import * as pulumi from "@pulumi/pulumi";
/**
 * This resource manages NAC Tags (Auth Policy Labels).
 *
 * The NAC Tags can be used in the NAC Rules to define the matching criteria or the returned RADIUS Attributes
 *
 * ## Example Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as junipermist from "@pulumi/juniper-mist";
 *
 * const tagOne = new junipermist.org.Nactag("tag_one", {
 *     name: "tag_one",
 *     type: "match",
 *     match: "client_mac",
 *     orgId: terraformTest.id,
 *     values: ["5c5b35*"],
 * });
 * ```
 *
 * ## Import
 *
 * Using `pulumi import`, import `junipermist.org.Nactag` with:
 * NAC Tag can be imported by specifying the orgId and the nactagId
 *
 * ```sh
 * $ pulumi import junipermist:org/nactag:Nactag nactag_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309
 * ```
 */
export declare class Nactag extends pulumi.CustomResource {
    /**
     * Get an existing Nactag resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param state Any extra arguments used during the lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: NactagState, opts?: pulumi.CustomResourceOptions): Nactag;
    /**
     * Returns true if the given object is an instance of Nactag.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is Nactag;
    /**
     * Whether usermac result values can override this NAC tag when the result type is also supported by usermac
     */
    readonly allowUsermacOverride: pulumi.Output<boolean | undefined>;
    /**
     * If `type`==`egressVlanNames`, list of egress VLAN names returned by the NAC rule
     */
    readonly egressVlanNames: pulumi.Output<string[] | undefined>;
    /**
     * If `type`==`gbpTag`, GBP tag value returned by the NAC rule
     */
    readonly gbpTag: pulumi.Output<string | undefined>;
    /**
     * If `type`==`match`, client or authentication attribute used for rule matching
     */
    readonly match: pulumi.Output<string | undefined>;
    /**
     * This field is applicable only when `type`==`match`
     *   * `false`: means it is sufficient to match any of the values (i.e., match-any behavior)
     *   * `true`: means all values should be matched (i.e., match-all behavior)
     *
     *
     * Currently it makes sense to set this field to `true` only if the `match`==`idpRole`, `match`==`usermacLabel` and `edrStatus`
     */
    readonly matchAll: pulumi.Output<boolean | undefined>;
    /**
     * If `type`==`redirectNacportalId`, NAC portal ID used for client redirection
     */
    readonly nacportalId: pulumi.Output<string | undefined>;
    /**
     * Human-readable name of the NAC tag
     */
    readonly name: pulumi.Output<string>;
    /**
     * Org identifier that owns the NAC tag
     */
    readonly orgId: pulumi.Output<string>;
    /**
     * If `type`==`radiusAttrs`, standard RADIUS attributes returned by the NAC rule
     */
    readonly radiusAttrs: pulumi.Output<string[] | undefined>;
    /**
     * If `type`==`radiusGroup`, RADIUS group value returned by the NAC rule
     */
    readonly radiusGroup: pulumi.Output<string | undefined>;
    /**
     * If `type`==`radiusVendorAttrs`, vendor-specific RADIUS attributes returned by the NAC rule
     */
    readonly radiusVendorAttrs: pulumi.Output<string[] | undefined>;
    /**
     * If `type`==`sessionTimeout`, session timeout returned by the NAC rule, in seconds
     */
    readonly sessionTimeout: pulumi.Output<number | undefined>;
    /**
     * NAC tag type that determines whether the tag is a matcher or a result attribute
     */
    readonly type: pulumi.Output<string>;
    /**
     * If `type`==`usernameAttr`, attribute used to derive the username returned by the NAC rule
     */
    readonly usernameAttr: pulumi.Output<string | undefined>;
    /**
     * If `type`==`match`, attribute values used by the NAC tag matcher
     */
    readonly values: pulumi.Output<string[] | undefined>;
    /**
     * If `type`==`vlan`, VLAN name or ID returned by the NAC rule
     */
    readonly vlan: pulumi.Output<string | undefined>;
    /**
     * Create a Nactag resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: NactagArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * Input properties used for looking up and filtering Nactag resources.
 */
export interface NactagState {
    /**
     * Whether usermac result values can override this NAC tag when the result type is also supported by usermac
     */
    allowUsermacOverride?: pulumi.Input<boolean | undefined>;
    /**
     * If `type`==`egressVlanNames`, list of egress VLAN names returned by the NAC rule
     */
    egressVlanNames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * If `type`==`gbpTag`, GBP tag value returned by the NAC rule
     */
    gbpTag?: pulumi.Input<string | undefined>;
    /**
     * If `type`==`match`, client or authentication attribute used for rule matching
     */
    match?: pulumi.Input<string | undefined>;
    /**
     * This field is applicable only when `type`==`match`
     *   * `false`: means it is sufficient to match any of the values (i.e., match-any behavior)
     *   * `true`: means all values should be matched (i.e., match-all behavior)
     *
     *
     * Currently it makes sense to set this field to `true` only if the `match`==`idpRole`, `match`==`usermacLabel` and `edrStatus`
     */
    matchAll?: pulumi.Input<boolean | undefined>;
    /**
     * If `type`==`redirectNacportalId`, NAC portal ID used for client redirection
     */
    nacportalId?: pulumi.Input<string | undefined>;
    /**
     * Human-readable name of the NAC tag
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * Org identifier that owns the NAC tag
     */
    orgId?: pulumi.Input<string | undefined>;
    /**
     * If `type`==`radiusAttrs`, standard RADIUS attributes returned by the NAC rule
     */
    radiusAttrs?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * If `type`==`radiusGroup`, RADIUS group value returned by the NAC rule
     */
    radiusGroup?: pulumi.Input<string | undefined>;
    /**
     * If `type`==`radiusVendorAttrs`, vendor-specific RADIUS attributes returned by the NAC rule
     */
    radiusVendorAttrs?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * If `type`==`sessionTimeout`, session timeout returned by the NAC rule, in seconds
     */
    sessionTimeout?: pulumi.Input<number | undefined>;
    /**
     * NAC tag type that determines whether the tag is a matcher or a result attribute
     */
    type?: pulumi.Input<string | undefined>;
    /**
     * If `type`==`usernameAttr`, attribute used to derive the username returned by the NAC rule
     */
    usernameAttr?: pulumi.Input<string | undefined>;
    /**
     * If `type`==`match`, attribute values used by the NAC tag matcher
     */
    values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * If `type`==`vlan`, VLAN name or ID returned by the NAC rule
     */
    vlan?: pulumi.Input<string | undefined>;
}
/**
 * The set of arguments for constructing a Nactag resource.
 */
export interface NactagArgs {
    /**
     * Whether usermac result values can override this NAC tag when the result type is also supported by usermac
     */
    allowUsermacOverride?: pulumi.Input<boolean | undefined>;
    /**
     * If `type`==`egressVlanNames`, list of egress VLAN names returned by the NAC rule
     */
    egressVlanNames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * If `type`==`gbpTag`, GBP tag value returned by the NAC rule
     */
    gbpTag?: pulumi.Input<string | undefined>;
    /**
     * If `type`==`match`, client or authentication attribute used for rule matching
     */
    match?: pulumi.Input<string | undefined>;
    /**
     * This field is applicable only when `type`==`match`
     *   * `false`: means it is sufficient to match any of the values (i.e., match-any behavior)
     *   * `true`: means all values should be matched (i.e., match-all behavior)
     *
     *
     * Currently it makes sense to set this field to `true` only if the `match`==`idpRole`, `match`==`usermacLabel` and `edrStatus`
     */
    matchAll?: pulumi.Input<boolean | undefined>;
    /**
     * If `type`==`redirectNacportalId`, NAC portal ID used for client redirection
     */
    nacportalId?: pulumi.Input<string | undefined>;
    /**
     * Human-readable name of the NAC tag
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * Org identifier that owns the NAC tag
     */
    orgId: pulumi.Input<string>;
    /**
     * If `type`==`radiusAttrs`, standard RADIUS attributes returned by the NAC rule
     */
    radiusAttrs?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * If `type`==`radiusGroup`, RADIUS group value returned by the NAC rule
     */
    radiusGroup?: pulumi.Input<string | undefined>;
    /**
     * If `type`==`radiusVendorAttrs`, vendor-specific RADIUS attributes returned by the NAC rule
     */
    radiusVendorAttrs?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * If `type`==`sessionTimeout`, session timeout returned by the NAC rule, in seconds
     */
    sessionTimeout?: pulumi.Input<number | undefined>;
    /**
     * NAC tag type that determines whether the tag is a matcher or a result attribute
     */
    type: pulumi.Input<string>;
    /**
     * If `type`==`usernameAttr`, attribute used to derive the username returned by the NAC rule
     */
    usernameAttr?: pulumi.Input<string | undefined>;
    /**
     * If `type`==`match`, attribute values used by the NAC tag matcher
     */
    values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * If `type`==`vlan`, VLAN name or ID returned by the NAC rule
     */
    vlan?: pulumi.Input<string | undefined>;
}
//# sourceMappingURL=nactag.d.ts.map