@pulumi/juniper-mist 0.6.2 → 0.6.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/config/vars.d.ts +3 -5
- package/config/vars.js.map +1 -1
- package/device/ap.d.ts +12 -15
- package/device/ap.js +77 -77
- package/device/ap.js.map +1 -1
- package/device/base.js +34 -34
- package/device/base.js.map +1 -1
- package/device/gateway.d.ts +15 -6
- package/device/gateway.js +77 -75
- package/device/gateway.js.map +1 -1
- package/device/gatewayCluster.js +7 -7
- package/device/gatewayCluster.js.map +1 -1
- package/device/image.js +13 -13
- package/device/image.js.map +1 -1
- package/device/switch.d.ts +24 -39
- package/device/switch.js +99 -99
- package/device/switch.js.map +1 -1
- package/org/alarmtemplate.js +12 -12
- package/org/alarmtemplate.js.map +1 -1
- package/org/apitoken.js +13 -13
- package/org/apitoken.js.map +1 -1
- package/org/avprofile.js +17 -17
- package/org/avprofile.js.map +1 -1
- package/org/base.js +13 -13
- package/org/base.js.map +1 -1
- package/org/deviceprofileAp.d.ts +12 -12
- package/org/deviceprofileAp.js +49 -49
- package/org/deviceprofileAp.js.map +1 -1
- package/org/deviceprofileAssign.js +10 -10
- package/org/deviceprofileAssign.js.map +1 -1
- package/org/deviceprofileGateway.d.ts +15 -6
- package/org/deviceprofileGateway.js +55 -53
- package/org/deviceprofileGateway.js.map +1 -1
- package/org/evpnTopology.js +13 -13
- package/org/evpnTopology.js.map +1 -1
- package/org/gatewaytemplate.d.ts +18 -12
- package/org/gatewaytemplate.js +56 -54
- package/org/gatewaytemplate.js.map +1 -1
- package/org/idpprofile.js +11 -11
- package/org/idpprofile.js.map +1 -1
- package/org/inventory.d.ts +15 -9
- package/org/inventory.js +6 -6
- package/org/inventory.js.map +1 -1
- package/org/nacEndpoint.js +17 -17
- package/org/nacEndpoint.js.map +1 -1
- package/org/nacidp.js +57 -57
- package/org/nacidp.js.map +1 -1
- package/org/nacrule.js +22 -22
- package/org/nacrule.js.map +1 -1
- package/org/nactag.d.ts +42 -39
- package/org/nactag.js +35 -35
- package/org/nactag.js.map +1 -1
- package/org/network.js +33 -33
- package/org/network.js.map +1 -1
- package/org/networktemplate.d.ts +6 -15
- package/org/networktemplate.js +50 -50
- package/org/networktemplate.js.map +1 -1
- package/org/psk.js +38 -38
- package/org/psk.js.map +1 -1
- package/org/rftemplate.js +28 -28
- package/org/rftemplate.js.map +1 -1
- package/org/service.d.ts +12 -6
- package/org/service.js +50 -50
- package/org/service.js.map +1 -1
- package/org/servicepolicy.js +28 -28
- package/org/servicepolicy.js.map +1 -1
- package/org/setting.d.ts +27 -42
- package/org/setting.js +70 -70
- package/org/setting.js.map +1 -1
- package/org/sitegroup.js +6 -6
- package/org/sitegroup.js.map +1 -1
- package/org/sso.d.ts +15 -33
- package/org/sso.js +31 -31
- package/org/sso.js.map +1 -1
- package/org/ssoRole.js +9 -9
- package/org/ssoRole.js.map +1 -1
- package/org/vpn.js +12 -12
- package/org/vpn.js.map +1 -1
- package/org/webhook.d.ts +6 -15
- package/org/webhook.js +40 -40
- package/org/webhook.js.map +1 -1
- package/org/wlan.d.ts +69 -93
- package/org/wlan.js +190 -190
- package/org/wlan.js.map +1 -1
- package/org/wlanPortalImage.js +10 -10
- package/org/wlanPortalImage.js.map +1 -1
- package/org/wlanPortalTemplate.js +10 -10
- package/org/wlanPortalTemplate.js.map +1 -1
- package/org/wlantemplate.js +14 -14
- package/org/wlantemplate.js.map +1 -1
- package/org/wxrule.js +27 -27
- package/org/wxrule.js.map +1 -1
- package/org/wxtag.d.ts +60 -36
- package/org/wxtag.js +21 -21
- package/org/wxtag.js.map +1 -1
- package/package.json +2 -2
- package/provider.d.ts +5 -8
- package/provider.js +7 -7
- package/provider.js.map +1 -1
- package/site/base.js +34 -34
- package/site/base.js.map +1 -1
- package/site/evpnTopology.js +14 -14
- package/site/evpnTopology.js.map +1 -1
- package/site/networktemplate.d.ts +3 -9
- package/site/networktemplate.js +52 -52
- package/site/networktemplate.js.map +1 -1
- package/site/psk.js +35 -35
- package/site/psk.js.map +1 -1
- package/site/setting.d.ts +33 -63
- package/site/setting.js +97 -97
- package/site/setting.js.map +1 -1
- package/site/webhook.d.ts +6 -15
- package/site/webhook.js +43 -43
- package/site/webhook.js.map +1 -1
- package/site/wlan.d.ts +69 -93
- package/site/wlan.js +188 -188
- package/site/wlan.js.map +1 -1
- package/site/wlanPortalImage.js +10 -10
- package/site/wlanPortalImage.js.map +1 -1
- package/site/wlanPortalTemplate.js +10 -10
- package/site/wlanPortalTemplate.js.map +1 -1
- package/site/wxrule.js +24 -24
- package/site/wxrule.js.map +1 -1
- package/site/wxtag.d.ts +60 -36
- package/site/wxtag.js +21 -21
- package/site/wxtag.js.map +1 -1
- package/types/output.d.ts +55 -55
- package/upgradeDevice.js +30 -30
- package/upgradeDevice.js.map +1 -1
- package/utilities.js +18 -29
- package/utilities.js.map +1 -1
package/org/wlan.d.ts
CHANGED
|
@@ -65,9 +65,7 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
65
65
|
*/
|
|
66
66
|
readonly acctImmediateUpdate: pulumi.Output<boolean>;
|
|
67
67
|
/**
|
|
68
|
-
* How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request
|
|
69
|
-
* from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended
|
|
70
|
-
* when enabled
|
|
68
|
+
* How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
|
|
71
69
|
*/
|
|
72
70
|
readonly acctInterimInterval: pulumi.Output<number>;
|
|
73
71
|
/**
|
|
@@ -119,8 +117,7 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
119
117
|
*/
|
|
120
118
|
readonly authServerSelection: pulumi.Output<string>;
|
|
121
119
|
/**
|
|
122
|
-
* List of RADIUS authentication servers, at least one is needed if `auth type`==`eap`, order matters where the first one
|
|
123
|
-
* is treated as primary
|
|
120
|
+
* List of RADIUS authentication servers, at least one is needed if `auth type`==`eap`, order matters where the first one is treated as primary
|
|
124
121
|
*/
|
|
125
122
|
readonly authServers: pulumi.Output<outputs.org.WlanAuthServer[]>;
|
|
126
123
|
/**
|
|
@@ -132,15 +129,11 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
132
129
|
*/
|
|
133
130
|
readonly authServersNasIp: pulumi.Output<string>;
|
|
134
131
|
/**
|
|
135
|
-
* Radius auth session retries. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘retries’
|
|
136
|
-
* to value of auth_servers_retries. ‘max-requests’ is also set when setting authServersRetries and is set to default
|
|
137
|
-
* value to 3.
|
|
132
|
+
* Radius auth session retries. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘retries’ are set to value of auth_servers_retries. ‘max-requests’ is also set when setting authServersRetries and is set to default value to 3.
|
|
138
133
|
*/
|
|
139
134
|
readonly authServersRetries: pulumi.Output<number | undefined>;
|
|
140
135
|
/**
|
|
141
|
-
* Radius auth session timeout. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘quite-period’ and
|
|
142
|
-
* ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when
|
|
143
|
-
* setting authServersTimeout and is set to default value of 10.
|
|
136
|
+
* Radius auth session timeout. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘quite-period’ and ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when setting authServersTimeout and is set to default value of 10.
|
|
144
137
|
*/
|
|
145
138
|
readonly authServersTimeout: pulumi.Output<number | undefined>;
|
|
146
139
|
/**
|
|
@@ -164,8 +157,7 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
164
157
|
*/
|
|
165
158
|
readonly bonjour: pulumi.Output<outputs.org.WlanBonjour | undefined>;
|
|
166
159
|
/**
|
|
167
|
-
* Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA:
|
|
168
|
-
* https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html
|
|
160
|
+
* Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html
|
|
169
161
|
*/
|
|
170
162
|
readonly ciscoCwa: pulumi.Output<outputs.org.WlanCiscoCwa>;
|
|
171
163
|
readonly clientLimitDown: pulumi.Output<string>;
|
|
@@ -207,8 +199,10 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
207
199
|
*/
|
|
208
200
|
readonly disableV2RoamNotify: pulumi.Output<boolean | undefined>;
|
|
209
201
|
/**
|
|
210
|
-
* When any of the following is true, this WLAN will be disabled
|
|
211
|
-
*
|
|
202
|
+
* When any of the following is true, this WLAN will be disabled
|
|
203
|
+
* * cannot get IP
|
|
204
|
+
* * cannot obtain default gateway
|
|
205
|
+
* * cannot reach default gateway
|
|
212
206
|
*/
|
|
213
207
|
readonly disableWhenGatewayUnreachable: pulumi.Output<boolean | undefined>;
|
|
214
208
|
readonly disableWhenMxtunnelDown: pulumi.Output<boolean | undefined>;
|
|
@@ -222,12 +216,15 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
222
216
|
readonly dnsServerRewrite: pulumi.Output<outputs.org.WlanDnsServerRewrite | undefined>;
|
|
223
217
|
readonly dtim: pulumi.Output<number>;
|
|
224
218
|
/**
|
|
225
|
-
* For dynamic PSK where we get perUser PSK from Radius. dynamicPsk allows PSK to be selected at runtime depending on
|
|
226
|
-
*
|
|
227
|
-
* AP sends client MAC as username and password (i.e. `enableMacAuth` is assumed)
|
|
228
|
-
* Caller-Station-ID
|
|
229
|
-
*
|
|
230
|
-
*
|
|
219
|
+
* For dynamic PSK where we get perUser PSK from Radius. dynamicPsk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)
|
|
220
|
+
* * PSK will come from RADIUS server
|
|
221
|
+
* * AP sends client MAC as username and password (i.e. `enableMacAuth` is assumed)
|
|
222
|
+
* * AP sends BSSID:SSID as Caller-Station-ID
|
|
223
|
+
* * `authServers` is required
|
|
224
|
+
* * PSK will come from cloud WLC if source is cloudPsks
|
|
225
|
+
* * defaultPsk will be used if cloud WLC is not available
|
|
226
|
+
* * `multiPskOnly` and `psk` is ignored
|
|
227
|
+
* * `pairwise` can only be wpa2-ccmp (for now, wpa3 support on the roadmap)
|
|
231
228
|
*/
|
|
232
229
|
readonly dynamicPsk: pulumi.Output<outputs.org.WlanDynamicPsk | undefined>;
|
|
233
230
|
/**
|
|
@@ -239,13 +236,11 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
239
236
|
*/
|
|
240
237
|
readonly enableLocalKeycaching: pulumi.Output<boolean | undefined>;
|
|
241
238
|
/**
|
|
242
|
-
* By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where
|
|
243
|
-
* client is a wireless bridge (DHCP packets for other MACs will need to be forwarded), wirelessBridging can be enabled
|
|
239
|
+
* By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where client is a wireless bridge (DHCP packets for other MACs will need to be forwarded), wirelessBridging can be enabled
|
|
244
240
|
*/
|
|
245
241
|
readonly enableWirelessBridging: pulumi.Output<boolean | undefined>;
|
|
246
242
|
/**
|
|
247
|
-
* If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcpTracking will cut down DHCP response
|
|
248
|
-
* packets to be forwarded to wireless
|
|
243
|
+
* If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcpTracking will cut down DHCP response packets to be forwarded to wireless
|
|
249
244
|
*/
|
|
250
245
|
readonly enableWirelessBridgingDhcpTracking: pulumi.Output<boolean | undefined>;
|
|
251
246
|
/**
|
|
@@ -253,8 +248,7 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
253
248
|
*/
|
|
254
249
|
readonly enabled: pulumi.Output<boolean>;
|
|
255
250
|
/**
|
|
256
|
-
* If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and
|
|
257
|
-
* ‘auth_server_retries’ .
|
|
251
|
+
* If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .
|
|
258
252
|
*/
|
|
259
253
|
readonly fastDot1xTimers: pulumi.Output<boolean | undefined>;
|
|
260
254
|
/**
|
|
@@ -283,8 +277,7 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
283
277
|
*/
|
|
284
278
|
readonly l2Isolation: pulumi.Output<boolean | undefined>;
|
|
285
279
|
/**
|
|
286
|
-
* Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning!
|
|
287
|
-
* Enabling this will cause problem for iOS devices.
|
|
280
|
+
* Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.
|
|
288
281
|
*/
|
|
289
282
|
readonly legacyOverds: pulumi.Output<boolean | undefined>;
|
|
290
283
|
/**
|
|
@@ -393,8 +386,7 @@ export declare class Wlan extends pulumi.CustomResource {
|
|
|
393
386
|
*/
|
|
394
387
|
readonly vlanIds: pulumi.Output<string[]>;
|
|
395
388
|
/**
|
|
396
|
-
* Requires `vlanEnabled`==`true` to be set to `true`. Vlan pooling allows AP to place client on different VLAN using a
|
|
397
|
-
* deterministic algorithm
|
|
389
|
+
* Requires `vlanEnabled`==`true` to be set to `true`. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm
|
|
398
390
|
*/
|
|
399
391
|
readonly vlanPooling: pulumi.Output<boolean>;
|
|
400
392
|
readonly wlanLimitDown: pulumi.Output<string>;
|
|
@@ -437,9 +429,7 @@ export interface WlanState {
|
|
|
437
429
|
*/
|
|
438
430
|
acctImmediateUpdate?: pulumi.Input<boolean>;
|
|
439
431
|
/**
|
|
440
|
-
* How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request
|
|
441
|
-
* from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended
|
|
442
|
-
* when enabled
|
|
432
|
+
* How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
|
|
443
433
|
*/
|
|
444
434
|
acctInterimInterval?: pulumi.Input<number>;
|
|
445
435
|
/**
|
|
@@ -491,8 +481,7 @@ export interface WlanState {
|
|
|
491
481
|
*/
|
|
492
482
|
authServerSelection?: pulumi.Input<string>;
|
|
493
483
|
/**
|
|
494
|
-
* List of RADIUS authentication servers, at least one is needed if `auth type`==`eap`, order matters where the first one
|
|
495
|
-
* is treated as primary
|
|
484
|
+
* List of RADIUS authentication servers, at least one is needed if `auth type`==`eap`, order matters where the first one is treated as primary
|
|
496
485
|
*/
|
|
497
486
|
authServers?: pulumi.Input<pulumi.Input<inputs.org.WlanAuthServer>[]>;
|
|
498
487
|
/**
|
|
@@ -504,15 +493,11 @@ export interface WlanState {
|
|
|
504
493
|
*/
|
|
505
494
|
authServersNasIp?: pulumi.Input<string>;
|
|
506
495
|
/**
|
|
507
|
-
* Radius auth session retries. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘retries’
|
|
508
|
-
* to value of auth_servers_retries. ‘max-requests’ is also set when setting authServersRetries and is set to default
|
|
509
|
-
* value to 3.
|
|
496
|
+
* Radius auth session retries. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘retries’ are set to value of auth_servers_retries. ‘max-requests’ is also set when setting authServersRetries and is set to default value to 3.
|
|
510
497
|
*/
|
|
511
498
|
authServersRetries?: pulumi.Input<number>;
|
|
512
499
|
/**
|
|
513
|
-
* Radius auth session timeout. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘quite-period’ and
|
|
514
|
-
* ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when
|
|
515
|
-
* setting authServersTimeout and is set to default value of 10.
|
|
500
|
+
* Radius auth session timeout. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘quite-period’ and ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when setting authServersTimeout and is set to default value of 10.
|
|
516
501
|
*/
|
|
517
502
|
authServersTimeout?: pulumi.Input<number>;
|
|
518
503
|
/**
|
|
@@ -536,8 +521,7 @@ export interface WlanState {
|
|
|
536
521
|
*/
|
|
537
522
|
bonjour?: pulumi.Input<inputs.org.WlanBonjour>;
|
|
538
523
|
/**
|
|
539
|
-
* Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA:
|
|
540
|
-
* https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html
|
|
524
|
+
* Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html
|
|
541
525
|
*/
|
|
542
526
|
ciscoCwa?: pulumi.Input<inputs.org.WlanCiscoCwa>;
|
|
543
527
|
clientLimitDown?: pulumi.Input<string>;
|
|
@@ -579,8 +563,10 @@ export interface WlanState {
|
|
|
579
563
|
*/
|
|
580
564
|
disableV2RoamNotify?: pulumi.Input<boolean>;
|
|
581
565
|
/**
|
|
582
|
-
* When any of the following is true, this WLAN will be disabled
|
|
583
|
-
*
|
|
566
|
+
* When any of the following is true, this WLAN will be disabled
|
|
567
|
+
* * cannot get IP
|
|
568
|
+
* * cannot obtain default gateway
|
|
569
|
+
* * cannot reach default gateway
|
|
584
570
|
*/
|
|
585
571
|
disableWhenGatewayUnreachable?: pulumi.Input<boolean>;
|
|
586
572
|
disableWhenMxtunnelDown?: pulumi.Input<boolean>;
|
|
@@ -594,12 +580,15 @@ export interface WlanState {
|
|
|
594
580
|
dnsServerRewrite?: pulumi.Input<inputs.org.WlanDnsServerRewrite>;
|
|
595
581
|
dtim?: pulumi.Input<number>;
|
|
596
582
|
/**
|
|
597
|
-
* For dynamic PSK where we get perUser PSK from Radius. dynamicPsk allows PSK to be selected at runtime depending on
|
|
598
|
-
*
|
|
599
|
-
* AP sends client MAC as username and password (i.e. `enableMacAuth` is assumed)
|
|
600
|
-
* Caller-Station-ID
|
|
601
|
-
*
|
|
602
|
-
*
|
|
583
|
+
* For dynamic PSK where we get perUser PSK from Radius. dynamicPsk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)
|
|
584
|
+
* * PSK will come from RADIUS server
|
|
585
|
+
* * AP sends client MAC as username and password (i.e. `enableMacAuth` is assumed)
|
|
586
|
+
* * AP sends BSSID:SSID as Caller-Station-ID
|
|
587
|
+
* * `authServers` is required
|
|
588
|
+
* * PSK will come from cloud WLC if source is cloudPsks
|
|
589
|
+
* * defaultPsk will be used if cloud WLC is not available
|
|
590
|
+
* * `multiPskOnly` and `psk` is ignored
|
|
591
|
+
* * `pairwise` can only be wpa2-ccmp (for now, wpa3 support on the roadmap)
|
|
603
592
|
*/
|
|
604
593
|
dynamicPsk?: pulumi.Input<inputs.org.WlanDynamicPsk>;
|
|
605
594
|
/**
|
|
@@ -611,13 +600,11 @@ export interface WlanState {
|
|
|
611
600
|
*/
|
|
612
601
|
enableLocalKeycaching?: pulumi.Input<boolean>;
|
|
613
602
|
/**
|
|
614
|
-
* By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where
|
|
615
|
-
* client is a wireless bridge (DHCP packets for other MACs will need to be forwarded), wirelessBridging can be enabled
|
|
603
|
+
* By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where client is a wireless bridge (DHCP packets for other MACs will need to be forwarded), wirelessBridging can be enabled
|
|
616
604
|
*/
|
|
617
605
|
enableWirelessBridging?: pulumi.Input<boolean>;
|
|
618
606
|
/**
|
|
619
|
-
* If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcpTracking will cut down DHCP response
|
|
620
|
-
* packets to be forwarded to wireless
|
|
607
|
+
* If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcpTracking will cut down DHCP response packets to be forwarded to wireless
|
|
621
608
|
*/
|
|
622
609
|
enableWirelessBridgingDhcpTracking?: pulumi.Input<boolean>;
|
|
623
610
|
/**
|
|
@@ -625,8 +612,7 @@ export interface WlanState {
|
|
|
625
612
|
*/
|
|
626
613
|
enabled?: pulumi.Input<boolean>;
|
|
627
614
|
/**
|
|
628
|
-
* If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and
|
|
629
|
-
* ‘auth_server_retries’ .
|
|
615
|
+
* If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .
|
|
630
616
|
*/
|
|
631
617
|
fastDot1xTimers?: pulumi.Input<boolean>;
|
|
632
618
|
/**
|
|
@@ -655,8 +641,7 @@ export interface WlanState {
|
|
|
655
641
|
*/
|
|
656
642
|
l2Isolation?: pulumi.Input<boolean>;
|
|
657
643
|
/**
|
|
658
|
-
* Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning!
|
|
659
|
-
* Enabling this will cause problem for iOS devices.
|
|
644
|
+
* Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.
|
|
660
645
|
*/
|
|
661
646
|
legacyOverds?: pulumi.Input<boolean>;
|
|
662
647
|
/**
|
|
@@ -765,8 +750,7 @@ export interface WlanState {
|
|
|
765
750
|
*/
|
|
766
751
|
vlanIds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
767
752
|
/**
|
|
768
|
-
* Requires `vlanEnabled`==`true` to be set to `true`. Vlan pooling allows AP to place client on different VLAN using a
|
|
769
|
-
* deterministic algorithm
|
|
753
|
+
* Requires `vlanEnabled`==`true` to be set to `true`. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm
|
|
770
754
|
*/
|
|
771
755
|
vlanPooling?: pulumi.Input<boolean>;
|
|
772
756
|
wlanLimitDown?: pulumi.Input<string>;
|
|
@@ -801,9 +785,7 @@ export interface WlanArgs {
|
|
|
801
785
|
*/
|
|
802
786
|
acctImmediateUpdate?: pulumi.Input<boolean>;
|
|
803
787
|
/**
|
|
804
|
-
* How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request
|
|
805
|
-
* from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended
|
|
806
|
-
* when enabled
|
|
788
|
+
* How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the radius server, 600 and up is recommended when enabled
|
|
807
789
|
*/
|
|
808
790
|
acctInterimInterval?: pulumi.Input<number>;
|
|
809
791
|
/**
|
|
@@ -855,8 +837,7 @@ export interface WlanArgs {
|
|
|
855
837
|
*/
|
|
856
838
|
authServerSelection?: pulumi.Input<string>;
|
|
857
839
|
/**
|
|
858
|
-
* List of RADIUS authentication servers, at least one is needed if `auth type`==`eap`, order matters where the first one
|
|
859
|
-
* is treated as primary
|
|
840
|
+
* List of RADIUS authentication servers, at least one is needed if `auth type`==`eap`, order matters where the first one is treated as primary
|
|
860
841
|
*/
|
|
861
842
|
authServers?: pulumi.Input<pulumi.Input<inputs.org.WlanAuthServer>[]>;
|
|
862
843
|
/**
|
|
@@ -868,15 +849,11 @@ export interface WlanArgs {
|
|
|
868
849
|
*/
|
|
869
850
|
authServersNasIp?: pulumi.Input<string>;
|
|
870
851
|
/**
|
|
871
|
-
* Radius auth session retries. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘retries’
|
|
872
|
-
* to value of auth_servers_retries. ‘max-requests’ is also set when setting authServersRetries and is set to default
|
|
873
|
-
* value to 3.
|
|
852
|
+
* Radius auth session retries. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘retries’ are set to value of auth_servers_retries. ‘max-requests’ is also set when setting authServersRetries and is set to default value to 3.
|
|
874
853
|
*/
|
|
875
854
|
authServersRetries?: pulumi.Input<number>;
|
|
876
855
|
/**
|
|
877
|
-
* Radius auth session timeout. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘quite-period’ and
|
|
878
|
-
* ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when
|
|
879
|
-
* setting authServersTimeout and is set to default value of 10.
|
|
856
|
+
* Radius auth session timeout. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘quite-period’ and ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when setting authServersTimeout and is set to default value of 10.
|
|
880
857
|
*/
|
|
881
858
|
authServersTimeout?: pulumi.Input<number>;
|
|
882
859
|
/**
|
|
@@ -900,8 +877,7 @@ export interface WlanArgs {
|
|
|
900
877
|
*/
|
|
901
878
|
bonjour?: pulumi.Input<inputs.org.WlanBonjour>;
|
|
902
879
|
/**
|
|
903
|
-
* Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA:
|
|
904
|
-
* https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html
|
|
880
|
+
* Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html
|
|
905
881
|
*/
|
|
906
882
|
ciscoCwa?: pulumi.Input<inputs.org.WlanCiscoCwa>;
|
|
907
883
|
clientLimitDown?: pulumi.Input<string>;
|
|
@@ -943,8 +919,10 @@ export interface WlanArgs {
|
|
|
943
919
|
*/
|
|
944
920
|
disableV2RoamNotify?: pulumi.Input<boolean>;
|
|
945
921
|
/**
|
|
946
|
-
* When any of the following is true, this WLAN will be disabled
|
|
947
|
-
*
|
|
922
|
+
* When any of the following is true, this WLAN will be disabled
|
|
923
|
+
* * cannot get IP
|
|
924
|
+
* * cannot obtain default gateway
|
|
925
|
+
* * cannot reach default gateway
|
|
948
926
|
*/
|
|
949
927
|
disableWhenGatewayUnreachable?: pulumi.Input<boolean>;
|
|
950
928
|
disableWhenMxtunnelDown?: pulumi.Input<boolean>;
|
|
@@ -958,12 +936,15 @@ export interface WlanArgs {
|
|
|
958
936
|
dnsServerRewrite?: pulumi.Input<inputs.org.WlanDnsServerRewrite>;
|
|
959
937
|
dtim?: pulumi.Input<number>;
|
|
960
938
|
/**
|
|
961
|
-
* For dynamic PSK where we get perUser PSK from Radius. dynamicPsk allows PSK to be selected at runtime depending on
|
|
962
|
-
*
|
|
963
|
-
* AP sends client MAC as username and password (i.e. `enableMacAuth` is assumed)
|
|
964
|
-
* Caller-Station-ID
|
|
965
|
-
*
|
|
966
|
-
*
|
|
939
|
+
* For dynamic PSK where we get perUser PSK from Radius. dynamicPsk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)
|
|
940
|
+
* * PSK will come from RADIUS server
|
|
941
|
+
* * AP sends client MAC as username and password (i.e. `enableMacAuth` is assumed)
|
|
942
|
+
* * AP sends BSSID:SSID as Caller-Station-ID
|
|
943
|
+
* * `authServers` is required
|
|
944
|
+
* * PSK will come from cloud WLC if source is cloudPsks
|
|
945
|
+
* * defaultPsk will be used if cloud WLC is not available
|
|
946
|
+
* * `multiPskOnly` and `psk` is ignored
|
|
947
|
+
* * `pairwise` can only be wpa2-ccmp (for now, wpa3 support on the roadmap)
|
|
967
948
|
*/
|
|
968
949
|
dynamicPsk?: pulumi.Input<inputs.org.WlanDynamicPsk>;
|
|
969
950
|
/**
|
|
@@ -975,13 +956,11 @@ export interface WlanArgs {
|
|
|
975
956
|
*/
|
|
976
957
|
enableLocalKeycaching?: pulumi.Input<boolean>;
|
|
977
958
|
/**
|
|
978
|
-
* By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where
|
|
979
|
-
* client is a wireless bridge (DHCP packets for other MACs will need to be forwarded), wirelessBridging can be enabled
|
|
959
|
+
* By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where client is a wireless bridge (DHCP packets for other MACs will need to be forwarded), wirelessBridging can be enabled
|
|
980
960
|
*/
|
|
981
961
|
enableWirelessBridging?: pulumi.Input<boolean>;
|
|
982
962
|
/**
|
|
983
|
-
* If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcpTracking will cut down DHCP response
|
|
984
|
-
* packets to be forwarded to wireless
|
|
963
|
+
* If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcpTracking will cut down DHCP response packets to be forwarded to wireless
|
|
985
964
|
*/
|
|
986
965
|
enableWirelessBridgingDhcpTracking?: pulumi.Input<boolean>;
|
|
987
966
|
/**
|
|
@@ -989,8 +968,7 @@ export interface WlanArgs {
|
|
|
989
968
|
*/
|
|
990
969
|
enabled?: pulumi.Input<boolean>;
|
|
991
970
|
/**
|
|
992
|
-
* If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and
|
|
993
|
-
* ‘auth_server_retries’ .
|
|
971
|
+
* If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .
|
|
994
972
|
*/
|
|
995
973
|
fastDot1xTimers?: pulumi.Input<boolean>;
|
|
996
974
|
/**
|
|
@@ -1019,8 +997,7 @@ export interface WlanArgs {
|
|
|
1019
997
|
*/
|
|
1020
998
|
l2Isolation?: pulumi.Input<boolean>;
|
|
1021
999
|
/**
|
|
1022
|
-
* Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning!
|
|
1023
|
-
* Enabling this will cause problem for iOS devices.
|
|
1000
|
+
* Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.
|
|
1024
1001
|
*/
|
|
1025
1002
|
legacyOverds?: pulumi.Input<boolean>;
|
|
1026
1003
|
/**
|
|
@@ -1119,8 +1096,7 @@ export interface WlanArgs {
|
|
|
1119
1096
|
*/
|
|
1120
1097
|
vlanIds?: pulumi.Input<pulumi.Input<string>[]>;
|
|
1121
1098
|
/**
|
|
1122
|
-
* Requires `vlanEnabled`==`true` to be set to `true`. Vlan pooling allows AP to place client on different VLAN using a
|
|
1123
|
-
* deterministic algorithm
|
|
1099
|
+
* Requires `vlanEnabled`==`true` to be set to `true`. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm
|
|
1124
1100
|
*/
|
|
1125
1101
|
vlanPooling?: pulumi.Input<boolean>;
|
|
1126
1102
|
wlanLimitDown?: pulumi.Input<string>;
|