import * as pulumi from "@pulumi/pulumi"; import * as inputs from "../types/input"; import * as outputs from "../types/output"; /** * This resource manages Org NAC Portals. * * NAC Portal configuration defines the authentication portal for network access control. * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as junipermist from "@pulumi/juniper-mist"; * * const guestPortal = new junipermist.org.NacPortal("guest_portal", { * orgId: terraformTest.id, * name: "Guest Portal", * type: "marvis_client", * accessType: "wireless+wired", * ssid: "Guest-Network", * certExpireTime: 365, * eapType: "wpa3", * enableTelemetry: true, * expiryNotificationTime: 30, * notifyExpiry: true, * tos: "By using this network, you agree to our terms of service and privacy policy.", * additionalCacerts: [`-----BEGIN CERTIFICATE----- * MIIC...certificate...content * -----END CERTIFICATE-----`], * additionalNacServerNames: [ * "nac1.example.com", * "nac2.example.com", * ], * portal: { * auth: "multi", * expire: 43200, * externalPortalUrl: "https://portal.example.com/external", * forceReconnect: false, * forward: true, * forwardUrl: "https://example.com/portal/welcome", * maxNumDevices: 10, * privacy: true, * }, * sso: { * idpCert: `-----BEGIN CERTIFICATE----- * MIIC...idp...cert * -----END CERTIFICATE-----`, * idpSignAlgo: "sha384", * idpSsoUrl: "https://idp.example.com/saml/sso", * issuer: "https://idp.example.com", * nameidFormat: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent", * useSsoRoleForCert: false, * ssoRoleMatchings: [ * { * match: "Administrator", * assigned: "full-access", * }, * { * match: "Manager", * assigned: "manager-access", * }, * { * match: "Employee", * assigned: "employee-access", * }, * { * match: "Guest", * assigned: "guest-access", * }, * ], * }, * }); * ``` */ export declare class NacPortal extends pulumi.CustomResource { /** * Get an existing NacPortal resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: NacPortalState, opts?: pulumi.CustomResourceOptions): NacPortal; /** * Returns true if the given object is an instance of NacPortal. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is NacPortal; /** * If `type`==`marvisClient`, whether onboarding applies to wireless clients or both wireless and wired clients */ readonly accessType: pulumi.Output; /** * Additional CA certificates trusted during NAC portal certificate onboarding */ readonly additionalCacerts: pulumi.Output; /** * Optional list of additional NAC server names */ readonly additionalNacServerNames: pulumi.Output; /** * Validity duration for portal-issued client certificates, in days */ readonly certExpireTime: pulumi.Output; /** * EAP mode used when onboarding wireless clients through the NAC portal */ readonly eapType: pulumi.Output; /** * Model, version, fingering, events (connecting, disconnect, roaming), which ap */ readonly enableTelemetry: pulumi.Output; /** * Number of days before certificate expiration to start sending reminder notifications */ readonly expiryNotificationTime: pulumi.Output; /** * Human-readable name of the NAC portal */ readonly name: pulumi.Output; /** * Whether to send reminder notifications before portal-issued certificates expire */ readonly notifyExpiry: pulumi.Output; /** * Organization that owns this NAC portal */ readonly orgId: pulumi.Output; /** * Guest portal settings used when `type`==`guestPortal` */ readonly portal: pulumi.Output; /** * Wireless SSID associated with the NAC portal */ readonly ssid: pulumi.Output; /** * SAML SSO settings for NAC portal authentication and role mapping */ readonly sso: pulumi.Output; /** * Terms of service text shown in the NAC portal */ readonly tos: pulumi.Output; /** * NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding */ readonly type: pulumi.Output; /** * Create a NacPortal resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: NacPortalArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering NacPortal resources. */ export interface NacPortalState { /** * If `type`==`marvisClient`, whether onboarding applies to wireless clients or both wireless and wired clients */ accessType?: pulumi.Input; /** * Additional CA certificates trusted during NAC portal certificate onboarding */ additionalCacerts?: pulumi.Input[] | undefined>; /** * Optional list of additional NAC server names */ additionalNacServerNames?: pulumi.Input[] | undefined>; /** * Validity duration for portal-issued client certificates, in days */ certExpireTime?: pulumi.Input; /** * EAP mode used when onboarding wireless clients through the NAC portal */ eapType?: pulumi.Input; /** * Model, version, fingering, events (connecting, disconnect, roaming), which ap */ enableTelemetry?: pulumi.Input; /** * Number of days before certificate expiration to start sending reminder notifications */ expiryNotificationTime?: pulumi.Input; /** * Human-readable name of the NAC portal */ name?: pulumi.Input; /** * Whether to send reminder notifications before portal-issued certificates expire */ notifyExpiry?: pulumi.Input; /** * Organization that owns this NAC portal */ orgId?: pulumi.Input; /** * Guest portal settings used when `type`==`guestPortal` */ portal?: pulumi.Input; /** * Wireless SSID associated with the NAC portal */ ssid?: pulumi.Input; /** * SAML SSO settings for NAC portal authentication and role mapping */ sso?: pulumi.Input; /** * Terms of service text shown in the NAC portal */ tos?: pulumi.Input; /** * NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding */ type?: pulumi.Input; } /** * The set of arguments for constructing a NacPortal resource. */ export interface NacPortalArgs { /** * If `type`==`marvisClient`, whether onboarding applies to wireless clients or both wireless and wired clients */ accessType?: pulumi.Input; /** * Additional CA certificates trusted during NAC portal certificate onboarding */ additionalCacerts?: pulumi.Input[] | undefined>; /** * Optional list of additional NAC server names */ additionalNacServerNames?: pulumi.Input[] | undefined>; /** * Validity duration for portal-issued client certificates, in days */ certExpireTime?: pulumi.Input; /** * EAP mode used when onboarding wireless clients through the NAC portal */ eapType?: pulumi.Input; /** * Model, version, fingering, events (connecting, disconnect, roaming), which ap */ enableTelemetry?: pulumi.Input; /** * Number of days before certificate expiration to start sending reminder notifications */ expiryNotificationTime?: pulumi.Input; /** * Human-readable name of the NAC portal */ name?: pulumi.Input; /** * Whether to send reminder notifications before portal-issued certificates expire */ notifyExpiry?: pulumi.Input; /** * Organization that owns this NAC portal */ orgId: pulumi.Input; /** * Guest portal settings used when `type`==`guestPortal` */ portal?: pulumi.Input; /** * Wireless SSID associated with the NAC portal */ ssid?: pulumi.Input; /** * SAML SSO settings for NAC portal authentication and role mapping */ sso?: pulumi.Input; /** * Terms of service text shown in the NAC portal */ tos?: pulumi.Input; /** * NAC portal mode, such as guest admin, guest portal, or Marvis client onboarding */ type?: pulumi.Input; } //# sourceMappingURL=nacPortal.d.ts.map