@pulumi/juniper-mist 0.1.0 → 0.1.1

package/types/input.d.ts

@@ -508,7 +508,6 @@ export declare namespace device {
          * when bfdMinimumIntervalIsConfigured alone
          */
         bfdMultiplier?: pulumi.Input<number>;
-        communities?: pulumi.Input<pulumi.Input<inputs.device.GatewayBgpConfigCommunity>[]>;
         /**
          * BFD provides faster path failure detection and is enabled by default
          */
@@ -567,11 +566,6 @@ export declare namespace device {
          */
         wanName?: pulumi.Input<string>;
     }
-    interface GatewayBgpConfigCommunity {
-        id?: pulumi.Input<string>;
-        localPreference?: pulumi.Input<number>;
-        vpnName?: pulumi.Input<string>;
-    }
     interface GatewayBgpConfigNeighbors {
         /**
          * If true, the BGP session to this neighbor will be administratively disabled/shutdown
@@ -600,21 +594,21 @@ export declare namespace device {
             [key: string]: pulumi.Input<inputs.device.GatewayDhcpdConfigConfig>;
         }>;
         /**
-         * if set to `true`, enable the DHCP server
+         * if set to `false`, disable the DHCP server
          */
         enabled?: pulumi.Input<boolean>;
     }
     interface GatewayDhcpdConfigConfig {
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`local` or `type6`==`local` - optional, if not defined, system one will be used
          */
         dnsServers?: pulumi.Input<pulumi.Input<string>[]>;
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`local` or `type6`==`local` - optional, if not defined, system one will be used
          */
         dnsSuffixes?: pulumi.Input<pulumi.Input<string>[]>;
         /**
-         * Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
+         * if `type`==`local` or `type6`==`local`. Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
          */
         fixedBindings?: pulumi.Input<{
             [key: string]: pulumi.Input<inputs.device.GatewayDhcpdConfigConfigFixedBindings>;
@@ -644,7 +638,7 @@ export declare namespace device {
          */
         leaseTime?: pulumi.Input<number>;
         /**
-         * Property key is the DHCP option number
+         * if `type`==`local` or `type6`==`local`. Property key is the DHCP option number
          */
         options?: pulumi.Input<{
             [key: string]: pulumi.Input<inputs.device.GatewayDhcpdConfigConfigOptions>;
@@ -671,7 +665,7 @@ export declare namespace device {
          */
         type6?: pulumi.Input<string>;
         /**
-         * Property key is <enterprise number>:<sub option code>, with
+         * if `type`==`local` or `type6`==`local`. Property key is <enterprise number>:<sub option code>, with
          *   * enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
          *   * sub option code: 1-255, sub-option code'
          */
@@ -708,9 +702,10 @@ export declare namespace device {
          * enum: `critical`, `standard`, `strict`
          */
         baseProfile?: pulumi.Input<string>;
-        createdTime?: pulumi.Input<number>;
+        /**
+         * Unique ID of the object instance in the Mist Organnization
+         */
         id?: pulumi.Input<string>;
-        modifiedTime?: pulumi.Input<number>;
         name?: pulumi.Input<string>;
         orgId?: pulumi.Input<string>;
         overwrites?: pulumi.Input<pulumi.Input<inputs.device.GatewayIdpProfilesOverwrite>[]>;
@@ -744,14 +739,12 @@ export declare namespace device {
         type?: pulumi.Input<string>;
     }
     interface GatewayNetwork {
-        createdTime?: pulumi.Input<number>;
         /**
          * whether to disallow Mist Devices in the network
          */
         disallowMistServices?: pulumi.Input<boolean>;
         gateway?: pulumi.Input<string>;
         gateway6?: pulumi.Input<string>;
-        id?: pulumi.Input<string>;
         internalAccess?: pulumi.Input<inputs.device.GatewayNetworkInternalAccess>;
         /**
          * whether this network has direct internet access
@@ -761,9 +754,11 @@ export declare namespace device {
          * whether to allow clients in the network to talk to each other
          */
         isolation?: pulumi.Input<boolean>;
-        modifiedTime?: pulumi.Input<number>;
+        /**
+         * whether to enable multicast support (only PIM-sparse mode is supported)
+         */
+        multicast?: pulumi.Input<inputs.device.GatewayNetworkMulticast>;
         name: pulumi.Input<string>;
-        orgId?: pulumi.Input<string>;
         /**
          * for a Network (usually LAN), it can be routable to other networks (e.g. OSPF)
          */
@@ -817,6 +812,25 @@ export declare namespace device {
          */
         wanName?: pulumi.Input<string>;
     }
+    interface GatewayNetworkMulticast {
+        /**
+         * if the network will only be the soruce of the multicast traffic, IGMP can be disabled
+         */
+        disableIgmp?: pulumi.Input<boolean>;
+        enabled?: pulumi.Input<boolean>;
+        /**
+         * Group address to RP (rendezvous point) mapping. Property Key is the CIDR (example "225.1.0.3/32")
+         */
+        groups?: pulumi.Input<{
+            [key: string]: pulumi.Input<inputs.device.GatewayNetworkMulticastGroups>;
+        }>;
+    }
+    interface GatewayNetworkMulticastGroups {
+        /**
+         * RP (rendezvous point) IP Address
+         */
+        rpIp?: pulumi.Input<string>;
+    }
     interface GatewayNetworkTenants {
         addresses?: pulumi.Input<pulumi.Input<string>[]>;
     }
@@ -1121,6 +1135,9 @@ export declare namespace device {
          * if WAN interface is on a VLAN
          */
         vlanId?: pulumi.Input<number>;
+        /**
+         * Property key is the VPN name
+         */
         vpnPaths?: pulumi.Input<{
             [key: string]: pulumi.Input<inputs.device.GatewayPortConfigVpnPaths>;
         }>;
@@ -1132,6 +1149,16 @@ export declare namespace device {
          * optional, if spoke should reach this port by a different IP
          */
         wanExtIp?: pulumi.Input<string>;
+        /**
+         * Property Key is the destianation CIDR (e.g "100.100.100.0/24")
+         */
+        wanExtraRoutes?: pulumi.Input<{
+            [key: string]: pulumi.Input<inputs.device.GatewayPortConfigWanExtraRoutes>;
+        }>;
+        /**
+         * if `usage`==`wan`
+         */
+        wanProbeOverride?: pulumi.Input<inputs.device.GatewayPortConfigWanProbeOverride>;
         /**
          * optional, by default, source-NAT is performed on all WAN Ports using the interface-ip
          */
@@ -1190,19 +1217,23 @@ export declare namespace device {
     }
     interface GatewayPortConfigVpnPaths {
         /**
-         * enum: `broadband`, `lte`
+         * Only if the VPN `type`==`hubSpoke`. enum: `broadband`, `lte`
          */
         bfdProfile?: pulumi.Input<string>;
         /**
-         * whether to use tunnel mode. SSR only
+         * Only if the VPN `type`==`hubSpoke`. Whether to use tunnel mode. SSR only
          */
         bfdUseTunnelMode?: pulumi.Input<boolean>;
         /**
-         * for a given VPN, when `path_selection.strategy`==`simple`, the preference for a path (lower is preferred)
+         * Only if the VPN `type`==`mesh`
+         */
+        linkName?: pulumi.Input<string>;
+        /**
+         * Only if the VPN `type`==`hubSpoke`. For a given VPN, when `path_selection.strategy`==`simple`, the preference for a path (lower is preferred)
          */
         preference?: pulumi.Input<number>;
         /**
-         * enum: `hub`, `spoke`
+         * Only if the VPN `type`==`hubSpoke`. enum: `hub`, `spoke`
          */
         role?: pulumi.Input<string>;
         trafficShaping?: pulumi.Input<inputs.device.GatewayPortConfigVpnPathsTrafficShaping>;
@@ -1215,6 +1246,16 @@ export declare namespace device {
         classPercentages?: pulumi.Input<pulumi.Input<number>[]>;
         enabled?: pulumi.Input<boolean>;
     }
+    interface GatewayPortConfigWanExtraRoutes {
+        via?: pulumi.Input<string>;
+    }
+    interface GatewayPortConfigWanProbeOverride {
+        ips?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * enum: `broadband`, `lte`
+         */
+        probeProfile?: pulumi.Input<string>;
+    }
     interface GatewayPortConfigWanSourceNat {
         /**
          * or to disable the source-nat
@@ -1677,6 +1718,7 @@ export declare namespace device {
         /**
          * required if
          * - `type`==`dynamicGbp` (gbp_tag received from RADIUS)
+         * - `type`==`gbpResource`
          * - `type`==`staticGbp` (applying gbp tag against matching conditions)
          */
         gbpTag?: pulumi.Input<number>;
@@ -1703,7 +1745,7 @@ export declare namespace device {
          */
         radiusGroup?: pulumi.Input<string>;
         /**
-         * if `type`==`resource`
+         * if `type`==`resource` or `type`==`gbpResource`
          * empty means unrestricted, i.e. any
          */
         specs?: pulumi.Input<pulumi.Input<inputs.device.SwitchAclTagsSpec>[]>;
@@ -1715,7 +1757,16 @@ export declare namespace device {
          */
         subnets?: pulumi.Input<pulumi.Input<string>[]>;
         /**
-         * enum: `any`, `dynamicGbp`, `mac`, `network`, `radiusGroup`, `resource`, `staticGbp`, `subnet`
+         * enum:
+         *   * `any`: matching anything not identified
+         *   * `dynamicGbp`: from the gbpTag received from RADIUS
+         *   * `gbpResource`: can only be used in `dstTags`
+         *   * `mac`
+         *   * `network`
+         *   * `radiusGroup`
+         *   * `resource`: can only be used in `dstTags`
+         *   * `staticGbp`: applying gbp tag against matching conditions
+         *   * `subnet`'
          */
         type: pulumi.Input<string>;
     }
@@ -1759,37 +1810,37 @@ export declare namespace device {
     }
     interface SwitchDhcpdConfigConfig {
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`server` or `type6`==`server` - optional, if not defined, system one will be used
          */
         dnsServers?: pulumi.Input<pulumi.Input<string>[]>;
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`server` or `type6`==`server` - optional, if not defined, system one will be used
          */
         dnsSuffixes?: pulumi.Input<pulumi.Input<string>[]>;
         /**
-         * Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
+         * if `type`==`server` or `type6`==`server`. Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
          */
         fixedBindings?: pulumi.Input<{
             [key: string]: pulumi.Input<inputs.device.SwitchDhcpdConfigConfigFixedBindings>;
         }>;
         /**
-         * if `type`==`local` - optional, `ip` will be used if not provided
+         * if `type`==`server`  - optional, `ip` will be used if not provided
          */
         gateway?: pulumi.Input<string>;
         /**
-         * if `type`==`local`
+         * if `type`==`server`
          */
         ipEnd?: pulumi.Input<string>;
         /**
-         * if `type6`==`local`
+         * if `type6`==`server`
          */
         ipEnd6?: pulumi.Input<string>;
         /**
-         * if `type`==`local`
+         * if `type`==`server`
          */
         ipStart?: pulumi.Input<string>;
         /**
-         * if `type6`==`local`
+         * if `type6`==`server`
          */
         ipStart6?: pulumi.Input<string>;
         /**
@@ -1797,7 +1848,7 @@ export declare namespace device {
          */
         leaseTime?: pulumi.Input<number>;
         /**
-         * Property key is the DHCP option number
+         * if `type`==`server` or `type6`==`server`. Property key is the DHCP option number
          */
         options?: pulumi.Input<{
             [key: string]: pulumi.Input<inputs.device.SwitchDhcpdConfigConfigOptions>;
@@ -1824,7 +1875,7 @@ export declare namespace device {
          */
         type6?: pulumi.Input<string>;
         /**
-         * Property key is <enterprise number>:<sub option code>, with
+         * if `type`==`server` or `type6`==`server`. Property key is <enterprise number>:<sub option code>, with
          *   * enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
          *   * sub option code: 1-255, sub-option code'
          */
@@ -1918,6 +1969,36 @@ export declare namespace device {
          */
         type?: pulumi.Input<string>;
     }
+    interface SwitchLocalPortConfig {
+        /**
+         * if want to generate port up/down alarm
+         */
+        critical?: pulumi.Input<boolean>;
+        description?: pulumi.Input<string>;
+        /**
+         * if `speed` and `duplex` are specified, whether to disable autonegotiation
+         */
+        disableAutoneg?: pulumi.Input<boolean>;
+        /**
+         * enum: `auto`, `full`, `half`
+         */
+        duplex?: pulumi.Input<string>;
+        /**
+         * media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
+         */
+        mtu?: pulumi.Input<number>;
+        poeDisabled?: pulumi.Input<boolean>;
+        /**
+         * enum: `100m`, `10m`, `1g`, `2.5g`, `5g`, `auto`
+         */
+        speed?: pulumi.Input<string>;
+        /**
+         * port usage name.
+         *
+         * If EVPN is used, use `evpnUplink`or `evpnDownlink`
+         */
+        usage: pulumi.Input<string>;
+    }
     interface SwitchMistNac {
         enabled?: pulumi.Input<boolean>;
         network?: pulumi.Input<string>;
@@ -2246,6 +2327,10 @@ export declare namespace device {
         stpEdge?: pulumi.Input<boolean>;
         stpNoRootPort?: pulumi.Input<boolean>;
         stpP2p?: pulumi.Input<boolean>;
+        /**
+         * if this is connected to a vstp network
+         */
+        useVstp?: pulumi.Input<boolean>;
         /**
          * Only if `mode`!=`dynamic` network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
          */
@@ -2309,8 +2394,6 @@ export declare namespace device {
          * radius auth session timeout
          */
         authServersTimeout?: pulumi.Input<number>;
-        coaEnabled?: pulumi.Input<boolean>;
-        coaPort?: pulumi.Input<number>;
         /**
          * use `network`or `sourceIp`
          * which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip
@@ -2674,9 +2757,9 @@ export declare namespace device {
     }
     interface SwitchStpConfig {
         /**
-         * ignored for switches participating in EVPN
+         * Switch STP priority: from `0k` to `15k`
          */
-        vstpEnabled?: pulumi.Input<boolean>;
+        bridgePriority?: pulumi.Input<string>;
     }
     interface SwitchSwitchMgmt {
         /**
@@ -3381,7 +3464,6 @@ export declare namespace org {
          * when bfdMinimumIntervalIsConfigured alone
          */
         bfdMultiplier?: pulumi.Input<number>;
-        communities?: pulumi.Input<pulumi.Input<inputs.org.DeviceprofileGatewayBgpConfigCommunity>[]>;
         /**
          * BFD provides faster path failure detection and is enabled by default
          */
@@ -3440,11 +3522,6 @@ export declare namespace org {
          */
         wanName?: pulumi.Input<string>;
     }
-    interface DeviceprofileGatewayBgpConfigCommunity {
-        id?: pulumi.Input<string>;
-        localPreference?: pulumi.Input<number>;
-        vpnName?: pulumi.Input<string>;
-    }
     interface DeviceprofileGatewayBgpConfigNeighbors {
         /**
          * If true, the BGP session to this neighbor will be administratively disabled/shutdown
@@ -3467,21 +3544,21 @@ export declare namespace org {
             [key: string]: pulumi.Input<inputs.org.DeviceprofileGatewayDhcpdConfigConfig>;
         }>;
         /**
-         * if set to `true`, enable the DHCP server
+         * if set to `false`, disable the DHCP server
          */
         enabled?: pulumi.Input<boolean>;
     }
     interface DeviceprofileGatewayDhcpdConfigConfig {
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`local` or `type6`==`local` - optional, if not defined, system one will be used
          */
         dnsServers?: pulumi.Input<pulumi.Input<string>[]>;
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`local` or `type6`==`local` - optional, if not defined, system one will be used
          */
         dnsSuffixes?: pulumi.Input<pulumi.Input<string>[]>;
         /**
-         * Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
+         * if `type`==`local` or `type6`==`local`. Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
          */
         fixedBindings?: pulumi.Input<{
             [key: string]: pulumi.Input<inputs.org.DeviceprofileGatewayDhcpdConfigConfigFixedBindings>;
@@ -3511,7 +3588,7 @@ export declare namespace org {
          */
         leaseTime?: pulumi.Input<number>;
         /**
-         * Property key is the DHCP option number
+         * if `type`==`local` or `type6`==`local`. Property key is the DHCP option number
          */
         options?: pulumi.Input<{
             [key: string]: pulumi.Input<inputs.org.DeviceprofileGatewayDhcpdConfigConfigOptions>;
@@ -3538,7 +3615,7 @@ export declare namespace org {
          */
         type6?: pulumi.Input<string>;
         /**
-         * Property key is <enterprise number>:<sub option code>, with
+         * if `type`==`local` or `type6`==`local`. Property key is <enterprise number>:<sub option code>, with
          *   * enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
          *   * sub option code: 1-255, sub-option code'
          */
@@ -3623,6 +3700,10 @@ export declare namespace org {
          * whether to allow clients in the network to talk to each other
          */
         isolation?: pulumi.Input<boolean>;
+        /**
+         * whether to enable multicast support (only PIM-sparse mode is supported)
+         */
+        multicast?: pulumi.Input<inputs.org.DeviceprofileGatewayNetworkMulticast>;
         name: pulumi.Input<string>;
         /**
          * for a Network (usually LAN), it can be routable to other networks (e.g. OSPF)
@@ -3677,6 +3758,25 @@ export declare namespace org {
          */
         wanName?: pulumi.Input<string>;
     }
+    interface DeviceprofileGatewayNetworkMulticast {
+        /**
+         * if the network will only be the soruce of the multicast traffic, IGMP can be disabled
+         */
+        disableIgmp?: pulumi.Input<boolean>;
+        enabled?: pulumi.Input<boolean>;
+        /**
+         * Group address to RP (rendezvous point) mapping. Property Key is the CIDR (example "225.1.0.3/32")
+         */
+        groups?: pulumi.Input<{
+            [key: string]: pulumi.Input<inputs.org.DeviceprofileGatewayNetworkMulticastGroups>;
+        }>;
+    }
+    interface DeviceprofileGatewayNetworkMulticastGroups {
+        /**
+         * RP (rendezvous point) IP Address
+         */
+        rpIp?: pulumi.Input<string>;
+    }
     interface DeviceprofileGatewayNetworkTenants {
         addresses?: pulumi.Input<pulumi.Input<string>[]>;
     }
@@ -3981,6 +4081,9 @@ export declare namespace org {
          * if WAN interface is on a VLAN
          */
         vlanId?: pulumi.Input<number>;
+        /**
+         * Property key is the VPN name
+         */
         vpnPaths?: pulumi.Input<{
             [key: string]: pulumi.Input<inputs.org.DeviceprofileGatewayPortConfigVpnPaths>;
         }>;
@@ -3992,6 +4095,16 @@ export declare namespace org {
          * optional, if spoke should reach this port by a different IP
          */
         wanExtIp?: pulumi.Input<string>;
+        /**
+         * Property Key is the destianation CIDR (e.g "100.100.100.0/24")
+         */
+        wanExtraRoutes?: pulumi.Input<{
+            [key: string]: pulumi.Input<inputs.org.DeviceprofileGatewayPortConfigWanExtraRoutes>;
+        }>;
+        /**
+         * if `usage`==`wan`
+         */
+        wanProbeOverride?: pulumi.Input<inputs.org.DeviceprofileGatewayPortConfigWanProbeOverride>;
         /**
          * optional, by default, source-NAT is performed on all WAN Ports using the interface-ip
          */
@@ -4050,19 +4163,23 @@ export declare namespace org {
     }
     interface DeviceprofileGatewayPortConfigVpnPaths {
         /**
-         * enum: `broadband`, `lte`
+         * Only if the VPN `type`==`hubSpoke`. enum: `broadband`, `lte`
          */
         bfdProfile?: pulumi.Input<string>;
         /**
-         * whether to use tunnel mode. SSR only
+         * Only if the VPN `type`==`hubSpoke`. Whether to use tunnel mode. SSR only
          */
         bfdUseTunnelMode?: pulumi.Input<boolean>;
         /**
-         * for a given VPN, when `path_selection.strategy`==`simple`, the preference for a path (lower is preferred)
+         * Only if the VPN `type`==`mesh`
+         */
+        linkName?: pulumi.Input<string>;
+        /**
+         * Only if the VPN `type`==`hubSpoke`. For a given VPN, when `path_selection.strategy`==`simple`, the preference for a path (lower is preferred)
          */
         preference?: pulumi.Input<number>;
         /**
-         * enum: `hub`, `spoke`
+         * Only if the VPN `type`==`hubSpoke`. enum: `hub`, `spoke`
          */
         role?: pulumi.Input<string>;
         trafficShaping?: pulumi.Input<inputs.org.DeviceprofileGatewayPortConfigVpnPathsTrafficShaping>;
@@ -4075,6 +4192,16 @@ export declare namespace org {
         classPercentages?: pulumi.Input<pulumi.Input<number>[]>;
         enabled?: pulumi.Input<boolean>;
     }
+    interface DeviceprofileGatewayPortConfigWanExtraRoutes {
+        via?: pulumi.Input<string>;
+    }
+    interface DeviceprofileGatewayPortConfigWanProbeOverride {
+        ips?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * enum: `broadband`, `lte`
+         */
+        probeProfile?: pulumi.Input<string>;
+    }
     interface DeviceprofileGatewayPortConfigWanSourceNat {
         /**
          * or to disable the source-nat
@@ -4515,7 +4642,6 @@ export declare namespace org {
          * when bfdMinimumIntervalIsConfigured alone
          */
         bfdMultiplier?: pulumi.Input<number>;
-        communities?: pulumi.Input<pulumi.Input<inputs.org.GatewaytemplateBgpConfigCommunity>[]>;
         /**
          * BFD provides faster path failure detection and is enabled by default
          */
@@ -4574,11 +4700,6 @@ export declare namespace org {
          */
         wanName?: pulumi.Input<string>;
     }
-    interface GatewaytemplateBgpConfigCommunity {
-        id?: pulumi.Input<string>;
-        localPreference?: pulumi.Input<number>;
-        vpnName?: pulumi.Input<string>;
-    }
     interface GatewaytemplateBgpConfigNeighbors {
         /**
          * If true, the BGP session to this neighbor will be administratively disabled/shutdown
@@ -4601,21 +4722,21 @@ export declare namespace org {
             [key: string]: pulumi.Input<inputs.org.GatewaytemplateDhcpdConfigConfig>;
         }>;
         /**
-         * if set to `true`, enable the DHCP server
+         * if set to `false`, disable the DHCP server
          */
         enabled?: pulumi.Input<boolean>;
     }
     interface GatewaytemplateDhcpdConfigConfig {
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`local` or `type6`==`local` - optional, if not defined, system one will be used
          */
         dnsServers?: pulumi.Input<pulumi.Input<string>[]>;
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`local` or `type6`==`local` - optional, if not defined, system one will be used
          */
         dnsSuffixes?: pulumi.Input<pulumi.Input<string>[]>;
         /**
-         * Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
+         * if `type`==`local` or `type6`==`local`. Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
          */
         fixedBindings?: pulumi.Input<{
             [key: string]: pulumi.Input<inputs.org.GatewaytemplateDhcpdConfigConfigFixedBindings>;
@@ -4645,7 +4766,7 @@ export declare namespace org {
          */
         leaseTime?: pulumi.Input<number>;
         /**
-         * Property key is the DHCP option number
+         * if `type`==`local` or `type6`==`local`. Property key is the DHCP option number
          */
         options?: pulumi.Input<{
             [key: string]: pulumi.Input<inputs.org.GatewaytemplateDhcpdConfigConfigOptions>;
@@ -4672,7 +4793,7 @@ export declare namespace org {
          */
         type6?: pulumi.Input<string>;
         /**
-         * Property key is <enterprise number>:<sub option code>, with
+         * if `type`==`local` or `type6`==`local`. Property key is <enterprise number>:<sub option code>, with
          *   * enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
          *   * sub option code: 1-255, sub-option code'
          */
@@ -4757,6 +4878,10 @@ export declare namespace org {
          * whether to allow clients in the network to talk to each other
          */
         isolation?: pulumi.Input<boolean>;
+        /**
+         * whether to enable multicast support (only PIM-sparse mode is supported)
+         */
+        multicast?: pulumi.Input<inputs.org.GatewaytemplateNetworkMulticast>;
         name: pulumi.Input<string>;
         /**
          * for a Network (usually LAN), it can be routable to other networks (e.g. OSPF)
@@ -4811,6 +4936,25 @@ export declare namespace org {
          */
         wanName?: pulumi.Input<string>;
     }
+    interface GatewaytemplateNetworkMulticast {
+        /**
+         * if the network will only be the soruce of the multicast traffic, IGMP can be disabled
+         */
+        disableIgmp?: pulumi.Input<boolean>;
+        enabled?: pulumi.Input<boolean>;
+        /**
+         * Group address to RP (rendezvous point) mapping. Property Key is the CIDR (example "225.1.0.3/32")
+         */
+        groups?: pulumi.Input<{
+            [key: string]: pulumi.Input<inputs.org.GatewaytemplateNetworkMulticastGroups>;
+        }>;
+    }
+    interface GatewaytemplateNetworkMulticastGroups {
+        /**
+         * RP (rendezvous point) IP Address
+         */
+        rpIp?: pulumi.Input<string>;
+    }
     interface GatewaytemplateNetworkTenants {
         addresses?: pulumi.Input<pulumi.Input<string>[]>;
     }
@@ -5115,6 +5259,9 @@ export declare namespace org {
          * if WAN interface is on a VLAN
          */
         vlanId?: pulumi.Input<number>;
+        /**
+         * Property key is the VPN name
+         */
         vpnPaths?: pulumi.Input<{
             [key: string]: pulumi.Input<inputs.org.GatewaytemplatePortConfigVpnPaths>;
         }>;
@@ -5126,6 +5273,16 @@ export declare namespace org {
          * optional, if spoke should reach this port by a different IP
          */
         wanExtIp?: pulumi.Input<string>;
+        /**
+         * Property Key is the destianation CIDR (e.g "100.100.100.0/24")
+         */
+        wanExtraRoutes?: pulumi.Input<{
+            [key: string]: pulumi.Input<inputs.org.GatewaytemplatePortConfigWanExtraRoutes>;
+        }>;
+        /**
+         * if `usage`==`wan`
+         */
+        wanProbeOverride?: pulumi.Input<inputs.org.GatewaytemplatePortConfigWanProbeOverride>;
         /**
          * optional, by default, source-NAT is performed on all WAN Ports using the interface-ip
          */
@@ -5184,19 +5341,23 @@ export declare namespace org {
     }
     interface GatewaytemplatePortConfigVpnPaths {
         /**
-         * enum: `broadband`, `lte`
+         * Only if the VPN `type`==`hubSpoke`. enum: `broadband`, `lte`
          */
         bfdProfile?: pulumi.Input<string>;
         /**
-         * whether to use tunnel mode. SSR only
+         * Only if the VPN `type`==`hubSpoke`. Whether to use tunnel mode. SSR only
          */
         bfdUseTunnelMode?: pulumi.Input<boolean>;
         /**
-         * for a given VPN, when `path_selection.strategy`==`simple`, the preference for a path (lower is preferred)
+         * Only if the VPN `type`==`mesh`
+         */
+        linkName?: pulumi.Input<string>;
+        /**
+         * Only if the VPN `type`==`hubSpoke`. For a given VPN, when `path_selection.strategy`==`simple`, the preference for a path (lower is preferred)
          */
         preference?: pulumi.Input<number>;
         /**
-         * enum: `hub`, `spoke`
+         * Only if the VPN `type`==`hubSpoke`. enum: `hub`, `spoke`
          */
         role?: pulumi.Input<string>;
         trafficShaping?: pulumi.Input<inputs.org.GatewaytemplatePortConfigVpnPathsTrafficShaping>;
@@ -5209,6 +5370,16 @@ export declare namespace org {
         classPercentages?: pulumi.Input<pulumi.Input<number>[]>;
         enabled?: pulumi.Input<boolean>;
     }
+    interface GatewaytemplatePortConfigWanExtraRoutes {
+        via?: pulumi.Input<string>;
+    }
+    interface GatewaytemplatePortConfigWanProbeOverride {
+        ips?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * enum: `broadband`, `lte`
+         */
+        probeProfile?: pulumi.Input<string>;
+    }
     interface GatewaytemplatePortConfigWanSourceNat {
         /**
          * or to disable the source-nat
@@ -5931,6 +6102,7 @@ export declare namespace org {
         /**
          * required if
          * - `type`==`dynamicGbp` (gbp_tag received from RADIUS)
+         * - `type`==`gbpResource`
          * - `type`==`staticGbp` (applying gbp tag against matching conditions)
          */
         gbpTag?: pulumi.Input<number>;
@@ -5957,7 +6129,7 @@ export declare namespace org {
          */
         radiusGroup?: pulumi.Input<string>;
         /**
-         * if `type`==`resource`
+         * if `type`==`resource` or `type`==`gbpResource`
          * empty means unrestricted, i.e. any
          */
         specs?: pulumi.Input<pulumi.Input<inputs.org.NetworktemplateAclTagsSpec>[]>;
@@ -5969,7 +6141,16 @@ export declare namespace org {
          */
         subnets?: pulumi.Input<pulumi.Input<string>[]>;
         /**
-         * enum: `any`, `dynamicGbp`, `mac`, `network`, `radiusGroup`, `resource`, `staticGbp`, `subnet`
+         * enum:
+         *   * `any`: matching anything not identified
+         *   * `dynamicGbp`: from the gbpTag received from RADIUS
+         *   * `gbpResource`: can only be used in `dstTags`
+         *   * `mac`
+         *   * `network`
+         *   * `radiusGroup`
+         *   * `resource`: can only be used in `dstTags`
+         *   * `staticGbp`: applying gbp tag against matching conditions
+         *   * `subnet`'
          */
         type: pulumi.Input<string>;
     }
@@ -6261,6 +6442,10 @@ export declare namespace org {
         stpEdge?: pulumi.Input<boolean>;
         stpNoRootPort?: pulumi.Input<boolean>;
         stpP2p?: pulumi.Input<boolean>;
+        /**
+         * if this is connected to a vstp network
+         */
+        useVstp?: pulumi.Input<boolean>;
         /**
          * Only if `mode`!=`dynamic` network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
          */
@@ -6324,8 +6509,6 @@ export declare namespace org {
          * radius auth session timeout
          */
         authServersTimeout?: pulumi.Input<number>;
-        coaEnabled?: pulumi.Input<boolean>;
-        coaPort?: pulumi.Input<number>;
         /**
          * use `network`or `sourceIp`
          * which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip
@@ -6723,8 +6906,8 @@ export declare namespace org {
             [key: string]: pulumi.Input<inputs.org.NetworktemplateSwitchMatchingRulePortConfig>;
         }>;
         /**
-         * Property key is the port mirroring instance name (Maximum: 4)
-         * portMirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
+         * Property key is the port mirroring instance name
+         * portMirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 port mirrorings is allowed
          */
         portMirroring?: pulumi.Input<{
             [key: string]: pulumi.Input<inputs.org.NetworktemplateSwitchMatchingRulePortMirroring>;
@@ -7357,6 +7540,20 @@ export declare namespace org {
          */
         orgId: pulumi.Input<string>;
     }
+    interface SettingJcloudRa {
+        /**
+         * JCloud Routing Assurance Org Token
+         */
+        orgApitoken?: pulumi.Input<string>;
+        /**
+         * JCloud Routing Assurance Org Token Name
+         */
+        orgApitokenName?: pulumi.Input<string>;
+        /**
+         * JCloud Routing Assurance Org ID
+         */
+        orgId?: pulumi.Input<string>;
+    }
     interface SettingJuniper {
         accounts?: pulumi.Input<pulumi.Input<inputs.org.SettingJuniperAccount>[]>;
     }
@@ -7402,11 +7599,12 @@ export declare namespace org {
          */
         euOnly?: pulumi.Input<boolean>;
         /**
-         * allow customer to choose the EAP-TLS client certificate's field to use for IDP Machine Groups lookup
+         * allow customer to choose the EAP-TLS client certificate's field to use for IDP Machine Groups lookup. enum: `automatic`, `cn`, `dns`
          */
         idpMachineCertLookupField?: pulumi.Input<string>;
         /**
-         * allow customer to choose the EAP-TLS client certificate's field to use for IDP User Groups lookup
+         * allow customer to choose the EAP-TLS client certificate's field
+         * to use for IDP User Groups lookup. enum: `automatic`, `cn`, `email`, `upn`
          */
         idpUserCertLookupField?: pulumi.Input<string>;
         idps?: pulumi.Input<pulumi.Input<inputs.org.SettingMistNacIdp>[]>;
@@ -7462,6 +7660,16 @@ export declare namespace org {
         oobIpType6?: pulumi.Input<string>;
         rootPassword?: pulumi.Input<string>;
     }
+    interface SettingOpticPortConfig {
+        /**
+         * enable channelization
+         */
+        channelized?: pulumi.Input<boolean>;
+        /**
+         * interface speed (e.g. `25g`, `50g`), use the chassis speed by default
+         */
+        speed?: pulumi.Input<string>;
+    }
     interface SettingPasswordPolicy {
         /**
          * whether the policy is enabled
@@ -7491,15 +7699,6 @@ export declare namespace org {
          */
         maxPktLen?: pulumi.Input<number>;
     }
-    interface SettingPortChannelization {
-        /**
-         * Property key is the interface name or range (e.g. `et-0/0/47`, `et-0/0/48-49`), Property value is the interface speed (e.g. `25g`, `50g`)
-         */
-        config?: pulumi.Input<{
-            [key: string]: pulumi.Input<string>;
-        }>;
-        enabled?: pulumi.Input<boolean>;
-    }
     interface SettingSecurity {
         /**
          * whether to disable local SSH (by default, local SSH is enabled with allowMist in Org is enabled
@@ -8971,6 +9170,7 @@ export declare namespace site {
         /**
          * required if
          * - `type`==`dynamicGbp` (gbp_tag received from RADIUS)
+         * - `type`==`gbpResource`
          * - `type`==`staticGbp` (applying gbp tag against matching conditions)
          */
         gbpTag?: pulumi.Input<number>;
@@ -8997,7 +9197,7 @@ export declare namespace site {
          */
         radiusGroup?: pulumi.Input<string>;
         /**
-         * if `type`==`resource`
+         * if `type`==`resource` or `type`==`gbpResource`
          * empty means unrestricted, i.e. any
          */
         specs?: pulumi.Input<pulumi.Input<inputs.site.NetworktemplateAclTagsSpec>[]>;
@@ -9009,7 +9209,16 @@ export declare namespace site {
          */
         subnets?: pulumi.Input<pulumi.Input<string>[]>;
         /**
-         * enum: `any`, `dynamicGbp`, `mac`, `network`, `radiusGroup`, `resource`, `staticGbp`, `subnet`
+         * enum:
+         *   * `any`: matching anything not identified
+         *   * `dynamicGbp`: from the gbpTag received from RADIUS
+         *   * `gbpResource`: can only be used in `dstTags`
+         *   * `mac`
+         *   * `network`
+         *   * `radiusGroup`
+         *   * `resource`: can only be used in `dstTags`
+         *   * `staticGbp`: applying gbp tag against matching conditions
+         *   * `subnet`'
          */
         type: pulumi.Input<string>;
     }
@@ -9301,6 +9510,10 @@ export declare namespace site {
         stpEdge?: pulumi.Input<boolean>;
         stpNoRootPort?: pulumi.Input<boolean>;
         stpP2p?: pulumi.Input<boolean>;
+        /**
+         * if this is connected to a vstp network
+         */
+        useVstp?: pulumi.Input<boolean>;
         /**
          * Only if `mode`!=`dynamic` network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
          */
@@ -9364,8 +9577,6 @@ export declare namespace site {
          * radius auth session timeout
          */
         authServersTimeout?: pulumi.Input<number>;
-        coaEnabled?: pulumi.Input<boolean>;
-        coaPort?: pulumi.Input<number>;
         /**
          * use `network`or `sourceIp`
          * which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip
@@ -9763,8 +9974,8 @@ export declare namespace site {
             [key: string]: pulumi.Input<inputs.site.NetworktemplateSwitchMatchingRulePortConfig>;
         }>;
         /**
-         * Property key is the port mirroring instance name (Maximum: 4)
-         * portMirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
+         * Property key is the port mirroring instance name
+         * portMirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 port mirrorings is allowed
          */
         portMirroring?: pulumi.Input<{
             [key: string]: pulumi.Input<inputs.site.NetworktemplateSwitchMatchingRulePortMirroring>;