import * as pulumi from "@pulumi/pulumi";
import * as inputs from "../types/input";
import * as outputs from "../types/output";
/**
 * This resource manages the NAC Rules (Auth Policies).
 *
 * A NAC Rule defines a list of criteria (NAC Tag) the network client must match to execute the Rule, an action (Allow/Deny)and a list of RADIUS Attributes (NAC Tags) to return
 *
 * ## Example Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as junipermist from "@pulumi/juniper-mist";
 *
 * const nacruleOne = new junipermist.org.Nacrule("nacrule_one", {
 *     name: "rule_one",
 *     action: "allow",
 *     orgId: terraformTest.id,
 *     matching: {
 *         portTypes: ["wired"],
 *         authType: "mab",
 *         nactags: ["c055c60b-351a-4311-8ee5-9b7be5e5f902"],
 *     },
 *     applyTags: [
 *         "61c11327-5e1b-40ed-bbbf-5e95642c4f59",
 *         "3f292454-ac5f-4a36-9aff-d0518d90b47a",
 *     ],
 *     enabled: true,
 *     order: 9,
 * });
 * ```
 *
 * ## Import
 *
 * Using `pulumi import`, import `junipermist.org.Nacrule` with:
 * NAC Rule can be imported by specifying the orgId and the nacruleId
 *
 * ```sh
 * $ pulumi import junipermist:org/nacrule:Nacrule nacrule_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309
 * ```
 */
export declare class Nacrule extends pulumi.CustomResource {
    /**
     * Get an existing Nacrule resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param state Any extra arguments used during the lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: NacruleState, opts?: pulumi.CustomResourceOptions): Nacrule;
    /**
     * Returns true if the given object is an instance of Nacrule.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is Nacrule;
    /**
     * Allow or block decision applied when the NAC rule matches
     */
    readonly action: pulumi.Output<string>;
    /**
     * NAC tag IDs to include in the Access-Accept when the rule allows access
     */
    readonly applyTags: pulumi.Output<string[]>;
    /**
     * Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
     */
    readonly dryRun: pulumi.Output<boolean | undefined>;
    /**
     * Whether the NAC rule is evaluated during policy matching
     */
    readonly enabled: pulumi.Output<boolean>;
    /**
     * Guest portal authorization state condition for the rule
     */
    readonly guestAuthState: pulumi.Output<string | undefined>;
    /**
     * Criteria that must match for the NAC rule to apply
     */
    readonly matching: pulumi.Output<outputs.org.NacruleMatching | undefined>;
    /**
     * Human-readable name of the NAC rule
     */
    readonly name: pulumi.Output<string>;
    /**
     * Criteria that must not match for the NAC rule to apply
     */
    readonly notMatching: pulumi.Output<outputs.org.NacruleNotMatching | undefined>;
    /**
     * Rule priority; lower values are evaluated with higher priority
     */
    readonly order: pulumi.Output<number>;
    /**
     * Org identifier that owns the NAC rule
     */
    readonly orgId: pulumi.Output<string>;
    /**
     * Create a Nacrule resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: NacruleArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * Input properties used for looking up and filtering Nacrule resources.
 */
export interface NacruleState {
    /**
     * Allow or block decision applied when the NAC rule matches
     */
    action?: pulumi.Input<string | undefined>;
    /**
     * NAC tag IDs to include in the Access-Accept when the rule allows access
     */
    applyTags?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
     */
    dryRun?: pulumi.Input<boolean | undefined>;
    /**
     * Whether the NAC rule is evaluated during policy matching
     */
    enabled?: pulumi.Input<boolean | undefined>;
    /**
     * Guest portal authorization state condition for the rule
     */
    guestAuthState?: pulumi.Input<string | undefined>;
    /**
     * Criteria that must match for the NAC rule to apply
     */
    matching?: pulumi.Input<inputs.org.NacruleMatching | undefined>;
    /**
     * Human-readable name of the NAC rule
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * Criteria that must not match for the NAC rule to apply
     */
    notMatching?: pulumi.Input<inputs.org.NacruleNotMatching | undefined>;
    /**
     * Rule priority; lower values are evaluated with higher priority
     */
    order?: pulumi.Input<number | undefined>;
    /**
     * Org identifier that owns the NAC rule
     */
    orgId?: pulumi.Input<string | undefined>;
}
/**
 * The set of arguments for constructing a Nacrule resource.
 */
export interface NacruleArgs {
    /**
     * Allow or block decision applied when the NAC rule matches
     */
    action: pulumi.Input<string>;
    /**
     * NAC tag IDs to include in the Access-Accept when the rule allows access
     */
    applyTags?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Whether the NAC rule is in dry-run mode, where matches are logged but the action is not enforced
     */
    dryRun?: pulumi.Input<boolean | undefined>;
    /**
     * Whether the NAC rule is evaluated during policy matching
     */
    enabled?: pulumi.Input<boolean | undefined>;
    /**
     * Guest portal authorization state condition for the rule
     */
    guestAuthState?: pulumi.Input<string | undefined>;
    /**
     * Criteria that must match for the NAC rule to apply
     */
    matching?: pulumi.Input<inputs.org.NacruleMatching | undefined>;
    /**
     * Human-readable name of the NAC rule
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * Criteria that must not match for the NAC rule to apply
     */
    notMatching?: pulumi.Input<inputs.org.NacruleNotMatching | undefined>;
    /**
     * Rule priority; lower values are evaluated with higher priority
     */
    order: pulumi.Input<number>;
    /**
     * Org identifier that owns the NAC rule
     */
    orgId: pulumi.Input<string>;
}
//# sourceMappingURL=nacrule.d.ts.map