@pulumi/juniper-mist 0.7.0 → 0.7.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/org/servicepolicy.d.ts +6 -6
- package/org/setting.d.ts +1 -2
- package/org/setting.js +1 -1
- package/org/setting.js.map +1 -1
- package/org/wlan.d.ts +6 -6
- package/package.json +2 -2
- package/site/wlan.d.ts +6 -6
- package/types/input.d.ts +194 -33
- package/types/output.d.ts +195 -34
package/types/output.d.ts
CHANGED
|
@@ -666,14 +666,14 @@ export declare namespace device {
|
|
|
666
666
|
* Antenna gain for 6G - for models with external antenna only
|
|
667
667
|
*/
|
|
668
668
|
antGain6?: number;
|
|
669
|
-
/**
|
|
670
|
-
* Antenna Mode for AP which supports selectable antennas. enum: `external`, `internal`
|
|
671
|
-
*/
|
|
672
|
-
antMode?: string;
|
|
673
669
|
/**
|
|
674
670
|
* enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
|
|
675
671
|
*/
|
|
676
672
|
antennaMode?: string;
|
|
673
|
+
/**
|
|
674
|
+
* Antenna Mode for AP which supports selectable antennas. enum: `external`, `internal`
|
|
675
|
+
*/
|
|
676
|
+
antennaSelect?: string;
|
|
677
677
|
/**
|
|
678
678
|
* Radio Band AP settings
|
|
679
679
|
*/
|
|
@@ -702,6 +702,10 @@ export declare namespace device {
|
|
|
702
702
|
* To make an outdoor operate indoor. For an outdoor-ap, some channels are disallowed by default, this allows the user to use it as an indoor-ap
|
|
703
703
|
*/
|
|
704
704
|
indoorUse?: boolean;
|
|
705
|
+
/**
|
|
706
|
+
* Enable RRM to manage all radio settings (ignores all bandXxx configs)
|
|
707
|
+
*/
|
|
708
|
+
rrmManaged?: boolean;
|
|
705
709
|
/**
|
|
706
710
|
* Whether scanning radio is enabled
|
|
707
711
|
*/
|
|
@@ -750,6 +754,10 @@ export declare namespace device {
|
|
|
750
754
|
interface ApRadioConfigBand5 {
|
|
751
755
|
allowRrmDisable: boolean;
|
|
752
756
|
antGain: number;
|
|
757
|
+
/**
|
|
758
|
+
* enum: `narrow`, `medium`, `wide`
|
|
759
|
+
*/
|
|
760
|
+
antennaBeamPattern?: string;
|
|
753
761
|
/**
|
|
754
762
|
* enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
|
|
755
763
|
*/
|
|
@@ -790,6 +798,10 @@ export declare namespace device {
|
|
|
790
798
|
interface ApRadioConfigBand5On24Radio {
|
|
791
799
|
allowRrmDisable: boolean;
|
|
792
800
|
antGain: number;
|
|
801
|
+
/**
|
|
802
|
+
* enum: `narrow`, `medium`, `wide`
|
|
803
|
+
*/
|
|
804
|
+
antennaBeamPattern?: string;
|
|
793
805
|
/**
|
|
794
806
|
* enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
|
|
795
807
|
*/
|
|
@@ -830,6 +842,10 @@ export declare namespace device {
|
|
|
830
842
|
interface ApRadioConfigBand6 {
|
|
831
843
|
allowRrmDisable: boolean;
|
|
832
844
|
antGain: number;
|
|
845
|
+
/**
|
|
846
|
+
* enum: `narrow`, `medium`, `wide`
|
|
847
|
+
*/
|
|
848
|
+
antennaBeamPattern?: string;
|
|
833
849
|
/**
|
|
834
850
|
* enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
|
|
835
851
|
*/
|
|
@@ -1498,7 +1514,7 @@ export declare namespace device {
|
|
|
1498
1514
|
*/
|
|
1499
1515
|
aeIdx?: string;
|
|
1500
1516
|
/**
|
|
1501
|
-
* For SRX
|
|
1517
|
+
* For SRX only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only
|
|
1502
1518
|
*/
|
|
1503
1519
|
aeLacpForceUp?: boolean;
|
|
1504
1520
|
aggregated?: boolean;
|
|
@@ -1890,7 +1906,7 @@ export declare namespace device {
|
|
|
1890
1906
|
*/
|
|
1891
1907
|
antivirus?: outputs.device.GatewayServicePolicyAntivirus;
|
|
1892
1908
|
/**
|
|
1893
|
-
*
|
|
1909
|
+
* SRX only
|
|
1894
1910
|
*/
|
|
1895
1911
|
appqoe?: outputs.device.GatewayServicePolicyAppqoe;
|
|
1896
1912
|
ewfs?: outputs.device.GatewayServicePolicyEwf[];
|
|
@@ -1915,10 +1931,18 @@ export declare namespace device {
|
|
|
1915
1931
|
* Required when `servicepolicyId` is not defined. List of Applications / Destinations
|
|
1916
1932
|
*/
|
|
1917
1933
|
services?: string[];
|
|
1934
|
+
/**
|
|
1935
|
+
* SRX only
|
|
1936
|
+
*/
|
|
1937
|
+
skyatp?: outputs.device.GatewayServicePolicySkyatp;
|
|
1918
1938
|
/**
|
|
1919
1939
|
* For SRX-only
|
|
1920
1940
|
*/
|
|
1921
1941
|
sslProxy?: outputs.device.GatewayServicePolicySslProxy;
|
|
1942
|
+
/**
|
|
1943
|
+
* Required for syslog logging
|
|
1944
|
+
*/
|
|
1945
|
+
syslog?: outputs.device.GatewayServicePolicySyslog;
|
|
1922
1946
|
/**
|
|
1923
1947
|
* Required when `servicepolicyId` is not defined. List of Networks / Users
|
|
1924
1948
|
*/
|
|
@@ -1959,6 +1983,24 @@ export declare namespace device {
|
|
|
1959
1983
|
*/
|
|
1960
1984
|
profile?: string;
|
|
1961
1985
|
}
|
|
1986
|
+
interface GatewayServicePolicySkyatp {
|
|
1987
|
+
/**
|
|
1988
|
+
* enum: `disabled`, `default`, `standard`, `strict`
|
|
1989
|
+
*/
|
|
1990
|
+
dnsDgaDetection: string;
|
|
1991
|
+
/**
|
|
1992
|
+
* enum: `disabled`, `default`, `standard`, `strict`
|
|
1993
|
+
*/
|
|
1994
|
+
dnsTunnelDetection: string;
|
|
1995
|
+
/**
|
|
1996
|
+
* enum: `disabled`, `standard`
|
|
1997
|
+
*/
|
|
1998
|
+
httpInspection: string;
|
|
1999
|
+
/**
|
|
2000
|
+
* enum: `disabled`, `enabled`
|
|
2001
|
+
*/
|
|
2002
|
+
iotDevicePolicy: string;
|
|
2003
|
+
}
|
|
1962
2004
|
interface GatewayServicePolicySslProxy {
|
|
1963
2005
|
/**
|
|
1964
2006
|
* enum: `medium`, `strong`, `weak`
|
|
@@ -1966,6 +2008,10 @@ export declare namespace device {
|
|
|
1966
2008
|
ciphersCategory?: string;
|
|
1967
2009
|
enabled?: boolean;
|
|
1968
2010
|
}
|
|
2011
|
+
interface GatewayServicePolicySyslog {
|
|
2012
|
+
enabled: boolean;
|
|
2013
|
+
serverNames?: string[];
|
|
2014
|
+
}
|
|
1969
2015
|
interface GatewayTunnelConfigs {
|
|
1970
2016
|
/**
|
|
1971
2017
|
* Auto Provisioning configuration for the tunne. This takes precedence over the `primary` and `secondary` nodes.
|
|
@@ -4603,7 +4649,7 @@ export declare namespace device {
|
|
|
4603
4649
|
}
|
|
4604
4650
|
interface SwitchAclTags {
|
|
4605
4651
|
/**
|
|
4606
|
-
*
|
|
4652
|
+
* ARP / IPv6. Default is `any`
|
|
4607
4653
|
*/
|
|
4608
4654
|
etherTypes?: string[];
|
|
4609
4655
|
/**
|
|
@@ -4864,7 +4910,7 @@ export declare namespace device {
|
|
|
4864
4910
|
*/
|
|
4865
4911
|
allNetworks?: boolean;
|
|
4866
4912
|
/**
|
|
4867
|
-
*
|
|
4913
|
+
* Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting; true: ports become trusted ports allowing DHCP server traffic, false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted).
|
|
4868
4914
|
*/
|
|
4869
4915
|
allowDhcpd?: boolean;
|
|
4870
4916
|
allowMultipleSupplicants?: boolean;
|
|
@@ -5282,7 +5328,7 @@ export declare namespace device {
|
|
|
5282
5328
|
*/
|
|
5283
5329
|
allNetworks?: boolean;
|
|
5284
5330
|
/**
|
|
5285
|
-
* Only
|
|
5331
|
+
* Only applies when `mode`!=`dynamic`. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting; true: ports become trusted ports allowing DHCP server traffic, false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted).
|
|
5286
5332
|
*/
|
|
5287
5333
|
allowDhcpd?: boolean;
|
|
5288
5334
|
/**
|
|
@@ -5297,6 +5343,10 @@ export declare namespace device {
|
|
|
5297
5343
|
* Only if `mode`!=`dynamic` and `portAuth`=`dot1x`. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down
|
|
5298
5344
|
*/
|
|
5299
5345
|
bypassAuthWhenServerDownForUnknownClient?: boolean;
|
|
5346
|
+
/**
|
|
5347
|
+
* Only if `mode`!=`dynamic` and `portAuth`==`dot1x`. Bypass auth for VOIP if set to true when RADIUS server is down
|
|
5348
|
+
*/
|
|
5349
|
+
bypassAuthWhenServerDownForVoip: boolean;
|
|
5300
5350
|
/**
|
|
5301
5351
|
* Only if `mode`!=`dynamic`. To be used together with `isolation` under networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other
|
|
5302
5352
|
*/
|
|
@@ -5377,6 +5427,10 @@ export declare namespace device {
|
|
|
5377
5427
|
* Only if `mode`!=`dynamic`. Whether PoE capabilities are disabled for a port
|
|
5378
5428
|
*/
|
|
5379
5429
|
poeDisabled?: boolean;
|
|
5430
|
+
/**
|
|
5431
|
+
* PoE priority. enum: `low`, `high`
|
|
5432
|
+
*/
|
|
5433
|
+
poePriority?: string;
|
|
5380
5434
|
/**
|
|
5381
5435
|
* Only if `mode`!=`dynamic`. If dot1x is desired, set to dot1x. enum: `dot1x`
|
|
5382
5436
|
*/
|
|
@@ -5455,7 +5509,7 @@ export declare namespace device {
|
|
|
5455
5509
|
*/
|
|
5456
5510
|
expression?: string;
|
|
5457
5511
|
/**
|
|
5458
|
-
* enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
|
|
5512
|
+
* enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemDescription`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
|
|
5459
5513
|
*/
|
|
5460
5514
|
src: string;
|
|
5461
5515
|
/**
|
|
@@ -6121,7 +6175,7 @@ export declare namespace org {
|
|
|
6121
6175
|
*/
|
|
6122
6176
|
role: string;
|
|
6123
6177
|
/**
|
|
6124
|
-
* enum: `org`, `site`, `sitegroup`
|
|
6178
|
+
* enum: `org`, `site`, `sitegroup`, `orgsites`
|
|
6125
6179
|
*/
|
|
6126
6180
|
scope: string;
|
|
6127
6181
|
/**
|
|
@@ -6600,14 +6654,14 @@ export declare namespace org {
|
|
|
6600
6654
|
* Antenna gain for 6G - for models with external antenna only
|
|
6601
6655
|
*/
|
|
6602
6656
|
antGain6?: number;
|
|
6603
|
-
/**
|
|
6604
|
-
* Antenna Mode for AP which supports selectable antennas. enum: `external`, `internal`
|
|
6605
|
-
*/
|
|
6606
|
-
antMode?: string;
|
|
6607
6657
|
/**
|
|
6608
6658
|
* enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
|
|
6609
6659
|
*/
|
|
6610
6660
|
antennaMode?: string;
|
|
6661
|
+
/**
|
|
6662
|
+
* Antenna Mode for AP which supports selectable antennas. enum: `external`, `internal`
|
|
6663
|
+
*/
|
|
6664
|
+
antennaSelect?: string;
|
|
6611
6665
|
/**
|
|
6612
6666
|
* Radio Band AP settings
|
|
6613
6667
|
*/
|
|
@@ -6636,6 +6690,10 @@ export declare namespace org {
|
|
|
6636
6690
|
* To make an outdoor operate indoor. For an outdoor-ap, some channels are disallowed by default, this allows the user to use it as an indoor-ap
|
|
6637
6691
|
*/
|
|
6638
6692
|
indoorUse?: boolean;
|
|
6693
|
+
/**
|
|
6694
|
+
* Enable RRM to manage all radio settings (ignores all bandXxx configs)
|
|
6695
|
+
*/
|
|
6696
|
+
rrmManaged?: boolean;
|
|
6639
6697
|
/**
|
|
6640
6698
|
* Whether scanning radio is enabled
|
|
6641
6699
|
*/
|
|
@@ -6684,6 +6742,10 @@ export declare namespace org {
|
|
|
6684
6742
|
interface DeviceprofileApRadioConfigBand5 {
|
|
6685
6743
|
allowRrmDisable: boolean;
|
|
6686
6744
|
antGain: number;
|
|
6745
|
+
/**
|
|
6746
|
+
* enum: `narrow`, `medium`, `wide`
|
|
6747
|
+
*/
|
|
6748
|
+
antennaBeamPattern?: string;
|
|
6687
6749
|
/**
|
|
6688
6750
|
* enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
|
|
6689
6751
|
*/
|
|
@@ -6724,6 +6786,10 @@ export declare namespace org {
|
|
|
6724
6786
|
interface DeviceprofileApRadioConfigBand5On24Radio {
|
|
6725
6787
|
allowRrmDisable: boolean;
|
|
6726
6788
|
antGain: number;
|
|
6789
|
+
/**
|
|
6790
|
+
* enum: `narrow`, `medium`, `wide`
|
|
6791
|
+
*/
|
|
6792
|
+
antennaBeamPattern?: string;
|
|
6727
6793
|
/**
|
|
6728
6794
|
* enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
|
|
6729
6795
|
*/
|
|
@@ -6764,6 +6830,10 @@ export declare namespace org {
|
|
|
6764
6830
|
interface DeviceprofileApRadioConfigBand6 {
|
|
6765
6831
|
allowRrmDisable: boolean;
|
|
6766
6832
|
antGain: number;
|
|
6833
|
+
/**
|
|
6834
|
+
* enum: `narrow`, `medium`, `wide`
|
|
6835
|
+
*/
|
|
6836
|
+
antennaBeamPattern?: string;
|
|
6767
6837
|
/**
|
|
6768
6838
|
* enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
|
|
6769
6839
|
*/
|
|
@@ -7412,7 +7482,7 @@ export declare namespace org {
|
|
|
7412
7482
|
*/
|
|
7413
7483
|
aeIdx?: string;
|
|
7414
7484
|
/**
|
|
7415
|
-
* For SRX
|
|
7485
|
+
* For SRX only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only
|
|
7416
7486
|
*/
|
|
7417
7487
|
aeLacpForceUp?: boolean;
|
|
7418
7488
|
aggregated?: boolean;
|
|
@@ -7794,7 +7864,7 @@ export declare namespace org {
|
|
|
7794
7864
|
*/
|
|
7795
7865
|
antivirus?: outputs.org.DeviceprofileGatewayServicePolicyAntivirus;
|
|
7796
7866
|
/**
|
|
7797
|
-
*
|
|
7867
|
+
* SRX only
|
|
7798
7868
|
*/
|
|
7799
7869
|
appqoe?: outputs.org.DeviceprofileGatewayServicePolicyAppqoe;
|
|
7800
7870
|
ewfs?: outputs.org.DeviceprofileGatewayServicePolicyEwf[];
|
|
@@ -7819,10 +7889,18 @@ export declare namespace org {
|
|
|
7819
7889
|
* Required when `servicepolicyId` is not defined. List of Applications / Destinations
|
|
7820
7890
|
*/
|
|
7821
7891
|
services?: string[];
|
|
7892
|
+
/**
|
|
7893
|
+
* SRX only
|
|
7894
|
+
*/
|
|
7895
|
+
skyatp?: outputs.org.DeviceprofileGatewayServicePolicySkyatp;
|
|
7822
7896
|
/**
|
|
7823
7897
|
* For SRX-only
|
|
7824
7898
|
*/
|
|
7825
7899
|
sslProxy?: outputs.org.DeviceprofileGatewayServicePolicySslProxy;
|
|
7900
|
+
/**
|
|
7901
|
+
* Required for syslog logging
|
|
7902
|
+
*/
|
|
7903
|
+
syslog?: outputs.org.DeviceprofileGatewayServicePolicySyslog;
|
|
7826
7904
|
/**
|
|
7827
7905
|
* Required when `servicepolicyId` is not defined. List of Networks / Users
|
|
7828
7906
|
*/
|
|
@@ -7863,6 +7941,24 @@ export declare namespace org {
|
|
|
7863
7941
|
*/
|
|
7864
7942
|
profile?: string;
|
|
7865
7943
|
}
|
|
7944
|
+
interface DeviceprofileGatewayServicePolicySkyatp {
|
|
7945
|
+
/**
|
|
7946
|
+
* enum: `disabled`, `default`, `standard`, `strict`
|
|
7947
|
+
*/
|
|
7948
|
+
dnsDgaDetection: string;
|
|
7949
|
+
/**
|
|
7950
|
+
* enum: `disabled`, `default`, `standard`, `strict`
|
|
7951
|
+
*/
|
|
7952
|
+
dnsTunnelDetection: string;
|
|
7953
|
+
/**
|
|
7954
|
+
* enum: `disabled`, `standard`
|
|
7955
|
+
*/
|
|
7956
|
+
httpInspection: string;
|
|
7957
|
+
/**
|
|
7958
|
+
* enum: `disabled`, `enabled`
|
|
7959
|
+
*/
|
|
7960
|
+
iotDevicePolicy: string;
|
|
7961
|
+
}
|
|
7866
7962
|
interface DeviceprofileGatewayServicePolicySslProxy {
|
|
7867
7963
|
/**
|
|
7868
7964
|
* enum: `medium`, `strong`, `weak`
|
|
@@ -7870,6 +7966,10 @@ export declare namespace org {
|
|
|
7870
7966
|
ciphersCategory?: string;
|
|
7871
7967
|
enabled?: boolean;
|
|
7872
7968
|
}
|
|
7969
|
+
interface DeviceprofileGatewayServicePolicySyslog {
|
|
7970
|
+
enabled: boolean;
|
|
7971
|
+
serverNames?: string[];
|
|
7972
|
+
}
|
|
7873
7973
|
interface DeviceprofileGatewayTunnelConfigs {
|
|
7874
7974
|
/**
|
|
7875
7975
|
* Auto Provisioning configuration for the tunne. This takes precedence over the `primary` and `secondary` nodes.
|
|
@@ -8881,7 +8981,7 @@ export declare namespace org {
|
|
|
8881
8981
|
*/
|
|
8882
8982
|
aeIdx?: string;
|
|
8883
8983
|
/**
|
|
8884
|
-
* For SRX
|
|
8984
|
+
* For SRX only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only
|
|
8885
8985
|
*/
|
|
8886
8986
|
aeLacpForceUp?: boolean;
|
|
8887
8987
|
aggregated?: boolean;
|
|
@@ -9263,7 +9363,7 @@ export declare namespace org {
|
|
|
9263
9363
|
*/
|
|
9264
9364
|
antivirus?: outputs.org.GatewaytemplateServicePolicyAntivirus;
|
|
9265
9365
|
/**
|
|
9266
|
-
*
|
|
9366
|
+
* SRX only
|
|
9267
9367
|
*/
|
|
9268
9368
|
appqoe?: outputs.org.GatewaytemplateServicePolicyAppqoe;
|
|
9269
9369
|
ewfs?: outputs.org.GatewaytemplateServicePolicyEwf[];
|
|
@@ -9288,10 +9388,18 @@ export declare namespace org {
|
|
|
9288
9388
|
* Required when `servicepolicyId` is not defined. List of Applications / Destinations
|
|
9289
9389
|
*/
|
|
9290
9390
|
services?: string[];
|
|
9391
|
+
/**
|
|
9392
|
+
* SRX only
|
|
9393
|
+
*/
|
|
9394
|
+
skyatp?: outputs.org.GatewaytemplateServicePolicySkyatp;
|
|
9291
9395
|
/**
|
|
9292
9396
|
* For SRX-only
|
|
9293
9397
|
*/
|
|
9294
9398
|
sslProxy?: outputs.org.GatewaytemplateServicePolicySslProxy;
|
|
9399
|
+
/**
|
|
9400
|
+
* Required for syslog logging
|
|
9401
|
+
*/
|
|
9402
|
+
syslog?: outputs.org.GatewaytemplateServicePolicySyslog;
|
|
9295
9403
|
/**
|
|
9296
9404
|
* Required when `servicepolicyId` is not defined. List of Networks / Users
|
|
9297
9405
|
*/
|
|
@@ -9332,6 +9440,24 @@ export declare namespace org {
|
|
|
9332
9440
|
*/
|
|
9333
9441
|
profile?: string;
|
|
9334
9442
|
}
|
|
9443
|
+
interface GatewaytemplateServicePolicySkyatp {
|
|
9444
|
+
/**
|
|
9445
|
+
* enum: `disabled`, `default`, `standard`, `strict`
|
|
9446
|
+
*/
|
|
9447
|
+
dnsDgaDetection: string;
|
|
9448
|
+
/**
|
|
9449
|
+
* enum: `disabled`, `default`, `standard`, `strict`
|
|
9450
|
+
*/
|
|
9451
|
+
dnsTunnelDetection: string;
|
|
9452
|
+
/**
|
|
9453
|
+
* enum: `disabled`, `standard`
|
|
9454
|
+
*/
|
|
9455
|
+
httpInspection: string;
|
|
9456
|
+
/**
|
|
9457
|
+
* enum: `disabled`, `enabled`
|
|
9458
|
+
*/
|
|
9459
|
+
iotDevicePolicy: string;
|
|
9460
|
+
}
|
|
9335
9461
|
interface GatewaytemplateServicePolicySslProxy {
|
|
9336
9462
|
/**
|
|
9337
9463
|
* enum: `medium`, `strong`, `weak`
|
|
@@ -9339,6 +9465,10 @@ export declare namespace org {
|
|
|
9339
9465
|
ciphersCategory?: string;
|
|
9340
9466
|
enabled?: boolean;
|
|
9341
9467
|
}
|
|
9468
|
+
interface GatewaytemplateServicePolicySyslog {
|
|
9469
|
+
enabled: boolean;
|
|
9470
|
+
serverNames?: string[];
|
|
9471
|
+
}
|
|
9342
9472
|
interface GatewaytemplateTunnelConfigs {
|
|
9343
9473
|
/**
|
|
9344
9474
|
* Auto Provisioning configuration for the tunne. This takes precedence over the `primary` and `secondary` nodes.
|
|
@@ -12344,7 +12474,7 @@ export declare namespace org {
|
|
|
12344
12474
|
}
|
|
12345
12475
|
interface NetworktemplateAclTags {
|
|
12346
12476
|
/**
|
|
12347
|
-
*
|
|
12477
|
+
* ARP / IPv6. Default is `any`
|
|
12348
12478
|
*/
|
|
12349
12479
|
etherTypes?: string[];
|
|
12350
12480
|
/**
|
|
@@ -12576,7 +12706,7 @@ export declare namespace org {
|
|
|
12576
12706
|
*/
|
|
12577
12707
|
allNetworks?: boolean;
|
|
12578
12708
|
/**
|
|
12579
|
-
* Only
|
|
12709
|
+
* Only applies when `mode`!=`dynamic`. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting; true: ports become trusted ports allowing DHCP server traffic, false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted).
|
|
12580
12710
|
*/
|
|
12581
12711
|
allowDhcpd?: boolean;
|
|
12582
12712
|
/**
|
|
@@ -12591,6 +12721,10 @@ export declare namespace org {
|
|
|
12591
12721
|
* Only if `mode`!=`dynamic` and `portAuth`=`dot1x`. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down
|
|
12592
12722
|
*/
|
|
12593
12723
|
bypassAuthWhenServerDownForUnknownClient?: boolean;
|
|
12724
|
+
/**
|
|
12725
|
+
* Only if `mode`!=`dynamic` and `portAuth`==`dot1x`. Bypass auth for VOIP if set to true when RADIUS server is down
|
|
12726
|
+
*/
|
|
12727
|
+
bypassAuthWhenServerDownForVoip: boolean;
|
|
12594
12728
|
/**
|
|
12595
12729
|
* Only if `mode`!=`dynamic`. To be used together with `isolation` under networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other
|
|
12596
12730
|
*/
|
|
@@ -12628,11 +12762,11 @@ export declare namespace org {
|
|
|
12628
12762
|
*/
|
|
12629
12763
|
guestNetwork?: string;
|
|
12630
12764
|
/**
|
|
12631
|
-
* Only if `mode`!=`dynamic`. `
|
|
12765
|
+
* Only if `mode`!=`dynamic`. `interIsolationNetworkLink` is used together with `isolation` under networks, signaling that this port connects to isolated networks
|
|
12632
12766
|
*/
|
|
12633
12767
|
interIsolationNetworkLink?: boolean;
|
|
12634
12768
|
/**
|
|
12635
|
-
* Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: interSwitchLink works only between Juniper
|
|
12769
|
+
* Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: `interSwitchLink` works only between Juniper devices. This has to be applied to both ports connected together
|
|
12636
12770
|
*/
|
|
12637
12771
|
interSwitchLink?: boolean;
|
|
12638
12772
|
/**
|
|
@@ -12671,6 +12805,10 @@ export declare namespace org {
|
|
|
12671
12805
|
* Only if `mode`!=`dynamic`. Whether PoE capabilities are disabled for a port
|
|
12672
12806
|
*/
|
|
12673
12807
|
poeDisabled?: boolean;
|
|
12808
|
+
/**
|
|
12809
|
+
* PoE priority. enum: `low`, `high`
|
|
12810
|
+
*/
|
|
12811
|
+
poePriority?: string;
|
|
12674
12812
|
/**
|
|
12675
12813
|
* Only if `mode`!=`dynamic`. If dot1x is desired, set to dot1x. enum: `dot1x`
|
|
12676
12814
|
*/
|
|
@@ -12753,7 +12891,7 @@ export declare namespace org {
|
|
|
12753
12891
|
*/
|
|
12754
12892
|
expression?: string;
|
|
12755
12893
|
/**
|
|
12756
|
-
* enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
|
|
12894
|
+
* enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemDescription`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
|
|
12757
12895
|
*/
|
|
12758
12896
|
src: string;
|
|
12759
12897
|
/**
|
|
@@ -13982,9 +14120,15 @@ export declare namespace org {
|
|
|
13982
14120
|
autoOperations?: outputs.org.SettingMarvisAutoOperations;
|
|
13983
14121
|
}
|
|
13984
14122
|
interface SettingMarvisAutoOperations {
|
|
14123
|
+
apInsufficientCapacity: boolean;
|
|
14124
|
+
apLoop: boolean;
|
|
14125
|
+
apNonCompliant: boolean;
|
|
13985
14126
|
bouncePortForAbnormalPoeClient: boolean;
|
|
13986
14127
|
disablePortWhenDdosProtocolViolation: boolean;
|
|
13987
14128
|
disablePortWhenRogueDhcpServerDetected: boolean;
|
|
14129
|
+
gatewayNonCompliant: boolean;
|
|
14130
|
+
switchMisconfiguredPort: boolean;
|
|
14131
|
+
switchPortStuck: boolean;
|
|
13988
14132
|
}
|
|
13989
14133
|
interface SettingMgmt {
|
|
13990
14134
|
/**
|
|
@@ -14114,7 +14258,7 @@ export declare namespace org {
|
|
|
14114
14258
|
requiresTwoFactorAuth: boolean;
|
|
14115
14259
|
}
|
|
14116
14260
|
interface SettingPcap {
|
|
14117
|
-
bucket
|
|
14261
|
+
bucket: string;
|
|
14118
14262
|
/**
|
|
14119
14263
|
* Max_len of non-management packets to capture
|
|
14120
14264
|
*/
|
|
@@ -14152,7 +14296,7 @@ export declare namespace org {
|
|
|
14152
14296
|
*/
|
|
14153
14297
|
disableStats?: boolean;
|
|
14154
14298
|
/**
|
|
14155
|
-
*
|
|
14299
|
+
* SSR proxy configuration to talk to Mist
|
|
14156
14300
|
*/
|
|
14157
14301
|
proxy?: outputs.org.SettingSsrProxy;
|
|
14158
14302
|
}
|
|
@@ -14170,6 +14314,7 @@ export declare namespace org {
|
|
|
14170
14314
|
enabled?: boolean;
|
|
14171
14315
|
}
|
|
14172
14316
|
interface SettingSsrProxy {
|
|
14317
|
+
disabled: boolean;
|
|
14173
14318
|
url?: string;
|
|
14174
14319
|
}
|
|
14175
14320
|
interface SettingSwitch {
|
|
@@ -14300,7 +14445,7 @@ export declare namespace org {
|
|
|
14300
14445
|
*/
|
|
14301
14446
|
role: string;
|
|
14302
14447
|
/**
|
|
14303
|
-
* enum: `org`, `site`, `sitegroup`
|
|
14448
|
+
* enum: `org`, `site`, `sitegroup`, `orgsites`
|
|
14304
14449
|
*/
|
|
14305
14450
|
scope: string;
|
|
14306
14451
|
/**
|
|
@@ -17300,7 +17445,7 @@ export declare namespace site {
|
|
|
17300
17445
|
}
|
|
17301
17446
|
interface NetworktemplateAclTags {
|
|
17302
17447
|
/**
|
|
17303
|
-
*
|
|
17448
|
+
* ARP / IPv6. Default is `any`
|
|
17304
17449
|
*/
|
|
17305
17450
|
etherTypes?: string[];
|
|
17306
17451
|
/**
|
|
@@ -17532,7 +17677,7 @@ export declare namespace site {
|
|
|
17532
17677
|
*/
|
|
17533
17678
|
allNetworks?: boolean;
|
|
17534
17679
|
/**
|
|
17535
|
-
* Only
|
|
17680
|
+
* Only applies when `mode`!=`dynamic`. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting; true: ports become trusted ports allowing DHCP server traffic, false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted).
|
|
17536
17681
|
*/
|
|
17537
17682
|
allowDhcpd?: boolean;
|
|
17538
17683
|
/**
|
|
@@ -17547,6 +17692,10 @@ export declare namespace site {
|
|
|
17547
17692
|
* Only if `mode`!=`dynamic` and `portAuth`=`dot1x`. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down
|
|
17548
17693
|
*/
|
|
17549
17694
|
bypassAuthWhenServerDownForUnknownClient?: boolean;
|
|
17695
|
+
/**
|
|
17696
|
+
* Only if `mode`!=`dynamic` and `portAuth`==`dot1x`. Bypass auth for VOIP if set to true when RADIUS server is down
|
|
17697
|
+
*/
|
|
17698
|
+
bypassAuthWhenServerDownForVoip: boolean;
|
|
17550
17699
|
/**
|
|
17551
17700
|
* Only if `mode`!=`dynamic`. To be used together with `isolation` under networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other
|
|
17552
17701
|
*/
|
|
@@ -17584,11 +17733,11 @@ export declare namespace site {
|
|
|
17584
17733
|
*/
|
|
17585
17734
|
guestNetwork?: string;
|
|
17586
17735
|
/**
|
|
17587
|
-
* Only if `mode`!=`dynamic`. `
|
|
17736
|
+
* Only if `mode`!=`dynamic`. `interIsolationNetworkLink` is used together with `isolation` under networks, signaling that this port connects to isolated networks
|
|
17588
17737
|
*/
|
|
17589
17738
|
interIsolationNetworkLink?: boolean;
|
|
17590
17739
|
/**
|
|
17591
|
-
* Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: interSwitchLink works only between Juniper
|
|
17740
|
+
* Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: `interSwitchLink` works only between Juniper devices. This has to be applied to both ports connected together
|
|
17592
17741
|
*/
|
|
17593
17742
|
interSwitchLink?: boolean;
|
|
17594
17743
|
/**
|
|
@@ -17627,6 +17776,10 @@ export declare namespace site {
|
|
|
17627
17776
|
* Only if `mode`!=`dynamic`. Whether PoE capabilities are disabled for a port
|
|
17628
17777
|
*/
|
|
17629
17778
|
poeDisabled?: boolean;
|
|
17779
|
+
/**
|
|
17780
|
+
* PoE priority. enum: `low`, `high`
|
|
17781
|
+
*/
|
|
17782
|
+
poePriority?: string;
|
|
17630
17783
|
/**
|
|
17631
17784
|
* Only if `mode`!=`dynamic`. If dot1x is desired, set to dot1x. enum: `dot1x`
|
|
17632
17785
|
*/
|
|
@@ -17709,7 +17862,7 @@ export declare namespace site {
|
|
|
17709
17862
|
*/
|
|
17710
17863
|
expression?: string;
|
|
17711
17864
|
/**
|
|
17712
|
-
* enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
|
|
17865
|
+
* enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemDescription`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
|
|
17713
17866
|
*/
|
|
17714
17867
|
src: string;
|
|
17715
17868
|
/**
|
|
@@ -18781,7 +18934,7 @@ export declare namespace site {
|
|
|
18781
18934
|
*/
|
|
18782
18935
|
protectRe?: outputs.site.SettingGatewayMgmtProtectRe;
|
|
18783
18936
|
/**
|
|
18784
|
-
*
|
|
18937
|
+
* SRX only
|
|
18785
18938
|
*/
|
|
18786
18939
|
rootPassword?: string;
|
|
18787
18940
|
securityLogSourceAddress?: string;
|
|
@@ -18892,9 +19045,15 @@ export declare namespace site {
|
|
|
18892
19045
|
autoOperations?: outputs.site.SettingMarvisAutoOperations;
|
|
18893
19046
|
}
|
|
18894
19047
|
interface SettingMarvisAutoOperations {
|
|
19048
|
+
apInsufficientCapacity: boolean;
|
|
19049
|
+
apLoop: boolean;
|
|
19050
|
+
apNonCompliant: boolean;
|
|
18895
19051
|
bouncePortForAbnormalPoeClient: boolean;
|
|
18896
19052
|
disablePortWhenDdosProtocolViolation: boolean;
|
|
18897
19053
|
disablePortWhenRogueDhcpServerDetected: boolean;
|
|
19054
|
+
gatewayNonCompliant: boolean;
|
|
19055
|
+
switchMisconfiguredPort: boolean;
|
|
19056
|
+
switchPortStuck: boolean;
|
|
18898
19057
|
}
|
|
18899
19058
|
interface SettingOccupancy {
|
|
18900
19059
|
/**
|
|
@@ -18919,6 +19078,7 @@ export declare namespace site {
|
|
|
18919
19078
|
unconnectedClientsEnabled: boolean;
|
|
18920
19079
|
}
|
|
18921
19080
|
interface SettingProxy {
|
|
19081
|
+
disabled: boolean;
|
|
18922
19082
|
url?: string;
|
|
18923
19083
|
}
|
|
18924
19084
|
interface SettingRogue {
|
|
@@ -19044,7 +19204,7 @@ export declare namespace site {
|
|
|
19044
19204
|
*/
|
|
19045
19205
|
disableStats?: boolean;
|
|
19046
19206
|
/**
|
|
19047
|
-
*
|
|
19207
|
+
* SSR proxy configuration to talk to Mist
|
|
19048
19208
|
*/
|
|
19049
19209
|
proxy?: outputs.site.SettingSsrProxy;
|
|
19050
19210
|
}
|
|
@@ -19062,6 +19222,7 @@ export declare namespace site {
|
|
|
19062
19222
|
enabled?: boolean;
|
|
19063
19223
|
}
|
|
19064
19224
|
interface SettingSsrProxy {
|
|
19225
|
+
disabled: boolean;
|
|
19065
19226
|
url?: string;
|
|
19066
19227
|
}
|
|
19067
19228
|
interface SettingSyntheticTest {
|