@pulumi/juniper-mist 0.1.2 → 0.1.3

package/types/input.d.ts

@@ -669,8 +669,8 @@ export declare namespace device {
          *   * enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
          *   * sub option code: 1-255, sub-option code'
          */
-        vendorEncapulated?: pulumi.Input<{
-            [key: string]: pulumi.Input<inputs.device.GatewayDhcpdConfigConfigVendorEncapulated>;
+        vendorEncapsulated?: pulumi.Input<{
+            [key: string]: pulumi.Input<inputs.device.GatewayDhcpdConfigConfigVendorEncapsulated>;
         }>;
     }
     interface GatewayDhcpdConfigConfigFixedBindings {
@@ -684,7 +684,7 @@ export declare namespace device {
         type?: pulumi.Input<string>;
         value?: pulumi.Input<string>;
     }
-    interface GatewayDhcpdConfigConfigVendorEncapulated {
+    interface GatewayDhcpdConfigConfigVendorEncapsulated {
         /**
          * enum: `boolean`, `hex`, `int16`, `int32`, `ip`, `string`, `uint16`, `uint32`
          */
@@ -1418,7 +1418,7 @@ export declare namespace device {
          */
         idpprofileId?: pulumi.Input<string>;
         /**
-         * `strict` (default) / `standard` / or keys from from idp_profiles
+         * enum: `Custom`, `strict` (default), `standard` or keys from from idp_profiles
          */
         profile?: pulumi.Input<string>;
     }
@@ -1879,8 +1879,8 @@ export declare namespace device {
          *   * enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
          *   * sub option code: 1-255, sub-option code'
          */
-        vendorEncapulated?: pulumi.Input<{
-            [key: string]: pulumi.Input<inputs.device.SwitchDhcpdConfigConfigVendorEncapulated>;
+        vendorEncapsulated?: pulumi.Input<{
+            [key: string]: pulumi.Input<inputs.device.SwitchDhcpdConfigConfigVendorEncapsulated>;
         }>;
     }
     interface SwitchDhcpdConfigConfigFixedBindings {
@@ -1894,7 +1894,7 @@ export declare namespace device {
         type?: pulumi.Input<string>;
         value?: pulumi.Input<string>;
     }
-    interface SwitchDhcpdConfigConfigVendorEncapulated {
+    interface SwitchDhcpdConfigConfigVendorEncapsulated {
         /**
          * enum: `boolean`, `hex`, `int16`, `int32`, `ip`, `string`, `uint16`, `uint32`
          */
@@ -1904,7 +1904,7 @@ export declare namespace device {
     interface SwitchEvpnConfig {
         enabled?: pulumi.Input<boolean>;
         /**
-         * enum: `access`, `core`, `distribution`
+         * enum: `access`, `collapsed-core`, `core`, `distribution`, `esilag-access`, `none`
          */
         role?: pulumi.Input<string>;
     }
@@ -1971,39 +1971,173 @@ export declare namespace device {
     }
     interface SwitchLocalPortConfig {
         /**
-         * if want to generate port up/down alarm
+         * Only if `mode`==`trunk` whether to trunk all network/vlans
          */
-        critical?: pulumi.Input<boolean>;
+        allNetworks?: pulumi.Input<boolean>;
+        /**
+         * If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with.
+         * All the interfaces from port configs using this port usage are effected. Please notice that allowDhcpd is a tri_state.
+         * When it is not defined, it means using the system's default setting which depends on whether the port is a access or trunk port.
+         */
+        allowDhcpd?: pulumi.Input<boolean>;
+        allowMultipleSupplicants?: pulumi.Input<boolean>;
+        /**
+         * Only if `portAuth`==`dot1x` bypass auth for known clients if set to true when RADIUS server is down
+         */
+        bypassAuthWhenServerDown?: pulumi.Input<boolean>;
+        /**
+         * Only if `portAuth`=`dot1x` bypass auth for all (including unknown clients) if set to true when RADIUS server is down
+         */
+        bypassAuthWhenServerDownForUnkonwnClient?: pulumi.Input<boolean>;
         description?: pulumi.Input<string>;
         /**
-         * if `speed` and `duplex` are specified, whether to disable autonegotiation
+         * Only if `mode`!=`dynamic` if speed and duplex are specified, whether to disable autonegotiation
          */
         disableAutoneg?: pulumi.Input<boolean>;
         /**
-         * enum: `auto`, `full`, `half`
+         * whether the port is disabled
+         */
+        disabled?: pulumi.Input<boolean>;
+        /**
+         * link connection mode. enum: `auto`, `full`, `half`
          */
         duplex?: pulumi.Input<string>;
         /**
-         * media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
+         * Only if `portAuth`==`dot1x`, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return
+         */
+        dynamicVlanNetworks?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Only if `portAuth`==`dot1x` whether to enable MAC Auth
+         */
+        enableMacAuth?: pulumi.Input<boolean>;
+        enableQos?: pulumi.Input<boolean>;
+        /**
+         * Only if `portAuth`==`dot1x` which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed)
+         */
+        guestNetwork?: pulumi.Input<string>;
+        /**
+         * inter_switch_link is used together with "isolation" under networks
+         * NOTE: interSwitchLink works only between Juniper device. This has to be applied to both ports connected together
+         */
+        interSwitchLink?: pulumi.Input<boolean>;
+        /**
+         * Only if `enableMacAuth`==`true`
+         */
+        macAuthOnly?: pulumi.Input<boolean>;
+        /**
+         * Only if `enableMacAuth`==`true` + `macAuthOnly`==`false`, dot1x will be given priority then mac_auth. Enable this to prefer macAuth over dot1x.
+         */
+        macAuthPreferred?: pulumi.Input<boolean>;
+        /**
+         * Only if `enableMacAuth` ==`true`. This type is ignored if mistNac is enabled. enum: `eap-md5`, `eap-peap`, `pap`
+         */
+        macAuthProtocol?: pulumi.Input<string>;
+        /**
+         * max number of mac addresses, default is 0 for unlimited, otherwise range is 1 or higher, with upper bound constrained by platform
+         */
+        macLimit?: pulumi.Input<number>;
+        /**
+         * enum: `access`, `inet`, `trunk`
+         */
+        mode?: pulumi.Input<string>;
+        /**
+         * media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation. The default value is 1514.
          */
         mtu?: pulumi.Input<number>;
+        /**
+         * Only if `mode`==`trunk`, the list of network/vlans
+         */
+        networks?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Only if `mode`==`access` and `portAuth`!=`dot1x` whether the port should retain dynamically learned MAC addresses
+         */
+        persistMac?: pulumi.Input<boolean>;
+        /**
+         * whether PoE capabilities are disabled for a port
+         */
         poeDisabled?: pulumi.Input<boolean>;
         /**
-         * enum: `100m`, `10m`, `1g`, `2.5g`, `5g`, `auto`
+         * if dot1x is desired, set to dot1x. enum: `dot1x`
+         */
+        portAuth?: pulumi.Input<string>;
+        /**
+         * native network/vlan for untagged traffic
+         */
+        portNetwork?: pulumi.Input<string>;
+        /**
+         * Only if `portAuth`=`dot1x` reauthentication interval range
+         */
+        reauthInterval?: pulumi.Input<number>;
+        /**
+         * Only if `portAuth`==`dot1x` sets server fail fallback vlan
+         */
+        serverFailNetwork?: pulumi.Input<string>;
+        /**
+         * Only if `portAuth`==`dot1x` when radius server reject / fails
+         */
+        serverRejectNetwork?: pulumi.Input<string>;
+        /**
+         * enum: `100m`, `10m`, `1g`, `2.5g`, `5g`, `10g`, `25g`, `40g`, `100g`,`auto`
          */
         speed?: pulumi.Input<string>;
+        /**
+         * Switch storm control
+         */
+        stormControl?: pulumi.Input<inputs.device.SwitchLocalPortConfigStormControl>;
+        /**
+         * when enabled, the port is not expected to receive BPDU frames
+         */
+        stpEdge?: pulumi.Input<boolean>;
+        stpNoRootPort?: pulumi.Input<boolean>;
+        stpP2p?: pulumi.Input<boolean>;
         /**
          * port usage name.
-         *
-         * If EVPN is used, use `evpnUplink`or `evpnDownlink`
          */
         usage: pulumi.Input<string>;
+        /**
+         * if this is connected to a vstp network
+         */
+        useVstp?: pulumi.Input<boolean>;
+        /**
+         * network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
+         */
+        voipNetwork?: pulumi.Input<string>;
+    }
+    interface SwitchLocalPortConfigStormControl {
+        /**
+         * whether to disable storm control on broadcast traffic
+         */
+        noBroadcast?: pulumi.Input<boolean>;
+        /**
+         * whether to disable storm control on multicast traffic
+         */
+        noMulticast?: pulumi.Input<boolean>;
+        /**
+         * whether to disable storm control on registered multicast traffic
+         */
+        noRegisteredMulticast?: pulumi.Input<boolean>;
+        /**
+         * whether to disable storm control on unknown unicast traffic
+         */
+        noUnknownUnicast?: pulumi.Input<boolean>;
+        /**
+         * bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
+         */
+        percentage?: pulumi.Input<number>;
     }
     interface SwitchMistNac {
         enabled?: pulumi.Input<boolean>;
         network?: pulumi.Input<string>;
     }
     interface SwitchNetworks {
+        /**
+         * only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
+         */
+        gateway?: pulumi.Input<string>;
+        /**
+         * only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
+         */
+        gateway6?: pulumi.Input<string>;
         /**
          * whether to stop clients to talk to each other, default is false (when enabled, a unique isolationVlanId is required)
          * NOTE: this features requires uplink device to also a be Juniper device and `interSwitchLink` to be set
@@ -2014,6 +2148,10 @@ export declare namespace device {
          * optional for pure switching, required when L3 / routing features are used
          */
         subnet?: pulumi.Input<string>;
+        /**
+         * optional for pure switching, required when L3 / routing features are used
+         */
+        subnet6?: pulumi.Input<string>;
         vlanId: pulumi.Input<string>;
     }
     interface SwitchOobIpConfig {
@@ -2032,7 +2170,7 @@ export declare namespace device {
          */
         type?: pulumi.Input<string>;
         /**
-         * f supported on the platform. If enabled, DNS will be using this routing-instance, too
+         * if supported on the platform. If enabled, DNS will be using this routing-instance, too
          */
         useMgmtVrf?: pulumi.Input<boolean>;
         /**
@@ -2156,13 +2294,11 @@ export declare namespace device {
         noLocalOverwrite?: pulumi.Input<boolean>;
         poeDisabled?: pulumi.Input<boolean>;
         /**
-         * enum: `100m`, `10m`, `1g`, `2.5g`, `5g`, `auto`
+         * enum: `100m`, `10m`, `1g`, `2.5g`, `5g`, `10g`, `25g`, `40g`, `100g`,`auto`
          */
         speed?: pulumi.Input<string>;
         /**
-         * port usage name.
-         *
-         * If EVPN is used, use `evpnUplink`or `evpnDownlink`
+         * port usage name. If EVPN is used, use `evpnUplink`or `evpnDownlink`
          */
         usage: pulumi.Input<string>;
     }
@@ -2194,9 +2330,9 @@ export declare namespace device {
          */
         allNetworks?: pulumi.Input<boolean>;
         /**
-         * Only if `mode`!=`dynamic` if DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allowDhcpd is a tri_state.
-         *
-         * When it is not defined, it means using the system’s default setting which depends on whether the port is a access or trunk port.
+         * Only if `mode`!=`dynamic`. If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with.
+         * All the interfaces from port configs using this port usage are effected. Please notice that allowDhcpd is a tri_state.
+         * When it is not defined, it means using the system's default setting which depends on whether the port is a access or trunk port.
          */
         allowDhcpd?: pulumi.Input<boolean>;
         /**
@@ -2265,7 +2401,7 @@ export declare namespace device {
          */
         macLimit?: pulumi.Input<number>;
         /**
-         * `mode`==`dynamic` must only be used with the port usage with the name `dynamic`. enum: `access`, `dynamic`, `inet`, `trunk`
+         * `mode`==`dynamic` must only be used if the port usage name is `dynamic`. enum: `access`, `dynamic`, `inet`, `trunk`
          */
         mode?: pulumi.Input<string>;
         /**
@@ -2313,7 +2449,7 @@ export declare namespace device {
          */
         serverRejectNetwork?: pulumi.Input<string>;
         /**
-         * Only if `mode`!=`dynamic` speed, default is auto to automatically negotiate speed
+         * Only if `mode`!=`dynamic` speed, default is auto to automatically negotiate speed enum: `100m`, `10m`, `1g`, `2.5g`, `5g`, `10g`, `25g`, `40g`, `100g`,`auto`
          */
         speed?: pulumi.Input<string>;
         /**
@@ -3619,8 +3755,8 @@ export declare namespace org {
          *   * enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
          *   * sub option code: 1-255, sub-option code'
          */
-        vendorEncapulated?: pulumi.Input<{
-            [key: string]: pulumi.Input<inputs.org.DeviceprofileGatewayDhcpdConfigConfigVendorEncapulated>;
+        vendorEncapsulated?: pulumi.Input<{
+            [key: string]: pulumi.Input<inputs.org.DeviceprofileGatewayDhcpdConfigConfigVendorEncapsulated>;
         }>;
     }
     interface DeviceprofileGatewayDhcpdConfigConfigFixedBindings {
@@ -3634,7 +3770,7 @@ export declare namespace org {
         type?: pulumi.Input<string>;
         value?: pulumi.Input<string>;
     }
-    interface DeviceprofileGatewayDhcpdConfigConfigVendorEncapulated {
+    interface DeviceprofileGatewayDhcpdConfigConfigVendorEncapsulated {
         /**
          * enum: `boolean`, `hex`, `int16`, `int32`, `ip`, `string`, `uint16`, `uint32`
          */
@@ -4354,7 +4490,7 @@ export declare namespace org {
          */
         idpprofileId?: pulumi.Input<string>;
         /**
-         * `strict` (default) / `standard` / or keys from from idp_profiles
+         * enum: `Custom`, `strict` (default), `standard` or keys from from idp_profiles
          */
         profile?: pulumi.Input<string>;
     }
@@ -4630,6 +4766,93 @@ export declare namespace org {
     interface DeviceprofileGatewayVrfInstances {
         networks?: pulumi.Input<pulumi.Input<string>[]>;
     }
+    interface EvpnTopologyEvpnOptions {
+        /**
+         * optional, for dhcp_relay, unique loopback IPs are required for ERB or IPClos where we can set option-82 server_id-overrides
+         */
+        autoLoopbackSubnet?: pulumi.Input<string>;
+        /**
+         * optional, for dhcp_relay, unique loopback IPs are required for ERB or IPClos where we can set option-82 server_id-overrides
+         */
+        autoLoopbackSubnet6?: pulumi.Input<string>;
+        /**
+         * optional, this generates routerId automatically, if specified, `routerIdPrefix` is ignored
+         */
+        autoRouterIdSubnet?: pulumi.Input<string>;
+        /**
+         * optional, this generates routerId automatically, if specified, `routerIdPrefix` is ignored
+         */
+        autoRouterIdSubnet6?: pulumi.Input<string>;
+        /**
+         * optional, for ERB or CLOS, you can either use esilag to upstream routers or to also be the virtual-gateway
+         * when `routedAt` != `core`, whether to do virtual-gateway at core as well
+         */
+        coreAsBorder?: pulumi.Input<boolean>;
+        overlay?: pulumi.Input<inputs.org.EvpnTopologyEvpnOptionsOverlay>;
+        /**
+         * by default, JUNOS uses 00-00-5e-00-01-01 as the virtual-gateway-address's v4Mac
+         * if enabled, 00-00-5e-00-XX-YY will be used (where XX=vlan_id/256, YY=vlan_id%256)
+         */
+        perVlanVgaV4Mac?: pulumi.Input<boolean>;
+        /**
+         * optional, where virtual-gateway should reside. enum: `core`, `distribution`, `edge`
+         */
+        routedAt?: pulumi.Input<string>;
+        underlay?: pulumi.Input<inputs.org.EvpnTopologyEvpnOptionsUnderlay>;
+        /**
+         * optional, for EX9200 only to seggregate virtual-switches
+         */
+        vsInstances?: pulumi.Input<{
+            [key: string]: pulumi.Input<inputs.org.EvpnTopologyEvpnOptionsVsInstances>;
+        }>;
+    }
+    interface EvpnTopologyEvpnOptionsOverlay {
+        /**
+         * Overlay BGP Local AS Number
+         */
+        as?: pulumi.Input<number>;
+    }
+    interface EvpnTopologyEvpnOptionsUnderlay {
+        /**
+         * Underlay BGP Base AS Number
+         */
+        asBase?: pulumi.Input<number>;
+        routedIdPrefix?: pulumi.Input<string>;
+        /**
+         * underlay subnet, by default, `10.255.240.0/20`, or `fd31:5700::/64` for ipv6
+         */
+        subnet?: pulumi.Input<string>;
+        /**
+         * if v6 is desired for underlay
+         */
+        useIpv6?: pulumi.Input<boolean>;
+    }
+    interface EvpnTopologyEvpnOptionsVsInstances {
+        networks?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface EvpnTopologySwitches {
+        deviceprofileId?: pulumi.Input<string>;
+        evpnId?: pulumi.Input<number>;
+        mac?: pulumi.Input<string>;
+        model?: pulumi.Input<string>;
+        /**
+         * optionally, for distribution / access / esilag-access, they can be placed into different pods. e.g.
+         *   * for CLOS, to group dist / access switches into pods
+         *   * for ERB/CRB, to group dist / esilag-access into pods
+         */
+        pod?: pulumi.Input<number>;
+        /**
+         * by default, core switches are assumed to be connecting all pods.
+         * if you want to limit the pods, you can specify pods.
+         */
+        pods?: pulumi.Input<pulumi.Input<number>[]>;
+        /**
+         * use `role`==`none` to remove a switch from the topology. enum: `access`, `collapsed-core`, `core`, `distribution`, `esilag-access`, `none`
+         */
+        role: pulumi.Input<string>;
+        routerId?: pulumi.Input<string>;
+        siteId?: pulumi.Input<string>;
+    }
     interface GatewaytemplateBgpConfig {
         authKey?: pulumi.Input<string>;
         /**
@@ -4797,8 +5020,8 @@ export declare namespace org {
          *   * enterprise number: 1-65535 (https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers)
          *   * sub option code: 1-255, sub-option code'
          */
-        vendorEncapulated?: pulumi.Input<{
-            [key: string]: pulumi.Input<inputs.org.GatewaytemplateDhcpdConfigConfigVendorEncapulated>;
+        vendorEncapsulated?: pulumi.Input<{
+            [key: string]: pulumi.Input<inputs.org.GatewaytemplateDhcpdConfigConfigVendorEncapsulated>;
         }>;
     }
     interface GatewaytemplateDhcpdConfigConfigFixedBindings {
@@ -4812,7 +5035,7 @@ export declare namespace org {
         type?: pulumi.Input<string>;
         value?: pulumi.Input<string>;
     }
-    interface GatewaytemplateDhcpdConfigConfigVendorEncapulated {
+    interface GatewaytemplateDhcpdConfigConfigVendorEncapsulated {
         /**
          * enum: `boolean`, `hex`, `int16`, `int32`, `ip`, `string`, `uint16`, `uint32`
          */
@@ -5532,7 +5755,7 @@ export declare namespace org {
          */
         idpprofileId?: pulumi.Input<string>;
         /**
-         * `strict` (default) / `standard` / or keys from from idp_profiles
+         * enum: `Custom`, `strict` (default), `standard` or keys from from idp_profiles
          */
         profile?: pulumi.Input<string>;
     }
@@ -6225,6 +6448,14 @@ export declare namespace org {
         network?: pulumi.Input<string>;
     }
     interface NetworktemplateNetworks {
+        /**
+         * only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
+         */
+        gateway?: pulumi.Input<string>;
+        /**
+         * only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
+         */
+        gateway6?: pulumi.Input<string>;
         /**
          * whether to stop clients to talk to each other, default is false (when enabled, a unique isolationVlanId is required)
          * NOTE: this features requires uplink device to also a be Juniper device and `interSwitchLink` to be set
@@ -6235,6 +6466,10 @@ export declare namespace org {
          * optional for pure switching, required when L3 / routing features are used
          */
         subnet?: pulumi.Input<string>;
+        /**
+         * optional for pure switching, required when L3 / routing features are used
+         */
+        subnet6?: pulumi.Input<string>;
         vlanId: pulumi.Input<string>;
     }
     interface NetworktemplateOspfAreas {
@@ -6309,9 +6544,9 @@ export declare namespace org {
          */
         allNetworks?: pulumi.Input<boolean>;
         /**
-         * Only if `mode`!=`dynamic` if DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allowDhcpd is a tri_state.
-         *
-         * When it is not defined, it means using the system’s default setting which depends on whether the port is a access or trunk port.
+         * Only if `mode`!=`dynamic`. If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with.
+         * All the interfaces from port configs using this port usage are effected. Please notice that allowDhcpd is a tri_state.
+         * When it is not defined, it means using the system's default setting which depends on whether the port is a access or trunk port.
          */
         allowDhcpd?: pulumi.Input<boolean>;
         /**
@@ -6380,7 +6615,7 @@ export declare namespace org {
          */
         macLimit?: pulumi.Input<number>;
         /**
-         * `mode`==`dynamic` must only be used with the port usage with the name `dynamic`. enum: `access`, `dynamic`, `inet`, `trunk`
+         * `mode`==`dynamic` must only be used if the port usage name is `dynamic`. enum: `access`, `dynamic`, `inet`, `trunk`
          */
         mode?: pulumi.Input<string>;
         /**
@@ -6428,7 +6663,7 @@ export declare namespace org {
          */
         serverRejectNetwork?: pulumi.Input<string>;
         /**
-         * Only if `mode`!=`dynamic` speed, default is auto to automatically negotiate speed
+         * Only if `mode`!=`dynamic` speed, default is auto to automatically negotiate speed enum: `100m`, `10m`, `1g`, `2.5g`, `5g`, `10g`, `25g`, `40g`, `100g`,`auto`
          */
         speed?: pulumi.Input<string>;
         /**
@@ -6442,6 +6677,10 @@ export declare namespace org {
         stpEdge?: pulumi.Input<boolean>;
         stpNoRootPort?: pulumi.Input<boolean>;
         stpP2p?: pulumi.Input<boolean>;
+        /**
+         * optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
+         */
+        uiEvpntopoId?: pulumi.Input<string>;
         /**
          * if this is connected to a vstp network
          */
@@ -6872,13 +7111,14 @@ export declare namespace org {
     }
     interface NetworktemplateSwitchMatching {
         enable?: pulumi.Input<boolean>;
+        /**
+         * list of rules to define custom switch configuration based on different criterias. Each list must have at least one of `matchModel`, `matchName` or `matchRole` must be defined
+         */
         rules?: pulumi.Input<pulumi.Input<inputs.org.NetworktemplateSwitchMatchingRule>[]>;
     }
     interface NetworktemplateSwitchMatchingRule {
         /**
-         * additional CLI commands to append to the generated Junos config
-         *
-         * **Note**: no check is done
+         * additional CLI commands to append to the generated Junos config. **Note**: no check is done
          */
         additionalConfigCmds?: pulumi.Input<pulumi.Input<string>[]>;
         /**
@@ -6886,13 +7126,32 @@ export declare namespace org {
          */
         ipConfig?: pulumi.Input<inputs.org.NetworktemplateSwitchMatchingRuleIpConfig>;
         /**
-         * role to match
+         * string the switch model must start with to use this rule. It is possible to combine with the `matchName` and `matchRole` attributes
+         */
+        matchModel?: pulumi.Input<string>;
+        /**
+         * string the switch name must start with to use this rule. Use the `matchNameOffset` to indicate the first character of the switch name to compare to. It is possible to combine with the `matchModel` and `matchRole` attributes
+         */
+        matchName?: pulumi.Input<string>;
+        /**
+         * first character of the switch name to compare to the `matchName` value
+         */
+        matchNameOffset?: pulumi.Input<number>;
+        /**
+         * string the switch role must start with to use this rule. It is possible to combine with the `matchName` and `matchModel` attributes
          */
         matchRole?: pulumi.Input<string>;
         /**
          * 'property key define the type of matching, value is the string to match. e.g: `match_name[0:3]`, `match_name[2:6]`, `matchModel`,  `match_model[0-6]`
+         *
+         * @deprecated The `matchType` attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the `matchName`, `matchModel` and `matchRole`attribuites and may be removed in future versions.
+Please update your configurations.
          */
         matchType?: pulumi.Input<string>;
+        /**
+         * @deprecated The `matchValue` attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the `matchName`, `matchModel` and `matchRole`attribuites and may be removed in future versions.
+Please update your configurations.
+         */
         matchValue?: pulumi.Input<string>;
         name?: pulumi.Input<string>;
         /**
@@ -6929,7 +7188,7 @@ export declare namespace org {
          */
         type?: pulumi.Input<string>;
         /**
-         * f supported on the platform. If enabled, DNS will be using this routing-instance, too
+         * if supported on the platform. If enabled, DNS will be using this routing-instance, too
          */
         useMgmtVrf?: pulumi.Input<boolean>;
         /**
@@ -6979,13 +7238,11 @@ export declare namespace org {
         noLocalOverwrite?: pulumi.Input<boolean>;
         poeDisabled?: pulumi.Input<boolean>;
         /**
-         * enum: `100m`, `10m`, `1g`, `2.5g`, `5g`, `auto`
+         * enum: `100m`, `10m`, `1g`, `2.5g`, `5g`, `10g`, `25g`, `40g`, `100g`,`auto`
          */
         speed?: pulumi.Input<string>;
         /**
-         * port usage name.
-         *
-         * If EVPN is used, use `evpnUplink`or `evpnDownlink`
+         * port usage name. If EVPN is used, use `evpnUplink`or `evpnDownlink`
          */
         usage: pulumi.Input<string>;
     }
@@ -7511,10 +7768,11 @@ export declare namespace org {
         url?: pulumi.Input<string>;
     }
     interface SettingCradlepoint {
-        cpApiId: pulumi.Input<string>;
-        cpApiKey: pulumi.Input<string>;
-        ecmApiId: pulumi.Input<string>;
-        ecmApiKey: pulumi.Input<string>;
+        cpApiId?: pulumi.Input<string>;
+        cpApiKey?: pulumi.Input<string>;
+        ecmApiId?: pulumi.Input<string>;
+        ecmApiKey?: pulumi.Input<string>;
+        enableLldp?: pulumi.Input<boolean>;
     }
     interface SettingDeviceCert {
         cert: pulumi.Input<string>;
@@ -7932,6 +8190,10 @@ export declare namespace org {
          * Auth port of RADIUS server
          */
         port?: pulumi.Input<number>;
+        /**
+         * whether to require Message-Authenticator in requests
+         */
+        requireMessageAuthenticator?: pulumi.Input<boolean>;
         /**
          * secret of RADIUS server
          */
@@ -8065,6 +8327,15 @@ export declare namespace org {
         venueName?: pulumi.Input<string>;
     }
     interface WlanInjectDhcpOption82 {
+        /**
+         * information to set in the `circuitId` field of the DHCP Option 82. It is possible to use static string or the following variables (e.g. `{{SSID}}:{{AP_MAC}}`):
+         *   * {{AP_MAC}}
+         *   * {{AP_MAC_DASHED}}
+         *   * {{AP_MODEL}}
+         *   * {{AP_NAME}}
+         *   * {{SITE_NAME}}
+         *   * {{SSID}}
+         */
         circuitId?: pulumi.Input<string>;
         /**
          * whether to inject option 82 when forwarding DHCP packets
@@ -8084,6 +8355,10 @@ export declare namespace org {
         enabled?: pulumi.Input<boolean>;
     }
     interface WlanPortal {
+        /**
+         * whether to allow guest to connect to other Guest WLANs (with different `WLAN.ssid`) of same org without reauthentication (disable randomMac for seamless roaming)
+         */
+        allowWlanIdRoam?: pulumi.Input<boolean>;
         /**
          * amazon OAuth2 client id. This is optional. If not provided, it will use a default one.
          */
@@ -8333,28 +8608,31 @@ export declare namespace org {
             [key: string]: pulumi.Input<string>;
         }>;
         /**
-         * default role to assign if there’s no match. By default, an assertion is treated as invalid when there’s no role matched
+         * if `wlanPortalAuth`==`sso`, default role to assign if there’s no match. By default, an assertion is treated as invalid when there’s no role matched
          */
         ssoDefaultRole?: pulumi.Input<string>;
+        /**
+         * if `wlanPortalAuth`==`sso`
+         */
         ssoForcedRole?: pulumi.Input<string>;
         /**
-         * IDP Cert (used to verify the signed response)
+         * if `wlanPortalAuth`==`sso`, IDP Cert (used to verify the signed response)
          */
         ssoIdpCert?: pulumi.Input<string>;
         /**
-         * signing algorithm for SAML Assertion
+         * if `wlanPortalAuth`==`sso`, Signing algorithm for SAML Assertion. enum: `sha1`, `sha256`, `sha384`, `sha512`
          */
         ssoIdpSignAlgo?: pulumi.Input<string>;
         /**
-         * IDP Single-Sign-On URL
+         * if `wlanPortalAuth`==`sso`, IDP Single-Sign-On URL
          */
         ssoIdpSsoUrl?: pulumi.Input<string>;
         /**
-         * IDP issuer URL
+         * if `wlanPortalAuth`==`sso`, IDP issuer URL
          */
         ssoIssuer?: pulumi.Input<string>;
         /**
-         * enum: `email`, `unspecified`
+         * if `wlanPortalAuth`==`sso`. enum: `email`, `unspecified`
          */
         ssoNameidFormat?: pulumi.Input<string>;
         /**
@@ -9087,6 +9365,33 @@ export declare namespace org {
         host?: pulumi.Input<string>;
         port?: pulumi.Input<number>;
     }
+    interface WlanRateset {
+        /**
+         * if `template`==`custom`. MCS bitmasks for 4 streams (16-bit for each stream, MCS0 is least significant bit), e.g. 00ff 00f0 001f limits HT rates to MCS 0-7 for 1 stream, MCS 4-7 for 2 stream (i.e. MCS 12-15), MCS 1-5 for 3 stream (i.e. MCS 16-20)
+         */
+        ht?: pulumi.Input<string>;
+        /**
+         * if `template`==`custom`. List of supported rates (IE=1) and extended supported rates (IE=50) for custom template, append ‘b’ at the end to indicate a rate being basic/mandatory. If `template`==`custom` is configured and legacy does not define at least one basic rate, it will use `no-legacy` default values. enum: `1`, `11`, `11b`, `12`, `12b`, `18`, `18b`, `1b`, `2`, `24`, `24b`, `2b`, `36`, `36b`, `48`, `48b`, `5.5`, `5.5b`, `54`, `54b`, `6`, `6b`, `9`, `9b`
+         */
+        legacies?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Minimum RSSI for client to connect, 0 means not enforcing
+         */
+        minRssi?: pulumi.Input<number>;
+        /**
+         * Data Rates template to apply. enum:
+         *   * `no-legacy`: no 11b
+         *   * `compatible`: all, like before, default setting that Broadcom/Atheros used
+         *   * `legacy-only`: disable 802.11n and 802.11ac
+         *   * `high-density`: no 11b, no low rates
+         *   * `custom`: user defined
+         */
+        template?: pulumi.Input<string>;
+        /**
+         * if `template`==`custom`. MCS bitmasks for 4 streams (16-bit for each stream, MCS0 is least significant bit), e.g. 03ff 01ff 00ff limits VHT rates to MCS 0-9 for 1 stream, MCS 0-8 for 2 streams, and MCS 0-7 for 3 streams.
+         */
+        vht?: pulumi.Input<string>;
+    }
     interface WlanSchedule {
         enabled?: pulumi.Input<boolean>;
         /**
@@ -9146,6 +9451,93 @@ export declare namespace site {
         lat: pulumi.Input<number>;
         lng: pulumi.Input<number>;
     }
+    interface EvpnTopologyEvpnOptions {
+        /**
+         * optional, for dhcp_relay, unique loopback IPs are required for ERB or IPClos where we can set option-82 server_id-overrides
+         */
+        autoLoopbackSubnet?: pulumi.Input<string>;
+        /**
+         * optional, for dhcp_relay, unique loopback IPs are required for ERB or IPClos where we can set option-82 server_id-overrides
+         */
+        autoLoopbackSubnet6?: pulumi.Input<string>;
+        /**
+         * optional, this generates routerId automatically, if specified, `routerIdPrefix` is ignored
+         */
+        autoRouterIdSubnet?: pulumi.Input<string>;
+        /**
+         * optional, this generates routerId automatically, if specified, `routerIdPrefix` is ignored
+         */
+        autoRouterIdSubnet6?: pulumi.Input<string>;
+        /**
+         * optional, for ERB or CLOS, you can either use esilag to upstream routers or to also be the virtual-gateway
+         * when `routedAt` != `core`, whether to do virtual-gateway at core as well
+         */
+        coreAsBorder?: pulumi.Input<boolean>;
+        overlay?: pulumi.Input<inputs.site.EvpnTopologyEvpnOptionsOverlay>;
+        /**
+         * by default, JUNOS uses 00-00-5e-00-01-01 as the virtual-gateway-address's v4Mac
+         * if enabled, 00-00-5e-00-XX-YY will be used (where XX=vlan_id/256, YY=vlan_id%256)
+         */
+        perVlanVgaV4Mac?: pulumi.Input<boolean>;
+        /**
+         * optional, where virtual-gateway should reside. enum: `core`, `distribution`, `edge`
+         */
+        routedAt?: pulumi.Input<string>;
+        underlay?: pulumi.Input<inputs.site.EvpnTopologyEvpnOptionsUnderlay>;
+        /**
+         * optional, for EX9200 only to seggregate virtual-switches
+         */
+        vsInstances?: pulumi.Input<{
+            [key: string]: pulumi.Input<inputs.site.EvpnTopologyEvpnOptionsVsInstances>;
+        }>;
+    }
+    interface EvpnTopologyEvpnOptionsOverlay {
+        /**
+         * Overlay BGP Local AS Number
+         */
+        as?: pulumi.Input<number>;
+    }
+    interface EvpnTopologyEvpnOptionsUnderlay {
+        /**
+         * Underlay BGP Base AS Number
+         */
+        asBase?: pulumi.Input<number>;
+        routedIdPrefix?: pulumi.Input<string>;
+        /**
+         * underlay subnet, by default, `10.255.240.0/20`, or `fd31:5700::/64` for ipv6
+         */
+        subnet?: pulumi.Input<string>;
+        /**
+         * if v6 is desired for underlay
+         */
+        useIpv6?: pulumi.Input<boolean>;
+    }
+    interface EvpnTopologyEvpnOptionsVsInstances {
+        networks?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface EvpnTopologySwitches {
+        deviceprofileId?: pulumi.Input<string>;
+        evpnId?: pulumi.Input<number>;
+        mac?: pulumi.Input<string>;
+        model?: pulumi.Input<string>;
+        /**
+         * optionally, for distribution / access / esilag-access, they can be placed into different pods. e.g.
+         *   * for CLOS, to group dist / access switches into pods
+         *   * for ERB/CRB, to group dist / esilag-access into pods
+         */
+        pod?: pulumi.Input<number>;
+        /**
+         * by default, core switches are assumed to be connecting all pods.
+         * if you want to limit the pods, you can specify pods.
+         */
+        pods?: pulumi.Input<pulumi.Input<number>[]>;
+        /**
+         * use `role`==`none` to remove a switch from the topology. enum: `access`, `collapsed-core`, `core`, `distribution`, `esilag-access`, `none`
+         */
+        role: pulumi.Input<string>;
+        routerId?: pulumi.Input<string>;
+        siteId?: pulumi.Input<string>;
+    }
     interface NetworktemplateAclPolicy {
         /**
          * - for GBP-based policy, all srcTags and dstTags have to be gbp-based
@@ -9293,6 +9685,14 @@ export declare namespace site {
         network?: pulumi.Input<string>;
     }
     interface NetworktemplateNetworks {
+        /**
+         * only required for EVPN-VXLAN networks, IPv4 Virtual Gateway
+         */
+        gateway?: pulumi.Input<string>;
+        /**
+         * only required for EVPN-VXLAN networks, IPv6 Virtual Gateway
+         */
+        gateway6?: pulumi.Input<string>;
         /**
          * whether to stop clients to talk to each other, default is false (when enabled, a unique isolationVlanId is required)
          * NOTE: this features requires uplink device to also a be Juniper device and `interSwitchLink` to be set
@@ -9303,6 +9703,10 @@ export declare namespace site {
          * optional for pure switching, required when L3 / routing features are used
          */
         subnet?: pulumi.Input<string>;
+        /**
+         * optional for pure switching, required when L3 / routing features are used
+         */
+        subnet6?: pulumi.Input<string>;
         vlanId: pulumi.Input<string>;
     }
     interface NetworktemplateOspfAreas {
@@ -9377,9 +9781,9 @@ export declare namespace site {
          */
         allNetworks?: pulumi.Input<boolean>;
         /**
-         * Only if `mode`!=`dynamic` if DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allowDhcpd is a tri_state.
-         *
-         * When it is not defined, it means using the system’s default setting which depends on whether the port is a access or trunk port.
+         * Only if `mode`!=`dynamic`. If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with.
+         * All the interfaces from port configs using this port usage are effected. Please notice that allowDhcpd is a tri_state.
+         * When it is not defined, it means using the system's default setting which depends on whether the port is a access or trunk port.
          */
         allowDhcpd?: pulumi.Input<boolean>;
         /**
@@ -9448,7 +9852,7 @@ export declare namespace site {
          */
         macLimit?: pulumi.Input<number>;
         /**
-         * `mode`==`dynamic` must only be used with the port usage with the name `dynamic`. enum: `access`, `dynamic`, `inet`, `trunk`
+         * `mode`==`dynamic` must only be used if the port usage name is `dynamic`. enum: `access`, `dynamic`, `inet`, `trunk`
          */
         mode?: pulumi.Input<string>;
         /**
@@ -9496,7 +9900,7 @@ export declare namespace site {
          */
         serverRejectNetwork?: pulumi.Input<string>;
         /**
-         * Only if `mode`!=`dynamic` speed, default is auto to automatically negotiate speed
+         * Only if `mode`!=`dynamic` speed, default is auto to automatically negotiate speed enum: `100m`, `10m`, `1g`, `2.5g`, `5g`, `10g`, `25g`, `40g`, `100g`,`auto`
          */
         speed?: pulumi.Input<string>;
         /**
@@ -9510,6 +9914,10 @@ export declare namespace site {
         stpEdge?: pulumi.Input<boolean>;
         stpNoRootPort?: pulumi.Input<boolean>;
         stpP2p?: pulumi.Input<boolean>;
+        /**
+         * optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
+         */
+        uiEvpntopoId?: pulumi.Input<string>;
         /**
          * if this is connected to a vstp network
          */
@@ -9940,13 +10348,14 @@ export declare namespace site {
     }
     interface NetworktemplateSwitchMatching {
         enable?: pulumi.Input<boolean>;
+        /**
+         * list of rules to define custom switch configuration based on different criterias. Each list must have at least one of `matchModel`, `matchName` or `matchRole` must be defined
+         */
         rules?: pulumi.Input<pulumi.Input<inputs.site.NetworktemplateSwitchMatchingRule>[]>;
     }
     interface NetworktemplateSwitchMatchingRule {
         /**
-         * additional CLI commands to append to the generated Junos config
-         *
-         * **Note**: no check is done
+         * additional CLI commands to append to the generated Junos config. **Note**: no check is done
          */
         additionalConfigCmds?: pulumi.Input<pulumi.Input<string>[]>;
         /**
@@ -9954,13 +10363,32 @@ export declare namespace site {
          */
         ipConfig?: pulumi.Input<inputs.site.NetworktemplateSwitchMatchingRuleIpConfig>;
         /**
-         * role to match
+         * string the switch model must start with to use this rule. It is possible to combine with the `matchName` and `matchRole` attributes
+         */
+        matchModel?: pulumi.Input<string>;
+        /**
+         * string the switch name must start with to use this rule. Use the `matchNameOffset` to indicate the first character of the switch name to compare to. It is possible to combine with the `matchModel` and `matchRole` attributes
+         */
+        matchName?: pulumi.Input<string>;
+        /**
+         * first character of the switch name to compare to the `matchName` value
+         */
+        matchNameOffset?: pulumi.Input<number>;
+        /**
+         * string the switch role must start with to use this rule. It is possible to combine with the `matchName` and `matchModel` attributes
          */
         matchRole?: pulumi.Input<string>;
         /**
          * 'property key define the type of matching, value is the string to match. e.g: `match_name[0:3]`, `match_name[2:6]`, `matchModel`,  `match_model[0-6]`
+         *
+         * @deprecated The `matchType` attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the `matchName`, `matchModel` and `matchRole`attribuites and may be removed in future versions.
+Please update your configurations.
          */
         matchType?: pulumi.Input<string>;
+        /**
+         * @deprecated The `matchValue` attribute has been deprecated in version v0.2.8 of the Juniper-Mist Provider. It has been replaced with the `matchName`, `matchModel` and `matchRole`attribuites and may be removed in future versions.
+Please update your configurations.
+         */
         matchValue?: pulumi.Input<string>;
         name?: pulumi.Input<string>;
         /**
@@ -9997,7 +10425,7 @@ export declare namespace site {
          */
         type?: pulumi.Input<string>;
         /**
-         * f supported on the platform. If enabled, DNS will be using this routing-instance, too
+         * if supported on the platform. If enabled, DNS will be using this routing-instance, too
          */
         useMgmtVrf?: pulumi.Input<boolean>;
         /**
@@ -10047,13 +10475,11 @@ export declare namespace site {
         noLocalOverwrite?: pulumi.Input<boolean>;
         poeDisabled?: pulumi.Input<boolean>;
         /**
-         * enum: `100m`, `10m`, `1g`, `2.5g`, `5g`, `auto`
+         * enum: `100m`, `10m`, `1g`, `2.5g`, `5g`, `10g`, `25g`, `40g`, `100g`,`auto`
          */
         speed?: pulumi.Input<string>;
         /**
-         * port usage name.
-         *
-         * If EVPN is used, use `evpnUplink`or `evpnDownlink`
+         * port usage name. If EVPN is used, use `evpnUplink`or `evpnDownlink`
          */
         usage: pulumi.Input<string>;
     }
@@ -10182,16 +10608,6 @@ export declare namespace site {
         secret?: pulumi.Input<string>;
         timeout?: pulumi.Input<number>;
     }
-    interface NetworktemplateUplinkPortConfig {
-        /**
-         * Whether to do 802.1x against uplink switch. When enaled, AP cert will be used to do EAP-TLS and the Org's CA Cert has to be provisioned at the switch
-         */
-        dot1x?: pulumi.Input<boolean>;
-        /**
-         * by default, WLANs are disabled when uplink is down. In some scenario, like SiteSurvey, one would want the AP to keep sending beacons.
-         */
-        keepWlansUpIfDown?: pulumi.Input<boolean>;
-    }
     interface NetworktemplateVrfConfig {
         /**
          * whether to enable VRF (when supported on the device)
@@ -10336,7 +10752,7 @@ export declare namespace site {
          */
         ibeaconUuid?: pulumi.Input<string>;
         /**
-         * required if `powerMode`==`custom`
+         * required if `powerMode`==`custom`; else use `powerMode` as default
          */
         power?: pulumi.Input<number>;
         /**
@@ -10655,7 +11071,7 @@ export declare namespace site {
         /**
          * any / HH:MM (24-hour format)
          */
-        timeOdFay?: pulumi.Input<string>;
+        timeOfDay?: pulumi.Input<string>;
     }
     interface SettingUplinkPortConfig {
         /**
@@ -10906,6 +11322,10 @@ export declare namespace site {
          * Auth port of RADIUS server
          */
         port?: pulumi.Input<number>;
+        /**
+         * whether to require Message-Authenticator in requests
+         */
+        requireMessageAuthenticator?: pulumi.Input<boolean>;
         /**
          * secret of RADIUS server
          */
@@ -11039,6 +11459,15 @@ export declare namespace site {
         venueName?: pulumi.Input<string>;
     }
     interface WlanInjectDhcpOption82 {
+        /**
+         * information to set in the `circuitId` field of the DHCP Option 82. It is possible to use static string or the following variables (e.g. `{{SSID}}:{{AP_MAC}}`):
+         *   * {{AP_MAC}}
+         *   * {{AP_MAC_DASHED}}
+         *   * {{AP_MODEL}}
+         *   * {{AP_NAME}}
+         *   * {{SITE_NAME}}
+         *   * {{SSID}}
+         */
         circuitId?: pulumi.Input<string>;
         /**
          * whether to inject option 82 when forwarding DHCP packets
@@ -11058,6 +11487,10 @@ export declare namespace site {
         enabled?: pulumi.Input<boolean>;
     }
     interface WlanPortal {
+        /**
+         * whether to allow guest to connect to other Guest WLANs (with different `WLAN.ssid`) of same org without reauthentication (disable randomMac for seamless roaming)
+         */
+        allowWlanIdRoam?: pulumi.Input<boolean>;
         /**
          * amazon OAuth2 client id. This is optional. If not provided, it will use a default one.
          */
@@ -11307,28 +11740,31 @@ export declare namespace site {
             [key: string]: pulumi.Input<string>;
         }>;
         /**
-         * default role to assign if there’s no match. By default, an assertion is treated as invalid when there’s no role matched
+         * if `wlanPortalAuth`==`sso`, default role to assign if there’s no match. By default, an assertion is treated as invalid when there’s no role matched
          */
         ssoDefaultRole?: pulumi.Input<string>;
+        /**
+         * if `wlanPortalAuth`==`sso`
+         */
         ssoForcedRole?: pulumi.Input<string>;
         /**
-         * IDP Cert (used to verify the signed response)
+         * if `wlanPortalAuth`==`sso`, IDP Cert (used to verify the signed response)
          */
         ssoIdpCert?: pulumi.Input<string>;
         /**
-         * signing algorithm for SAML Assertion
+         * if `wlanPortalAuth`==`sso`, Signing algorithm for SAML Assertion. enum: `sha1`, `sha256`, `sha384`, `sha512`
          */
         ssoIdpSignAlgo?: pulumi.Input<string>;
         /**
-         * IDP Single-Sign-On URL
+         * if `wlanPortalAuth`==`sso`, IDP Single-Sign-On URL
          */
         ssoIdpSsoUrl?: pulumi.Input<string>;
         /**
-         * IDP issuer URL
+         * if `wlanPortalAuth`==`sso`, IDP issuer URL
          */
         ssoIssuer?: pulumi.Input<string>;
         /**
-         * enum: `email`, `unspecified`
+         * if `wlanPortalAuth`==`sso`. enum: `email`, `unspecified`
          */
         ssoNameidFormat?: pulumi.Input<string>;
         /**
@@ -12061,6 +12497,33 @@ export declare namespace site {
         host?: pulumi.Input<string>;
         port?: pulumi.Input<number>;
     }
+    interface WlanRateset {
+        /**
+         * if `template`==`custom`. MCS bitmasks for 4 streams (16-bit for each stream, MCS0 is least significant bit), e.g. 00ff 00f0 001f limits HT rates to MCS 0-7 for 1 stream, MCS 4-7 for 2 stream (i.e. MCS 12-15), MCS 1-5 for 3 stream (i.e. MCS 16-20)
+         */
+        ht?: pulumi.Input<string>;
+        /**
+         * if `template`==`custom`. List of supported rates (IE=1) and extended supported rates (IE=50) for custom template, append ‘b’ at the end to indicate a rate being basic/mandatory. If `template`==`custom` is configured and legacy does not define at least one basic rate, it will use `no-legacy` default values. enum: `1`, `11`, `11b`, `12`, `12b`, `18`, `18b`, `1b`, `2`, `24`, `24b`, `2b`, `36`, `36b`, `48`, `48b`, `5.5`, `5.5b`, `54`, `54b`, `6`, `6b`, `9`, `9b`
+         */
+        legacies?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Minimum RSSI for client to connect, 0 means not enforcing
+         */
+        minRssi?: pulumi.Input<number>;
+        /**
+         * Data Rates template to apply. enum:
+         *   * `no-legacy`: no 11b
+         *   * `compatible`: all, like before, default setting that Broadcom/Atheros used
+         *   * `legacy-only`: disable 802.11n and 802.11ac
+         *   * `high-density`: no 11b, no low rates
+         *   * `custom`: user defined
+         */
+        template?: pulumi.Input<string>;
+        /**
+         * if `template`==`custom`. MCS bitmasks for 4 streams (16-bit for each stream, MCS0 is least significant bit), e.g. 03ff 01ff 00ff limits VHT rates to MCS 0-9 for 1 stream, MCS 0-8 for 2 streams, and MCS 0-7 for 3 streams.
+         */
+        vht?: pulumi.Input<string>;
+    }
     interface WlanSchedule {
         enabled?: pulumi.Input<boolean>;
         /**