@pulumi/juniper-mist 0.0.17 → 0.0.19

package/types/output.d.ts

@@ -674,12 +674,16 @@ export declare namespace device {
          * by default, we'll re-advertise all learned BGP routers toward overlay
          */
         noReadvertiseToOverlay: boolean;
+        /**
+         * if `type`==`tunnel`
+         */
+        tunnelName?: string;
         /**
          * enum: `external`, `internal`
          */
         type?: string;
         /**
-         * network name. enum: `lan`, `vpn`, `wan`
+         * network name. enum: `lan`, `tunnel`, `vpn`, `wan`
          */
         via: string;
         vpnName?: string;
@@ -714,6 +718,9 @@ export declare namespace device {
         mac: string;
     }
     interface GatewayDhcpdConfig {
+        /**
+         * Property key is the network name
+         */
         config?: {
             [key: string]: outputs.device.GatewayDhcpdConfigConfig;
         };
@@ -726,7 +733,7 @@ export declare namespace device {
         /**
          * if `type`==`local` - optional, if not defined, system one will be used
          */
-        dnsServers?: string[];
+        dnsServers: string[];
         /**
          * if `type`==`local` - optional, if not defined, system one will be used
          */
@@ -1045,7 +1052,7 @@ export declare namespace device {
          */
         useMgmtVrf: boolean;
         /**
-         * for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired,
+         * for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
          */
         useMgmtVrfForHostOut: boolean;
         vlanId?: string;
@@ -1114,11 +1121,30 @@ export declare namespace device {
          */
         type?: string;
         /**
-         * required when`type`==`tunnel`
+         * optional if `type`==`vpn`
          */
         wanName?: string;
     }
     interface GatewayPortConfig {
+        /**
+         * if `aggregated`==`true`. To disable LCP support for the AE interface
+         */
+        aeDisableLacp: boolean;
+        /**
+         * if `aggregated`==`true`. Users could force to use the designated AE name (must be an integer between 0 and 127)
+         */
+        aeIdx?: string;
+        /**
+         * For SRX Only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability.\n
+         * Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end\n
+         * Note: Turning this on will enable force-up on one of the interfaces in the bundle only
+         */
+        aeLacpForceUp: boolean;
+        aggregated: boolean;
+        /**
+         * if want to generate port up/down alarm, set it to true
+         */
+        critical: boolean;
         description?: string;
         disableAutoneg: boolean;
         /**
@@ -1504,6 +1530,10 @@ export declare namespace device {
          * enum: `active-active`, `active-standby`
          */
         mode: string;
+        /**
+         * networks reachable via this tunnel
+         */
+        networks: string[];
         primary?: outputs.device.GatewayTunnelConfigsPrimary;
         /**
          * Only if `provider`== `custom-ipsec`
@@ -1534,10 +1564,6 @@ export declare namespace device {
         enable?: boolean;
         latlng?: outputs.device.GatewayTunnelConfigsAutoProvisionLatlng;
         primary?: outputs.device.GatewayTunnelConfigsAutoProvisionPrimary;
-        /**
-         * enum: `APAC`, `Americas`, `EMEA`, `auto`
-         */
-        region: string;
         secondary?: outputs.device.GatewayTunnelConfigsAutoProvisionSecondary;
     }
     interface GatewayTunnelConfigsAutoProvisionLatlng {
@@ -3205,7 +3231,7 @@ export declare namespace device {
          * enum: `allow`, `deny`
          */
         action: string;
-        dstTag?: string;
+        dstTag: string;
     }
     interface SwitchAclTags {
         /**
@@ -3247,7 +3273,7 @@ export declare namespace device {
          * - `type`==`resource` (optional. default is `any`)
          * - `type`==`staticGbp` if from matching subnet
          */
-        subnets?: string[];
+        subnets: string[];
         /**
          * enum: `any`, `dynamicGbp`, `mac`, `network`, `radiusGroup`, `resource`, `staticGbp`, `subnet`
          */
@@ -3280,6 +3306,9 @@ export declare namespace device {
         networks?: string[];
     }
     interface SwitchDhcpdConfig {
+        /**
+         * Property key is the network name
+         */
         config?: {
             [key: string]: outputs.device.SwitchDhcpdConfigConfig;
         };
@@ -3292,11 +3321,11 @@ export declare namespace device {
         /**
          * if `type`==`local` - optional, if not defined, system one will be used
          */
-        dnsServers?: string[];
+        dnsServers: string[];
         /**
          * if `type`==`local` - optional, if not defined, system one will be used
          */
-        dnsSuffixes?: string[];
+        dnsSuffixes: string[];
         /**
          * Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
          */
@@ -3483,7 +3512,7 @@ export declare namespace device {
          */
         useMgmtVrf: boolean;
         /**
-         * for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired,
+         * for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
          */
         useMgmtVrfForHostOut: boolean;
     }
@@ -3677,6 +3706,10 @@ export declare namespace device {
          * Only if `mode`!=`dynamic` and `enableMacAuth`==`true`
          */
         macAuthOnly?: boolean;
+        /**
+         * Only if `mode`!=`dynamic` + `enableMacAuth`==`true` + `macAuthOnly`==`false`, dot1x will be given priority then mac_auth. Enable this to prefer macAuth over dot1x.
+         */
+        macAuthPreferred?: boolean;
         /**
          * Only if `mode`!=`dynamic` and `enableMacAuth` ==`true`. This type is ignored if mistNac is enabled. enum: `eap-md5`, `eap-peap`, `pap`
          */
@@ -3717,10 +3750,6 @@ export declare namespace device {
          * Only if `mode`!=`dynamic` and `portAuth`=`dot1x` reauthentication interval range
          */
         reauthInterval: number;
-        /**
-         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` when radius server reject / fails
-         */
-        rejectedNetwork?: string;
         /**
          * Only if `mode`==`dynamic` Control when the DPC port should be changed to the default port usage. enum: `linkDown`, `none` (let the DPC port keep at the current port usage)
          */
@@ -3729,6 +3758,14 @@ export declare namespace device {
          * Only if `mode`==`dynamic`
          */
         rules?: outputs.device.SwitchPortUsagesRule[];
+        /**
+         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` sets server fail fallback vlan
+         */
+        serverFailNetwork?: string;
+        /**
+         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` when radius server reject / fails
+         */
+        serverRejectNetwork?: string;
         /**
          * Only if `mode`!=`dynamic` speed, default is auto to automatically negotiate speed
          */
@@ -3856,6 +3893,10 @@ export declare namespace device {
          * Auth port of RADIUS server
          */
         port: number;
+        /**
+         * whether to require Message-Authenticator in requests
+         */
+        requireMessageAuthenticator: boolean;
         /**
          * secret of RADIUS server
          */
@@ -4168,9 +4209,9 @@ export declare namespace device {
     }
     interface SwitchStpConfig {
         /**
-         * enum: `rstp`, `vstp`
+         * ignored for switches participating in EVPN
          */
-        type: string;
+        vstpEnabled: boolean;
     }
     interface SwitchSwitchMgmt {
         /**
@@ -4193,6 +4234,7 @@ export declare namespace device {
          * Enable to provide the FQDN with DHCP option 81
          */
         dhcpOptionFqdn: boolean;
+        disableOobDownAlarm?: boolean;
         /**
          * Property key is the user name. For Local user authentication
          */
@@ -4854,12 +4896,16 @@ export declare namespace org {
          * by default, we'll re-advertise all learned BGP routers toward overlay
          */
         noReadvertiseToOverlay: boolean;
+        /**
+         * if `type`==`tunnel`
+         */
+        tunnelName?: string;
         /**
          * enum: `external`, `internal`
          */
         type?: string;
         /**
-         * network name. enum: `lan`, `vpn`, `wan`
+         * network name. enum: `lan`, `tunnel`, `vpn`, `wan`
          */
         via: string;
         vpnName?: string;
@@ -4888,6 +4934,9 @@ export declare namespace org {
         neighborAs?: number;
     }
     interface DeviceprofileGatewayDhcpdConfig {
+        /**
+         * Property key is the network name
+         */
         config?: {
             [key: string]: outputs.org.DeviceprofileGatewayDhcpdConfigConfig;
         };
@@ -4900,7 +4949,7 @@ export declare namespace org {
         /**
          * if `type`==`local` - optional, if not defined, system one will be used
          */
-        dnsServers?: string[];
+        dnsServers: string[];
         /**
          * if `type`==`local` - optional, if not defined, system one will be used
          */
@@ -5212,7 +5261,7 @@ export declare namespace org {
          */
         useMgmtVrf: boolean;
         /**
-         * for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired,
+         * for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
          */
         useMgmtVrfForHostOut: boolean;
         vlanId?: string;
@@ -5281,11 +5330,30 @@ export declare namespace org {
          */
         type?: string;
         /**
-         * required when`type`==`tunnel`
+         * optional if `type`==`vpn`
          */
         wanName?: string;
     }
     interface DeviceprofileGatewayPortConfig {
+        /**
+         * if `aggregated`==`true`. To disable LCP support for the AE interface
+         */
+        aeDisableLacp: boolean;
+        /**
+         * if `aggregated`==`true`. Users could force to use the designated AE name (must be an integer between 0 and 127)
+         */
+        aeIdx?: string;
+        /**
+         * For SRX Only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability.\n
+         * Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end\n
+         * Note: Turning this on will enable force-up on one of the interfaces in the bundle only
+         */
+        aeLacpForceUp: boolean;
+        aggregated: boolean;
+        /**
+         * if want to generate port up/down alarm, set it to true
+         */
+        critical: boolean;
         description?: string;
         disableAutoneg: boolean;
         /**
@@ -5661,6 +5729,10 @@ export declare namespace org {
          * enum: `active-active`, `active-standby`
          */
         mode: string;
+        /**
+         * networks reachable via this tunnel
+         */
+        networks: string[];
         primary?: outputs.org.DeviceprofileGatewayTunnelConfigsPrimary;
         /**
          * Only if `provider`== `custom-ipsec`
@@ -5691,10 +5763,6 @@ export declare namespace org {
         enable?: boolean;
         latlng?: outputs.org.DeviceprofileGatewayTunnelConfigsAutoProvisionLatlng;
         primary?: outputs.org.DeviceprofileGatewayTunnelConfigsAutoProvisionPrimary;
-        /**
-         * enum: `APAC`, `Americas`, `EMEA`, `auto`
-         */
-        region: string;
         secondary?: outputs.org.DeviceprofileGatewayTunnelConfigsAutoProvisionSecondary;
     }
     interface DeviceprofileGatewayTunnelConfigsAutoProvisionLatlng {
@@ -5953,12 +6021,16 @@ export declare namespace org {
          * by default, we'll re-advertise all learned BGP routers toward overlay
          */
         noReadvertiseToOverlay: boolean;
+        /**
+         * if `type`==`tunnel`
+         */
+        tunnelName?: string;
         /**
          * enum: `external`, `internal`
          */
         type?: string;
         /**
-         * network name. enum: `lan`, `vpn`, `wan`
+         * network name. enum: `lan`, `tunnel`, `vpn`, `wan`
          */
         via: string;
         vpnName?: string;
@@ -5987,6 +6059,9 @@ export declare namespace org {
         neighborAs?: number;
     }
     interface GatewaytemplateDhcpdConfig {
+        /**
+         * Property key is the network name
+         */
         config?: {
             [key: string]: outputs.org.GatewaytemplateDhcpdConfigConfig;
         };
@@ -5999,7 +6074,7 @@ export declare namespace org {
         /**
          * if `type`==`local` - optional, if not defined, system one will be used
          */
-        dnsServers?: string[];
+        dnsServers: string[];
         /**
          * if `type`==`local` - optional, if not defined, system one will be used
          */
@@ -6311,7 +6386,7 @@ export declare namespace org {
          */
         useMgmtVrf: boolean;
         /**
-         * for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired,
+         * for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
          */
         useMgmtVrfForHostOut: boolean;
         vlanId?: string;
@@ -6380,11 +6455,30 @@ export declare namespace org {
          */
         type?: string;
         /**
-         * required when`type`==`tunnel`
+         * optional if `type`==`vpn`
          */
         wanName?: string;
     }
     interface GatewaytemplatePortConfig {
+        /**
+         * if `aggregated`==`true`. To disable LCP support for the AE interface
+         */
+        aeDisableLacp: boolean;
+        /**
+         * if `aggregated`==`true`. Users could force to use the designated AE name (must be an integer between 0 and 127)
+         */
+        aeIdx?: string;
+        /**
+         * For SRX Only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability.\n
+         * Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end\n
+         * Note: Turning this on will enable force-up on one of the interfaces in the bundle only
+         */
+        aeLacpForceUp: boolean;
+        aggregated: boolean;
+        /**
+         * if want to generate port up/down alarm, set it to true
+         */
+        critical: boolean;
         description?: string;
         disableAutoneg: boolean;
         /**
@@ -6760,6 +6854,10 @@ export declare namespace org {
          * enum: `active-active`, `active-standby`
          */
         mode: string;
+        /**
+         * networks reachable via this tunnel
+         */
+        networks: string[];
         primary?: outputs.org.GatewaytemplateTunnelConfigsPrimary;
         /**
          * Only if `provider`== `custom-ipsec`
@@ -6790,10 +6888,6 @@ export declare namespace org {
         enable?: boolean;
         latlng?: outputs.org.GatewaytemplateTunnelConfigsAutoProvisionLatlng;
         primary?: outputs.org.GatewaytemplateTunnelConfigsAutoProvisionPrimary;
-        /**
-         * enum: `APAC`, `Americas`, `EMEA`, `auto`
-         */
-        region: string;
         secondary?: outputs.org.GatewaytemplateTunnelConfigsAutoProvisionSecondary;
     }
     interface GatewaytemplateTunnelConfigsAutoProvisionLatlng {
@@ -7673,7 +7767,7 @@ export declare namespace org {
          * enum: `allow`, `deny`
          */
         action: string;
-        dstTag?: string;
+        dstTag: string;
     }
     interface NetworktemplateAclTags {
         /**
@@ -7715,7 +7809,7 @@ export declare namespace org {
          * - `type`==`resource` (optional. default is `any`)
          * - `type`==`staticGbp` if from matching subnet
          */
-        subnets?: string[];
+        subnets: string[];
         /**
          * enum: `any`, `dynamicGbp`, `mac`, `network`, `radiusGroup`, `resource`, `staticGbp`, `subnet`
          */
@@ -7890,6 +7984,10 @@ export declare namespace org {
          * Only if `mode`!=`dynamic` and `enableMacAuth`==`true`
          */
         macAuthOnly?: boolean;
+        /**
+         * Only if `mode`!=`dynamic` + `enableMacAuth`==`true` + `macAuthOnly`==`false`, dot1x will be given priority then mac_auth. Enable this to prefer macAuth over dot1x.
+         */
+        macAuthPreferred?: boolean;
         /**
          * Only if `mode`!=`dynamic` and `enableMacAuth` ==`true`. This type is ignored if mistNac is enabled. enum: `eap-md5`, `eap-peap`, `pap`
          */
@@ -7930,10 +8028,6 @@ export declare namespace org {
          * Only if `mode`!=`dynamic` and `portAuth`=`dot1x` reauthentication interval range
          */
         reauthInterval: number;
-        /**
-         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` when radius server reject / fails
-         */
-        rejectedNetwork?: string;
         /**
          * Only if `mode`==`dynamic` Control when the DPC port should be changed to the default port usage. enum: `linkDown`, `none` (let the DPC port keep at the current port usage)
          */
@@ -7942,6 +8036,14 @@ export declare namespace org {
          * Only if `mode`==`dynamic`
          */
         rules?: outputs.org.NetworktemplatePortUsagesRule[];
+        /**
+         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` sets server fail fallback vlan
+         */
+        serverFailNetwork?: string;
+        /**
+         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` when radius server reject / fails
+         */
+        serverRejectNetwork?: string;
         /**
          * Only if `mode`!=`dynamic` speed, default is auto to automatically negotiate speed
          */
@@ -8069,6 +8171,10 @@ export declare namespace org {
          * Auth port of RADIUS server
          */
         port: number;
+        /**
+         * whether to require Message-Authenticator in requests
+         */
+        requireMessageAuthenticator: boolean;
         /**
          * secret of RADIUS server
          */
@@ -8390,6 +8496,10 @@ export declare namespace org {
          * **Note**: no check is done
          */
         additionalConfigCmds?: string[];
+        /**
+         * In-Band Management interface configuration
+         */
+        ipConfig?: outputs.org.NetworktemplateSwitchMatchingRuleIpConfig;
         /**
          * role to match
          */
@@ -8400,6 +8510,10 @@ export declare namespace org {
         matchType?: string;
         matchValue?: string;
         name?: string;
+        /**
+         * Out-of-Band Management interface configuration
+         */
+        oobIpConfig?: outputs.org.NetworktemplateSwitchMatchingRuleOobIpConfig;
         /**
          * Propery key is the interface name or interface range
          */
@@ -8414,6 +8528,30 @@ export declare namespace org {
             [key: string]: outputs.org.NetworktemplateSwitchMatchingRulePortMirroring;
         };
     }
+    interface NetworktemplateSwitchMatchingRuleIpConfig {
+        /**
+         * VLAN Name for the management interface
+         */
+        network?: string;
+        /**
+         * enum: `dhcp`, `static`
+         */
+        type: string;
+    }
+    interface NetworktemplateSwitchMatchingRuleOobIpConfig {
+        /**
+         * enum: `dhcp`, `static`
+         */
+        type: string;
+        /**
+         * f supported on the platform. If enabled, DNS will be using this routing-instance, too
+         */
+        useMgmtVrf: boolean;
+        /**
+         * for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
+         */
+        useMgmtVrfForHostOut: boolean;
+    }
     interface NetworktemplateSwitchMatchingRulePortConfig {
         /**
          * To disable LACP support for the AE interface
@@ -8509,6 +8647,7 @@ export declare namespace org {
          * Enable to provide the FQDN with DHCP option 81
          */
         dhcpOptionFqdn: boolean;
+        disableOobDownAlarm?: boolean;
         /**
          * Property key is the user name. For Local user authentication
          */
@@ -8563,7 +8702,7 @@ export declare namespace org {
          * enum: `any`, `icmp`, `tcp`, `udp`
          */
         protocol: string;
-        subnets?: string[];
+        subnets: string[];
     }
     interface NetworktemplateSwitchMgmtTacacs {
         acctServers?: outputs.org.NetworktemplateSwitchMgmtTacacsAcctServer[];
@@ -9046,6 +9185,10 @@ export declare namespace org {
          * use this IDP when no explicit realm present in the incoming username/CN OR when no IDP is explicitly mapped to the incoming realm.
          */
         defaultIdpId?: string;
+        /**
+         * to disable RSAE_PSS_SHA256, RSAE_PSS_SHA384, RSAE_PSS_SHA512 from server side. see https://www.openssl.org/docs/man3.0/man1/openssl-ciphers.html
+         */
+        disableRsaeAlgorithms: boolean;
         /**
          * eap ssl security level
          * see https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_security_level.html#DEFAULT-CALLBACK-BEHAVIOUR
@@ -9056,6 +9199,14 @@ export declare namespace org {
          * For strict GDPR compliancy NAC POD failover would only happen between the PODs located within the EU environment, and no authentication would take place outside of EU. This is an org setting that is applicable to WLANs, switch templates, mxedge clusters that have mistNac enabled
          */
         euOnly: boolean;
+        /**
+         * allow customer to choose the EAP-TLS client certificate's field to use for IDP Machine Groups lookup
+         */
+        idpMachineCertLookupField: string;
+        /**
+         * allow customer to choose the EAP-TLS client certificate's field to use for IDP User Groups lookup
+         */
+        idpUserCertLookupField: string;
         idps: outputs.org.SettingMistNacIdp[];
         /**
          * radius server cert to be presented in EAP TLS
@@ -9112,9 +9263,9 @@ export declare namespace org {
          */
         enabled: boolean;
         /**
-         * days, required if password policy is enabled
+         * password expiry in days
          */
-        freshness?: number;
+        expiryInDays?: number;
         /**
          * required password length
          */
@@ -9135,6 +9286,15 @@ export declare namespace org {
          */
         maxPktLen: number;
     }
+    interface SettingPortChannelization {
+        /**
+         * Property key is the interface name or range (e.g. `et-0/0/47`, `et-0/0/48-49`), Property value is the interface speed (e.g. `25g`, `50g`)
+         */
+        config?: {
+            [key: string]: string;
+        };
+        enabled: boolean;
+    }
     interface SettingSecurity {
         /**
          * whether to disable local SSH (by default, local SSH is enabled with allowMist in Org is enabled
@@ -9962,6 +10122,10 @@ export declare namespace org {
         locales?: {
             [key: string]: outputs.org.WlanPortalTemplatePortalTemplateLocales;
         };
+        /**
+         * path to the background image file. File must be a `png` image less than 100kB and image dimension must be less 500px x 200px (width x height).
+         */
+        logo: string;
         message: string;
         multiAuth: boolean;
         /**
@@ -10446,10 +10610,6 @@ export declare namespace org {
          * text of the Terms of Service
          */
         tosText?: string;
-        /**
-         * label for Amazon auth button
-         */
-        uthButtonAmazon?: string;
     }
     interface WlanQos {
         /**
@@ -10700,7 +10860,7 @@ export declare namespace site {
          * enum: `allow`, `deny`
          */
         action: string;
-        dstTag?: string;
+        dstTag: string;
     }
     interface NetworktemplateAclTags {
         /**
@@ -10742,7 +10902,7 @@ export declare namespace site {
          * - `type`==`resource` (optional. default is `any`)
          * - `type`==`staticGbp` if from matching subnet
          */
-        subnets?: string[];
+        subnets: string[];
         /**
          * enum: `any`, `dynamicGbp`, `mac`, `network`, `radiusGroup`, `resource`, `staticGbp`, `subnet`
          */
@@ -10917,6 +11077,10 @@ export declare namespace site {
          * Only if `mode`!=`dynamic` and `enableMacAuth`==`true`
          */
         macAuthOnly?: boolean;
+        /**
+         * Only if `mode`!=`dynamic` + `enableMacAuth`==`true` + `macAuthOnly`==`false`, dot1x will be given priority then mac_auth. Enable this to prefer macAuth over dot1x.
+         */
+        macAuthPreferred?: boolean;
         /**
          * Only if `mode`!=`dynamic` and `enableMacAuth` ==`true`. This type is ignored if mistNac is enabled. enum: `eap-md5`, `eap-peap`, `pap`
          */
@@ -10957,10 +11121,6 @@ export declare namespace site {
          * Only if `mode`!=`dynamic` and `portAuth`=`dot1x` reauthentication interval range
          */
         reauthInterval: number;
-        /**
-         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` when radius server reject / fails
-         */
-        rejectedNetwork?: string;
         /**
          * Only if `mode`==`dynamic` Control when the DPC port should be changed to the default port usage. enum: `linkDown`, `none` (let the DPC port keep at the current port usage)
          */
@@ -10969,6 +11129,14 @@ export declare namespace site {
          * Only if `mode`==`dynamic`
          */
         rules?: outputs.site.NetworktemplatePortUsagesRule[];
+        /**
+         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` sets server fail fallback vlan
+         */
+        serverFailNetwork?: string;
+        /**
+         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` when radius server reject / fails
+         */
+        serverRejectNetwork?: string;
         /**
          * Only if `mode`!=`dynamic` speed, default is auto to automatically negotiate speed
          */
@@ -11096,6 +11264,10 @@ export declare namespace site {
          * Auth port of RADIUS server
          */
         port: number;
+        /**
+         * whether to require Message-Authenticator in requests
+         */
+        requireMessageAuthenticator: boolean;
         /**
          * secret of RADIUS server
          */
@@ -11417,6 +11589,10 @@ export declare namespace site {
          * **Note**: no check is done
          */
         additionalConfigCmds?: string[];
+        /**
+         * In-Band Management interface configuration
+         */
+        ipConfig?: outputs.site.NetworktemplateSwitchMatchingRuleIpConfig;
         /**
          * role to match
          */
@@ -11427,6 +11603,10 @@ export declare namespace site {
         matchType?: string;
         matchValue?: string;
         name?: string;
+        /**
+         * Out-of-Band Management interface configuration
+         */
+        oobIpConfig?: outputs.site.NetworktemplateSwitchMatchingRuleOobIpConfig;
         /**
          * Propery key is the interface name or interface range
          */
@@ -11441,6 +11621,30 @@ export declare namespace site {
             [key: string]: outputs.site.NetworktemplateSwitchMatchingRulePortMirroring;
         };
     }
+    interface NetworktemplateSwitchMatchingRuleIpConfig {
+        /**
+         * VLAN Name for the management interface
+         */
+        network?: string;
+        /**
+         * enum: `dhcp`, `static`
+         */
+        type: string;
+    }
+    interface NetworktemplateSwitchMatchingRuleOobIpConfig {
+        /**
+         * enum: `dhcp`, `static`
+         */
+        type: string;
+        /**
+         * f supported on the platform. If enabled, DNS will be using this routing-instance, too
+         */
+        useMgmtVrf: boolean;
+        /**
+         * for host-out traffic (NTP/TACPLUS/RADIUS/SYSLOG/SNMP), if alternative source network/ip is desired
+         */
+        useMgmtVrfForHostOut: boolean;
+    }
     interface NetworktemplateSwitchMatchingRulePortConfig {
         /**
          * To disable LACP support for the AE interface
@@ -11536,6 +11740,7 @@ export declare namespace site {
          * Enable to provide the FQDN with DHCP option 81
          */
         dhcpOptionFqdn: boolean;
+        disableOobDownAlarm?: boolean;
         /**
          * Property key is the user name. For Local user authentication
          */
@@ -11590,7 +11795,7 @@ export declare namespace site {
          * enum: `any`, `icmp`, `tcp`, `udp`
          */
         protocol: string;
-        subnets?: string[];
+        subnets: string[];
     }
     interface NetworktemplateSwitchMgmtTacacs {
         acctServers?: outputs.site.NetworktemplateSwitchMgmtTacacsAcctServer[];
@@ -11793,6 +11998,8 @@ export declare namespace site {
         enabled: boolean;
         /**
          * hours of operation filter, the available days (mon, tue, wed, thu, fri, sat, sun).
+         *
+         * **Note**: If the dow is not defined then it\u2019\ s treated as 00:00-23:59.
          */
         hours?: outputs.site.SettingConfigPushPolicyPushWindowHours;
     }
@@ -11821,6 +12028,8 @@ export declare namespace site {
         dwellTags?: outputs.site.SettingEngagementDwellTags;
         /**
          * hours of operation filter, the available days (mon, tue, wed, thu, fri, sat, sun).
+         *
+         * **Note**: If the dow is not defined then it\u2019\ s treated as 00:00-23:59.
          */
         hours?: outputs.site.SettingEngagementHours;
         /**
@@ -11893,25 +12102,22 @@ export declare namespace site {
         enabled?: boolean;
     }
     interface SettingGatewayMgmtAppProbingCustomApp {
-        /**
-         * if `protocol`==`icmp`
-         */
         address: string;
         appType?: string;
         /**
-         * if `protocol`==`http`
+         * Only 1 entry is allowed:
+         *     * if `protocol`==`http`: URL (e.g. `http://test.com` or `https://test.com`)
+         *     * if `protocol`==`icmp`: IP Address (e.g. `1.2.3.4`)
          */
         hostnames: string[];
-        name?: string;
+        key: string;
+        name: string;
         network?: string;
         /**
          * enum: `http`, `icmp`
          */
         protocol: string;
-        /**
-         * if `protocol`==`http`
-         */
-        url?: string;
+        url: string;
         vrf?: string;
     }
     interface SettingGatewayMgmtAutoSignatureUpdate {
@@ -12915,14 +13121,18 @@ export declare namespace site {
         field4required?: boolean;
         /**
          * Can be used to localize the portal based on the User Agent. Allowed property key values are:
-         *       "ar", "ca-ES", "cs-CZ", "da-DK", "de-DE", "el-GR", "en-GB", "en-US", "es-ES",
-         *       "fi-FI", "fr-FR", "he-IL", "hi-IN", "hr-HR", "hu-HU", "id-ID", "it-IT", "ja-JP",
-         *       "ko-KR", "ms-MY", "nb-NO", "nl-NL", "pl-PL", "pt-BR", "pt-PT", "ro-RO", "ru-RU",
-         *       "sk-SK", "sv-SE", "th-TH", "tr-TR", "uk-UA", "vi-VN", "zh-Hans", "zh-Hant",
+         *   `ar`, `ca-ES`, `cs-CZ`, `da-DK`, `de-DE`, `el-GR`, `en-GB`, `en-US`, `es-ES`, `fi-FI`, `fr-FR`,
+         *   `he-IL`, `hi-IN`, `hr-HR`, `hu-HU`, `id-ID`, `it-IT`, `ja-J^`, `ko-KT`, `ms-MY`, `nb-NO`, `nl-NL`,
+         *   `pl-PL`, `pt-BR`, `pt-PT`, `ro-RO`, `ru-RU`, `sk-SK`, `sv-SE`, `th-TH`, `tr-TR`, `uk-UA`, `vi-VN`,
+         *   `zh-Hans`, `zh-Hant`
          */
         locales?: {
             [key: string]: outputs.site.WlanPortalTemplatePortalTemplateLocales;
         };
+        /**
+         * path to the background image file. File must be a `png` image`
+         */
+        logo: string;
         message: string;
         multiAuth: boolean;
         /**
@@ -13407,10 +13617,6 @@ export declare namespace site {
          * text of the Terms of Service
          */
         tosText?: string;
-        /**
-         * label for Amazon auth button
-         */
-        uthButtonAmazon?: string;
     }
     interface WlanQos {
         /**