@pulumi/juniper-mist 0.2.2 → 0.2.3-alpha.1740713631
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/device/ap.d.ts +75 -54
- package/device/ap.js +2 -0
- package/device/ap.js.map +1 -1
- package/device/base.d.ts +1 -1
- package/device/base.js +1 -1
- package/device/gateway.d.ts +24 -24
- package/device/image.d.ts +1 -1
- package/device/image.js +1 -1
- package/device/switch.d.ts +39 -39
- package/org/avprofile.d.ts +128 -0
- package/org/avprofile.js +111 -0
- package/org/avprofile.js.map +1 -0
- package/org/deviceprofileAp.d.ts +36 -30
- package/org/deviceprofileAp.js.map +1 -1
- package/org/deviceprofileGateway.d.ts +9 -9
- package/org/gatewaytemplate.d.ts +9 -9
- package/org/getAvprofiles.d.ts +71 -0
- package/org/getAvprofiles.js +66 -0
- package/org/getAvprofiles.js.map +1 -0
- package/org/getSsoRoles.d.ts +2 -2
- package/org/getSsoRoles.js +2 -2
- package/org/index.d.ts +6 -0
- package/org/index.js +10 -2
- package/org/index.js.map +1 -1
- package/org/inventory.d.ts +4 -4
- package/org/inventory.js +1 -1
- package/org/nactag.d.ts +54 -39
- package/org/nactag.js +2 -0
- package/org/nactag.js.map +1 -1
- package/org/networktemplate.d.ts +12 -12
- package/org/rftemplate.d.ts +6 -6
- package/org/servicepolicy.d.ts +29 -8
- package/org/servicepolicy.js +5 -1
- package/org/servicepolicy.js.map +1 -1
- package/org/setting.d.ts +24 -24
- package/org/sso.d.ts +11 -11
- package/org/ssoRole.d.ts +1 -1
- package/org/ssoRole.js +1 -1
- package/org/webhook.d.ts +39 -42
- package/org/webhook.js.map +1 -1
- package/org/wlan.d.ts +233 -233
- package/org/wlanPortalTemplate.d.ts +3 -3
- package/package.json +2 -2
- package/site/base.d.ts +1 -1
- package/site/base.js +1 -1
- package/site/networktemplate.d.ts +15 -15
- package/site/setting.d.ts +49 -49
- package/site/setting.js +1 -1
- package/site/webhook.d.ts +39 -42
- package/site/webhook.js.map +1 -1
- package/site/wlan.d.ts +233 -233
- package/site/wlanPortalTemplate.d.ts +3 -3
- package/types/input.d.ts +1394 -1276
- package/types/output.d.ts +1732 -1575
package/site/wlan.d.ts
CHANGED
|
@@ -59,45 +59,45 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
59
59
|
*/
|
|
60
60
|
static isInstance(obj: any): obj is Wlan;
|
|
61
61
|
/**
|
|
62
|
-
*
|
|
62
|
+
* Enable coa-immediate-update and address-change-immediate-update on the access profile.
|
|
63
63
|
*/
|
|
64
64
|
readonly acctImmediateUpdate: pulumi.Output<boolean>;
|
|
65
65
|
/**
|
|
66
|
-
*
|
|
66
|
+
* How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request
|
|
67
67
|
* from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended
|
|
68
68
|
* when enabled
|
|
69
69
|
*/
|
|
70
70
|
readonly acctInterimInterval: pulumi.Output<number>;
|
|
71
71
|
/**
|
|
72
|
-
*
|
|
72
|
+
* List of RADIUS accounting servers, optional, order matters where the first one is treated as primary
|
|
73
73
|
*/
|
|
74
74
|
readonly acctServers: pulumi.Output<outputs.site.WlanAcctServer[]>;
|
|
75
75
|
/**
|
|
76
|
-
*
|
|
76
|
+
* Airwatch wlan settings
|
|
77
77
|
*/
|
|
78
78
|
readonly airwatch: pulumi.Output<outputs.site.WlanAirwatch>;
|
|
79
79
|
/**
|
|
80
|
-
*
|
|
80
|
+
* Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through
|
|
81
81
|
*/
|
|
82
82
|
readonly allowIpv6Ndp: pulumi.Output<boolean>;
|
|
83
83
|
/**
|
|
84
|
-
*
|
|
84
|
+
* Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through
|
|
85
85
|
*/
|
|
86
86
|
readonly allowMdns: pulumi.Output<boolean>;
|
|
87
87
|
/**
|
|
88
|
-
*
|
|
88
|
+
* Only applicable when `limitBcast`==`true`, which allows SSDP
|
|
89
89
|
*/
|
|
90
90
|
readonly allowSsdp: pulumi.Output<boolean>;
|
|
91
91
|
/**
|
|
92
|
-
*
|
|
92
|
+
* List of device ids
|
|
93
93
|
*/
|
|
94
94
|
readonly apIds: pulumi.Output<string[]>;
|
|
95
95
|
/**
|
|
96
|
-
*
|
|
96
|
+
* Bandwidth limiting for apps (applies to up/down)
|
|
97
97
|
*/
|
|
98
98
|
readonly appLimit: pulumi.Output<outputs.site.WlanAppLimit>;
|
|
99
99
|
/**
|
|
100
|
-
*
|
|
100
|
+
* APp qos wlan settings
|
|
101
101
|
*/
|
|
102
102
|
readonly appQos: pulumi.Output<outputs.site.WlanAppQos>;
|
|
103
103
|
/**
|
|
@@ -105,11 +105,11 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
105
105
|
*/
|
|
106
106
|
readonly applyTo: pulumi.Output<string>;
|
|
107
107
|
/**
|
|
108
|
-
*
|
|
108
|
+
* Whether to enable smart arp filter
|
|
109
109
|
*/
|
|
110
110
|
readonly arpFilter: pulumi.Output<boolean>;
|
|
111
111
|
/**
|
|
112
|
-
*
|
|
112
|
+
* Authentication wlan settings
|
|
113
113
|
*/
|
|
114
114
|
readonly auth: pulumi.Output<outputs.site.WlanAuth | undefined>;
|
|
115
115
|
/**
|
|
@@ -117,36 +117,36 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
117
117
|
*/
|
|
118
118
|
readonly authServerSelection: pulumi.Output<string>;
|
|
119
119
|
/**
|
|
120
|
-
*
|
|
120
|
+
* List of RADIUS authentication servers, at least one is needed if `auth type`==`eap`, order matters where the first one
|
|
121
121
|
* is treated as primary
|
|
122
122
|
*/
|
|
123
123
|
readonly authServers: pulumi.Output<outputs.site.WlanAuthServer[]>;
|
|
124
124
|
/**
|
|
125
|
-
*
|
|
125
|
+
* Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers
|
|
126
126
|
*/
|
|
127
127
|
readonly authServersNasId: pulumi.Output<string>;
|
|
128
128
|
/**
|
|
129
|
-
*
|
|
129
|
+
* Optional, NAS-IP-ADDRESS to use
|
|
130
130
|
*/
|
|
131
131
|
readonly authServersNasIp: pulumi.Output<string>;
|
|
132
132
|
/**
|
|
133
|
-
*
|
|
134
|
-
*
|
|
135
|
-
*
|
|
133
|
+
* Radius auth session retries. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘retries’ are set
|
|
134
|
+
* to value of auth_servers_retries. ‘max-requests’ is also set when setting authServersRetries and is set to default
|
|
135
|
+
* value to 3.
|
|
136
136
|
*/
|
|
137
137
|
readonly authServersRetries: pulumi.Output<number>;
|
|
138
138
|
/**
|
|
139
|
-
*
|
|
140
|
-
* ‘
|
|
141
|
-
*
|
|
139
|
+
* Radius auth session timeout. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘quite-period’ and
|
|
140
|
+
* ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when
|
|
141
|
+
* setting authServersTimeout and is set to default value of 10.
|
|
142
142
|
*/
|
|
143
143
|
readonly authServersTimeout: pulumi.Output<number>;
|
|
144
144
|
/**
|
|
145
|
-
*
|
|
145
|
+
* Whether to enable band_steering, this works only when band==both
|
|
146
146
|
*/
|
|
147
147
|
readonly bandSteer: pulumi.Output<boolean>;
|
|
148
148
|
/**
|
|
149
|
-
*
|
|
149
|
+
* Force dualBand capable client to connect to 5G
|
|
150
150
|
*/
|
|
151
151
|
readonly bandSteerForceBand5: pulumi.Output<boolean>;
|
|
152
152
|
/**
|
|
@@ -154,11 +154,11 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
154
154
|
*/
|
|
155
155
|
readonly bands: pulumi.Output<string[] | undefined>;
|
|
156
156
|
/**
|
|
157
|
-
*
|
|
157
|
+
* Whether to block the clients in the blacklist (up to first 256 macs)
|
|
158
158
|
*/
|
|
159
159
|
readonly blockBlacklistClients: pulumi.Output<boolean>;
|
|
160
160
|
/**
|
|
161
|
-
*
|
|
161
|
+
* Bonjour gateway wlan settings
|
|
162
162
|
*/
|
|
163
163
|
readonly bonjour: pulumi.Output<outputs.site.WlanBonjour>;
|
|
164
164
|
/**
|
|
@@ -167,106 +167,106 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
167
167
|
*/
|
|
168
168
|
readonly ciscoCwa: pulumi.Output<outputs.site.WlanCiscoCwa>;
|
|
169
169
|
/**
|
|
170
|
-
* kbps
|
|
170
|
+
* In kbps
|
|
171
171
|
*/
|
|
172
172
|
readonly clientLimitDown: pulumi.Output<number>;
|
|
173
173
|
/**
|
|
174
|
-
*
|
|
174
|
+
* If downlink limiting per-client is enabled
|
|
175
175
|
*/
|
|
176
176
|
readonly clientLimitDownEnabled: pulumi.Output<boolean>;
|
|
177
177
|
/**
|
|
178
|
-
* kbps
|
|
178
|
+
* In kbps
|
|
179
179
|
*/
|
|
180
180
|
readonly clientLimitUp: pulumi.Output<number>;
|
|
181
181
|
/**
|
|
182
|
-
*
|
|
182
|
+
* If uplink limiting per-client is enabled
|
|
183
183
|
*/
|
|
184
184
|
readonly clientLimitUpEnabled: pulumi.Output<boolean>;
|
|
185
185
|
/**
|
|
186
|
-
*
|
|
186
|
+
* List of COA (change of authorization) servers, optional
|
|
187
187
|
*/
|
|
188
188
|
readonly coaServers: pulumi.Output<outputs.site.WlanCoaServer[]>;
|
|
189
189
|
/**
|
|
190
|
-
*
|
|
190
|
+
* Some old WLAN drivers may not be compatible
|
|
191
191
|
*/
|
|
192
192
|
readonly disable11ax: pulumi.Output<boolean>;
|
|
193
193
|
/**
|
|
194
|
-
*
|
|
194
|
+
* To disable ht or vht rates
|
|
195
195
|
*/
|
|
196
196
|
readonly disableHtVhtRates: pulumi.Output<boolean>;
|
|
197
197
|
/**
|
|
198
|
-
*
|
|
198
|
+
* Whether to disable U-APSD
|
|
199
199
|
*/
|
|
200
200
|
readonly disableUapsd: pulumi.Output<boolean>;
|
|
201
201
|
/**
|
|
202
|
-
*
|
|
202
|
+
* Disable sending v2 roam notification messages
|
|
203
203
|
*/
|
|
204
204
|
readonly disableV1RoamNotify: pulumi.Output<boolean>;
|
|
205
205
|
/**
|
|
206
|
-
*
|
|
206
|
+
* Disable sending v2 roam notification messages
|
|
207
207
|
*/
|
|
208
208
|
readonly disableV2RoamNotify: pulumi.Output<boolean>;
|
|
209
209
|
/**
|
|
210
|
-
*
|
|
210
|
+
* When any of the following is true, this WLAN will be disabled * cannot get IP * cannot obtain default gateway * cannot
|
|
211
211
|
* reach default gateway
|
|
212
212
|
*/
|
|
213
213
|
readonly disableWhenGatewayUnreachable: pulumi.Output<boolean | undefined>;
|
|
214
214
|
readonly disableWhenMxtunnelDown: pulumi.Output<boolean | undefined>;
|
|
215
215
|
/**
|
|
216
|
-
*
|
|
216
|
+
* Whether to disable WMM
|
|
217
217
|
*/
|
|
218
218
|
readonly disableWmm: pulumi.Output<boolean>;
|
|
219
219
|
/**
|
|
220
|
-
*
|
|
220
|
+
* For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)
|
|
221
221
|
*/
|
|
222
222
|
readonly dnsServerRewrite: pulumi.Output<outputs.site.WlanDnsServerRewrite>;
|
|
223
223
|
readonly dtim: pulumi.Output<number>;
|
|
224
224
|
/**
|
|
225
|
-
*
|
|
225
|
+
* For dynamic PSK where we get perUser PSK from Radius. dynamicPsk allows PSK to be selected at runtime depending on
|
|
226
226
|
* context (wlan/site/user/...) thus following configurations are assumed (currently) * PSK will come from RADIUS server *
|
|
227
|
-
* AP sends client MAC as username
|
|
227
|
+
* AP sends client MAC as username and password (i.e. `enableMacAuth` is assumed) * AP sends BSSID:SSID as
|
|
228
228
|
* Caller-Station-ID * `authServers` is required * PSK will come from cloud WLC if source is cloudPsks * defaultPsk will be
|
|
229
229
|
* used if cloud WLC is not available * `multiPskOnly` and `psk` is ignored * `pairwise` can only be wpa2-ccmp (for now,
|
|
230
230
|
* wpa3 support on the roadmap)
|
|
231
231
|
*/
|
|
232
232
|
readonly dynamicPsk: pulumi.Output<outputs.site.WlanDynamicPsk | undefined>;
|
|
233
233
|
/**
|
|
234
|
-
*
|
|
234
|
+
* For 802.1x
|
|
235
235
|
*/
|
|
236
236
|
readonly dynamicVlan: pulumi.Output<outputs.site.WlanDynamicVlan | undefined>;
|
|
237
237
|
/**
|
|
238
|
-
*
|
|
238
|
+
* Enable AP-AP keycaching via multicast
|
|
239
239
|
*/
|
|
240
240
|
readonly enableLocalKeycaching: pulumi.Output<boolean>;
|
|
241
241
|
/**
|
|
242
|
-
*
|
|
242
|
+
* By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where
|
|
243
243
|
* client is a wireless bridge (DHCP packets for other MACs will need to be orwarded), wirelessBridging can be enabled
|
|
244
244
|
*/
|
|
245
245
|
readonly enableWirelessBridging: pulumi.Output<boolean>;
|
|
246
246
|
/**
|
|
247
|
-
*
|
|
247
|
+
* If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcpTracking will cut down DHCP response
|
|
248
248
|
* packets to be forwarded to wireless
|
|
249
249
|
*/
|
|
250
250
|
readonly enableWirelessBridgingDhcpTracking: pulumi.Output<boolean>;
|
|
251
251
|
/**
|
|
252
|
-
*
|
|
252
|
+
* If this wlan is enabled
|
|
253
253
|
*/
|
|
254
254
|
readonly enabled: pulumi.Output<boolean>;
|
|
255
255
|
/**
|
|
256
|
-
*
|
|
256
|
+
* If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and
|
|
257
257
|
* ‘auth_server_retries’ .
|
|
258
258
|
*/
|
|
259
259
|
readonly fastDot1xTimers: pulumi.Output<boolean>;
|
|
260
260
|
/**
|
|
261
|
-
*
|
|
261
|
+
* Whether to hide SSID in beacon
|
|
262
262
|
*/
|
|
263
263
|
readonly hideSsid: pulumi.Output<boolean>;
|
|
264
264
|
/**
|
|
265
|
-
*
|
|
265
|
+
* Include hostname inside IE in AP beacons / probe responses
|
|
266
266
|
*/
|
|
267
267
|
readonly hostnameIe: pulumi.Output<boolean>;
|
|
268
268
|
/**
|
|
269
|
-
*
|
|
269
|
+
* Hostspot 2.0 wlan settings
|
|
270
270
|
*/
|
|
271
271
|
readonly hotspot20: pulumi.Output<outputs.site.WlanHotspot20>;
|
|
272
272
|
readonly injectDhcpOption82: pulumi.Output<outputs.site.WlanInjectDhcpOption82 | undefined>;
|
|
@@ -275,71 +275,71 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
275
275
|
*/
|
|
276
276
|
readonly interface: pulumi.Output<string>;
|
|
277
277
|
/**
|
|
278
|
-
*
|
|
278
|
+
* Whether to stop clients to talk to each other
|
|
279
279
|
*/
|
|
280
280
|
readonly isolation: pulumi.Output<boolean>;
|
|
281
281
|
/**
|
|
282
|
-
*
|
|
282
|
+
* If isolation is enabled, whether to deny clients to talk to L2 on the LAN
|
|
283
283
|
*/
|
|
284
284
|
readonly l2Isolation: pulumi.Output<boolean>;
|
|
285
285
|
/**
|
|
286
|
-
*
|
|
286
|
+
* Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning!
|
|
287
287
|
* Enabling this will cause problem for iOS devices.
|
|
288
288
|
*/
|
|
289
289
|
readonly legacyOverds: pulumi.Output<boolean>;
|
|
290
290
|
/**
|
|
291
|
-
*
|
|
291
|
+
* Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)
|
|
292
292
|
*/
|
|
293
293
|
readonly limitBcast: pulumi.Output<boolean>;
|
|
294
294
|
/**
|
|
295
|
-
*
|
|
295
|
+
* Limit probe response base on some heuristic rules
|
|
296
296
|
*/
|
|
297
297
|
readonly limitProbeResponse: pulumi.Output<boolean>;
|
|
298
298
|
/**
|
|
299
|
-
*
|
|
299
|
+
* Max idle time in seconds
|
|
300
300
|
*/
|
|
301
301
|
readonly maxIdletime: pulumi.Output<number>;
|
|
302
302
|
/**
|
|
303
|
-
*
|
|
303
|
+
* Maximum number of client connected to the SSID. `0` means unlimited
|
|
304
304
|
*/
|
|
305
305
|
readonly maxNumClients: pulumi.Output<number>;
|
|
306
306
|
readonly mistNac: pulumi.Output<outputs.site.WlanMistNac>;
|
|
307
307
|
readonly mspId: pulumi.Output<string>;
|
|
308
308
|
/**
|
|
309
|
-
*
|
|
309
|
+
* When `interface`=`mxtunnel`, id of the Mist Tunnel
|
|
310
310
|
*/
|
|
311
311
|
readonly mxtunnelIds: pulumi.Output<string[]>;
|
|
312
312
|
/**
|
|
313
|
-
*
|
|
313
|
+
* When `interface`=`siteMedge`, name of the mxtunnel that in mxtunnels under Site Setting
|
|
314
314
|
*/
|
|
315
315
|
readonly mxtunnelNames: pulumi.Output<string[]>;
|
|
316
316
|
/**
|
|
317
|
-
*
|
|
317
|
+
* Whether to only allow client to use DNS that we’ve learned from DHCP response
|
|
318
318
|
*/
|
|
319
319
|
readonly noStaticDns: pulumi.Output<boolean>;
|
|
320
320
|
/**
|
|
321
|
-
*
|
|
321
|
+
* Whether to only allow client that we’ve learned from DHCP exchange to talk
|
|
322
322
|
*/
|
|
323
323
|
readonly noStaticIp: pulumi.Output<boolean>;
|
|
324
324
|
readonly orgId: pulumi.Output<string>;
|
|
325
325
|
/**
|
|
326
|
-
*
|
|
326
|
+
* Portal wlan settings
|
|
327
327
|
*/
|
|
328
328
|
readonly portal: pulumi.Output<outputs.site.WlanPortal>;
|
|
329
329
|
/**
|
|
330
|
-
*
|
|
330
|
+
* List of hostnames without http(s):// (matched by substring)
|
|
331
331
|
*/
|
|
332
332
|
readonly portalAllowedHostnames: pulumi.Output<string[]>;
|
|
333
333
|
/**
|
|
334
|
-
*
|
|
334
|
+
* List of CIDRs
|
|
335
335
|
*/
|
|
336
336
|
readonly portalAllowedSubnets: pulumi.Output<string[]>;
|
|
337
337
|
/**
|
|
338
|
-
*
|
|
338
|
+
* APi secret (auto-generated) that can be used to sign guest authorization requests
|
|
339
339
|
*/
|
|
340
340
|
readonly portalApiSecret: pulumi.Output<string>;
|
|
341
341
|
/**
|
|
342
|
-
*
|
|
342
|
+
* List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames
|
|
343
343
|
*/
|
|
344
344
|
readonly portalDeniedHostnames: pulumi.Output<string[]>;
|
|
345
345
|
/**
|
|
@@ -349,7 +349,7 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
349
349
|
readonly portalSsoUrl: pulumi.Output<string>;
|
|
350
350
|
readonly qos: pulumi.Output<outputs.site.WlanQos>;
|
|
351
351
|
/**
|
|
352
|
-
*
|
|
352
|
+
* RadSec settings
|
|
353
353
|
*/
|
|
354
354
|
readonly radsec: pulumi.Output<outputs.site.WlanRadsec>;
|
|
355
355
|
/**
|
|
@@ -359,7 +359,7 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
359
359
|
[key: string]: outputs.site.WlanRateset;
|
|
360
360
|
}>;
|
|
361
361
|
/**
|
|
362
|
-
*
|
|
362
|
+
* When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)
|
|
363
363
|
*/
|
|
364
364
|
readonly reconnectClientsWhenRoamingMxcluster: pulumi.Output<boolean | undefined>;
|
|
365
365
|
/**
|
|
@@ -372,19 +372,19 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
372
372
|
readonly schedule: pulumi.Output<outputs.site.WlanSchedule>;
|
|
373
373
|
readonly siteId: pulumi.Output<string>;
|
|
374
374
|
/**
|
|
375
|
-
*
|
|
375
|
+
* Whether to exclude this WLAN from SLE metrics
|
|
376
376
|
*/
|
|
377
377
|
readonly sleExcluded: pulumi.Output<boolean>;
|
|
378
378
|
/**
|
|
379
|
-
*
|
|
379
|
+
* Name of the SSID
|
|
380
380
|
*/
|
|
381
381
|
readonly ssid: pulumi.Output<string>;
|
|
382
382
|
/**
|
|
383
|
-
*
|
|
383
|
+
* If `auth.type`==`eap` or `auth.type`==`psk`, should only be set for legacy client, such as pre-2004, 802.11b devices
|
|
384
384
|
*/
|
|
385
385
|
readonly useEapolV1: pulumi.Output<boolean>;
|
|
386
386
|
/**
|
|
387
|
-
*
|
|
387
|
+
* If vlan tagging is enabled
|
|
388
388
|
*/
|
|
389
389
|
readonly vlanEnabled: pulumi.Output<boolean>;
|
|
390
390
|
readonly vlanId: pulumi.Output<string | undefined>;
|
|
@@ -398,31 +398,31 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
398
398
|
*/
|
|
399
399
|
readonly vlanPooling: pulumi.Output<boolean>;
|
|
400
400
|
/**
|
|
401
|
-
* kbps
|
|
401
|
+
* In kbps
|
|
402
402
|
*/
|
|
403
403
|
readonly wlanLimitDown: pulumi.Output<number>;
|
|
404
404
|
/**
|
|
405
|
-
*
|
|
405
|
+
* If downlink limiting for whole wlan is enabled
|
|
406
406
|
*/
|
|
407
407
|
readonly wlanLimitDownEnabled: pulumi.Output<boolean>;
|
|
408
408
|
/**
|
|
409
|
-
* kbps
|
|
409
|
+
* In kbps
|
|
410
410
|
*/
|
|
411
411
|
readonly wlanLimitUp: pulumi.Output<number>;
|
|
412
412
|
/**
|
|
413
|
-
*
|
|
413
|
+
* If uplink limiting for whole wlan is enabled
|
|
414
414
|
*/
|
|
415
415
|
readonly wlanLimitUpEnabled: pulumi.Output<boolean>;
|
|
416
416
|
/**
|
|
417
|
-
*
|
|
417
|
+
* List of wxtag_ids
|
|
418
418
|
*/
|
|
419
419
|
readonly wxtagIds: pulumi.Output<string[]>;
|
|
420
420
|
/**
|
|
421
|
-
*
|
|
421
|
+
* When `interface`=`wxtunnel`, id of the WXLAN Tunnel
|
|
422
422
|
*/
|
|
423
423
|
readonly wxtunnelId: pulumi.Output<string>;
|
|
424
424
|
/**
|
|
425
|
-
*
|
|
425
|
+
* When `interface`=`wxtunnel`, remote tunnel identifier
|
|
426
426
|
*/
|
|
427
427
|
readonly wxtunnelRemoteId: pulumi.Output<string>;
|
|
428
428
|
/**
|
|
@@ -439,45 +439,45 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
439
439
|
*/
|
|
440
440
|
export interface WlanState {
|
|
441
441
|
/**
|
|
442
|
-
*
|
|
442
|
+
* Enable coa-immediate-update and address-change-immediate-update on the access profile.
|
|
443
443
|
*/
|
|
444
444
|
acctImmediateUpdate?: pulumi.Input<boolean>;
|
|
445
445
|
/**
|
|
446
|
-
*
|
|
446
|
+
* How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request
|
|
447
447
|
* from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended
|
|
448
448
|
* when enabled
|
|
449
449
|
*/
|
|
450
450
|
acctInterimInterval?: pulumi.Input<number>;
|
|
451
451
|
/**
|
|
452
|
-
*
|
|
452
|
+
* List of RADIUS accounting servers, optional, order matters where the first one is treated as primary
|
|
453
453
|
*/
|
|
454
454
|
acctServers?: pulumi.Input<pulumi.Input<inputs.site.WlanAcctServer>[]>;
|
|
455
455
|
/**
|
|
456
|
-
*
|
|
456
|
+
* Airwatch wlan settings
|
|
457
457
|
*/
|
|
458
458
|
airwatch?: pulumi.Input<inputs.site.WlanAirwatch>;
|
|
459
459
|
/**
|
|
460
|
-
*
|
|
460
|
+
* Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through
|
|
461
461
|
*/
|
|
462
462
|
allowIpv6Ndp?: pulumi.Input<boolean>;
|
|
463
463
|
/**
|
|
464
|
-
*
|
|
464
|
+
* Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through
|
|
465
465
|
*/
|
|
466
466
|
allowMdns?: pulumi.Input<boolean>;
|
|
467
467
|
/**
|
|
468
|
-
*
|
|
468
|
+
* Only applicable when `limitBcast`==`true`, which allows SSDP
|
|
469
469
|
*/
|
|
470
470
|
allowSsdp?: pulumi.Input<boolean>;
|
|
471
471
|
/**
|
|
472
|
-
*
|
|
472
|
+
* List of device ids
|
|
473
473
|
*/
|
|
474
474
|
apIds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
475
475
|
/**
|
|
476
|
-
*
|
|
476
|
+
* Bandwidth limiting for apps (applies to up/down)
|
|
477
477
|
*/
|
|
478
478
|
appLimit?: pulumi.Input<inputs.site.WlanAppLimit>;
|
|
479
479
|
/**
|
|
480
|
-
*
|
|
480
|
+
* APp qos wlan settings
|
|
481
481
|
*/
|
|
482
482
|
appQos?: pulumi.Input<inputs.site.WlanAppQos>;
|
|
483
483
|
/**
|
|
@@ -485,11 +485,11 @@ export interface WlanState {
|
|
|
485
485
|
*/
|
|
486
486
|
applyTo?: pulumi.Input<string>;
|
|
487
487
|
/**
|
|
488
|
-
*
|
|
488
|
+
* Whether to enable smart arp filter
|
|
489
489
|
*/
|
|
490
490
|
arpFilter?: pulumi.Input<boolean>;
|
|
491
491
|
/**
|
|
492
|
-
*
|
|
492
|
+
* Authentication wlan settings
|
|
493
493
|
*/
|
|
494
494
|
auth?: pulumi.Input<inputs.site.WlanAuth>;
|
|
495
495
|
/**
|
|
@@ -497,36 +497,36 @@ export interface WlanState {
|
|
|
497
497
|
*/
|
|
498
498
|
authServerSelection?: pulumi.Input<string>;
|
|
499
499
|
/**
|
|
500
|
-
*
|
|
500
|
+
* List of RADIUS authentication servers, at least one is needed if `auth type`==`eap`, order matters where the first one
|
|
501
501
|
* is treated as primary
|
|
502
502
|
*/
|
|
503
503
|
authServers?: pulumi.Input<pulumi.Input<inputs.site.WlanAuthServer>[]>;
|
|
504
504
|
/**
|
|
505
|
-
*
|
|
505
|
+
* Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers
|
|
506
506
|
*/
|
|
507
507
|
authServersNasId?: pulumi.Input<string>;
|
|
508
508
|
/**
|
|
509
|
-
*
|
|
509
|
+
* Optional, NAS-IP-ADDRESS to use
|
|
510
510
|
*/
|
|
511
511
|
authServersNasIp?: pulumi.Input<string>;
|
|
512
512
|
/**
|
|
513
|
-
*
|
|
514
|
-
*
|
|
515
|
-
*
|
|
513
|
+
* Radius auth session retries. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘retries’ are set
|
|
514
|
+
* to value of auth_servers_retries. ‘max-requests’ is also set when setting authServersRetries and is set to default
|
|
515
|
+
* value to 3.
|
|
516
516
|
*/
|
|
517
517
|
authServersRetries?: pulumi.Input<number>;
|
|
518
518
|
/**
|
|
519
|
-
*
|
|
520
|
-
* ‘
|
|
521
|
-
*
|
|
519
|
+
* Radius auth session timeout. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘quite-period’ and
|
|
520
|
+
* ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when
|
|
521
|
+
* setting authServersTimeout and is set to default value of 10.
|
|
522
522
|
*/
|
|
523
523
|
authServersTimeout?: pulumi.Input<number>;
|
|
524
524
|
/**
|
|
525
|
-
*
|
|
525
|
+
* Whether to enable band_steering, this works only when band==both
|
|
526
526
|
*/
|
|
527
527
|
bandSteer?: pulumi.Input<boolean>;
|
|
528
528
|
/**
|
|
529
|
-
*
|
|
529
|
+
* Force dualBand capable client to connect to 5G
|
|
530
530
|
*/
|
|
531
531
|
bandSteerForceBand5?: pulumi.Input<boolean>;
|
|
532
532
|
/**
|
|
@@ -534,11 +534,11 @@ export interface WlanState {
|
|
|
534
534
|
*/
|
|
535
535
|
bands?: pulumi.Input<pulumi.Input<string>[]>;
|
|
536
536
|
/**
|
|
537
|
-
*
|
|
537
|
+
* Whether to block the clients in the blacklist (up to first 256 macs)
|
|
538
538
|
*/
|
|
539
539
|
blockBlacklistClients?: pulumi.Input<boolean>;
|
|
540
540
|
/**
|
|
541
|
-
*
|
|
541
|
+
* Bonjour gateway wlan settings
|
|
542
542
|
*/
|
|
543
543
|
bonjour?: pulumi.Input<inputs.site.WlanBonjour>;
|
|
544
544
|
/**
|
|
@@ -547,106 +547,106 @@ export interface WlanState {
|
|
|
547
547
|
*/
|
|
548
548
|
ciscoCwa?: pulumi.Input<inputs.site.WlanCiscoCwa>;
|
|
549
549
|
/**
|
|
550
|
-
* kbps
|
|
550
|
+
* In kbps
|
|
551
551
|
*/
|
|
552
552
|
clientLimitDown?: pulumi.Input<number>;
|
|
553
553
|
/**
|
|
554
|
-
*
|
|
554
|
+
* If downlink limiting per-client is enabled
|
|
555
555
|
*/
|
|
556
556
|
clientLimitDownEnabled?: pulumi.Input<boolean>;
|
|
557
557
|
/**
|
|
558
|
-
* kbps
|
|
558
|
+
* In kbps
|
|
559
559
|
*/
|
|
560
560
|
clientLimitUp?: pulumi.Input<number>;
|
|
561
561
|
/**
|
|
562
|
-
*
|
|
562
|
+
* If uplink limiting per-client is enabled
|
|
563
563
|
*/
|
|
564
564
|
clientLimitUpEnabled?: pulumi.Input<boolean>;
|
|
565
565
|
/**
|
|
566
|
-
*
|
|
566
|
+
* List of COA (change of authorization) servers, optional
|
|
567
567
|
*/
|
|
568
568
|
coaServers?: pulumi.Input<pulumi.Input<inputs.site.WlanCoaServer>[]>;
|
|
569
569
|
/**
|
|
570
|
-
*
|
|
570
|
+
* Some old WLAN drivers may not be compatible
|
|
571
571
|
*/
|
|
572
572
|
disable11ax?: pulumi.Input<boolean>;
|
|
573
573
|
/**
|
|
574
|
-
*
|
|
574
|
+
* To disable ht or vht rates
|
|
575
575
|
*/
|
|
576
576
|
disableHtVhtRates?: pulumi.Input<boolean>;
|
|
577
577
|
/**
|
|
578
|
-
*
|
|
578
|
+
* Whether to disable U-APSD
|
|
579
579
|
*/
|
|
580
580
|
disableUapsd?: pulumi.Input<boolean>;
|
|
581
581
|
/**
|
|
582
|
-
*
|
|
582
|
+
* Disable sending v2 roam notification messages
|
|
583
583
|
*/
|
|
584
584
|
disableV1RoamNotify?: pulumi.Input<boolean>;
|
|
585
585
|
/**
|
|
586
|
-
*
|
|
586
|
+
* Disable sending v2 roam notification messages
|
|
587
587
|
*/
|
|
588
588
|
disableV2RoamNotify?: pulumi.Input<boolean>;
|
|
589
589
|
/**
|
|
590
|
-
*
|
|
590
|
+
* When any of the following is true, this WLAN will be disabled * cannot get IP * cannot obtain default gateway * cannot
|
|
591
591
|
* reach default gateway
|
|
592
592
|
*/
|
|
593
593
|
disableWhenGatewayUnreachable?: pulumi.Input<boolean>;
|
|
594
594
|
disableWhenMxtunnelDown?: pulumi.Input<boolean>;
|
|
595
595
|
/**
|
|
596
|
-
*
|
|
596
|
+
* Whether to disable WMM
|
|
597
597
|
*/
|
|
598
598
|
disableWmm?: pulumi.Input<boolean>;
|
|
599
599
|
/**
|
|
600
|
-
*
|
|
600
|
+
* For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)
|
|
601
601
|
*/
|
|
602
602
|
dnsServerRewrite?: pulumi.Input<inputs.site.WlanDnsServerRewrite>;
|
|
603
603
|
dtim?: pulumi.Input<number>;
|
|
604
604
|
/**
|
|
605
|
-
*
|
|
605
|
+
* For dynamic PSK where we get perUser PSK from Radius. dynamicPsk allows PSK to be selected at runtime depending on
|
|
606
606
|
* context (wlan/site/user/...) thus following configurations are assumed (currently) * PSK will come from RADIUS server *
|
|
607
|
-
* AP sends client MAC as username
|
|
607
|
+
* AP sends client MAC as username and password (i.e. `enableMacAuth` is assumed) * AP sends BSSID:SSID as
|
|
608
608
|
* Caller-Station-ID * `authServers` is required * PSK will come from cloud WLC if source is cloudPsks * defaultPsk will be
|
|
609
609
|
* used if cloud WLC is not available * `multiPskOnly` and `psk` is ignored * `pairwise` can only be wpa2-ccmp (for now,
|
|
610
610
|
* wpa3 support on the roadmap)
|
|
611
611
|
*/
|
|
612
612
|
dynamicPsk?: pulumi.Input<inputs.site.WlanDynamicPsk>;
|
|
613
613
|
/**
|
|
614
|
-
*
|
|
614
|
+
* For 802.1x
|
|
615
615
|
*/
|
|
616
616
|
dynamicVlan?: pulumi.Input<inputs.site.WlanDynamicVlan>;
|
|
617
617
|
/**
|
|
618
|
-
*
|
|
618
|
+
* Enable AP-AP keycaching via multicast
|
|
619
619
|
*/
|
|
620
620
|
enableLocalKeycaching?: pulumi.Input<boolean>;
|
|
621
621
|
/**
|
|
622
|
-
*
|
|
622
|
+
* By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where
|
|
623
623
|
* client is a wireless bridge (DHCP packets for other MACs will need to be orwarded), wirelessBridging can be enabled
|
|
624
624
|
*/
|
|
625
625
|
enableWirelessBridging?: pulumi.Input<boolean>;
|
|
626
626
|
/**
|
|
627
|
-
*
|
|
627
|
+
* If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcpTracking will cut down DHCP response
|
|
628
628
|
* packets to be forwarded to wireless
|
|
629
629
|
*/
|
|
630
630
|
enableWirelessBridgingDhcpTracking?: pulumi.Input<boolean>;
|
|
631
631
|
/**
|
|
632
|
-
*
|
|
632
|
+
* If this wlan is enabled
|
|
633
633
|
*/
|
|
634
634
|
enabled?: pulumi.Input<boolean>;
|
|
635
635
|
/**
|
|
636
|
-
*
|
|
636
|
+
* If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and
|
|
637
637
|
* ‘auth_server_retries’ .
|
|
638
638
|
*/
|
|
639
639
|
fastDot1xTimers?: pulumi.Input<boolean>;
|
|
640
640
|
/**
|
|
641
|
-
*
|
|
641
|
+
* Whether to hide SSID in beacon
|
|
642
642
|
*/
|
|
643
643
|
hideSsid?: pulumi.Input<boolean>;
|
|
644
644
|
/**
|
|
645
|
-
*
|
|
645
|
+
* Include hostname inside IE in AP beacons / probe responses
|
|
646
646
|
*/
|
|
647
647
|
hostnameIe?: pulumi.Input<boolean>;
|
|
648
648
|
/**
|
|
649
|
-
*
|
|
649
|
+
* Hostspot 2.0 wlan settings
|
|
650
650
|
*/
|
|
651
651
|
hotspot20?: pulumi.Input<inputs.site.WlanHotspot20>;
|
|
652
652
|
injectDhcpOption82?: pulumi.Input<inputs.site.WlanInjectDhcpOption82>;
|
|
@@ -655,71 +655,71 @@ export interface WlanState {
|
|
|
655
655
|
*/
|
|
656
656
|
interface?: pulumi.Input<string>;
|
|
657
657
|
/**
|
|
658
|
-
*
|
|
658
|
+
* Whether to stop clients to talk to each other
|
|
659
659
|
*/
|
|
660
660
|
isolation?: pulumi.Input<boolean>;
|
|
661
661
|
/**
|
|
662
|
-
*
|
|
662
|
+
* If isolation is enabled, whether to deny clients to talk to L2 on the LAN
|
|
663
663
|
*/
|
|
664
664
|
l2Isolation?: pulumi.Input<boolean>;
|
|
665
665
|
/**
|
|
666
|
-
*
|
|
666
|
+
* Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning!
|
|
667
667
|
* Enabling this will cause problem for iOS devices.
|
|
668
668
|
*/
|
|
669
669
|
legacyOverds?: pulumi.Input<boolean>;
|
|
670
670
|
/**
|
|
671
|
-
*
|
|
671
|
+
* Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)
|
|
672
672
|
*/
|
|
673
673
|
limitBcast?: pulumi.Input<boolean>;
|
|
674
674
|
/**
|
|
675
|
-
*
|
|
675
|
+
* Limit probe response base on some heuristic rules
|
|
676
676
|
*/
|
|
677
677
|
limitProbeResponse?: pulumi.Input<boolean>;
|
|
678
678
|
/**
|
|
679
|
-
*
|
|
679
|
+
* Max idle time in seconds
|
|
680
680
|
*/
|
|
681
681
|
maxIdletime?: pulumi.Input<number>;
|
|
682
682
|
/**
|
|
683
|
-
*
|
|
683
|
+
* Maximum number of client connected to the SSID. `0` means unlimited
|
|
684
684
|
*/
|
|
685
685
|
maxNumClients?: pulumi.Input<number>;
|
|
686
686
|
mistNac?: pulumi.Input<inputs.site.WlanMistNac>;
|
|
687
687
|
mspId?: pulumi.Input<string>;
|
|
688
688
|
/**
|
|
689
|
-
*
|
|
689
|
+
* When `interface`=`mxtunnel`, id of the Mist Tunnel
|
|
690
690
|
*/
|
|
691
691
|
mxtunnelIds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
692
692
|
/**
|
|
693
|
-
*
|
|
693
|
+
* When `interface`=`siteMedge`, name of the mxtunnel that in mxtunnels under Site Setting
|
|
694
694
|
*/
|
|
695
695
|
mxtunnelNames?: pulumi.Input<pulumi.Input<string>[]>;
|
|
696
696
|
/**
|
|
697
|
-
*
|
|
697
|
+
* Whether to only allow client to use DNS that we’ve learned from DHCP response
|
|
698
698
|
*/
|
|
699
699
|
noStaticDns?: pulumi.Input<boolean>;
|
|
700
700
|
/**
|
|
701
|
-
*
|
|
701
|
+
* Whether to only allow client that we’ve learned from DHCP exchange to talk
|
|
702
702
|
*/
|
|
703
703
|
noStaticIp?: pulumi.Input<boolean>;
|
|
704
704
|
orgId?: pulumi.Input<string>;
|
|
705
705
|
/**
|
|
706
|
-
*
|
|
706
|
+
* Portal wlan settings
|
|
707
707
|
*/
|
|
708
708
|
portal?: pulumi.Input<inputs.site.WlanPortal>;
|
|
709
709
|
/**
|
|
710
|
-
*
|
|
710
|
+
* List of hostnames without http(s):// (matched by substring)
|
|
711
711
|
*/
|
|
712
712
|
portalAllowedHostnames?: pulumi.Input<pulumi.Input<string>[]>;
|
|
713
713
|
/**
|
|
714
|
-
*
|
|
714
|
+
* List of CIDRs
|
|
715
715
|
*/
|
|
716
716
|
portalAllowedSubnets?: pulumi.Input<pulumi.Input<string>[]>;
|
|
717
717
|
/**
|
|
718
|
-
*
|
|
718
|
+
* APi secret (auto-generated) that can be used to sign guest authorization requests
|
|
719
719
|
*/
|
|
720
720
|
portalApiSecret?: pulumi.Input<string>;
|
|
721
721
|
/**
|
|
722
|
-
*
|
|
722
|
+
* List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames
|
|
723
723
|
*/
|
|
724
724
|
portalDeniedHostnames?: pulumi.Input<pulumi.Input<string>[]>;
|
|
725
725
|
/**
|
|
@@ -729,7 +729,7 @@ export interface WlanState {
|
|
|
729
729
|
portalSsoUrl?: pulumi.Input<string>;
|
|
730
730
|
qos?: pulumi.Input<inputs.site.WlanQos>;
|
|
731
731
|
/**
|
|
732
|
-
*
|
|
732
|
+
* RadSec settings
|
|
733
733
|
*/
|
|
734
734
|
radsec?: pulumi.Input<inputs.site.WlanRadsec>;
|
|
735
735
|
/**
|
|
@@ -739,7 +739,7 @@ export interface WlanState {
|
|
|
739
739
|
[key: string]: pulumi.Input<inputs.site.WlanRateset>;
|
|
740
740
|
}>;
|
|
741
741
|
/**
|
|
742
|
-
*
|
|
742
|
+
* When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)
|
|
743
743
|
*/
|
|
744
744
|
reconnectClientsWhenRoamingMxcluster?: pulumi.Input<boolean>;
|
|
745
745
|
/**
|
|
@@ -752,19 +752,19 @@ export interface WlanState {
|
|
|
752
752
|
schedule?: pulumi.Input<inputs.site.WlanSchedule>;
|
|
753
753
|
siteId?: pulumi.Input<string>;
|
|
754
754
|
/**
|
|
755
|
-
*
|
|
755
|
+
* Whether to exclude this WLAN from SLE metrics
|
|
756
756
|
*/
|
|
757
757
|
sleExcluded?: pulumi.Input<boolean>;
|
|
758
758
|
/**
|
|
759
|
-
*
|
|
759
|
+
* Name of the SSID
|
|
760
760
|
*/
|
|
761
761
|
ssid?: pulumi.Input<string>;
|
|
762
762
|
/**
|
|
763
|
-
*
|
|
763
|
+
* If `auth.type`==`eap` or `auth.type`==`psk`, should only be set for legacy client, such as pre-2004, 802.11b devices
|
|
764
764
|
*/
|
|
765
765
|
useEapolV1?: pulumi.Input<boolean>;
|
|
766
766
|
/**
|
|
767
|
-
*
|
|
767
|
+
* If vlan tagging is enabled
|
|
768
768
|
*/
|
|
769
769
|
vlanEnabled?: pulumi.Input<boolean>;
|
|
770
770
|
vlanId?: pulumi.Input<string>;
|
|
@@ -778,31 +778,31 @@ export interface WlanState {
|
|
|
778
778
|
*/
|
|
779
779
|
vlanPooling?: pulumi.Input<boolean>;
|
|
780
780
|
/**
|
|
781
|
-
* kbps
|
|
781
|
+
* In kbps
|
|
782
782
|
*/
|
|
783
783
|
wlanLimitDown?: pulumi.Input<number>;
|
|
784
784
|
/**
|
|
785
|
-
*
|
|
785
|
+
* If downlink limiting for whole wlan is enabled
|
|
786
786
|
*/
|
|
787
787
|
wlanLimitDownEnabled?: pulumi.Input<boolean>;
|
|
788
788
|
/**
|
|
789
|
-
* kbps
|
|
789
|
+
* In kbps
|
|
790
790
|
*/
|
|
791
791
|
wlanLimitUp?: pulumi.Input<number>;
|
|
792
792
|
/**
|
|
793
|
-
*
|
|
793
|
+
* If uplink limiting for whole wlan is enabled
|
|
794
794
|
*/
|
|
795
795
|
wlanLimitUpEnabled?: pulumi.Input<boolean>;
|
|
796
796
|
/**
|
|
797
|
-
*
|
|
797
|
+
* List of wxtag_ids
|
|
798
798
|
*/
|
|
799
799
|
wxtagIds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
800
800
|
/**
|
|
801
|
-
*
|
|
801
|
+
* When `interface`=`wxtunnel`, id of the WXLAN Tunnel
|
|
802
802
|
*/
|
|
803
803
|
wxtunnelId?: pulumi.Input<string>;
|
|
804
804
|
/**
|
|
805
|
-
*
|
|
805
|
+
* When `interface`=`wxtunnel`, remote tunnel identifier
|
|
806
806
|
*/
|
|
807
807
|
wxtunnelRemoteId?: pulumi.Input<string>;
|
|
808
808
|
}
|
|
@@ -811,45 +811,45 @@ export interface WlanState {
|
|
|
811
811
|
*/
|
|
812
812
|
export interface WlanArgs {
|
|
813
813
|
/**
|
|
814
|
-
*
|
|
814
|
+
* Enable coa-immediate-update and address-change-immediate-update on the access profile.
|
|
815
815
|
*/
|
|
816
816
|
acctImmediateUpdate?: pulumi.Input<boolean>;
|
|
817
817
|
/**
|
|
818
|
-
*
|
|
818
|
+
* How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request
|
|
819
819
|
* from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended
|
|
820
820
|
* when enabled
|
|
821
821
|
*/
|
|
822
822
|
acctInterimInterval?: pulumi.Input<number>;
|
|
823
823
|
/**
|
|
824
|
-
*
|
|
824
|
+
* List of RADIUS accounting servers, optional, order matters where the first one is treated as primary
|
|
825
825
|
*/
|
|
826
826
|
acctServers?: pulumi.Input<pulumi.Input<inputs.site.WlanAcctServer>[]>;
|
|
827
827
|
/**
|
|
828
|
-
*
|
|
828
|
+
* Airwatch wlan settings
|
|
829
829
|
*/
|
|
830
830
|
airwatch?: pulumi.Input<inputs.site.WlanAirwatch>;
|
|
831
831
|
/**
|
|
832
|
-
*
|
|
832
|
+
* Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through
|
|
833
833
|
*/
|
|
834
834
|
allowIpv6Ndp?: pulumi.Input<boolean>;
|
|
835
835
|
/**
|
|
836
|
-
*
|
|
836
|
+
* Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through
|
|
837
837
|
*/
|
|
838
838
|
allowMdns?: pulumi.Input<boolean>;
|
|
839
839
|
/**
|
|
840
|
-
*
|
|
840
|
+
* Only applicable when `limitBcast`==`true`, which allows SSDP
|
|
841
841
|
*/
|
|
842
842
|
allowSsdp?: pulumi.Input<boolean>;
|
|
843
843
|
/**
|
|
844
|
-
*
|
|
844
|
+
* List of device ids
|
|
845
845
|
*/
|
|
846
846
|
apIds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
847
847
|
/**
|
|
848
|
-
*
|
|
848
|
+
* Bandwidth limiting for apps (applies to up/down)
|
|
849
849
|
*/
|
|
850
850
|
appLimit?: pulumi.Input<inputs.site.WlanAppLimit>;
|
|
851
851
|
/**
|
|
852
|
-
*
|
|
852
|
+
* APp qos wlan settings
|
|
853
853
|
*/
|
|
854
854
|
appQos?: pulumi.Input<inputs.site.WlanAppQos>;
|
|
855
855
|
/**
|
|
@@ -857,11 +857,11 @@ export interface WlanArgs {
|
|
|
857
857
|
*/
|
|
858
858
|
applyTo?: pulumi.Input<string>;
|
|
859
859
|
/**
|
|
860
|
-
*
|
|
860
|
+
* Whether to enable smart arp filter
|
|
861
861
|
*/
|
|
862
862
|
arpFilter?: pulumi.Input<boolean>;
|
|
863
863
|
/**
|
|
864
|
-
*
|
|
864
|
+
* Authentication wlan settings
|
|
865
865
|
*/
|
|
866
866
|
auth?: pulumi.Input<inputs.site.WlanAuth>;
|
|
867
867
|
/**
|
|
@@ -869,36 +869,36 @@ export interface WlanArgs {
|
|
|
869
869
|
*/
|
|
870
870
|
authServerSelection?: pulumi.Input<string>;
|
|
871
871
|
/**
|
|
872
|
-
*
|
|
872
|
+
* List of RADIUS authentication servers, at least one is needed if `auth type`==`eap`, order matters where the first one
|
|
873
873
|
* is treated as primary
|
|
874
874
|
*/
|
|
875
875
|
authServers?: pulumi.Input<pulumi.Input<inputs.site.WlanAuthServer>[]>;
|
|
876
876
|
/**
|
|
877
|
-
*
|
|
877
|
+
* Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers
|
|
878
878
|
*/
|
|
879
879
|
authServersNasId?: pulumi.Input<string>;
|
|
880
880
|
/**
|
|
881
|
-
*
|
|
881
|
+
* Optional, NAS-IP-ADDRESS to use
|
|
882
882
|
*/
|
|
883
883
|
authServersNasIp?: pulumi.Input<string>;
|
|
884
884
|
/**
|
|
885
|
-
*
|
|
886
|
-
*
|
|
887
|
-
*
|
|
885
|
+
* Radius auth session retries. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘retries’ are set
|
|
886
|
+
* to value of auth_servers_retries. ‘max-requests’ is also set when setting authServersRetries and is set to default
|
|
887
|
+
* value to 3.
|
|
888
888
|
*/
|
|
889
889
|
authServersRetries?: pulumi.Input<number>;
|
|
890
890
|
/**
|
|
891
|
-
*
|
|
892
|
-
* ‘
|
|
893
|
-
*
|
|
891
|
+
* Radius auth session timeout. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘quite-period’ and
|
|
892
|
+
* ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when
|
|
893
|
+
* setting authServersTimeout and is set to default value of 10.
|
|
894
894
|
*/
|
|
895
895
|
authServersTimeout?: pulumi.Input<number>;
|
|
896
896
|
/**
|
|
897
|
-
*
|
|
897
|
+
* Whether to enable band_steering, this works only when band==both
|
|
898
898
|
*/
|
|
899
899
|
bandSteer?: pulumi.Input<boolean>;
|
|
900
900
|
/**
|
|
901
|
-
*
|
|
901
|
+
* Force dualBand capable client to connect to 5G
|
|
902
902
|
*/
|
|
903
903
|
bandSteerForceBand5?: pulumi.Input<boolean>;
|
|
904
904
|
/**
|
|
@@ -906,11 +906,11 @@ export interface WlanArgs {
|
|
|
906
906
|
*/
|
|
907
907
|
bands?: pulumi.Input<pulumi.Input<string>[]>;
|
|
908
908
|
/**
|
|
909
|
-
*
|
|
909
|
+
* Whether to block the clients in the blacklist (up to first 256 macs)
|
|
910
910
|
*/
|
|
911
911
|
blockBlacklistClients?: pulumi.Input<boolean>;
|
|
912
912
|
/**
|
|
913
|
-
*
|
|
913
|
+
* Bonjour gateway wlan settings
|
|
914
914
|
*/
|
|
915
915
|
bonjour?: pulumi.Input<inputs.site.WlanBonjour>;
|
|
916
916
|
/**
|
|
@@ -919,106 +919,106 @@ export interface WlanArgs {
|
|
|
919
919
|
*/
|
|
920
920
|
ciscoCwa?: pulumi.Input<inputs.site.WlanCiscoCwa>;
|
|
921
921
|
/**
|
|
922
|
-
* kbps
|
|
922
|
+
* In kbps
|
|
923
923
|
*/
|
|
924
924
|
clientLimitDown?: pulumi.Input<number>;
|
|
925
925
|
/**
|
|
926
|
-
*
|
|
926
|
+
* If downlink limiting per-client is enabled
|
|
927
927
|
*/
|
|
928
928
|
clientLimitDownEnabled?: pulumi.Input<boolean>;
|
|
929
929
|
/**
|
|
930
|
-
* kbps
|
|
930
|
+
* In kbps
|
|
931
931
|
*/
|
|
932
932
|
clientLimitUp?: pulumi.Input<number>;
|
|
933
933
|
/**
|
|
934
|
-
*
|
|
934
|
+
* If uplink limiting per-client is enabled
|
|
935
935
|
*/
|
|
936
936
|
clientLimitUpEnabled?: pulumi.Input<boolean>;
|
|
937
937
|
/**
|
|
938
|
-
*
|
|
938
|
+
* List of COA (change of authorization) servers, optional
|
|
939
939
|
*/
|
|
940
940
|
coaServers?: pulumi.Input<pulumi.Input<inputs.site.WlanCoaServer>[]>;
|
|
941
941
|
/**
|
|
942
|
-
*
|
|
942
|
+
* Some old WLAN drivers may not be compatible
|
|
943
943
|
*/
|
|
944
944
|
disable11ax?: pulumi.Input<boolean>;
|
|
945
945
|
/**
|
|
946
|
-
*
|
|
946
|
+
* To disable ht or vht rates
|
|
947
947
|
*/
|
|
948
948
|
disableHtVhtRates?: pulumi.Input<boolean>;
|
|
949
949
|
/**
|
|
950
|
-
*
|
|
950
|
+
* Whether to disable U-APSD
|
|
951
951
|
*/
|
|
952
952
|
disableUapsd?: pulumi.Input<boolean>;
|
|
953
953
|
/**
|
|
954
|
-
*
|
|
954
|
+
* Disable sending v2 roam notification messages
|
|
955
955
|
*/
|
|
956
956
|
disableV1RoamNotify?: pulumi.Input<boolean>;
|
|
957
957
|
/**
|
|
958
|
-
*
|
|
958
|
+
* Disable sending v2 roam notification messages
|
|
959
959
|
*/
|
|
960
960
|
disableV2RoamNotify?: pulumi.Input<boolean>;
|
|
961
961
|
/**
|
|
962
|
-
*
|
|
962
|
+
* When any of the following is true, this WLAN will be disabled * cannot get IP * cannot obtain default gateway * cannot
|
|
963
963
|
* reach default gateway
|
|
964
964
|
*/
|
|
965
965
|
disableWhenGatewayUnreachable?: pulumi.Input<boolean>;
|
|
966
966
|
disableWhenMxtunnelDown?: pulumi.Input<boolean>;
|
|
967
967
|
/**
|
|
968
|
-
*
|
|
968
|
+
* Whether to disable WMM
|
|
969
969
|
*/
|
|
970
970
|
disableWmm?: pulumi.Input<boolean>;
|
|
971
971
|
/**
|
|
972
|
-
*
|
|
972
|
+
* For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)
|
|
973
973
|
*/
|
|
974
974
|
dnsServerRewrite?: pulumi.Input<inputs.site.WlanDnsServerRewrite>;
|
|
975
975
|
dtim?: pulumi.Input<number>;
|
|
976
976
|
/**
|
|
977
|
-
*
|
|
977
|
+
* For dynamic PSK where we get perUser PSK from Radius. dynamicPsk allows PSK to be selected at runtime depending on
|
|
978
978
|
* context (wlan/site/user/...) thus following configurations are assumed (currently) * PSK will come from RADIUS server *
|
|
979
|
-
* AP sends client MAC as username
|
|
979
|
+
* AP sends client MAC as username and password (i.e. `enableMacAuth` is assumed) * AP sends BSSID:SSID as
|
|
980
980
|
* Caller-Station-ID * `authServers` is required * PSK will come from cloud WLC if source is cloudPsks * defaultPsk will be
|
|
981
981
|
* used if cloud WLC is not available * `multiPskOnly` and `psk` is ignored * `pairwise` can only be wpa2-ccmp (for now,
|
|
982
982
|
* wpa3 support on the roadmap)
|
|
983
983
|
*/
|
|
984
984
|
dynamicPsk?: pulumi.Input<inputs.site.WlanDynamicPsk>;
|
|
985
985
|
/**
|
|
986
|
-
*
|
|
986
|
+
* For 802.1x
|
|
987
987
|
*/
|
|
988
988
|
dynamicVlan?: pulumi.Input<inputs.site.WlanDynamicVlan>;
|
|
989
989
|
/**
|
|
990
|
-
*
|
|
990
|
+
* Enable AP-AP keycaching via multicast
|
|
991
991
|
*/
|
|
992
992
|
enableLocalKeycaching?: pulumi.Input<boolean>;
|
|
993
993
|
/**
|
|
994
|
-
*
|
|
994
|
+
* By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where
|
|
995
995
|
* client is a wireless bridge (DHCP packets for other MACs will need to be orwarded), wirelessBridging can be enabled
|
|
996
996
|
*/
|
|
997
997
|
enableWirelessBridging?: pulumi.Input<boolean>;
|
|
998
998
|
/**
|
|
999
|
-
*
|
|
999
|
+
* If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcpTracking will cut down DHCP response
|
|
1000
1000
|
* packets to be forwarded to wireless
|
|
1001
1001
|
*/
|
|
1002
1002
|
enableWirelessBridgingDhcpTracking?: pulumi.Input<boolean>;
|
|
1003
1003
|
/**
|
|
1004
|
-
*
|
|
1004
|
+
* If this wlan is enabled
|
|
1005
1005
|
*/
|
|
1006
1006
|
enabled?: pulumi.Input<boolean>;
|
|
1007
1007
|
/**
|
|
1008
|
-
*
|
|
1008
|
+
* If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and
|
|
1009
1009
|
* ‘auth_server_retries’ .
|
|
1010
1010
|
*/
|
|
1011
1011
|
fastDot1xTimers?: pulumi.Input<boolean>;
|
|
1012
1012
|
/**
|
|
1013
|
-
*
|
|
1013
|
+
* Whether to hide SSID in beacon
|
|
1014
1014
|
*/
|
|
1015
1015
|
hideSsid?: pulumi.Input<boolean>;
|
|
1016
1016
|
/**
|
|
1017
|
-
*
|
|
1017
|
+
* Include hostname inside IE in AP beacons / probe responses
|
|
1018
1018
|
*/
|
|
1019
1019
|
hostnameIe?: pulumi.Input<boolean>;
|
|
1020
1020
|
/**
|
|
1021
|
-
*
|
|
1021
|
+
* Hostspot 2.0 wlan settings
|
|
1022
1022
|
*/
|
|
1023
1023
|
hotspot20?: pulumi.Input<inputs.site.WlanHotspot20>;
|
|
1024
1024
|
injectDhcpOption82?: pulumi.Input<inputs.site.WlanInjectDhcpOption82>;
|
|
@@ -1027,70 +1027,70 @@ export interface WlanArgs {
|
|
|
1027
1027
|
*/
|
|
1028
1028
|
interface?: pulumi.Input<string>;
|
|
1029
1029
|
/**
|
|
1030
|
-
*
|
|
1030
|
+
* Whether to stop clients to talk to each other
|
|
1031
1031
|
*/
|
|
1032
1032
|
isolation?: pulumi.Input<boolean>;
|
|
1033
1033
|
/**
|
|
1034
|
-
*
|
|
1034
|
+
* If isolation is enabled, whether to deny clients to talk to L2 on the LAN
|
|
1035
1035
|
*/
|
|
1036
1036
|
l2Isolation?: pulumi.Input<boolean>;
|
|
1037
1037
|
/**
|
|
1038
|
-
*
|
|
1038
|
+
* Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning!
|
|
1039
1039
|
* Enabling this will cause problem for iOS devices.
|
|
1040
1040
|
*/
|
|
1041
1041
|
legacyOverds?: pulumi.Input<boolean>;
|
|
1042
1042
|
/**
|
|
1043
|
-
*
|
|
1043
|
+
* Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)
|
|
1044
1044
|
*/
|
|
1045
1045
|
limitBcast?: pulumi.Input<boolean>;
|
|
1046
1046
|
/**
|
|
1047
|
-
*
|
|
1047
|
+
* Limit probe response base on some heuristic rules
|
|
1048
1048
|
*/
|
|
1049
1049
|
limitProbeResponse?: pulumi.Input<boolean>;
|
|
1050
1050
|
/**
|
|
1051
|
-
*
|
|
1051
|
+
* Max idle time in seconds
|
|
1052
1052
|
*/
|
|
1053
1053
|
maxIdletime?: pulumi.Input<number>;
|
|
1054
1054
|
/**
|
|
1055
|
-
*
|
|
1055
|
+
* Maximum number of client connected to the SSID. `0` means unlimited
|
|
1056
1056
|
*/
|
|
1057
1057
|
maxNumClients?: pulumi.Input<number>;
|
|
1058
1058
|
mistNac?: pulumi.Input<inputs.site.WlanMistNac>;
|
|
1059
1059
|
/**
|
|
1060
|
-
*
|
|
1060
|
+
* When `interface`=`mxtunnel`, id of the Mist Tunnel
|
|
1061
1061
|
*/
|
|
1062
1062
|
mxtunnelIds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
1063
1063
|
/**
|
|
1064
|
-
*
|
|
1064
|
+
* When `interface`=`siteMedge`, name of the mxtunnel that in mxtunnels under Site Setting
|
|
1065
1065
|
*/
|
|
1066
1066
|
mxtunnelNames?: pulumi.Input<pulumi.Input<string>[]>;
|
|
1067
1067
|
/**
|
|
1068
|
-
*
|
|
1068
|
+
* Whether to only allow client to use DNS that we’ve learned from DHCP response
|
|
1069
1069
|
*/
|
|
1070
1070
|
noStaticDns?: pulumi.Input<boolean>;
|
|
1071
1071
|
/**
|
|
1072
|
-
*
|
|
1072
|
+
* Whether to only allow client that we’ve learned from DHCP exchange to talk
|
|
1073
1073
|
*/
|
|
1074
1074
|
noStaticIp?: pulumi.Input<boolean>;
|
|
1075
1075
|
/**
|
|
1076
|
-
*
|
|
1076
|
+
* Portal wlan settings
|
|
1077
1077
|
*/
|
|
1078
1078
|
portal?: pulumi.Input<inputs.site.WlanPortal>;
|
|
1079
1079
|
/**
|
|
1080
|
-
*
|
|
1080
|
+
* List of hostnames without http(s):// (matched by substring)
|
|
1081
1081
|
*/
|
|
1082
1082
|
portalAllowedHostnames?: pulumi.Input<pulumi.Input<string>[]>;
|
|
1083
1083
|
/**
|
|
1084
|
-
*
|
|
1084
|
+
* List of CIDRs
|
|
1085
1085
|
*/
|
|
1086
1086
|
portalAllowedSubnets?: pulumi.Input<pulumi.Input<string>[]>;
|
|
1087
1087
|
/**
|
|
1088
|
-
*
|
|
1088
|
+
* List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames
|
|
1089
1089
|
*/
|
|
1090
1090
|
portalDeniedHostnames?: pulumi.Input<pulumi.Input<string>[]>;
|
|
1091
1091
|
qos?: pulumi.Input<inputs.site.WlanQos>;
|
|
1092
1092
|
/**
|
|
1093
|
-
*
|
|
1093
|
+
* RadSec settings
|
|
1094
1094
|
*/
|
|
1095
1095
|
radsec?: pulumi.Input<inputs.site.WlanRadsec>;
|
|
1096
1096
|
/**
|
|
@@ -1100,7 +1100,7 @@ export interface WlanArgs {
|
|
|
1100
1100
|
[key: string]: pulumi.Input<inputs.site.WlanRateset>;
|
|
1101
1101
|
}>;
|
|
1102
1102
|
/**
|
|
1103
|
-
*
|
|
1103
|
+
* When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)
|
|
1104
1104
|
*/
|
|
1105
1105
|
reconnectClientsWhenRoamingMxcluster?: pulumi.Input<boolean>;
|
|
1106
1106
|
/**
|
|
@@ -1113,19 +1113,19 @@ export interface WlanArgs {
|
|
|
1113
1113
|
schedule?: pulumi.Input<inputs.site.WlanSchedule>;
|
|
1114
1114
|
siteId: pulumi.Input<string>;
|
|
1115
1115
|
/**
|
|
1116
|
-
*
|
|
1116
|
+
* Whether to exclude this WLAN from SLE metrics
|
|
1117
1117
|
*/
|
|
1118
1118
|
sleExcluded?: pulumi.Input<boolean>;
|
|
1119
1119
|
/**
|
|
1120
|
-
*
|
|
1120
|
+
* Name of the SSID
|
|
1121
1121
|
*/
|
|
1122
1122
|
ssid: pulumi.Input<string>;
|
|
1123
1123
|
/**
|
|
1124
|
-
*
|
|
1124
|
+
* If `auth.type`==`eap` or `auth.type`==`psk`, should only be set for legacy client, such as pre-2004, 802.11b devices
|
|
1125
1125
|
*/
|
|
1126
1126
|
useEapolV1?: pulumi.Input<boolean>;
|
|
1127
1127
|
/**
|
|
1128
|
-
*
|
|
1128
|
+
* If vlan tagging is enabled
|
|
1129
1129
|
*/
|
|
1130
1130
|
vlanEnabled?: pulumi.Input<boolean>;
|
|
1131
1131
|
vlanId?: pulumi.Input<string>;
|
|
@@ -1139,31 +1139,31 @@ export interface WlanArgs {
|
|
|
1139
1139
|
*/
|
|
1140
1140
|
vlanPooling?: pulumi.Input<boolean>;
|
|
1141
1141
|
/**
|
|
1142
|
-
* kbps
|
|
1142
|
+
* In kbps
|
|
1143
1143
|
*/
|
|
1144
1144
|
wlanLimitDown?: pulumi.Input<number>;
|
|
1145
1145
|
/**
|
|
1146
|
-
*
|
|
1146
|
+
* If downlink limiting for whole wlan is enabled
|
|
1147
1147
|
*/
|
|
1148
1148
|
wlanLimitDownEnabled?: pulumi.Input<boolean>;
|
|
1149
1149
|
/**
|
|
1150
|
-
* kbps
|
|
1150
|
+
* In kbps
|
|
1151
1151
|
*/
|
|
1152
1152
|
wlanLimitUp?: pulumi.Input<number>;
|
|
1153
1153
|
/**
|
|
1154
|
-
*
|
|
1154
|
+
* If uplink limiting for whole wlan is enabled
|
|
1155
1155
|
*/
|
|
1156
1156
|
wlanLimitUpEnabled?: pulumi.Input<boolean>;
|
|
1157
1157
|
/**
|
|
1158
|
-
*
|
|
1158
|
+
* List of wxtag_ids
|
|
1159
1159
|
*/
|
|
1160
1160
|
wxtagIds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
1161
1161
|
/**
|
|
1162
|
-
*
|
|
1162
|
+
* When `interface`=`wxtunnel`, id of the WXLAN Tunnel
|
|
1163
1163
|
*/
|
|
1164
1164
|
wxtunnelId?: pulumi.Input<string>;
|
|
1165
1165
|
/**
|
|
1166
|
-
*
|
|
1166
|
+
* When `interface`=`wxtunnel`, remote tunnel identifier
|
|
1167
1167
|
*/
|
|
1168
1168
|
wxtunnelRemoteId?: pulumi.Input<string>;
|
|
1169
1169
|
}
|