@pulumi/juniper-mist 0.7.0 → 0.7.1

package/types/input.d.ts

@@ -501,14 +501,14 @@ export declare namespace device {
          * Antenna gain for 6G - for models with external antenna only
          */
         antGain6?: pulumi.Input<number>;
-        /**
-         * Antenna Mode for AP which supports selectable antennas. enum: `external`, `internal`
-         */
-        antMode?: pulumi.Input<string>;
         /**
          * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
          */
         antennaMode?: pulumi.Input<string>;
+        /**
+         * Antenna Mode for AP which supports selectable antennas. enum: `external`, `internal`
+         */
+        antennaSelect?: pulumi.Input<string>;
         /**
          * Radio Band AP settings
          */
@@ -537,6 +537,10 @@ export declare namespace device {
          * To make an outdoor operate indoor. For an outdoor-ap, some channels are disallowed by default, this allows the user to use it as an indoor-ap
          */
         indoorUse?: pulumi.Input<boolean>;
+        /**
+         * Enable RRM to manage all radio settings (ignores all bandXxx configs)
+         */
+        rrmManaged?: pulumi.Input<boolean>;
         /**
          * Whether scanning radio is enabled
          */
@@ -585,6 +589,10 @@ export declare namespace device {
     interface ApRadioConfigBand5 {
         allowRrmDisable?: pulumi.Input<boolean>;
         antGain?: pulumi.Input<number>;
+        /**
+         * enum: `narrow`, `medium`, `wide`
+         */
+        antennaBeamPattern?: pulumi.Input<string>;
         /**
          * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
          */
@@ -625,6 +633,10 @@ export declare namespace device {
     interface ApRadioConfigBand5On24Radio {
         allowRrmDisable?: pulumi.Input<boolean>;
         antGain?: pulumi.Input<number>;
+        /**
+         * enum: `narrow`, `medium`, `wide`
+         */
+        antennaBeamPattern?: pulumi.Input<string>;
         /**
          * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
          */
@@ -665,6 +677,10 @@ export declare namespace device {
     interface ApRadioConfigBand6 {
         allowRrmDisable?: pulumi.Input<boolean>;
         antGain?: pulumi.Input<number>;
+        /**
+         * enum: `narrow`, `medium`, `wide`
+         */
+        antennaBeamPattern?: pulumi.Input<string>;
         /**
          * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
          */
@@ -1333,7 +1349,7 @@ export declare namespace device {
          */
         aeIdx?: pulumi.Input<string>;
         /**
-         * For SRX Only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only
+         * For SRX only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only
          */
         aeLacpForceUp?: pulumi.Input<boolean>;
         aggregated?: pulumi.Input<boolean>;
@@ -1725,7 +1741,7 @@ export declare namespace device {
          */
         antivirus?: pulumi.Input<inputs.device.GatewayServicePolicyAntivirus>;
         /**
-         * For SRX Only
+         * SRX only
          */
         appqoe?: pulumi.Input<inputs.device.GatewayServicePolicyAppqoe>;
         ewfs?: pulumi.Input<pulumi.Input<inputs.device.GatewayServicePolicyEwf>[]>;
@@ -1750,10 +1766,18 @@ export declare namespace device {
          * Required when `servicepolicyId` is not defined. List of Applications / Destinations
          */
         services?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * SRX only
+         */
+        skyatp?: pulumi.Input<inputs.device.GatewayServicePolicySkyatp>;
         /**
          * For SRX-only
          */
         sslProxy?: pulumi.Input<inputs.device.GatewayServicePolicySslProxy>;
+        /**
+         * Required for syslog logging
+         */
+        syslog?: pulumi.Input<inputs.device.GatewayServicePolicySyslog>;
         /**
          * Required when `servicepolicyId` is not defined. List of Networks / Users
          */
@@ -1794,6 +1818,24 @@ export declare namespace device {
          */
         profile?: pulumi.Input<string>;
     }
+    interface GatewayServicePolicySkyatp {
+        /**
+         * enum: `disabled`, `default`, `standard`, `strict`
+         */
+        dnsDgaDetection?: pulumi.Input<string>;
+        /**
+         * enum: `disabled`, `default`, `standard`, `strict`
+         */
+        dnsTunnelDetection?: pulumi.Input<string>;
+        /**
+         * enum: `disabled`, `standard`
+         */
+        httpInspection?: pulumi.Input<string>;
+        /**
+         * enum: `disabled`, `enabled`
+         */
+        iotDevicePolicy?: pulumi.Input<string>;
+    }
     interface GatewayServicePolicySslProxy {
         /**
          * enum: `medium`, `strong`, `weak`
@@ -1801,6 +1843,10 @@ export declare namespace device {
         ciphersCategory?: pulumi.Input<string>;
         enabled?: pulumi.Input<boolean>;
     }
+    interface GatewayServicePolicySyslog {
+        enabled?: pulumi.Input<boolean>;
+        serverNames?: pulumi.Input<pulumi.Input<string>[]>;
+    }
     interface GatewayTunnelConfigs {
         /**
          * Auto Provisioning configuration for the tunne. This takes precedence over the `primary` and `secondary` nodes.
@@ -2180,7 +2226,7 @@ export declare namespace device {
     }
     interface SwitchAclTags {
         /**
-         * Can only be used under dst tags.
+         * ARP / IPv6. Default is `any`
          */
         etherTypes?: pulumi.Input<pulumi.Input<string>[]>;
         /**
@@ -2441,7 +2487,7 @@ export declare namespace device {
          */
         allNetworks?: pulumi.Input<boolean>;
         /**
-         * If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allowDhcpd is a tri_state. When it is not defined, it means using the system's default setting which depends on whether the port is an access or trunk port.
+         * Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting; true: ports become trusted ports allowing DHCP server traffic, false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted).
          */
         allowDhcpd?: pulumi.Input<boolean>;
         allowMultipleSupplicants?: pulumi.Input<boolean>;
@@ -2859,7 +2905,7 @@ export declare namespace device {
          */
         allNetworks?: pulumi.Input<boolean>;
         /**
-         * Only if `mode`!=`dynamic`. If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allowDhcpd is a tri_state. When it is not defined, it means using the system's default setting which depends on whether the port is an access or trunk port.
+         * Only applies when `mode`!=`dynamic`. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting; true: ports become trusted ports allowing DHCP server traffic, false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted).
          */
         allowDhcpd?: pulumi.Input<boolean>;
         /**
@@ -2874,6 +2920,10 @@ export declare namespace device {
          * Only if `mode`!=`dynamic` and `portAuth`=`dot1x`. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down
          */
         bypassAuthWhenServerDownForUnknownClient?: pulumi.Input<boolean>;
+        /**
+         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x`. Bypass auth for VOIP if set to true when RADIUS server is down
+         */
+        bypassAuthWhenServerDownForVoip?: pulumi.Input<boolean>;
         /**
          * Only if `mode`!=`dynamic`. To be used together with `isolation` under networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other
          */
@@ -2954,6 +3004,10 @@ export declare namespace device {
          * Only if `mode`!=`dynamic`. Whether PoE capabilities are disabled for a port
          */
         poeDisabled?: pulumi.Input<boolean>;
+        /**
+         * PoE priority. enum: `low`, `high`
+         */
+        poePriority?: pulumi.Input<string>;
         /**
          * Only if `mode`!=`dynamic`. If dot1x is desired, set to dot1x. enum: `dot1x`
          */
@@ -3032,7 +3086,7 @@ export declare namespace device {
          */
         expression?: pulumi.Input<string>;
         /**
-         * enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
+         * enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemDescription`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
          */
         src: pulumi.Input<string>;
         /**
@@ -3698,7 +3752,7 @@ export declare namespace org {
          */
         role: pulumi.Input<string>;
         /**
-         * enum: `org`, `site`, `sitegroup`
+         * enum: `org`, `site`, `sitegroup`, `orgsites`
          */
         scope: pulumi.Input<string>;
         /**
@@ -4177,14 +4231,14 @@ export declare namespace org {
          * Antenna gain for 6G - for models with external antenna only
          */
         antGain6?: pulumi.Input<number>;
-        /**
-         * Antenna Mode for AP which supports selectable antennas. enum: `external`, `internal`
-         */
-        antMode?: pulumi.Input<string>;
         /**
          * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
          */
         antennaMode?: pulumi.Input<string>;
+        /**
+         * Antenna Mode for AP which supports selectable antennas. enum: `external`, `internal`
+         */
+        antennaSelect?: pulumi.Input<string>;
         /**
          * Radio Band AP settings
          */
@@ -4213,6 +4267,10 @@ export declare namespace org {
          * To make an outdoor operate indoor. For an outdoor-ap, some channels are disallowed by default, this allows the user to use it as an indoor-ap
          */
         indoorUse?: pulumi.Input<boolean>;
+        /**
+         * Enable RRM to manage all radio settings (ignores all bandXxx configs)
+         */
+        rrmManaged?: pulumi.Input<boolean>;
         /**
          * Whether scanning radio is enabled
          */
@@ -4261,6 +4319,10 @@ export declare namespace org {
     interface DeviceprofileApRadioConfigBand5 {
         allowRrmDisable?: pulumi.Input<boolean>;
         antGain?: pulumi.Input<number>;
+        /**
+         * enum: `narrow`, `medium`, `wide`
+         */
+        antennaBeamPattern?: pulumi.Input<string>;
         /**
          * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
          */
@@ -4301,6 +4363,10 @@ export declare namespace org {
     interface DeviceprofileApRadioConfigBand5On24Radio {
         allowRrmDisable?: pulumi.Input<boolean>;
         antGain?: pulumi.Input<number>;
+        /**
+         * enum: `narrow`, `medium`, `wide`
+         */
+        antennaBeamPattern?: pulumi.Input<string>;
         /**
          * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
          */
@@ -4341,6 +4407,10 @@ export declare namespace org {
     interface DeviceprofileApRadioConfigBand6 {
         allowRrmDisable?: pulumi.Input<boolean>;
         antGain?: pulumi.Input<number>;
+        /**
+         * enum: `narrow`, `medium`, `wide`
+         */
+        antennaBeamPattern?: pulumi.Input<string>;
         /**
          * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
          */
@@ -4989,7 +5059,7 @@ export declare namespace org {
          */
         aeIdx?: pulumi.Input<string>;
         /**
-         * For SRX Only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only
+         * For SRX only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only
          */
         aeLacpForceUp?: pulumi.Input<boolean>;
         aggregated?: pulumi.Input<boolean>;
@@ -5371,7 +5441,7 @@ export declare namespace org {
          */
         antivirus?: pulumi.Input<inputs.org.DeviceprofileGatewayServicePolicyAntivirus>;
         /**
-         * For SRX Only
+         * SRX only
          */
         appqoe?: pulumi.Input<inputs.org.DeviceprofileGatewayServicePolicyAppqoe>;
         ewfs?: pulumi.Input<pulumi.Input<inputs.org.DeviceprofileGatewayServicePolicyEwf>[]>;
@@ -5396,10 +5466,18 @@ export declare namespace org {
          * Required when `servicepolicyId` is not defined. List of Applications / Destinations
          */
         services?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * SRX only
+         */
+        skyatp?: pulumi.Input<inputs.org.DeviceprofileGatewayServicePolicySkyatp>;
         /**
          * For SRX-only
          */
         sslProxy?: pulumi.Input<inputs.org.DeviceprofileGatewayServicePolicySslProxy>;
+        /**
+         * Required for syslog logging
+         */
+        syslog?: pulumi.Input<inputs.org.DeviceprofileGatewayServicePolicySyslog>;
         /**
          * Required when `servicepolicyId` is not defined. List of Networks / Users
          */
@@ -5440,6 +5518,24 @@ export declare namespace org {
          */
         profile?: pulumi.Input<string>;
     }
+    interface DeviceprofileGatewayServicePolicySkyatp {
+        /**
+         * enum: `disabled`, `default`, `standard`, `strict`
+         */
+        dnsDgaDetection?: pulumi.Input<string>;
+        /**
+         * enum: `disabled`, `default`, `standard`, `strict`
+         */
+        dnsTunnelDetection?: pulumi.Input<string>;
+        /**
+         * enum: `disabled`, `standard`
+         */
+        httpInspection?: pulumi.Input<string>;
+        /**
+         * enum: `disabled`, `enabled`
+         */
+        iotDevicePolicy?: pulumi.Input<string>;
+    }
     interface DeviceprofileGatewayServicePolicySslProxy {
         /**
          * enum: `medium`, `strong`, `weak`
@@ -5447,6 +5543,10 @@ export declare namespace org {
         ciphersCategory?: pulumi.Input<string>;
         enabled?: pulumi.Input<boolean>;
     }
+    interface DeviceprofileGatewayServicePolicySyslog {
+        enabled?: pulumi.Input<boolean>;
+        serverNames?: pulumi.Input<pulumi.Input<string>[]>;
+    }
     interface DeviceprofileGatewayTunnelConfigs {
         /**
          * Auto Provisioning configuration for the tunne. This takes precedence over the `primary` and `secondary` nodes.
@@ -6458,7 +6558,7 @@ export declare namespace org {
          */
         aeIdx?: pulumi.Input<string>;
         /**
-         * For SRX Only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only
+         * For SRX only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only
          */
         aeLacpForceUp?: pulumi.Input<boolean>;
         aggregated?: pulumi.Input<boolean>;
@@ -6840,7 +6940,7 @@ export declare namespace org {
          */
         antivirus?: pulumi.Input<inputs.org.GatewaytemplateServicePolicyAntivirus>;
         /**
-         * For SRX Only
+         * SRX only
          */
         appqoe?: pulumi.Input<inputs.org.GatewaytemplateServicePolicyAppqoe>;
         ewfs?: pulumi.Input<pulumi.Input<inputs.org.GatewaytemplateServicePolicyEwf>[]>;
@@ -6865,10 +6965,18 @@ export declare namespace org {
          * Required when `servicepolicyId` is not defined. List of Applications / Destinations
          */
         services?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * SRX only
+         */
+        skyatp?: pulumi.Input<inputs.org.GatewaytemplateServicePolicySkyatp>;
         /**
          * For SRX-only
          */
         sslProxy?: pulumi.Input<inputs.org.GatewaytemplateServicePolicySslProxy>;
+        /**
+         * Required for syslog logging
+         */
+        syslog?: pulumi.Input<inputs.org.GatewaytemplateServicePolicySyslog>;
         /**
          * Required when `servicepolicyId` is not defined. List of Networks / Users
          */
@@ -6909,6 +7017,24 @@ export declare namespace org {
          */
         profile?: pulumi.Input<string>;
     }
+    interface GatewaytemplateServicePolicySkyatp {
+        /**
+         * enum: `disabled`, `default`, `standard`, `strict`
+         */
+        dnsDgaDetection?: pulumi.Input<string>;
+        /**
+         * enum: `disabled`, `default`, `standard`, `strict`
+         */
+        dnsTunnelDetection?: pulumi.Input<string>;
+        /**
+         * enum: `disabled`, `standard`
+         */
+        httpInspection?: pulumi.Input<string>;
+        /**
+         * enum: `disabled`, `enabled`
+         */
+        iotDevicePolicy?: pulumi.Input<string>;
+    }
     interface GatewaytemplateServicePolicySslProxy {
         /**
          * enum: `medium`, `strong`, `weak`
@@ -6916,6 +7042,10 @@ export declare namespace org {
         ciphersCategory?: pulumi.Input<string>;
         enabled?: pulumi.Input<boolean>;
     }
+    interface GatewaytemplateServicePolicySyslog {
+        enabled?: pulumi.Input<boolean>;
+        serverNames?: pulumi.Input<pulumi.Input<string>[]>;
+    }
     interface GatewaytemplateTunnelConfigs {
         /**
          * Auto Provisioning configuration for the tunne. This takes precedence over the `primary` and `secondary` nodes.
@@ -7581,7 +7711,7 @@ export declare namespace org {
     }
     interface NetworktemplateAclTags {
         /**
-         * Can only be used under dst tags.
+         * ARP / IPv6. Default is `any`
          */
         etherTypes?: pulumi.Input<pulumi.Input<string>[]>;
         /**
@@ -7813,7 +7943,7 @@ export declare namespace org {
          */
         allNetworks?: pulumi.Input<boolean>;
         /**
-         * Only if `mode`!=`dynamic`. If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allowDhcpd is a tri_state. When it is not defined, it means using the system's default setting which depends on whether the port is an access or trunk port.
+         * Only applies when `mode`!=`dynamic`. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting; true: ports become trusted ports allowing DHCP server traffic, false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted).
          */
         allowDhcpd?: pulumi.Input<boolean>;
         /**
@@ -7828,6 +7958,10 @@ export declare namespace org {
          * Only if `mode`!=`dynamic` and `portAuth`=`dot1x`. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down
          */
         bypassAuthWhenServerDownForUnknownClient?: pulumi.Input<boolean>;
+        /**
+         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x`. Bypass auth for VOIP if set to true when RADIUS server is down
+         */
+        bypassAuthWhenServerDownForVoip?: pulumi.Input<boolean>;
         /**
          * Only if `mode`!=`dynamic`. To be used together with `isolation` under networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other
          */
@@ -7865,11 +7999,11 @@ export declare namespace org {
          */
         guestNetwork?: pulumi.Input<string>;
         /**
-         * Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: `interSwitchLink` works only between Juniper device. This has to be applied to both ports connected together
+         * Only if `mode`!=`dynamic`. `interIsolationNetworkLink` is used together with `isolation` under networks, signaling that this port connects to isolated networks
          */
         interIsolationNetworkLink?: pulumi.Input<boolean>;
         /**
-         * Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: interSwitchLink works only between Juniper device. This has to be applied to both ports connected together
+         * Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: `interSwitchLink` works only between Juniper devices. This has to be applied to both ports connected together
          */
         interSwitchLink?: pulumi.Input<boolean>;
         /**
@@ -7908,6 +8042,10 @@ export declare namespace org {
          * Only if `mode`!=`dynamic`. Whether PoE capabilities are disabled for a port
          */
         poeDisabled?: pulumi.Input<boolean>;
+        /**
+         * PoE priority. enum: `low`, `high`
+         */
+        poePriority?: pulumi.Input<string>;
         /**
          * Only if `mode`!=`dynamic`. If dot1x is desired, set to dot1x. enum: `dot1x`
          */
@@ -7990,7 +8128,7 @@ export declare namespace org {
          */
         expression?: pulumi.Input<string>;
         /**
-         * enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
+         * enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemDescription`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
          */
         src: pulumi.Input<string>;
         /**
@@ -9219,9 +9357,15 @@ export declare namespace org {
         autoOperations?: pulumi.Input<inputs.org.SettingMarvisAutoOperations>;
     }
     interface SettingMarvisAutoOperations {
+        apInsufficientCapacity?: pulumi.Input<boolean>;
+        apLoop?: pulumi.Input<boolean>;
+        apNonCompliant?: pulumi.Input<boolean>;
         bouncePortForAbnormalPoeClient?: pulumi.Input<boolean>;
         disablePortWhenDdosProtocolViolation?: pulumi.Input<boolean>;
         disablePortWhenRogueDhcpServerDetected?: pulumi.Input<boolean>;
+        gatewayNonCompliant?: pulumi.Input<boolean>;
+        switchMisconfiguredPort?: pulumi.Input<boolean>;
+        switchPortStuck?: pulumi.Input<boolean>;
     }
     interface SettingMgmt {
         /**
@@ -9389,7 +9533,7 @@ export declare namespace org {
          */
         disableStats?: pulumi.Input<boolean>;
         /**
-         * Proxy Configuration to talk to Mist
+         * SSR proxy configuration to talk to Mist
          */
         proxy?: pulumi.Input<inputs.org.SettingSsrProxy>;
     }
@@ -9407,6 +9551,7 @@ export declare namespace org {
         enabled?: pulumi.Input<boolean>;
     }
     interface SettingSsrProxy {
+        disabled?: pulumi.Input<boolean>;
         url?: pulumi.Input<string>;
     }
     interface SettingSwitch {
@@ -9537,7 +9682,7 @@ export declare namespace org {
          */
         role: pulumi.Input<string>;
         /**
-         * enum: `org`, `site`, `sitegroup`
+         * enum: `org`, `site`, `sitegroup`, `orgsites`
          */
         scope: pulumi.Input<string>;
         /**
@@ -11219,7 +11364,7 @@ export declare namespace site {
     }
     interface NetworktemplateAclTags {
         /**
-         * Can only be used under dst tags.
+         * ARP / IPv6. Default is `any`
          */
         etherTypes?: pulumi.Input<pulumi.Input<string>[]>;
         /**
@@ -11451,7 +11596,7 @@ export declare namespace site {
          */
         allNetworks?: pulumi.Input<boolean>;
         /**
-         * Only if `mode`!=`dynamic`. If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allowDhcpd is a tri_state. When it is not defined, it means using the system's default setting which depends on whether the port is an access or trunk port.
+         * Only applies when `mode`!=`dynamic`. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting; true: ports become trusted ports allowing DHCP server traffic, false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted).
          */
         allowDhcpd?: pulumi.Input<boolean>;
         /**
@@ -11466,6 +11611,10 @@ export declare namespace site {
          * Only if `mode`!=`dynamic` and `portAuth`=`dot1x`. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down
          */
         bypassAuthWhenServerDownForUnknownClient?: pulumi.Input<boolean>;
+        /**
+         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x`. Bypass auth for VOIP if set to true when RADIUS server is down
+         */
+        bypassAuthWhenServerDownForVoip?: pulumi.Input<boolean>;
         /**
          * Only if `mode`!=`dynamic`. To be used together with `isolation` under networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other
          */
@@ -11503,11 +11652,11 @@ export declare namespace site {
          */
         guestNetwork?: pulumi.Input<string>;
         /**
-         * Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: `interSwitchLink` works only between Juniper device. This has to be applied to both ports connected together
+         * Only if `mode`!=`dynamic`. `interIsolationNetworkLink` is used together with `isolation` under networks, signaling that this port connects to isolated networks
          */
         interIsolationNetworkLink?: pulumi.Input<boolean>;
         /**
-         * Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: interSwitchLink works only between Juniper device. This has to be applied to both ports connected together
+         * Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: `interSwitchLink` works only between Juniper devices. This has to be applied to both ports connected together
          */
         interSwitchLink?: pulumi.Input<boolean>;
         /**
@@ -11546,6 +11695,10 @@ export declare namespace site {
          * Only if `mode`!=`dynamic`. Whether PoE capabilities are disabled for a port
          */
         poeDisabled?: pulumi.Input<boolean>;
+        /**
+         * PoE priority. enum: `low`, `high`
+         */
+        poePriority?: pulumi.Input<string>;
         /**
          * Only if `mode`!=`dynamic`. If dot1x is desired, set to dot1x. enum: `dot1x`
          */
@@ -11628,7 +11781,7 @@ export declare namespace site {
          */
         expression?: pulumi.Input<string>;
         /**
-         * enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
+         * enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemDescription`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
          */
         src: pulumi.Input<string>;
         /**
@@ -12700,7 +12853,7 @@ export declare namespace site {
          */
         protectRe?: pulumi.Input<inputs.site.SettingGatewayMgmtProtectRe>;
         /**
-         * For SRX only
+         * SRX only
          */
         rootPassword?: pulumi.Input<string>;
         securityLogSourceAddress?: pulumi.Input<string>;
@@ -12811,9 +12964,15 @@ export declare namespace site {
         autoOperations?: pulumi.Input<inputs.site.SettingMarvisAutoOperations>;
     }
     interface SettingMarvisAutoOperations {
+        apInsufficientCapacity?: pulumi.Input<boolean>;
+        apLoop?: pulumi.Input<boolean>;
+        apNonCompliant?: pulumi.Input<boolean>;
         bouncePortForAbnormalPoeClient?: pulumi.Input<boolean>;
         disablePortWhenDdosProtocolViolation?: pulumi.Input<boolean>;
         disablePortWhenRogueDhcpServerDetected?: pulumi.Input<boolean>;
+        gatewayNonCompliant?: pulumi.Input<boolean>;
+        switchMisconfiguredPort?: pulumi.Input<boolean>;
+        switchPortStuck?: pulumi.Input<boolean>;
     }
     interface SettingOccupancy {
         /**
@@ -12838,6 +12997,7 @@ export declare namespace site {
         unconnectedClientsEnabled?: pulumi.Input<boolean>;
     }
     interface SettingProxy {
+        disabled?: pulumi.Input<boolean>;
         url?: pulumi.Input<string>;
     }
     interface SettingRogue {
@@ -12963,7 +13123,7 @@ export declare namespace site {
          */
         disableStats?: pulumi.Input<boolean>;
         /**
-         * Proxy Configuration to talk to Mist
+         * SSR proxy configuration to talk to Mist
          */
         proxy?: pulumi.Input<inputs.site.SettingSsrProxy>;
     }
@@ -12981,6 +13141,7 @@ export declare namespace site {
         enabled?: pulumi.Input<boolean>;
     }
     interface SettingSsrProxy {
+        disabled?: pulumi.Input<boolean>;
         url?: pulumi.Input<string>;
     }
     interface SettingSyntheticTest {