@pulumi/juniper-mist 0.7.0 → 0.7.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/types/output.d.ts CHANGED
@@ -666,14 +666,14 @@ export declare namespace device {
666
666
  * Antenna gain for 6G - for models with external antenna only
667
667
  */
668
668
  antGain6?: number;
669
- /**
670
- * Antenna Mode for AP which supports selectable antennas. enum: `external`, `internal`
671
- */
672
- antMode?: string;
673
669
  /**
674
670
  * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
675
671
  */
676
672
  antennaMode?: string;
673
+ /**
674
+ * Antenna Mode for AP which supports selectable antennas. enum: `external`, `internal`
675
+ */
676
+ antennaSelect?: string;
677
677
  /**
678
678
  * Radio Band AP settings
679
679
  */
@@ -702,6 +702,10 @@ export declare namespace device {
702
702
  * To make an outdoor operate indoor. For an outdoor-ap, some channels are disallowed by default, this allows the user to use it as an indoor-ap
703
703
  */
704
704
  indoorUse?: boolean;
705
+ /**
706
+ * Enable RRM to manage all radio settings (ignores all bandXxx configs)
707
+ */
708
+ rrmManaged?: boolean;
705
709
  /**
706
710
  * Whether scanning radio is enabled
707
711
  */
@@ -750,6 +754,10 @@ export declare namespace device {
750
754
  interface ApRadioConfigBand5 {
751
755
  allowRrmDisable: boolean;
752
756
  antGain: number;
757
+ /**
758
+ * enum: `narrow`, `medium`, `wide`
759
+ */
760
+ antennaBeamPattern?: string;
753
761
  /**
754
762
  * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
755
763
  */
@@ -790,6 +798,10 @@ export declare namespace device {
790
798
  interface ApRadioConfigBand5On24Radio {
791
799
  allowRrmDisable: boolean;
792
800
  antGain: number;
801
+ /**
802
+ * enum: `narrow`, `medium`, `wide`
803
+ */
804
+ antennaBeamPattern?: string;
793
805
  /**
794
806
  * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
795
807
  */
@@ -830,6 +842,10 @@ export declare namespace device {
830
842
  interface ApRadioConfigBand6 {
831
843
  allowRrmDisable: boolean;
832
844
  antGain: number;
845
+ /**
846
+ * enum: `narrow`, `medium`, `wide`
847
+ */
848
+ antennaBeamPattern?: string;
833
849
  /**
834
850
  * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
835
851
  */
@@ -1498,7 +1514,7 @@ export declare namespace device {
1498
1514
  */
1499
1515
  aeIdx?: string;
1500
1516
  /**
1501
- * For SRX Only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only
1517
+ * For SRX only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only
1502
1518
  */
1503
1519
  aeLacpForceUp?: boolean;
1504
1520
  aggregated?: boolean;
@@ -1890,7 +1906,7 @@ export declare namespace device {
1890
1906
  */
1891
1907
  antivirus?: outputs.device.GatewayServicePolicyAntivirus;
1892
1908
  /**
1893
- * For SRX Only
1909
+ * SRX only
1894
1910
  */
1895
1911
  appqoe?: outputs.device.GatewayServicePolicyAppqoe;
1896
1912
  ewfs?: outputs.device.GatewayServicePolicyEwf[];
@@ -1915,10 +1931,18 @@ export declare namespace device {
1915
1931
  * Required when `servicepolicyId` is not defined. List of Applications / Destinations
1916
1932
  */
1917
1933
  services?: string[];
1934
+ /**
1935
+ * SRX only
1936
+ */
1937
+ skyatp?: outputs.device.GatewayServicePolicySkyatp;
1918
1938
  /**
1919
1939
  * For SRX-only
1920
1940
  */
1921
1941
  sslProxy?: outputs.device.GatewayServicePolicySslProxy;
1942
+ /**
1943
+ * Required for syslog logging
1944
+ */
1945
+ syslog?: outputs.device.GatewayServicePolicySyslog;
1922
1946
  /**
1923
1947
  * Required when `servicepolicyId` is not defined. List of Networks / Users
1924
1948
  */
@@ -1959,6 +1983,24 @@ export declare namespace device {
1959
1983
  */
1960
1984
  profile?: string;
1961
1985
  }
1986
+ interface GatewayServicePolicySkyatp {
1987
+ /**
1988
+ * enum: `disabled`, `default`, `standard`, `strict`
1989
+ */
1990
+ dnsDgaDetection: string;
1991
+ /**
1992
+ * enum: `disabled`, `default`, `standard`, `strict`
1993
+ */
1994
+ dnsTunnelDetection: string;
1995
+ /**
1996
+ * enum: `disabled`, `standard`
1997
+ */
1998
+ httpInspection: string;
1999
+ /**
2000
+ * enum: `disabled`, `enabled`
2001
+ */
2002
+ iotDevicePolicy: string;
2003
+ }
1962
2004
  interface GatewayServicePolicySslProxy {
1963
2005
  /**
1964
2006
  * enum: `medium`, `strong`, `weak`
@@ -1966,6 +2008,10 @@ export declare namespace device {
1966
2008
  ciphersCategory?: string;
1967
2009
  enabled?: boolean;
1968
2010
  }
2011
+ interface GatewayServicePolicySyslog {
2012
+ enabled: boolean;
2013
+ serverNames?: string[];
2014
+ }
1969
2015
  interface GatewayTunnelConfigs {
1970
2016
  /**
1971
2017
  * Auto Provisioning configuration for the tunne. This takes precedence over the `primary` and `secondary` nodes.
@@ -4603,7 +4649,7 @@ export declare namespace device {
4603
4649
  }
4604
4650
  interface SwitchAclTags {
4605
4651
  /**
4606
- * Can only be used under dst tags.
4652
+ * ARP / IPv6. Default is `any`
4607
4653
  */
4608
4654
  etherTypes?: string[];
4609
4655
  /**
@@ -4864,7 +4910,7 @@ export declare namespace device {
4864
4910
  */
4865
4911
  allNetworks?: boolean;
4866
4912
  /**
4867
- * If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allowDhcpd is a tri_state. When it is not defined, it means using the system's default setting which depends on whether the port is an access or trunk port.
4913
+ * Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting; true: ports become trusted ports allowing DHCP server traffic, false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted).
4868
4914
  */
4869
4915
  allowDhcpd?: boolean;
4870
4916
  allowMultipleSupplicants?: boolean;
@@ -5282,7 +5328,7 @@ export declare namespace device {
5282
5328
  */
5283
5329
  allNetworks?: boolean;
5284
5330
  /**
5285
- * Only if `mode`!=`dynamic`. If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allowDhcpd is a tri_state. When it is not defined, it means using the system's default setting which depends on whether the port is an access or trunk port.
5331
+ * Only applies when `mode`!=`dynamic`. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting; true: ports become trusted ports allowing DHCP server traffic, false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted).
5286
5332
  */
5287
5333
  allowDhcpd?: boolean;
5288
5334
  /**
@@ -5297,6 +5343,10 @@ export declare namespace device {
5297
5343
  * Only if `mode`!=`dynamic` and `portAuth`=`dot1x`. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down
5298
5344
  */
5299
5345
  bypassAuthWhenServerDownForUnknownClient?: boolean;
5346
+ /**
5347
+ * Only if `mode`!=`dynamic` and `portAuth`==`dot1x`. Bypass auth for VOIP if set to true when RADIUS server is down
5348
+ */
5349
+ bypassAuthWhenServerDownForVoip: boolean;
5300
5350
  /**
5301
5351
  * Only if `mode`!=`dynamic`. To be used together with `isolation` under networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other
5302
5352
  */
@@ -5377,6 +5427,10 @@ export declare namespace device {
5377
5427
  * Only if `mode`!=`dynamic`. Whether PoE capabilities are disabled for a port
5378
5428
  */
5379
5429
  poeDisabled?: boolean;
5430
+ /**
5431
+ * PoE priority. enum: `low`, `high`
5432
+ */
5433
+ poePriority?: string;
5380
5434
  /**
5381
5435
  * Only if `mode`!=`dynamic`. If dot1x is desired, set to dot1x. enum: `dot1x`
5382
5436
  */
@@ -5455,7 +5509,7 @@ export declare namespace device {
5455
5509
  */
5456
5510
  expression?: string;
5457
5511
  /**
5458
- * enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
5512
+ * enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemDescription`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
5459
5513
  */
5460
5514
  src: string;
5461
5515
  /**
@@ -6121,7 +6175,7 @@ export declare namespace org {
6121
6175
  */
6122
6176
  role: string;
6123
6177
  /**
6124
- * enum: `org`, `site`, `sitegroup`
6178
+ * enum: `org`, `site`, `sitegroup`, `orgsites`
6125
6179
  */
6126
6180
  scope: string;
6127
6181
  /**
@@ -6600,14 +6654,14 @@ export declare namespace org {
6600
6654
  * Antenna gain for 6G - for models with external antenna only
6601
6655
  */
6602
6656
  antGain6?: number;
6603
- /**
6604
- * Antenna Mode for AP which supports selectable antennas. enum: `external`, `internal`
6605
- */
6606
- antMode?: string;
6607
6657
  /**
6608
6658
  * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
6609
6659
  */
6610
6660
  antennaMode?: string;
6661
+ /**
6662
+ * Antenna Mode for AP which supports selectable antennas. enum: `external`, `internal`
6663
+ */
6664
+ antennaSelect?: string;
6611
6665
  /**
6612
6666
  * Radio Band AP settings
6613
6667
  */
@@ -6636,6 +6690,10 @@ export declare namespace org {
6636
6690
  * To make an outdoor operate indoor. For an outdoor-ap, some channels are disallowed by default, this allows the user to use it as an indoor-ap
6637
6691
  */
6638
6692
  indoorUse?: boolean;
6693
+ /**
6694
+ * Enable RRM to manage all radio settings (ignores all bandXxx configs)
6695
+ */
6696
+ rrmManaged?: boolean;
6639
6697
  /**
6640
6698
  * Whether scanning radio is enabled
6641
6699
  */
@@ -6684,6 +6742,10 @@ export declare namespace org {
6684
6742
  interface DeviceprofileApRadioConfigBand5 {
6685
6743
  allowRrmDisable: boolean;
6686
6744
  antGain: number;
6745
+ /**
6746
+ * enum: `narrow`, `medium`, `wide`
6747
+ */
6748
+ antennaBeamPattern?: string;
6687
6749
  /**
6688
6750
  * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
6689
6751
  */
@@ -6724,6 +6786,10 @@ export declare namespace org {
6724
6786
  interface DeviceprofileApRadioConfigBand5On24Radio {
6725
6787
  allowRrmDisable: boolean;
6726
6788
  antGain: number;
6789
+ /**
6790
+ * enum: `narrow`, `medium`, `wide`
6791
+ */
6792
+ antennaBeamPattern?: string;
6727
6793
  /**
6728
6794
  * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
6729
6795
  */
@@ -6764,6 +6830,10 @@ export declare namespace org {
6764
6830
  interface DeviceprofileApRadioConfigBand6 {
6765
6831
  allowRrmDisable: boolean;
6766
6832
  antGain: number;
6833
+ /**
6834
+ * enum: `narrow`, `medium`, `wide`
6835
+ */
6836
+ antennaBeamPattern?: string;
6767
6837
  /**
6768
6838
  * enum: `1x1`, `2x2`, `3x3`, `4x4`, `default`
6769
6839
  */
@@ -7412,7 +7482,7 @@ export declare namespace org {
7412
7482
  */
7413
7483
  aeIdx?: string;
7414
7484
  /**
7415
- * For SRX Only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only
7485
+ * For SRX only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only
7416
7486
  */
7417
7487
  aeLacpForceUp?: boolean;
7418
7488
  aggregated?: boolean;
@@ -7794,7 +7864,7 @@ export declare namespace org {
7794
7864
  */
7795
7865
  antivirus?: outputs.org.DeviceprofileGatewayServicePolicyAntivirus;
7796
7866
  /**
7797
- * For SRX Only
7867
+ * SRX only
7798
7868
  */
7799
7869
  appqoe?: outputs.org.DeviceprofileGatewayServicePolicyAppqoe;
7800
7870
  ewfs?: outputs.org.DeviceprofileGatewayServicePolicyEwf[];
@@ -7819,10 +7889,18 @@ export declare namespace org {
7819
7889
  * Required when `servicepolicyId` is not defined. List of Applications / Destinations
7820
7890
  */
7821
7891
  services?: string[];
7892
+ /**
7893
+ * SRX only
7894
+ */
7895
+ skyatp?: outputs.org.DeviceprofileGatewayServicePolicySkyatp;
7822
7896
  /**
7823
7897
  * For SRX-only
7824
7898
  */
7825
7899
  sslProxy?: outputs.org.DeviceprofileGatewayServicePolicySslProxy;
7900
+ /**
7901
+ * Required for syslog logging
7902
+ */
7903
+ syslog?: outputs.org.DeviceprofileGatewayServicePolicySyslog;
7826
7904
  /**
7827
7905
  * Required when `servicepolicyId` is not defined. List of Networks / Users
7828
7906
  */
@@ -7863,6 +7941,24 @@ export declare namespace org {
7863
7941
  */
7864
7942
  profile?: string;
7865
7943
  }
7944
+ interface DeviceprofileGatewayServicePolicySkyatp {
7945
+ /**
7946
+ * enum: `disabled`, `default`, `standard`, `strict`
7947
+ */
7948
+ dnsDgaDetection: string;
7949
+ /**
7950
+ * enum: `disabled`, `default`, `standard`, `strict`
7951
+ */
7952
+ dnsTunnelDetection: string;
7953
+ /**
7954
+ * enum: `disabled`, `standard`
7955
+ */
7956
+ httpInspection: string;
7957
+ /**
7958
+ * enum: `disabled`, `enabled`
7959
+ */
7960
+ iotDevicePolicy: string;
7961
+ }
7866
7962
  interface DeviceprofileGatewayServicePolicySslProxy {
7867
7963
  /**
7868
7964
  * enum: `medium`, `strong`, `weak`
@@ -7870,6 +7966,10 @@ export declare namespace org {
7870
7966
  ciphersCategory?: string;
7871
7967
  enabled?: boolean;
7872
7968
  }
7969
+ interface DeviceprofileGatewayServicePolicySyslog {
7970
+ enabled: boolean;
7971
+ serverNames?: string[];
7972
+ }
7873
7973
  interface DeviceprofileGatewayTunnelConfigs {
7874
7974
  /**
7875
7975
  * Auto Provisioning configuration for the tunne. This takes precedence over the `primary` and `secondary` nodes.
@@ -8881,7 +8981,7 @@ export declare namespace org {
8881
8981
  */
8882
8982
  aeIdx?: string;
8883
8983
  /**
8884
- * For SRX Only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only
8984
+ * For SRX only, if `aggregated`==`true`.Sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only
8885
8985
  */
8886
8986
  aeLacpForceUp?: boolean;
8887
8987
  aggregated?: boolean;
@@ -9263,7 +9363,7 @@ export declare namespace org {
9263
9363
  */
9264
9364
  antivirus?: outputs.org.GatewaytemplateServicePolicyAntivirus;
9265
9365
  /**
9266
- * For SRX Only
9366
+ * SRX only
9267
9367
  */
9268
9368
  appqoe?: outputs.org.GatewaytemplateServicePolicyAppqoe;
9269
9369
  ewfs?: outputs.org.GatewaytemplateServicePolicyEwf[];
@@ -9288,10 +9388,18 @@ export declare namespace org {
9288
9388
  * Required when `servicepolicyId` is not defined. List of Applications / Destinations
9289
9389
  */
9290
9390
  services?: string[];
9391
+ /**
9392
+ * SRX only
9393
+ */
9394
+ skyatp?: outputs.org.GatewaytemplateServicePolicySkyatp;
9291
9395
  /**
9292
9396
  * For SRX-only
9293
9397
  */
9294
9398
  sslProxy?: outputs.org.GatewaytemplateServicePolicySslProxy;
9399
+ /**
9400
+ * Required for syslog logging
9401
+ */
9402
+ syslog?: outputs.org.GatewaytemplateServicePolicySyslog;
9295
9403
  /**
9296
9404
  * Required when `servicepolicyId` is not defined. List of Networks / Users
9297
9405
  */
@@ -9332,6 +9440,24 @@ export declare namespace org {
9332
9440
  */
9333
9441
  profile?: string;
9334
9442
  }
9443
+ interface GatewaytemplateServicePolicySkyatp {
9444
+ /**
9445
+ * enum: `disabled`, `default`, `standard`, `strict`
9446
+ */
9447
+ dnsDgaDetection: string;
9448
+ /**
9449
+ * enum: `disabled`, `default`, `standard`, `strict`
9450
+ */
9451
+ dnsTunnelDetection: string;
9452
+ /**
9453
+ * enum: `disabled`, `standard`
9454
+ */
9455
+ httpInspection: string;
9456
+ /**
9457
+ * enum: `disabled`, `enabled`
9458
+ */
9459
+ iotDevicePolicy: string;
9460
+ }
9335
9461
  interface GatewaytemplateServicePolicySslProxy {
9336
9462
  /**
9337
9463
  * enum: `medium`, `strong`, `weak`
@@ -9339,6 +9465,10 @@ export declare namespace org {
9339
9465
  ciphersCategory?: string;
9340
9466
  enabled?: boolean;
9341
9467
  }
9468
+ interface GatewaytemplateServicePolicySyslog {
9469
+ enabled: boolean;
9470
+ serverNames?: string[];
9471
+ }
9342
9472
  interface GatewaytemplateTunnelConfigs {
9343
9473
  /**
9344
9474
  * Auto Provisioning configuration for the tunne. This takes precedence over the `primary` and `secondary` nodes.
@@ -12344,7 +12474,7 @@ export declare namespace org {
12344
12474
  }
12345
12475
  interface NetworktemplateAclTags {
12346
12476
  /**
12347
- * Can only be used under dst tags.
12477
+ * ARP / IPv6. Default is `any`
12348
12478
  */
12349
12479
  etherTypes?: string[];
12350
12480
  /**
@@ -12576,7 +12706,7 @@ export declare namespace org {
12576
12706
  */
12577
12707
  allNetworks?: boolean;
12578
12708
  /**
12579
- * Only if `mode`!=`dynamic`. If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allowDhcpd is a tri_state. When it is not defined, it means using the system's default setting which depends on whether the port is an access or trunk port.
12709
+ * Only applies when `mode`!=`dynamic`. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting; true: ports become trusted ports allowing DHCP server traffic, false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted).
12580
12710
  */
12581
12711
  allowDhcpd?: boolean;
12582
12712
  /**
@@ -12591,6 +12721,10 @@ export declare namespace org {
12591
12721
  * Only if `mode`!=`dynamic` and `portAuth`=`dot1x`. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down
12592
12722
  */
12593
12723
  bypassAuthWhenServerDownForUnknownClient?: boolean;
12724
+ /**
12725
+ * Only if `mode`!=`dynamic` and `portAuth`==`dot1x`. Bypass auth for VOIP if set to true when RADIUS server is down
12726
+ */
12727
+ bypassAuthWhenServerDownForVoip: boolean;
12594
12728
  /**
12595
12729
  * Only if `mode`!=`dynamic`. To be used together with `isolation` under networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other
12596
12730
  */
@@ -12628,11 +12762,11 @@ export declare namespace org {
12628
12762
  */
12629
12763
  guestNetwork?: string;
12630
12764
  /**
12631
- * Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: `interSwitchLink` works only between Juniper device. This has to be applied to both ports connected together
12765
+ * Only if `mode`!=`dynamic`. `interIsolationNetworkLink` is used together with `isolation` under networks, signaling that this port connects to isolated networks
12632
12766
  */
12633
12767
  interIsolationNetworkLink?: boolean;
12634
12768
  /**
12635
- * Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: interSwitchLink works only between Juniper device. This has to be applied to both ports connected together
12769
+ * Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: `interSwitchLink` works only between Juniper devices. This has to be applied to both ports connected together
12636
12770
  */
12637
12771
  interSwitchLink?: boolean;
12638
12772
  /**
@@ -12671,6 +12805,10 @@ export declare namespace org {
12671
12805
  * Only if `mode`!=`dynamic`. Whether PoE capabilities are disabled for a port
12672
12806
  */
12673
12807
  poeDisabled?: boolean;
12808
+ /**
12809
+ * PoE priority. enum: `low`, `high`
12810
+ */
12811
+ poePriority?: string;
12674
12812
  /**
12675
12813
  * Only if `mode`!=`dynamic`. If dot1x is desired, set to dot1x. enum: `dot1x`
12676
12814
  */
@@ -12753,7 +12891,7 @@ export declare namespace org {
12753
12891
  */
12754
12892
  expression?: string;
12755
12893
  /**
12756
- * enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
12894
+ * enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemDescription`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
12757
12895
  */
12758
12896
  src: string;
12759
12897
  /**
@@ -13982,9 +14120,15 @@ export declare namespace org {
13982
14120
  autoOperations?: outputs.org.SettingMarvisAutoOperations;
13983
14121
  }
13984
14122
  interface SettingMarvisAutoOperations {
14123
+ apInsufficientCapacity: boolean;
14124
+ apLoop: boolean;
14125
+ apNonCompliant: boolean;
13985
14126
  bouncePortForAbnormalPoeClient: boolean;
13986
14127
  disablePortWhenDdosProtocolViolation: boolean;
13987
14128
  disablePortWhenRogueDhcpServerDetected: boolean;
14129
+ gatewayNonCompliant: boolean;
14130
+ switchMisconfiguredPort: boolean;
14131
+ switchPortStuck: boolean;
13988
14132
  }
13989
14133
  interface SettingMgmt {
13990
14134
  /**
@@ -14114,7 +14258,7 @@ export declare namespace org {
14114
14258
  requiresTwoFactorAuth: boolean;
14115
14259
  }
14116
14260
  interface SettingPcap {
14117
- bucket?: string;
14261
+ bucket: string;
14118
14262
  /**
14119
14263
  * Max_len of non-management packets to capture
14120
14264
  */
@@ -14152,7 +14296,7 @@ export declare namespace org {
14152
14296
  */
14153
14297
  disableStats?: boolean;
14154
14298
  /**
14155
- * Proxy Configuration to talk to Mist
14299
+ * SSR proxy configuration to talk to Mist
14156
14300
  */
14157
14301
  proxy?: outputs.org.SettingSsrProxy;
14158
14302
  }
@@ -14170,6 +14314,7 @@ export declare namespace org {
14170
14314
  enabled?: boolean;
14171
14315
  }
14172
14316
  interface SettingSsrProxy {
14317
+ disabled: boolean;
14173
14318
  url?: string;
14174
14319
  }
14175
14320
  interface SettingSwitch {
@@ -14300,7 +14445,7 @@ export declare namespace org {
14300
14445
  */
14301
14446
  role: string;
14302
14447
  /**
14303
- * enum: `org`, `site`, `sitegroup`
14448
+ * enum: `org`, `site`, `sitegroup`, `orgsites`
14304
14449
  */
14305
14450
  scope: string;
14306
14451
  /**
@@ -17300,7 +17445,7 @@ export declare namespace site {
17300
17445
  }
17301
17446
  interface NetworktemplateAclTags {
17302
17447
  /**
17303
- * Can only be used under dst tags.
17448
+ * ARP / IPv6. Default is `any`
17304
17449
  */
17305
17450
  etherTypes?: string[];
17306
17451
  /**
@@ -17532,7 +17677,7 @@ export declare namespace site {
17532
17677
  */
17533
17678
  allNetworks?: boolean;
17534
17679
  /**
17535
- * Only if `mode`!=`dynamic`. If DHCP snooping is enabled, whether DHCP server is allowed on the interfaces with. All the interfaces from port configs using this port usage are effected. Please notice that allowDhcpd is a tri_state. When it is not defined, it means using the system's default setting which depends on whether the port is an access or trunk port.
17680
+ * Only applies when `mode`!=`dynamic`. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting; true: ports become trusted ports allowing DHCP server traffic, false: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted).
17536
17681
  */
17537
17682
  allowDhcpd?: boolean;
17538
17683
  /**
@@ -17547,6 +17692,10 @@ export declare namespace site {
17547
17692
  * Only if `mode`!=`dynamic` and `portAuth`=`dot1x`. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down
17548
17693
  */
17549
17694
  bypassAuthWhenServerDownForUnknownClient?: boolean;
17695
+ /**
17696
+ * Only if `mode`!=`dynamic` and `portAuth`==`dot1x`. Bypass auth for VOIP if set to true when RADIUS server is down
17697
+ */
17698
+ bypassAuthWhenServerDownForVoip: boolean;
17550
17699
  /**
17551
17700
  * Only if `mode`!=`dynamic`. To be used together with `isolation` under networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other
17552
17701
  */
@@ -17584,11 +17733,11 @@ export declare namespace site {
17584
17733
  */
17585
17734
  guestNetwork?: string;
17586
17735
  /**
17587
- * Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: `interSwitchLink` works only between Juniper device. This has to be applied to both ports connected together
17736
+ * Only if `mode`!=`dynamic`. `interIsolationNetworkLink` is used together with `isolation` under networks, signaling that this port connects to isolated networks
17588
17737
  */
17589
17738
  interIsolationNetworkLink?: boolean;
17590
17739
  /**
17591
- * Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: interSwitchLink works only between Juniper device. This has to be applied to both ports connected together
17740
+ * Only if `mode`!=`dynamic`. `interSwitchLink` is used together with `isolation` under networks. NOTE: `interSwitchLink` works only between Juniper devices. This has to be applied to both ports connected together
17592
17741
  */
17593
17742
  interSwitchLink?: boolean;
17594
17743
  /**
@@ -17627,6 +17776,10 @@ export declare namespace site {
17627
17776
  * Only if `mode`!=`dynamic`. Whether PoE capabilities are disabled for a port
17628
17777
  */
17629
17778
  poeDisabled?: boolean;
17779
+ /**
17780
+ * PoE priority. enum: `low`, `high`
17781
+ */
17782
+ poePriority?: string;
17630
17783
  /**
17631
17784
  * Only if `mode`!=`dynamic`. If dot1x is desired, set to dot1x. enum: `dot1x`
17632
17785
  */
@@ -17709,7 +17862,7 @@ export declare namespace site {
17709
17862
  */
17710
17863
  expression?: string;
17711
17864
  /**
17712
- * enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
17865
+ * enum: `linkPeermac`, `lldpChassisId`, `lldpHardwareRevision`, `lldpManufacturerName`, `lldpOui`, `lldpSerialNumber`, `lldpSystemDescription`, `lldpSystemName`, `radiusDynamicfilter`, `radiusUsermac`, `radiusUsername`
17713
17866
  */
17714
17867
  src: string;
17715
17868
  /**
@@ -18781,7 +18934,7 @@ export declare namespace site {
18781
18934
  */
18782
18935
  protectRe?: outputs.site.SettingGatewayMgmtProtectRe;
18783
18936
  /**
18784
- * For SRX only
18937
+ * SRX only
18785
18938
  */
18786
18939
  rootPassword?: string;
18787
18940
  securityLogSourceAddress?: string;
@@ -18892,9 +19045,15 @@ export declare namespace site {
18892
19045
  autoOperations?: outputs.site.SettingMarvisAutoOperations;
18893
19046
  }
18894
19047
  interface SettingMarvisAutoOperations {
19048
+ apInsufficientCapacity: boolean;
19049
+ apLoop: boolean;
19050
+ apNonCompliant: boolean;
18895
19051
  bouncePortForAbnormalPoeClient: boolean;
18896
19052
  disablePortWhenDdosProtocolViolation: boolean;
18897
19053
  disablePortWhenRogueDhcpServerDetected: boolean;
19054
+ gatewayNonCompliant: boolean;
19055
+ switchMisconfiguredPort: boolean;
19056
+ switchPortStuck: boolean;
18898
19057
  }
18899
19058
  interface SettingOccupancy {
18900
19059
  /**
@@ -18919,6 +19078,7 @@ export declare namespace site {
18919
19078
  unconnectedClientsEnabled: boolean;
18920
19079
  }
18921
19080
  interface SettingProxy {
19081
+ disabled: boolean;
18922
19082
  url?: string;
18923
19083
  }
18924
19084
  interface SettingRogue {
@@ -19044,7 +19204,7 @@ export declare namespace site {
19044
19204
  */
19045
19205
  disableStats?: boolean;
19046
19206
  /**
19047
- * Proxy Configuration to talk to Mist
19207
+ * SSR proxy configuration to talk to Mist
19048
19208
  */
19049
19209
  proxy?: outputs.site.SettingSsrProxy;
19050
19210
  }
@@ -19062,6 +19222,7 @@ export declare namespace site {
19062
19222
  enabled?: boolean;
19063
19223
  }
19064
19224
  interface SettingSsrProxy {
19225
+ disabled: boolean;
19065
19226
  url?: string;
19066
19227
  }
19067
19228
  interface SettingSyntheticTest {