import * as pulumi from "@pulumi/pulumi";
import * as inputs from "../types/input";
import * as outputs from "../types/output";
/**
 * This resource manages the Org Wlans.
 *
 * The WLAN object contains all the required configuration to broadcast an SSID (Authentication, VLAN, ...)
 *
 * ## Example Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as junipermist from "@pulumi/juniper-mist";
 *
 * const wlanOne = new junipermist.org.Wlan("wlan_one", {
 *     ssid: "wlan_one",
 *     orgId: terraformTest.id,
 *     templateId: test101.id,
 *     bands: [
 *         "5",
 *         "6",
 *     ],
 *     vlanEnabled: true,
 *     vlanId: "143",
 *     wlanLimitUp: "10000",
 *     wlanLimitDown: "20000",
 *     clientLimitUp: "512",
 *     clientLimitDown: "1000",
 *     auth: {
 *         type: "psk",
 *         psk: "secretpsk",
 *     },
 *     "interface": "all",
 * });
 * ```
 *
 * ## Import
 *
 * Using `pulumi import`, import `junipermist.org.Wlan` with:
 * Org WLAN can be imported by specifying the orgId and the wlanId
 *
 * ```sh
 * $ pulumi import junipermist:org/wlan:Wlan wlan_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309
 * ```
 */
export declare class Wlan extends pulumi.CustomResource {
    /**
     * Get an existing Wlan resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param state Any extra arguments used during the lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: WlanState, opts?: pulumi.CustomResourceOptions): Wlan;
    /**
     * Returns true if the given object is an instance of Wlan.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is Wlan;
    /**
     * Enable coa-immediate-update and address-change-immediate-update on the access profile.
     */
    readonly acctImmediateUpdate: pulumi.Output<boolean>;
    /**
     * How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled
     */
    readonly acctInterimInterval: pulumi.Output<number>;
    /**
     * RADIUS accounting servers used by this WLAN
     */
    readonly acctServers: pulumi.Output<outputs.org.WlanAcctServer[]>;
    /**
     * Integration settings for AirWatch device compliance on this WLAN
     */
    readonly airwatch: pulumi.Output<outputs.org.WlanAirwatch>;
    /**
     * Only applicable when `limitBcast`==`true`, which allows or disallows ipv6 Neighbor Discovery packets to go through
     */
    readonly allowIpv6Ndp: pulumi.Output<boolean>;
    /**
     * Only applicable when `limitBcast`==`true`, which allows mDNS / Bonjour packets to go through
     */
    readonly allowMdns: pulumi.Output<boolean>;
    /**
     * Only applicable when `limitBcast`==`true`, which allows SSDP
     */
    readonly allowSsdp: pulumi.Output<boolean>;
    /**
     * Access point identifiers used when `applyTo`==`aps`
     */
    readonly apIds: pulumi.Output<string[]>;
    /**
     * Bandwidth limits for applications on this WLAN
     */
    readonly appLimit: pulumi.Output<outputs.org.WlanAppLimit | undefined>;
    /**
     * QoS rules for application traffic on this WLAN
     */
    readonly appQos: pulumi.Output<outputs.org.WlanAppQos>;
    /**
     * Scope that determines where this WLAN is applied
     */
    readonly applyTo: pulumi.Output<string>;
    /**
     * Whether to enable smart arp filter
     */
    readonly arpFilter: pulumi.Output<boolean>;
    /**
     * Settings that control client authentication for this WLAN
     */
    readonly auth: pulumi.Output<outputs.org.WlanAuth | undefined>;
    /**
     * RADIUS authentication server selection behavior for this WLAN
     */
    readonly authServerSelection: pulumi.Output<string>;
    /**
     * RADIUS authentication servers used by this WLAN. Required when `auth.type`==`eap`
     */
    readonly authServers: pulumi.Output<outputs.org.WlanAuthServer[]>;
    /**
     * Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers
     */
    readonly authServersNasId: pulumi.Output<string>;
    /**
     * Optional, NAS-IP-ADDRESS to use
     */
    readonly authServersNasIp: pulumi.Output<string>;
    /**
     * RADIUS auth session retries. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘retries’ are set to value of auth_servers_retries. ‘max-requests’ is also set when setting authServersRetries and is set to default value to 3.
     */
    readonly authServersRetries: pulumi.Output<number | undefined>;
    /**
     * RADIUS auth session timeout. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘quite-period’  and ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when setting authServersTimeout and is set to default value of 10.
     */
    readonly authServersTimeout: pulumi.Output<number | undefined>;
    /**
     * Whether to enable band_steering, this works only when band==both
     */
    readonly bandSteer: pulumi.Output<boolean>;
    /**
     * Force dualBand capable client to connect to 5G
     */
    readonly bandSteerForceBand5: pulumi.Output<boolean | undefined>;
    /**
     * list of radios that the wlan should apply to. enum: `24`, `5`, `6`
     */
    readonly bands: pulumi.Output<string[] | undefined>;
    /**
     * Whether to block the clients in the blacklist (up to first 256 macs)
     */
    readonly blockBlacklistClients: pulumi.Output<boolean | undefined>;
    /**
     * Service discovery gateway settings for Bonjour traffic on this WLAN
     */
    readonly bonjour: pulumi.Output<outputs.org.WlanBonjour | undefined>;
    /**
     * Central web authentication settings for Cisco CWA on this WLAN
     */
    readonly ciscoCwa: pulumi.Output<outputs.org.WlanCiscoCwa>;
    /**
     * Downlink bandwidth limit applied per client
     */
    readonly clientLimitDown: pulumi.Output<string>;
    /**
     * If downlink limiting per-client is enabled
     */
    readonly clientLimitDownEnabled: pulumi.Output<boolean | undefined>;
    /**
     * Uplink bandwidth limit applied per client
     */
    readonly clientLimitUp: pulumi.Output<string>;
    /**
     * If uplink limiting per-client is enabled
     */
    readonly clientLimitUpEnabled: pulumi.Output<boolean | undefined>;
    /**
     * RADIUS Change of Authorization servers available to this WLAN
     */
    readonly coaServers: pulumi.Output<outputs.org.WlanCoaServer[] | undefined>;
    /**
     * Some old WLAN drivers may not be compatible
     */
    readonly disable11ax: pulumi.Output<boolean>;
    /**
     * To disable Wi-Fi 7 EHT IEs
     */
    readonly disable11be: pulumi.Output<boolean | undefined>;
    /**
     * To disable ht or vht rates
     */
    readonly disableHtVhtRates: pulumi.Output<boolean | undefined>;
    /**
     * whether to disable Message-Authenticator Check, which is used to verify the integrity of RADIUS messages, default is false (i.e. for better security)
     */
    readonly disableMessageAuthenticatorCheck: pulumi.Output<boolean | undefined>;
    /**
     * Whether to disable U-APSD
     */
    readonly disableUapsd: pulumi.Output<boolean>;
    /**
     * Disable sending v2 roam notification messages
     */
    readonly disableV1RoamNotify: pulumi.Output<boolean | undefined>;
    /**
     * Disable sending v2 roam notification messages
     */
    readonly disableV2RoamNotify: pulumi.Output<boolean | undefined>;
    /**
     * When any of the following is true, this WLAN will be disabled
     *    * cannot get IP
     *    * cannot obtain default gateway
     *    * cannot reach default gateway
     */
    readonly disableWhenGatewayUnreachable: pulumi.Output<boolean | undefined>;
    /**
     * Whether to disable this WLAN when the configured Mist tunnel is down
     */
    readonly disableWhenMxtunnelDown: pulumi.Output<boolean | undefined>;
    /**
     * Whether to disable WMM
     */
    readonly disableWmm: pulumi.Output<boolean>;
    /**
     * RADIUS group based DNS server rewrite settings for this WLAN
     */
    readonly dnsServerRewrite: pulumi.Output<outputs.org.WlanDnsServerRewrite | undefined>;
    /**
     * Delivery Traffic Indication Message interval for this WLAN
     */
    readonly dtim: pulumi.Output<number>;
    /**
     * Per-user PSK selection settings for this WLAN
     */
    readonly dynamicPsk: pulumi.Output<outputs.org.WlanDynamicPsk | undefined>;
    /**
     * VLAN assignment settings for 802.1X dynamic VLANs
     */
    readonly dynamicVlan: pulumi.Output<outputs.org.WlanDynamicVlan | undefined>;
    /**
     * Enable FTM (Fine-Time Measurement, 802.11mc); configures the AP as an FTM Responder (target), allowing clients to perform ranging requests against it
     */
    readonly enableFtm: pulumi.Output<boolean>;
    /**
     * Enable AP-AP keycaching via multicast
     */
    readonly enableLocalKeycaching: pulumi.Output<boolean | undefined>;
    /**
     * By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where client is a wireless bridge (DHCP packets for other MACs will need to be forwarded), wirelessBridging can be enabled
     */
    readonly enableWirelessBridging: pulumi.Output<boolean | undefined>;
    /**
     * If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcpTracking will cut down DHCP response packets to be forwarded to wireless
     */
    readonly enableWirelessBridgingDhcpTracking: pulumi.Output<boolean | undefined>;
    /**
     * If this wlan is enabled
     */
    readonly enabled: pulumi.Output<boolean>;
    /**
     * If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .
     */
    readonly fastDot1xTimers: pulumi.Output<boolean | undefined>;
    /**
     * Whether to hide SSID in beacon
     */
    readonly hideSsid: pulumi.Output<boolean>;
    /**
     * Include hostname inside IE in AP beacons / probe responses
     */
    readonly hostnameIe: pulumi.Output<boolean>;
    /**
     * Passpoint and Hotspot 2.0 settings for this WLAN
     */
    readonly hotspot20: pulumi.Output<outputs.org.WlanHotspot20 | undefined>;
    /**
     * DHCP Option 82 insertion settings for this WLAN
     */
    readonly injectDhcpOption82: pulumi.Output<outputs.org.WlanInjectDhcpOption82 | undefined>;
    /**
     * Network interface or tunnel where this WLAN bridges client traffic
     */
    readonly interface: pulumi.Output<string>;
    /**
     * Whether to stop clients to talk to each other
     */
    readonly isolation: pulumi.Output<boolean | undefined>;
    /**
     * If isolation is enabled, whether to deny clients to talk to L2 on the LAN
     */
    readonly l2Isolation: pulumi.Output<boolean | undefined>;
    /**
     * Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.
     */
    readonly legacyOverds: pulumi.Output<boolean | undefined>;
    /**
     * Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)
     */
    readonly limitBcast: pulumi.Output<boolean>;
    /**
     * Limit probe response base on some heuristic rules
     */
    readonly limitProbeResponse: pulumi.Output<boolean>;
    /**
     * Max idle time in seconds
     */
    readonly maxIdletime: pulumi.Output<number>;
    /**
     * Maximum number of client connected to the SSID. `0` means unlimited
     */
    readonly maxNumClients: pulumi.Output<number | undefined>;
    /**
     * Juniper Mist NAC settings used by this WLAN
     */
    readonly mistNac: pulumi.Output<outputs.org.WlanMistNac>;
    /**
     * Managed service provider identifier associated with this WLAN
     */
    readonly mspId: pulumi.Output<string>;
    /**
     * Mist Tunnel identifiers used when `interface`==`mxtunnel`
     */
    readonly mxtunnelIds: pulumi.Output<string[]>;
    /**
     * Mist Tunnel names used when `interface`==`siteMxedge`
     */
    readonly mxtunnelNames: pulumi.Output<string[]>;
    /**
     * Whether to only allow client to use DNS that we’ve learned from DHCP response
     */
    readonly noStaticDns: pulumi.Output<boolean>;
    /**
     * Whether to only allow client that we’ve learned from DHCP exchange to talk
     */
    readonly noStaticIp: pulumi.Output<boolean>;
    /**
     * Owning organization associated with this WLAN
     */
    readonly orgId: pulumi.Output<string>;
    /**
     * Guest portal settings for this WLAN
     */
    readonly portal: pulumi.Output<outputs.org.WlanPortal>;
    /**
     * Guest portal hostnames that clients may reach before authorization
     */
    readonly portalAllowedHostnames: pulumi.Output<string[]>;
    /**
     * Guest portal CIDR subnets that clients may reach before authorization
     */
    readonly portalAllowedSubnets: pulumi.Output<string[]>;
    /**
     * API secret (auto-generated) that can be used to sign guest authorization requests, only generated when auth is set to `external`
     */
    readonly portalApiSecret: pulumi.Output<string>;
    /**
     * Guest portal hostnames denied before authorization, taking precedence over allowed hostnames
     */
    readonly portalDeniedHostnames: pulumi.Output<string[]>;
    /**
     * Url of portal background image
     */
    readonly portalImage: pulumi.Output<string>;
    /**
     * URL used in the SSO process, auto-generated when auth is set to `sso`
     */
    readonly portalSsoUrl: pulumi.Output<string>;
    /**
     * Quality-of-service settings for WLAN client traffic
     */
    readonly qos: pulumi.Output<outputs.org.WlanQos>;
    /**
     * TLS-secured RADIUS transport settings for this WLAN
     */
    readonly radsec: pulumi.Output<outputs.org.WlanRadsec>;
    /**
     * Data rate settings by RF band for this WLAN
     */
    readonly rateset: pulumi.Output<{
        [key: string]: outputs.org.WlanRateset;
    }>;
    /**
     * When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)
     */
    readonly reconnectClientsWhenRoamingMxcluster: pulumi.Output<boolean | undefined>;
    /**
     * Fast roaming mode configured for this WLAN
     */
    readonly roamMode: pulumi.Output<string | undefined>;
    /**
     * Operating schedule controlling when this WLAN is active
     */
    readonly schedule: pulumi.Output<outputs.org.WlanSchedule>;
    /**
     * Whether to exclude this WLAN from SLE metrics
     */
    readonly sleExcluded: pulumi.Output<boolean | undefined>;
    /**
     * Name of the SSID
     */
    readonly ssid: pulumi.Output<string>;
    /**
     * Identifier of the WLAN template associated with this WLAN
     */
    readonly templateId: pulumi.Output<string>;
    /**
     * If `auth.type`==`eap` or `auth.type`==`psk`, should only be set for legacy client, such as pre-2004, 802.11b devices
     */
    readonly useEapolV1: pulumi.Output<boolean>;
    /**
     * If vlan tagging is enabled
     */
    readonly vlanEnabled: pulumi.Output<boolean>;
    /**
     * Default VLAN ID, range, or variable used when `vlanEnabled`==`true`
     */
    readonly vlanId: pulumi.Output<string | undefined>;
    /**
     * Pool of VLAN IDs used when `vlanEnabled`==`true` and `vlanPooling`==`true`
     */
    readonly vlanIds: pulumi.Output<string[]>;
    /**
     * Requires `vlanEnabled`==`true` to be set to `true`. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm
     */
    readonly vlanPooling: pulumi.Output<boolean>;
    /**
     * Downlink bandwidth limit applied to the whole WLAN
     */
    readonly wlanLimitDown: pulumi.Output<string>;
    /**
     * If downlink limiting for whole wlan is enabled
     */
    readonly wlanLimitDownEnabled: pulumi.Output<boolean | undefined>;
    /**
     * Uplink bandwidth limit applied to the whole WLAN
     */
    readonly wlanLimitUp: pulumi.Output<string>;
    /**
     * If uplink limiting for whole wlan is enabled
     */
    readonly wlanLimitUpEnabled: pulumi.Output<boolean | undefined>;
    /**
     * Identifiers of WxLAN tags used when `applyTo`==`wxtags`
     */
    readonly wxtagIds: pulumi.Output<string[]>;
    /**
     * When `interface`=`wxtunnel`, id of the WXLAN Tunnel
     */
    readonly wxtunnelId: pulumi.Output<string>;
    /**
     * When `interface`=`wxtunnel`, remote tunnel identifier
     */
    readonly wxtunnelRemoteId: pulumi.Output<string>;
    /**
     * Create a Wlan resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: WlanArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * Input properties used for looking up and filtering Wlan resources.
 */
export interface WlanState {
    /**
     * Enable coa-immediate-update and address-change-immediate-update on the access profile.
     */
    acctImmediateUpdate?: pulumi.Input<boolean | undefined>;
    /**
     * How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled
     */
    acctInterimInterval?: pulumi.Input<number | undefined>;
    /**
     * RADIUS accounting servers used by this WLAN
     */
    acctServers?: pulumi.Input<pulumi.Input<inputs.org.WlanAcctServer>[] | undefined>;
    /**
     * Integration settings for AirWatch device compliance on this WLAN
     */
    airwatch?: pulumi.Input<inputs.org.WlanAirwatch | undefined>;
    /**
     * Only applicable when `limitBcast`==`true`, which allows or disallows ipv6 Neighbor Discovery packets to go through
     */
    allowIpv6Ndp?: pulumi.Input<boolean | undefined>;
    /**
     * Only applicable when `limitBcast`==`true`, which allows mDNS / Bonjour packets to go through
     */
    allowMdns?: pulumi.Input<boolean | undefined>;
    /**
     * Only applicable when `limitBcast`==`true`, which allows SSDP
     */
    allowSsdp?: pulumi.Input<boolean | undefined>;
    /**
     * Access point identifiers used when `applyTo`==`aps`
     */
    apIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Bandwidth limits for applications on this WLAN
     */
    appLimit?: pulumi.Input<inputs.org.WlanAppLimit | undefined>;
    /**
     * QoS rules for application traffic on this WLAN
     */
    appQos?: pulumi.Input<inputs.org.WlanAppQos | undefined>;
    /**
     * Scope that determines where this WLAN is applied
     */
    applyTo?: pulumi.Input<string | undefined>;
    /**
     * Whether to enable smart arp filter
     */
    arpFilter?: pulumi.Input<boolean | undefined>;
    /**
     * Settings that control client authentication for this WLAN
     */
    auth?: pulumi.Input<inputs.org.WlanAuth | undefined>;
    /**
     * RADIUS authentication server selection behavior for this WLAN
     */
    authServerSelection?: pulumi.Input<string | undefined>;
    /**
     * RADIUS authentication servers used by this WLAN. Required when `auth.type`==`eap`
     */
    authServers?: pulumi.Input<pulumi.Input<inputs.org.WlanAuthServer>[] | undefined>;
    /**
     * Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers
     */
    authServersNasId?: pulumi.Input<string | undefined>;
    /**
     * Optional, NAS-IP-ADDRESS to use
     */
    authServersNasIp?: pulumi.Input<string | undefined>;
    /**
     * RADIUS auth session retries. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘retries’ are set to value of auth_servers_retries. ‘max-requests’ is also set when setting authServersRetries and is set to default value to 3.
     */
    authServersRetries?: pulumi.Input<number | undefined>;
    /**
     * RADIUS auth session timeout. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘quite-period’  and ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when setting authServersTimeout and is set to default value of 10.
     */
    authServersTimeout?: pulumi.Input<number | undefined>;
    /**
     * Whether to enable band_steering, this works only when band==both
     */
    bandSteer?: pulumi.Input<boolean | undefined>;
    /**
     * Force dualBand capable client to connect to 5G
     */
    bandSteerForceBand5?: pulumi.Input<boolean | undefined>;
    /**
     * list of radios that the wlan should apply to. enum: `24`, `5`, `6`
     */
    bands?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Whether to block the clients in the blacklist (up to first 256 macs)
     */
    blockBlacklistClients?: pulumi.Input<boolean | undefined>;
    /**
     * Service discovery gateway settings for Bonjour traffic on this WLAN
     */
    bonjour?: pulumi.Input<inputs.org.WlanBonjour | undefined>;
    /**
     * Central web authentication settings for Cisco CWA on this WLAN
     */
    ciscoCwa?: pulumi.Input<inputs.org.WlanCiscoCwa | undefined>;
    /**
     * Downlink bandwidth limit applied per client
     */
    clientLimitDown?: pulumi.Input<string | undefined>;
    /**
     * If downlink limiting per-client is enabled
     */
    clientLimitDownEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * Uplink bandwidth limit applied per client
     */
    clientLimitUp?: pulumi.Input<string | undefined>;
    /**
     * If uplink limiting per-client is enabled
     */
    clientLimitUpEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * RADIUS Change of Authorization servers available to this WLAN
     */
    coaServers?: pulumi.Input<pulumi.Input<inputs.org.WlanCoaServer>[] | undefined>;
    /**
     * Some old WLAN drivers may not be compatible
     */
    disable11ax?: pulumi.Input<boolean | undefined>;
    /**
     * To disable Wi-Fi 7 EHT IEs
     */
    disable11be?: pulumi.Input<boolean | undefined>;
    /**
     * To disable ht or vht rates
     */
    disableHtVhtRates?: pulumi.Input<boolean | undefined>;
    /**
     * whether to disable Message-Authenticator Check, which is used to verify the integrity of RADIUS messages, default is false (i.e. for better security)
     */
    disableMessageAuthenticatorCheck?: pulumi.Input<boolean | undefined>;
    /**
     * Whether to disable U-APSD
     */
    disableUapsd?: pulumi.Input<boolean | undefined>;
    /**
     * Disable sending v2 roam notification messages
     */
    disableV1RoamNotify?: pulumi.Input<boolean | undefined>;
    /**
     * Disable sending v2 roam notification messages
     */
    disableV2RoamNotify?: pulumi.Input<boolean | undefined>;
    /**
     * When any of the following is true, this WLAN will be disabled
     *    * cannot get IP
     *    * cannot obtain default gateway
     *    * cannot reach default gateway
     */
    disableWhenGatewayUnreachable?: pulumi.Input<boolean | undefined>;
    /**
     * Whether to disable this WLAN when the configured Mist tunnel is down
     */
    disableWhenMxtunnelDown?: pulumi.Input<boolean | undefined>;
    /**
     * Whether to disable WMM
     */
    disableWmm?: pulumi.Input<boolean | undefined>;
    /**
     * RADIUS group based DNS server rewrite settings for this WLAN
     */
    dnsServerRewrite?: pulumi.Input<inputs.org.WlanDnsServerRewrite | undefined>;
    /**
     * Delivery Traffic Indication Message interval for this WLAN
     */
    dtim?: pulumi.Input<number | undefined>;
    /**
     * Per-user PSK selection settings for this WLAN
     */
    dynamicPsk?: pulumi.Input<inputs.org.WlanDynamicPsk | undefined>;
    /**
     * VLAN assignment settings for 802.1X dynamic VLANs
     */
    dynamicVlan?: pulumi.Input<inputs.org.WlanDynamicVlan | undefined>;
    /**
     * Enable FTM (Fine-Time Measurement, 802.11mc); configures the AP as an FTM Responder (target), allowing clients to perform ranging requests against it
     */
    enableFtm?: pulumi.Input<boolean | undefined>;
    /**
     * Enable AP-AP keycaching via multicast
     */
    enableLocalKeycaching?: pulumi.Input<boolean | undefined>;
    /**
     * By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where client is a wireless bridge (DHCP packets for other MACs will need to be forwarded), wirelessBridging can be enabled
     */
    enableWirelessBridging?: pulumi.Input<boolean | undefined>;
    /**
     * If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcpTracking will cut down DHCP response packets to be forwarded to wireless
     */
    enableWirelessBridgingDhcpTracking?: pulumi.Input<boolean | undefined>;
    /**
     * If this wlan is enabled
     */
    enabled?: pulumi.Input<boolean | undefined>;
    /**
     * If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .
     */
    fastDot1xTimers?: pulumi.Input<boolean | undefined>;
    /**
     * Whether to hide SSID in beacon
     */
    hideSsid?: pulumi.Input<boolean | undefined>;
    /**
     * Include hostname inside IE in AP beacons / probe responses
     */
    hostnameIe?: pulumi.Input<boolean | undefined>;
    /**
     * Passpoint and Hotspot 2.0 settings for this WLAN
     */
    hotspot20?: pulumi.Input<inputs.org.WlanHotspot20 | undefined>;
    /**
     * DHCP Option 82 insertion settings for this WLAN
     */
    injectDhcpOption82?: pulumi.Input<inputs.org.WlanInjectDhcpOption82 | undefined>;
    /**
     * Network interface or tunnel where this WLAN bridges client traffic
     */
    interface?: pulumi.Input<string | undefined>;
    /**
     * Whether to stop clients to talk to each other
     */
    isolation?: pulumi.Input<boolean | undefined>;
    /**
     * If isolation is enabled, whether to deny clients to talk to L2 on the LAN
     */
    l2Isolation?: pulumi.Input<boolean | undefined>;
    /**
     * Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.
     */
    legacyOverds?: pulumi.Input<boolean | undefined>;
    /**
     * Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)
     */
    limitBcast?: pulumi.Input<boolean | undefined>;
    /**
     * Limit probe response base on some heuristic rules
     */
    limitProbeResponse?: pulumi.Input<boolean | undefined>;
    /**
     * Max idle time in seconds
     */
    maxIdletime?: pulumi.Input<number | undefined>;
    /**
     * Maximum number of client connected to the SSID. `0` means unlimited
     */
    maxNumClients?: pulumi.Input<number | undefined>;
    /**
     * Juniper Mist NAC settings used by this WLAN
     */
    mistNac?: pulumi.Input<inputs.org.WlanMistNac | undefined>;
    /**
     * Managed service provider identifier associated with this WLAN
     */
    mspId?: pulumi.Input<string | undefined>;
    /**
     * Mist Tunnel identifiers used when `interface`==`mxtunnel`
     */
    mxtunnelIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Mist Tunnel names used when `interface`==`siteMxedge`
     */
    mxtunnelNames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Whether to only allow client to use DNS that we’ve learned from DHCP response
     */
    noStaticDns?: pulumi.Input<boolean | undefined>;
    /**
     * Whether to only allow client that we’ve learned from DHCP exchange to talk
     */
    noStaticIp?: pulumi.Input<boolean | undefined>;
    /**
     * Owning organization associated with this WLAN
     */
    orgId?: pulumi.Input<string | undefined>;
    /**
     * Guest portal settings for this WLAN
     */
    portal?: pulumi.Input<inputs.org.WlanPortal | undefined>;
    /**
     * Guest portal hostnames that clients may reach before authorization
     */
    portalAllowedHostnames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Guest portal CIDR subnets that clients may reach before authorization
     */
    portalAllowedSubnets?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * API secret (auto-generated) that can be used to sign guest authorization requests, only generated when auth is set to `external`
     */
    portalApiSecret?: pulumi.Input<string | undefined>;
    /**
     * Guest portal hostnames denied before authorization, taking precedence over allowed hostnames
     */
    portalDeniedHostnames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Url of portal background image
     */
    portalImage?: pulumi.Input<string | undefined>;
    /**
     * URL used in the SSO process, auto-generated when auth is set to `sso`
     */
    portalSsoUrl?: pulumi.Input<string | undefined>;
    /**
     * Quality-of-service settings for WLAN client traffic
     */
    qos?: pulumi.Input<inputs.org.WlanQos | undefined>;
    /**
     * TLS-secured RADIUS transport settings for this WLAN
     */
    radsec?: pulumi.Input<inputs.org.WlanRadsec | undefined>;
    /**
     * Data rate settings by RF band for this WLAN
     */
    rateset?: pulumi.Input<{
        [key: string]: pulumi.Input<inputs.org.WlanRateset>;
    } | undefined>;
    /**
     * When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)
     */
    reconnectClientsWhenRoamingMxcluster?: pulumi.Input<boolean | undefined>;
    /**
     * Fast roaming mode configured for this WLAN
     */
    roamMode?: pulumi.Input<string | undefined>;
    /**
     * Operating schedule controlling when this WLAN is active
     */
    schedule?: pulumi.Input<inputs.org.WlanSchedule | undefined>;
    /**
     * Whether to exclude this WLAN from SLE metrics
     */
    sleExcluded?: pulumi.Input<boolean | undefined>;
    /**
     * Name of the SSID
     */
    ssid?: pulumi.Input<string | undefined>;
    /**
     * Identifier of the WLAN template associated with this WLAN
     */
    templateId?: pulumi.Input<string | undefined>;
    /**
     * If `auth.type`==`eap` or `auth.type`==`psk`, should only be set for legacy client, such as pre-2004, 802.11b devices
     */
    useEapolV1?: pulumi.Input<boolean | undefined>;
    /**
     * If vlan tagging is enabled
     */
    vlanEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * Default VLAN ID, range, or variable used when `vlanEnabled`==`true`
     */
    vlanId?: pulumi.Input<string | undefined>;
    /**
     * Pool of VLAN IDs used when `vlanEnabled`==`true` and `vlanPooling`==`true`
     */
    vlanIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Requires `vlanEnabled`==`true` to be set to `true`. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm
     */
    vlanPooling?: pulumi.Input<boolean | undefined>;
    /**
     * Downlink bandwidth limit applied to the whole WLAN
     */
    wlanLimitDown?: pulumi.Input<string | undefined>;
    /**
     * If downlink limiting for whole wlan is enabled
     */
    wlanLimitDownEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * Uplink bandwidth limit applied to the whole WLAN
     */
    wlanLimitUp?: pulumi.Input<string | undefined>;
    /**
     * If uplink limiting for whole wlan is enabled
     */
    wlanLimitUpEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * Identifiers of WxLAN tags used when `applyTo`==`wxtags`
     */
    wxtagIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * When `interface`=`wxtunnel`, id of the WXLAN Tunnel
     */
    wxtunnelId?: pulumi.Input<string | undefined>;
    /**
     * When `interface`=`wxtunnel`, remote tunnel identifier
     */
    wxtunnelRemoteId?: pulumi.Input<string | undefined>;
}
/**
 * The set of arguments for constructing a Wlan resource.
 */
export interface WlanArgs {
    /**
     * Enable coa-immediate-update and address-change-immediate-update on the access profile.
     */
    acctImmediateUpdate?: pulumi.Input<boolean | undefined>;
    /**
     * How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled
     */
    acctInterimInterval?: pulumi.Input<number | undefined>;
    /**
     * RADIUS accounting servers used by this WLAN
     */
    acctServers?: pulumi.Input<pulumi.Input<inputs.org.WlanAcctServer>[] | undefined>;
    /**
     * Integration settings for AirWatch device compliance on this WLAN
     */
    airwatch?: pulumi.Input<inputs.org.WlanAirwatch | undefined>;
    /**
     * Only applicable when `limitBcast`==`true`, which allows or disallows ipv6 Neighbor Discovery packets to go through
     */
    allowIpv6Ndp?: pulumi.Input<boolean | undefined>;
    /**
     * Only applicable when `limitBcast`==`true`, which allows mDNS / Bonjour packets to go through
     */
    allowMdns?: pulumi.Input<boolean | undefined>;
    /**
     * Only applicable when `limitBcast`==`true`, which allows SSDP
     */
    allowSsdp?: pulumi.Input<boolean | undefined>;
    /**
     * Access point identifiers used when `applyTo`==`aps`
     */
    apIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Bandwidth limits for applications on this WLAN
     */
    appLimit?: pulumi.Input<inputs.org.WlanAppLimit | undefined>;
    /**
     * QoS rules for application traffic on this WLAN
     */
    appQos?: pulumi.Input<inputs.org.WlanAppQos | undefined>;
    /**
     * Scope that determines where this WLAN is applied
     */
    applyTo?: pulumi.Input<string | undefined>;
    /**
     * Whether to enable smart arp filter
     */
    arpFilter?: pulumi.Input<boolean | undefined>;
    /**
     * Settings that control client authentication for this WLAN
     */
    auth?: pulumi.Input<inputs.org.WlanAuth | undefined>;
    /**
     * RADIUS authentication server selection behavior for this WLAN
     */
    authServerSelection?: pulumi.Input<string | undefined>;
    /**
     * RADIUS authentication servers used by this WLAN. Required when `auth.type`==`eap`
     */
    authServers?: pulumi.Input<pulumi.Input<inputs.org.WlanAuthServer>[] | undefined>;
    /**
     * Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers
     */
    authServersNasId?: pulumi.Input<string | undefined>;
    /**
     * Optional, NAS-IP-ADDRESS to use
     */
    authServersNasIp?: pulumi.Input<string | undefined>;
    /**
     * RADIUS auth session retries. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘retries’ are set to value of auth_servers_retries. ‘max-requests’ is also set when setting authServersRetries and is set to default value to 3.
     */
    authServersRetries?: pulumi.Input<number | undefined>;
    /**
     * RADIUS auth session timeout. Following fast timers are set if "fastDot1xTimers" knob is enabled. ‘quite-period’  and ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when setting authServersTimeout and is set to default value of 10.
     */
    authServersTimeout?: pulumi.Input<number | undefined>;
    /**
     * Whether to enable band_steering, this works only when band==both
     */
    bandSteer?: pulumi.Input<boolean | undefined>;
    /**
     * Force dualBand capable client to connect to 5G
     */
    bandSteerForceBand5?: pulumi.Input<boolean | undefined>;
    /**
     * list of radios that the wlan should apply to. enum: `24`, `5`, `6`
     */
    bands?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Whether to block the clients in the blacklist (up to first 256 macs)
     */
    blockBlacklistClients?: pulumi.Input<boolean | undefined>;
    /**
     * Service discovery gateway settings for Bonjour traffic on this WLAN
     */
    bonjour?: pulumi.Input<inputs.org.WlanBonjour | undefined>;
    /**
     * Central web authentication settings for Cisco CWA on this WLAN
     */
    ciscoCwa?: pulumi.Input<inputs.org.WlanCiscoCwa | undefined>;
    /**
     * Downlink bandwidth limit applied per client
     */
    clientLimitDown?: pulumi.Input<string | undefined>;
    /**
     * If downlink limiting per-client is enabled
     */
    clientLimitDownEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * Uplink bandwidth limit applied per client
     */
    clientLimitUp?: pulumi.Input<string | undefined>;
    /**
     * If uplink limiting per-client is enabled
     */
    clientLimitUpEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * RADIUS Change of Authorization servers available to this WLAN
     */
    coaServers?: pulumi.Input<pulumi.Input<inputs.org.WlanCoaServer>[] | undefined>;
    /**
     * Some old WLAN drivers may not be compatible
     */
    disable11ax?: pulumi.Input<boolean | undefined>;
    /**
     * To disable Wi-Fi 7 EHT IEs
     */
    disable11be?: pulumi.Input<boolean | undefined>;
    /**
     * To disable ht or vht rates
     */
    disableHtVhtRates?: pulumi.Input<boolean | undefined>;
    /**
     * whether to disable Message-Authenticator Check, which is used to verify the integrity of RADIUS messages, default is false (i.e. for better security)
     */
    disableMessageAuthenticatorCheck?: pulumi.Input<boolean | undefined>;
    /**
     * Whether to disable U-APSD
     */
    disableUapsd?: pulumi.Input<boolean | undefined>;
    /**
     * Disable sending v2 roam notification messages
     */
    disableV1RoamNotify?: pulumi.Input<boolean | undefined>;
    /**
     * Disable sending v2 roam notification messages
     */
    disableV2RoamNotify?: pulumi.Input<boolean | undefined>;
    /**
     * When any of the following is true, this WLAN will be disabled
     *    * cannot get IP
     *    * cannot obtain default gateway
     *    * cannot reach default gateway
     */
    disableWhenGatewayUnreachable?: pulumi.Input<boolean | undefined>;
    /**
     * Whether to disable this WLAN when the configured Mist tunnel is down
     */
    disableWhenMxtunnelDown?: pulumi.Input<boolean | undefined>;
    /**
     * Whether to disable WMM
     */
    disableWmm?: pulumi.Input<boolean | undefined>;
    /**
     * RADIUS group based DNS server rewrite settings for this WLAN
     */
    dnsServerRewrite?: pulumi.Input<inputs.org.WlanDnsServerRewrite | undefined>;
    /**
     * Delivery Traffic Indication Message interval for this WLAN
     */
    dtim?: pulumi.Input<number | undefined>;
    /**
     * Per-user PSK selection settings for this WLAN
     */
    dynamicPsk?: pulumi.Input<inputs.org.WlanDynamicPsk | undefined>;
    /**
     * VLAN assignment settings for 802.1X dynamic VLANs
     */
    dynamicVlan?: pulumi.Input<inputs.org.WlanDynamicVlan | undefined>;
    /**
     * Enable FTM (Fine-Time Measurement, 802.11mc); configures the AP as an FTM Responder (target), allowing clients to perform ranging requests against it
     */
    enableFtm?: pulumi.Input<boolean | undefined>;
    /**
     * Enable AP-AP keycaching via multicast
     */
    enableLocalKeycaching?: pulumi.Input<boolean | undefined>;
    /**
     * By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where client is a wireless bridge (DHCP packets for other MACs will need to be forwarded), wirelessBridging can be enabled
     */
    enableWirelessBridging?: pulumi.Input<boolean | undefined>;
    /**
     * If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcpTracking will cut down DHCP response packets to be forwarded to wireless
     */
    enableWirelessBridgingDhcpTracking?: pulumi.Input<boolean | undefined>;
    /**
     * If this wlan is enabled
     */
    enabled?: pulumi.Input<boolean | undefined>;
    /**
     * If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .
     */
    fastDot1xTimers?: pulumi.Input<boolean | undefined>;
    /**
     * Whether to hide SSID in beacon
     */
    hideSsid?: pulumi.Input<boolean | undefined>;
    /**
     * Include hostname inside IE in AP beacons / probe responses
     */
    hostnameIe?: pulumi.Input<boolean | undefined>;
    /**
     * Passpoint and Hotspot 2.0 settings for this WLAN
     */
    hotspot20?: pulumi.Input<inputs.org.WlanHotspot20 | undefined>;
    /**
     * DHCP Option 82 insertion settings for this WLAN
     */
    injectDhcpOption82?: pulumi.Input<inputs.org.WlanInjectDhcpOption82 | undefined>;
    /**
     * Network interface or tunnel where this WLAN bridges client traffic
     */
    interface?: pulumi.Input<string | undefined>;
    /**
     * Whether to stop clients to talk to each other
     */
    isolation?: pulumi.Input<boolean | undefined>;
    /**
     * If isolation is enabled, whether to deny clients to talk to L2 on the LAN
     */
    l2Isolation?: pulumi.Input<boolean | undefined>;
    /**
     * Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.
     */
    legacyOverds?: pulumi.Input<boolean | undefined>;
    /**
     * Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)
     */
    limitBcast?: pulumi.Input<boolean | undefined>;
    /**
     * Limit probe response base on some heuristic rules
     */
    limitProbeResponse?: pulumi.Input<boolean | undefined>;
    /**
     * Max idle time in seconds
     */
    maxIdletime?: pulumi.Input<number | undefined>;
    /**
     * Maximum number of client connected to the SSID. `0` means unlimited
     */
    maxNumClients?: pulumi.Input<number | undefined>;
    /**
     * Juniper Mist NAC settings used by this WLAN
     */
    mistNac?: pulumi.Input<inputs.org.WlanMistNac | undefined>;
    /**
     * Mist Tunnel identifiers used when `interface`==`mxtunnel`
     */
    mxtunnelIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Mist Tunnel names used when `interface`==`siteMxedge`
     */
    mxtunnelNames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Whether to only allow client to use DNS that we’ve learned from DHCP response
     */
    noStaticDns?: pulumi.Input<boolean | undefined>;
    /**
     * Whether to only allow client that we’ve learned from DHCP exchange to talk
     */
    noStaticIp?: pulumi.Input<boolean | undefined>;
    /**
     * Owning organization associated with this WLAN
     */
    orgId: pulumi.Input<string>;
    /**
     * Guest portal settings for this WLAN
     */
    portal?: pulumi.Input<inputs.org.WlanPortal | undefined>;
    /**
     * Guest portal hostnames that clients may reach before authorization
     */
    portalAllowedHostnames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Guest portal CIDR subnets that clients may reach before authorization
     */
    portalAllowedSubnets?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Guest portal hostnames denied before authorization, taking precedence over allowed hostnames
     */
    portalDeniedHostnames?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Quality-of-service settings for WLAN client traffic
     */
    qos?: pulumi.Input<inputs.org.WlanQos | undefined>;
    /**
     * TLS-secured RADIUS transport settings for this WLAN
     */
    radsec?: pulumi.Input<inputs.org.WlanRadsec | undefined>;
    /**
     * Data rate settings by RF band for this WLAN
     */
    rateset?: pulumi.Input<{
        [key: string]: pulumi.Input<inputs.org.WlanRateset>;
    } | undefined>;
    /**
     * When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)
     */
    reconnectClientsWhenRoamingMxcluster?: pulumi.Input<boolean | undefined>;
    /**
     * Fast roaming mode configured for this WLAN
     */
    roamMode?: pulumi.Input<string | undefined>;
    /**
     * Operating schedule controlling when this WLAN is active
     */
    schedule?: pulumi.Input<inputs.org.WlanSchedule | undefined>;
    /**
     * Whether to exclude this WLAN from SLE metrics
     */
    sleExcluded?: pulumi.Input<boolean | undefined>;
    /**
     * Name of the SSID
     */
    ssid: pulumi.Input<string>;
    /**
     * Identifier of the WLAN template associated with this WLAN
     */
    templateId: pulumi.Input<string>;
    /**
     * If `auth.type`==`eap` or `auth.type`==`psk`, should only be set for legacy client, such as pre-2004, 802.11b devices
     */
    useEapolV1?: pulumi.Input<boolean | undefined>;
    /**
     * If vlan tagging is enabled
     */
    vlanEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * Default VLAN ID, range, or variable used when `vlanEnabled`==`true`
     */
    vlanId?: pulumi.Input<string | undefined>;
    /**
     * Pool of VLAN IDs used when `vlanEnabled`==`true` and `vlanPooling`==`true`
     */
    vlanIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Requires `vlanEnabled`==`true` to be set to `true`. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm
     */
    vlanPooling?: pulumi.Input<boolean | undefined>;
    /**
     * Downlink bandwidth limit applied to the whole WLAN
     */
    wlanLimitDown?: pulumi.Input<string | undefined>;
    /**
     * If downlink limiting for whole wlan is enabled
     */
    wlanLimitDownEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * Uplink bandwidth limit applied to the whole WLAN
     */
    wlanLimitUp?: pulumi.Input<string | undefined>;
    /**
     * If uplink limiting for whole wlan is enabled
     */
    wlanLimitUpEnabled?: pulumi.Input<boolean | undefined>;
    /**
     * Identifiers of WxLAN tags used when `applyTo`==`wxtags`
     */
    wxtagIds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * When `interface`=`wxtunnel`, id of the WXLAN Tunnel
     */
    wxtunnelId?: pulumi.Input<string | undefined>;
    /**
     * When `interface`=`wxtunnel`, remote tunnel identifier
     */
    wxtunnelRemoteId?: pulumi.Input<string | undefined>;
}
//# sourceMappingURL=wlan.d.ts.map