@pulumi/juniper-mist 0.1.0 → 0.1.1

package/types/output.d.ts

@@ -83,6 +83,24 @@ export interface GetConstTrafficTypesConstTrafficType {
     name: string;
     trafficClass: string;
 }
+export interface GetConstWebhooksConstWebhook {
+    /**
+     * can be used in org webhooks, optional
+     */
+    forOrg: boolean;
+    /**
+     * supports webhook delivery results /api/v1/:scope/:scope*id/webhooks/:webhook*id/events/search
+     */
+    hasDeliveryResults: boolean;
+    /**
+     * internal topic (not selectable in site/org webhooks)
+     */
+    internal: boolean;
+    /**
+     * webhook topic name
+     */
+    key: string;
+}
 export interface GetSitesSite {
     /**
      * full address of the site
@@ -651,7 +669,6 @@ export declare namespace device {
          * when bfdMinimumIntervalIsConfigured alone
          */
         bfdMultiplier: number;
-        communities?: outputs.device.GatewayBgpConfigCommunity[];
         /**
          * BFD provides faster path failure detection and is enabled by default
          */
@@ -710,11 +727,6 @@ export declare namespace device {
          */
         wanName?: string;
     }
-    interface GatewayBgpConfigCommunity {
-        id?: string;
-        localPreference?: number;
-        vpnName?: string;
-    }
     interface GatewayBgpConfigNeighbors {
         /**
          * If true, the BGP session to this neighbor will be administratively disabled/shutdown
@@ -743,21 +755,21 @@ export declare namespace device {
             [key: string]: outputs.device.GatewayDhcpdConfigConfig;
         };
         /**
-         * if set to `true`, enable the DHCP server
+         * if set to `false`, disable the DHCP server
          */
         enabled: boolean;
     }
     interface GatewayDhcpdConfigConfig {
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`local` or `type6`==`local` - optional, if not defined, system one will be used
          */
         dnsServers: string[];
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`local` or `type6`==`local` - optional, if not defined, system one will be used
          */
         dnsSuffixes: string[];
         /**
-         * Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
+         * if `type`==`local` or `type6`==`local`. Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
          */
         fixedBindings?: {
             [key: string]: outputs.device.GatewayDhcpdConfigConfigFixedBindings;
@@ -787,7 +799,7 @@ export declare namespace device {
          */
         leaseTime: number;
         /**
-         * Property key is the DHCP option number
+         * if `type`==`local` or `type6`==`local`. Property key is the DHCP option number
          */
         options?: {
             [key: string]: outputs.device.GatewayDhcpdConfigConfigOptions;
@@ -814,7 +826,7 @@ export declare namespace device {
          */
         type6: string;
         /**
-         * Property key is <enterprise number>:<sub option code>, with
+         * if `type`==`local` or `type6`==`local`. Property key is <enterprise number>:<sub option code>, with
          *   * enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
          *   * sub option code: 1-255, sub-option code'
          */
@@ -851,9 +863,10 @@ export declare namespace device {
          * enum: `critical`, `standard`, `strict`
          */
         baseProfile?: string;
-        createdTime?: number;
+        /**
+         * Unique ID of the object instance in the Mist Organnization
+         */
         id?: string;
-        modifiedTime?: number;
         name?: string;
         orgId?: string;
         overwrites?: outputs.device.GatewayIdpProfilesOverwrite[];
@@ -887,14 +900,12 @@ export declare namespace device {
         type: string;
     }
     interface GatewayNetwork {
-        createdTime?: number;
         /**
          * whether to disallow Mist Devices in the network
          */
         disallowMistServices: boolean;
         gateway?: string;
         gateway6?: string;
-        id?: string;
         internalAccess?: outputs.device.GatewayNetworkInternalAccess;
         /**
          * whether this network has direct internet access
@@ -904,9 +915,11 @@ export declare namespace device {
          * whether to allow clients in the network to talk to each other
          */
         isolation?: boolean;
-        modifiedTime?: number;
+        /**
+         * whether to enable multicast support (only PIM-sparse mode is supported)
+         */
+        multicast?: outputs.device.GatewayNetworkMulticast;
         name: string;
-        orgId?: string;
         /**
          * for a Network (usually LAN), it can be routable to other networks (e.g. OSPF)
          */
@@ -960,6 +973,25 @@ export declare namespace device {
          */
         wanName?: string;
     }
+    interface GatewayNetworkMulticast {
+        /**
+         * if the network will only be the soruce of the multicast traffic, IGMP can be disabled
+         */
+        disableIgmp: boolean;
+        enabled: boolean;
+        /**
+         * Group address to RP (rendezvous point) mapping. Property Key is the CIDR (example "225.1.0.3/32")
+         */
+        groups?: {
+            [key: string]: outputs.device.GatewayNetworkMulticastGroups;
+        };
+    }
+    interface GatewayNetworkMulticastGroups {
+        /**
+         * RP (rendezvous point) IP Address
+         */
+        rpIp?: string;
+    }
     interface GatewayNetworkTenants {
         addresses?: string[];
     }
@@ -1264,6 +1296,9 @@ export declare namespace device {
          * if WAN interface is on a VLAN
          */
         vlanId?: number;
+        /**
+         * Property key is the VPN name
+         */
         vpnPaths?: {
             [key: string]: outputs.device.GatewayPortConfigVpnPaths;
         };
@@ -1275,6 +1310,16 @@ export declare namespace device {
          * optional, if spoke should reach this port by a different IP
          */
         wanExtIp?: string;
+        /**
+         * Property Key is the destianation CIDR (e.g "100.100.100.0/24")
+         */
+        wanExtraRoutes?: {
+            [key: string]: outputs.device.GatewayPortConfigWanExtraRoutes;
+        };
+        /**
+         * if `usage`==`wan`
+         */
+        wanProbeOverride?: outputs.device.GatewayPortConfigWanProbeOverride;
         /**
          * optional, by default, source-NAT is performed on all WAN Ports using the interface-ip
          */
@@ -1333,19 +1378,23 @@ export declare namespace device {
     }
     interface GatewayPortConfigVpnPaths {
         /**
-         * enum: `broadband`, `lte`
+         * Only if the VPN `type`==`hubSpoke`. enum: `broadband`, `lte`
          */
         bfdProfile: string;
         /**
-         * whether to use tunnel mode. SSR only
+         * Only if the VPN `type`==`hubSpoke`. Whether to use tunnel mode. SSR only
          */
         bfdUseTunnelMode: boolean;
         /**
-         * for a given VPN, when `path_selection.strategy`==`simple`, the preference for a path (lower is preferred)
+         * Only if the VPN `type`==`mesh`
+         */
+        linkName?: string;
+        /**
+         * Only if the VPN `type`==`hubSpoke`. For a given VPN, when `path_selection.strategy`==`simple`, the preference for a path (lower is preferred)
          */
         preference?: number;
         /**
-         * enum: `hub`, `spoke`
+         * Only if the VPN `type`==`hubSpoke`. enum: `hub`, `spoke`
          */
         role: string;
         trafficShaping?: outputs.device.GatewayPortConfigVpnPathsTrafficShaping;
@@ -1358,6 +1407,16 @@ export declare namespace device {
         classPercentages?: number[];
         enabled: boolean;
     }
+    interface GatewayPortConfigWanExtraRoutes {
+        via?: string;
+    }
+    interface GatewayPortConfigWanProbeOverride {
+        ips?: string[];
+        /**
+         * enum: `broadband`, `lte`
+         */
+        probeProfile: string;
+    }
     interface GatewayPortConfigWanSourceNat {
         /**
          * or to disable the source-nat
@@ -3264,6 +3323,7 @@ export declare namespace device {
         /**
          * required if
          * - `type`==`dynamicGbp` (gbp_tag received from RADIUS)
+         * - `type`==`gbpResource`
          * - `type`==`staticGbp` (applying gbp tag against matching conditions)
          */
         gbpTag?: number;
@@ -3290,7 +3350,7 @@ export declare namespace device {
          */
         radiusGroup?: string;
         /**
-         * if `type`==`resource`
+         * if `type`==`resource` or `type`==`gbpResource`
          * empty means unrestricted, i.e. any
          */
         specs?: outputs.device.SwitchAclTagsSpec[];
@@ -3302,7 +3362,16 @@ export declare namespace device {
          */
         subnets: string[];
         /**
-         * enum: `any`, `dynamicGbp`, `mac`, `network`, `radiusGroup`, `resource`, `staticGbp`, `subnet`
+         * enum:
+         *   * `any`: matching anything not identified
+         *   * `dynamicGbp`: from the gbpTag received from RADIUS
+         *   * `gbpResource`: can only be used in `dstTags`
+         *   * `mac`
+         *   * `network`
+         *   * `radiusGroup`
+         *   * `resource`: can only be used in `dstTags`
+         *   * `staticGbp`: applying gbp tag against matching conditions
+         *   * `subnet`'
          */
         type: string;
     }
@@ -3346,37 +3415,37 @@ export declare namespace device {
     }
     interface SwitchDhcpdConfigConfig {
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`server` or `type6`==`server` - optional, if not defined, system one will be used
          */
         dnsServers: string[];
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`server` or `type6`==`server` - optional, if not defined, system one will be used
          */
         dnsSuffixes: string[];
         /**
-         * Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
+         * if `type`==`server` or `type6`==`server`. Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
          */
         fixedBindings?: {
             [key: string]: outputs.device.SwitchDhcpdConfigConfigFixedBindings;
         };
         /**
-         * if `type`==`local` - optional, `ip` will be used if not provided
+         * if `type`==`server`  - optional, `ip` will be used if not provided
          */
         gateway?: string;
         /**
-         * if `type`==`local`
+         * if `type`==`server`
          */
         ipEnd?: string;
         /**
-         * if `type6`==`local`
+         * if `type6`==`server`
          */
         ipEnd6?: string;
         /**
-         * if `type`==`local`
+         * if `type`==`server`
          */
         ipStart?: string;
         /**
-         * if `type6`==`local`
+         * if `type6`==`server`
          */
         ipStart6?: string;
         /**
@@ -3384,7 +3453,7 @@ export declare namespace device {
          */
         leaseTime: number;
         /**
-         * Property key is the DHCP option number
+         * if `type`==`server` or `type6`==`server`. Property key is the DHCP option number
          */
         options?: {
             [key: string]: outputs.device.SwitchDhcpdConfigConfigOptions;
@@ -3411,7 +3480,7 @@ export declare namespace device {
          */
         type6: string;
         /**
-         * Property key is <enterprise number>:<sub option code>, with
+         * if `type`==`server` or `type6`==`server`. Property key is <enterprise number>:<sub option code>, with
          *   * enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
          *   * sub option code: 1-255, sub-option code'
          */
@@ -3505,6 +3574,36 @@ export declare namespace device {
          */
         type: string;
     }
+    interface SwitchLocalPortConfig {
+        /**
+         * if want to generate port up/down alarm
+         */
+        critical?: boolean;
+        description?: string;
+        /**
+         * if `speed` and `duplex` are specified, whether to disable autonegotiation
+         */
+        disableAutoneg: boolean;
+        /**
+         * enum: `auto`, `full`, `half`
+         */
+        duplex: string;
+        /**
+         * media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
+         */
+        mtu: number;
+        poeDisabled: boolean;
+        /**
+         * enum: `100m`, `10m`, `1g`, `2.5g`, `5g`, `auto`
+         */
+        speed: string;
+        /**
+         * port usage name.
+         *
+         * If EVPN is used, use `evpnUplink`or `evpnDownlink`
+         */
+        usage: string;
+    }
     interface SwitchMistNac {
         enabled?: boolean;
         network?: string;
@@ -3833,6 +3932,10 @@ export declare namespace device {
         stpEdge: boolean;
         stpNoRootPort: boolean;
         stpP2p: boolean;
+        /**
+         * if this is connected to a vstp network
+         */
+        useVstp: boolean;
         /**
          * Only if `mode`!=`dynamic` network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
          */
@@ -3896,8 +3999,6 @@ export declare namespace device {
          * radius auth session timeout
          */
         authServersTimeout: number;
-        coaEnabled: boolean;
-        coaPort: number;
         /**
          * use `network`or `sourceIp`
          * which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip
@@ -4261,9 +4362,9 @@ export declare namespace device {
     }
     interface SwitchStpConfig {
         /**
-         * ignored for switches participating in EVPN
+         * Switch STP priority: from `0k` to `15k`
          */
-        vstpEnabled: boolean;
+        bridgePriority: string;
     }
     interface SwitchSwitchMgmt {
         /**
@@ -4968,7 +5069,6 @@ export declare namespace org {
          * when bfdMinimumIntervalIsConfigured alone
          */
         bfdMultiplier: number;
-        communities?: outputs.org.DeviceprofileGatewayBgpConfigCommunity[];
         /**
          * BFD provides faster path failure detection and is enabled by default
          */
@@ -5027,11 +5127,6 @@ export declare namespace org {
          */
         wanName?: string;
     }
-    interface DeviceprofileGatewayBgpConfigCommunity {
-        id?: string;
-        localPreference?: number;
-        vpnName?: string;
-    }
     interface DeviceprofileGatewayBgpConfigNeighbors {
         /**
          * If true, the BGP session to this neighbor will be administratively disabled/shutdown
@@ -5054,21 +5149,21 @@ export declare namespace org {
             [key: string]: outputs.org.DeviceprofileGatewayDhcpdConfigConfig;
         };
         /**
-         * if set to `true`, enable the DHCP server
+         * if set to `false`, disable the DHCP server
          */
         enabled: boolean;
     }
     interface DeviceprofileGatewayDhcpdConfigConfig {
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`local` or `type6`==`local` - optional, if not defined, system one will be used
          */
         dnsServers: string[];
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`local` or `type6`==`local` - optional, if not defined, system one will be used
          */
         dnsSuffixes: string[];
         /**
-         * Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
+         * if `type`==`local` or `type6`==`local`. Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
          */
         fixedBindings?: {
             [key: string]: outputs.org.DeviceprofileGatewayDhcpdConfigConfigFixedBindings;
@@ -5098,7 +5193,7 @@ export declare namespace org {
          */
         leaseTime: number;
         /**
-         * Property key is the DHCP option number
+         * if `type`==`local` or `type6`==`local`. Property key is the DHCP option number
          */
         options?: {
             [key: string]: outputs.org.DeviceprofileGatewayDhcpdConfigConfigOptions;
@@ -5125,7 +5220,7 @@ export declare namespace org {
          */
         type6: string;
         /**
-         * Property key is <enterprise number>:<sub option code>, with
+         * if `type`==`local` or `type6`==`local`. Property key is <enterprise number>:<sub option code>, with
          *   * enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
          *   * sub option code: 1-255, sub-option code'
          */
@@ -5210,6 +5305,10 @@ export declare namespace org {
          * whether to allow clients in the network to talk to each other
          */
         isolation?: boolean;
+        /**
+         * whether to enable multicast support (only PIM-sparse mode is supported)
+         */
+        multicast?: outputs.org.DeviceprofileGatewayNetworkMulticast;
         name: string;
         /**
          * for a Network (usually LAN), it can be routable to other networks (e.g. OSPF)
@@ -5264,6 +5363,25 @@ export declare namespace org {
          */
         wanName?: string;
     }
+    interface DeviceprofileGatewayNetworkMulticast {
+        /**
+         * if the network will only be the soruce of the multicast traffic, IGMP can be disabled
+         */
+        disableIgmp: boolean;
+        enabled: boolean;
+        /**
+         * Group address to RP (rendezvous point) mapping. Property Key is the CIDR (example "225.1.0.3/32")
+         */
+        groups?: {
+            [key: string]: outputs.org.DeviceprofileGatewayNetworkMulticastGroups;
+        };
+    }
+    interface DeviceprofileGatewayNetworkMulticastGroups {
+        /**
+         * RP (rendezvous point) IP Address
+         */
+        rpIp?: string;
+    }
     interface DeviceprofileGatewayNetworkTenants {
         addresses?: string[];
     }
@@ -5568,6 +5686,9 @@ export declare namespace org {
          * if WAN interface is on a VLAN
          */
         vlanId?: number;
+        /**
+         * Property key is the VPN name
+         */
         vpnPaths?: {
             [key: string]: outputs.org.DeviceprofileGatewayPortConfigVpnPaths;
         };
@@ -5579,6 +5700,16 @@ export declare namespace org {
          * optional, if spoke should reach this port by a different IP
          */
         wanExtIp?: string;
+        /**
+         * Property Key is the destianation CIDR (e.g "100.100.100.0/24")
+         */
+        wanExtraRoutes?: {
+            [key: string]: outputs.org.DeviceprofileGatewayPortConfigWanExtraRoutes;
+        };
+        /**
+         * if `usage`==`wan`
+         */
+        wanProbeOverride?: outputs.org.DeviceprofileGatewayPortConfigWanProbeOverride;
         /**
          * optional, by default, source-NAT is performed on all WAN Ports using the interface-ip
          */
@@ -5637,19 +5768,23 @@ export declare namespace org {
     }
     interface DeviceprofileGatewayPortConfigVpnPaths {
         /**
-         * enum: `broadband`, `lte`
+         * Only if the VPN `type`==`hubSpoke`. enum: `broadband`, `lte`
          */
         bfdProfile: string;
         /**
-         * whether to use tunnel mode. SSR only
+         * Only if the VPN `type`==`hubSpoke`. Whether to use tunnel mode. SSR only
          */
         bfdUseTunnelMode: boolean;
         /**
-         * for a given VPN, when `path_selection.strategy`==`simple`, the preference for a path (lower is preferred)
+         * Only if the VPN `type`==`mesh`
+         */
+        linkName?: string;
+        /**
+         * Only if the VPN `type`==`hubSpoke`. For a given VPN, when `path_selection.strategy`==`simple`, the preference for a path (lower is preferred)
          */
         preference?: number;
         /**
-         * enum: `hub`, `spoke`
+         * Only if the VPN `type`==`hubSpoke`. enum: `hub`, `spoke`
          */
         role: string;
         trafficShaping?: outputs.org.DeviceprofileGatewayPortConfigVpnPathsTrafficShaping;
@@ -5662,6 +5797,16 @@ export declare namespace org {
         classPercentages?: number[];
         enabled: boolean;
     }
+    interface DeviceprofileGatewayPortConfigWanExtraRoutes {
+        via?: string;
+    }
+    interface DeviceprofileGatewayPortConfigWanProbeOverride {
+        ips?: string[];
+        /**
+         * enum: `broadband`, `lte`
+         */
+        probeProfile: string;
+    }
     interface DeviceprofileGatewayPortConfigWanSourceNat {
         /**
          * or to disable the source-nat
@@ -6102,7 +6247,6 @@ export declare namespace org {
          * when bfdMinimumIntervalIsConfigured alone
          */
         bfdMultiplier: number;
-        communities?: outputs.org.GatewaytemplateBgpConfigCommunity[];
         /**
          * BFD provides faster path failure detection and is enabled by default
          */
@@ -6161,11 +6305,6 @@ export declare namespace org {
          */
         wanName?: string;
     }
-    interface GatewaytemplateBgpConfigCommunity {
-        id?: string;
-        localPreference?: number;
-        vpnName?: string;
-    }
     interface GatewaytemplateBgpConfigNeighbors {
         /**
          * If true, the BGP session to this neighbor will be administratively disabled/shutdown
@@ -6188,21 +6327,21 @@ export declare namespace org {
             [key: string]: outputs.org.GatewaytemplateDhcpdConfigConfig;
         };
         /**
-         * if set to `true`, enable the DHCP server
+         * if set to `false`, disable the DHCP server
          */
         enabled: boolean;
     }
     interface GatewaytemplateDhcpdConfigConfig {
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`local` or `type6`==`local` - optional, if not defined, system one will be used
          */
         dnsServers: string[];
         /**
-         * if `type`==`local` - optional, if not defined, system one will be used
+         * if `type`==`local` or `type6`==`local` - optional, if not defined, system one will be used
          */
         dnsSuffixes: string[];
         /**
-         * Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
+         * if `type`==`local` or `type6`==`local`. Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
          */
         fixedBindings?: {
             [key: string]: outputs.org.GatewaytemplateDhcpdConfigConfigFixedBindings;
@@ -6232,7 +6371,7 @@ export declare namespace org {
          */
         leaseTime: number;
         /**
-         * Property key is the DHCP option number
+         * if `type`==`local` or `type6`==`local`. Property key is the DHCP option number
          */
         options?: {
             [key: string]: outputs.org.GatewaytemplateDhcpdConfigConfigOptions;
@@ -6259,7 +6398,7 @@ export declare namespace org {
          */
         type6: string;
         /**
-         * Property key is <enterprise number>:<sub option code>, with
+         * if `type`==`local` or `type6`==`local`. Property key is <enterprise number>:<sub option code>, with
          *   * enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
          *   * sub option code: 1-255, sub-option code'
          */
@@ -6344,6 +6483,10 @@ export declare namespace org {
          * whether to allow clients in the network to talk to each other
          */
         isolation?: boolean;
+        /**
+         * whether to enable multicast support (only PIM-sparse mode is supported)
+         */
+        multicast?: outputs.org.GatewaytemplateNetworkMulticast;
         name: string;
         /**
          * for a Network (usually LAN), it can be routable to other networks (e.g. OSPF)
@@ -6398,6 +6541,25 @@ export declare namespace org {
          */
         wanName?: string;
     }
+    interface GatewaytemplateNetworkMulticast {
+        /**
+         * if the network will only be the soruce of the multicast traffic, IGMP can be disabled
+         */
+        disableIgmp: boolean;
+        enabled: boolean;
+        /**
+         * Group address to RP (rendezvous point) mapping. Property Key is the CIDR (example "225.1.0.3/32")
+         */
+        groups?: {
+            [key: string]: outputs.org.GatewaytemplateNetworkMulticastGroups;
+        };
+    }
+    interface GatewaytemplateNetworkMulticastGroups {
+        /**
+         * RP (rendezvous point) IP Address
+         */
+        rpIp?: string;
+    }
     interface GatewaytemplateNetworkTenants {
         addresses?: string[];
     }
@@ -6702,6 +6864,9 @@ export declare namespace org {
          * if WAN interface is on a VLAN
          */
         vlanId?: number;
+        /**
+         * Property key is the VPN name
+         */
         vpnPaths?: {
             [key: string]: outputs.org.GatewaytemplatePortConfigVpnPaths;
         };
@@ -6713,6 +6878,16 @@ export declare namespace org {
          * optional, if spoke should reach this port by a different IP
          */
         wanExtIp?: string;
+        /**
+         * Property Key is the destianation CIDR (e.g "100.100.100.0/24")
+         */
+        wanExtraRoutes?: {
+            [key: string]: outputs.org.GatewaytemplatePortConfigWanExtraRoutes;
+        };
+        /**
+         * if `usage`==`wan`
+         */
+        wanProbeOverride?: outputs.org.GatewaytemplatePortConfigWanProbeOverride;
         /**
          * optional, by default, source-NAT is performed on all WAN Ports using the interface-ip
          */
@@ -6771,19 +6946,23 @@ export declare namespace org {
     }
     interface GatewaytemplatePortConfigVpnPaths {
         /**
-         * enum: `broadband`, `lte`
+         * Only if the VPN `type`==`hubSpoke`. enum: `broadband`, `lte`
          */
         bfdProfile: string;
         /**
-         * whether to use tunnel mode. SSR only
+         * Only if the VPN `type`==`hubSpoke`. Whether to use tunnel mode. SSR only
          */
         bfdUseTunnelMode: boolean;
         /**
-         * for a given VPN, when `path_selection.strategy`==`simple`, the preference for a path (lower is preferred)
+         * Only if the VPN `type`==`mesh`
+         */
+        linkName?: string;
+        /**
+         * Only if the VPN `type`==`hubSpoke`. For a given VPN, when `path_selection.strategy`==`simple`, the preference for a path (lower is preferred)
          */
         preference?: number;
         /**
-         * enum: `hub`, `spoke`
+         * Only if the VPN `type`==`hubSpoke`. enum: `hub`, `spoke`
          */
         role: string;
         trafficShaping?: outputs.org.GatewaytemplatePortConfigVpnPathsTrafficShaping;
@@ -6796,6 +6975,16 @@ export declare namespace org {
         classPercentages?: number[];
         enabled: boolean;
     }
+    interface GatewaytemplatePortConfigWanExtraRoutes {
+        via?: string;
+    }
+    interface GatewaytemplatePortConfigWanProbeOverride {
+        ips?: string[];
+        /**
+         * enum: `broadband`, `lte`
+         */
+        probeProfile: string;
+    }
     interface GatewaytemplatePortConfigWanSourceNat {
         /**
          * or to disable the source-nat
@@ -7287,10 +7476,6 @@ export declare namespace org {
          * whether the device is connected
          */
         connected: boolean;
-        /**
-         * when the object has been created, in epoch
-         */
-        createdTime: number;
         /**
          * deviceprofile id if assigned, null if not assigned
          */
@@ -7316,10 +7501,6 @@ export declare namespace org {
          * device model
          */
         model: string;
-        /**
-         * when the object has been modified for the last time, in epoch
-         */
-        modifiedTime: number;
         /**
          * device name if configured
          */
@@ -7969,6 +8150,7 @@ export declare namespace org {
         /**
          * required if
          * - `type`==`dynamicGbp` (gbp_tag received from RADIUS)
+         * - `type`==`gbpResource`
          * - `type`==`staticGbp` (applying gbp tag against matching conditions)
          */
         gbpTag?: number;
@@ -7995,7 +8177,7 @@ export declare namespace org {
          */
         radiusGroup?: string;
         /**
-         * if `type`==`resource`
+         * if `type`==`resource` or `type`==`gbpResource`
          * empty means unrestricted, i.e. any
          */
         specs?: outputs.org.NetworktemplateAclTagsSpec[];
@@ -8007,7 +8189,16 @@ export declare namespace org {
          */
         subnets: string[];
         /**
-         * enum: `any`, `dynamicGbp`, `mac`, `network`, `radiusGroup`, `resource`, `staticGbp`, `subnet`
+         * enum:
+         *   * `any`: matching anything not identified
+         *   * `dynamicGbp`: from the gbpTag received from RADIUS
+         *   * `gbpResource`: can only be used in `dstTags`
+         *   * `mac`
+         *   * `network`
+         *   * `radiusGroup`
+         *   * `resource`: can only be used in `dstTags`
+         *   * `staticGbp`: applying gbp tag against matching conditions
+         *   * `subnet`'
          */
         type: string;
     }
@@ -8299,6 +8490,10 @@ export declare namespace org {
         stpEdge: boolean;
         stpNoRootPort: boolean;
         stpP2p: boolean;
+        /**
+         * if this is connected to a vstp network
+         */
+        useVstp: boolean;
         /**
          * Only if `mode`!=`dynamic` network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
          */
@@ -8362,8 +8557,6 @@ export declare namespace org {
          * radius auth session timeout
          */
         authServersTimeout: number;
-        coaEnabled: boolean;
-        coaPort: number;
         /**
          * use `network`or `sourceIp`
          * which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip
@@ -8761,8 +8954,8 @@ export declare namespace org {
             [key: string]: outputs.org.NetworktemplateSwitchMatchingRulePortConfig;
         };
         /**
-         * Property key is the port mirroring instance name (Maximum: 4)
-         * portMirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
+         * Property key is the port mirroring instance name
+         * portMirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 port mirrorings is allowed
          */
         portMirroring?: {
             [key: string]: outputs.org.NetworktemplateSwitchMatchingRulePortMirroring;
@@ -9395,6 +9588,20 @@ export declare namespace org {
          */
         orgId: string;
     }
+    interface SettingJcloudRa {
+        /**
+         * JCloud Routing Assurance Org Token
+         */
+        orgApitoken?: string;
+        /**
+         * JCloud Routing Assurance Org Token Name
+         */
+        orgApitokenName?: string;
+        /**
+         * JCloud Routing Assurance Org ID
+         */
+        orgId?: string;
+    }
     interface SettingJuniper {
         accounts: outputs.org.SettingJuniperAccount[];
     }
@@ -9440,11 +9647,12 @@ export declare namespace org {
          */
         euOnly: boolean;
         /**
-         * allow customer to choose the EAP-TLS client certificate's field to use for IDP Machine Groups lookup
+         * allow customer to choose the EAP-TLS client certificate's field to use for IDP Machine Groups lookup. enum: `automatic`, `cn`, `dns`
          */
         idpMachineCertLookupField: string;
         /**
-         * allow customer to choose the EAP-TLS client certificate's field to use for IDP User Groups lookup
+         * allow customer to choose the EAP-TLS client certificate's field
+         * to use for IDP User Groups lookup. enum: `automatic`, `cn`, `email`, `upn`
          */
         idpUserCertLookupField: string;
         idps: outputs.org.SettingMistNacIdp[];
@@ -9500,6 +9708,16 @@ export declare namespace org {
         oobIpType6: string;
         rootPassword?: string;
     }
+    interface SettingOpticPortConfig {
+        /**
+         * enable channelization
+         */
+        channelized: boolean;
+        /**
+         * interface speed (e.g. `25g`, `50g`), use the chassis speed by default
+         */
+        speed?: string;
+    }
     interface SettingPasswordPolicy {
         /**
          * whether the policy is enabled
@@ -9529,15 +9747,6 @@ export declare namespace org {
          */
         maxPktLen: number;
     }
-    interface SettingPortChannelization {
-        /**
-         * Property key is the interface name or range (e.g. `et-0/0/47`, `et-0/0/48-49`), Property value is the interface speed (e.g. `25g`, `50g`)
-         */
-        config?: {
-            [key: string]: string;
-        };
-        enabled: boolean;
-    }
     interface SettingSecurity {
         /**
          * whether to disable local SSH (by default, local SSH is enabled with allowMist in Org is enabled
@@ -11136,6 +11345,7 @@ export declare namespace site {
         /**
          * required if
          * - `type`==`dynamicGbp` (gbp_tag received from RADIUS)
+         * - `type`==`gbpResource`
          * - `type`==`staticGbp` (applying gbp tag against matching conditions)
          */
         gbpTag?: number;
@@ -11162,7 +11372,7 @@ export declare namespace site {
          */
         radiusGroup?: string;
         /**
-         * if `type`==`resource`
+         * if `type`==`resource` or `type`==`gbpResource`
          * empty means unrestricted, i.e. any
          */
         specs?: outputs.site.NetworktemplateAclTagsSpec[];
@@ -11174,7 +11384,16 @@ export declare namespace site {
          */
         subnets: string[];
         /**
-         * enum: `any`, `dynamicGbp`, `mac`, `network`, `radiusGroup`, `resource`, `staticGbp`, `subnet`
+         * enum:
+         *   * `any`: matching anything not identified
+         *   * `dynamicGbp`: from the gbpTag received from RADIUS
+         *   * `gbpResource`: can only be used in `dstTags`
+         *   * `mac`
+         *   * `network`
+         *   * `radiusGroup`
+         *   * `resource`: can only be used in `dstTags`
+         *   * `staticGbp`: applying gbp tag against matching conditions
+         *   * `subnet`'
          */
         type: string;
     }
@@ -11466,6 +11685,10 @@ export declare namespace site {
         stpEdge: boolean;
         stpNoRootPort: boolean;
         stpP2p: boolean;
+        /**
+         * if this is connected to a vstp network
+         */
+        useVstp: boolean;
         /**
          * Only if `mode`!=`dynamic` network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
          */
@@ -11529,8 +11752,6 @@ export declare namespace site {
          * radius auth session timeout
          */
         authServersTimeout: number;
-        coaEnabled: boolean;
-        coaPort: number;
         /**
          * use `network`or `sourceIp`
          * which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip
@@ -11928,8 +12149,8 @@ export declare namespace site {
             [key: string]: outputs.site.NetworktemplateSwitchMatchingRulePortConfig;
         };
         /**
-         * Property key is the port mirroring instance name (Maximum: 4)
-         * portMirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output.
+         * Property key is the port mirroring instance name
+         * portMirroring can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 port mirrorings is allowed
          */
         portMirroring?: {
             [key: string]: outputs.site.NetworktemplateSwitchMatchingRulePortMirroring;