            .matchName("string")
            .matchNameOffset(0)
            .matchRole("string")
            .name("string")
            .oobIpConfig(NetworktemplateSwitchMatchingRuleOobIpConfigArgs.builder()
                .type("string")
                .useMgmtVrf(false)
                .useMgmtVrfForHostOut(false)
                .build())
            .portConfig(Map.of("string", Map.ofEntries(
                Map.entry("usage", "string"),
                Map.entry("disableAutoneg", false),
                Map.entry("dynamicUsage", "string"),
                Map.entry("aggregated", false),
                Map.entry("critical", false),
                Map.entry("description", "string"),
                Map.entry("aeDisableLacp", false),
                Map.entry("duplex", "string"),
                Map.entry("aeLacpSlow", false),
                Map.entry("esilag", false),
                Map.entry("mtu", 0),
                Map.entry("noLocalOverwrite", false),
                Map.entry("poeDisabled", false),
                Map.entry("speed", "string"),
                Map.entry("aeIdx", 0)
            )))
            .portMirroring(Map.of("string", Map.ofEntries(
                Map.entry("inputNetworksIngresses", "string"),
                Map.entry("inputPortIdsEgresses", "string"),
                Map.entry("inputPortIdsIngresses", "string"),
                Map.entry("outputNetwork", "string"),
                Map.entry("outputPortId", "string")
            )))
            .build())
        .build())
    .aclPolicies(NetworktemplateAclPolicyArgs.builder()
        .actions(NetworktemplateAclPolicyActionArgs.builder()
            .dstTag("string")
            .action("string")
            .build())
        .name("string")
        .srcTags("string")
        .build())
    .vrfConfig(NetworktemplateVrfConfigArgs.builder()
        .enabled(false)
        .build())
    .networks(Map.of("string", Map.ofEntries(
        Map.entry("vlanId", "string"),
        Map.entry("gateway", "string"),
        Map.entry("gateway6", "string"),
        Map.entry("isolation", false),
        Map.entry("isolationVlanId", "string"),
        Map.entry("subnet", "string"),
        Map.entry("subnet6", "string")
    )))
    .build());
Copy
junipermist_networktemplate_resource = junipermist.site.Networktemplate("junipermistNetworktemplateResource",
    site_id="string",
    ntp_servers=["string"],
    switch_mgmt={
        "ap_affinity_threshold": 0,
        "cli_banner": "string",
        "cli_idle_timeout": 0,
        "config_revert_timer": 0,
        "dhcp_option_fqdn": False,
        "disable_oob_down_alarm": False,
        "fips_enabled": False,
        "local_accounts": {
            "string": {
                "password": "string",
                "role": "string",
            },
        },
        "mxedge_proxy_host": "string",
        "mxedge_proxy_port": "string",
        "protect_re": {
            "allowed_services": ["string"],
            "customs": [{
                "subnets": ["string"],
                "port_range": "string",
                "protocol": "string",
            }],
            "enabled": False,
            "trusted_hosts": ["string"],
        },
        "root_password": "string",
        "tacacs": {
            "acct_servers": [{
                "host": "string",
                "port": "string",
                "secret": "string",
                "timeout": 0,
            }],
            "default_role": "string",
            "enabled": False,
            "network": "string",
            "tacplus_servers": [{
                "host": "string",
                "port": "string",
                "secret": "string",
                "timeout": 0,
            }],
        },
        "use_mxedge_proxy": False,
    },
    auto_upgrade_linecard=False,
    dhcp_snooping={
        "all_networks": False,
        "enable_arp_spoof_check": False,
        "enable_ip_source_guard": False,
        "enabled": False,
        "networks": ["string"],
    },
    disabled_system_defined_port_usages=["string"],
    dns_servers=["string"],
    dns_suffixes=["string"],
    extra_routes={
        "string": {
            "via": "string",
            "discard": False,
            "metric": 0,
            "next_qualified": {
                "string": {
                    "metric": 0,
                    "preference": 0,
                },
            },
            "no_resolve": False,
            "preference": 0,
        },
    },
    extra_routes6={
        "string": {
            "via": "string",
            "discard": False,
            "metric": 0,
            "next_qualified": {
                "string": {
                    "metric": 0,
                    "preference": 0,
                },
            },
            "no_resolve": False,
            "preference": 0,
        },
    },
    mist_nac={
        "enabled": False,
        "network": "string",
    },
    vrf_instances={
        "string": {
            "evpn_auto_loopback_subnet": "string",
            "evpn_auto_loopback_subnet6": "string",
            "extra_routes": {
                "string": {
                    "via": "string",
                },
            },
            "extra_routes6": {
                "string": {
                    "via": "string",
                },
            },
            "networks": ["string"],
        },
    },
    additional_config_cmds=["string"],
    port_usages={
        "string": {
            "all_networks": False,
            "allow_dhcpd": False,
            "allow_multiple_supplicants": False,
            "bypass_auth_when_server_down": False,
            "bypass_auth_when_server_down_for_unknown_client": False,
            "description": "string",
            "disable_autoneg": False,
            "disabled": False,
            "duplex": "string",
            "dynamic_vlan_networks": ["string"],
            "enable_mac_auth": False,
            "enable_qos": False,
            "guest_network": "string",
            "inter_isolation_network_link": False,
            "inter_switch_link": False,
            "mac_auth_only": False,
            "mac_auth_preferred": False,
            "mac_auth_protocol": "string",
            "mac_limit": "string",
            "mode": "string",
            "mtu": "string",
            "networks": ["string"],
            "persist_mac": False,
            "poe_disabled": False,
            "port_auth": "string",
            "port_network": "string",
            "reauth_interval": "string",
            "reset_default_when": "string",
            "rules": [{
                "src": "string",
                "equals": "string",
                "equals_anies": ["string"],
                "expression": "string",
                "usage": "string",
            }],
            "server_fail_network": "string",
            "server_reject_network": "string",
            "speed": "string",
            "storm_control": {
                "no_broadcast": False,
                "no_multicast": False,
                "no_registered_multicast": False,
                "no_unknown_unicast": False,
                "percentage": 0,
            },
            "stp_edge": False,
            "stp_no_root_port": False,
            "stp_p2p": False,
            "ui_evpntopo_id": "string",
            "use_vstp": False,
            "voip_network": "string",
        },
    },
    port_mirroring={
        "string": {
            "input_networks_ingresses": ["string"],
            "input_port_ids_egresses": ["string"],
            "input_port_ids_ingresses": ["string"],
            "output_network": "string",
            "output_port_id": "string",
        },
    },
    ospf_areas={
        "string": {
            "networks": {
                "string": {
                    "auth_keys": {
                        "string": "string",
                    },
                    "auth_password": "string",
                    "auth_type": "string",
                    "bfd_minimum_interval": 0,
                    "dead_interval": 0,
                    "export_policy": "string",
                    "hello_interval": 0,
                    "import_policy": "string",
                    "interface_type": "string",
                    "metric": 0,
                    "no_readvertise_to_overlay": False,
                    "passive": False,
                },
            },
            "include_loopback": False,
            "type": "string",
        },
    },
    radius_config={
        "acct_immediate_update": False,
        "acct_interim_interval": 0,
        "acct_servers": [{
            "host": "string",
            "secret": "string",
            "keywrap_enabled": False,
            "keywrap_format": "string",
            "keywrap_kek": "string",
            "keywrap_mack": "string",
            "port": 0,
        }],
        "auth_server_selection": "string",
        "auth_servers": [{
            "host": "string",
            "secret": "string",
            "keywrap_enabled": False,
            "keywrap_format": "string",
            "keywrap_kek": "string",
            "keywrap_mack": "string",
            "port": 0,
            "require_message_authenticator": False,
        }],
        "auth_servers_retries": 0,
        "auth_servers_timeout": 0,
        "coa_enabled": False,
        "coa_port": "string",
        "fast_dot1x_timers": False,
        "network": "string",
        "source_ip": "string",
    },
    remote_syslog={
        "archive": {
            "files": "string",
            "size": "string",
        },
        "console": {
            "contents": [{
                "facility": "string",
                "severity": "string",
            }],
        },
        "enabled": False,
        "files": [{
            "archive": {
                "files": "string",
                "size": "string",
            },
            "contents": [{
                "facility": "string",
                "severity": "string",
            }],
            "explicit_priority": False,
            "file": "string",
            "match": "string",
            "structured_data": False,
        }],
        "network": "string",
        "send_to_all_servers": False,
        "servers": [{
            "contents": [{
                "facility": "string",
                "severity": "string",
            }],
            "explicit_priority": False,
            "facility": "string",
            "host": "string",
            "match": "string",
            "port": "string",
            "protocol": "string",
            "routing_instance": "string",
            "severity": "string",
            "source_address": "string",
            "structured_data": False,
            "tag": "string",
        }],
        "time_format": "string",
        "users": [{
            "contents": [{
                "facility": "string",
                "severity": "string",
            }],
            "match": "string",
            "user": "string",
        }],
    },
    remove_existing_configs=False,
    acl_tags={
        "string": {
            "type": "string",
            "gbp_tag": 0,
            "macs": ["string"],
            "network": "string",
            "radius_group": "string",
            "specs": [{
                "port_range": "string",
                "protocol": "string",
            }],
            "subnets": ["string"],
        },
    },
    snmp_config={
        "client_lists": [{
            "client_list_name": "string",
            "clients": ["string"],
        }],
        "contact": "string",
        "description": "string",
        "enabled": False,
        "engine_id": "string",
        "location": "string",
        "name": "string",
        "network": "string",
        "trap_groups": [{
            "categories": ["string"],
            "group_name": "string",
            "targets": ["string"],
            "version": "string",
        }],
        "v2c_configs": [{
            "authorization": "string",
            "client_list_name": "string",
            "community_name": "string",
            "view": "string",
        }],
        "v3_config": {
            "notifies": [{
                "name": "string",
                "tag": "string",
                "type": "string",
            }],
            "notify_filters": [{
                "contents": [{
                    "oid": "string",
                    "include": False,
                }],
                "profile_name": "string",
            }],
            "target_addresses": [{
                "address": "string",
                "address_mask": "string",
                "target_address_name": "string",
                "port": "string",
                "tag_list": "string",
                "target_parameters": "string",
            }],
            "target_parameters": [{
                "message_processing_model": "string",
                "name": "string",
                "notify_filter": "string",
                "security_level": "string",
                "security_model": "string",
                "security_name": "string",
            }],
            "usms": [{
                "engine_type": "string",
                "remote_engine_id": "string",
                "users": [{
                    "authentication_password": "string",
                    "authentication_type": "string",
                    "encryption_password": "string",
                    "encryption_type": "string",
                    "name": "string",
                }],
            }],
            "vacm": {
                "accesses": [{
                    "group_name": "string",
                    "prefix_lists": [{
                        "context_prefix": "string",
                        "notify_view": "string",
                        "read_view": "string",
                        "security_level": "string",
                        "security_model": "string",
                        "type": "string",
                        "write_view": "string",
                    }],
                }],
                "security_to_group": {
                    "contents": [{
                        "group": "string",
                        "security_name": "string",
                    }],
                    "security_model": "string",
                },
            },
        },
        "views": [{
            "include": False,
            "oid": "string",
            "view_name": "string",
        }],
    },
    switch_matching={
        "enable": False,
        "rules": [{
            "additional_config_cmds": ["string"],
            "ip_config": {
                "network": "string",
                "type": "string",
            },
            "match_model": "string",
            "match_name": "string",
            "match_name_offset": 0,
            "match_role": "string",
            "name": "string",
            "oob_ip_config": {
                "type": "string",
                "use_mgmt_vrf": False,
                "use_mgmt_vrf_for_host_out": False,
            },
            "port_config": {
                "string": {
                    "usage": "string",
                    "disable_autoneg": False,
                    "dynamic_usage": "string",
                    "aggregated": False,
                    "critical": False,
                    "description": "string",
                    "ae_disable_lacp": False,
                    "duplex": "string",
                    "ae_lacp_slow": False,
                    "esilag": False,
                    "mtu": 0,
                    "no_local_overwrite": False,
                    "poe_disabled": False,
                    "speed": "string",
                    "ae_idx": 0,
                },
            },
            "port_mirroring": {
                "string": {
                    "input_networks_ingresses": ["string"],
                    "input_port_ids_egresses": ["string"],
                    "input_port_ids_ingresses": ["string"],
                    "output_network": "string",
                    "output_port_id": "string",
                },
            },
        }],
    },
    acl_policies=[{
        "actions": [{
            "dst_tag": "string",
            "action": "string",
        }],
        "name": "string",
        "src_tags": ["string"],
    }],
    vrf_config={
        "enabled": False,
    },
    networks={
        "string": {
            "vlan_id": "string",
            "gateway": "string",
            "gateway6": "string",
            "isolation": False,
            "isolation_vlan_id": "string",
            "subnet": "string",
            "subnet6": "string",
        },
    })
Copy
const junipermistNetworktemplateResource = new junipermist.site.Networktemplate("junipermistNetworktemplateResource", {
    siteId: "string",
    ntpServers: ["string"],
    switchMgmt: {
        apAffinityThreshold: 0,
        cliBanner: "string",
        cliIdleTimeout: 0,
        configRevertTimer: 0,
        dhcpOptionFqdn: false,
        disableOobDownAlarm: false,
        fipsEnabled: false,
        localAccounts: {
            string: {
                password: "string",
                role: "string",
            },
        },
        mxedgeProxyHost: "string",
        mxedgeProxyPort: "string",
        protectRe: {
            allowedServices: ["string"],
            customs: [{
                subnets: ["string"],
                portRange: "string",
                protocol: "string",
            }],
            enabled: false,
            trustedHosts: ["string"],
        },
        rootPassword: "string",
        tacacs: {
            acctServers: [{
                host: "string",
                port: "string",
                secret: "string",
                timeout: 0,
            }],
            defaultRole: "string",
            enabled: false,
            network: "string",
            tacplusServers: [{
                host: "string",
                port: "string",
                secret: "string",
                timeout: 0,
            }],
        },
        useMxedgeProxy: false,
    },
    autoUpgradeLinecard: false,
    dhcpSnooping: {
        allNetworks: false,
        enableArpSpoofCheck: false,
        enableIpSourceGuard: false,
        enabled: false,
        networks: ["string"],
    },
    disabledSystemDefinedPortUsages: ["string"],
    dnsServers: ["string"],
    dnsSuffixes: ["string"],
    extraRoutes: {
        string: {
            via: "string",
            discard: false,
            metric: 0,
            nextQualified: {
                string: {
                    metric: 0,
                    preference: 0,
                },
            },
            noResolve: false,
            preference: 0,
        },
    },
    extraRoutes6: {
        string: {
            via: "string",
            discard: false,
            metric: 0,
            nextQualified: {
                string: {
                    metric: 0,
                    preference: 0,
                },
            },
            noResolve: false,
            preference: 0,
        },
    },
    mistNac: {
        enabled: false,
        network: "string",
    },
    vrfInstances: {
        string: {
            evpnAutoLoopbackSubnet: "string",
            evpnAutoLoopbackSubnet6: "string",
            extraRoutes: {
                string: {
                    via: "string",
                },
            },
            extraRoutes6: {
                string: {
                    via: "string",
                },
            },
            networks: ["string"],
        },
    },
    additionalConfigCmds: ["string"],
    portUsages: {
        string: {
            allNetworks: false,
            allowDhcpd: false,
            allowMultipleSupplicants: false,
            bypassAuthWhenServerDown: false,
            bypassAuthWhenServerDownForUnknownClient: false,
            description: "string",
            disableAutoneg: false,
            disabled: false,
            duplex: "string",
            dynamicVlanNetworks: ["string"],
            enableMacAuth: false,
            enableQos: false,
            guestNetwork: "string",
            interIsolationNetworkLink: false,
            interSwitchLink: false,
            macAuthOnly: false,
            macAuthPreferred: false,
            macAuthProtocol: "string",
            macLimit: "string",
            mode: "string",
            mtu: "string",
            networks: ["string"],
            persistMac: false,
            poeDisabled: false,
            portAuth: "string",
            portNetwork: "string",
            reauthInterval: "string",
            resetDefaultWhen: "string",
            rules: [{
                src: "string",
                equals: "string",
                equalsAnies: ["string"],
                expression: "string",
                usage: "string",
            }],
            serverFailNetwork: "string",
            serverRejectNetwork: "string",
            speed: "string",
            stormControl: {
                noBroadcast: false,
                noMulticast: false,
                noRegisteredMulticast: false,
                noUnknownUnicast: false,
                percentage: 0,
            },
            stpEdge: false,
            stpNoRootPort: false,
            stpP2p: false,
            uiEvpntopoId: "string",
            useVstp: false,
            voipNetwork: "string",
        },
    },
    portMirroring: {
        string: {
            inputNetworksIngresses: ["string"],
            inputPortIdsEgresses: ["string"],
            inputPortIdsIngresses: ["string"],
            outputNetwork: "string",
            outputPortId: "string",
        },
    },
    ospfAreas: {
        string: {
            networks: {
                string: {
                    authKeys: {
                        string: "string",
                    },
                    authPassword: "string",
                    authType: "string",
                    bfdMinimumInterval: 0,
                    deadInterval: 0,
                    exportPolicy: "string",
                    helloInterval: 0,
                    importPolicy: "string",
                    interfaceType: "string",
                    metric: 0,
                    noReadvertiseToOverlay: false,
                    passive: false,
                },
            },
            includeLoopback: false,
            type: "string",
        },
    },
    radiusConfig: {
        acctImmediateUpdate: false,
        acctInterimInterval: 0,
        acctServers: [{
            host: "string",
            secret: "string",
            keywrapEnabled: false,
            keywrapFormat: "string",
            keywrapKek: "string",
            keywrapMack: "string",
            port: 0,
        }],
        authServerSelection: "string",
        authServers: [{
            host: "string",
            secret: "string",
            keywrapEnabled: false,
            keywrapFormat: "string",
            keywrapKek: "string",
            keywrapMack: "string",
            port: 0,
            requireMessageAuthenticator: false,
        }],
        authServersRetries: 0,
        authServersTimeout: 0,
        coaEnabled: false,
        coaPort: "string",
        fastDot1xTimers: false,
        network: "string",
        sourceIp: "string",
    },
    remoteSyslog: {
        archive: {
            files: "string",
            size: "string",
        },
        console: {
            contents: [{
                facility: "string",
                severity: "string",
            }],
        },
        enabled: false,
        files: [{
            archive: {
                files: "string",
                size: "string",
            },
            contents: [{
                facility: "string",
                severity: "string",
            }],
            explicitPriority: false,
            file: "string",
            match: "string",
            structuredData: false,
        }],
        network: "string",
        sendToAllServers: false,
        servers: [{
            contents: [{
                facility: "string",
                severity: "string",
            }],
            explicitPriority: false,
            facility: "string",
            host: "string",
            match: "string",
            port: "string",
            protocol: "string",
            routingInstance: "string",
            severity: "string",
            sourceAddress: "string",
            structuredData: false,
            tag: "string",
        }],
        timeFormat: "string",
        users: [{
            contents: [{
                facility: "string",
                severity: "string",
            }],
            match: "string",
            user: "string",
        }],
    },
    removeExistingConfigs: false,
    aclTags: {
        string: {
            type: "string",
            gbpTag: 0,
            macs: ["string"],
            network: "string",
            radiusGroup: "string",
            specs: [{
                portRange: "string",
                protocol: "string",
            }],
            subnets: ["string"],
        },
    },
    snmpConfig: {
        clientLists: [{
            clientListName: "string",
            clients: ["string"],
        }],
        contact: "string",
        description: "string",
        enabled: false,
        engineId: "string",
        location: "string",
        name: "string",
        network: "string",
        trapGroups: [{
            categories: ["string"],
            groupName: "string",
            targets: ["string"],
            version: "string",
        }],
        v2cConfigs: [{
            authorization: "string",
            clientListName: "string",
            communityName: "string",
            view: "string",
        }],
        v3Config: {
            notifies: [{
                name: "string",
                tag: "string",
                type: "string",
            }],
            notifyFilters: [{
                contents: [{
                    oid: "string",
                    include: false,
                }],
                profileName: "string",
            }],
            targetAddresses: [{
                address: "string",
                addressMask: "string",
                targetAddressName: "string",
                port: "string",
                tagList: "string",
                targetParameters: "string",
            }],
            targetParameters: [{
                messageProcessingModel: "string",
                name: "string",
                notifyFilter: "string",
                securityLevel: "string",
                securityModel: "string",
                securityName: "string",
            }],
            usms: [{
                engineType: "string",
                remoteEngineId: "string",
                users: [{
                    authenticationPassword: "string",
                    authenticationType: "string",
                    encryptionPassword: "string",
                    encryptionType: "string",
                    name: "string",
                }],
            }],
            vacm: {
                accesses: [{
                    groupName: "string",
                    prefixLists: [{
                        contextPrefix: "string",
                        notifyView: "string",
                        readView: "string",
                        securityLevel: "string",
                        securityModel: "string",
                        type: "string",
                        writeView: "string",
                    }],
                }],
                securityToGroup: {
                    contents: [{
                        group: "string",
                        securityName: "string",
                    }],
                    securityModel: "string",
                },
            },
        },
        views: [{
            include: false,
            oid: "string",
            viewName: "string",
        }],
    },
    switchMatching: {
        enable: false,
        rules: [{
            additionalConfigCmds: ["string"],
            ipConfig: {
                network: "string",
                type: "string",
            },
            matchModel: "string",
            matchName: "string",
            matchNameOffset: 0,
            matchRole: "string",
            name: "string",
            oobIpConfig: {
                type: "string",
                useMgmtVrf: false,
                useMgmtVrfForHostOut: false,
            },
            portConfig: {
                string: {
                    usage: "string",
                    disableAutoneg: false,
                    dynamicUsage: "string",
                    aggregated: false,
                    critical: false,
                    description: "string",
                    aeDisableLacp: false,
                    duplex: "string",
                    aeLacpSlow: false,
                    esilag: false,
                    mtu: 0,
                    noLocalOverwrite: false,
                    poeDisabled: false,
                    speed: "string",
                    aeIdx: 0,
                },
            },
            portMirroring: {
                string: {
                    inputNetworksIngresses: ["string"],
                    inputPortIdsEgresses: ["string"],
                    inputPortIdsIngresses: ["string"],
                    outputNetwork: "string",
                    outputPortId: "string",
                },
            },
        }],
    },
    aclPolicies: [{
        actions: [{
            dstTag: "string",
            action: "string",
        }],
        name: "string",
        srcTags: ["string"],
    }],
    vrfConfig: {
        enabled: false,
    },
    networks: {
        string: {
            vlanId: "string",
            gateway: "string",
            gateway6: "string",
            isolation: false,
            isolationVlanId: "string",
            subnet: "string",
            subnet6: "string",
        },
    },
});
Copy
type: junipermist:site:Networktemplate
properties:
    aclPolicies:
        - actions:
            - action: string
              dstTag: string
          name: string
          srcTags:
            - string
    aclTags:
        string:
            gbpTag: 0
            macs:
                - string
            network: string
            radiusGroup: string
            specs:
                - portRange: string
                  protocol: string
            subnets:
                - string
            type: string
    additionalConfigCmds:
        - string
    autoUpgradeLinecard: false
    dhcpSnooping:
        allNetworks: false
        enableArpSpoofCheck: false
        enableIpSourceGuard: false
        enabled: false
        networks:
            - string
    disabledSystemDefinedPortUsages:
        - string
    dnsServers:
        - string
    dnsSuffixes:
        - string
    extraRoutes:
        string:
            discard: false
            metric: 0
            nextQualified:
                string:
                    metric: 0
                    preference: 0
            noResolve: false
            preference: 0
            via: string
    extraRoutes6:
        string:
            discard: false
            metric: 0
            nextQualified:
                string:
                    metric: 0
                    preference: 0
            noResolve: false
            preference: 0
            via: string
    mistNac:
        enabled: false
        network: string
    networks:
        string:
            gateway: string
            gateway6: string
            isolation: false
            isolationVlanId: string
            subnet: string
            subnet6: string
            vlanId: string
    ntpServers:
        - string
    ospfAreas:
        string:
            includeLoopback: false
            networks:
                string:
                    authKeys:
                        string: string
                    authPassword: string
                    authType: string
                    bfdMinimumInterval: 0
                    deadInterval: 0
                    exportPolicy: string
                    helloInterval: 0
                    importPolicy: string
                    interfaceType: string
                    metric: 0
                    noReadvertiseToOverlay: false
                    passive: false
            type: string
    portMirroring:
        string:
            inputNetworksIngresses:
                - string
            inputPortIdsEgresses:
                - string
            inputPortIdsIngresses:
                - string
            outputNetwork: string
            outputPortId: string
    portUsages:
        string:
            allNetworks: false
            allowDhcpd: false
            allowMultipleSupplicants: false
            bypassAuthWhenServerDown: false
            bypassAuthWhenServerDownForUnknownClient: false
            description: string
            disableAutoneg: false
            disabled: false
            duplex: string
            dynamicVlanNetworks:
                - string
            enableMacAuth: false
            enableQos: false
            guestNetwork: string
            interIsolationNetworkLink: false
            interSwitchLink: false
            macAuthOnly: false
            macAuthPreferred: false
            macAuthProtocol: string
            macLimit: string
            mode: string
            mtu: string
            networks:
                - string
            persistMac: false
            poeDisabled: false
            portAuth: string
            portNetwork: string
            reauthInterval: string
            resetDefaultWhen: string
            rules:
                - equals: string
                  equalsAnies:
                    - string
                  expression: string
                  src: string
                  usage: string
            serverFailNetwork: string
            serverRejectNetwork: string
            speed: string
            stormControl:
                noBroadcast: false
                noMulticast: false
                noRegisteredMulticast: false
                noUnknownUnicast: false
                percentage: 0
            stpEdge: false
            stpNoRootPort: false
            stpP2p: false
            uiEvpntopoId: string
            useVstp: false
            voipNetwork: string
    radiusConfig:
        acctImmediateUpdate: false
        acctInterimInterval: 0
        acctServers:
            - host: string
              keywrapEnabled: false
              keywrapFormat: string
              keywrapKek: string
              keywrapMack: string
              port: 0
              secret: string
        authServerSelection: string
        authServers:
            - host: string
              keywrapEnabled: false
              keywrapFormat: string
              keywrapKek: string
              keywrapMack: string
              port: 0
              requireMessageAuthenticator: false
              secret: string
        authServersRetries: 0
        authServersTimeout: 0
        coaEnabled: false
        coaPort: string
        fastDot1xTimers: false
        network: string
        sourceIp: string
    remoteSyslog:
        archive:
            files: string
            size: string
        console:
            contents:
                - facility: string
                  severity: string
        enabled: false
        files:
            - archive:
                files: string
                size: string
              contents:
                - facility: string
                  severity: string
              explicitPriority: false
              file: string
              match: string
              structuredData: false
        network: string
        sendToAllServers: false
        servers:
            - contents:
                - facility: string
                  severity: string
              explicitPriority: false
              facility: string
              host: string
              match: string
              port: string
              protocol: string
              routingInstance: string
              severity: string
              sourceAddress: string
              structuredData: false
              tag: string
        timeFormat: string
        users:
            - contents:
                - facility: string
                  severity: string
              match: string
              user: string
    removeExistingConfigs: false
    siteId: string
    snmpConfig:
        clientLists:
            - clientListName: string
              clients:
                - string
        contact: string
        description: string
        enabled: false
        engineId: string
        location: string
        name: string
        network: string
        trapGroups:
            - categories:
                - string
              groupName: string
              targets:
                - string
              version: string
        v2cConfigs:
            - authorization: string
              clientListName: string
              communityName: string
              view: string
        v3Config:
            notifies:
                - name: string
                  tag: string
                  type: string
            notifyFilters:
                - contents:
                    - include: false
                      oid: string
                  profileName: string
            targetAddresses:
                - address: string
                  addressMask: string
                  port: string
                  tagList: string
                  targetAddressName: string
                  targetParameters: string
            targetParameters:
                - messageProcessingModel: string
                  name: string
                  notifyFilter: string
                  securityLevel: string
                  securityModel: string
                  securityName: string
            usms:
                - engineType: string
                  remoteEngineId: string
                  users:
                    - authenticationPassword: string
                      authenticationType: string
                      encryptionPassword: string
                      encryptionType: string
                      name: string
            vacm:
                accesses:
                    - groupName: string
                      prefixLists:
                        - contextPrefix: string
                          notifyView: string
                          readView: string
                          securityLevel: string
                          securityModel: string
                          type: string
                          writeView: string
                securityToGroup:
                    contents:
                        - group: string
                          securityName: string
                    securityModel: string
        views:
            - include: false
              oid: string
              viewName: string
    switchMatching:
        enable: false
        rules:
            - additionalConfigCmds:
                - string
              ipConfig:
                network: string
                type: string
              matchModel: string
              matchName: string
              matchNameOffset: 0
              matchRole: string
              name: string
              oobIpConfig:
                type: string
                useMgmtVrf: false
                useMgmtVrfForHostOut: false
              portConfig:
                string:
                    aeDisableLacp: false
                    aeIdx: 0
                    aeLacpSlow: false
                    aggregated: false
                    critical: false
                    description: string
                    disableAutoneg: false
                    duplex: string
                    dynamicUsage: string
                    esilag: false
                    mtu: 0
                    noLocalOverwrite: false
                    poeDisabled: false
                    speed: string
                    usage: string
              portMirroring:
                string:
                    inputNetworksIngresses:
                        - string
                    inputPortIdsEgresses:
                        - string
                    inputPortIdsIngresses:
                        - string
                    outputNetwork: string
                    outputPortId: string
    switchMgmt:
        apAffinityThreshold: 0
        cliBanner: string
        cliIdleTimeout: 0
        configRevertTimer: 0
        dhcpOptionFqdn: false
        disableOobDownAlarm: false
        fipsEnabled: false
        localAccounts:
            string:
                password: string
                role: string
        mxedgeProxyHost: string
        mxedgeProxyPort: string
        protectRe:
            allowedServices:
                - string
            customs:
                - portRange: string
                  protocol: string
                  subnets:
                    - string
            enabled: false
            trustedHosts:
                - string
        rootPassword: string
        tacacs:
            acctServers:
                - host: string
                  port: string
                  secret: string
                  timeout: 0
            defaultRole: string
            enabled: false
            network: string
            tacplusServers:
                - host: string
                  port: string
                  secret: string
                  timeout: 0
        useMxedgeProxy: false
    vrfConfig:
        enabled: false
    vrfInstances:
        string:
            evpnAutoLoopbackSubnet: string
            evpnAutoLoopbackSubnet6: string
            extraRoutes:
                string:
                    via: string
            extraRoutes6:
                string:
                    via: string
            networks:
                - string
Copy

Networktemplate Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Networktemplate resource accepts the following input properties:

SiteId This property is required. string
Unique ID of the object instance in the Mist Organization
AclPolicies List<Pulumi.JuniperMist.Site.Inputs.NetworktemplateAclPolicy>
AclTags Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateAclTagsArgs>
ACL Tags to identify traffic source or destination. Key name is the tag name
AdditionalConfigCmds List<string>
additional CLI commands to append to the generated Junos config. Note: no check is done
AutoUpgradeLinecard bool
DhcpSnooping Pulumi.JuniperMist.Site.Inputs.NetworktemplateDhcpSnooping
DisabledSystemDefinedPortUsages List<string>
If some system-default port usages are not desired - namely, ap / iot / uplink
DnsServers List<string>
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
DnsSuffixes List<string>
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
ExtraRoutes Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateExtraRoutesArgs>
Property key is the destination CIDR (e.g. "10.0.0.0/8")
ExtraRoutes6 Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateExtraRoutes6Args>
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
MistNac Pulumi.JuniperMist.Site.Inputs.NetworktemplateMistNac
Enable mist_nac to use RadSec
Networks Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateNetworksArgs>
Property key is network name
NtpServers List<string>
List of NTP servers
OspfAreas Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateOspfAreasArgs>
Junos OSPF areas
PortMirroring Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplatePortMirroringArgs>
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
PortUsages Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplatePortUsagesArgs>
Property key is the port usage name. Defines the profiles of port configuration configured on the switch
RadiusConfig Pulumi.JuniperMist.Site.Inputs.NetworktemplateRadiusConfig
Junos Radius config
RemoteSyslog Pulumi.JuniperMist.Site.Inputs.NetworktemplateRemoteSyslog
RemoveExistingConfigs bool
By default, when we configure a device, we only clean up config we generate. Remove existing configs if enabled
SnmpConfig Pulumi.JuniperMist.Site.Inputs.NetworktemplateSnmpConfig
SwitchMatching Pulumi.JuniperMist.Site.Inputs.NetworktemplateSwitchMatching
Defines custom switch configuration based on different criteria
SwitchMgmt Pulumi.JuniperMist.Site.Inputs.NetworktemplateSwitchMgmt
Switch settings
VrfConfig Pulumi.JuniperMist.Site.Inputs.NetworktemplateVrfConfig
VrfInstances Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateVrfInstancesArgs>
Property key is the network name
SiteId This property is required. string
Unique ID of the object instance in the Mist Organization
AclPolicies []NetworktemplateAclPolicyArgs
AclTags map[string]NetworktemplateAclTagsArgs
ACL Tags to identify traffic source or destination. Key name is the tag name
AdditionalConfigCmds []string
additional CLI commands to append to the generated Junos config. Note: no check is done
AutoUpgradeLinecard bool
DhcpSnooping NetworktemplateDhcpSnoopingArgs
DisabledSystemDefinedPortUsages []string
If some system-default port usages are not desired - namely, ap / iot / uplink
DnsServers []string
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
DnsSuffixes []string
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
ExtraRoutes map[string]NetworktemplateExtraRoutesArgs
Property key is the destination CIDR (e.g. "10.0.0.0/8")
ExtraRoutes6 map[string]NetworktemplateExtraRoutes6Args
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
MistNac NetworktemplateMistNacArgs
Enable mist_nac to use RadSec
Networks map[string]NetworktemplateNetworksArgs
Property key is network name
NtpServers []string
List of NTP servers
OspfAreas map[string]NetworktemplateOspfAreasArgs
Junos OSPF areas
PortMirroring map[string]NetworktemplatePortMirroringArgs
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
PortUsages map[string]NetworktemplatePortUsagesArgs
Property key is the port usage name. Defines the profiles of port configuration configured on the switch
RadiusConfig NetworktemplateRadiusConfigArgs
Junos Radius config
RemoteSyslog NetworktemplateRemoteSyslogArgs
RemoveExistingConfigs bool
By default, when we configure a device, we only clean up config we generate. Remove existing configs if enabled
SnmpConfig NetworktemplateSnmpConfigArgs
SwitchMatching NetworktemplateSwitchMatchingArgs
Defines custom switch configuration based on different criteria
SwitchMgmt NetworktemplateSwitchMgmtArgs
Switch settings
VrfConfig NetworktemplateVrfConfigArgs
VrfInstances map[string]NetworktemplateVrfInstancesArgs
Property key is the network name
siteId This property is required. String
Unique ID of the object instance in the Mist Organization
aclPolicies List<NetworktemplateAclPolicy>
aclTags Map<String,NetworktemplateAclTagsArgs>
ACL Tags to identify traffic source or destination. Key name is the tag name
additionalConfigCmds List<String>
additional CLI commands to append to the generated Junos config. Note: no check is done
autoUpgradeLinecard Boolean
dhcpSnooping NetworktemplateDhcpSnooping
disabledSystemDefinedPortUsages List<String>
If some system-default port usages are not desired - namely, ap / iot / uplink
dnsServers List<String>
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
dnsSuffixes List<String>
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
extraRoutes Map<String,NetworktemplateExtraRoutesArgs>
Property key is the destination CIDR (e.g. "10.0.0.0/8")
extraRoutes6 Map<String,NetworktemplateExtraRoutes6Args>
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
mistNac NetworktemplateMistNac
Enable mist_nac to use RadSec
networks Map<String,NetworktemplateNetworksArgs>
Property key is network name
ntpServers List<String>
List of NTP servers
ospfAreas Map<String,NetworktemplateOspfAreasArgs>
Junos OSPF areas
portMirroring Map<String,NetworktemplatePortMirroringArgs>
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
portUsages Map<String,NetworktemplatePortUsagesArgs>
Property key is the port usage name. Defines the profiles of port configuration configured on the switch
radiusConfig NetworktemplateRadiusConfig
Junos Radius config
remoteSyslog NetworktemplateRemoteSyslog
removeExistingConfigs Boolean
By default, when we configure a device, we only clean up config we generate. Remove existing configs if enabled
snmpConfig NetworktemplateSnmpConfig
switchMatching NetworktemplateSwitchMatching
Defines custom switch configuration based on different criteria
switchMgmt NetworktemplateSwitchMgmt
Switch settings
vrfConfig NetworktemplateVrfConfig
vrfInstances Map<String,NetworktemplateVrfInstancesArgs>
Property key is the network name
siteId This property is required. string
Unique ID of the object instance in the Mist Organization
aclPolicies NetworktemplateAclPolicy[]
aclTags {[key: string]: NetworktemplateAclTagsArgs}
ACL Tags to identify traffic source or destination. Key name is the tag name
additionalConfigCmds string[]
additional CLI commands to append to the generated Junos config. Note: no check is done
autoUpgradeLinecard boolean
dhcpSnooping NetworktemplateDhcpSnooping
disabledSystemDefinedPortUsages string[]
If some system-default port usages are not desired - namely, ap / iot / uplink
dnsServers string[]
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
dnsSuffixes string[]
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
extraRoutes {[key: string]: NetworktemplateExtraRoutesArgs}
Property key is the destination CIDR (e.g. "10.0.0.0/8")
extraRoutes6 {[key: string]: NetworktemplateExtraRoutes6Args}
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
mistNac NetworktemplateMistNac
Enable mist_nac to use RadSec
networks {[key: string]: NetworktemplateNetworksArgs}
Property key is network name
ntpServers string[]
List of NTP servers
ospfAreas {[key: string]: NetworktemplateOspfAreasArgs}
Junos OSPF areas
portMirroring {[key: string]: NetworktemplatePortMirroringArgs}
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
portUsages {[key: string]: NetworktemplatePortUsagesArgs}
Property key is the port usage name. Defines the profiles of port configuration configured on the switch
radiusConfig NetworktemplateRadiusConfig
Junos Radius config
remoteSyslog NetworktemplateRemoteSyslog
removeExistingConfigs boolean
By default, when we configure a device, we only clean up config we generate. Remove existing configs if enabled
snmpConfig NetworktemplateSnmpConfig
switchMatching NetworktemplateSwitchMatching
Defines custom switch configuration based on different criteria
switchMgmt NetworktemplateSwitchMgmt
Switch settings
vrfConfig NetworktemplateVrfConfig
vrfInstances {[key: string]: NetworktemplateVrfInstancesArgs}
Property key is the network name
site_id This property is required. str
Unique ID of the object instance in the Mist Organization
acl_policies Sequence[NetworktemplateAclPolicyArgs]
acl_tags Mapping[str, NetworktemplateAclTagsArgs]
ACL Tags to identify traffic source or destination. Key name is the tag name
additional_config_cmds Sequence[str]
additional CLI commands to append to the generated Junos config. Note: no check is done
auto_upgrade_linecard bool
dhcp_snooping NetworktemplateDhcpSnoopingArgs
disabled_system_defined_port_usages Sequence[str]
If some system-default port usages are not desired - namely, ap / iot / uplink
dns_servers Sequence[str]
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
dns_suffixes Sequence[str]
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
extra_routes Mapping[str, NetworktemplateExtraRoutesArgs]
Property key is the destination CIDR (e.g. "10.0.0.0/8")
extra_routes6 Mapping[str, NetworktemplateExtraRoutes6Args]
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
mist_nac NetworktemplateMistNacArgs
Enable mist_nac to use RadSec
networks Mapping[str, NetworktemplateNetworksArgs]
Property key is network name
ntp_servers Sequence[str]
List of NTP servers
ospf_areas Mapping[str, NetworktemplateOspfAreasArgs]
Junos OSPF areas
port_mirroring Mapping[str, NetworktemplatePortMirroringArgs]
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
port_usages Mapping[str, NetworktemplatePortUsagesArgs]
Property key is the port usage name. Defines the profiles of port configuration configured on the switch
radius_config NetworktemplateRadiusConfigArgs
Junos Radius config
remote_syslog NetworktemplateRemoteSyslogArgs
remove_existing_configs bool
By default, when we configure a device, we only clean up config we generate. Remove existing configs if enabled
snmp_config NetworktemplateSnmpConfigArgs
switch_matching NetworktemplateSwitchMatchingArgs
Defines custom switch configuration based on different criteria
switch_mgmt NetworktemplateSwitchMgmtArgs
Switch settings
vrf_config NetworktemplateVrfConfigArgs
vrf_instances Mapping[str, NetworktemplateVrfInstancesArgs]
Property key is the network name
siteId This property is required. String
Unique ID of the object instance in the Mist Organization
aclPolicies List<Property Map>
aclTags Map<Property Map>
ACL Tags to identify traffic source or destination. Key name is the tag name
additionalConfigCmds List<String>
additional CLI commands to append to the generated Junos config. Note: no check is done
autoUpgradeLinecard Boolean
dhcpSnooping Property Map
disabledSystemDefinedPortUsages List<String>
If some system-default port usages are not desired - namely, ap / iot / uplink
dnsServers List<String>
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
dnsSuffixes List<String>
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
extraRoutes Map<Property Map>
Property key is the destination CIDR (e.g. "10.0.0.0/8")
extraRoutes6 Map<Property Map>
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
mistNac Property Map
Enable mist_nac to use RadSec
networks Map<Property Map>
Property key is network name
ntpServers List<String>
List of NTP servers
ospfAreas Map<Property Map>
Junos OSPF areas
portMirroring Map<Property Map>
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
portUsages Map<Property Map>
Property key is the port usage name. Defines the profiles of port configuration configured on the switch
radiusConfig Property Map
Junos Radius config
remoteSyslog Property Map
removeExistingConfigs Boolean
By default, when we configure a device, we only clean up config we generate. Remove existing configs if enabled
snmpConfig Property Map
switchMatching Property Map
Defines custom switch configuration based on different criteria
switchMgmt Property Map
Switch settings
vrfConfig Property Map
vrfInstances Map<Property Map>
Property key is the network name

Outputs

All input properties are implicitly available as output properties. Additionally, the Networktemplate resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing Networktemplate Resource

Get an existing Networktemplate resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: NetworktemplateState, opts?: CustomResourceOptions): Networktemplate
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        acl_policies: Optional[Sequence[NetworktemplateAclPolicyArgs]] = None,
        acl_tags: Optional[Mapping[str, NetworktemplateAclTagsArgs]] = None,
        additional_config_cmds: Optional[Sequence[str]] = None,
        auto_upgrade_linecard: Optional[bool] = None,
        dhcp_snooping: Optional[NetworktemplateDhcpSnoopingArgs] = None,
        disabled_system_defined_port_usages: Optional[Sequence[str]] = None,
        dns_servers: Optional[Sequence[str]] = None,
        dns_suffixes: Optional[Sequence[str]] = None,
        extra_routes: Optional[Mapping[str, NetworktemplateExtraRoutesArgs]] = None,
        extra_routes6: Optional[Mapping[str, NetworktemplateExtraRoutes6Args]] = None,
        mist_nac: Optional[NetworktemplateMistNacArgs] = None,
        networks: Optional[Mapping[str, NetworktemplateNetworksArgs]] = None,
        ntp_servers: Optional[Sequence[str]] = None,
        ospf_areas: Optional[Mapping[str, NetworktemplateOspfAreasArgs]] = None,
        port_mirroring: Optional[Mapping[str, NetworktemplatePortMirroringArgs]] = None,
        port_usages: Optional[Mapping[str, NetworktemplatePortUsagesArgs]] = None,
        radius_config: Optional[NetworktemplateRadiusConfigArgs] = None,
        remote_syslog: Optional[NetworktemplateRemoteSyslogArgs] = None,
        remove_existing_configs: Optional[bool] = None,
        site_id: Optional[str] = None,
        snmp_config: Optional[NetworktemplateSnmpConfigArgs] = None,
        switch_matching: Optional[NetworktemplateSwitchMatchingArgs] = None,
        switch_mgmt: Optional[NetworktemplateSwitchMgmtArgs] = None,
        vrf_config: Optional[NetworktemplateVrfConfigArgs] = None,
        vrf_instances: Optional[Mapping[str, NetworktemplateVrfInstancesArgs]] = None) -> Networktemplate
func GetNetworktemplate(ctx *Context, name string, id IDInput, state *NetworktemplateState, opts ...ResourceOption) (*Networktemplate, error)
public static Networktemplate Get(string name, Input<string> id, NetworktemplateState? state, CustomResourceOptions? opts = null)
public static Networktemplate get(String name, Output<String> id, NetworktemplateState state, CustomResourceOptions options)
resources:  _:    type: junipermist:site:Networktemplate    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AclPolicies List<Pulumi.JuniperMist.Site.Inputs.NetworktemplateAclPolicy>
AclTags Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateAclTagsArgs>
ACL Tags to identify traffic source or destination. Key name is the tag name
AdditionalConfigCmds List<string>
additional CLI commands to append to the generated Junos config. Note: no check is done
AutoUpgradeLinecard bool
DhcpSnooping Pulumi.JuniperMist.Site.Inputs.NetworktemplateDhcpSnooping
DisabledSystemDefinedPortUsages List<string>
If some system-default port usages are not desired - namely, ap / iot / uplink
DnsServers List<string>
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
DnsSuffixes List<string>
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
ExtraRoutes Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateExtraRoutesArgs>
Property key is the destination CIDR (e.g. "10.0.0.0/8")
ExtraRoutes6 Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateExtraRoutes6Args>
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
MistNac Pulumi.JuniperMist.Site.Inputs.NetworktemplateMistNac
Enable mist_nac to use RadSec
Networks Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateNetworksArgs>
Property key is network name
NtpServers List<string>
List of NTP servers
OspfAreas Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateOspfAreasArgs>
Junos OSPF areas
PortMirroring Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplatePortMirroringArgs>
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
PortUsages Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplatePortUsagesArgs>
Property key is the port usage name. Defines the profiles of port configuration configured on the switch
RadiusConfig Pulumi.JuniperMist.Site.Inputs.NetworktemplateRadiusConfig
Junos Radius config
RemoteSyslog Pulumi.JuniperMist.Site.Inputs.NetworktemplateRemoteSyslog
RemoveExistingConfigs bool
By default, when we configure a device, we only clean up config we generate. Remove existing configs if enabled
SiteId string
Unique ID of the object instance in the Mist Organization
SnmpConfig Pulumi.JuniperMist.Site.Inputs.NetworktemplateSnmpConfig
SwitchMatching Pulumi.JuniperMist.Site.Inputs.NetworktemplateSwitchMatching
Defines custom switch configuration based on different criteria
SwitchMgmt Pulumi.JuniperMist.Site.Inputs.NetworktemplateSwitchMgmt
Switch settings
VrfConfig Pulumi.JuniperMist.Site.Inputs.NetworktemplateVrfConfig
VrfInstances Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateVrfInstancesArgs>
Property key is the network name
AclPolicies []NetworktemplateAclPolicyArgs
AclTags map[string]NetworktemplateAclTagsArgs
ACL Tags to identify traffic source or destination. Key name is the tag name
AdditionalConfigCmds []string
additional CLI commands to append to the generated Junos config. Note: no check is done
AutoUpgradeLinecard bool
DhcpSnooping NetworktemplateDhcpSnoopingArgs
DisabledSystemDefinedPortUsages []string
If some system-default port usages are not desired - namely, ap / iot / uplink
DnsServers []string
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
DnsSuffixes []string
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
ExtraRoutes map[string]NetworktemplateExtraRoutesArgs
Property key is the destination CIDR (e.g. "10.0.0.0/8")
ExtraRoutes6 map[string]NetworktemplateExtraRoutes6Args
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
MistNac NetworktemplateMistNacArgs
Enable mist_nac to use RadSec
Networks map[string]NetworktemplateNetworksArgs
Property key is network name
NtpServers []string
List of NTP servers
OspfAreas map[string]NetworktemplateOspfAreasArgs
Junos OSPF areas
PortMirroring map[string]NetworktemplatePortMirroringArgs
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
PortUsages map[string]NetworktemplatePortUsagesArgs
Property key is the port usage name. Defines the profiles of port configuration configured on the switch
RadiusConfig NetworktemplateRadiusConfigArgs
Junos Radius config
RemoteSyslog NetworktemplateRemoteSyslogArgs
RemoveExistingConfigs bool
By default, when we configure a device, we only clean up config we generate. Remove existing configs if enabled
SiteId string
Unique ID of the object instance in the Mist Organization
SnmpConfig NetworktemplateSnmpConfigArgs
SwitchMatching NetworktemplateSwitchMatchingArgs
Defines custom switch configuration based on different criteria
SwitchMgmt NetworktemplateSwitchMgmtArgs
Switch settings
VrfConfig NetworktemplateVrfConfigArgs
VrfInstances map[string]NetworktemplateVrfInstancesArgs
Property key is the network name
aclPolicies List<NetworktemplateAclPolicy>
aclTags Map<String,NetworktemplateAclTagsArgs>
ACL Tags to identify traffic source or destination. Key name is the tag name
additionalConfigCmds List<String>
additional CLI commands to append to the generated Junos config. Note: no check is done
autoUpgradeLinecard Boolean
dhcpSnooping NetworktemplateDhcpSnooping
disabledSystemDefinedPortUsages List<String>
If some system-default port usages are not desired - namely, ap / iot / uplink
dnsServers List<String>
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
dnsSuffixes List<String>
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
extraRoutes Map<String,NetworktemplateExtraRoutesArgs>
Property key is the destination CIDR (e.g. "10.0.0.0/8")
extraRoutes6 Map<String,NetworktemplateExtraRoutes6Args>
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
mistNac NetworktemplateMistNac
Enable mist_nac to use RadSec
networks Map<String,NetworktemplateNetworksArgs>
Property key is network name
ntpServers List<String>
List of NTP servers
ospfAreas Map<String,NetworktemplateOspfAreasArgs>
Junos OSPF areas
portMirroring Map<String,NetworktemplatePortMirroringArgs>
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
portUsages Map<String,NetworktemplatePortUsagesArgs>
Property key is the port usage name. Defines the profiles of port configuration configured on the switch
radiusConfig NetworktemplateRadiusConfig
Junos Radius config
remoteSyslog NetworktemplateRemoteSyslog
removeExistingConfigs Boolean
By default, when we configure a device, we only clean up config we generate. Remove existing configs if enabled
siteId String
Unique ID of the object instance in the Mist Organization
snmpConfig NetworktemplateSnmpConfig
switchMatching NetworktemplateSwitchMatching
Defines custom switch configuration based on different criteria
switchMgmt NetworktemplateSwitchMgmt
Switch settings
vrfConfig NetworktemplateVrfConfig
vrfInstances Map<String,NetworktemplateVrfInstancesArgs>
Property key is the network name
aclPolicies NetworktemplateAclPolicy[]
aclTags {[key: string]: NetworktemplateAclTagsArgs}
ACL Tags to identify traffic source or destination. Key name is the tag name
additionalConfigCmds string[]
additional CLI commands to append to the generated Junos config. Note: no check is done
autoUpgradeLinecard boolean
dhcpSnooping NetworktemplateDhcpSnooping
disabledSystemDefinedPortUsages string[]
If some system-default port usages are not desired - namely, ap / iot / uplink
dnsServers string[]
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
dnsSuffixes string[]
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
extraRoutes {[key: string]: NetworktemplateExtraRoutesArgs}
Property key is the destination CIDR (e.g. "10.0.0.0/8")
extraRoutes6 {[key: string]: NetworktemplateExtraRoutes6Args}
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
mistNac NetworktemplateMistNac
Enable mist_nac to use RadSec
networks {[key: string]: NetworktemplateNetworksArgs}
Property key is network name
ntpServers string[]
List of NTP servers
ospfAreas {[key: string]: NetworktemplateOspfAreasArgs}
Junos OSPF areas
portMirroring {[key: string]: NetworktemplatePortMirroringArgs}
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
portUsages {[key: string]: NetworktemplatePortUsagesArgs}
Property key is the port usage name. Defines the profiles of port configuration configured on the switch
radiusConfig NetworktemplateRadiusConfig
Junos Radius config
remoteSyslog NetworktemplateRemoteSyslog
removeExistingConfigs boolean
By default, when we configure a device, we only clean up config we generate. Remove existing configs if enabled
siteId string
Unique ID of the object instance in the Mist Organization
snmpConfig NetworktemplateSnmpConfig
switchMatching NetworktemplateSwitchMatching
Defines custom switch configuration based on different criteria
switchMgmt NetworktemplateSwitchMgmt
Switch settings
vrfConfig NetworktemplateVrfConfig
vrfInstances {[key: string]: NetworktemplateVrfInstancesArgs}
Property key is the network name
acl_policies Sequence[NetworktemplateAclPolicyArgs]
acl_tags Mapping[str, NetworktemplateAclTagsArgs]
ACL Tags to identify traffic source or destination. Key name is the tag name
additional_config_cmds Sequence[str]
additional CLI commands to append to the generated Junos config. Note: no check is done
auto_upgrade_linecard bool
dhcp_snooping NetworktemplateDhcpSnoopingArgs
disabled_system_defined_port_usages Sequence[str]
If some system-default port usages are not desired - namely, ap / iot / uplink
dns_servers Sequence[str]
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
dns_suffixes Sequence[str]
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
extra_routes Mapping[str, NetworktemplateExtraRoutesArgs]
Property key is the destination CIDR (e.g. "10.0.0.0/8")
extra_routes6 Mapping[str, NetworktemplateExtraRoutes6Args]
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
mist_nac NetworktemplateMistNacArgs
Enable mist_nac to use RadSec
networks Mapping[str, NetworktemplateNetworksArgs]
Property key is network name
ntp_servers Sequence[str]
List of NTP servers
ospf_areas Mapping[str, NetworktemplateOspfAreasArgs]
Junos OSPF areas
port_mirroring Mapping[str, NetworktemplatePortMirroringArgs]
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
port_usages Mapping[str, NetworktemplatePortUsagesArgs]
Property key is the port usage name. Defines the profiles of port configuration configured on the switch
radius_config NetworktemplateRadiusConfigArgs
Junos Radius config
remote_syslog NetworktemplateRemoteSyslogArgs
remove_existing_configs bool
By default, when we configure a device, we only clean up config we generate. Remove existing configs if enabled
site_id str
Unique ID of the object instance in the Mist Organization
snmp_config NetworktemplateSnmpConfigArgs
switch_matching NetworktemplateSwitchMatchingArgs
Defines custom switch configuration based on different criteria
switch_mgmt NetworktemplateSwitchMgmtArgs
Switch settings
vrf_config NetworktemplateVrfConfigArgs
vrf_instances Mapping[str, NetworktemplateVrfInstancesArgs]
Property key is the network name
aclPolicies List<Property Map>
aclTags Map<Property Map>
ACL Tags to identify traffic source or destination. Key name is the tag name
additionalConfigCmds List<String>
additional CLI commands to append to the generated Junos config. Note: no check is done
autoUpgradeLinecard Boolean
dhcpSnooping Property Map
disabledSystemDefinedPortUsages List<String>
If some system-default port usages are not desired - namely, ap / iot / uplink
dnsServers List<String>
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
dnsSuffixes List<String>
Global dns settings. To keep compatibility, dns settings in ip_config and oob_ip_config will overwrite this setting
extraRoutes Map<Property Map>
Property key is the destination CIDR (e.g. "10.0.0.0/8")
extraRoutes6 Map<Property Map>
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
mistNac Property Map
Enable mist_nac to use RadSec
networks Map<Property Map>
Property key is network name
ntpServers List<String>
List of NTP servers
ospfAreas Map<Property Map>
Junos OSPF areas
portMirroring Map<Property Map>
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
portUsages Map<Property Map>
Property key is the port usage name. Defines the profiles of port configuration configured on the switch
radiusConfig Property Map
Junos Radius config
remoteSyslog Property Map
removeExistingConfigs Boolean
By default, when we configure a device, we only clean up config we generate. Remove existing configs if enabled
siteId String
Unique ID of the object instance in the Mist Organization
snmpConfig Property Map
switchMatching Property Map
Defines custom switch configuration based on different criteria
switchMgmt Property Map
Switch settings
vrfConfig Property Map
vrfInstances Map<Property Map>
Property key is the network name

Supporting Types

NetworktemplateAclPolicy
, NetworktemplateAclPolicyArgs

Actions List<Pulumi.JuniperMist.Site.Inputs.NetworktemplateAclPolicyAction>
ACL Policy Actions:

  • for GBP-based policy, all src_tags and dst_tags have to be gbp-based
  • for ACL-based policy, network is required in either the source or destination so that we know where to attach the policy to
Name string
SrcTags List<string>
ACL Policy Source Tags:

  • for GBP-based policy, all src_tags and dst_tags have to be gbp-based
  • for ACL-based policy, network is required in either the source or destination so that we know where to attach the policy to
Actions []NetworktemplateAclPolicyAction
ACL Policy Actions:

  • for GBP-based policy, all src_tags and dst_tags have to be gbp-based
  • for ACL-based policy, network is required in either the source or destination so that we know where to attach the policy to
Name string
SrcTags []string
ACL Policy Source Tags:

  • for GBP-based policy, all src_tags and dst_tags have to be gbp-based
  • for ACL-based policy, network is required in either the source or destination so that we know where to attach the policy to
actions List<NetworktemplateAclPolicyAction>
ACL Policy Actions:

  • for GBP-based policy, all src_tags and dst_tags have to be gbp-based
  • for ACL-based policy, network is required in either the source or destination so that we know where to attach the policy to
name String
srcTags List<String>
ACL Policy Source Tags:

  • for GBP-based policy, all src_tags and dst_tags have to be gbp-based
  • for ACL-based policy, network is required in either the source or destination so that we know where to attach the policy to
actions NetworktemplateAclPolicyAction[]
ACL Policy Actions:

  • for GBP-based policy, all src_tags and dst_tags have to be gbp-based
  • for ACL-based policy, network is required in either the source or destination so that we know where to attach the policy to
name string
srcTags string[]
ACL Policy Source Tags:

  • for GBP-based policy, all src_tags and dst_tags have to be gbp-based
  • for ACL-based policy, network is required in either the source or destination so that we know where to attach the policy to
actions Sequence[NetworktemplateAclPolicyAction]
ACL Policy Actions:

  • for GBP-based policy, all src_tags and dst_tags have to be gbp-based
  • for ACL-based policy, network is required in either the source or destination so that we know where to attach the policy to
name str
src_tags Sequence[str]
ACL Policy Source Tags:

  • for GBP-based policy, all src_tags and dst_tags have to be gbp-based
  • for ACL-based policy, network is required in either the source or destination so that we know where to attach the policy to
actions List<Property Map>
ACL Policy Actions:

  • for GBP-based policy, all src_tags and dst_tags have to be gbp-based
  • for ACL-based policy, network is required in either the source or destination so that we know where to attach the policy to
name String
srcTags List<String>
ACL Policy Source Tags:

  • for GBP-based policy, all src_tags and dst_tags have to be gbp-based
  • for ACL-based policy, network is required in either the source or destination so that we know where to attach the policy to

NetworktemplateAclPolicyAction
, NetworktemplateAclPolicyActionArgs

DstTag This property is required. string
Action string
enum: allow, deny
DstTag This property is required. string
Action string
enum: allow, deny
dstTag This property is required. String
action String
enum: allow, deny
dstTag This property is required. string
action string
enum: allow, deny
dst_tag This property is required. str
action str
enum: allow, deny
dstTag This property is required. String
action String
enum: allow, deny

NetworktemplateAclTags
, NetworktemplateAclTagsArgs

Type This property is required. string
enum:

  • any: matching anything not identified
  • dynamic_gbp: from the gbp_tag received from RADIUS
  • gbp_resource: can only be used in dst_tags
  • mac
  • network
  • radius_group
  • resource: can only be used in dst_tags
  • static_gbp: applying gbp tag against matching conditions
  • subnet'
GbpTag int
Required if

  • type==dynamic_gbp (gbp_tag received from RADIUS)
  • type==gbp_resource
  • type==static_gbp (applying gbp tag against matching conditions)
Macs List<string>
Required if

  • type==mac
  • type==static_gbp if from matching mac
Network string
If:

  • type==mac (optional. default is any)
  • type==subnet (optional. default is any)
  • type==network
  • type==resource (optional. default is any)
  • type==static_gbp if from matching network (vlan)
RadiusGroup string
Required if:

  • type==radius_group
  • type==static_gbp if from matching radius_group
Specs List<Pulumi.JuniperMist.Site.Inputs.NetworktemplateAclTagsSpec>
If type==resource or type==gbp_resource. Empty means unrestricted, i.e. any
Subnets List<string>
If

  • type==subnet
  • type==resource (optional. default is any)
  • type==static_gbp if from matching subnet
Type This property is required. string
enum:

  • any: matching anything not identified
  • dynamic_gbp: from the gbp_tag received from RADIUS
  • gbp_resource: can only be used in dst_tags
  • mac
  • network
  • radius_group
  • resource: can only be used in dst_tags
  • static_gbp: applying gbp tag against matching conditions
  • subnet'
GbpTag int
Required if

  • type==dynamic_gbp (gbp_tag received from RADIUS)
  • type==gbp_resource
  • type==static_gbp (applying gbp tag against matching conditions)
Macs []string
Required if

  • type==mac
  • type==static_gbp if from matching mac
Network string
If:

  • type==mac (optional. default is any)
  • type==subnet (optional. default is any)
  • type==network
  • type==resource (optional. default is any)
  • type==static_gbp if from matching network (vlan)
RadiusGroup string
Required if:

  • type==radius_group
  • type==static_gbp if from matching radius_group
Specs []NetworktemplateAclTagsSpec
If type==resource or type==gbp_resource. Empty means unrestricted, i.e. any
Subnets []string
If

  • type==subnet
  • type==resource (optional. default is any)
  • type==static_gbp if from matching subnet
type This property is required. String
enum:

  • any: matching anything not identified
  • dynamic_gbp: from the gbp_tag received from RADIUS
  • gbp_resource: can only be used in dst_tags
  • mac
  • network
  • radius_group
  • resource: can only be used in dst_tags
  • static_gbp: applying gbp tag against matching conditions
  • subnet'
gbpTag Integer
Required if

  • type==dynamic_gbp (gbp_tag received from RADIUS)
  • type==gbp_resource
  • type==static_gbp (applying gbp tag against matching conditions)
macs List<String>
Required if

  • type==mac
  • type==static_gbp if from matching mac
network String
If:

  • type==mac (optional. default is any)
  • type==subnet (optional. default is any)
  • type==network
  • type==resource (optional. default is any)
  • type==static_gbp if from matching network (vlan)
radiusGroup String
Required if:

  • type==radius_group
  • type==static_gbp if from matching radius_group
specs List<NetworktemplateAclTagsSpec>
If type==resource or type==gbp_resource. Empty means unrestricted, i.e. any
subnets List<String>
If

  • type==subnet
  • type==resource (optional. default is any)
  • type==static_gbp if from matching subnet
type This property is required. string
enum:

  • any: matching anything not identified
  • dynamic_gbp: from the gbp_tag received from RADIUS
  • gbp_resource: can only be used in dst_tags
  • mac
  • network
  • radius_group
  • resource: can only be used in dst_tags
  • static_gbp: applying gbp tag against matching conditions
  • subnet'
gbpTag number
Required if

  • type==dynamic_gbp (gbp_tag received from RADIUS)
  • type==gbp_resource
  • type==static_gbp (applying gbp tag against matching conditions)
macs string[]
Required if

  • type==mac
  • type==static_gbp if from matching mac
network string
If:

  • type==mac (optional. default is any)
  • type==subnet (optional. default is any)
  • type==network
  • type==resource (optional. default is any)
  • type==static_gbp if from matching network (vlan)
radiusGroup string
Required if:

  • type==radius_group
  • type==static_gbp if from matching radius_group
specs NetworktemplateAclTagsSpec[]
If type==resource or type==gbp_resource. Empty means unrestricted, i.e. any
subnets string[]
If

  • type==subnet
  • type==resource (optional. default is any)
  • type==static_gbp if from matching subnet
type This property is required. str
enum:

  • any: matching anything not identified
  • dynamic_gbp: from the gbp_tag received from RADIUS
  • gbp_resource: can only be used in dst_tags
  • mac
  • network
  • radius_group
  • resource: can only be used in dst_tags
  • static_gbp: applying gbp tag against matching conditions
  • subnet'
gbp_tag int
Required if

  • type==dynamic_gbp (gbp_tag received from RADIUS)
  • type==gbp_resource
  • type==static_gbp (applying gbp tag against matching conditions)
macs Sequence[str]
Required if

  • type==mac
  • type==static_gbp if from matching mac
network str
If:

  • type==mac (optional. default is any)
  • type==subnet (optional. default is any)
  • type==network
  • type==resource (optional. default is any)
  • type==static_gbp if from matching network (vlan)
radius_group str
Required if:

  • type==radius_group
  • type==static_gbp if from matching radius_group
specs Sequence[NetworktemplateAclTagsSpec]
If type==resource or type==gbp_resource. Empty means unrestricted, i.e. any
subnets Sequence[str]
If

  • type==subnet
  • type==resource (optional. default is any)
  • type==static_gbp if from matching subnet
type This property is required. String
enum:

  • any: matching anything not identified
  • dynamic_gbp: from the gbp_tag received from RADIUS
  • gbp_resource: can only be used in dst_tags
  • mac
  • network
  • radius_group
  • resource: can only be used in dst_tags
  • static_gbp: applying gbp tag against matching conditions
  • subnet'
gbpTag Number
Required if

  • type==dynamic_gbp (gbp_tag received from RADIUS)
  • type==gbp_resource
  • type==static_gbp (applying gbp tag against matching conditions)
macs List<String>
Required if

  • type==mac
  • type==static_gbp if from matching mac
network String
If:

  • type==mac (optional. default is any)
  • type==subnet (optional. default is any)
  • type==network
  • type==resource (optional. default is any)
  • type==static_gbp if from matching network (vlan)
radiusGroup String
Required if:

  • type==radius_group
  • type==static_gbp if from matching radius_group
specs List<Property Map>
If type==resource or type==gbp_resource. Empty means unrestricted, i.e. any
subnets List<String>
If

  • type==subnet
  • type==resource (optional. default is any)
  • type==static_gbp if from matching subnet

NetworktemplateAclTagsSpec
, NetworktemplateAclTagsSpecArgs

PortRange string
Matched dst port, "0" means any
Protocol string
tcp / udp / icmp / icmp6 / gre / any / :protocol_number, protocol_number is between 1-254, default is any protocol_number is between 1-254
PortRange string
Matched dst port, "0" means any
Protocol string
tcp / udp / icmp / icmp6 / gre / any / :protocol_number, protocol_number is between 1-254, default is any protocol_number is between 1-254
portRange String
Matched dst port, "0" means any
protocol String
tcp / udp / icmp / icmp6 / gre / any / :protocol_number, protocol_number is between 1-254, default is any protocol_number is between 1-254
portRange string
Matched dst port, "0" means any
protocol string
tcp / udp / icmp / icmp6 / gre / any / :protocol_number, protocol_number is between 1-254, default is any protocol_number is between 1-254
port_range str
Matched dst port, "0" means any
protocol str
tcp / udp / icmp / icmp6 / gre / any / :protocol_number, protocol_number is between 1-254, default is any protocol_number is between 1-254
portRange String
Matched dst port, "0" means any
protocol String
tcp / udp / icmp / icmp6 / gre / any / :protocol_number, protocol_number is between 1-254, default is any protocol_number is between 1-254

NetworktemplateDhcpSnooping
, NetworktemplateDhcpSnoopingArgs

AllNetworks bool
EnableArpSpoofCheck bool
Enable for dynamic ARP inspection check
EnableIpSourceGuard bool
Enable for check for forging source IP address
Enabled bool
Networks List<string>
If all_networks==false, list of network with DHCP snooping enabled
AllNetworks bool
EnableArpSpoofCheck bool
Enable for dynamic ARP inspection check
EnableIpSourceGuard bool
Enable for check for forging source IP address
Enabled bool
Networks []string
If all_networks==false, list of network with DHCP snooping enabled
allNetworks Boolean
enableArpSpoofCheck Boolean
Enable for dynamic ARP inspection check
enableIpSourceGuard Boolean
Enable for check for forging source IP address
enabled Boolean
networks List<String>
If all_networks==false, list of network with DHCP snooping enabled
allNetworks boolean
enableArpSpoofCheck boolean
Enable for dynamic ARP inspection check
enableIpSourceGuard boolean
Enable for check for forging source IP address
enabled boolean
networks string[]
If all_networks==false, list of network with DHCP snooping enabled
all_networks bool
enable_arp_spoof_check bool
Enable for dynamic ARP inspection check
enable_ip_source_guard bool
Enable for check for forging source IP address
enabled bool
networks Sequence[str]
If all_networks==false, list of network with DHCP snooping enabled
allNetworks Boolean
enableArpSpoofCheck Boolean
Enable for dynamic ARP inspection check
enableIpSourceGuard Boolean
Enable for check for forging source IP address
enabled Boolean
networks List<String>
If all_networks==false, list of network with DHCP snooping enabled

NetworktemplateExtraRoutes
, NetworktemplateExtraRoutesArgs

Via This property is required. string
Next-hop IP Address
Discard bool
This takes precedence
Metric int
NextQualified Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateExtraRoutesNextQualified>
NoResolve bool
Preference int
Via This property is required. string
Next-hop IP Address
Discard bool
This takes precedence
Metric int
NextQualified map[string]NetworktemplateExtraRoutesNextQualified
NoResolve bool
Preference int
via This property is required. String
Next-hop IP Address
discard Boolean
This takes precedence
metric Integer
nextQualified Map<String,NetworktemplateExtraRoutesNextQualified>
noResolve Boolean
preference Integer
via This property is required. string
Next-hop IP Address
discard boolean
This takes precedence
metric number
nextQualified {[key: string]: NetworktemplateExtraRoutesNextQualified}
noResolve boolean
preference number
via This property is required. str
Next-hop IP Address
discard bool
This takes precedence
metric int
next_qualified Mapping[str, NetworktemplateExtraRoutesNextQualified]
no_resolve bool
preference int
via This property is required. String
Next-hop IP Address
discard Boolean
This takes precedence
metric Number
nextQualified Map<Property Map>
noResolve Boolean
preference Number

NetworktemplateExtraRoutes6
, NetworktemplateExtraRoutes6Args

Via This property is required. string
Next-hop IP Address
Discard bool
This takes precedence
Metric int
NextQualified Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateExtraRoutes6NextQualified>
NoResolve bool
Preference int
Via This property is required. string
Next-hop IP Address
Discard bool
This takes precedence
Metric int
NextQualified map[string]NetworktemplateExtraRoutes6NextQualified
NoResolve bool
Preference int
via This property is required. String
Next-hop IP Address
discard Boolean
This takes precedence
metric Integer
nextQualified Map<String,NetworktemplateExtraRoutes6NextQualified>
noResolve Boolean
preference Integer
via This property is required. string
Next-hop IP Address
discard boolean
This takes precedence
metric number
nextQualified {[key: string]: NetworktemplateExtraRoutes6NextQualified}
noResolve boolean
preference number
via This property is required. str
Next-hop IP Address
discard bool
This takes precedence
metric int
next_qualified Mapping[str, NetworktemplateExtraRoutes6NextQualified]
no_resolve bool
preference int
via This property is required. String
Next-hop IP Address
discard Boolean
This takes precedence
metric Number
nextQualified Map<Property Map>
noResolve Boolean
preference Number

NetworktemplateExtraRoutes6NextQualified
, NetworktemplateExtraRoutes6NextQualifiedArgs

metric Integer
preference Integer
metric number
preference number
metric Number
preference Number

NetworktemplateExtraRoutesNextQualified
, NetworktemplateExtraRoutesNextQualifiedArgs

metric Integer
preference Integer
metric number
preference number
metric Number
preference Number

NetworktemplateMistNac
, NetworktemplateMistNacArgs

Enabled bool
Network string
Enabled bool
Network string
enabled Boolean
network String
enabled boolean
network string
enabled Boolean
network String

NetworktemplateNetworks
, NetworktemplateNetworksArgs

VlanId This property is required. string
Gateway string
Only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
Gateway6 string
Only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
Isolation bool
whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required). NOTE: this features requires uplink device to also a be Juniper device and inter_switch_link to be set
IsolationVlanId string
Subnet string
Optional for pure switching, required when L3 / routing features are used
Subnet6 string
Optional for pure switching, required when L3 / routing features are used
VlanId This property is required. string
Gateway string
Only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
Gateway6 string
Only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
Isolation bool
whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required). NOTE: this features requires uplink device to also a be Juniper device and inter_switch_link to be set
IsolationVlanId string
Subnet string
Optional for pure switching, required when L3 / routing features are used
Subnet6 string
Optional for pure switching, required when L3 / routing features are used
vlanId This property is required. String
gateway String
Only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
gateway6 String
Only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
isolation Boolean
whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required). NOTE: this features requires uplink device to also a be Juniper device and inter_switch_link to be set
isolationVlanId String
subnet String
Optional for pure switching, required when L3 / routing features are used
subnet6 String
Optional for pure switching, required when L3 / routing features are used
vlanId This property is required. string
gateway string
Only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
gateway6 string
Only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
isolation boolean
whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required). NOTE: this features requires uplink device to also a be Juniper device and inter_switch_link to be set
isolationVlanId string
subnet string
Optional for pure switching, required when L3 / routing features are used
subnet6 string
Optional for pure switching, required when L3 / routing features are used
vlan_id This property is required. str
gateway str
Only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
gateway6 str
Only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
isolation bool
whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required). NOTE: this features requires uplink device to also a be Juniper device and inter_switch_link to be set
isolation_vlan_id str
subnet str
Optional for pure switching, required when L3 / routing features are used
subnet6 str
Optional for pure switching, required when L3 / routing features are used
vlanId This property is required. String
gateway String
Only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
gateway6 String
Only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
isolation Boolean
whether to stop clients to talk to each other, default is false (when enabled, a unique isolation_vlan_id is required). NOTE: this features requires uplink device to also a be Juniper device and inter_switch_link to be set
isolationVlanId String
subnet String
Optional for pure switching, required when L3 / routing features are used
subnet6 String
Optional for pure switching, required when L3 / routing features are used

NetworktemplateOspfAreas
, NetworktemplateOspfAreasArgs

Networks This property is required. Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateOspfAreasNetworks>
IncludeLoopback bool
Type string
OSPF type. enum: default, nssa, stub
Networks This property is required. map[string]NetworktemplateOspfAreasNetworks
IncludeLoopback bool
Type string
OSPF type. enum: default, nssa, stub
networks This property is required. Map<String,NetworktemplateOspfAreasNetworks>
includeLoopback Boolean
type String
OSPF type. enum: default, nssa, stub
networks This property is required. {[key: string]: NetworktemplateOspfAreasNetworks}
includeLoopback boolean
type string
OSPF type. enum: default, nssa, stub
networks This property is required. Mapping[str, NetworktemplateOspfAreasNetworks]
include_loopback bool
type str
OSPF type. enum: default, nssa, stub
networks This property is required. Map<Property Map>
includeLoopback Boolean
type String
OSPF type. enum: default, nssa, stub

NetworktemplateOspfAreasNetworks
, NetworktemplateOspfAreasNetworksArgs

AuthKeys Dictionary<string, string>
Required if auth_type==md5. Property key is the key number
AuthPassword string
Required if auth_type==password, the password, max length is 8
AuthType string
auth type. enum: md5, none, password
BfdMinimumInterval int
DeadInterval int
ExportPolicy string
HelloInterval int
ImportPolicy string
InterfaceType string
interface type (nbma = non-broadcast multi-access). enum: broadcast, nbma, p2mp, p2p
Metric int
NoReadvertiseToOverlay bool
By default, we'll re-advertise all learned OSPF routes toward overlay
Passive bool
Whether to send OSPF-Hello
AuthKeys map[string]string
Required if auth_type==md5. Property key is the key number
AuthPassword string
Required if auth_type==password, the password, max length is 8
AuthType string
auth type. enum: md5, none, password
BfdMinimumInterval int
DeadInterval int
ExportPolicy string
HelloInterval int
ImportPolicy string
InterfaceType string
interface type (nbma = non-broadcast multi-access). enum: broadcast, nbma, p2mp, p2p
Metric int
NoReadvertiseToOverlay bool
By default, we'll re-advertise all learned OSPF routes toward overlay
Passive bool
Whether to send OSPF-Hello
authKeys Map<String,String>
Required if auth_type==md5. Property key is the key number
authPassword String
Required if auth_type==password, the password, max length is 8
authType String
auth type. enum: md5, none, password
bfdMinimumInterval Integer
deadInterval Integer
exportPolicy String
helloInterval Integer
importPolicy String
interfaceType String
interface type (nbma = non-broadcast multi-access). enum: broadcast, nbma, p2mp, p2p
metric Integer
noReadvertiseToOverlay Boolean
By default, we'll re-advertise all learned OSPF routes toward overlay
passive Boolean
Whether to send OSPF-Hello
authKeys {[key: string]: string}
Required if auth_type==md5. Property key is the key number
authPassword string
Required if auth_type==password, the password, max length is 8
authType string
auth type. enum: md5, none, password
bfdMinimumInterval number
deadInterval number
exportPolicy string
helloInterval number
importPolicy string
interfaceType string
interface type (nbma = non-broadcast multi-access). enum: broadcast, nbma, p2mp, p2p
metric number
noReadvertiseToOverlay boolean
By default, we'll re-advertise all learned OSPF routes toward overlay
passive boolean
Whether to send OSPF-Hello
auth_keys Mapping[str, str]
Required if auth_type==md5. Property key is the key number
auth_password str
Required if auth_type==password, the password, max length is 8
auth_type str
auth type. enum: md5, none, password
bfd_minimum_interval int
dead_interval int
export_policy str
hello_interval int
import_policy str
interface_type str
interface type (nbma = non-broadcast multi-access). enum: broadcast, nbma, p2mp, p2p
metric int
no_readvertise_to_overlay bool
By default, we'll re-advertise all learned OSPF routes toward overlay
passive bool
Whether to send OSPF-Hello
authKeys Map<String>
Required if auth_type==md5. Property key is the key number
authPassword String
Required if auth_type==password, the password, max length is 8
authType String
auth type. enum: md5, none, password
bfdMinimumInterval Number
deadInterval Number
exportPolicy String
helloInterval Number
importPolicy String
interfaceType String
interface type (nbma = non-broadcast multi-access). enum: broadcast, nbma, p2mp, p2p
metric Number
noReadvertiseToOverlay Boolean
By default, we'll re-advertise all learned OSPF routes toward overlay
passive Boolean
Whether to send OSPF-Hello

NetworktemplatePortMirroring
, NetworktemplatePortMirroringArgs

InputNetworksIngresses List<string>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
InputPortIdsEgresses List<string>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
InputPortIdsIngresses List<string>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
OutputNetwork string
Exactly one of the output_port_id or output_network should be provided
OutputPortId string
Exactly one of the output_port_id or output_network should be provided
InputNetworksIngresses []string
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
InputPortIdsEgresses []string
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
InputPortIdsIngresses []string
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
OutputNetwork string
Exactly one of the output_port_id or output_network should be provided
OutputPortId string
Exactly one of the output_port_id or output_network should be provided
inputNetworksIngresses List<String>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
inputPortIdsEgresses List<String>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
inputPortIdsIngresses List<String>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
outputNetwork String
Exactly one of the output_port_id or output_network should be provided
outputPortId String
Exactly one of the output_port_id or output_network should be provided
inputNetworksIngresses string[]
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
inputPortIdsEgresses string[]
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
inputPortIdsIngresses string[]
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
outputNetwork string
Exactly one of the output_port_id or output_network should be provided
outputPortId string
Exactly one of the output_port_id or output_network should be provided
input_networks_ingresses Sequence[str]
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
input_port_ids_egresses Sequence[str]
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
input_port_ids_ingresses Sequence[str]
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
output_network str
Exactly one of the output_port_id or output_network should be provided
output_port_id str
Exactly one of the output_port_id or output_network should be provided
inputNetworksIngresses List<String>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
inputPortIdsEgresses List<String>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
inputPortIdsIngresses List<String>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
outputNetwork String
Exactly one of the output_port_id or output_network should be provided
outputPortId String
Exactly one of the output_port_id or output_network should be provided

NetworktemplatePortUsages
, NetworktemplatePortUsagesArgs

AllNetworks bool
Only if mode==trunk whether to trunk all network/vlans
AllowDhcpd bool
Only if mode!=dynamic. If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state. When it is not defined, it means using the system's default setting which depends on whether the port is an access or trunk port.
AllowMultipleSupplicants bool
Only if mode!=dynamic
BypassAuthWhenServerDown bool
Only if mode!=dynamic and port_auth==dot1x bypass auth for known clients if set to true when RADIUS server is down
BypassAuthWhenServerDownForUnknownClient bool
Only if mode!=dynamic and port_auth=dot1x bypass auth for all (including unknown clients) if set to true when RADIUS server is down
Description string
Only if mode!=dynamic
DisableAutoneg bool
Only if mode!=dynamic if speed and duplex are specified, whether to disable autonegotiation
Disabled bool
Only if mode!=dynamic whether the port is disabled
Duplex string
Only if mode!=dynamic link connection mode. enum: auto, full, half
DynamicVlanNetworks List<string>
Only if mode!=dynamic and port_auth==dot1x, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return
EnableMacAuth bool
Only if mode!=dynamic and port_auth==dot1x whether to enable MAC Auth
EnableQos bool
Only if mode!=dynamic
GuestNetwork string
Only if mode!=dynamic and port_auth==dot1x which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed)
InterIsolationNetworkLink bool
inter_switch_link is used together with isolation under networks. NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together
InterSwitchLink bool
Only if mode!=dynamic inter_switch_link is used together with "isolation" under networks. NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together
MacAuthOnly bool
Only if mode!=dynamic and enable_mac_auth==true
MacAuthPreferred bool
Only if mode!=dynamic + enable_mac_auth==true + mac_auth_only==false, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x.
MacAuthProtocol string
Only if mode!=dynamic and enable_mac_auth ==true. This type is ignored if mist_nac is enabled. enum: eap-md5, eap-peap, pap
MacLimit string
Only if mode!=dynamic max number of mac addresses, default is 0 for unlimited, otherwise range is 1 to 16383 (upper bound constrained by platform)
Mode string
mode==dynamic must only be used if the port usage name is dynamic. enum: access, dynamic, inet, trunk
Mtu string
Only if mode!=dynamic media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. Value between 256 and 9216, default value is 1514.
Networks List<string>
Only if mode==trunk, the list of network/vlans
PersistMac bool
Only if mode==access and port_auth!=dot1x whether the port should retain dynamically learned MAC addresses
PoeDisabled bool
Only if mode!=dynamic whether PoE capabilities are disabled for a port
PortAuth string
Only if mode!=dynamic if dot1x is desired, set to dot1x. enum: dot1x
PortNetwork string
Only if mode!=dynamic native network/vlan for untagged traffic
ReauthInterval string
Only if mode!=dynamic and port_auth=dot1x reauthentication interval range between 10 and 65535 (default: 3600)
ResetDefaultWhen string
Only if mode==dynamic Control when the DPC port should be changed to the default port usage. enum: link_down, none (let the DPC port keep at the current port usage)
Rules List<Pulumi.JuniperMist.Site.Inputs.NetworktemplatePortUsagesRule>
Only if mode==dynamic
ServerFailNetwork string
Only if mode!=dynamic and port_auth==dot1x sets server fail fallback vlan
ServerRejectNetwork string
Only if mode!=dynamic and port_auth==dot1x when radius server reject / fails
Speed string
Only if mode!=dynamic speed, default is auto to automatically negotiate speed enum: 100m, 10m, 1g, 2.5g, 5g, 10g, 25g, 40g, 100g,auto
StormControl Pulumi.JuniperMist.Site.Inputs.NetworktemplatePortUsagesStormControl
Switch storm control. Only if mode!=dynamic
StpEdge bool
Only if mode!=dynamic when enabled, the port is not expected to receive BPDU frames
StpNoRootPort bool
StpP2p bool
UiEvpntopoId string
Optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
UseVstp bool
If this is connected to a vstp network
VoipNetwork string
Only if mode!=dynamic network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
AllNetworks bool
Only if mode==trunk whether to trunk all network/vlans
AllowDhcpd bool
Only if mode!=dynamic. If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state. When it is not defined, it means using the system's default setting which depends on whether the port is an access or trunk port.
AllowMultipleSupplicants bool
Only if mode!=dynamic
BypassAuthWhenServerDown bool
Only if mode!=dynamic and port_auth==dot1x bypass auth for known clients if set to true when RADIUS server is down
BypassAuthWhenServerDownForUnknownClient bool
Only if mode!=dynamic and port_auth=dot1x bypass auth for all (including unknown clients) if set to true when RADIUS server is down
Description string
Only if mode!=dynamic
DisableAutoneg bool
Only if mode!=dynamic if speed and duplex are specified, whether to disable autonegotiation
Disabled bool
Only if mode!=dynamic whether the port is disabled
Duplex string
Only if mode!=dynamic link connection mode. enum: auto, full, half
DynamicVlanNetworks []string
Only if mode!=dynamic and port_auth==dot1x, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return
EnableMacAuth bool
Only if mode!=dynamic and port_auth==dot1x whether to enable MAC Auth
EnableQos bool
Only if mode!=dynamic
GuestNetwork string
Only if mode!=dynamic and port_auth==dot1x which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed)
InterIsolationNetworkLink bool
inter_switch_link is used together with isolation under networks. NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together
InterSwitchLink bool
Only if mode!=dynamic inter_switch_link is used together with "isolation" under networks. NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together
MacAuthOnly bool
Only if mode!=dynamic and enable_mac_auth==true
MacAuthPreferred bool
Only if mode!=dynamic + enable_mac_auth==true + mac_auth_only==false, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x.
MacAuthProtocol string
Only if mode!=dynamic and enable_mac_auth ==true. This type is ignored if mist_nac is enabled. enum: eap-md5, eap-peap, pap
MacLimit string
Only if mode!=dynamic max number of mac addresses, default is 0 for unlimited, otherwise range is 1 to 16383 (upper bound constrained by platform)
Mode string
mode==dynamic must only be used if the port usage name is dynamic. enum: access, dynamic, inet, trunk
Mtu string
Only if mode!=dynamic media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. Value between 256 and 9216, default value is 1514.
Networks []string
Only if mode==trunk, the list of network/vlans
PersistMac bool
Only if mode==access and port_auth!=dot1x whether the port should retain dynamically learned MAC addresses
PoeDisabled bool
Only if mode!=dynamic whether PoE capabilities are disabled for a port
PortAuth string
Only if mode!=dynamic if dot1x is desired, set to dot1x. enum: dot1x
PortNetwork string
Only if mode!=dynamic native network/vlan for untagged traffic
ReauthInterval string
Only if mode!=dynamic and port_auth=dot1x reauthentication interval range between 10 and 65535 (default: 3600)
ResetDefaultWhen string
Only if mode==dynamic Control when the DPC port should be changed to the default port usage. enum: link_down, none (let the DPC port keep at the current port usage)
Rules []NetworktemplatePortUsagesRule
Only if mode==dynamic
ServerFailNetwork string
Only if mode!=dynamic and port_auth==dot1x sets server fail fallback vlan
ServerRejectNetwork string
Only if mode!=dynamic and port_auth==dot1x when radius server reject / fails
Speed string
Only if mode!=dynamic speed, default is auto to automatically negotiate speed enum: 100m, 10m, 1g, 2.5g, 5g, 10g, 25g, 40g, 100g,auto
StormControl NetworktemplatePortUsagesStormControl
Switch storm control. Only if mode!=dynamic
StpEdge bool
Only if mode!=dynamic when enabled, the port is not expected to receive BPDU frames
StpNoRootPort bool
StpP2p bool
UiEvpntopoId string
Optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
UseVstp bool
If this is connected to a vstp network
VoipNetwork string
Only if mode!=dynamic network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
allNetworks Boolean
Only if mode==trunk whether to trunk all network/vlans
allowDhcpd Boolean
Only if mode!=dynamic. If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state. When it is not defined, it means using the system's default setting which depends on whether the port is an access or trunk port.
allowMultipleSupplicants Boolean
Only if mode!=dynamic
bypassAuthWhenServerDown Boolean
Only if mode!=dynamic and port_auth==dot1x bypass auth for known clients if set to true when RADIUS server is down
bypassAuthWhenServerDownForUnknownClient Boolean
Only if mode!=dynamic and port_auth=dot1x bypass auth for all (including unknown clients) if set to true when RADIUS server is down
description String
Only if mode!=dynamic
disableAutoneg Boolean
Only if mode!=dynamic if speed and duplex are specified, whether to disable autonegotiation
disabled Boolean
Only if mode!=dynamic whether the port is disabled
duplex String
Only if mode!=dynamic link connection mode. enum: auto, full, half
dynamicVlanNetworks List<String>
Only if mode!=dynamic and port_auth==dot1x, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return
enableMacAuth Boolean
Only if mode!=dynamic and port_auth==dot1x whether to enable MAC Auth
enableQos Boolean
Only if mode!=dynamic
guestNetwork String
Only if mode!=dynamic and port_auth==dot1x which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed)
interIsolationNetworkLink Boolean
inter_switch_link is used together with isolation under networks. NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together
interSwitchLink Boolean
Only if mode!=dynamic inter_switch_link is used together with "isolation" under networks. NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together
macAuthOnly Boolean
Only if mode!=dynamic and enable_mac_auth==true
macAuthPreferred Boolean
Only if mode!=dynamic + enable_mac_auth==true + mac_auth_only==false, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x.
macAuthProtocol String
Only if mode!=dynamic and enable_mac_auth ==true. This type is ignored if mist_nac is enabled. enum: eap-md5, eap-peap, pap
macLimit String
Only if mode!=dynamic max number of mac addresses, default is 0 for unlimited, otherwise range is 1 to 16383 (upper bound constrained by platform)
mode String
mode==dynamic must only be used if the port usage name is dynamic. enum: access, dynamic, inet, trunk
mtu String
Only if mode!=dynamic media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. Value between 256 and 9216, default value is 1514.
networks List<String>
Only if mode==trunk, the list of network/vlans
persistMac Boolean
Only if mode==access and port_auth!=dot1x whether the port should retain dynamically learned MAC addresses
poeDisabled Boolean
Only if mode!=dynamic whether PoE capabilities are disabled for a port
portAuth String
Only if mode!=dynamic if dot1x is desired, set to dot1x. enum: dot1x
portNetwork String
Only if mode!=dynamic native network/vlan for untagged traffic
reauthInterval String
Only if mode!=dynamic and port_auth=dot1x reauthentication interval range between 10 and 65535 (default: 3600)
resetDefaultWhen String
Only if mode==dynamic Control when the DPC port should be changed to the default port usage. enum: link_down, none (let the DPC port keep at the current port usage)
rules List<NetworktemplatePortUsagesRule>
Only if mode==dynamic
serverFailNetwork String
Only if mode!=dynamic and port_auth==dot1x sets server fail fallback vlan
serverRejectNetwork String
Only if mode!=dynamic and port_auth==dot1x when radius server reject / fails
speed String
Only if mode!=dynamic speed, default is auto to automatically negotiate speed enum: 100m, 10m, 1g, 2.5g, 5g, 10g, 25g, 40g, 100g,auto
stormControl NetworktemplatePortUsagesStormControl
Switch storm control. Only if mode!=dynamic
stpEdge Boolean
Only if mode!=dynamic when enabled, the port is not expected to receive BPDU frames
stpNoRootPort Boolean
stpP2p Boolean
uiEvpntopoId String
Optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
useVstp Boolean
If this is connected to a vstp network
voipNetwork String
Only if mode!=dynamic network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
allNetworks boolean
Only if mode==trunk whether to trunk all network/vlans
allowDhcpd boolean
Only if mode!=dynamic. If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state. When it is not defined, it means using the system's default setting which depends on whether the port is an access or trunk port.
allowMultipleSupplicants boolean
Only if mode!=dynamic
bypassAuthWhenServerDown boolean
Only if mode!=dynamic and port_auth==dot1x bypass auth for known clients if set to true when RADIUS server is down
bypassAuthWhenServerDownForUnknownClient boolean
Only if mode!=dynamic and port_auth=dot1x bypass auth for all (including unknown clients) if set to true when RADIUS server is down
description string
Only if mode!=dynamic
disableAutoneg boolean
Only if mode!=dynamic if speed and duplex are specified, whether to disable autonegotiation
disabled boolean
Only if mode!=dynamic whether the port is disabled
duplex string
Only if mode!=dynamic link connection mode. enum: auto, full, half
dynamicVlanNetworks string[]
Only if mode!=dynamic and port_auth==dot1x, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return
enableMacAuth boolean
Only if mode!=dynamic and port_auth==dot1x whether to enable MAC Auth
enableQos boolean
Only if mode!=dynamic
guestNetwork string
Only if mode!=dynamic and port_auth==dot1x which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed)
interIsolationNetworkLink boolean
inter_switch_link is used together with isolation under networks. NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together
interSwitchLink boolean
Only if mode!=dynamic inter_switch_link is used together with "isolation" under networks. NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together
macAuthOnly boolean
Only if mode!=dynamic and enable_mac_auth==true
macAuthPreferred boolean
Only if mode!=dynamic + enable_mac_auth==true + mac_auth_only==false, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x.
macAuthProtocol string
Only if mode!=dynamic and enable_mac_auth ==true. This type is ignored if mist_nac is enabled. enum: eap-md5, eap-peap, pap
macLimit string
Only if mode!=dynamic max number of mac addresses, default is 0 for unlimited, otherwise range is 1 to 16383 (upper bound constrained by platform)
mode string
mode==dynamic must only be used if the port usage name is dynamic. enum: access, dynamic, inet, trunk
mtu string
Only if mode!=dynamic media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. Value between 256 and 9216, default value is 1514.
networks string[]
Only if mode==trunk, the list of network/vlans
persistMac boolean
Only if mode==access and port_auth!=dot1x whether the port should retain dynamically learned MAC addresses
poeDisabled boolean
Only if mode!=dynamic whether PoE capabilities are disabled for a port
portAuth string
Only if mode!=dynamic if dot1x is desired, set to dot1x. enum: dot1x
portNetwork string
Only if mode!=dynamic native network/vlan for untagged traffic
reauthInterval string
Only if mode!=dynamic and port_auth=dot1x reauthentication interval range between 10 and 65535 (default: 3600)
resetDefaultWhen string
Only if mode==dynamic Control when the DPC port should be changed to the default port usage. enum: link_down, none (let the DPC port keep at the current port usage)
rules NetworktemplatePortUsagesRule[]
Only if mode==dynamic
serverFailNetwork string
Only if mode!=dynamic and port_auth==dot1x sets server fail fallback vlan
serverRejectNetwork string
Only if mode!=dynamic and port_auth==dot1x when radius server reject / fails
speed string
Only if mode!=dynamic speed, default is auto to automatically negotiate speed enum: 100m, 10m, 1g, 2.5g, 5g, 10g, 25g, 40g, 100g,auto
stormControl NetworktemplatePortUsagesStormControl
Switch storm control. Only if mode!=dynamic
stpEdge boolean
Only if mode!=dynamic when enabled, the port is not expected to receive BPDU frames
stpNoRootPort boolean
stpP2p boolean
uiEvpntopoId string
Optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
useVstp boolean
If this is connected to a vstp network
voipNetwork string
Only if mode!=dynamic network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
all_networks bool
Only if mode==trunk whether to trunk all network/vlans
allow_dhcpd bool
Only if mode!=dynamic. If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state. When it is not defined, it means using the system's default setting which depends on whether the port is an access or trunk port.
allow_multiple_supplicants bool
Only if mode!=dynamic
bypass_auth_when_server_down bool
Only if mode!=dynamic and port_auth==dot1x bypass auth for known clients if set to true when RADIUS server is down
bypass_auth_when_server_down_for_unknown_client bool
Only if mode!=dynamic and port_auth=dot1x bypass auth for all (including unknown clients) if set to true when RADIUS server is down
description str
Only if mode!=dynamic
disable_autoneg bool
Only if mode!=dynamic if speed and duplex are specified, whether to disable autonegotiation
disabled bool
Only if mode!=dynamic whether the port is disabled
duplex str
Only if mode!=dynamic link connection mode. enum: auto, full, half
dynamic_vlan_networks Sequence[str]
Only if mode!=dynamic and port_auth==dot1x, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return
enable_mac_auth bool
Only if mode!=dynamic and port_auth==dot1x whether to enable MAC Auth
enable_qos bool
Only if mode!=dynamic
guest_network str
Only if mode!=dynamic and port_auth==dot1x which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed)
inter_isolation_network_link bool
inter_switch_link is used together with isolation under networks. NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together
inter_switch_link bool
Only if mode!=dynamic inter_switch_link is used together with "isolation" under networks. NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together
mac_auth_only bool
Only if mode!=dynamic and enable_mac_auth==true
mac_auth_preferred bool
Only if mode!=dynamic + enable_mac_auth==true + mac_auth_only==false, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x.
mac_auth_protocol str
Only if mode!=dynamic and enable_mac_auth ==true. This type is ignored if mist_nac is enabled. enum: eap-md5, eap-peap, pap
mac_limit str
Only if mode!=dynamic max number of mac addresses, default is 0 for unlimited, otherwise range is 1 to 16383 (upper bound constrained by platform)
mode str
mode==dynamic must only be used if the port usage name is dynamic. enum: access, dynamic, inet, trunk
mtu str
Only if mode!=dynamic media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. Value between 256 and 9216, default value is 1514.
networks Sequence[str]
Only if mode==trunk, the list of network/vlans
persist_mac bool
Only if mode==access and port_auth!=dot1x whether the port should retain dynamically learned MAC addresses
poe_disabled bool
Only if mode!=dynamic whether PoE capabilities are disabled for a port
port_auth str
Only if mode!=dynamic if dot1x is desired, set to dot1x. enum: dot1x
port_network str
Only if mode!=dynamic native network/vlan for untagged traffic
reauth_interval str
Only if mode!=dynamic and port_auth=dot1x reauthentication interval range between 10 and 65535 (default: 3600)
reset_default_when str
Only if mode==dynamic Control when the DPC port should be changed to the default port usage. enum: link_down, none (let the DPC port keep at the current port usage)
rules Sequence[NetworktemplatePortUsagesRule]
Only if mode==dynamic
server_fail_network str
Only if mode!=dynamic and port_auth==dot1x sets server fail fallback vlan
server_reject_network str
Only if mode!=dynamic and port_auth==dot1x when radius server reject / fails
speed str
Only if mode!=dynamic speed, default is auto to automatically negotiate speed enum: 100m, 10m, 1g, 2.5g, 5g, 10g, 25g, 40g, 100g,auto
storm_control NetworktemplatePortUsagesStormControl
Switch storm control. Only if mode!=dynamic
stp_edge bool
Only if mode!=dynamic when enabled, the port is not expected to receive BPDU frames
stp_no_root_port bool
stp_p2p bool
ui_evpntopo_id str
Optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
use_vstp bool
If this is connected to a vstp network
voip_network str
Only if mode!=dynamic network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
allNetworks Boolean
Only if mode==trunk whether to trunk all network/vlans
allowDhcpd Boolean
Only if mode!=dynamic. If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allow_dhcpd is a tri_state. When it is not defined, it means using the system's default setting which depends on whether the port is an access or trunk port.
allowMultipleSupplicants Boolean
Only if mode!=dynamic
bypassAuthWhenServerDown Boolean
Only if mode!=dynamic and port_auth==dot1x bypass auth for known clients if set to true when RADIUS server is down
bypassAuthWhenServerDownForUnknownClient Boolean
Only if mode!=dynamic and port_auth=dot1x bypass auth for all (including unknown clients) if set to true when RADIUS server is down
description String
Only if mode!=dynamic
disableAutoneg Boolean
Only if mode!=dynamic if speed and duplex are specified, whether to disable autonegotiation
disabled Boolean
Only if mode!=dynamic whether the port is disabled
duplex String
Only if mode!=dynamic link connection mode. enum: auto, full, half
dynamicVlanNetworks List<String>
Only if mode!=dynamic and port_auth==dot1x, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return
enableMacAuth Boolean
Only if mode!=dynamic and port_auth==dot1x whether to enable MAC Auth
enableQos Boolean
Only if mode!=dynamic
guestNetwork String
Only if mode!=dynamic and port_auth==dot1x which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed)
interIsolationNetworkLink Boolean
inter_switch_link is used together with isolation under networks. NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together
interSwitchLink Boolean
Only if mode!=dynamic inter_switch_link is used together with "isolation" under networks. NOTE: inter_switch_link works only between Juniper device. This has to be applied to both ports connected together
macAuthOnly Boolean
Only if mode!=dynamic and enable_mac_auth==true
macAuthPreferred Boolean
Only if mode!=dynamic + enable_mac_auth==true + mac_auth_only==false, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x.
macAuthProtocol String
Only if mode!=dynamic and enable_mac_auth ==true. This type is ignored if mist_nac is enabled. enum: eap-md5, eap-peap, pap
macLimit String
Only if mode!=dynamic max number of mac addresses, default is 0 for unlimited, otherwise range is 1 to 16383 (upper bound constrained by platform)
mode String
mode==dynamic must only be used if the port usage name is dynamic. enum: access, dynamic, inet, trunk
mtu String
Only if mode!=dynamic media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. Value between 256 and 9216, default value is 1514.
networks List<String>
Only if mode==trunk, the list of network/vlans
persistMac Boolean
Only if mode==access and port_auth!=dot1x whether the port should retain dynamically learned MAC addresses
poeDisabled Boolean
Only if mode!=dynamic whether PoE capabilities are disabled for a port
portAuth String
Only if mode!=dynamic if dot1x is desired, set to dot1x. enum: dot1x
portNetwork String
Only if mode!=dynamic native network/vlan for untagged traffic
reauthInterval String
Only if mode!=dynamic and port_auth=dot1x reauthentication interval range between 10 and 65535 (default: 3600)
resetDefaultWhen String
Only if mode==dynamic Control when the DPC port should be changed to the default port usage. enum: link_down, none (let the DPC port keep at the current port usage)
rules List<Property Map>
Only if mode==dynamic
serverFailNetwork String
Only if mode!=dynamic and port_auth==dot1x sets server fail fallback vlan
serverRejectNetwork String
Only if mode!=dynamic and port_auth==dot1x when radius server reject / fails
speed String
Only if mode!=dynamic speed, default is auto to automatically negotiate speed enum: 100m, 10m, 1g, 2.5g, 5g, 10g, 25g, 40g, 100g,auto
stormControl Property Map
Switch storm control. Only if mode!=dynamic
stpEdge Boolean
Only if mode!=dynamic when enabled, the port is not expected to receive BPDU frames
stpNoRootPort Boolean
stpP2p Boolean
uiEvpntopoId String
Optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
useVstp Boolean
If this is connected to a vstp network
voipNetwork String
Only if mode!=dynamic network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth

NetworktemplatePortUsagesRule
, NetworktemplatePortUsagesRuleArgs

Src This property is required. string
enum: link_peermac, lldp_chassis_id, lldp_hardware_revision, lldp_manufacturer_name, lldp_oui, lldp_serial_number, lldp_system_name, radius_dynamicfilter, radius_usermac, radius_username
Equals string
EqualsAnies List<string>
Use equals_any to match any item in a list
Expression string
"[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
Usage string
port_usage name
Src This property is required. string
enum: link_peermac, lldp_chassis_id, lldp_hardware_revision, lldp_manufacturer_name, lldp_oui, lldp_serial_number, lldp_system_name, radius_dynamicfilter, radius_usermac, radius_username
Equals string
EqualsAnies []string
Use equals_any to match any item in a list
Expression string
"[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
Usage string
port_usage name
src This property is required. String
enum: link_peermac, lldp_chassis_id, lldp_hardware_revision, lldp_manufacturer_name, lldp_oui, lldp_serial_number, lldp_system_name, radius_dynamicfilter, radius_usermac, radius_username
equalsAnies List<String>
Use equals_any to match any item in a list
equals_ String
expression String
"[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
usage String
port_usage name
src This property is required. string
enum: link_peermac, lldp_chassis_id, lldp_hardware_revision, lldp_manufacturer_name, lldp_oui, lldp_serial_number, lldp_system_name, radius_dynamicfilter, radius_usermac, radius_username
equals string
equalsAnies string[]
Use equals_any to match any item in a list
expression string
"[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
usage string
port_usage name
src This property is required. str
enum: link_peermac, lldp_chassis_id, lldp_hardware_revision, lldp_manufacturer_name, lldp_oui, lldp_serial_number, lldp_system_name, radius_dynamicfilter, radius_usermac, radius_username
equals str
equals_anies Sequence[str]
Use equals_any to match any item in a list
expression str
"[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
usage str
port_usage name
src This property is required. String
enum: link_peermac, lldp_chassis_id, lldp_hardware_revision, lldp_manufacturer_name, lldp_oui, lldp_serial_number, lldp_system_name, radius_dynamicfilter, radius_usermac, radius_username
equals String
equalsAnies List<String>
Use equals_any to match any item in a list
expression String
"[0:3]":"abcdef" > "abc" "split(.)[1]": "a.b.c" > "b" "split(-)[1][0:3]: "a1234-b5678-c90" > "b56"
usage String
port_usage name

NetworktemplatePortUsagesStormControl
, NetworktemplatePortUsagesStormControlArgs

NoBroadcast bool
Whether to disable storm control on broadcast traffic
NoMulticast bool
Whether to disable storm control on multicast traffic
NoRegisteredMulticast bool
Whether to disable storm control on registered multicast traffic
NoUnknownUnicast bool
Whether to disable storm control on unknown unicast traffic
Percentage int
Bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
NoBroadcast bool
Whether to disable storm control on broadcast traffic
NoMulticast bool
Whether to disable storm control on multicast traffic
NoRegisteredMulticast bool
Whether to disable storm control on registered multicast traffic
NoUnknownUnicast bool
Whether to disable storm control on unknown unicast traffic
Percentage int
Bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
noBroadcast Boolean
Whether to disable storm control on broadcast traffic
noMulticast Boolean
Whether to disable storm control on multicast traffic
noRegisteredMulticast Boolean
Whether to disable storm control on registered multicast traffic
noUnknownUnicast Boolean
Whether to disable storm control on unknown unicast traffic
percentage Integer
Bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
noBroadcast boolean
Whether to disable storm control on broadcast traffic
noMulticast boolean
Whether to disable storm control on multicast traffic
noRegisteredMulticast boolean
Whether to disable storm control on registered multicast traffic
noUnknownUnicast boolean
Whether to disable storm control on unknown unicast traffic
percentage number
Bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
no_broadcast bool
Whether to disable storm control on broadcast traffic
no_multicast bool
Whether to disable storm control on multicast traffic
no_registered_multicast bool
Whether to disable storm control on registered multicast traffic
no_unknown_unicast bool
Whether to disable storm control on unknown unicast traffic
percentage int
Bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
noBroadcast Boolean
Whether to disable storm control on broadcast traffic
noMulticast Boolean
Whether to disable storm control on multicast traffic
noRegisteredMulticast Boolean
Whether to disable storm control on registered multicast traffic
noUnknownUnicast Boolean
Whether to disable storm control on unknown unicast traffic
percentage Number
Bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth

NetworktemplateRadiusConfig
, NetworktemplateRadiusConfigArgs

AcctImmediateUpdate bool
AcctInterimInterval int
How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
AcctServers List<Pulumi.JuniperMist.Site.Inputs.NetworktemplateRadiusConfigAcctServer>
AuthServerSelection string
enum: ordered, unordered
AuthServers List<Pulumi.JuniperMist.Site.Inputs.NetworktemplateRadiusConfigAuthServer>
AuthServersRetries int
Radius auth session retries
AuthServersTimeout int
Radius auth session timeout
CoaEnabled bool
CoaPort string
FastDot1xTimers bool
Network string
Use networkor source_ip. Which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip
SourceIp string
Use networkor source_ip
AcctImmediateUpdate bool
AcctInterimInterval int
How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
AcctServers []NetworktemplateRadiusConfigAcctServer
AuthServerSelection string
enum: ordered, unordered
AuthServers []NetworktemplateRadiusConfigAuthServer
AuthServersRetries int
Radius auth session retries
AuthServersTimeout int
Radius auth session timeout
CoaEnabled bool
CoaPort string
FastDot1xTimers bool
Network string
Use networkor source_ip. Which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip
SourceIp string
Use networkor source_ip
acctImmediateUpdate Boolean
acctInterimInterval Integer
How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
acctServers List<NetworktemplateRadiusConfigAcctServer>
authServerSelection String
enum: ordered, unordered
authServers List<NetworktemplateRadiusConfigAuthServer>
authServersRetries Integer
Radius auth session retries
authServersTimeout Integer
Radius auth session timeout
coaEnabled Boolean
coaPort String
fastDot1xTimers Boolean
network String
Use networkor source_ip. Which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip
sourceIp String
Use networkor source_ip
acctImmediateUpdate boolean
acctInterimInterval number
How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
acctServers NetworktemplateRadiusConfigAcctServer[]
authServerSelection string
enum: ordered, unordered
authServers NetworktemplateRadiusConfigAuthServer[]
authServersRetries number
Radius auth session retries
authServersTimeout number
Radius auth session timeout
coaEnabled boolean
coaPort string
fastDot1xTimers boolean
network string
Use networkor source_ip. Which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip
sourceIp string
Use networkor source_ip
acct_immediate_update bool
acct_interim_interval int
How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
acct_servers Sequence[NetworktemplateRadiusConfigAcctServer]
auth_server_selection str
enum: ordered, unordered
auth_servers Sequence[NetworktemplateRadiusConfigAuthServer]
auth_servers_retries int
Radius auth session retries
auth_servers_timeout int
Radius auth session timeout
coa_enabled bool
coa_port str
fast_dot1x_timers bool
network str
Use networkor source_ip. Which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip
source_ip str
Use networkor source_ip
acctImmediateUpdate Boolean
acctInterimInterval Number
How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
acctServers List<Property Map>
authServerSelection String
enum: ordered, unordered
authServers List<Property Map>
authServersRetries Number
Radius auth session retries
authServersTimeout Number
Radius auth session timeout
coaEnabled Boolean
coaPort String
fastDot1xTimers Boolean
network String
Use networkor source_ip. Which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip
sourceIp String
Use networkor source_ip

NetworktemplateRadiusConfigAcctServer
, NetworktemplateRadiusConfigAcctServerArgs

Host This property is required. string
IP/ hostname of RADIUS server
Secret This property is required. string
Secret of RADIUS server
KeywrapEnabled bool
KeywrapFormat string
enum: ascii, hex
KeywrapKek string
KeywrapMack string
Port int
Acct port of RADIUS server
Host This property is required. string
IP/ hostname of RADIUS server
Secret This property is required. string
Secret of RADIUS server
KeywrapEnabled bool
KeywrapFormat string
enum: ascii, hex
KeywrapKek string
KeywrapMack string
Port int
Acct port of RADIUS server
host This property is required. String
IP/ hostname of RADIUS server
secret This property is required. String
Secret of RADIUS server
keywrapEnabled Boolean
keywrapFormat String
enum: ascii, hex
keywrapKek String
keywrapMack String
port Integer
Acct port of RADIUS server
host This property is required. string
IP/ hostname of RADIUS server
secret This property is required. string
Secret of RADIUS server
keywrapEnabled boolean
keywrapFormat string
enum: ascii, hex
keywrapKek string
keywrapMack string
port number
Acct port of RADIUS server
host This property is required. str
IP/ hostname of RADIUS server
secret This property is required. str
Secret of RADIUS server
keywrap_enabled bool
keywrap_format str
enum: ascii, hex
keywrap_kek str
keywrap_mack str
port int
Acct port of RADIUS server
host This property is required. String
IP/ hostname of RADIUS server
secret This property is required. String
Secret of RADIUS server
keywrapEnabled Boolean
keywrapFormat String
enum: ascii, hex
keywrapKek String
keywrapMack String
port Number
Acct port of RADIUS server

NetworktemplateRadiusConfigAuthServer
, NetworktemplateRadiusConfigAuthServerArgs

Host This property is required. string
IP/ hostname of RADIUS server
Secret This property is required. string
Secret of RADIUS server
KeywrapEnabled bool
KeywrapFormat string
enum: ascii, hex
KeywrapKek string
KeywrapMack string
Port int
Auth port of RADIUS server
RequireMessageAuthenticator bool
Whether to require Message-Authenticator in requests
Host This property is required. string
IP/ hostname of RADIUS server
Secret This property is required. string
Secret of RADIUS server
KeywrapEnabled bool
KeywrapFormat string
enum: ascii, hex
KeywrapKek string
KeywrapMack string
Port int
Auth port of RADIUS server
RequireMessageAuthenticator bool
Whether to require Message-Authenticator in requests
host This property is required. String
IP/ hostname of RADIUS server
secret This property is required. String
Secret of RADIUS server
keywrapEnabled Boolean
keywrapFormat String
enum: ascii, hex
keywrapKek String
keywrapMack String
port Integer
Auth port of RADIUS server
requireMessageAuthenticator Boolean
Whether to require Message-Authenticator in requests
host This property is required. string
IP/ hostname of RADIUS server
secret This property is required. string
Secret of RADIUS server
keywrapEnabled boolean
keywrapFormat string
enum: ascii, hex
keywrapKek string
keywrapMack string
port number
Auth port of RADIUS server
requireMessageAuthenticator boolean
Whether to require Message-Authenticator in requests
host This property is required. str
IP/ hostname of RADIUS server
secret This property is required. str
Secret of RADIUS server
keywrap_enabled bool
keywrap_format str
enum: ascii, hex
keywrap_kek str
keywrap_mack str
port int
Auth port of RADIUS server
require_message_authenticator bool
Whether to require Message-Authenticator in requests
host This property is required. String
IP/ hostname of RADIUS server
secret This property is required. String
Secret of RADIUS server
keywrapEnabled Boolean
keywrapFormat String
enum: ascii, hex
keywrapKek String
keywrapMack String
port Number
Auth port of RADIUS server
requireMessageAuthenticator Boolean
Whether to require Message-Authenticator in requests

NetworktemplateRemoteSyslog
, NetworktemplateRemoteSyslogArgs

archive Property Map
console Property Map
enabled Boolean
files List<Property Map>
network String
If source_address is configured, will use the vlan firstly otherwise use source_ip
sendToAllServers Boolean
servers List<Property Map>
timeFormat String
enum: millisecond, year, year millisecond
users List<Property Map>

NetworktemplateRemoteSyslogArchive
, NetworktemplateRemoteSyslogArchiveArgs

Files string
Size string
Files string
Size string
files String
size String
files string
size string
files str
size str
files String
size String

NetworktemplateRemoteSyslogConsole
, NetworktemplateRemoteSyslogConsoleArgs

NetworktemplateRemoteSyslogConsoleContent
, NetworktemplateRemoteSyslogConsoleContentArgs

Facility string
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
Severity string
enum: alert, any, critical, emergency, error, info, notice, warning
Facility string
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
Severity string
enum: alert, any, critical, emergency, error, info, notice, warning
facility String
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity String
enum: alert, any, critical, emergency, error, info, notice, warning
facility string
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity string
enum: alert, any, critical, emergency, error, info, notice, warning
facility str
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity str
enum: alert, any, critical, emergency, error, info, notice, warning
facility String
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity String
enum: alert, any, critical, emergency, error, info, notice, warning

NetworktemplateRemoteSyslogFile
, NetworktemplateRemoteSyslogFileArgs

NetworktemplateRemoteSyslogFileArchive
, NetworktemplateRemoteSyslogFileArchiveArgs

Files string
Size string
Files string
Size string
files String
size String
files string
size string
files str
size str
files String
size String

NetworktemplateRemoteSyslogFileContent
, NetworktemplateRemoteSyslogFileContentArgs

Facility string
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
Severity string
enum: alert, any, critical, emergency, error, info, notice, warning
Facility string
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
Severity string
enum: alert, any, critical, emergency, error, info, notice, warning
facility String
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity String
enum: alert, any, critical, emergency, error, info, notice, warning
facility string
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity string
enum: alert, any, critical, emergency, error, info, notice, warning
facility str
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity str
enum: alert, any, critical, emergency, error, info, notice, warning
facility String
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity String
enum: alert, any, critical, emergency, error, info, notice, warning

NetworktemplateRemoteSyslogServer
, NetworktemplateRemoteSyslogServerArgs

Contents List<Pulumi.JuniperMist.Site.Inputs.NetworktemplateRemoteSyslogServerContent>
ExplicitPriority bool
Facility string
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
Host string
Match string
Port string
Protocol string
enum: tcp, udp
RoutingInstance string
Severity string
enum: alert, any, critical, emergency, error, info, notice, warning
SourceAddress string
If source_address is configured, will use the vlan firstly otherwise use source_ip
StructuredData bool
Tag string
Contents []NetworktemplateRemoteSyslogServerContent
ExplicitPriority bool
Facility string
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
Host string
Match string
Port string
Protocol string
enum: tcp, udp
RoutingInstance string
Severity string
enum: alert, any, critical, emergency, error, info, notice, warning
SourceAddress string
If source_address is configured, will use the vlan firstly otherwise use source_ip
StructuredData bool
Tag string
contents List<NetworktemplateRemoteSyslogServerContent>
explicitPriority Boolean
facility String
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
host String
match String
port String
protocol String
enum: tcp, udp
routingInstance String
severity String
enum: alert, any, critical, emergency, error, info, notice, warning
sourceAddress String
If source_address is configured, will use the vlan firstly otherwise use source_ip
structuredData Boolean
tag String
contents NetworktemplateRemoteSyslogServerContent[]
explicitPriority boolean
facility string
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
host string
match string
port string
protocol string
enum: tcp, udp
routingInstance string
severity string
enum: alert, any, critical, emergency, error, info, notice, warning
sourceAddress string
If source_address is configured, will use the vlan firstly otherwise use source_ip
structuredData boolean
tag string
contents Sequence[NetworktemplateRemoteSyslogServerContent]
explicit_priority bool
facility str
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
host str
match str
port str
protocol str
enum: tcp, udp
routing_instance str
severity str
enum: alert, any, critical, emergency, error, info, notice, warning
source_address str
If source_address is configured, will use the vlan firstly otherwise use source_ip
structured_data bool
tag str
contents List<Property Map>
explicitPriority Boolean
facility String
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
host String
match String
port String
protocol String
enum: tcp, udp
routingInstance String
severity String
enum: alert, any, critical, emergency, error, info, notice, warning
sourceAddress String
If source_address is configured, will use the vlan firstly otherwise use source_ip
structuredData Boolean
tag String

NetworktemplateRemoteSyslogServerContent
, NetworktemplateRemoteSyslogServerContentArgs

Facility string
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
Severity string
enum: alert, any, critical, emergency, error, info, notice, warning
Facility string
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
Severity string
enum: alert, any, critical, emergency, error, info, notice, warning
facility String
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity String
enum: alert, any, critical, emergency, error, info, notice, warning
facility string
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity string
enum: alert, any, critical, emergency, error, info, notice, warning
facility str
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity str
enum: alert, any, critical, emergency, error, info, notice, warning
facility String
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity String
enum: alert, any, critical, emergency, error, info, notice, warning

NetworktemplateRemoteSyslogUser
, NetworktemplateRemoteSyslogUserArgs

NetworktemplateRemoteSyslogUserContent
, NetworktemplateRemoteSyslogUserContentArgs

Facility string
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
Severity string
enum: alert, any, critical, emergency, error, info, notice, warning
Facility string
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
Severity string
enum: alert, any, critical, emergency, error, info, notice, warning
facility String
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity String
enum: alert, any, critical, emergency, error, info, notice, warning
facility string
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity string
enum: alert, any, critical, emergency, error, info, notice, warning
facility str
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity str
enum: alert, any, critical, emergency, error, info, notice, warning
facility String
enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-commands, kernel, ntp, pfe, security, user
severity String
enum: alert, any, critical, emergency, error, info, notice, warning

NetworktemplateSnmpConfig
, NetworktemplateSnmpConfigArgs

NetworktemplateSnmpConfigClientList
, NetworktemplateSnmpConfigClientListArgs

ClientListName string
Clients List<string>
ClientListName string
Clients []string
clientListName String
clients List<String>
clientListName string
clients string[]
client_list_name str
clients Sequence[str]
clientListName String
clients List<String>

NetworktemplateSnmpConfigTrapGroup
, NetworktemplateSnmpConfigTrapGroupArgs

Categories List<string>
GroupName string
Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
Targets List<string>
Version string
enum: all, v1, v2
Categories []string
GroupName string
Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
Targets []string
Version string
enum: all, v1, v2
categories List<String>
groupName String
Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
targets List<String>
version String
enum: all, v1, v2
categories string[]
groupName string
Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
targets string[]
version string
enum: all, v1, v2
categories Sequence[str]
group_name str
Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
targets Sequence[str]
version str
enum: all, v1, v2
categories List<String>
groupName String
Categories list can refer to https://www.juniper.net/documentation/software/topics/task/configuration/snmp_trap-groups-configuring-junos-nm.html
targets List<String>
version String
enum: all, v1, v2

NetworktemplateSnmpConfigV2cConfig
, NetworktemplateSnmpConfigV2cConfigArgs

Authorization string
ClientListName string
Client_list_name here should refer to client_list above
CommunityName string
View string
View name here should be defined in views above
Authorization string
ClientListName string
Client_list_name here should refer to client_list above
CommunityName string
View string
View name here should be defined in views above
authorization String
clientListName String
Client_list_name here should refer to client_list above
communityName String
view String
View name here should be defined in views above
authorization string
clientListName string
Client_list_name here should refer to client_list above
communityName string
view string
View name here should be defined in views above
authorization str
client_list_name str
Client_list_name here should refer to client_list above
community_name str
view str
View name here should be defined in views above
authorization String
clientListName String
Client_list_name here should refer to client_list above
communityName String
view String
View name here should be defined in views above

NetworktemplateSnmpConfigV3Config
, NetworktemplateSnmpConfigV3ConfigArgs

NetworktemplateSnmpConfigV3ConfigNotify
, NetworktemplateSnmpConfigV3ConfigNotifyArgs

Name This property is required. string
Tag This property is required. string
Type This property is required. string
enum: inform, trap
Name This property is required. string
Tag This property is required. string
Type This property is required. string
enum: inform, trap
name This property is required. String
tag This property is required. String
type This property is required. String
enum: inform, trap
name This property is required. string
tag This property is required. string
type This property is required. string
enum: inform, trap
name This property is required. str
tag This property is required. str
type This property is required. str
enum: inform, trap
name This property is required. String
tag This property is required. String
type This property is required. String
enum: inform, trap

NetworktemplateSnmpConfigV3ConfigNotifyFilter
, NetworktemplateSnmpConfigV3ConfigNotifyFilterArgs

NetworktemplateSnmpConfigV3ConfigNotifyFilterContent
, NetworktemplateSnmpConfigV3ConfigNotifyFilterContentArgs

Oid This property is required. string
Include bool
Oid This property is required. string
Include bool
oid This property is required. String
include Boolean
oid This property is required. string
include boolean
oid This property is required. str
include bool
oid This property is required. String
include Boolean

NetworktemplateSnmpConfigV3ConfigTargetAddress
, NetworktemplateSnmpConfigV3ConfigTargetAddressArgs

Address This property is required. string
AddressMask This property is required. string
TargetAddressName This property is required. string
Port string
TagList string
Refer to notify tag, can be multiple with blank
TargetParameters string
Refer to notify target parameters name
Address This property is required. string
AddressMask This property is required. string
TargetAddressName This property is required. string
Port string
TagList string
Refer to notify tag, can be multiple with blank
TargetParameters string
Refer to notify target parameters name
address This property is required. String
addressMask This property is required. String
targetAddressName This property is required. String
port String
tagList String
Refer to notify tag, can be multiple with blank
targetParameters String
Refer to notify target parameters name
address This property is required. string
addressMask This property is required. string
targetAddressName This property is required. string
port string
tagList string
Refer to notify tag, can be multiple with blank
targetParameters string
Refer to notify target parameters name
address This property is required. str
address_mask This property is required. str
target_address_name This property is required. str
port str
tag_list str
Refer to notify tag, can be multiple with blank
target_parameters str
Refer to notify target parameters name
address This property is required. String
addressMask This property is required. String
targetAddressName This property is required. String
port String
tagList String
Refer to notify tag, can be multiple with blank
targetParameters String
Refer to notify target parameters name

NetworktemplateSnmpConfigV3ConfigTargetParameter
, NetworktemplateSnmpConfigV3ConfigTargetParameterArgs

MessageProcessingModel This property is required. string
enum: v1, v2c, v3
Name This property is required. string
NotifyFilter string
Refer to profile-name in notify_filter
SecurityLevel string
enum: authentication, none, privacy
SecurityModel string
enum: usm, v1, v2c
SecurityName string
Refer to security_name in usm
MessageProcessingModel This property is required. string
enum: v1, v2c, v3
Name This property is required. string
NotifyFilter string
Refer to profile-name in notify_filter
SecurityLevel string
enum: authentication, none, privacy
SecurityModel string
enum: usm, v1, v2c
SecurityName string
Refer to security_name in usm
messageProcessingModel This property is required. String
enum: v1, v2c, v3
name This property is required. String
notifyFilter String
Refer to profile-name in notify_filter
securityLevel String
enum: authentication, none, privacy
securityModel String
enum: usm, v1, v2c
securityName String
Refer to security_name in usm
messageProcessingModel This property is required. string
enum: v1, v2c, v3
name This property is required. string
notifyFilter string
Refer to profile-name in notify_filter
securityLevel string
enum: authentication, none, privacy
securityModel string
enum: usm, v1, v2c
securityName string
Refer to security_name in usm
message_processing_model This property is required. str
enum: v1, v2c, v3
name This property is required. str
notify_filter str
Refer to profile-name in notify_filter
security_level str
enum: authentication, none, privacy
security_model str
enum: usm, v1, v2c
security_name str
Refer to security_name in usm
messageProcessingModel This property is required. String
enum: v1, v2c, v3
name This property is required. String
notifyFilter String
Refer to profile-name in notify_filter
securityLevel String
enum: authentication, none, privacy
securityModel String
enum: usm, v1, v2c
securityName String
Refer to security_name in usm

NetworktemplateSnmpConfigV3ConfigUsm
, NetworktemplateSnmpConfigV3ConfigUsmArgs

EngineType This property is required. string
enum: local_engine, remote_engine
RemoteEngineId string
Required only if engine_type==remote_engine
Users List<Pulumi.JuniperMist.Site.Inputs.NetworktemplateSnmpConfigV3ConfigUsmUser>
EngineType This property is required. string
enum: local_engine, remote_engine
RemoteEngineId string
Required only if engine_type==remote_engine
Users []NetworktemplateSnmpConfigV3ConfigUsmUser
engineType This property is required. String
enum: local_engine, remote_engine
remoteEngineId String
Required only if engine_type==remote_engine
users List<NetworktemplateSnmpConfigV3ConfigUsmUser>
engineType This property is required. string
enum: local_engine, remote_engine
remoteEngineId string
Required only if engine_type==remote_engine
users NetworktemplateSnmpConfigV3ConfigUsmUser[]
engine_type This property is required. str
enum: local_engine, remote_engine
remote_engine_id str
Required only if engine_type==remote_engine
users Sequence[NetworktemplateSnmpConfigV3ConfigUsmUser]
engineType This property is required. String
enum: local_engine, remote_engine
remoteEngineId String
Required only if engine_type==remote_engine
users List<Property Map>

NetworktemplateSnmpConfigV3ConfigUsmUser
, NetworktemplateSnmpConfigV3ConfigUsmUserArgs

AuthenticationPassword string
Not required if authentication_type==authentication-none. Include alphabetic, numeric, and special characters, but it cannot include control characters.
AuthenticationType string
sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum: authentication-md5, authentication-none, authentication-sha, authentication-sha224, authentication-sha256, authentication-sha384, authentication-sha512
EncryptionPassword string
Not required if encryption_type==privacy-none. Include alphabetic, numeric, and special characters, but it cannot include control characters
EncryptionType string
enum: privacy-3des, privacy-aes128, privacy-des, privacy-none
Name string
AuthenticationPassword string
Not required if authentication_type==authentication-none. Include alphabetic, numeric, and special characters, but it cannot include control characters.
AuthenticationType string
sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum: authentication-md5, authentication-none, authentication-sha, authentication-sha224, authentication-sha256, authentication-sha384, authentication-sha512
EncryptionPassword string
Not required if encryption_type==privacy-none. Include alphabetic, numeric, and special characters, but it cannot include control characters
EncryptionType string
enum: privacy-3des, privacy-aes128, privacy-des, privacy-none
Name string
authenticationPassword String
Not required if authentication_type==authentication-none. Include alphabetic, numeric, and special characters, but it cannot include control characters.
authenticationType String
sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum: authentication-md5, authentication-none, authentication-sha, authentication-sha224, authentication-sha256, authentication-sha384, authentication-sha512
encryptionPassword String
Not required if encryption_type==privacy-none. Include alphabetic, numeric, and special characters, but it cannot include control characters
encryptionType String
enum: privacy-3des, privacy-aes128, privacy-des, privacy-none
name String
authenticationPassword string
Not required if authentication_type==authentication-none. Include alphabetic, numeric, and special characters, but it cannot include control characters.
authenticationType string
sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum: authentication-md5, authentication-none, authentication-sha, authentication-sha224, authentication-sha256, authentication-sha384, authentication-sha512
encryptionPassword string
Not required if encryption_type==privacy-none. Include alphabetic, numeric, and special characters, but it cannot include control characters
encryptionType string
enum: privacy-3des, privacy-aes128, privacy-des, privacy-none
name string
authentication_password str
Not required if authentication_type==authentication-none. Include alphabetic, numeric, and special characters, but it cannot include control characters.
authentication_type str
sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum: authentication-md5, authentication-none, authentication-sha, authentication-sha224, authentication-sha256, authentication-sha384, authentication-sha512
encryption_password str
Not required if encryption_type==privacy-none. Include alphabetic, numeric, and special characters, but it cannot include control characters
encryption_type str
enum: privacy-3des, privacy-aes128, privacy-des, privacy-none
name str
authenticationPassword String
Not required if authentication_type==authentication-none. Include alphabetic, numeric, and special characters, but it cannot include control characters.
authenticationType String
sha224, sha256, sha384, sha512 are supported in 21.1 and newer release. enum: authentication-md5, authentication-none, authentication-sha, authentication-sha224, authentication-sha256, authentication-sha384, authentication-sha512
encryptionPassword String
Not required if encryption_type==privacy-none. Include alphabetic, numeric, and special characters, but it cannot include control characters
encryptionType String
enum: privacy-3des, privacy-aes128, privacy-des, privacy-none
name String

NetworktemplateSnmpConfigV3ConfigVacm
, NetworktemplateSnmpConfigV3ConfigVacmArgs

NetworktemplateSnmpConfigV3ConfigVacmAccess
, NetworktemplateSnmpConfigV3ConfigVacmAccessArgs

NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixList
, NetworktemplateSnmpConfigV3ConfigVacmAccessPrefixListArgs

ContextPrefix string
Only required if type==context_prefix
NotifyView string
Refer to view name
ReadView string
Refer to view name
SecurityLevel string
enum: authentication, none, privacy
SecurityModel string
enum: any, usm, v1, v2c
Type string
enum: context_prefix, default_context_prefix
WriteView string
Refer to view name
ContextPrefix string
Only required if type==context_prefix
NotifyView string
Refer to view name
ReadView string
Refer to view name
SecurityLevel string
enum: authentication, none, privacy
SecurityModel string
enum: any, usm, v1, v2c
Type string
enum: context_prefix, default_context_prefix
WriteView string
Refer to view name
contextPrefix String
Only required if type==context_prefix
notifyView String
Refer to view name
readView String
Refer to view name
securityLevel String
enum: authentication, none, privacy
securityModel String
enum: any, usm, v1, v2c
type String
enum: context_prefix, default_context_prefix
writeView String
Refer to view name
contextPrefix string
Only required if type==context_prefix
notifyView string
Refer to view name
readView string
Refer to view name
securityLevel string
enum: authentication, none, privacy
securityModel string
enum: any, usm, v1, v2c
type string
enum: context_prefix, default_context_prefix
writeView string
Refer to view name
context_prefix str
Only required if type==context_prefix
notify_view str
Refer to view name
read_view str
Refer to view name
security_level str
enum: authentication, none, privacy
security_model str
enum: any, usm, v1, v2c
type str
enum: context_prefix, default_context_prefix
write_view str
Refer to view name
contextPrefix String
Only required if type==context_prefix
notifyView String
Refer to view name
readView String
Refer to view name
securityLevel String
enum: authentication, none, privacy
securityModel String
enum: any, usm, v1, v2c
type String
enum: context_prefix, default_context_prefix
writeView String
Refer to view name

NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroup
, NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupArgs

contents List<Property Map>
securityModel String
enum: usm, v1, v2c

NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContent
, NetworktemplateSnmpConfigV3ConfigVacmSecurityToGroupContentArgs

Group string
Refer to group_name under access
SecurityName string
Group string
Refer to group_name under access
SecurityName string
group String
Refer to group_name under access
securityName String
group string
Refer to group_name under access
securityName string
group str
Refer to group_name under access
security_name str
group String
Refer to group_name under access
securityName String

NetworktemplateSnmpConfigView
, NetworktemplateSnmpConfigViewArgs

Include bool
If the root oid configured is included
Oid string
ViewName string
Include bool
If the root oid configured is included
Oid string
ViewName string
include Boolean
If the root oid configured is included
oid String
viewName String
include boolean
If the root oid configured is included
oid string
viewName string
include bool
If the root oid configured is included
oid str
view_name str
include Boolean
If the root oid configured is included
oid String
viewName String

NetworktemplateSwitchMatching
, NetworktemplateSwitchMatchingArgs

Enable bool
Rules List<Pulumi.JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingRule>
list of rules to define custom switch configuration based on different criteria. Each list must have at least one of match_model, match_name or match_role must be defined
Enable bool
Rules []NetworktemplateSwitchMatchingRule
list of rules to define custom switch configuration based on different criteria. Each list must have at least one of match_model, match_name or match_role must be defined
enable Boolean
rules List<NetworktemplateSwitchMatchingRule>
list of rules to define custom switch configuration based on different criteria. Each list must have at least one of match_model, match_name or match_role must be defined
enable boolean
rules NetworktemplateSwitchMatchingRule[]
list of rules to define custom switch configuration based on different criteria. Each list must have at least one of match_model, match_name or match_role must be defined
enable bool
rules Sequence[NetworktemplateSwitchMatchingRule]
list of rules to define custom switch configuration based on different criteria. Each list must have at least one of match_model, match_name or match_role must be defined
enable Boolean
rules List<Property Map>
list of rules to define custom switch configuration based on different criteria. Each list must have at least one of match_model, match_name or match_role must be defined

NetworktemplateSwitchMatchingRule
, NetworktemplateSwitchMatchingRuleArgs

AdditionalConfigCmds List<string>
additional CLI commands to append to the generated Junos config. Note: no check is done
IpConfig Pulumi.JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingRuleIpConfig
In-Band Management interface configuration
MatchModel string
string the switch model must start with to use this rule. It is possible to combine with the match_name and match_role attributes
MatchName string
string the switch name must start with to use this rule. Use the match_name_offset to indicate the first character of the switch name to compare to. It is possible to combine with the match_model and match_role attributes
MatchNameOffset int
first character of the switch name to compare to the match_name value
MatchRole string
string the switch role must start with to use this rule. It is possible to combine with the match_name and match_model attributes
MatchType string
property key define the type of matching, value is the string to match. e.g: match_name[0:3], match_name[2:6], match_model, match_model[0-6]

Deprecated: The match_type attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the match_name, match_model and match_roleattribuites and may be removed in future versions. Please update your configurations.

MatchValue string

Deprecated: The match_value attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the match_name, match_model and match_roleattribuites and may be removed in future versions. Please update your configurations.

Name string
Rule name. WARNING: the name default is reserved and can only be used for the last rule in the list
OobIpConfig Pulumi.JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingRuleOobIpConfig
Out-of-Band Management interface configuration
PortConfig Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingRulePortConfig>
Property key is the port name or range (e.g. "ge-0/0/0-10")
PortMirroring Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateSwitchMatchingRulePortMirroring>
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
AdditionalConfigCmds []string
additional CLI commands to append to the generated Junos config. Note: no check is done
IpConfig NetworktemplateSwitchMatchingRuleIpConfig
In-Band Management interface configuration
MatchModel string
string the switch model must start with to use this rule. It is possible to combine with the match_name and match_role attributes
MatchName string
string the switch name must start with to use this rule. Use the match_name_offset to indicate the first character of the switch name to compare to. It is possible to combine with the match_model and match_role attributes
MatchNameOffset int
first character of the switch name to compare to the match_name value
MatchRole string
string the switch role must start with to use this rule. It is possible to combine with the match_name and match_model attributes
MatchType string
property key define the type of matching, value is the string to match. e.g: match_name[0:3], match_name[2:6], match_model, match_model[0-6]

Deprecated: The match_type attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the match_name, match_model and match_roleattribuites and may be removed in future versions. Please update your configurations.

MatchValue string

Deprecated: The match_value attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the match_name, match_model and match_roleattribuites and may be removed in future versions. Please update your configurations.

Name string
Rule name. WARNING: the name default is reserved and can only be used for the last rule in the list
OobIpConfig NetworktemplateSwitchMatchingRuleOobIpConfig
Out-of-Band Management interface configuration
PortConfig map[string]NetworktemplateSwitchMatchingRulePortConfig
Property key is the port name or range (e.g. "ge-0/0/0-10")
PortMirroring map[string]NetworktemplateSwitchMatchingRulePortMirroring
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
additionalConfigCmds List<String>
additional CLI commands to append to the generated Junos config. Note: no check is done
ipConfig NetworktemplateSwitchMatchingRuleIpConfig
In-Band Management interface configuration
matchModel String
string the switch model must start with to use this rule. It is possible to combine with the match_name and match_role attributes
matchName String
string the switch name must start with to use this rule. Use the match_name_offset to indicate the first character of the switch name to compare to. It is possible to combine with the match_model and match_role attributes
matchNameOffset Integer
first character of the switch name to compare to the match_name value
matchRole String
string the switch role must start with to use this rule. It is possible to combine with the match_name and match_model attributes
matchType String
property key define the type of matching, value is the string to match. e.g: match_name[0:3], match_name[2:6], match_model, match_model[0-6]

Deprecated: The match_type attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the match_name, match_model and match_roleattribuites and may be removed in future versions. Please update your configurations.

matchValue String

Deprecated: The match_value attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the match_name, match_model and match_roleattribuites and may be removed in future versions. Please update your configurations.

name String
Rule name. WARNING: the name default is reserved and can only be used for the last rule in the list
oobIpConfig NetworktemplateSwitchMatchingRuleOobIpConfig
Out-of-Band Management interface configuration
portConfig Map<String,NetworktemplateSwitchMatchingRulePortConfig>
Property key is the port name or range (e.g. "ge-0/0/0-10")
portMirroring Map<String,NetworktemplateSwitchMatchingRulePortMirroring>
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
additionalConfigCmds string[]
additional CLI commands to append to the generated Junos config. Note: no check is done
ipConfig NetworktemplateSwitchMatchingRuleIpConfig
In-Band Management interface configuration
matchModel string
string the switch model must start with to use this rule. It is possible to combine with the match_name and match_role attributes
matchName string
string the switch name must start with to use this rule. Use the match_name_offset to indicate the first character of the switch name to compare to. It is possible to combine with the match_model and match_role attributes
matchNameOffset number
first character of the switch name to compare to the match_name value
matchRole string
string the switch role must start with to use this rule. It is possible to combine with the match_name and match_model attributes
matchType string
property key define the type of matching, value is the string to match. e.g: match_name[0:3], match_name[2:6], match_model, match_model[0-6]

Deprecated: The match_type attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the match_name, match_model and match_roleattribuites and may be removed in future versions. Please update your configurations.

matchValue string

Deprecated: The match_value attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the match_name, match_model and match_roleattribuites and may be removed in future versions. Please update your configurations.

name string
Rule name. WARNING: the name default is reserved and can only be used for the last rule in the list
oobIpConfig NetworktemplateSwitchMatchingRuleOobIpConfig
Out-of-Band Management interface configuration
portConfig {[key: string]: NetworktemplateSwitchMatchingRulePortConfig}
Property key is the port name or range (e.g. "ge-0/0/0-10")
portMirroring {[key: string]: NetworktemplateSwitchMatchingRulePortMirroring}
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
additional_config_cmds Sequence[str]
additional CLI commands to append to the generated Junos config. Note: no check is done
ip_config NetworktemplateSwitchMatchingRuleIpConfig
In-Band Management interface configuration
match_model str
string the switch model must start with to use this rule. It is possible to combine with the match_name and match_role attributes
match_name str
string the switch name must start with to use this rule. Use the match_name_offset to indicate the first character of the switch name to compare to. It is possible to combine with the match_model and match_role attributes
match_name_offset int
first character of the switch name to compare to the match_name value
match_role str
string the switch role must start with to use this rule. It is possible to combine with the match_name and match_model attributes
match_type str
property key define the type of matching, value is the string to match. e.g: match_name[0:3], match_name[2:6], match_model, match_model[0-6]

Deprecated: The match_type attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the match_name, match_model and match_roleattribuites and may be removed in future versions. Please update your configurations.

match_value str

Deprecated: The match_value attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the match_name, match_model and match_roleattribuites and may be removed in future versions. Please update your configurations.

name str
Rule name. WARNING: the name default is reserved and can only be used for the last rule in the list
oob_ip_config NetworktemplateSwitchMatchingRuleOobIpConfig
Out-of-Band Management interface configuration
port_config Mapping[str, NetworktemplateSwitchMatchingRulePortConfig]
Property key is the port name or range (e.g. "ge-0/0/0-10")
port_mirroring Mapping[str, NetworktemplateSwitchMatchingRulePortMirroring]
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
additionalConfigCmds List<String>
additional CLI commands to append to the generated Junos config. Note: no check is done
ipConfig Property Map
In-Band Management interface configuration
matchModel String
string the switch model must start with to use this rule. It is possible to combine with the match_name and match_role attributes
matchName String
string the switch name must start with to use this rule. Use the match_name_offset to indicate the first character of the switch name to compare to. It is possible to combine with the match_model and match_role attributes
matchNameOffset Number
first character of the switch name to compare to the match_name value
matchRole String
string the switch role must start with to use this rule. It is possible to combine with the match_name and match_model attributes
matchType String
property key define the type of matching, value is the string to match. e.g: match_name[0:3], match_name[2:6], match_model, match_model[0-6]

Deprecated: The match_type attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the match_name, match_model and match_roleattribuites and may be removed in future versions. Please update your configurations.

matchValue String

Deprecated: The match_value attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the match_name, match_model and match_roleattribuites and may be removed in future versions. Please update your configurations.

name String
Rule name. WARNING: the name default is reserved and can only be used for the last rule in the list
oobIpConfig Property Map
Out-of-Band Management interface configuration
portConfig Map<Property Map>
Property key is the port name or range (e.g. "ge-0/0/0-10")
portMirroring Map<Property Map>
Property key is the port mirroring instance name. port_mirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed

NetworktemplateSwitchMatchingRuleIpConfig
, NetworktemplateSwitchMatchingRuleIpConfigArgs

Network string
VLAN Name for the management interface
Type string
enum: dhcp, static
Network string
VLAN Name for the management interface
Type string
enum: dhcp, static
network String
VLAN Name for the management interface
type String
enum: dhcp, static
network string
VLAN Name for the management interface
type string
enum: dhcp, static
network str
VLAN Name for the management interface
type str
enum: dhcp, static
network String
VLAN Name for the management interface
type String
enum: dhcp, static

NetworktemplateSwitchMatchingRuleOobIpConfig
, NetworktemplateSwitchMatchingRuleOobIpConfigArgs

Type string
enum: dhcp, static
UseMgmtVrf bool
If supported on the platform. If enabled, DNS will be using this routing-instance, too
UseMgmtVrfForHostOut bool
For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
Type string
enum: dhcp, static
UseMgmtVrf bool
If supported on the platform. If enabled, DNS will be using this routing-instance, too
UseMgmtVrfForHostOut bool
For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
type String
enum: dhcp, static
useMgmtVrf Boolean
If supported on the platform. If enabled, DNS will be using this routing-instance, too
useMgmtVrfForHostOut Boolean
For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
type string
enum: dhcp, static
useMgmtVrf boolean
If supported on the platform. If enabled, DNS will be using this routing-instance, too
useMgmtVrfForHostOut boolean
For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
type str
enum: dhcp, static
use_mgmt_vrf bool
If supported on the platform. If enabled, DNS will be using this routing-instance, too
use_mgmt_vrf_for_host_out bool
For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
type String
enum: dhcp, static
useMgmtVrf Boolean
If supported on the platform. If enabled, DNS will be using this routing-instance, too
useMgmtVrfForHostOut Boolean
For host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired

NetworktemplateSwitchMatchingRulePortConfig
, NetworktemplateSwitchMatchingRulePortConfigArgs

Usage This property is required. string
Port usage name. If EVPN is used, use evpn_uplinkor evpn_downlink
AeDisableLacp bool
To disable LACP support for the AE interface
AeIdx int
Users could force to use the designated AE name
AeLacpSlow bool
To use fast timeout
Aggregated bool
Critical bool
To generate port up/down alarm
Description string
DisableAutoneg bool
If speed and duplex are specified, whether to disable autonegotiation
Duplex string
enum: auto, full, half
DynamicUsage string
Enable dynamic usage for this port. Set to dynamic to enable.
Esilag bool
Mtu int
Media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
NoLocalOverwrite bool
Prevent helpdesk to override the port config
PoeDisabled bool
Speed string
enum: 100m, 10m, 1g, 2.5g, 5g, 10g, 25g, 40g, 100g,auto
Usage This property is required. string
Port usage name. If EVPN is used, use evpn_uplinkor evpn_downlink
AeDisableLacp bool
To disable LACP support for the AE interface
AeIdx int
Users could force to use the designated AE name
AeLacpSlow bool
To use fast timeout
Aggregated bool
Critical bool
To generate port up/down alarm
Description string
DisableAutoneg bool
If speed and duplex are specified, whether to disable autonegotiation
Duplex string
enum: auto, full, half
DynamicUsage string
Enable dynamic usage for this port. Set to dynamic to enable.
Esilag bool
Mtu int
Media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
NoLocalOverwrite bool
Prevent helpdesk to override the port config
PoeDisabled bool
Speed string
enum: 100m, 10m, 1g, 2.5g, 5g, 10g, 25g, 40g, 100g,auto
usage This property is required. String
Port usage name. If EVPN is used, use evpn_uplinkor evpn_downlink
aeDisableLacp Boolean
To disable LACP support for the AE interface
aeIdx Integer
Users could force to use the designated AE name
aeLacpSlow Boolean
To use fast timeout
aggregated Boolean
critical Boolean
To generate port up/down alarm
description String
disableAutoneg Boolean
If speed and duplex are specified, whether to disable autonegotiation
duplex String
enum: auto, full, half
dynamicUsage String
Enable dynamic usage for this port. Set to dynamic to enable.
esilag Boolean
mtu Integer
Media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
noLocalOverwrite Boolean
Prevent helpdesk to override the port config
poeDisabled Boolean
speed String
enum: 100m, 10m, 1g, 2.5g, 5g, 10g, 25g, 40g, 100g,auto
usage This property is required. string
Port usage name. If EVPN is used, use evpn_uplinkor evpn_downlink
aeDisableLacp boolean
To disable LACP support for the AE interface
aeIdx number
Users could force to use the designated AE name
aeLacpSlow boolean
To use fast timeout
aggregated boolean
critical boolean
To generate port up/down alarm
description string
disableAutoneg boolean
If speed and duplex are specified, whether to disable autonegotiation
duplex string
enum: auto, full, half
dynamicUsage string
Enable dynamic usage for this port. Set to dynamic to enable.
esilag boolean
mtu number
Media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
noLocalOverwrite boolean
Prevent helpdesk to override the port config
poeDisabled boolean
speed string
enum: 100m, 10m, 1g, 2.5g, 5g, 10g, 25g, 40g, 100g,auto
usage This property is required. str
Port usage name. If EVPN is used, use evpn_uplinkor evpn_downlink
ae_disable_lacp bool
To disable LACP support for the AE interface
ae_idx int
Users could force to use the designated AE name
ae_lacp_slow bool
To use fast timeout
aggregated bool
critical bool
To generate port up/down alarm
description str
disable_autoneg bool
If speed and duplex are specified, whether to disable autonegotiation
duplex str
enum: auto, full, half
dynamic_usage str
Enable dynamic usage for this port. Set to dynamic to enable.
esilag bool
mtu int
Media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
no_local_overwrite bool
Prevent helpdesk to override the port config
poe_disabled bool
speed str
enum: 100m, 10m, 1g, 2.5g, 5g, 10g, 25g, 40g, 100g,auto
usage This property is required. String
Port usage name. If EVPN is used, use evpn_uplinkor evpn_downlink
aeDisableLacp Boolean
To disable LACP support for the AE interface
aeIdx Number
Users could force to use the designated AE name
aeLacpSlow Boolean
To use fast timeout
aggregated Boolean
critical Boolean
To generate port up/down alarm
description String
disableAutoneg Boolean
If speed and duplex are specified, whether to disable autonegotiation
duplex String
enum: auto, full, half
dynamicUsage String
Enable dynamic usage for this port. Set to dynamic to enable.
esilag Boolean
mtu Number
Media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
noLocalOverwrite Boolean
Prevent helpdesk to override the port config
poeDisabled Boolean
speed String
enum: 100m, 10m, 1g, 2.5g, 5g, 10g, 25g, 40g, 100g,auto

NetworktemplateSwitchMatchingRulePortMirroring
, NetworktemplateSwitchMatchingRulePortMirroringArgs

InputNetworksIngresses List<string>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
InputPortIdsEgresses List<string>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
InputPortIdsIngresses List<string>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
OutputNetwork string
Exactly one of the output_port_id or output_network should be provided
OutputPortId string
Exactly one of the output_port_id or output_network should be provided
InputNetworksIngresses []string
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
InputPortIdsEgresses []string
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
InputPortIdsIngresses []string
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
OutputNetwork string
Exactly one of the output_port_id or output_network should be provided
OutputPortId string
Exactly one of the output_port_id or output_network should be provided
inputNetworksIngresses List<String>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
inputPortIdsEgresses List<String>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
inputPortIdsIngresses List<String>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
outputNetwork String
Exactly one of the output_port_id or output_network should be provided
outputPortId String
Exactly one of the output_port_id or output_network should be provided
inputNetworksIngresses string[]
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
inputPortIdsEgresses string[]
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
inputPortIdsIngresses string[]
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
outputNetwork string
Exactly one of the output_port_id or output_network should be provided
outputPortId string
Exactly one of the output_port_id or output_network should be provided
input_networks_ingresses Sequence[str]
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
input_port_ids_egresses Sequence[str]
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
input_port_ids_ingresses Sequence[str]
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
output_network str
Exactly one of the output_port_id or output_network should be provided
output_port_id str
Exactly one of the output_port_id or output_network should be provided
inputNetworksIngresses List<String>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
inputPortIdsEgresses List<String>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
inputPortIdsIngresses List<String>
At least one of the input_port_ids_ingress, input_port_ids_egress or input_networks_ingress should be specified
outputNetwork String
Exactly one of the output_port_id or output_network should be provided
outputPortId String
Exactly one of the output_port_id or output_network should be provided

NetworktemplateSwitchMgmt
, NetworktemplateSwitchMgmtArgs

ApAffinityThreshold int
AP_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default, this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
CliBanner string
Set Banners for switches. Allows markup formatting
CliIdleTimeout int
Sets timeout for switches
ConfigRevertTimer int
Rollback timer for commit confirmed
DhcpOptionFqdn bool
Enable to provide the FQDN with DHCP option 81
DisableOobDownAlarm bool
FipsEnabled bool
LocalAccounts Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtLocalAccounts>
Property key is the user name. For Local user authentication
MxedgeProxyHost string
IP Address or FQDN of the Mist Edge used to proxy the switch management traffic to the Mist Cloud
MxedgeProxyPort string
Mist Edge port used to proxy the switch management traffic to the Mist Cloud. Value in range 1-65535
ProtectRe Pulumi.JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtProtectRe
Restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
RootPassword string
Tacacs Pulumi.JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtTacacs
UseMxedgeProxy bool
To use mxedge as proxy
ApAffinityThreshold int
AP_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default, this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
CliBanner string
Set Banners for switches. Allows markup formatting
CliIdleTimeout int
Sets timeout for switches
ConfigRevertTimer int
Rollback timer for commit confirmed
DhcpOptionFqdn bool
Enable to provide the FQDN with DHCP option 81
DisableOobDownAlarm bool
FipsEnabled bool
LocalAccounts map[string]NetworktemplateSwitchMgmtLocalAccounts
Property key is the user name. For Local user authentication
MxedgeProxyHost string
IP Address or FQDN of the Mist Edge used to proxy the switch management traffic to the Mist Cloud
MxedgeProxyPort string
Mist Edge port used to proxy the switch management traffic to the Mist Cloud. Value in range 1-65535
ProtectRe NetworktemplateSwitchMgmtProtectRe
Restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
RootPassword string
Tacacs NetworktemplateSwitchMgmtTacacs
UseMxedgeProxy bool
To use mxedge as proxy
apAffinityThreshold Integer
AP_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default, this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
cliBanner String
Set Banners for switches. Allows markup formatting
cliIdleTimeout Integer
Sets timeout for switches
configRevertTimer Integer
Rollback timer for commit confirmed
dhcpOptionFqdn Boolean
Enable to provide the FQDN with DHCP option 81
disableOobDownAlarm Boolean
fipsEnabled Boolean
localAccounts Map<String,NetworktemplateSwitchMgmtLocalAccounts>
Property key is the user name. For Local user authentication
mxedgeProxyHost String
IP Address or FQDN of the Mist Edge used to proxy the switch management traffic to the Mist Cloud
mxedgeProxyPort String
Mist Edge port used to proxy the switch management traffic to the Mist Cloud. Value in range 1-65535
protectRe NetworktemplateSwitchMgmtProtectRe
Restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
rootPassword String
tacacs NetworktemplateSwitchMgmtTacacs
useMxedgeProxy Boolean
To use mxedge as proxy
apAffinityThreshold number
AP_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default, this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
cliBanner string
Set Banners for switches. Allows markup formatting
cliIdleTimeout number
Sets timeout for switches
configRevertTimer number
Rollback timer for commit confirmed
dhcpOptionFqdn boolean
Enable to provide the FQDN with DHCP option 81
disableOobDownAlarm boolean
fipsEnabled boolean
localAccounts {[key: string]: NetworktemplateSwitchMgmtLocalAccounts}
Property key is the user name. For Local user authentication
mxedgeProxyHost string
IP Address or FQDN of the Mist Edge used to proxy the switch management traffic to the Mist Cloud
mxedgeProxyPort string
Mist Edge port used to proxy the switch management traffic to the Mist Cloud. Value in range 1-65535
protectRe NetworktemplateSwitchMgmtProtectRe
Restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
rootPassword string
tacacs NetworktemplateSwitchMgmtTacacs
useMxedgeProxy boolean
To use mxedge as proxy
ap_affinity_threshold int
AP_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default, this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
cli_banner str
Set Banners for switches. Allows markup formatting
cli_idle_timeout int
Sets timeout for switches
config_revert_timer int
Rollback timer for commit confirmed
dhcp_option_fqdn bool
Enable to provide the FQDN with DHCP option 81
disable_oob_down_alarm bool
fips_enabled bool
local_accounts Mapping[str, NetworktemplateSwitchMgmtLocalAccounts]
Property key is the user name. For Local user authentication
mxedge_proxy_host str
IP Address or FQDN of the Mist Edge used to proxy the switch management traffic to the Mist Cloud
mxedge_proxy_port str
Mist Edge port used to proxy the switch management traffic to the Mist Cloud. Value in range 1-65535
protect_re NetworktemplateSwitchMgmtProtectRe
Restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
root_password str
tacacs NetworktemplateSwitchMgmtTacacs
use_mxedge_proxy bool
To use mxedge as proxy
apAffinityThreshold Number
AP_affinity_threshold ap_affinity_threshold can be added as a field under site/setting. By default, this value is set to 12. If the field is set in both site/setting and org/setting, the value from site/setting will be used.
cliBanner String
Set Banners for switches. Allows markup formatting
cliIdleTimeout Number
Sets timeout for switches
configRevertTimer Number
Rollback timer for commit confirmed
dhcpOptionFqdn Boolean
Enable to provide the FQDN with DHCP option 81
disableOobDownAlarm Boolean
fipsEnabled Boolean
localAccounts Map<Property Map>
Property key is the user name. For Local user authentication
mxedgeProxyHost String
IP Address or FQDN of the Mist Edge used to proxy the switch management traffic to the Mist Cloud
mxedgeProxyPort String
Mist Edge port used to proxy the switch management traffic to the Mist Cloud. Value in range 1-65535
protectRe Property Map
Restrict inbound-traffic to host when enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default, if dhcpd is enabled, we'll make sure it works
rootPassword String
tacacs Property Map
useMxedgeProxy Boolean
To use mxedge as proxy

NetworktemplateSwitchMgmtLocalAccounts
, NetworktemplateSwitchMgmtLocalAccountsArgs

Password string
Role string
enum: admin, helpdesk, none, read
Password string
Role string
enum: admin, helpdesk, none, read
password String
role String
enum: admin, helpdesk, none, read
password string
role string
enum: admin, helpdesk, none, read
password str
role str
enum: admin, helpdesk, none, read
password String
role String
enum: admin, helpdesk, none, read

NetworktemplateSwitchMgmtProtectRe
, NetworktemplateSwitchMgmtProtectReArgs

AllowedServices List<string>
optionally, services we'll allow. enum: icmp, ssh
Customs List<Pulumi.JuniperMist.Site.Inputs.NetworktemplateSwitchMgmtProtectReCustom>
Enabled bool
When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
TrustedHosts List<string>
host/subnets we'll allow traffic to/from
AllowedServices []string
optionally, services we'll allow. enum: icmp, ssh
Customs []NetworktemplateSwitchMgmtProtectReCustom
Enabled bool
When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
TrustedHosts []string
host/subnets we'll allow traffic to/from
allowedServices List<String>
optionally, services we'll allow. enum: icmp, ssh
customs List<NetworktemplateSwitchMgmtProtectReCustom>
enabled Boolean
When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
trustedHosts List<String>
host/subnets we'll allow traffic to/from
allowedServices string[]
optionally, services we'll allow. enum: icmp, ssh
customs NetworktemplateSwitchMgmtProtectReCustom[]
enabled boolean
When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
trustedHosts string[]
host/subnets we'll allow traffic to/from
allowed_services Sequence[str]
optionally, services we'll allow. enum: icmp, ssh
customs Sequence[NetworktemplateSwitchMgmtProtectReCustom]
enabled bool
When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
trusted_hosts Sequence[str]
host/subnets we'll allow traffic to/from
allowedServices List<String>
optionally, services we'll allow. enum: icmp, ssh
customs List<Property Map>
enabled Boolean
When enabled, all traffic that is not essential to our operation will be dropped e.g. ntp / dns / traffic to mist will be allowed by default if dhcpd is enabled, we'll make sure it works
trustedHosts List<String>
host/subnets we'll allow traffic to/from

NetworktemplateSwitchMgmtProtectReCustom
, NetworktemplateSwitchMgmtProtectReCustomArgs

Subnets This property is required. List<string>
PortRange string
matched dst port, "0" means any. Note: For protocol==any and port_range==any, configure trusted_hosts instead
Protocol string
enum: any, icmp, tcp, udp. Note: For protocol==any and port_range==any, configure trusted_hosts instead
Subnets This property is required. []string
PortRange string
matched dst port, "0" means any. Note: For protocol==any and port_range==any, configure trusted_hosts instead
Protocol string
enum: any, icmp, tcp, udp. Note: For protocol==any and port_range==any, configure trusted_hosts instead
subnets This property is required. List<String>
portRange String
matched dst port, "0" means any. Note: For protocol==any and port_range==any, configure trusted_hosts instead
protocol String
enum: any, icmp, tcp, udp. Note: For protocol==any and port_range==any, configure trusted_hosts instead
subnets This property is required. string[]
portRange string
matched dst port, "0" means any. Note: For protocol==any and port_range==any, configure trusted_hosts instead
protocol string
enum: any, icmp, tcp, udp. Note: For protocol==any and port_range==any, configure trusted_hosts instead
subnets This property is required. Sequence[str]
port_range str
matched dst port, "0" means any. Note: For protocol==any and port_range==any, configure trusted_hosts instead
protocol str
enum: any, icmp, tcp, udp. Note: For protocol==any and port_range==any, configure trusted_hosts instead
subnets This property is required. List<String>
portRange String
matched dst port, "0" means any. Note: For protocol==any and port_range==any, configure trusted_hosts instead
protocol String
enum: any, icmp, tcp, udp. Note: For protocol==any and port_range==any, configure trusted_hosts instead

NetworktemplateSwitchMgmtTacacs
, NetworktemplateSwitchMgmtTacacsArgs

AcctServers []NetworktemplateSwitchMgmtTacacsAcctServer
DefaultRole string
enum: admin, helpdesk, none, read
Enabled bool
Network string
Which network the TACACS server resides
TacplusServers []NetworktemplateSwitchMgmtTacacsTacplusServer
acctServers NetworktemplateSwitchMgmtTacacsAcctServer[]
defaultRole string
enum: admin, helpdesk, none, read
enabled boolean
network string
Which network the TACACS server resides
tacplusServers NetworktemplateSwitchMgmtTacacsTacplusServer[]
acctServers List<Property Map>
defaultRole String
enum: admin, helpdesk, none, read
enabled Boolean
network String
Which network the TACACS server resides
tacplusServers List<Property Map>

NetworktemplateSwitchMgmtTacacsAcctServer
, NetworktemplateSwitchMgmtTacacsAcctServerArgs

Host string
Port string
Secret string
Timeout int
Host string
Port string
Secret string
Timeout int
host String
port String
secret String
timeout Integer
host string
port string
secret string
timeout number
host str
port str
secret str
timeout int
host String
port String
secret String
timeout Number

NetworktemplateSwitchMgmtTacacsTacplusServer
, NetworktemplateSwitchMgmtTacacsTacplusServerArgs

Host string
Port string
Secret string
Timeout int
Host string
Port string
Secret string
Timeout int
host String
port String
secret String
timeout Integer
host string
port string
secret string
timeout number
host str
port str
secret str
timeout int
host String
port String
secret String
timeout Number

NetworktemplateVrfConfig
, NetworktemplateVrfConfigArgs

Enabled bool
Whether to enable VRF (when supported on the device)
Enabled bool
Whether to enable VRF (when supported on the device)
enabled Boolean
Whether to enable VRF (when supported on the device)
enabled boolean
Whether to enable VRF (when supported on the device)
enabled bool
Whether to enable VRF (when supported on the device)
enabled Boolean
Whether to enable VRF (when supported on the device)

NetworktemplateVrfInstances
, NetworktemplateVrfInstancesArgs

EvpnAutoLoopbackSubnet string
EvpnAutoLoopbackSubnet6 string
ExtraRoutes Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateVrfInstancesExtraRoutes>
Property key is the destination CIDR (e.g. "10.0.0.0/8")
ExtraRoutes6 Dictionary<string, Pulumi.JuniperMist.Site.Inputs.NetworktemplateVrfInstancesExtraRoutes6>
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
Networks List<string>
EvpnAutoLoopbackSubnet string
EvpnAutoLoopbackSubnet6 string
ExtraRoutes map[string]NetworktemplateVrfInstancesExtraRoutes
Property key is the destination CIDR (e.g. "10.0.0.0/8")
ExtraRoutes6 map[string]NetworktemplateVrfInstancesExtraRoutes6
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
Networks []string
evpnAutoLoopbackSubnet String
evpnAutoLoopbackSubnet6 String
extraRoutes Map<String,NetworktemplateVrfInstancesExtraRoutes>
Property key is the destination CIDR (e.g. "10.0.0.0/8")
extraRoutes6 Map<String,NetworktemplateVrfInstancesExtraRoutes6>
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
networks List<String>
evpnAutoLoopbackSubnet string
evpnAutoLoopbackSubnet6 string
extraRoutes {[key: string]: NetworktemplateVrfInstancesExtraRoutes}
Property key is the destination CIDR (e.g. "10.0.0.0/8")
extraRoutes6 {[key: string]: NetworktemplateVrfInstancesExtraRoutes6}
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
networks string[]
evpn_auto_loopback_subnet str
evpn_auto_loopback_subnet6 str
extra_routes Mapping[str, NetworktemplateVrfInstancesExtraRoutes]
Property key is the destination CIDR (e.g. "10.0.0.0/8")
extra_routes6 Mapping[str, NetworktemplateVrfInstancesExtraRoutes6]
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
networks Sequence[str]
evpnAutoLoopbackSubnet String
evpnAutoLoopbackSubnet6 String
extraRoutes Map<Property Map>
Property key is the destination CIDR (e.g. "10.0.0.0/8")
extraRoutes6 Map<Property Map>
Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
networks List<String>

NetworktemplateVrfInstancesExtraRoutes
, NetworktemplateVrfInstancesExtraRoutesArgs

Via This property is required. string
Next-hop address
Via This property is required. string
Next-hop address
via This property is required. String
Next-hop address
via This property is required. string
Next-hop address
via This property is required. str
Next-hop address
via This property is required. String
Next-hop address

NetworktemplateVrfInstancesExtraRoutes6
, NetworktemplateVrfInstancesExtraRoutes6Args

Via string
Next-hop address
Via string
Next-hop address
via String
Next-hop address
via string
Next-hop address
via str
Next-hop address
via String
Next-hop address

Import

Using pulumi import, import mist_site_networktemplate with:

Site Network Template can be imported by specifying the site_id

$ pulumi import junipermist:site/networktemplate:Networktemplate networktemplate_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
junipermist pulumi/pulumi-junipermist
License
Apache-2.0
Notes
This Pulumi package is based on the mist Terraform Provider.