Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. ObjectWirelesscontrollerVapDynamicMapping
fortimanager 1.14.0 published on Tuesday, Apr 15, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

fortimanager.ObjectWirelesscontrollerVapDynamicMapping

Explore with Pulumi AI

fortimanager 1.14.0 published on Tuesday, Apr 15, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

Configure Virtual Access Points (VAPs).

This resource is a sub resource for variable dynamic_mapping of resource fortimanager.ObjectWirelesscontrollerVap. Conflict and overwrite may occur if use both of them.

Create ObjectWirelesscontrollerVapDynamicMapping Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new ObjectWirelesscontrollerVapDynamicMapping(name: string, args: ObjectWirelesscontrollerVapDynamicMappingArgs, opts?: CustomResourceOptions);
@overload
def ObjectWirelesscontrollerVapDynamicMapping(resource_name: str,
                                              args: ObjectWirelesscontrollerVapDynamicMappingInitArgs,
                                              opts: Optional[ResourceOptions] = None)

@overload
def ObjectWirelesscontrollerVapDynamicMapping(resource_name: str,
                                              opts: Optional[ResourceOptions] = None,
                                              vap: Optional[str] = None,
                                              _centmgmt: Optional[str] = None,
                                              _dhcp_svr_id: Optional[str] = None,
                                              _intf_allowaccesses: Optional[Sequence[str]] = None,
                                              _intf_device_access_list: Optional[str] = None,
                                              _intf_device_identification: Optional[str] = None,
                                              _intf_device_netscan: Optional[str] = None,
                                              _intf_dhcp6_relay_ip: Optional[str] = None,
                                              _intf_dhcp6_relay_service: Optional[str] = None,
                                              _intf_dhcp6_relay_type: Optional[str] = None,
                                              _intf_dhcp_relay_ips: Optional[Sequence[str]] = None,
                                              _intf_dhcp_relay_service: Optional[str] = None,
                                              _intf_dhcp_relay_type: Optional[str] = None,
                                              _intf_ip: Optional[str] = None,
                                              _intf_ip6_address: Optional[str] = None,
                                              _intf_ip6_allowaccesses: Optional[Sequence[str]] = None,
                                              _intf_listen_forticlient_connection: Optional[str] = None,
                                              _is_factory_setting: Optional[str] = None,
                                              _scopes: Optional[Sequence[ObjectWirelesscontrollerVapDynamicMapping_ScopeArgs]] = None,
                                              access_control_list: Optional[str] = None,
                                              acct_interim_interval: Optional[float] = None,
                                              additional_akms: Optional[Sequence[str]] = None,
                                              address_group: Optional[str] = None,
                                              address_group_policy: Optional[str] = None,
                                              adom: Optional[str] = None,
                                              alias: Optional[str] = None,
                                              antivirus_profile: Optional[str] = None,
                                              application_detection_engine: Optional[str] = None,
                                              application_dscp_marking: Optional[str] = None,
                                              application_list: Optional[str] = None,
                                              application_report_intv: Optional[float] = None,
                                              atf_weight: Optional[float] = None,
                                              auth: Optional[str] = None,
                                              auth_cert: Optional[str] = None,
                                              auth_portal_addr: Optional[str] = None,
                                              beacon_advertisings: Optional[Sequence[str]] = None,
                                              broadcast_ssid: Optional[str] = None,
                                              broadcast_suppressions: Optional[Sequence[str]] = None,
                                              bss_color_partial: Optional[str] = None,
                                              bstm_disassociation_imminent: Optional[str] = None,
                                              bstm_load_balancing_disassoc_timer: Optional[float] = None,
                                              bstm_rssi_disassoc_timer: Optional[float] = None,
                                              captive_portal_ac_name: Optional[str] = None,
                                              captive_portal_auth_timeout: Optional[float] = None,
                                              captive_portal_fw_accounting: Optional[str] = None,
                                              captive_portal_macauth_radius_secrets: Optional[Sequence[str]] = None,
                                              captive_portal_macauth_radius_server: Optional[str] = None,
                                              captive_portal_radius_secrets: Optional[Sequence[str]] = None,
                                              captive_portal_radius_server: Optional[str] = None,
                                              captive_portal_session_timeout_interval: Optional[float] = None,
                                              client_count: Optional[float] = None,
                                              dhcp_address_enforcement: Optional[str] = None,
                                              dhcp_lease_time: Optional[float] = None,
                                              dhcp_option43_insertion: Optional[str] = None,
                                              dhcp_option82_circuit_id_insertion: Optional[str] = None,
                                              dhcp_option82_insertion: Optional[str] = None,
                                              dhcp_option82_remote_id_insertion: Optional[str] = None,
                                              dynamic_sort_subtable: Optional[str] = None,
                                              dynamic_vlan: Optional[str] = None,
                                              eap_reauth: Optional[str] = None,
                                              eap_reauth_intv: Optional[float] = None,
                                              eapol_key_retries: Optional[str] = None,
                                              encrypt: Optional[str] = None,
                                              external_fast_roaming: Optional[str] = None,
                                              external_logout: Optional[str] = None,
                                              external_web: Optional[str] = None,
                                              external_web_format: Optional[str] = None,
                                              fast_bss_transition: Optional[str] = None,
                                              fast_roaming: Optional[str] = None,
                                              ft_mobility_domain: Optional[float] = None,
                                              ft_over_ds: Optional[str] = None,
                                              ft_r0_key_lifetime: Optional[float] = None,
                                              gas_comeback_delay: Optional[float] = None,
                                              gas_fragmentation_limit: Optional[float] = None,
                                              gtk_rekey: Optional[str] = None,
                                              gtk_rekey_intv: Optional[float] = None,
                                              high_efficiency: Optional[str] = None,
                                              hotspot20_profile: Optional[str] = None,
                                              igmp_snooping: Optional[str] = None,
                                              intra_vap_privacy: Optional[str] = None,
                                              ip: Optional[str] = None,
                                              ips_sensor: Optional[str] = None,
                                              ipv6_rules: Optional[Sequence[str]] = None,
                                              keyindex: Optional[float] = None,
                                              keys: Optional[Sequence[str]] = None,
                                              l3_roaming: Optional[str] = None,
                                              l3_roaming_mode: Optional[str] = None,
                                              ldpc: Optional[str] = None,
                                              local_authentication: Optional[str] = None,
                                              local_bridging: Optional[str] = None,
                                              local_lan: Optional[str] = None,
                                              local_standalone: Optional[str] = None,
                                              local_standalone_dns: Optional[str] = None,
                                              local_standalone_dns_ips: Optional[Sequence[str]] = None,
                                              local_standalone_nat: Optional[str] = None,
                                              local_switching: Optional[str] = None,
                                              mac_auth_bypass: Optional[str] = None,
                                              mac_called_station_delimiter: Optional[str] = None,
                                              mac_calling_station_delimiter: Optional[str] = None,
                                              mac_case: Optional[str] = None,
                                              mac_filter: Optional[str] = None,
                                              mac_filter_policy_other: Optional[str] = None,
                                              mac_password_delimiter: Optional[str] = None,
                                              mac_username_delimiter: Optional[str] = None,
                                              max_clients: Optional[float] = None,
                                              max_clients_ap: Optional[float] = None,
                                              mbo: Optional[str] = None,
                                              mbo_cell_data_conn_pref: Optional[str] = None,
                                              me_disable_thresh: Optional[float] = None,
                                              mesh_backhaul: Optional[str] = None,
                                              mpsk: Optional[str] = None,
                                              mpsk_concurrent_clients: Optional[float] = None,
                                              mpsk_profile: Optional[str] = None,
                                              mu_mimo: Optional[str] = None,
                                              multicast_enhance: Optional[str] = None,
                                              multicast_rate: Optional[str] = None,
                                              n80211k: Optional[str] = None,
                                              n80211v: Optional[str] = None,
                                              nac: Optional[str] = None,
                                              nac_profile: Optional[str] = None,
                                              neighbor_report_dual_band: Optional[str] = None,
                                              object_wirelesscontroller_vap_dynamic_mapping_id: Optional[str] = None,
                                              okc: Optional[str] = None,
                                              osen: Optional[str] = None,
                                              owe_groups: Optional[Sequence[str]] = None,
                                              owe_transition: Optional[str] = None,
                                              owe_transition_ssid: Optional[str] = None,
                                              passphrases: Optional[Sequence[str]] = None,
                                              pmf: Optional[str] = None,
                                              pmf_assoc_comeback_timeout: Optional[float] = None,
                                              pmf_sa_query_retry_timeout: Optional[float] = None,
                                              port_macauth: Optional[str] = None,
                                              port_macauth_reauth_timeout: Optional[float] = None,
                                              port_macauth_timeout: Optional[float] = None,
                                              portal_message_override_group: Optional[str] = None,
                                              portal_type: Optional[str] = None,
                                              primary_wag_profile: Optional[str] = None,
                                              probe_resp_suppression: Optional[str] = None,
                                              probe_resp_threshold: Optional[str] = None,
                                              ptk_rekey: Optional[str] = None,
                                              ptk_rekey_intv: Optional[float] = None,
                                              qos_profile: Optional[str] = None,
                                              quarantine: Optional[str] = None,
                                              radio2g_threshold: Optional[str] = None,
                                              radio5g_threshold: Optional[str] = None,
                                              radio_sensitivity: Optional[str] = None,
                                              radius_mac_auth: Optional[str] = None,
                                              radius_mac_auth_block_interval: Optional[float] = None,
                                              radius_mac_auth_server: Optional[str] = None,
                                              radius_mac_auth_usergroups: Optional[Sequence[str]] = None,
                                              radius_mac_mpsk_auth: Optional[str] = None,
                                              radius_mac_mpsk_timeout: Optional[float] = None,
                                              radius_server: Optional[str] = None,
                                              rates11ac_mcs_map: Optional[str] = None,
                                              rates11ac_ss12s: Optional[Sequence[str]] = None,
                                              rates11ac_ss34s: Optional[Sequence[str]] = None,
                                              rates11as: Optional[Sequence[str]] = None,
                                              rates11ax_mcs_map: Optional[str] = None,
                                              rates11ax_ss12s: Optional[Sequence[str]] = None,
                                              rates11ax_ss34s: Optional[Sequence[str]] = None,
                                              rates11bgs: Optional[Sequence[str]] = None,
                                              rates11n_ss12s: Optional[Sequence[str]] = None,
                                              rates11n_ss34s: Optional[Sequence[str]] = None,
                                              roaming_acct_interim_update: Optional[str] = None,
                                              sae_groups: Optional[Sequence[str]] = None,
                                              sae_h2e_only: Optional[str] = None,
                                              sae_hnp_only: Optional[str] = None,
                                              sae_passwords: Optional[Sequence[str]] = None,
                                              sae_pk: Optional[str] = None,
                                              sae_private_key: Optional[str] = None,
                                              scan_botnet_connections: Optional[str] = None,
                                              schedule: Optional[str] = None,
                                              scopetype: Optional[str] = None,
                                              secondary_wag_profile: Optional[str] = None,
                                              security: Optional[str] = None,
                                              security_exempt_list: Optional[str] = None,
                                              security_obsolete_option: Optional[str] = None,
                                              security_redirect_url: Optional[str] = None,
                                              selected_usergroups: Optional[str] = None,
                                              split_tunneling: Optional[str] = None,
                                              ssid: Optional[str] = None,
                                              sticky_client_remove: Optional[str] = None,
                                              sticky_client_threshold2g: Optional[str] = None,
                                              sticky_client_threshold5g: Optional[str] = None,
                                              sticky_client_threshold6g: Optional[str] = None,
                                              target_wake_time: Optional[str] = None,
                                              tkip_counter_measure: Optional[str] = None,
                                              tunnel_echo_interval: Optional[float] = None,
                                              tunnel_fallback_interval: Optional[float] = None,
                                              usergroup: Optional[str] = None,
                                              utm_log: Optional[str] = None,
                                              utm_profile: Optional[str] = None,
                                              utm_status: Optional[str] = None,
                                              vdom: Optional[str] = None,
                                              vlan_auto: Optional[str] = None,
                                              vlan_pooling: Optional[str] = None,
                                              vlanid: Optional[float] = None,
                                              voice_enterprise: Optional[str] = None,
                                              webfilter_profile: Optional[str] = None)
func NewObjectWirelesscontrollerVapDynamicMapping(ctx *Context, name string, args ObjectWirelesscontrollerVapDynamicMappingArgs, opts ...ResourceOption) (*ObjectWirelesscontrollerVapDynamicMapping, error)
public ObjectWirelesscontrollerVapDynamicMapping(string name, ObjectWirelesscontrollerVapDynamicMappingArgs args, CustomResourceOptions? opts = null)
public ObjectWirelesscontrollerVapDynamicMapping(String name, ObjectWirelesscontrollerVapDynamicMappingArgs args)
public ObjectWirelesscontrollerVapDynamicMapping(String name, ObjectWirelesscontrollerVapDynamicMappingArgs args, CustomResourceOptions options)

type: fortimanager:ObjectWirelesscontrollerVapDynamicMapping
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. ObjectWirelesscontrollerVapDynamicMappingArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. ObjectWirelesscontrollerVapDynamicMappingInitArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. ObjectWirelesscontrollerVapDynamicMappingArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. ObjectWirelesscontrollerVapDynamicMappingArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. ObjectWirelesscontrollerVapDynamicMappingArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var objectWirelesscontrollerVapDynamicMappingResource = new Fortimanager.ObjectWirelesscontrollerVapDynamicMapping("objectWirelesscontrollerVapDynamicMappingResource", new()
{
    Vap = "string",
    _centmgmt = "string",
    _dhcpSvrId = "string",
    _intfAllowaccesses = new[]
    {
        "string",
    },
    _intfDeviceAccessList = "string",
    _intfDeviceIdentification = "string",
    _intfDeviceNetscan = "string",
    _intfDhcp6RelayIp = "string",
    _intfDhcp6RelayService = "string",
    _intfDhcp6RelayType = "string",
    _intfDhcpRelayIps = new[]
    {
        "string",
    },
    _intfDhcpRelayService = "string",
    _intfDhcpRelayType = "string",
    _intfIp = "string",
    _intfIp6Address = "string",
    _intfIp6Allowaccesses = new[]
    {
        "string",
    },
    _intfListenForticlientConnection = "string",
    _isFactorySetting = "string",
    _scopes = new[]
    {
        new Fortimanager.Inputs.ObjectWirelesscontrollerVapDynamicMapping_ScopeArgs
        {
            Name = "string",
            Vdom = "string",
        },
    },
    AccessControlList = "string",
    AcctInterimInterval = 0,
    AdditionalAkms = new[]
    {
        "string",
    },
    AddressGroup = "string",
    AddressGroupPolicy = "string",
    Adom = "string",
    Alias = "string",
    AntivirusProfile = "string",
    ApplicationDetectionEngine = "string",
    ApplicationDscpMarking = "string",
    ApplicationList = "string",
    ApplicationReportIntv = 0,
    AtfWeight = 0,
    Auth = "string",
    AuthCert = "string",
    AuthPortalAddr = "string",
    BeaconAdvertisings = new[]
    {
        "string",
    },
    BroadcastSsid = "string",
    BroadcastSuppressions = new[]
    {
        "string",
    },
    BssColorPartial = "string",
    BstmDisassociationImminent = "string",
    BstmLoadBalancingDisassocTimer = 0,
    BstmRssiDisassocTimer = 0,
    CaptivePortalAcName = "string",
    CaptivePortalAuthTimeout = 0,
    CaptivePortalFwAccounting = "string",
    CaptivePortalMacauthRadiusSecrets = new[]
    {
        "string",
    },
    CaptivePortalMacauthRadiusServer = "string",
    CaptivePortalRadiusSecrets = new[]
    {
        "string",
    },
    CaptivePortalRadiusServer = "string",
    CaptivePortalSessionTimeoutInterval = 0,
    ClientCount = 0,
    DhcpAddressEnforcement = "string",
    DhcpLeaseTime = 0,
    DhcpOption43Insertion = "string",
    DhcpOption82CircuitIdInsertion = "string",
    DhcpOption82Insertion = "string",
    DhcpOption82RemoteIdInsertion = "string",
    DynamicSortSubtable = "string",
    DynamicVlan = "string",
    EapReauth = "string",
    EapReauthIntv = 0,
    EapolKeyRetries = "string",
    Encrypt = "string",
    ExternalFastRoaming = "string",
    ExternalLogout = "string",
    ExternalWeb = "string",
    ExternalWebFormat = "string",
    FastBssTransition = "string",
    FastRoaming = "string",
    FtMobilityDomain = 0,
    FtOverDs = "string",
    FtR0KeyLifetime = 0,
    GasComebackDelay = 0,
    GasFragmentationLimit = 0,
    GtkRekey = "string",
    GtkRekeyIntv = 0,
    HighEfficiency = "string",
    Hotspot20Profile = "string",
    IgmpSnooping = "string",
    IntraVapPrivacy = "string",
    Ip = "string",
    IpsSensor = "string",
    Ipv6Rules = new[]
    {
        "string",
    },
    Keyindex = 0,
    Keys = new[]
    {
        "string",
    },
    L3Roaming = "string",
    L3RoamingMode = "string",
    Ldpc = "string",
    LocalAuthentication = "string",
    LocalBridging = "string",
    LocalLan = "string",
    LocalStandalone = "string",
    LocalStandaloneDns = "string",
    LocalStandaloneDnsIps = new[]
    {
        "string",
    },
    LocalStandaloneNat = "string",
    LocalSwitching = "string",
    MacAuthBypass = "string",
    MacCalledStationDelimiter = "string",
    MacCallingStationDelimiter = "string",
    MacCase = "string",
    MacFilter = "string",
    MacFilterPolicyOther = "string",
    MacPasswordDelimiter = "string",
    MacUsernameDelimiter = "string",
    MaxClients = 0,
    MaxClientsAp = 0,
    Mbo = "string",
    MboCellDataConnPref = "string",
    MeDisableThresh = 0,
    MeshBackhaul = "string",
    Mpsk = "string",
    MpskConcurrentClients = 0,
    MpskProfile = "string",
    MuMimo = "string",
    MulticastEnhance = "string",
    MulticastRate = "string",
    N80211k = "string",
    N80211v = "string",
    Nac = "string",
    NacProfile = "string",
    NeighborReportDualBand = "string",
    ObjectWirelesscontrollerVapDynamicMappingId = "string",
    Okc = "string",
    Osen = "string",
    OweGroups = new[]
    {
        "string",
    },
    OweTransition = "string",
    OweTransitionSsid = "string",
    Passphrases = new[]
    {
        "string",
    },
    Pmf = "string",
    PmfAssocComebackTimeout = 0,
    PmfSaQueryRetryTimeout = 0,
    PortMacauth = "string",
    PortMacauthReauthTimeout = 0,
    PortMacauthTimeout = 0,
    PortalMessageOverrideGroup = "string",
    PortalType = "string",
    PrimaryWagProfile = "string",
    ProbeRespSuppression = "string",
    ProbeRespThreshold = "string",
    PtkRekey = "string",
    PtkRekeyIntv = 0,
    QosProfile = "string",
    Quarantine = "string",
    Radio2gThreshold = "string",
    Radio5gThreshold = "string",
    RadioSensitivity = "string",
    RadiusMacAuth = "string",
    RadiusMacAuthBlockInterval = 0,
    RadiusMacAuthServer = "string",
    RadiusMacAuthUsergroups = new[]
    {
        "string",
    },
    RadiusMacMpskAuth = "string",
    RadiusMacMpskTimeout = 0,
    RadiusServer = "string",
    Rates11acMcsMap = "string",
    Rates11acSs12s = new[]
    {
        "string",
    },
    Rates11acSs34s = new[]
    {
        "string",
    },
    Rates11as = new[]
    {
        "string",
    },
    Rates11axMcsMap = "string",
    Rates11axSs12s = new[]
    {
        "string",
    },
    Rates11axSs34s = new[]
    {
        "string",
    },
    Rates11bgs = new[]
    {
        "string",
    },
    Rates11nSs12s = new[]
    {
        "string",
    },
    Rates11nSs34s = new[]
    {
        "string",
    },
    RoamingAcctInterimUpdate = "string",
    SaeGroups = new[]
    {
        "string",
    },
    SaeH2eOnly = "string",
    SaeHnpOnly = "string",
    SaePasswords = new[]
    {
        "string",
    },
    SaePk = "string",
    SaePrivateKey = "string",
    ScanBotnetConnections = "string",
    Schedule = "string",
    Scopetype = "string",
    SecondaryWagProfile = "string",
    Security = "string",
    SecurityExemptList = "string",
    SecurityObsoleteOption = "string",
    SecurityRedirectUrl = "string",
    SelectedUsergroups = "string",
    SplitTunneling = "string",
    Ssid = "string",
    StickyClientRemove = "string",
    StickyClientThreshold2g = "string",
    StickyClientThreshold5g = "string",
    StickyClientThreshold6g = "string",
    TargetWakeTime = "string",
    TkipCounterMeasure = "string",
    TunnelEchoInterval = 0,
    TunnelFallbackInterval = 0,
    Usergroup = "string",
    UtmLog = "string",
    UtmProfile = "string",
    UtmStatus = "string",
    Vdom = "string",
    VlanAuto = "string",
    VlanPooling = "string",
    Vlanid = 0,
    VoiceEnterprise = "string",
    WebfilterProfile = "string",
});
Copy
example, err := fortimanager.NewObjectWirelesscontrollerVapDynamicMapping(ctx, "objectWirelesscontrollerVapDynamicMappingResource", &fortimanager.ObjectWirelesscontrollerVapDynamicMappingArgs{
Vap: pulumi.String("string"),
_centmgmt: pulumi.String("string"),
_dhcpSvrId: pulumi.String("string"),
_intfAllowaccesses: pulumi.StringArray{
pulumi.String("string"),
},
_intfDeviceAccessList: pulumi.String("string"),
_intfDeviceIdentification: pulumi.String("string"),
_intfDeviceNetscan: pulumi.String("string"),
_intfDhcp6RelayIp: pulumi.String("string"),
_intfDhcp6RelayService: pulumi.String("string"),
_intfDhcp6RelayType: pulumi.String("string"),
_intfDhcpRelayIps: pulumi.StringArray{
pulumi.String("string"),
},
_intfDhcpRelayService: pulumi.String("string"),
_intfDhcpRelayType: pulumi.String("string"),
_intfIp: pulumi.String("string"),
_intfIp6Address: pulumi.String("string"),
_intfIp6Allowaccesses: pulumi.StringArray{
pulumi.String("string"),
},
_intfListenForticlientConnection: pulumi.String("string"),
_isFactorySetting: pulumi.String("string"),
_scopes: .ObjectWirelesscontrollerVapDynamicMapping_ScopeArray{
&.ObjectWirelesscontrollerVapDynamicMapping_ScopeArgs{
Name: pulumi.String("string"),
Vdom: pulumi.String("string"),
},
},
AccessControlList: pulumi.String("string"),
AcctInterimInterval: pulumi.Float64(0),
AdditionalAkms: pulumi.StringArray{
pulumi.String("string"),
},
AddressGroup: pulumi.String("string"),
AddressGroupPolicy: pulumi.String("string"),
Adom: pulumi.String("string"),
Alias: pulumi.String("string"),
AntivirusProfile: pulumi.String("string"),
ApplicationDetectionEngine: pulumi.String("string"),
ApplicationDscpMarking: pulumi.String("string"),
ApplicationList: pulumi.String("string"),
ApplicationReportIntv: pulumi.Float64(0),
AtfWeight: pulumi.Float64(0),
Auth: pulumi.String("string"),
AuthCert: pulumi.String("string"),
AuthPortalAddr: pulumi.String("string"),
BeaconAdvertisings: pulumi.StringArray{
pulumi.String("string"),
},
BroadcastSsid: pulumi.String("string"),
BroadcastSuppressions: pulumi.StringArray{
pulumi.String("string"),
},
BssColorPartial: pulumi.String("string"),
BstmDisassociationImminent: pulumi.String("string"),
BstmLoadBalancingDisassocTimer: pulumi.Float64(0),
BstmRssiDisassocTimer: pulumi.Float64(0),
CaptivePortalAcName: pulumi.String("string"),
CaptivePortalAuthTimeout: pulumi.Float64(0),
CaptivePortalFwAccounting: pulumi.String("string"),
CaptivePortalMacauthRadiusSecrets: pulumi.StringArray{
pulumi.String("string"),
},
CaptivePortalMacauthRadiusServer: pulumi.String("string"),
CaptivePortalRadiusSecrets: pulumi.StringArray{
pulumi.String("string"),
},
CaptivePortalRadiusServer: pulumi.String("string"),
CaptivePortalSessionTimeoutInterval: pulumi.Float64(0),
ClientCount: pulumi.Float64(0),
DhcpAddressEnforcement: pulumi.String("string"),
DhcpLeaseTime: pulumi.Float64(0),
DhcpOption43Insertion: pulumi.String("string"),
DhcpOption82CircuitIdInsertion: pulumi.String("string"),
DhcpOption82Insertion: pulumi.String("string"),
DhcpOption82RemoteIdInsertion: pulumi.String("string"),
DynamicSortSubtable: pulumi.String("string"),
DynamicVlan: pulumi.String("string"),
EapReauth: pulumi.String("string"),
EapReauthIntv: pulumi.Float64(0),
EapolKeyRetries: pulumi.String("string"),
Encrypt: pulumi.String("string"),
ExternalFastRoaming: pulumi.String("string"),
ExternalLogout: pulumi.String("string"),
ExternalWeb: pulumi.String("string"),
ExternalWebFormat: pulumi.String("string"),
FastBssTransition: pulumi.String("string"),
FastRoaming: pulumi.String("string"),
FtMobilityDomain: pulumi.Float64(0),
FtOverDs: pulumi.String("string"),
FtR0KeyLifetime: pulumi.Float64(0),
GasComebackDelay: pulumi.Float64(0),
GasFragmentationLimit: pulumi.Float64(0),
GtkRekey: pulumi.String("string"),
GtkRekeyIntv: pulumi.Float64(0),
HighEfficiency: pulumi.String("string"),
Hotspot20Profile: pulumi.String("string"),
IgmpSnooping: pulumi.String("string"),
IntraVapPrivacy: pulumi.String("string"),
Ip: pulumi.String("string"),
IpsSensor: pulumi.String("string"),
Ipv6Rules: pulumi.StringArray{
pulumi.String("string"),
},
Keyindex: pulumi.Float64(0),
Keys: pulumi.StringArray{
pulumi.String("string"),
},
L3Roaming: pulumi.String("string"),
L3RoamingMode: pulumi.String("string"),
Ldpc: pulumi.String("string"),
LocalAuthentication: pulumi.String("string"),
LocalBridging: pulumi.String("string"),
LocalLan: pulumi.String("string"),
LocalStandalone: pulumi.String("string"),
LocalStandaloneDns: pulumi.String("string"),
LocalStandaloneDnsIps: pulumi.StringArray{
pulumi.String("string"),
},
LocalStandaloneNat: pulumi.String("string"),
LocalSwitching: pulumi.String("string"),
MacAuthBypass: pulumi.String("string"),
MacCalledStationDelimiter: pulumi.String("string"),
MacCallingStationDelimiter: pulumi.String("string"),
MacCase: pulumi.String("string"),
MacFilter: pulumi.String("string"),
MacFilterPolicyOther: pulumi.String("string"),
MacPasswordDelimiter: pulumi.String("string"),
MacUsernameDelimiter: pulumi.String("string"),
MaxClients: pulumi.Float64(0),
MaxClientsAp: pulumi.Float64(0),
Mbo: pulumi.String("string"),
MboCellDataConnPref: pulumi.String("string"),
MeDisableThresh: pulumi.Float64(0),
MeshBackhaul: pulumi.String("string"),
Mpsk: pulumi.String("string"),
MpskConcurrentClients: pulumi.Float64(0),
MpskProfile: pulumi.String("string"),
MuMimo: pulumi.String("string"),
MulticastEnhance: pulumi.String("string"),
MulticastRate: pulumi.String("string"),
N80211k: pulumi.String("string"),
N80211v: pulumi.String("string"),
Nac: pulumi.String("string"),
NacProfile: pulumi.String("string"),
NeighborReportDualBand: pulumi.String("string"),
ObjectWirelesscontrollerVapDynamicMappingId: pulumi.String("string"),
Okc: pulumi.String("string"),
Osen: pulumi.String("string"),
OweGroups: pulumi.StringArray{
pulumi.String("string"),
},
OweTransition: pulumi.String("string"),
OweTransitionSsid: pulumi.String("string"),
Passphrases: pulumi.StringArray{
pulumi.String("string"),
},
Pmf: pulumi.String("string"),
PmfAssocComebackTimeout: pulumi.Float64(0),
PmfSaQueryRetryTimeout: pulumi.Float64(0),
PortMacauth: pulumi.String("string"),
PortMacauthReauthTimeout: pulumi.Float64(0),
PortMacauthTimeout: pulumi.Float64(0),
PortalMessageOverrideGroup: pulumi.String("string"),
PortalType: pulumi.String("string"),
PrimaryWagProfile: pulumi.String("string"),
ProbeRespSuppression: pulumi.String("string"),
ProbeRespThreshold: pulumi.String("string"),
PtkRekey: pulumi.String("string"),
PtkRekeyIntv: pulumi.Float64(0),
QosProfile: pulumi.String("string"),
Quarantine: pulumi.String("string"),
Radio2gThreshold: pulumi.String("string"),
Radio5gThreshold: pulumi.String("string"),
RadioSensitivity: pulumi.String("string"),
RadiusMacAuth: pulumi.String("string"),
RadiusMacAuthBlockInterval: pulumi.Float64(0),
RadiusMacAuthServer: pulumi.String("string"),
RadiusMacAuthUsergroups: pulumi.StringArray{
pulumi.String("string"),
},
RadiusMacMpskAuth: pulumi.String("string"),
RadiusMacMpskTimeout: pulumi.Float64(0),
RadiusServer: pulumi.String("string"),
Rates11acMcsMap: pulumi.String("string"),
Rates11acSs12s: pulumi.StringArray{
pulumi.String("string"),
},
Rates11acSs34s: pulumi.StringArray{
pulumi.String("string"),
},
Rates11as: pulumi.StringArray{
pulumi.String("string"),
},
Rates11axMcsMap: pulumi.String("string"),
Rates11axSs12s: pulumi.StringArray{
pulumi.String("string"),
},
Rates11axSs34s: pulumi.StringArray{
pulumi.String("string"),
},
Rates11bgs: pulumi.StringArray{
pulumi.String("string"),
},
Rates11nSs12s: pulumi.StringArray{
pulumi.String("string"),
},
Rates11nSs34s: pulumi.StringArray{
pulumi.String("string"),
},
RoamingAcctInterimUpdate: pulumi.String("string"),
SaeGroups: pulumi.StringArray{
pulumi.String("string"),
},
SaeH2eOnly: pulumi.String("string"),
SaeHnpOnly: pulumi.String("string"),
SaePasswords: pulumi.StringArray{
pulumi.String("string"),
},
SaePk: pulumi.String("string"),
SaePrivateKey: pulumi.String("string"),
ScanBotnetConnections: pulumi.String("string"),
Schedule: pulumi.String("string"),
Scopetype: pulumi.String("string"),
SecondaryWagProfile: pulumi.String("string"),
Security: pulumi.String("string"),
SecurityExemptList: pulumi.String("string"),
SecurityObsoleteOption: pulumi.String("string"),
SecurityRedirectUrl: pulumi.String("string"),
SelectedUsergroups: pulumi.String("string"),
SplitTunneling: pulumi.String("string"),
Ssid: pulumi.String("string"),
StickyClientRemove: pulumi.String("string"),
StickyClientThreshold2g: pulumi.String("string"),
StickyClientThreshold5g: pulumi.String("string"),
StickyClientThreshold6g: pulumi.String("string"),
TargetWakeTime: pulumi.String("string"),
TkipCounterMeasure: pulumi.String("string"),
TunnelEchoInterval: pulumi.Float64(0),
TunnelFallbackInterval: pulumi.Float64(0),
Usergroup: pulumi.String("string"),
UtmLog: pulumi.String("string"),
UtmProfile: pulumi.String("string"),
UtmStatus: pulumi.String("string"),
Vdom: pulumi.String("string"),
VlanAuto: pulumi.String("string"),
VlanPooling: pulumi.String("string"),
Vlanid: pulumi.Float64(0),
VoiceEnterprise: pulumi.String("string"),
WebfilterProfile: pulumi.String("string"),
})
Copy
var objectWirelesscontrollerVapDynamicMappingResource = new ObjectWirelesscontrollerVapDynamicMapping("objectWirelesscontrollerVapDynamicMappingResource", ObjectWirelesscontrollerVapDynamicMappingArgs.builder()
    .vap("string")
    ._centmgmt("string")
    ._dhcpSvrId("string")
    ._intfAllowaccesses("string")
    ._intfDeviceAccessList("string")
    ._intfDeviceIdentification("string")
    ._intfDeviceNetscan("string")
    ._intfDhcp6RelayIp("string")
    ._intfDhcp6RelayService("string")
    ._intfDhcp6RelayType("string")
    ._intfDhcpRelayIps("string")
    ._intfDhcpRelayService("string")
    ._intfDhcpRelayType("string")
    ._intfIp("string")
    ._intfIp6Address("string")
    ._intfIp6Allowaccesses("string")
    ._intfListenForticlientConnection("string")
    ._isFactorySetting("string")
    ._scopes(ObjectWirelesscontrollerVapDynamicMapping_ScopeArgs.builder()
        .name("string")
        .vdom("string")
        .build())
    .accessControlList("string")
    .acctInterimInterval(0)
    .additionalAkms("string")
    .addressGroup("string")
    .addressGroupPolicy("string")
    .adom("string")
    .alias("string")
    .antivirusProfile("string")
    .applicationDetectionEngine("string")
    .applicationDscpMarking("string")
    .applicationList("string")
    .applicationReportIntv(0)
    .atfWeight(0)
    .auth("string")
    .authCert("string")
    .authPortalAddr("string")
    .beaconAdvertisings("string")
    .broadcastSsid("string")
    .broadcastSuppressions("string")
    .bssColorPartial("string")
    .bstmDisassociationImminent("string")
    .bstmLoadBalancingDisassocTimer(0)
    .bstmRssiDisassocTimer(0)
    .captivePortalAcName("string")
    .captivePortalAuthTimeout(0)
    .captivePortalFwAccounting("string")
    .captivePortalMacauthRadiusSecrets("string")
    .captivePortalMacauthRadiusServer("string")
    .captivePortalRadiusSecrets("string")
    .captivePortalRadiusServer("string")
    .captivePortalSessionTimeoutInterval(0)
    .clientCount(0)
    .dhcpAddressEnforcement("string")
    .dhcpLeaseTime(0)
    .dhcpOption43Insertion("string")
    .dhcpOption82CircuitIdInsertion("string")
    .dhcpOption82Insertion("string")
    .dhcpOption82RemoteIdInsertion("string")
    .dynamicSortSubtable("string")
    .dynamicVlan("string")
    .eapReauth("string")
    .eapReauthIntv(0)
    .eapolKeyRetries("string")
    .encrypt("string")
    .externalFastRoaming("string")
    .externalLogout("string")
    .externalWeb("string")
    .externalWebFormat("string")
    .fastBssTransition("string")
    .fastRoaming("string")
    .ftMobilityDomain(0)
    .ftOverDs("string")
    .ftR0KeyLifetime(0)
    .gasComebackDelay(0)
    .gasFragmentationLimit(0)
    .gtkRekey("string")
    .gtkRekeyIntv(0)
    .highEfficiency("string")
    .hotspot20Profile("string")
    .igmpSnooping("string")
    .intraVapPrivacy("string")
    .ip("string")
    .ipsSensor("string")
    .ipv6Rules("string")
    .keyindex(0)
    .keys("string")
    .l3Roaming("string")
    .l3RoamingMode("string")
    .ldpc("string")
    .localAuthentication("string")
    .localBridging("string")
    .localLan("string")
    .localStandalone("string")
    .localStandaloneDns("string")
    .localStandaloneDnsIps("string")
    .localStandaloneNat("string")
    .localSwitching("string")
    .macAuthBypass("string")
    .macCalledStationDelimiter("string")
    .macCallingStationDelimiter("string")
    .macCase("string")
    .macFilter("string")
    .macFilterPolicyOther("string")
    .macPasswordDelimiter("string")
    .macUsernameDelimiter("string")
    .maxClients(0)
    .maxClientsAp(0)
    .mbo("string")
    .mboCellDataConnPref("string")
    .meDisableThresh(0)
    .meshBackhaul("string")
    .mpsk("string")
    .mpskConcurrentClients(0)
    .mpskProfile("string")
    .muMimo("string")
    .multicastEnhance("string")
    .multicastRate("string")
    .n80211k("string")
    .n80211v("string")
    .nac("string")
    .nacProfile("string")
    .neighborReportDualBand("string")
    .objectWirelesscontrollerVapDynamicMappingId("string")
    .okc("string")
    .osen("string")
    .oweGroups("string")
    .oweTransition("string")
    .oweTransitionSsid("string")
    .passphrases("string")
    .pmf("string")
    .pmfAssocComebackTimeout(0)
    .pmfSaQueryRetryTimeout(0)
    .portMacauth("string")
    .portMacauthReauthTimeout(0)
    .portMacauthTimeout(0)
    .portalMessageOverrideGroup("string")
    .portalType("string")
    .primaryWagProfile("string")
    .probeRespSuppression("string")
    .probeRespThreshold("string")
    .ptkRekey("string")
    .ptkRekeyIntv(0)
    .qosProfile("string")
    .quarantine("string")
    .radio2gThreshold("string")
    .radio5gThreshold("string")
    .radioSensitivity("string")
    .radiusMacAuth("string")
    .radiusMacAuthBlockInterval(0)
    .radiusMacAuthServer("string")
    .radiusMacAuthUsergroups("string")
    .radiusMacMpskAuth("string")
    .radiusMacMpskTimeout(0)
    .radiusServer("string")
    .rates11acMcsMap("string")
    .rates11acSs12s("string")
    .rates11acSs34s("string")
    .rates11as("string")
    .rates11axMcsMap("string")
    .rates11axSs12s("string")
    .rates11axSs34s("string")
    .rates11bgs("string")
    .rates11nSs12s("string")
    .rates11nSs34s("string")
    .roamingAcctInterimUpdate("string")
    .saeGroups("string")
    .saeH2eOnly("string")
    .saeHnpOnly("string")
    .saePasswords("string")
    .saePk("string")
    .saePrivateKey("string")
    .scanBotnetConnections("string")
    .schedule("string")
    .scopetype("string")
    .secondaryWagProfile("string")
    .security("string")
    .securityExemptList("string")
    .securityObsoleteOption("string")
    .securityRedirectUrl("string")
    .selectedUsergroups("string")
    .splitTunneling("string")
    .ssid("string")
    .stickyClientRemove("string")
    .stickyClientThreshold2g("string")
    .stickyClientThreshold5g("string")
    .stickyClientThreshold6g("string")
    .targetWakeTime("string")
    .tkipCounterMeasure("string")
    .tunnelEchoInterval(0)
    .tunnelFallbackInterval(0)
    .usergroup("string")
    .utmLog("string")
    .utmProfile("string")
    .utmStatus("string")
    .vdom("string")
    .vlanAuto("string")
    .vlanPooling("string")
    .vlanid(0)
    .voiceEnterprise("string")
    .webfilterProfile("string")
    .build());
Copy
object_wirelesscontroller_vap_dynamic_mapping_resource = fortimanager.ObjectWirelesscontrollerVapDynamicMapping("objectWirelesscontrollerVapDynamicMappingResource",
    vap="string",
    _centmgmt="string",
    _dhcp_svr_id="string",
    _intf_allowaccesses=["string"],
    _intf_device_access_list="string",
    _intf_device_identification="string",
    _intf_device_netscan="string",
    _intf_dhcp6_relay_ip="string",
    _intf_dhcp6_relay_service="string",
    _intf_dhcp6_relay_type="string",
    _intf_dhcp_relay_ips=["string"],
    _intf_dhcp_relay_service="string",
    _intf_dhcp_relay_type="string",
    _intf_ip="string",
    _intf_ip6_address="string",
    _intf_ip6_allowaccesses=["string"],
    _intf_listen_forticlient_connection="string",
    _is_factory_setting="string",
    _scopes=[{
        "name": "string",
        "vdom": "string",
    }],
    access_control_list="string",
    acct_interim_interval=0,
    additional_akms=["string"],
    address_group="string",
    address_group_policy="string",
    adom="string",
    alias="string",
    antivirus_profile="string",
    application_detection_engine="string",
    application_dscp_marking="string",
    application_list="string",
    application_report_intv=0,
    atf_weight=0,
    auth="string",
    auth_cert="string",
    auth_portal_addr="string",
    beacon_advertisings=["string"],
    broadcast_ssid="string",
    broadcast_suppressions=["string"],
    bss_color_partial="string",
    bstm_disassociation_imminent="string",
    bstm_load_balancing_disassoc_timer=0,
    bstm_rssi_disassoc_timer=0,
    captive_portal_ac_name="string",
    captive_portal_auth_timeout=0,
    captive_portal_fw_accounting="string",
    captive_portal_macauth_radius_secrets=["string"],
    captive_portal_macauth_radius_server="string",
    captive_portal_radius_secrets=["string"],
    captive_portal_radius_server="string",
    captive_portal_session_timeout_interval=0,
    client_count=0,
    dhcp_address_enforcement="string",
    dhcp_lease_time=0,
    dhcp_option43_insertion="string",
    dhcp_option82_circuit_id_insertion="string",
    dhcp_option82_insertion="string",
    dhcp_option82_remote_id_insertion="string",
    dynamic_sort_subtable="string",
    dynamic_vlan="string",
    eap_reauth="string",
    eap_reauth_intv=0,
    eapol_key_retries="string",
    encrypt="string",
    external_fast_roaming="string",
    external_logout="string",
    external_web="string",
    external_web_format="string",
    fast_bss_transition="string",
    fast_roaming="string",
    ft_mobility_domain=0,
    ft_over_ds="string",
    ft_r0_key_lifetime=0,
    gas_comeback_delay=0,
    gas_fragmentation_limit=0,
    gtk_rekey="string",
    gtk_rekey_intv=0,
    high_efficiency="string",
    hotspot20_profile="string",
    igmp_snooping="string",
    intra_vap_privacy="string",
    ip="string",
    ips_sensor="string",
    ipv6_rules=["string"],
    keyindex=0,
    keys=["string"],
    l3_roaming="string",
    l3_roaming_mode="string",
    ldpc="string",
    local_authentication="string",
    local_bridging="string",
    local_lan="string",
    local_standalone="string",
    local_standalone_dns="string",
    local_standalone_dns_ips=["string"],
    local_standalone_nat="string",
    local_switching="string",
    mac_auth_bypass="string",
    mac_called_station_delimiter="string",
    mac_calling_station_delimiter="string",
    mac_case="string",
    mac_filter="string",
    mac_filter_policy_other="string",
    mac_password_delimiter="string",
    mac_username_delimiter="string",
    max_clients=0,
    max_clients_ap=0,
    mbo="string",
    mbo_cell_data_conn_pref="string",
    me_disable_thresh=0,
    mesh_backhaul="string",
    mpsk="string",
    mpsk_concurrent_clients=0,
    mpsk_profile="string",
    mu_mimo="string",
    multicast_enhance="string",
    multicast_rate="string",
    n80211k="string",
    n80211v="string",
    nac="string",
    nac_profile="string",
    neighbor_report_dual_band="string",
    object_wirelesscontroller_vap_dynamic_mapping_id="string",
    okc="string",
    osen="string",
    owe_groups=["string"],
    owe_transition="string",
    owe_transition_ssid="string",
    passphrases=["string"],
    pmf="string",
    pmf_assoc_comeback_timeout=0,
    pmf_sa_query_retry_timeout=0,
    port_macauth="string",
    port_macauth_reauth_timeout=0,
    port_macauth_timeout=0,
    portal_message_override_group="string",
    portal_type="string",
    primary_wag_profile="string",
    probe_resp_suppression="string",
    probe_resp_threshold="string",
    ptk_rekey="string",
    ptk_rekey_intv=0,
    qos_profile="string",
    quarantine="string",
    radio2g_threshold="string",
    radio5g_threshold="string",
    radio_sensitivity="string",
    radius_mac_auth="string",
    radius_mac_auth_block_interval=0,
    radius_mac_auth_server="string",
    radius_mac_auth_usergroups=["string"],
    radius_mac_mpsk_auth="string",
    radius_mac_mpsk_timeout=0,
    radius_server="string",
    rates11ac_mcs_map="string",
    rates11ac_ss12s=["string"],
    rates11ac_ss34s=["string"],
    rates11as=["string"],
    rates11ax_mcs_map="string",
    rates11ax_ss12s=["string"],
    rates11ax_ss34s=["string"],
    rates11bgs=["string"],
    rates11n_ss12s=["string"],
    rates11n_ss34s=["string"],
    roaming_acct_interim_update="string",
    sae_groups=["string"],
    sae_h2e_only="string",
    sae_hnp_only="string",
    sae_passwords=["string"],
    sae_pk="string",
    sae_private_key="string",
    scan_botnet_connections="string",
    schedule="string",
    scopetype="string",
    secondary_wag_profile="string",
    security="string",
    security_exempt_list="string",
    security_obsolete_option="string",
    security_redirect_url="string",
    selected_usergroups="string",
    split_tunneling="string",
    ssid="string",
    sticky_client_remove="string",
    sticky_client_threshold2g="string",
    sticky_client_threshold5g="string",
    sticky_client_threshold6g="string",
    target_wake_time="string",
    tkip_counter_measure="string",
    tunnel_echo_interval=0,
    tunnel_fallback_interval=0,
    usergroup="string",
    utm_log="string",
    utm_profile="string",
    utm_status="string",
    vdom="string",
    vlan_auto="string",
    vlan_pooling="string",
    vlanid=0,
    voice_enterprise="string",
    webfilter_profile="string")
Copy
const objectWirelesscontrollerVapDynamicMappingResource = new fortimanager.ObjectWirelesscontrollerVapDynamicMapping("objectWirelesscontrollerVapDynamicMappingResource", {
    vap: "string",
    _centmgmt: "string",
    _dhcpSvrId: "string",
    _intfAllowaccesses: ["string"],
    _intfDeviceAccessList: "string",
    _intfDeviceIdentification: "string",
    _intfDeviceNetscan: "string",
    _intfDhcp6RelayIp: "string",
    _intfDhcp6RelayService: "string",
    _intfDhcp6RelayType: "string",
    _intfDhcpRelayIps: ["string"],
    _intfDhcpRelayService: "string",
    _intfDhcpRelayType: "string",
    _intfIp: "string",
    _intfIp6Address: "string",
    _intfIp6Allowaccesses: ["string"],
    _intfListenForticlientConnection: "string",
    _isFactorySetting: "string",
    _scopes: [{
        name: "string",
        vdom: "string",
    }],
    accessControlList: "string",
    acctInterimInterval: 0,
    additionalAkms: ["string"],
    addressGroup: "string",
    addressGroupPolicy: "string",
    adom: "string",
    alias: "string",
    antivirusProfile: "string",
    applicationDetectionEngine: "string",
    applicationDscpMarking: "string",
    applicationList: "string",
    applicationReportIntv: 0,
    atfWeight: 0,
    auth: "string",
    authCert: "string",
    authPortalAddr: "string",
    beaconAdvertisings: ["string"],
    broadcastSsid: "string",
    broadcastSuppressions: ["string"],
    bssColorPartial: "string",
    bstmDisassociationImminent: "string",
    bstmLoadBalancingDisassocTimer: 0,
    bstmRssiDisassocTimer: 0,
    captivePortalAcName: "string",
    captivePortalAuthTimeout: 0,
    captivePortalFwAccounting: "string",
    captivePortalMacauthRadiusSecrets: ["string"],
    captivePortalMacauthRadiusServer: "string",
    captivePortalRadiusSecrets: ["string"],
    captivePortalRadiusServer: "string",
    captivePortalSessionTimeoutInterval: 0,
    clientCount: 0,
    dhcpAddressEnforcement: "string",
    dhcpLeaseTime: 0,
    dhcpOption43Insertion: "string",
    dhcpOption82CircuitIdInsertion: "string",
    dhcpOption82Insertion: "string",
    dhcpOption82RemoteIdInsertion: "string",
    dynamicSortSubtable: "string",
    dynamicVlan: "string",
    eapReauth: "string",
    eapReauthIntv: 0,
    eapolKeyRetries: "string",
    encrypt: "string",
    externalFastRoaming: "string",
    externalLogout: "string",
    externalWeb: "string",
    externalWebFormat: "string",
    fastBssTransition: "string",
    fastRoaming: "string",
    ftMobilityDomain: 0,
    ftOverDs: "string",
    ftR0KeyLifetime: 0,
    gasComebackDelay: 0,
    gasFragmentationLimit: 0,
    gtkRekey: "string",
    gtkRekeyIntv: 0,
    highEfficiency: "string",
    hotspot20Profile: "string",
    igmpSnooping: "string",
    intraVapPrivacy: "string",
    ip: "string",
    ipsSensor: "string",
    ipv6Rules: ["string"],
    keyindex: 0,
    keys: ["string"],
    l3Roaming: "string",
    l3RoamingMode: "string",
    ldpc: "string",
    localAuthentication: "string",
    localBridging: "string",
    localLan: "string",
    localStandalone: "string",
    localStandaloneDns: "string",
    localStandaloneDnsIps: ["string"],
    localStandaloneNat: "string",
    localSwitching: "string",
    macAuthBypass: "string",
    macCalledStationDelimiter: "string",
    macCallingStationDelimiter: "string",
    macCase: "string",
    macFilter: "string",
    macFilterPolicyOther: "string",
    macPasswordDelimiter: "string",
    macUsernameDelimiter: "string",
    maxClients: 0,
    maxClientsAp: 0,
    mbo: "string",
    mboCellDataConnPref: "string",
    meDisableThresh: 0,
    meshBackhaul: "string",
    mpsk: "string",
    mpskConcurrentClients: 0,
    mpskProfile: "string",
    muMimo: "string",
    multicastEnhance: "string",
    multicastRate: "string",
    n80211k: "string",
    n80211v: "string",
    nac: "string",
    nacProfile: "string",
    neighborReportDualBand: "string",
    objectWirelesscontrollerVapDynamicMappingId: "string",
    okc: "string",
    osen: "string",
    oweGroups: ["string"],
    oweTransition: "string",
    oweTransitionSsid: "string",
    passphrases: ["string"],
    pmf: "string",
    pmfAssocComebackTimeout: 0,
    pmfSaQueryRetryTimeout: 0,
    portMacauth: "string",
    portMacauthReauthTimeout: 0,
    portMacauthTimeout: 0,
    portalMessageOverrideGroup: "string",
    portalType: "string",
    primaryWagProfile: "string",
    probeRespSuppression: "string",
    probeRespThreshold: "string",
    ptkRekey: "string",
    ptkRekeyIntv: 0,
    qosProfile: "string",
    quarantine: "string",
    radio2gThreshold: "string",
    radio5gThreshold: "string",
    radioSensitivity: "string",
    radiusMacAuth: "string",
    radiusMacAuthBlockInterval: 0,
    radiusMacAuthServer: "string",
    radiusMacAuthUsergroups: ["string"],
    radiusMacMpskAuth: "string",
    radiusMacMpskTimeout: 0,
    radiusServer: "string",
    rates11acMcsMap: "string",
    rates11acSs12s: ["string"],
    rates11acSs34s: ["string"],
    rates11as: ["string"],
    rates11axMcsMap: "string",
    rates11axSs12s: ["string"],
    rates11axSs34s: ["string"],
    rates11bgs: ["string"],
    rates11nSs12s: ["string"],
    rates11nSs34s: ["string"],
    roamingAcctInterimUpdate: "string",
    saeGroups: ["string"],
    saeH2eOnly: "string",
    saeHnpOnly: "string",
    saePasswords: ["string"],
    saePk: "string",
    saePrivateKey: "string",
    scanBotnetConnections: "string",
    schedule: "string",
    scopetype: "string",
    secondaryWagProfile: "string",
    security: "string",
    securityExemptList: "string",
    securityObsoleteOption: "string",
    securityRedirectUrl: "string",
    selectedUsergroups: "string",
    splitTunneling: "string",
    ssid: "string",
    stickyClientRemove: "string",
    stickyClientThreshold2g: "string",
    stickyClientThreshold5g: "string",
    stickyClientThreshold6g: "string",
    targetWakeTime: "string",
    tkipCounterMeasure: "string",
    tunnelEchoInterval: 0,
    tunnelFallbackInterval: 0,
    usergroup: "string",
    utmLog: "string",
    utmProfile: "string",
    utmStatus: "string",
    vdom: "string",
    vlanAuto: "string",
    vlanPooling: "string",
    vlanid: 0,
    voiceEnterprise: "string",
    webfilterProfile: "string",
});
Copy
type: fortimanager:ObjectWirelesscontrollerVapDynamicMapping
properties:
    _centmgmt: string
    _dhcpSvrId: string
    _intfAllowaccesses:
        - string
    _intfDeviceAccessList: string
    _intfDeviceIdentification: string
    _intfDeviceNetscan: string
    _intfDhcp6RelayIp: string
    _intfDhcp6RelayService: string
    _intfDhcp6RelayType: string
    _intfDhcpRelayIps:
        - string
    _intfDhcpRelayService: string
    _intfDhcpRelayType: string
    _intfIp: string
    _intfIp6Address: string
    _intfIp6Allowaccesses:
        - string
    _intfListenForticlientConnection: string
    _isFactorySetting: string
    _scopes:
        - name: string
          vdom: string
    accessControlList: string
    acctInterimInterval: 0
    additionalAkms:
        - string
    addressGroup: string
    addressGroupPolicy: string
    adom: string
    alias: string
    antivirusProfile: string
    applicationDetectionEngine: string
    applicationDscpMarking: string
    applicationList: string
    applicationReportIntv: 0
    atfWeight: 0
    auth: string
    authCert: string
    authPortalAddr: string
    beaconAdvertisings:
        - string
    broadcastSsid: string
    broadcastSuppressions:
        - string
    bssColorPartial: string
    bstmDisassociationImminent: string
    bstmLoadBalancingDisassocTimer: 0
    bstmRssiDisassocTimer: 0
    captivePortalAcName: string
    captivePortalAuthTimeout: 0
    captivePortalFwAccounting: string
    captivePortalMacauthRadiusSecrets:
        - string
    captivePortalMacauthRadiusServer: string
    captivePortalRadiusSecrets:
        - string
    captivePortalRadiusServer: string
    captivePortalSessionTimeoutInterval: 0
    clientCount: 0
    dhcpAddressEnforcement: string
    dhcpLeaseTime: 0
    dhcpOption43Insertion: string
    dhcpOption82CircuitIdInsertion: string
    dhcpOption82Insertion: string
    dhcpOption82RemoteIdInsertion: string
    dynamicSortSubtable: string
    dynamicVlan: string
    eapReauth: string
    eapReauthIntv: 0
    eapolKeyRetries: string
    encrypt: string
    externalFastRoaming: string
    externalLogout: string
    externalWeb: string
    externalWebFormat: string
    fastBssTransition: string
    fastRoaming: string
    ftMobilityDomain: 0
    ftOverDs: string
    ftR0KeyLifetime: 0
    gasComebackDelay: 0
    gasFragmentationLimit: 0
    gtkRekey: string
    gtkRekeyIntv: 0
    highEfficiency: string
    hotspot20Profile: string
    igmpSnooping: string
    intraVapPrivacy: string
    ip: string
    ipsSensor: string
    ipv6Rules:
        - string
    keyindex: 0
    keys:
        - string
    l3Roaming: string
    l3RoamingMode: string
    ldpc: string
    localAuthentication: string
    localBridging: string
    localLan: string
    localStandalone: string
    localStandaloneDns: string
    localStandaloneDnsIps:
        - string
    localStandaloneNat: string
    localSwitching: string
    macAuthBypass: string
    macCalledStationDelimiter: string
    macCallingStationDelimiter: string
    macCase: string
    macFilter: string
    macFilterPolicyOther: string
    macPasswordDelimiter: string
    macUsernameDelimiter: string
    maxClients: 0
    maxClientsAp: 0
    mbo: string
    mboCellDataConnPref: string
    meDisableThresh: 0
    meshBackhaul: string
    mpsk: string
    mpskConcurrentClients: 0
    mpskProfile: string
    muMimo: string
    multicastEnhance: string
    multicastRate: string
    n80211k: string
    n80211v: string
    nac: string
    nacProfile: string
    neighborReportDualBand: string
    objectWirelesscontrollerVapDynamicMappingId: string
    okc: string
    osen: string
    oweGroups:
        - string
    oweTransition: string
    oweTransitionSsid: string
    passphrases:
        - string
    pmf: string
    pmfAssocComebackTimeout: 0
    pmfSaQueryRetryTimeout: 0
    portMacauth: string
    portMacauthReauthTimeout: 0
    portMacauthTimeout: 0
    portalMessageOverrideGroup: string
    portalType: string
    primaryWagProfile: string
    probeRespSuppression: string
    probeRespThreshold: string
    ptkRekey: string
    ptkRekeyIntv: 0
    qosProfile: string
    quarantine: string
    radio2gThreshold: string
    radio5gThreshold: string
    radioSensitivity: string
    radiusMacAuth: string
    radiusMacAuthBlockInterval: 0
    radiusMacAuthServer: string
    radiusMacAuthUsergroups:
        - string
    radiusMacMpskAuth: string
    radiusMacMpskTimeout: 0
    radiusServer: string
    rates11acMcsMap: string
    rates11acSs12s:
        - string
    rates11acSs34s:
        - string
    rates11as:
        - string
    rates11axMcsMap: string
    rates11axSs12s:
        - string
    rates11axSs34s:
        - string
    rates11bgs:
        - string
    rates11nSs12s:
        - string
    rates11nSs34s:
        - string
    roamingAcctInterimUpdate: string
    saeGroups:
        - string
    saeH2eOnly: string
    saeHnpOnly: string
    saePasswords:
        - string
    saePk: string
    saePrivateKey: string
    scanBotnetConnections: string
    schedule: string
    scopetype: string
    secondaryWagProfile: string
    security: string
    securityExemptList: string
    securityObsoleteOption: string
    securityRedirectUrl: string
    selectedUsergroups: string
    splitTunneling: string
    ssid: string
    stickyClientRemove: string
    stickyClientThreshold2g: string
    stickyClientThreshold5g: string
    stickyClientThreshold6g: string
    targetWakeTime: string
    tkipCounterMeasure: string
    tunnelEchoInterval: 0
    tunnelFallbackInterval: 0
    usergroup: string
    utmLog: string
    utmProfile: string
    utmStatus: string
    vap: string
    vdom: string
    vlanAuto: string
    vlanPooling: string
    vlanid: 0
    voiceEnterprise: string
    webfilterProfile: string
Copy

ObjectWirelesscontrollerVapDynamicMapping Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The ObjectWirelesscontrollerVapDynamicMapping resource accepts the following input properties:

Vap This property is required. string
Vap.
AccessControlList string
Access-Control-List.
AcctInterimInterval double
WiFi RADIUS accounting interim interval (60 - 86400 sec, default = 0).
AdditionalAkms List<string>
Additional-Akms. Valid values: akm6.
AddressGroup string
Address group ID.
AddressGroupPolicy string
Address-Group-Policy. Valid values: disable, allow, deny.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
Alias string
Alias.
AntivirusProfile string
AntiVirus profile name.
ApplicationDetectionEngine string
Application-Detection-Engine. Valid values: disable, enable.
ApplicationDscpMarking string
Enable/disable application attribute based DSCP marking (default = disable). Valid values: disable, enable.
ApplicationList string
Application control list name.
ApplicationReportIntv double
Application-Report-Intv.
AtfWeight double
Airtime weight in percentage (default = 20).
Auth string
Authentication protocol. Valid values: PSK, psk, RADIUS, radius, usergroup.
AuthCert string
HTTPS server certificate.
AuthPortalAddr string
Address of captive portal.
BeaconAdvertisings List<string>
Fortinet beacon advertising IE data (default = empty). Valid values: name, model, serial-number.
BroadcastSsid string
Enable/disable broadcasting the SSID (default = enable). Valid values: disable, enable.
BroadcastSuppressions List<string>
Optional suppression of broadcast messages. For example, you can keep DHCP messages, ARP broadcasts, and so on off of the wireless network. Valid values: dhcp, arp, dhcp2, arp2, netbios-ns, netbios-ds, arp3, dhcp-up, dhcp-down, arp-known, arp-unknown, arp-reply, ipv6, dhcp-starvation, arp-poison, all-other-mc, all-other-bc, arp-proxy, dhcp-ucast.
BssColorPartial string
Bss-Color-Partial. Valid values: disable, enable.
BstmDisassociationImminent string
Bstm-Disassociation-Imminent. Valid values: disable, enable.
BstmLoadBalancingDisassocTimer double
Bstm-Load-Balancing-Disassoc-Timer.
BstmRssiDisassocTimer double
Bstm-Rssi-Disassoc-Timer.
CaptivePortalAcName string
Local-bridging captive portal ac-name.
CaptivePortalAuthTimeout double
Captive-Portal-Auth-Timeout.
CaptivePortalFwAccounting string
Enable/disable RADIUS accounting for captive portal firewall authentication session. Valid values: disable, enable.
CaptivePortalMacauthRadiusSecrets List<string>
Secret key to access the macauth RADIUS server.
CaptivePortalMacauthRadiusServer string
Captive portal external RADIUS server domain name or IP address.
CaptivePortalRadiusSecrets List<string>
Secret key to access the RADIUS server.
CaptivePortalRadiusServer string
Captive portal RADIUS server domain name or IP address.
CaptivePortalSessionTimeoutInterval double
Session timeout interval (0 - 864000 sec, default = 0).
ClientCount double
Client-Count.
DhcpAddressEnforcement string
Dhcp-Address-Enforcement. Valid values: disable, enable.
DhcpLeaseTime double
DHCP lease time in seconds for NAT IP address.
DhcpOption43Insertion string
Dhcp-Option43-Insertion. Valid values: disable, enable.
DhcpOption82CircuitIdInsertion string
Enable/disable DHCP option 82 circuit-id insert (default = disable). Valid values: disable, style-1, style-2, style-3.
DhcpOption82Insertion string
Enable/disable DHCP option 82 insert (default = disable). Valid values: disable, enable.
DhcpOption82RemoteIdInsertion string
Enable/disable DHCP option 82 remote-id insert (default = disable). Valid values: disable, style-1.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
DynamicVlan string
Enable/disable dynamic VLAN assignment. Valid values: disable, enable.
EapReauth string
Enable/disable EAP re-authentication for WPA-Enterprise security. Valid values: disable, enable.
EapReauthIntv double
EAP re-authentication interval (1800 - 864000 sec, default = 86400).
EapolKeyRetries string
Enable/disable retransmission of EAPOL-Key frames (message 3/4 and group message 1/2) (default = enable). Valid values: disable, enable.
Encrypt string
Encryption protocol to use (only available when security is set to a WPA type). Valid values: TKIP, AES, TKIP-AES.
ExternalFastRoaming string
Enable/disable fast roaming or pre-authentication with external APs not managed by the FortiGate (default = disable). Valid values: disable, enable.
ExternalLogout string
URL of external authentication logout server.
ExternalWeb string
URL of external authentication web server.
ExternalWebFormat string
URL query parameter detection (default = auto-detect). Valid values: auto-detect, no-query-string, partial-query-string.
FastBssTransition string
Enable/disable 802.11r Fast BSS Transition (FT) (default = disable). Valid values: disable, enable.
FastRoaming string
Enable/disable fast-roaming, or pre-authentication, where supported by clients (default = disable). Valid values: disable, enable.
FtMobilityDomain double
Mobility domain identifier in FT (1 - 65535, default = 1000).
FtOverDs string
Enable/disable FT over the Distribution System (DS). Valid values: disable, enable.
FtR0KeyLifetime double
Lifetime of the PMK-R0 key in FT, 1-65535 minutes.
GasComebackDelay double
Gas-Comeback-Delay.
GasFragmentationLimit double
Gas-Fragmentation-Limit.
GtkRekey string
Enable/disable GTK rekey for WPA security. Valid values: disable, enable.
GtkRekeyIntv double
GTK rekey interval (1800 - 864000 sec, default = 86400).
HighEfficiency string
Enable/disable 802.11ax high efficiency (default = enable). Valid values: disable, enable.
Hotspot20Profile string
Hotspot 2.0 profile name.
IgmpSnooping string
Igmp-Snooping. Valid values: disable, enable.
IntraVapPrivacy string
Enable/disable blocking communication between clients on the same SSID (called intra-SSID privacy) (default = disable). Valid values: disable, enable.
Ip string
IP address and subnet mask for the local standalone NAT subnet.
IpsSensor string
IPS sensor name.
Ipv6Rules List<string>
Ipv6-Rules. Valid values: drop-icmp6ra, drop-icmp6rs, drop-llmnr6, drop-icmp6mld2, drop-dhcp6s, drop-dhcp6c, ndp-proxy, drop-ns-dad, drop-ns-nondad.
Keyindex double
WEP key index (1 - 4).
Keys List<string>
WEP Key.
L3Roaming string
L3-Roaming. Valid values: disable, enable.
L3RoamingMode string
Select the way that layer 3 roaming traffic is passed (default = direct). Valid values: direct, indirect.
Ldpc string
VAP low-density parity-check (LDPC) coding configuration. Valid values: disable, tx, rx, rxtx.
LocalAuthentication string
Enable/disable AP local authentication. Valid values: disable, enable.
LocalBridging string
Enable/disable bridging of wireless and Ethernet interfaces on the FortiAP (default = disable). Valid values: disable, enable.
LocalLan string
Allow/deny traffic destined for a Class A, B, or C private IP address (default = allow). Valid values: deny, allow.
LocalStandalone string
Enable/disable AP local standalone (default = disable). Valid values: disable, enable.
LocalStandaloneDns string
Enable/disable AP local standalone DNS. Valid values: disable, enable.
LocalStandaloneDnsIps List<string>
IPv4 addresses for the local standalone DNS.
LocalStandaloneNat string
Enable/disable AP local standalone NAT mode. Valid values: disable, enable.
LocalSwitching string
Local-Switching. Valid values: disable, enable.
MacAuthBypass string
Enable/disable MAC authentication bypass. Valid values: disable, enable.
MacCalledStationDelimiter string
Mac-Called-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MacCallingStationDelimiter string
Mac-Calling-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MacCase string
Mac-Case. Valid values: uppercase, lowercase.
MacFilter string
Enable/disable MAC filtering to block wireless clients by mac address. Valid values: disable, enable.
MacFilterPolicyOther string
Allow or block clients with MAC addresses that are not in the filter list. Valid values: deny, allow.
MacPasswordDelimiter string
Mac-Password-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MacUsernameDelimiter string
Mac-Username-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MaxClients double
Maximum number of clients that can connect simultaneously to the VAP (default = 0, meaning no limitation).
MaxClientsAp double
Maximum number of clients that can connect simultaneously to the VAP per AP radio (default = 0, meaning no limitation).
Mbo string
Mbo. Valid values: disable, enable.
MboCellDataConnPref string
Mbo-Cell-Data-Conn-Pref. Valid values: excluded, prefer-not, prefer-use.
MeDisableThresh double
Disable multicast enhancement when this many clients are receiving multicast traffic.
MeshBackhaul string
Enable/disable using this VAP as a WiFi mesh backhaul (default = disable). This entry is only available when security is set to a WPA type or open. Valid values: disable, enable.
Mpsk string
Enable/disable multiple PSK authentication. Valid values: disable, enable.
MpskConcurrentClients double
Maximum number of concurrent clients that connect using the same passphrase in multiple PSK authentication (0 - 65535, default = 0, meaning no limitation).
MpskProfile string
Mpsk-Profile.
MuMimo string
Enable/disable Multi-user MIMO (default = enable). Valid values: disable, enable.
MulticastEnhance string
Enable/disable converting multicast to unicast to improve performance (default = disable). Valid values: disable, enable.
MulticastRate string
Multicast rate (0, 6000, 12000, or 24000 kbps, default = 0). Valid values: 0, 6000, 12000, 24000.
N80211k string
Enable/disable 802.11k assisted roaming (default = enable). Valid values: disable, enable.
N80211v string
Enable/disable 802.11v assisted roaming (default = enable). Valid values: disable, enable.
Nac string
Nac. Valid values: disable, enable.
NacProfile string
Nac-Profile.
NeighborReportDualBand string
Neighbor-Report-Dual-Band. Valid values: disable, enable.
ObjectWirelesscontrollerVapDynamicMappingId string
an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
Okc string
Enable/disable Opportunistic Key Caching (OKC) (default = enable). Valid values: disable, enable.
Osen string
Enable/disable OSEN as part of key management (default = disable). Valid values: disable, enable.
OweGroups List<string>
OWE-Groups. Valid values: 19, 20, 21.
OweTransition string
Enable/disable OWE transition mode support. Valid values: disable, enable.
OweTransitionSsid string
OWE transition mode peer SSID.
Passphrases List<string>
WPA pre-shared key (PSK) to be used to authenticate WiFi users.
Pmf string
Protected Management Frames (PMF) support (default = disable). Valid values: disable, enable, optional.
PmfAssocComebackTimeout double
Protected Management Frames (PMF) comeback maximum timeout (1-20 sec).
PmfSaQueryRetryTimeout double
Protected Management Frames (PMF) SA query retry timeout interval (1 - 5 100s of msec).
PortMacauth string
Port-Macauth. Valid values: disable, radius, address-group.
PortMacauthReauthTimeout double
Port-Macauth-Reauth-Timeout.
PortMacauthTimeout double
Port-Macauth-Timeout.
PortalMessageOverrideGroup string
Replacement message group for this VAP (only available when security is set to a captive portal type).
PortalType string
Captive portal functionality. Configure how the captive portal authenticates users and whether it includes a disclaimer. Valid values: auth, auth+disclaimer, disclaimer, email-collect, cmcc, cmcc-macauth, auth-mac, external-auth.
PrimaryWagProfile string
Primary wireless access gateway profile name.
ProbeRespSuppression string
Enable/disable probe response suppression (to ignore weak signals) (default = disable). Valid values: disable, enable.
ProbeRespThreshold string
Minimum signal level/threshold in dBm required for the AP response to probe requests (-95 to -20, default = -80).
PtkRekey string
Enable/disable PTK rekey for WPA-Enterprise security. Valid values: disable, enable.
PtkRekeyIntv double
PTK rekey interval (1800 - 864000 sec, default = 86400).
QosProfile string
Quality of service profile name.
Quarantine string
Enable/disable station quarantine (default = enable). Valid values: disable, enable.
Radio2gThreshold string
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 2.4G band (-95 to -20, default = -79).
Radio5gThreshold string
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 5G band(-95 to -20, default = -76).
RadioSensitivity string
Enable/disable software radio sensitivity (to ignore weak signals) (default = disable). Valid values: disable, enable.
RadiusMacAuth string
Enable/disable RADIUS-based MAC authentication of clients (default = disable). Valid values: disable, enable.
RadiusMacAuthBlockInterval double
Don't send RADIUS MAC auth request again if the client has been rejected within specific interval (0 or 30 - 864000 seconds, default = 0, 0 to disable blocking).
RadiusMacAuthServer string
RADIUS-based MAC authentication server.
RadiusMacAuthUsergroups List<string>
Selective user groups that are permitted for RADIUS mac authentication.
RadiusMacMpskAuth string
Enable/disable RADIUS-based MAC authentication of clients for MPSK authentication (default = disable). Valid values: disable, enable.
RadiusMacMpskTimeout double
RADIUS MAC MPSK cache timeout interval (1800 - 864000, default = 86400).
RadiusServer string
RADIUS server to be used to authenticate WiFi users.
Rates11acMcsMap string
Comma separated list of max supported VHT MCS for spatial streams 1 through 8.
Rates11acSs12s List<string>
Allowed data rates for 802.11ac/ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/1, mcs11/1, mcs10/2, mcs11/2.
Rates11acSs34s List<string>
Allowed data rates for 802.11ac/ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/3, mcs11/3, mcs10/4, mcs11/4.
Rates11as List<string>
Allowed data rates for 802.11a. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
Rates11axMcsMap string
Comma separated list of max supported HE MCS for spatial streams 1 through 8.
Rates11axSs12s List<string>
Allowed data rates for 802.11ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs10/1, mcs11/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/2, mcs11/2.
Rates11axSs34s List<string>
Allowed data rates for 802.11ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs10/3, mcs11/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/4, mcs11/4.
Rates11bgs List<string>
Allowed data rates for 802.11b/g. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
Rates11nSs12s List<string>
Allowed data rates for 802.11n with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/2, mcs9/2, mcs10/2, mcs11/2, mcs12/2, mcs13/2, mcs14/2, mcs15/2.
Rates11nSs34s List<string>
Allowed data rates for 802.11n with 3 or 4 spatial streams. Valid values: mcs16/3, mcs17/3, mcs18/3, mcs19/3, mcs20/3, mcs21/3, mcs22/3, mcs23/3, mcs24/4, mcs25/4, mcs26/4, mcs27/4, mcs28/4, mcs29/4, mcs30/4, mcs31/4.
RoamingAcctInterimUpdate string
Enable/disable using accounting interim update instead of accounting start/stop on roaming for WPA-Enterprise security. Valid values: disable, enable.
SaeGroups List<string>
SAE-Groups. Valid values: 1, 2, 5, 14, 15, 16, 17, 18, 19, 20, 21, 27, 28, 29, 30, 31.
SaeH2eOnly string
Use hash-to-element-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
SaeHnpOnly string
Use hunting-and-pecking-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
SaePasswords List<string>
WPA3 SAE password to be used to authenticate WiFi users.
SaePk string
Enable/disable WPA3 SAE-PK (default = disable). Valid values: disable, enable.
SaePrivateKey string
Private key used for WPA3 SAE-PK authentication.
ScanBotnetConnections string
Block or monitor connections to Botnet servers or disable Botnet scanning. Valid values: disable, block, monitor.
Schedule string
Firewall schedules for enabling this VAP on the FortiAP. This VAP will be enabled when at least one of the schedules is valid. Separate multiple schedule names with a space.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SecondaryWagProfile string
Secondary wireless access gateway profile name.
Security string
Security mode for the wireless interface (default = wpa2-only-personal). Valid values: None, WEP64, wep64, WEP128, wep128, WPA_PSK, WPA_RADIUS, WPA, WPA2, WPA2_AUTO, open, wpa-personal, wpa-enterprise, captive-portal, wpa-only-personal, wpa-only-enterprise, wpa2-only-personal, wpa2-only-enterprise, wpa-personal+captive-portal, wpa-only-personal+captive-portal, wpa2-only-personal+captive-portal, osen, wpa3-enterprise, sae, sae-transition, owe, wpa3-sae, wpa3-sae-transition.
SecurityExemptList string
Optional security exempt list for captive portal authentication.
SecurityObsoleteOption string
Enable/disable obsolete security options. Valid values: disable, enable.
SecurityRedirectUrl string
Optional URL for redirecting users after they pass captive portal authentication.
SelectedUsergroups string
Selective user groups that are permitted to authenticate.
SplitTunneling string
Enable/disable split tunneling (default = disable). Valid values: disable, enable.
Ssid string
IEEE 802.11 service set identifier (SSID) for the wireless interface. Users who wish to use the wireless network must configure their computers to access this SSID name.
StickyClientRemove string
Sticky-Client-Remove. Valid values: disable, enable.
StickyClientThreshold2g string
Sticky-Client-Threshold-2G.
StickyClientThreshold5g string
Sticky-Client-Threshold-5G.
StickyClientThreshold6g string
Minimum signal level/threshold in dBm required for the 6G client to be serviced by the AP (-95 to -20, default = -76).
TargetWakeTime string
Enable/disable 802.11ax target wake time (default = enable). Valid values: disable, enable.
TkipCounterMeasure string
Enable/disable TKIP counter measure. Valid values: disable, enable.
TunnelEchoInterval double
The time interval to send echo to both primary and secondary tunnel peers (1 - 65535 sec, default = 300).
TunnelFallbackInterval double
The time interval for secondary tunnel to fall back to primary tunnel (0 - 65535 sec, default = 7200).
Usergroup string
Firewall user group to be used to authenticate WiFi users.
UtmLog string
Enable/disable UTM logging. Valid values: disable, enable.
UtmProfile string
UTM profile name.
UtmStatus string
Enable to add one or more security profiles (AV, IPS, etc.) to the VAP. Valid values: disable, enable.
Vdom string
Vdom.
VlanAuto string
Enable/disable automatic management of SSID VLAN interface. Valid values: disable, enable.
VlanPooling string
Enable/disable VLAN pooling, to allow grouping of multiple wireless controller VLANs into VLAN pools (default = disable). When set to wtp-group, VLAN pooling occurs with VLAN assignment by wtp-group. Valid values: wtp-group, round-robin, hash, disable.
Vlanid double
Optional VLAN ID.
VoiceEnterprise string
Enable/disable 802.11k and 802.11v assisted Voice-Enterprise roaming (default = disable). Valid values: disable, enable.
WebfilterProfile string
WebFilter profile name.
_centmgmt string
_Centmgmt. Valid values: disable, enable.
_dhcpSvrId string
_Dhcp_Svr_Id.
_intfAllowaccesses List<string>
_Intf_Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, fgfm, auto-ipsec, radius-acct, probe-response, capwap.
_intfDeviceAccessList string
_Intf_Device-Access-List.
_intfDeviceIdentification string
_Intf_Device-Identification. Valid values: disable, enable.
_intfDeviceNetscan string
_Intf_Device-Netscan. Valid values: disable, enable.
_intfDhcp6RelayIp string
_Intf_Dhcp6-Relay-Ip.
_intfDhcp6RelayService string
_Intf_Dhcp6-Relay-Service. Valid values: disable, enable.
_intfDhcp6RelayType string
_Intf_Dhcp6-Relay-Type. Valid values: regular.
_intfDhcpRelayIps List<string>
_Intf_Dhcp-Relay-Ip.
_intfDhcpRelayService string
_Intf_Dhcp-Relay-Service. Valid values: disable, enable.
_intfDhcpRelayType string
_Intf_Dhcp-Relay-Type. Valid values: regular, ipsec.
_intfIp string
_Intf_Ip.
_intfIp6Address string
_Intf_Ip6-Address.
_intfIp6Allowaccesses List<string>
_Intf_Ip6-Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, any, fgfm, capwap.
_intfListenForticlientConnection string
_Intf_Listen-Forticlient-Connection. Valid values: disable, enable.
_isFactorySetting string
_Is_Factory_Setting. Valid values: disable, enable, ext.
_scopes List<ObjectWirelesscontrollerVapDynamicMapping_Scope>
_Scope. The structure of _scope block is documented below.
Vap This property is required. string
Vap.
AccessControlList string
Access-Control-List.
AcctInterimInterval float64
WiFi RADIUS accounting interim interval (60 - 86400 sec, default = 0).
AdditionalAkms []string
Additional-Akms. Valid values: akm6.
AddressGroup string
Address group ID.
AddressGroupPolicy string
Address-Group-Policy. Valid values: disable, allow, deny.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
Alias string
Alias.
AntivirusProfile string
AntiVirus profile name.
ApplicationDetectionEngine string
Application-Detection-Engine. Valid values: disable, enable.
ApplicationDscpMarking string
Enable/disable application attribute based DSCP marking (default = disable). Valid values: disable, enable.
ApplicationList string
Application control list name.
ApplicationReportIntv float64
Application-Report-Intv.
AtfWeight float64
Airtime weight in percentage (default = 20).
Auth string
Authentication protocol. Valid values: PSK, psk, RADIUS, radius, usergroup.
AuthCert string
HTTPS server certificate.
AuthPortalAddr string
Address of captive portal.
BeaconAdvertisings []string
Fortinet beacon advertising IE data (default = empty). Valid values: name, model, serial-number.
BroadcastSsid string
Enable/disable broadcasting the SSID (default = enable). Valid values: disable, enable.
BroadcastSuppressions []string
Optional suppression of broadcast messages. For example, you can keep DHCP messages, ARP broadcasts, and so on off of the wireless network. Valid values: dhcp, arp, dhcp2, arp2, netbios-ns, netbios-ds, arp3, dhcp-up, dhcp-down, arp-known, arp-unknown, arp-reply, ipv6, dhcp-starvation, arp-poison, all-other-mc, all-other-bc, arp-proxy, dhcp-ucast.
BssColorPartial string
Bss-Color-Partial. Valid values: disable, enable.
BstmDisassociationImminent string
Bstm-Disassociation-Imminent. Valid values: disable, enable.
BstmLoadBalancingDisassocTimer float64
Bstm-Load-Balancing-Disassoc-Timer.
BstmRssiDisassocTimer float64
Bstm-Rssi-Disassoc-Timer.
CaptivePortalAcName string
Local-bridging captive portal ac-name.
CaptivePortalAuthTimeout float64
Captive-Portal-Auth-Timeout.
CaptivePortalFwAccounting string
Enable/disable RADIUS accounting for captive portal firewall authentication session. Valid values: disable, enable.
CaptivePortalMacauthRadiusSecrets []string
Secret key to access the macauth RADIUS server.
CaptivePortalMacauthRadiusServer string
Captive portal external RADIUS server domain name or IP address.
CaptivePortalRadiusSecrets []string
Secret key to access the RADIUS server.
CaptivePortalRadiusServer string
Captive portal RADIUS server domain name or IP address.
CaptivePortalSessionTimeoutInterval float64
Session timeout interval (0 - 864000 sec, default = 0).
ClientCount float64
Client-Count.
DhcpAddressEnforcement string
Dhcp-Address-Enforcement. Valid values: disable, enable.
DhcpLeaseTime float64
DHCP lease time in seconds for NAT IP address.
DhcpOption43Insertion string
Dhcp-Option43-Insertion. Valid values: disable, enable.
DhcpOption82CircuitIdInsertion string
Enable/disable DHCP option 82 circuit-id insert (default = disable). Valid values: disable, style-1, style-2, style-3.
DhcpOption82Insertion string
Enable/disable DHCP option 82 insert (default = disable). Valid values: disable, enable.
DhcpOption82RemoteIdInsertion string
Enable/disable DHCP option 82 remote-id insert (default = disable). Valid values: disable, style-1.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
DynamicVlan string
Enable/disable dynamic VLAN assignment. Valid values: disable, enable.
EapReauth string
Enable/disable EAP re-authentication for WPA-Enterprise security. Valid values: disable, enable.
EapReauthIntv float64
EAP re-authentication interval (1800 - 864000 sec, default = 86400).
EapolKeyRetries string
Enable/disable retransmission of EAPOL-Key frames (message 3/4 and group message 1/2) (default = enable). Valid values: disable, enable.
Encrypt string
Encryption protocol to use (only available when security is set to a WPA type). Valid values: TKIP, AES, TKIP-AES.
ExternalFastRoaming string
Enable/disable fast roaming or pre-authentication with external APs not managed by the FortiGate (default = disable). Valid values: disable, enable.
ExternalLogout string
URL of external authentication logout server.
ExternalWeb string
URL of external authentication web server.
ExternalWebFormat string
URL query parameter detection (default = auto-detect). Valid values: auto-detect, no-query-string, partial-query-string.
FastBssTransition string
Enable/disable 802.11r Fast BSS Transition (FT) (default = disable). Valid values: disable, enable.
FastRoaming string
Enable/disable fast-roaming, or pre-authentication, where supported by clients (default = disable). Valid values: disable, enable.
FtMobilityDomain float64
Mobility domain identifier in FT (1 - 65535, default = 1000).
FtOverDs string
Enable/disable FT over the Distribution System (DS). Valid values: disable, enable.
FtR0KeyLifetime float64
Lifetime of the PMK-R0 key in FT, 1-65535 minutes.
GasComebackDelay float64
Gas-Comeback-Delay.
GasFragmentationLimit float64
Gas-Fragmentation-Limit.
GtkRekey string
Enable/disable GTK rekey for WPA security. Valid values: disable, enable.
GtkRekeyIntv float64
GTK rekey interval (1800 - 864000 sec, default = 86400).
HighEfficiency string
Enable/disable 802.11ax high efficiency (default = enable). Valid values: disable, enable.
Hotspot20Profile string
Hotspot 2.0 profile name.
IgmpSnooping string
Igmp-Snooping. Valid values: disable, enable.
IntraVapPrivacy string
Enable/disable blocking communication between clients on the same SSID (called intra-SSID privacy) (default = disable). Valid values: disable, enable.
Ip string
IP address and subnet mask for the local standalone NAT subnet.
IpsSensor string
IPS sensor name.
Ipv6Rules []string
Ipv6-Rules. Valid values: drop-icmp6ra, drop-icmp6rs, drop-llmnr6, drop-icmp6mld2, drop-dhcp6s, drop-dhcp6c, ndp-proxy, drop-ns-dad, drop-ns-nondad.
Keyindex float64
WEP key index (1 - 4).
Keys []string
WEP Key.
L3Roaming string
L3-Roaming. Valid values: disable, enable.
L3RoamingMode string
Select the way that layer 3 roaming traffic is passed (default = direct). Valid values: direct, indirect.
Ldpc string
VAP low-density parity-check (LDPC) coding configuration. Valid values: disable, tx, rx, rxtx.
LocalAuthentication string
Enable/disable AP local authentication. Valid values: disable, enable.
LocalBridging string
Enable/disable bridging of wireless and Ethernet interfaces on the FortiAP (default = disable). Valid values: disable, enable.
LocalLan string
Allow/deny traffic destined for a Class A, B, or C private IP address (default = allow). Valid values: deny, allow.
LocalStandalone string
Enable/disable AP local standalone (default = disable). Valid values: disable, enable.
LocalStandaloneDns string
Enable/disable AP local standalone DNS. Valid values: disable, enable.
LocalStandaloneDnsIps []string
IPv4 addresses for the local standalone DNS.
LocalStandaloneNat string
Enable/disable AP local standalone NAT mode. Valid values: disable, enable.
LocalSwitching string
Local-Switching. Valid values: disable, enable.
MacAuthBypass string
Enable/disable MAC authentication bypass. Valid values: disable, enable.
MacCalledStationDelimiter string
Mac-Called-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MacCallingStationDelimiter string
Mac-Calling-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MacCase string
Mac-Case. Valid values: uppercase, lowercase.
MacFilter string
Enable/disable MAC filtering to block wireless clients by mac address. Valid values: disable, enable.
MacFilterPolicyOther string
Allow or block clients with MAC addresses that are not in the filter list. Valid values: deny, allow.
MacPasswordDelimiter string
Mac-Password-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MacUsernameDelimiter string
Mac-Username-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MaxClients float64
Maximum number of clients that can connect simultaneously to the VAP (default = 0, meaning no limitation).
MaxClientsAp float64
Maximum number of clients that can connect simultaneously to the VAP per AP radio (default = 0, meaning no limitation).
Mbo string
Mbo. Valid values: disable, enable.
MboCellDataConnPref string
Mbo-Cell-Data-Conn-Pref. Valid values: excluded, prefer-not, prefer-use.
MeDisableThresh float64
Disable multicast enhancement when this many clients are receiving multicast traffic.
MeshBackhaul string
Enable/disable using this VAP as a WiFi mesh backhaul (default = disable). This entry is only available when security is set to a WPA type or open. Valid values: disable, enable.
Mpsk string
Enable/disable multiple PSK authentication. Valid values: disable, enable.
MpskConcurrentClients float64
Maximum number of concurrent clients that connect using the same passphrase in multiple PSK authentication (0 - 65535, default = 0, meaning no limitation).
MpskProfile string
Mpsk-Profile.
MuMimo string
Enable/disable Multi-user MIMO (default = enable). Valid values: disable, enable.
MulticastEnhance string
Enable/disable converting multicast to unicast to improve performance (default = disable). Valid values: disable, enable.
MulticastRate string
Multicast rate (0, 6000, 12000, or 24000 kbps, default = 0). Valid values: 0, 6000, 12000, 24000.
N80211k string
Enable/disable 802.11k assisted roaming (default = enable). Valid values: disable, enable.
N80211v string
Enable/disable 802.11v assisted roaming (default = enable). Valid values: disable, enable.
Nac string
Nac. Valid values: disable, enable.
NacProfile string
Nac-Profile.
NeighborReportDualBand string
Neighbor-Report-Dual-Band. Valid values: disable, enable.
ObjectWirelesscontrollerVapDynamicMappingId string
an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
Okc string
Enable/disable Opportunistic Key Caching (OKC) (default = enable). Valid values: disable, enable.
Osen string
Enable/disable OSEN as part of key management (default = disable). Valid values: disable, enable.
OweGroups []string
OWE-Groups. Valid values: 19, 20, 21.
OweTransition string
Enable/disable OWE transition mode support. Valid values: disable, enable.
OweTransitionSsid string
OWE transition mode peer SSID.
Passphrases []string
WPA pre-shared key (PSK) to be used to authenticate WiFi users.
Pmf string
Protected Management Frames (PMF) support (default = disable). Valid values: disable, enable, optional.
PmfAssocComebackTimeout float64
Protected Management Frames (PMF) comeback maximum timeout (1-20 sec).
PmfSaQueryRetryTimeout float64
Protected Management Frames (PMF) SA query retry timeout interval (1 - 5 100s of msec).
PortMacauth string
Port-Macauth. Valid values: disable, radius, address-group.
PortMacauthReauthTimeout float64
Port-Macauth-Reauth-Timeout.
PortMacauthTimeout float64
Port-Macauth-Timeout.
PortalMessageOverrideGroup string
Replacement message group for this VAP (only available when security is set to a captive portal type).
PortalType string
Captive portal functionality. Configure how the captive portal authenticates users and whether it includes a disclaimer. Valid values: auth, auth+disclaimer, disclaimer, email-collect, cmcc, cmcc-macauth, auth-mac, external-auth.
PrimaryWagProfile string
Primary wireless access gateway profile name.
ProbeRespSuppression string
Enable/disable probe response suppression (to ignore weak signals) (default = disable). Valid values: disable, enable.
ProbeRespThreshold string
Minimum signal level/threshold in dBm required for the AP response to probe requests (-95 to -20, default = -80).
PtkRekey string
Enable/disable PTK rekey for WPA-Enterprise security. Valid values: disable, enable.
PtkRekeyIntv float64
PTK rekey interval (1800 - 864000 sec, default = 86400).
QosProfile string
Quality of service profile name.
Quarantine string
Enable/disable station quarantine (default = enable). Valid values: disable, enable.
Radio2gThreshold string
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 2.4G band (-95 to -20, default = -79).
Radio5gThreshold string
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 5G band(-95 to -20, default = -76).
RadioSensitivity string
Enable/disable software radio sensitivity (to ignore weak signals) (default = disable). Valid values: disable, enable.
RadiusMacAuth string
Enable/disable RADIUS-based MAC authentication of clients (default = disable). Valid values: disable, enable.
RadiusMacAuthBlockInterval float64
Don't send RADIUS MAC auth request again if the client has been rejected within specific interval (0 or 30 - 864000 seconds, default = 0, 0 to disable blocking).
RadiusMacAuthServer string
RADIUS-based MAC authentication server.
RadiusMacAuthUsergroups []string
Selective user groups that are permitted for RADIUS mac authentication.
RadiusMacMpskAuth string
Enable/disable RADIUS-based MAC authentication of clients for MPSK authentication (default = disable). Valid values: disable, enable.
RadiusMacMpskTimeout float64
RADIUS MAC MPSK cache timeout interval (1800 - 864000, default = 86400).
RadiusServer string
RADIUS server to be used to authenticate WiFi users.
Rates11acMcsMap string
Comma separated list of max supported VHT MCS for spatial streams 1 through 8.
Rates11acSs12s []string
Allowed data rates for 802.11ac/ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/1, mcs11/1, mcs10/2, mcs11/2.
Rates11acSs34s []string
Allowed data rates for 802.11ac/ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/3, mcs11/3, mcs10/4, mcs11/4.
Rates11as []string
Allowed data rates for 802.11a. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
Rates11axMcsMap string
Comma separated list of max supported HE MCS for spatial streams 1 through 8.
Rates11axSs12s []string
Allowed data rates for 802.11ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs10/1, mcs11/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/2, mcs11/2.
Rates11axSs34s []string
Allowed data rates for 802.11ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs10/3, mcs11/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/4, mcs11/4.
Rates11bgs []string
Allowed data rates for 802.11b/g. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
Rates11nSs12s []string
Allowed data rates for 802.11n with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/2, mcs9/2, mcs10/2, mcs11/2, mcs12/2, mcs13/2, mcs14/2, mcs15/2.
Rates11nSs34s []string
Allowed data rates for 802.11n with 3 or 4 spatial streams. Valid values: mcs16/3, mcs17/3, mcs18/3, mcs19/3, mcs20/3, mcs21/3, mcs22/3, mcs23/3, mcs24/4, mcs25/4, mcs26/4, mcs27/4, mcs28/4, mcs29/4, mcs30/4, mcs31/4.
RoamingAcctInterimUpdate string
Enable/disable using accounting interim update instead of accounting start/stop on roaming for WPA-Enterprise security. Valid values: disable, enable.
SaeGroups []string
SAE-Groups. Valid values: 1, 2, 5, 14, 15, 16, 17, 18, 19, 20, 21, 27, 28, 29, 30, 31.
SaeH2eOnly string
Use hash-to-element-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
SaeHnpOnly string
Use hunting-and-pecking-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
SaePasswords []string
WPA3 SAE password to be used to authenticate WiFi users.
SaePk string
Enable/disable WPA3 SAE-PK (default = disable). Valid values: disable, enable.
SaePrivateKey string
Private key used for WPA3 SAE-PK authentication.
ScanBotnetConnections string
Block or monitor connections to Botnet servers or disable Botnet scanning. Valid values: disable, block, monitor.
Schedule string
Firewall schedules for enabling this VAP on the FortiAP. This VAP will be enabled when at least one of the schedules is valid. Separate multiple schedule names with a space.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SecondaryWagProfile string
Secondary wireless access gateway profile name.
Security string
Security mode for the wireless interface (default = wpa2-only-personal). Valid values: None, WEP64, wep64, WEP128, wep128, WPA_PSK, WPA_RADIUS, WPA, WPA2, WPA2_AUTO, open, wpa-personal, wpa-enterprise, captive-portal, wpa-only-personal, wpa-only-enterprise, wpa2-only-personal, wpa2-only-enterprise, wpa-personal+captive-portal, wpa-only-personal+captive-portal, wpa2-only-personal+captive-portal, osen, wpa3-enterprise, sae, sae-transition, owe, wpa3-sae, wpa3-sae-transition.
SecurityExemptList string
Optional security exempt list for captive portal authentication.
SecurityObsoleteOption string
Enable/disable obsolete security options. Valid values: disable, enable.
SecurityRedirectUrl string
Optional URL for redirecting users after they pass captive portal authentication.
SelectedUsergroups string
Selective user groups that are permitted to authenticate.
SplitTunneling string
Enable/disable split tunneling (default = disable). Valid values: disable, enable.
Ssid string
IEEE 802.11 service set identifier (SSID) for the wireless interface. Users who wish to use the wireless network must configure their computers to access this SSID name.
StickyClientRemove string
Sticky-Client-Remove. Valid values: disable, enable.
StickyClientThreshold2g string
Sticky-Client-Threshold-2G.
StickyClientThreshold5g string
Sticky-Client-Threshold-5G.
StickyClientThreshold6g string
Minimum signal level/threshold in dBm required for the 6G client to be serviced by the AP (-95 to -20, default = -76).
TargetWakeTime string
Enable/disable 802.11ax target wake time (default = enable). Valid values: disable, enable.
TkipCounterMeasure string
Enable/disable TKIP counter measure. Valid values: disable, enable.
TunnelEchoInterval float64
The time interval to send echo to both primary and secondary tunnel peers (1 - 65535 sec, default = 300).
TunnelFallbackInterval float64
The time interval for secondary tunnel to fall back to primary tunnel (0 - 65535 sec, default = 7200).
Usergroup string
Firewall user group to be used to authenticate WiFi users.
UtmLog string
Enable/disable UTM logging. Valid values: disable, enable.
UtmProfile string
UTM profile name.
UtmStatus string
Enable to add one or more security profiles (AV, IPS, etc.) to the VAP. Valid values: disable, enable.
Vdom string
Vdom.
VlanAuto string
Enable/disable automatic management of SSID VLAN interface. Valid values: disable, enable.
VlanPooling string
Enable/disable VLAN pooling, to allow grouping of multiple wireless controller VLANs into VLAN pools (default = disable). When set to wtp-group, VLAN pooling occurs with VLAN assignment by wtp-group. Valid values: wtp-group, round-robin, hash, disable.
Vlanid float64
Optional VLAN ID.
VoiceEnterprise string
Enable/disable 802.11k and 802.11v assisted Voice-Enterprise roaming (default = disable). Valid values: disable, enable.
WebfilterProfile string
WebFilter profile name.
_centmgmt string
_Centmgmt. Valid values: disable, enable.
_dhcpSvrId string
_Dhcp_Svr_Id.
_intfAllowaccesses []string
_Intf_Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, fgfm, auto-ipsec, radius-acct, probe-response, capwap.
_intfDeviceAccessList string
_Intf_Device-Access-List.
_intfDeviceIdentification string
_Intf_Device-Identification. Valid values: disable, enable.
_intfDeviceNetscan string
_Intf_Device-Netscan. Valid values: disable, enable.
_intfDhcp6RelayIp string
_Intf_Dhcp6-Relay-Ip.
_intfDhcp6RelayService string
_Intf_Dhcp6-Relay-Service. Valid values: disable, enable.
_intfDhcp6RelayType string
_Intf_Dhcp6-Relay-Type. Valid values: regular.
_intfDhcpRelayIps []string
_Intf_Dhcp-Relay-Ip.
_intfDhcpRelayService string
_Intf_Dhcp-Relay-Service. Valid values: disable, enable.
_intfDhcpRelayType string
_Intf_Dhcp-Relay-Type. Valid values: regular, ipsec.
_intfIp string
_Intf_Ip.
_intfIp6Address string
_Intf_Ip6-Address.
_intfIp6Allowaccesses []string
_Intf_Ip6-Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, any, fgfm, capwap.
_intfListenForticlientConnection string
_Intf_Listen-Forticlient-Connection. Valid values: disable, enable.
_isFactorySetting string
_Is_Factory_Setting. Valid values: disable, enable, ext.
_scopes []ObjectWirelesscontrollerVapDynamicMapping_ScopeArgs
_Scope. The structure of _scope block is documented below.
vap This property is required. String
Vap.
_centmgmt String
_Centmgmt. Valid values: disable, enable.
_dhcpSvrId String
_Dhcp_Svr_Id.
_intfAllowaccesses List<String>
_Intf_Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, fgfm, auto-ipsec, radius-acct, probe-response, capwap.
_intfDeviceAccessList String
_Intf_Device-Access-List.
_intfDeviceIdentification String
_Intf_Device-Identification. Valid values: disable, enable.
_intfDeviceNetscan String
_Intf_Device-Netscan. Valid values: disable, enable.
_intfDhcp6RelayIp String
_Intf_Dhcp6-Relay-Ip.
_intfDhcp6RelayService String
_Intf_Dhcp6-Relay-Service. Valid values: disable, enable.
_intfDhcp6RelayType String
_Intf_Dhcp6-Relay-Type. Valid values: regular.
_intfDhcpRelayIps List<String>
_Intf_Dhcp-Relay-Ip.
_intfDhcpRelayService String
_Intf_Dhcp-Relay-Service. Valid values: disable, enable.
_intfDhcpRelayType String
_Intf_Dhcp-Relay-Type. Valid values: regular, ipsec.
_intfIp String
_Intf_Ip.
_intfIp6Address String
_Intf_Ip6-Address.
_intfIp6Allowaccesses List<String>
_Intf_Ip6-Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, any, fgfm, capwap.
_intfListenForticlientConnection String
_Intf_Listen-Forticlient-Connection. Valid values: disable, enable.
_isFactorySetting String
_Is_Factory_Setting. Valid values: disable, enable, ext.
_scopes List<ObjectWirelesscontrollerVapDynamicMapping_Scope>
_Scope. The structure of _scope block is documented below.
accessControlList String
Access-Control-List.
acctInterimInterval Double
WiFi RADIUS accounting interim interval (60 - 86400 sec, default = 0).
additionalAkms List<String>
Additional-Akms. Valid values: akm6.
addressGroup String
Address group ID.
addressGroupPolicy String
Address-Group-Policy. Valid values: disable, allow, deny.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
alias String
Alias.
antivirusProfile String
AntiVirus profile name.
applicationDetectionEngine String
Application-Detection-Engine. Valid values: disable, enable.
applicationDscpMarking String
Enable/disable application attribute based DSCP marking (default = disable). Valid values: disable, enable.
applicationList String
Application control list name.
applicationReportIntv Double
Application-Report-Intv.
atfWeight Double
Airtime weight in percentage (default = 20).
auth String
Authentication protocol. Valid values: PSK, psk, RADIUS, radius, usergroup.
authCert String
HTTPS server certificate.
authPortalAddr String
Address of captive portal.
beaconAdvertisings List<String>
Fortinet beacon advertising IE data (default = empty). Valid values: name, model, serial-number.
broadcastSsid String
Enable/disable broadcasting the SSID (default = enable). Valid values: disable, enable.
broadcastSuppressions List<String>
Optional suppression of broadcast messages. For example, you can keep DHCP messages, ARP broadcasts, and so on off of the wireless network. Valid values: dhcp, arp, dhcp2, arp2, netbios-ns, netbios-ds, arp3, dhcp-up, dhcp-down, arp-known, arp-unknown, arp-reply, ipv6, dhcp-starvation, arp-poison, all-other-mc, all-other-bc, arp-proxy, dhcp-ucast.
bssColorPartial String
Bss-Color-Partial. Valid values: disable, enable.
bstmDisassociationImminent String
Bstm-Disassociation-Imminent. Valid values: disable, enable.
bstmLoadBalancingDisassocTimer Double
Bstm-Load-Balancing-Disassoc-Timer.
bstmRssiDisassocTimer Double
Bstm-Rssi-Disassoc-Timer.
captivePortalAcName String
Local-bridging captive portal ac-name.
captivePortalAuthTimeout Double
Captive-Portal-Auth-Timeout.
captivePortalFwAccounting String
Enable/disable RADIUS accounting for captive portal firewall authentication session. Valid values: disable, enable.
captivePortalMacauthRadiusSecrets List<String>
Secret key to access the macauth RADIUS server.
captivePortalMacauthRadiusServer String
Captive portal external RADIUS server domain name or IP address.
captivePortalRadiusSecrets List<String>
Secret key to access the RADIUS server.
captivePortalRadiusServer String
Captive portal RADIUS server domain name or IP address.
captivePortalSessionTimeoutInterval Double
Session timeout interval (0 - 864000 sec, default = 0).
clientCount Double
Client-Count.
dhcpAddressEnforcement String
Dhcp-Address-Enforcement. Valid values: disable, enable.
dhcpLeaseTime Double
DHCP lease time in seconds for NAT IP address.
dhcpOption43Insertion String
Dhcp-Option43-Insertion. Valid values: disable, enable.
dhcpOption82CircuitIdInsertion String
Enable/disable DHCP option 82 circuit-id insert (default = disable). Valid values: disable, style-1, style-2, style-3.
dhcpOption82Insertion String
Enable/disable DHCP option 82 insert (default = disable). Valid values: disable, enable.
dhcpOption82RemoteIdInsertion String
Enable/disable DHCP option 82 remote-id insert (default = disable). Valid values: disable, style-1.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
dynamicVlan String
Enable/disable dynamic VLAN assignment. Valid values: disable, enable.
eapReauth String
Enable/disable EAP re-authentication for WPA-Enterprise security. Valid values: disable, enable.
eapReauthIntv Double
EAP re-authentication interval (1800 - 864000 sec, default = 86400).
eapolKeyRetries String
Enable/disable retransmission of EAPOL-Key frames (message 3/4 and group message 1/2) (default = enable). Valid values: disable, enable.
encrypt String
Encryption protocol to use (only available when security is set to a WPA type). Valid values: TKIP, AES, TKIP-AES.
externalFastRoaming String
Enable/disable fast roaming or pre-authentication with external APs not managed by the FortiGate (default = disable). Valid values: disable, enable.
externalLogout String
URL of external authentication logout server.
externalWeb String
URL of external authentication web server.
externalWebFormat String
URL query parameter detection (default = auto-detect). Valid values: auto-detect, no-query-string, partial-query-string.
fastBssTransition String
Enable/disable 802.11r Fast BSS Transition (FT) (default = disable). Valid values: disable, enable.
fastRoaming String
Enable/disable fast-roaming, or pre-authentication, where supported by clients (default = disable). Valid values: disable, enable.
ftMobilityDomain Double
Mobility domain identifier in FT (1 - 65535, default = 1000).
ftOverDs String
Enable/disable FT over the Distribution System (DS). Valid values: disable, enable.
ftR0KeyLifetime Double
Lifetime of the PMK-R0 key in FT, 1-65535 minutes.
gasComebackDelay Double
Gas-Comeback-Delay.
gasFragmentationLimit Double
Gas-Fragmentation-Limit.
gtkRekey String
Enable/disable GTK rekey for WPA security. Valid values: disable, enable.
gtkRekeyIntv Double
GTK rekey interval (1800 - 864000 sec, default = 86400).
highEfficiency String
Enable/disable 802.11ax high efficiency (default = enable). Valid values: disable, enable.
hotspot20Profile String
Hotspot 2.0 profile name.
igmpSnooping String
Igmp-Snooping. Valid values: disable, enable.
intraVapPrivacy String
Enable/disable blocking communication between clients on the same SSID (called intra-SSID privacy) (default = disable). Valid values: disable, enable.
ip String
IP address and subnet mask for the local standalone NAT subnet.
ipsSensor String
IPS sensor name.
ipv6Rules List<String>
Ipv6-Rules. Valid values: drop-icmp6ra, drop-icmp6rs, drop-llmnr6, drop-icmp6mld2, drop-dhcp6s, drop-dhcp6c, ndp-proxy, drop-ns-dad, drop-ns-nondad.
keyindex Double
WEP key index (1 - 4).
keys List<String>
WEP Key.
l3Roaming String
L3-Roaming. Valid values: disable, enable.
l3RoamingMode String
Select the way that layer 3 roaming traffic is passed (default = direct). Valid values: direct, indirect.
ldpc String
VAP low-density parity-check (LDPC) coding configuration. Valid values: disable, tx, rx, rxtx.
localAuthentication String
Enable/disable AP local authentication. Valid values: disable, enable.
localBridging String
Enable/disable bridging of wireless and Ethernet interfaces on the FortiAP (default = disable). Valid values: disable, enable.
localLan String
Allow/deny traffic destined for a Class A, B, or C private IP address (default = allow). Valid values: deny, allow.
localStandalone String
Enable/disable AP local standalone (default = disable). Valid values: disable, enable.
localStandaloneDns String
Enable/disable AP local standalone DNS. Valid values: disable, enable.
localStandaloneDnsIps List<String>
IPv4 addresses for the local standalone DNS.
localStandaloneNat String
Enable/disable AP local standalone NAT mode. Valid values: disable, enable.
localSwitching String
Local-Switching. Valid values: disable, enable.
macAuthBypass String
Enable/disable MAC authentication bypass. Valid values: disable, enable.
macCalledStationDelimiter String
Mac-Called-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macCallingStationDelimiter String
Mac-Calling-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macCase String
Mac-Case. Valid values: uppercase, lowercase.
macFilter String
Enable/disable MAC filtering to block wireless clients by mac address. Valid values: disable, enable.
macFilterPolicyOther String
Allow or block clients with MAC addresses that are not in the filter list. Valid values: deny, allow.
macPasswordDelimiter String
Mac-Password-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macUsernameDelimiter String
Mac-Username-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
maxClients Double
Maximum number of clients that can connect simultaneously to the VAP (default = 0, meaning no limitation).
maxClientsAp Double
Maximum number of clients that can connect simultaneously to the VAP per AP radio (default = 0, meaning no limitation).
mbo String
Mbo. Valid values: disable, enable.
mboCellDataConnPref String
Mbo-Cell-Data-Conn-Pref. Valid values: excluded, prefer-not, prefer-use.
meDisableThresh Double
Disable multicast enhancement when this many clients are receiving multicast traffic.
meshBackhaul String
Enable/disable using this VAP as a WiFi mesh backhaul (default = disable). This entry is only available when security is set to a WPA type or open. Valid values: disable, enable.
mpsk String
Enable/disable multiple PSK authentication. Valid values: disable, enable.
mpskConcurrentClients Double
Maximum number of concurrent clients that connect using the same passphrase in multiple PSK authentication (0 - 65535, default = 0, meaning no limitation).
mpskProfile String
Mpsk-Profile.
muMimo String
Enable/disable Multi-user MIMO (default = enable). Valid values: disable, enable.
multicastEnhance String
Enable/disable converting multicast to unicast to improve performance (default = disable). Valid values: disable, enable.
multicastRate String
Multicast rate (0, 6000, 12000, or 24000 kbps, default = 0). Valid values: 0, 6000, 12000, 24000.
n80211k String
Enable/disable 802.11k assisted roaming (default = enable). Valid values: disable, enable.
n80211v String
Enable/disable 802.11v assisted roaming (default = enable). Valid values: disable, enable.
nac String
Nac. Valid values: disable, enable.
nacProfile String
Nac-Profile.
neighborReportDualBand String
Neighbor-Report-Dual-Band. Valid values: disable, enable.
objectWirelesscontrollerVapDynamicMappingId String
an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
okc String
Enable/disable Opportunistic Key Caching (OKC) (default = enable). Valid values: disable, enable.
osen String
Enable/disable OSEN as part of key management (default = disable). Valid values: disable, enable.
oweGroups List<String>
OWE-Groups. Valid values: 19, 20, 21.
oweTransition String
Enable/disable OWE transition mode support. Valid values: disable, enable.
oweTransitionSsid String
OWE transition mode peer SSID.
passphrases List<String>
WPA pre-shared key (PSK) to be used to authenticate WiFi users.
pmf String
Protected Management Frames (PMF) support (default = disable). Valid values: disable, enable, optional.
pmfAssocComebackTimeout Double
Protected Management Frames (PMF) comeback maximum timeout (1-20 sec).
pmfSaQueryRetryTimeout Double
Protected Management Frames (PMF) SA query retry timeout interval (1 - 5 100s of msec).
portMacauth String
Port-Macauth. Valid values: disable, radius, address-group.
portMacauthReauthTimeout Double
Port-Macauth-Reauth-Timeout.
portMacauthTimeout Double
Port-Macauth-Timeout.
portalMessageOverrideGroup String
Replacement message group for this VAP (only available when security is set to a captive portal type).
portalType String
Captive portal functionality. Configure how the captive portal authenticates users and whether it includes a disclaimer. Valid values: auth, auth+disclaimer, disclaimer, email-collect, cmcc, cmcc-macauth, auth-mac, external-auth.
primaryWagProfile String
Primary wireless access gateway profile name.
probeRespSuppression String
Enable/disable probe response suppression (to ignore weak signals) (default = disable). Valid values: disable, enable.
probeRespThreshold String
Minimum signal level/threshold in dBm required for the AP response to probe requests (-95 to -20, default = -80).
ptkRekey String
Enable/disable PTK rekey for WPA-Enterprise security. Valid values: disable, enable.
ptkRekeyIntv Double
PTK rekey interval (1800 - 864000 sec, default = 86400).
qosProfile String
Quality of service profile name.
quarantine String
Enable/disable station quarantine (default = enable). Valid values: disable, enable.
radio2gThreshold String
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 2.4G band (-95 to -20, default = -79).
radio5gThreshold String
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 5G band(-95 to -20, default = -76).
radioSensitivity String
Enable/disable software radio sensitivity (to ignore weak signals) (default = disable). Valid values: disable, enable.
radiusMacAuth String
Enable/disable RADIUS-based MAC authentication of clients (default = disable). Valid values: disable, enable.
radiusMacAuthBlockInterval Double
Don't send RADIUS MAC auth request again if the client has been rejected within specific interval (0 or 30 - 864000 seconds, default = 0, 0 to disable blocking).
radiusMacAuthServer String
RADIUS-based MAC authentication server.
radiusMacAuthUsergroups List<String>
Selective user groups that are permitted for RADIUS mac authentication.
radiusMacMpskAuth String
Enable/disable RADIUS-based MAC authentication of clients for MPSK authentication (default = disable). Valid values: disable, enable.
radiusMacMpskTimeout Double
RADIUS MAC MPSK cache timeout interval (1800 - 864000, default = 86400).
radiusServer String
RADIUS server to be used to authenticate WiFi users.
rates11acMcsMap String
Comma separated list of max supported VHT MCS for spatial streams 1 through 8.
rates11acSs12s List<String>
Allowed data rates for 802.11ac/ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/1, mcs11/1, mcs10/2, mcs11/2.
rates11acSs34s List<String>
Allowed data rates for 802.11ac/ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/3, mcs11/3, mcs10/4, mcs11/4.
rates11as List<String>
Allowed data rates for 802.11a. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11axMcsMap String
Comma separated list of max supported HE MCS for spatial streams 1 through 8.
rates11axSs12s List<String>
Allowed data rates for 802.11ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs10/1, mcs11/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/2, mcs11/2.
rates11axSs34s List<String>
Allowed data rates for 802.11ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs10/3, mcs11/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/4, mcs11/4.
rates11bgs List<String>
Allowed data rates for 802.11b/g. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11nSs12s List<String>
Allowed data rates for 802.11n with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/2, mcs9/2, mcs10/2, mcs11/2, mcs12/2, mcs13/2, mcs14/2, mcs15/2.
rates11nSs34s List<String>
Allowed data rates for 802.11n with 3 or 4 spatial streams. Valid values: mcs16/3, mcs17/3, mcs18/3, mcs19/3, mcs20/3, mcs21/3, mcs22/3, mcs23/3, mcs24/4, mcs25/4, mcs26/4, mcs27/4, mcs28/4, mcs29/4, mcs30/4, mcs31/4.
roamingAcctInterimUpdate String
Enable/disable using accounting interim update instead of accounting start/stop on roaming for WPA-Enterprise security. Valid values: disable, enable.
saeGroups List<String>
SAE-Groups. Valid values: 1, 2, 5, 14, 15, 16, 17, 18, 19, 20, 21, 27, 28, 29, 30, 31.
saeH2eOnly String
Use hash-to-element-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
saeHnpOnly String
Use hunting-and-pecking-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
saePasswords List<String>
WPA3 SAE password to be used to authenticate WiFi users.
saePk String
Enable/disable WPA3 SAE-PK (default = disable). Valid values: disable, enable.
saePrivateKey String
Private key used for WPA3 SAE-PK authentication.
scanBotnetConnections String
Block or monitor connections to Botnet servers or disable Botnet scanning. Valid values: disable, block, monitor.
schedule String
Firewall schedules for enabling this VAP on the FortiAP. This VAP will be enabled when at least one of the schedules is valid. Separate multiple schedule names with a space.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
secondaryWagProfile String
Secondary wireless access gateway profile name.
security String
Security mode for the wireless interface (default = wpa2-only-personal). Valid values: None, WEP64, wep64, WEP128, wep128, WPA_PSK, WPA_RADIUS, WPA, WPA2, WPA2_AUTO, open, wpa-personal, wpa-enterprise, captive-portal, wpa-only-personal, wpa-only-enterprise, wpa2-only-personal, wpa2-only-enterprise, wpa-personal+captive-portal, wpa-only-personal+captive-portal, wpa2-only-personal+captive-portal, osen, wpa3-enterprise, sae, sae-transition, owe, wpa3-sae, wpa3-sae-transition.
securityExemptList String
Optional security exempt list for captive portal authentication.
securityObsoleteOption String
Enable/disable obsolete security options. Valid values: disable, enable.
securityRedirectUrl String
Optional URL for redirecting users after they pass captive portal authentication.
selectedUsergroups String
Selective user groups that are permitted to authenticate.
splitTunneling String
Enable/disable split tunneling (default = disable). Valid values: disable, enable.
ssid String
IEEE 802.11 service set identifier (SSID) for the wireless interface. Users who wish to use the wireless network must configure their computers to access this SSID name.
stickyClientRemove String
Sticky-Client-Remove. Valid values: disable, enable.
stickyClientThreshold2g String
Sticky-Client-Threshold-2G.
stickyClientThreshold5g String
Sticky-Client-Threshold-5G.
stickyClientThreshold6g String
Minimum signal level/threshold in dBm required for the 6G client to be serviced by the AP (-95 to -20, default = -76).
targetWakeTime String
Enable/disable 802.11ax target wake time (default = enable). Valid values: disable, enable.
tkipCounterMeasure String
Enable/disable TKIP counter measure. Valid values: disable, enable.
tunnelEchoInterval Double
The time interval to send echo to both primary and secondary tunnel peers (1 - 65535 sec, default = 300).
tunnelFallbackInterval Double
The time interval for secondary tunnel to fall back to primary tunnel (0 - 65535 sec, default = 7200).
usergroup String
Firewall user group to be used to authenticate WiFi users.
utmLog String
Enable/disable UTM logging. Valid values: disable, enable.
utmProfile String
UTM profile name.
utmStatus String
Enable to add one or more security profiles (AV, IPS, etc.) to the VAP. Valid values: disable, enable.
vdom String
Vdom.
vlanAuto String
Enable/disable automatic management of SSID VLAN interface. Valid values: disable, enable.
vlanPooling String
Enable/disable VLAN pooling, to allow grouping of multiple wireless controller VLANs into VLAN pools (default = disable). When set to wtp-group, VLAN pooling occurs with VLAN assignment by wtp-group. Valid values: wtp-group, round-robin, hash, disable.
vlanid Double
Optional VLAN ID.
voiceEnterprise String
Enable/disable 802.11k and 802.11v assisted Voice-Enterprise roaming (default = disable). Valid values: disable, enable.
webfilterProfile String
WebFilter profile name.
vap This property is required. string
Vap.
_centmgmt string
_Centmgmt. Valid values: disable, enable.
_dhcpSvrId string
_Dhcp_Svr_Id.
_intfAllowaccesses string[]
_Intf_Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, fgfm, auto-ipsec, radius-acct, probe-response, capwap.
_intfDeviceAccessList string
_Intf_Device-Access-List.
_intfDeviceIdentification string
_Intf_Device-Identification. Valid values: disable, enable.
_intfDeviceNetscan string
_Intf_Device-Netscan. Valid values: disable, enable.
_intfDhcp6RelayIp string
_Intf_Dhcp6-Relay-Ip.
_intfDhcp6RelayService string
_Intf_Dhcp6-Relay-Service. Valid values: disable, enable.
_intfDhcp6RelayType string
_Intf_Dhcp6-Relay-Type. Valid values: regular.
_intfDhcpRelayIps string[]
_Intf_Dhcp-Relay-Ip.
_intfDhcpRelayService string
_Intf_Dhcp-Relay-Service. Valid values: disable, enable.
_intfDhcpRelayType string
_Intf_Dhcp-Relay-Type. Valid values: regular, ipsec.
_intfIp string
_Intf_Ip.
_intfIp6Address string
_Intf_Ip6-Address.
_intfIp6Allowaccesses string[]
_Intf_Ip6-Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, any, fgfm, capwap.
_intfListenForticlientConnection string
_Intf_Listen-Forticlient-Connection. Valid values: disable, enable.
_isFactorySetting string
_Is_Factory_Setting. Valid values: disable, enable, ext.
_scopes ObjectWirelesscontrollerVapDynamicMapping_Scope[]
_Scope. The structure of _scope block is documented below.
accessControlList string
Access-Control-List.
acctInterimInterval number
WiFi RADIUS accounting interim interval (60 - 86400 sec, default = 0).
additionalAkms string[]
Additional-Akms. Valid values: akm6.
addressGroup string
Address group ID.
addressGroupPolicy string
Address-Group-Policy. Valid values: disable, allow, deny.
adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
alias string
Alias.
antivirusProfile string
AntiVirus profile name.
applicationDetectionEngine string
Application-Detection-Engine. Valid values: disable, enable.
applicationDscpMarking string
Enable/disable application attribute based DSCP marking (default = disable). Valid values: disable, enable.
applicationList string
Application control list name.
applicationReportIntv number
Application-Report-Intv.
atfWeight number
Airtime weight in percentage (default = 20).
auth string
Authentication protocol. Valid values: PSK, psk, RADIUS, radius, usergroup.
authCert string
HTTPS server certificate.
authPortalAddr string
Address of captive portal.
beaconAdvertisings string[]
Fortinet beacon advertising IE data (default = empty). Valid values: name, model, serial-number.
broadcastSsid string
Enable/disable broadcasting the SSID (default = enable). Valid values: disable, enable.
broadcastSuppressions string[]
Optional suppression of broadcast messages. For example, you can keep DHCP messages, ARP broadcasts, and so on off of the wireless network. Valid values: dhcp, arp, dhcp2, arp2, netbios-ns, netbios-ds, arp3, dhcp-up, dhcp-down, arp-known, arp-unknown, arp-reply, ipv6, dhcp-starvation, arp-poison, all-other-mc, all-other-bc, arp-proxy, dhcp-ucast.
bssColorPartial string
Bss-Color-Partial. Valid values: disable, enable.
bstmDisassociationImminent string
Bstm-Disassociation-Imminent. Valid values: disable, enable.
bstmLoadBalancingDisassocTimer number
Bstm-Load-Balancing-Disassoc-Timer.
bstmRssiDisassocTimer number
Bstm-Rssi-Disassoc-Timer.
captivePortalAcName string
Local-bridging captive portal ac-name.
captivePortalAuthTimeout number
Captive-Portal-Auth-Timeout.
captivePortalFwAccounting string
Enable/disable RADIUS accounting for captive portal firewall authentication session. Valid values: disable, enable.
captivePortalMacauthRadiusSecrets string[]
Secret key to access the macauth RADIUS server.
captivePortalMacauthRadiusServer string
Captive portal external RADIUS server domain name or IP address.
captivePortalRadiusSecrets string[]
Secret key to access the RADIUS server.
captivePortalRadiusServer string
Captive portal RADIUS server domain name or IP address.
captivePortalSessionTimeoutInterval number
Session timeout interval (0 - 864000 sec, default = 0).
clientCount number
Client-Count.
dhcpAddressEnforcement string
Dhcp-Address-Enforcement. Valid values: disable, enable.
dhcpLeaseTime number
DHCP lease time in seconds for NAT IP address.
dhcpOption43Insertion string
Dhcp-Option43-Insertion. Valid values: disable, enable.
dhcpOption82CircuitIdInsertion string
Enable/disable DHCP option 82 circuit-id insert (default = disable). Valid values: disable, style-1, style-2, style-3.
dhcpOption82Insertion string
Enable/disable DHCP option 82 insert (default = disable). Valid values: disable, enable.
dhcpOption82RemoteIdInsertion string
Enable/disable DHCP option 82 remote-id insert (default = disable). Valid values: disable, style-1.
dynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
dynamicVlan string
Enable/disable dynamic VLAN assignment. Valid values: disable, enable.
eapReauth string
Enable/disable EAP re-authentication for WPA-Enterprise security. Valid values: disable, enable.
eapReauthIntv number
EAP re-authentication interval (1800 - 864000 sec, default = 86400).
eapolKeyRetries string
Enable/disable retransmission of EAPOL-Key frames (message 3/4 and group message 1/2) (default = enable). Valid values: disable, enable.
encrypt string
Encryption protocol to use (only available when security is set to a WPA type). Valid values: TKIP, AES, TKIP-AES.
externalFastRoaming string
Enable/disable fast roaming or pre-authentication with external APs not managed by the FortiGate (default = disable). Valid values: disable, enable.
externalLogout string
URL of external authentication logout server.
externalWeb string
URL of external authentication web server.
externalWebFormat string
URL query parameter detection (default = auto-detect). Valid values: auto-detect, no-query-string, partial-query-string.
fastBssTransition string
Enable/disable 802.11r Fast BSS Transition (FT) (default = disable). Valid values: disable, enable.
fastRoaming string
Enable/disable fast-roaming, or pre-authentication, where supported by clients (default = disable). Valid values: disable, enable.
ftMobilityDomain number
Mobility domain identifier in FT (1 - 65535, default = 1000).
ftOverDs string
Enable/disable FT over the Distribution System (DS). Valid values: disable, enable.
ftR0KeyLifetime number
Lifetime of the PMK-R0 key in FT, 1-65535 minutes.
gasComebackDelay number
Gas-Comeback-Delay.
gasFragmentationLimit number
Gas-Fragmentation-Limit.
gtkRekey string
Enable/disable GTK rekey for WPA security. Valid values: disable, enable.
gtkRekeyIntv number
GTK rekey interval (1800 - 864000 sec, default = 86400).
highEfficiency string
Enable/disable 802.11ax high efficiency (default = enable). Valid values: disable, enable.
hotspot20Profile string
Hotspot 2.0 profile name.
igmpSnooping string
Igmp-Snooping. Valid values: disable, enable.
intraVapPrivacy string
Enable/disable blocking communication between clients on the same SSID (called intra-SSID privacy) (default = disable). Valid values: disable, enable.
ip string
IP address and subnet mask for the local standalone NAT subnet.
ipsSensor string
IPS sensor name.
ipv6Rules string[]
Ipv6-Rules. Valid values: drop-icmp6ra, drop-icmp6rs, drop-llmnr6, drop-icmp6mld2, drop-dhcp6s, drop-dhcp6c, ndp-proxy, drop-ns-dad, drop-ns-nondad.
keyindex number
WEP key index (1 - 4).
keys string[]
WEP Key.
l3Roaming string
L3-Roaming. Valid values: disable, enable.
l3RoamingMode string
Select the way that layer 3 roaming traffic is passed (default = direct). Valid values: direct, indirect.
ldpc string
VAP low-density parity-check (LDPC) coding configuration. Valid values: disable, tx, rx, rxtx.
localAuthentication string
Enable/disable AP local authentication. Valid values: disable, enable.
localBridging string
Enable/disable bridging of wireless and Ethernet interfaces on the FortiAP (default = disable). Valid values: disable, enable.
localLan string
Allow/deny traffic destined for a Class A, B, or C private IP address (default = allow). Valid values: deny, allow.
localStandalone string
Enable/disable AP local standalone (default = disable). Valid values: disable, enable.
localStandaloneDns string
Enable/disable AP local standalone DNS. Valid values: disable, enable.
localStandaloneDnsIps string[]
IPv4 addresses for the local standalone DNS.
localStandaloneNat string
Enable/disable AP local standalone NAT mode. Valid values: disable, enable.
localSwitching string
Local-Switching. Valid values: disable, enable.
macAuthBypass string
Enable/disable MAC authentication bypass. Valid values: disable, enable.
macCalledStationDelimiter string
Mac-Called-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macCallingStationDelimiter string
Mac-Calling-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macCase string
Mac-Case. Valid values: uppercase, lowercase.
macFilter string
Enable/disable MAC filtering to block wireless clients by mac address. Valid values: disable, enable.
macFilterPolicyOther string
Allow or block clients with MAC addresses that are not in the filter list. Valid values: deny, allow.
macPasswordDelimiter string
Mac-Password-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macUsernameDelimiter string
Mac-Username-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
maxClients number
Maximum number of clients that can connect simultaneously to the VAP (default = 0, meaning no limitation).
maxClientsAp number
Maximum number of clients that can connect simultaneously to the VAP per AP radio (default = 0, meaning no limitation).
mbo string
Mbo. Valid values: disable, enable.
mboCellDataConnPref string
Mbo-Cell-Data-Conn-Pref. Valid values: excluded, prefer-not, prefer-use.
meDisableThresh number
Disable multicast enhancement when this many clients are receiving multicast traffic.
meshBackhaul string
Enable/disable using this VAP as a WiFi mesh backhaul (default = disable). This entry is only available when security is set to a WPA type or open. Valid values: disable, enable.
mpsk string
Enable/disable multiple PSK authentication. Valid values: disable, enable.
mpskConcurrentClients number
Maximum number of concurrent clients that connect using the same passphrase in multiple PSK authentication (0 - 65535, default = 0, meaning no limitation).
mpskProfile string
Mpsk-Profile.
muMimo string
Enable/disable Multi-user MIMO (default = enable). Valid values: disable, enable.
multicastEnhance string
Enable/disable converting multicast to unicast to improve performance (default = disable). Valid values: disable, enable.
multicastRate string
Multicast rate (0, 6000, 12000, or 24000 kbps, default = 0). Valid values: 0, 6000, 12000, 24000.
n80211k string
Enable/disable 802.11k assisted roaming (default = enable). Valid values: disable, enable.
n80211v string
Enable/disable 802.11v assisted roaming (default = enable). Valid values: disable, enable.
nac string
Nac. Valid values: disable, enable.
nacProfile string
Nac-Profile.
neighborReportDualBand string
Neighbor-Report-Dual-Band. Valid values: disable, enable.
objectWirelesscontrollerVapDynamicMappingId string
an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
okc string
Enable/disable Opportunistic Key Caching (OKC) (default = enable). Valid values: disable, enable.
osen string
Enable/disable OSEN as part of key management (default = disable). Valid values: disable, enable.
oweGroups string[]
OWE-Groups. Valid values: 19, 20, 21.
oweTransition string
Enable/disable OWE transition mode support. Valid values: disable, enable.
oweTransitionSsid string
OWE transition mode peer SSID.
passphrases string[]
WPA pre-shared key (PSK) to be used to authenticate WiFi users.
pmf string
Protected Management Frames (PMF) support (default = disable). Valid values: disable, enable, optional.
pmfAssocComebackTimeout number
Protected Management Frames (PMF) comeback maximum timeout (1-20 sec).
pmfSaQueryRetryTimeout number
Protected Management Frames (PMF) SA query retry timeout interval (1 - 5 100s of msec).
portMacauth string
Port-Macauth. Valid values: disable, radius, address-group.
portMacauthReauthTimeout number
Port-Macauth-Reauth-Timeout.
portMacauthTimeout number
Port-Macauth-Timeout.
portalMessageOverrideGroup string
Replacement message group for this VAP (only available when security is set to a captive portal type).
portalType string
Captive portal functionality. Configure how the captive portal authenticates users and whether it includes a disclaimer. Valid values: auth, auth+disclaimer, disclaimer, email-collect, cmcc, cmcc-macauth, auth-mac, external-auth.
primaryWagProfile string
Primary wireless access gateway profile name.
probeRespSuppression string
Enable/disable probe response suppression (to ignore weak signals) (default = disable). Valid values: disable, enable.
probeRespThreshold string
Minimum signal level/threshold in dBm required for the AP response to probe requests (-95 to -20, default = -80).
ptkRekey string
Enable/disable PTK rekey for WPA-Enterprise security. Valid values: disable, enable.
ptkRekeyIntv number
PTK rekey interval (1800 - 864000 sec, default = 86400).
qosProfile string
Quality of service profile name.
quarantine string
Enable/disable station quarantine (default = enable). Valid values: disable, enable.
radio2gThreshold string
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 2.4G band (-95 to -20, default = -79).
radio5gThreshold string
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 5G band(-95 to -20, default = -76).
radioSensitivity string
Enable/disable software radio sensitivity (to ignore weak signals) (default = disable). Valid values: disable, enable.
radiusMacAuth string
Enable/disable RADIUS-based MAC authentication of clients (default = disable). Valid values: disable, enable.
radiusMacAuthBlockInterval number
Don't send RADIUS MAC auth request again if the client has been rejected within specific interval (0 or 30 - 864000 seconds, default = 0, 0 to disable blocking).
radiusMacAuthServer string
RADIUS-based MAC authentication server.
radiusMacAuthUsergroups string[]
Selective user groups that are permitted for RADIUS mac authentication.
radiusMacMpskAuth string
Enable/disable RADIUS-based MAC authentication of clients for MPSK authentication (default = disable). Valid values: disable, enable.
radiusMacMpskTimeout number
RADIUS MAC MPSK cache timeout interval (1800 - 864000, default = 86400).
radiusServer string
RADIUS server to be used to authenticate WiFi users.
rates11acMcsMap string
Comma separated list of max supported VHT MCS for spatial streams 1 through 8.
rates11acSs12s string[]
Allowed data rates for 802.11ac/ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/1, mcs11/1, mcs10/2, mcs11/2.
rates11acSs34s string[]
Allowed data rates for 802.11ac/ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/3, mcs11/3, mcs10/4, mcs11/4.
rates11as string[]
Allowed data rates for 802.11a. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11axMcsMap string
Comma separated list of max supported HE MCS for spatial streams 1 through 8.
rates11axSs12s string[]
Allowed data rates for 802.11ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs10/1, mcs11/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/2, mcs11/2.
rates11axSs34s string[]
Allowed data rates for 802.11ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs10/3, mcs11/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/4, mcs11/4.
rates11bgs string[]
Allowed data rates for 802.11b/g. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11nSs12s string[]
Allowed data rates for 802.11n with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/2, mcs9/2, mcs10/2, mcs11/2, mcs12/2, mcs13/2, mcs14/2, mcs15/2.
rates11nSs34s string[]
Allowed data rates for 802.11n with 3 or 4 spatial streams. Valid values: mcs16/3, mcs17/3, mcs18/3, mcs19/3, mcs20/3, mcs21/3, mcs22/3, mcs23/3, mcs24/4, mcs25/4, mcs26/4, mcs27/4, mcs28/4, mcs29/4, mcs30/4, mcs31/4.
roamingAcctInterimUpdate string
Enable/disable using accounting interim update instead of accounting start/stop on roaming for WPA-Enterprise security. Valid values: disable, enable.
saeGroups string[]
SAE-Groups. Valid values: 1, 2, 5, 14, 15, 16, 17, 18, 19, 20, 21, 27, 28, 29, 30, 31.
saeH2eOnly string
Use hash-to-element-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
saeHnpOnly string
Use hunting-and-pecking-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
saePasswords string[]
WPA3 SAE password to be used to authenticate WiFi users.
saePk string
Enable/disable WPA3 SAE-PK (default = disable). Valid values: disable, enable.
saePrivateKey string
Private key used for WPA3 SAE-PK authentication.
scanBotnetConnections string
Block or monitor connections to Botnet servers or disable Botnet scanning. Valid values: disable, block, monitor.
schedule string
Firewall schedules for enabling this VAP on the FortiAP. This VAP will be enabled when at least one of the schedules is valid. Separate multiple schedule names with a space.
scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
secondaryWagProfile string
Secondary wireless access gateway profile name.
security string
Security mode for the wireless interface (default = wpa2-only-personal). Valid values: None, WEP64, wep64, WEP128, wep128, WPA_PSK, WPA_RADIUS, WPA, WPA2, WPA2_AUTO, open, wpa-personal, wpa-enterprise, captive-portal, wpa-only-personal, wpa-only-enterprise, wpa2-only-personal, wpa2-only-enterprise, wpa-personal+captive-portal, wpa-only-personal+captive-portal, wpa2-only-personal+captive-portal, osen, wpa3-enterprise, sae, sae-transition, owe, wpa3-sae, wpa3-sae-transition.
securityExemptList string
Optional security exempt list for captive portal authentication.
securityObsoleteOption string
Enable/disable obsolete security options. Valid values: disable, enable.
securityRedirectUrl string
Optional URL for redirecting users after they pass captive portal authentication.
selectedUsergroups string
Selective user groups that are permitted to authenticate.
splitTunneling string
Enable/disable split tunneling (default = disable). Valid values: disable, enable.
ssid string
IEEE 802.11 service set identifier (SSID) for the wireless interface. Users who wish to use the wireless network must configure their computers to access this SSID name.
stickyClientRemove string
Sticky-Client-Remove. Valid values: disable, enable.
stickyClientThreshold2g string
Sticky-Client-Threshold-2G.
stickyClientThreshold5g string
Sticky-Client-Threshold-5G.
stickyClientThreshold6g string
Minimum signal level/threshold in dBm required for the 6G client to be serviced by the AP (-95 to -20, default = -76).
targetWakeTime string
Enable/disable 802.11ax target wake time (default = enable). Valid values: disable, enable.
tkipCounterMeasure string
Enable/disable TKIP counter measure. Valid values: disable, enable.
tunnelEchoInterval number
The time interval to send echo to both primary and secondary tunnel peers (1 - 65535 sec, default = 300).
tunnelFallbackInterval number
The time interval for secondary tunnel to fall back to primary tunnel (0 - 65535 sec, default = 7200).
usergroup string
Firewall user group to be used to authenticate WiFi users.
utmLog string
Enable/disable UTM logging. Valid values: disable, enable.
utmProfile string
UTM profile name.
utmStatus string
Enable to add one or more security profiles (AV, IPS, etc.) to the VAP. Valid values: disable, enable.
vdom string
Vdom.
vlanAuto string
Enable/disable automatic management of SSID VLAN interface. Valid values: disable, enable.
vlanPooling string
Enable/disable VLAN pooling, to allow grouping of multiple wireless controller VLANs into VLAN pools (default = disable). When set to wtp-group, VLAN pooling occurs with VLAN assignment by wtp-group. Valid values: wtp-group, round-robin, hash, disable.
vlanid number
Optional VLAN ID.
voiceEnterprise string
Enable/disable 802.11k and 802.11v assisted Voice-Enterprise roaming (default = disable). Valid values: disable, enable.
webfilterProfile string
WebFilter profile name.
vap This property is required. str
Vap.
_centmgmt str
_Centmgmt. Valid values: disable, enable.
_dhcp_svr_id str
_Dhcp_Svr_Id.
_intf_allowaccesses Sequence[str]
_Intf_Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, fgfm, auto-ipsec, radius-acct, probe-response, capwap.
_intf_device_access_list str
_Intf_Device-Access-List.
_intf_device_identification str
_Intf_Device-Identification. Valid values: disable, enable.
_intf_device_netscan str
_Intf_Device-Netscan. Valid values: disable, enable.
_intf_dhcp6_relay_ip str
_Intf_Dhcp6-Relay-Ip.
_intf_dhcp6_relay_service str
_Intf_Dhcp6-Relay-Service. Valid values: disable, enable.
_intf_dhcp6_relay_type str
_Intf_Dhcp6-Relay-Type. Valid values: regular.
_intf_dhcp_relay_ips Sequence[str]
_Intf_Dhcp-Relay-Ip.
_intf_dhcp_relay_service str
_Intf_Dhcp-Relay-Service. Valid values: disable, enable.
_intf_dhcp_relay_type str
_Intf_Dhcp-Relay-Type. Valid values: regular, ipsec.
_intf_ip str
_Intf_Ip.
_intf_ip6_address str
_Intf_Ip6-Address.
_intf_ip6_allowaccesses Sequence[str]
_Intf_Ip6-Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, any, fgfm, capwap.
_intf_listen_forticlient_connection str
_Intf_Listen-Forticlient-Connection. Valid values: disable, enable.
_is_factory_setting str
_Is_Factory_Setting. Valid values: disable, enable, ext.
_scopes Sequence[ObjectWirelesscontrollerVapDynamicMapping_ScopeArgs]
_Scope. The structure of _scope block is documented below.
access_control_list str
Access-Control-List.
acct_interim_interval float
WiFi RADIUS accounting interim interval (60 - 86400 sec, default = 0).
additional_akms Sequence[str]
Additional-Akms. Valid values: akm6.
address_group str
Address group ID.
address_group_policy str
Address-Group-Policy. Valid values: disable, allow, deny.
adom str
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
alias str
Alias.
antivirus_profile str
AntiVirus profile name.
application_detection_engine str
Application-Detection-Engine. Valid values: disable, enable.
application_dscp_marking str
Enable/disable application attribute based DSCP marking (default = disable). Valid values: disable, enable.
application_list str
Application control list name.
application_report_intv float
Application-Report-Intv.
atf_weight float
Airtime weight in percentage (default = 20).
auth str
Authentication protocol. Valid values: PSK, psk, RADIUS, radius, usergroup.
auth_cert str
HTTPS server certificate.
auth_portal_addr str
Address of captive portal.
beacon_advertisings Sequence[str]
Fortinet beacon advertising IE data (default = empty). Valid values: name, model, serial-number.
broadcast_ssid str
Enable/disable broadcasting the SSID (default = enable). Valid values: disable, enable.
broadcast_suppressions Sequence[str]
Optional suppression of broadcast messages. For example, you can keep DHCP messages, ARP broadcasts, and so on off of the wireless network. Valid values: dhcp, arp, dhcp2, arp2, netbios-ns, netbios-ds, arp3, dhcp-up, dhcp-down, arp-known, arp-unknown, arp-reply, ipv6, dhcp-starvation, arp-poison, all-other-mc, all-other-bc, arp-proxy, dhcp-ucast.
bss_color_partial str
Bss-Color-Partial. Valid values: disable, enable.
bstm_disassociation_imminent str
Bstm-Disassociation-Imminent. Valid values: disable, enable.
bstm_load_balancing_disassoc_timer float
Bstm-Load-Balancing-Disassoc-Timer.
bstm_rssi_disassoc_timer float
Bstm-Rssi-Disassoc-Timer.
captive_portal_ac_name str
Local-bridging captive portal ac-name.
captive_portal_auth_timeout float
Captive-Portal-Auth-Timeout.
captive_portal_fw_accounting str
Enable/disable RADIUS accounting for captive portal firewall authentication session. Valid values: disable, enable.
captive_portal_macauth_radius_secrets Sequence[str]
Secret key to access the macauth RADIUS server.
captive_portal_macauth_radius_server str
Captive portal external RADIUS server domain name or IP address.
captive_portal_radius_secrets Sequence[str]
Secret key to access the RADIUS server.
captive_portal_radius_server str
Captive portal RADIUS server domain name or IP address.
captive_portal_session_timeout_interval float
Session timeout interval (0 - 864000 sec, default = 0).
client_count float
Client-Count.
dhcp_address_enforcement str
Dhcp-Address-Enforcement. Valid values: disable, enable.
dhcp_lease_time float
DHCP lease time in seconds for NAT IP address.
dhcp_option43_insertion str
Dhcp-Option43-Insertion. Valid values: disable, enable.
dhcp_option82_circuit_id_insertion str
Enable/disable DHCP option 82 circuit-id insert (default = disable). Valid values: disable, style-1, style-2, style-3.
dhcp_option82_insertion str
Enable/disable DHCP option 82 insert (default = disable). Valid values: disable, enable.
dhcp_option82_remote_id_insertion str
Enable/disable DHCP option 82 remote-id insert (default = disable). Valid values: disable, style-1.
dynamic_sort_subtable str
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
dynamic_vlan str
Enable/disable dynamic VLAN assignment. Valid values: disable, enable.
eap_reauth str
Enable/disable EAP re-authentication for WPA-Enterprise security. Valid values: disable, enable.
eap_reauth_intv float
EAP re-authentication interval (1800 - 864000 sec, default = 86400).
eapol_key_retries str
Enable/disable retransmission of EAPOL-Key frames (message 3/4 and group message 1/2) (default = enable). Valid values: disable, enable.
encrypt str
Encryption protocol to use (only available when security is set to a WPA type). Valid values: TKIP, AES, TKIP-AES.
external_fast_roaming str
Enable/disable fast roaming or pre-authentication with external APs not managed by the FortiGate (default = disable). Valid values: disable, enable.
external_logout str
URL of external authentication logout server.
external_web str
URL of external authentication web server.
external_web_format str
URL query parameter detection (default = auto-detect). Valid values: auto-detect, no-query-string, partial-query-string.
fast_bss_transition str
Enable/disable 802.11r Fast BSS Transition (FT) (default = disable). Valid values: disable, enable.
fast_roaming str
Enable/disable fast-roaming, or pre-authentication, where supported by clients (default = disable). Valid values: disable, enable.
ft_mobility_domain float
Mobility domain identifier in FT (1 - 65535, default = 1000).
ft_over_ds str
Enable/disable FT over the Distribution System (DS). Valid values: disable, enable.
ft_r0_key_lifetime float
Lifetime of the PMK-R0 key in FT, 1-65535 minutes.
gas_comeback_delay float
Gas-Comeback-Delay.
gas_fragmentation_limit float
Gas-Fragmentation-Limit.
gtk_rekey str
Enable/disable GTK rekey for WPA security. Valid values: disable, enable.
gtk_rekey_intv float
GTK rekey interval (1800 - 864000 sec, default = 86400).
high_efficiency str
Enable/disable 802.11ax high efficiency (default = enable). Valid values: disable, enable.
hotspot20_profile str
Hotspot 2.0 profile name.
igmp_snooping str
Igmp-Snooping. Valid values: disable, enable.
intra_vap_privacy str
Enable/disable blocking communication between clients on the same SSID (called intra-SSID privacy) (default = disable). Valid values: disable, enable.
ip str
IP address and subnet mask for the local standalone NAT subnet.
ips_sensor str
IPS sensor name.
ipv6_rules Sequence[str]
Ipv6-Rules. Valid values: drop-icmp6ra, drop-icmp6rs, drop-llmnr6, drop-icmp6mld2, drop-dhcp6s, drop-dhcp6c, ndp-proxy, drop-ns-dad, drop-ns-nondad.
keyindex float
WEP key index (1 - 4).
keys Sequence[str]
WEP Key.
l3_roaming str
L3-Roaming. Valid values: disable, enable.
l3_roaming_mode str
Select the way that layer 3 roaming traffic is passed (default = direct). Valid values: direct, indirect.
ldpc str
VAP low-density parity-check (LDPC) coding configuration. Valid values: disable, tx, rx, rxtx.
local_authentication str
Enable/disable AP local authentication. Valid values: disable, enable.
local_bridging str
Enable/disable bridging of wireless and Ethernet interfaces on the FortiAP (default = disable). Valid values: disable, enable.
local_lan str
Allow/deny traffic destined for a Class A, B, or C private IP address (default = allow). Valid values: deny, allow.
local_standalone str
Enable/disable AP local standalone (default = disable). Valid values: disable, enable.
local_standalone_dns str
Enable/disable AP local standalone DNS. Valid values: disable, enable.
local_standalone_dns_ips Sequence[str]
IPv4 addresses for the local standalone DNS.
local_standalone_nat str
Enable/disable AP local standalone NAT mode. Valid values: disable, enable.
local_switching str
Local-Switching. Valid values: disable, enable.
mac_auth_bypass str
Enable/disable MAC authentication bypass. Valid values: disable, enable.
mac_called_station_delimiter str
Mac-Called-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
mac_calling_station_delimiter str
Mac-Calling-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
mac_case str
Mac-Case. Valid values: uppercase, lowercase.
mac_filter str
Enable/disable MAC filtering to block wireless clients by mac address. Valid values: disable, enable.
mac_filter_policy_other str
Allow or block clients with MAC addresses that are not in the filter list. Valid values: deny, allow.
mac_password_delimiter str
Mac-Password-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
mac_username_delimiter str
Mac-Username-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
max_clients float
Maximum number of clients that can connect simultaneously to the VAP (default = 0, meaning no limitation).
max_clients_ap float
Maximum number of clients that can connect simultaneously to the VAP per AP radio (default = 0, meaning no limitation).
mbo str
Mbo. Valid values: disable, enable.
mbo_cell_data_conn_pref str
Mbo-Cell-Data-Conn-Pref. Valid values: excluded, prefer-not, prefer-use.
me_disable_thresh float
Disable multicast enhancement when this many clients are receiving multicast traffic.
mesh_backhaul str
Enable/disable using this VAP as a WiFi mesh backhaul (default = disable). This entry is only available when security is set to a WPA type or open. Valid values: disable, enable.
mpsk str
Enable/disable multiple PSK authentication. Valid values: disable, enable.
mpsk_concurrent_clients float
Maximum number of concurrent clients that connect using the same passphrase in multiple PSK authentication (0 - 65535, default = 0, meaning no limitation).
mpsk_profile str
Mpsk-Profile.
mu_mimo str
Enable/disable Multi-user MIMO (default = enable). Valid values: disable, enable.
multicast_enhance str
Enable/disable converting multicast to unicast to improve performance (default = disable). Valid values: disable, enable.
multicast_rate str
Multicast rate (0, 6000, 12000, or 24000 kbps, default = 0). Valid values: 0, 6000, 12000, 24000.
n80211k str
Enable/disable 802.11k assisted roaming (default = enable). Valid values: disable, enable.
n80211v str
Enable/disable 802.11v assisted roaming (default = enable). Valid values: disable, enable.
nac str
Nac. Valid values: disable, enable.
nac_profile str
Nac-Profile.
neighbor_report_dual_band str
Neighbor-Report-Dual-Band. Valid values: disable, enable.
object_wirelesscontroller_vap_dynamic_mapping_id str
an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
okc str
Enable/disable Opportunistic Key Caching (OKC) (default = enable). Valid values: disable, enable.
osen str
Enable/disable OSEN as part of key management (default = disable). Valid values: disable, enable.
owe_groups Sequence[str]
OWE-Groups. Valid values: 19, 20, 21.
owe_transition str
Enable/disable OWE transition mode support. Valid values: disable, enable.
owe_transition_ssid str
OWE transition mode peer SSID.
passphrases Sequence[str]
WPA pre-shared key (PSK) to be used to authenticate WiFi users.
pmf str
Protected Management Frames (PMF) support (default = disable). Valid values: disable, enable, optional.
pmf_assoc_comeback_timeout float
Protected Management Frames (PMF) comeback maximum timeout (1-20 sec).
pmf_sa_query_retry_timeout float
Protected Management Frames (PMF) SA query retry timeout interval (1 - 5 100s of msec).
port_macauth str
Port-Macauth. Valid values: disable, radius, address-group.
port_macauth_reauth_timeout float
Port-Macauth-Reauth-Timeout.
port_macauth_timeout float
Port-Macauth-Timeout.
portal_message_override_group str
Replacement message group for this VAP (only available when security is set to a captive portal type).
portal_type str
Captive portal functionality. Configure how the captive portal authenticates users and whether it includes a disclaimer. Valid values: auth, auth+disclaimer, disclaimer, email-collect, cmcc, cmcc-macauth, auth-mac, external-auth.
primary_wag_profile str
Primary wireless access gateway profile name.
probe_resp_suppression str
Enable/disable probe response suppression (to ignore weak signals) (default = disable). Valid values: disable, enable.
probe_resp_threshold str
Minimum signal level/threshold in dBm required for the AP response to probe requests (-95 to -20, default = -80).
ptk_rekey str
Enable/disable PTK rekey for WPA-Enterprise security. Valid values: disable, enable.
ptk_rekey_intv float
PTK rekey interval (1800 - 864000 sec, default = 86400).
qos_profile str
Quality of service profile name.
quarantine str
Enable/disable station quarantine (default = enable). Valid values: disable, enable.
radio2g_threshold str
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 2.4G band (-95 to -20, default = -79).
radio5g_threshold str
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 5G band(-95 to -20, default = -76).
radio_sensitivity str
Enable/disable software radio sensitivity (to ignore weak signals) (default = disable). Valid values: disable, enable.
radius_mac_auth str
Enable/disable RADIUS-based MAC authentication of clients (default = disable). Valid values: disable, enable.
radius_mac_auth_block_interval float
Don't send RADIUS MAC auth request again if the client has been rejected within specific interval (0 or 30 - 864000 seconds, default = 0, 0 to disable blocking).
radius_mac_auth_server str
RADIUS-based MAC authentication server.
radius_mac_auth_usergroups Sequence[str]
Selective user groups that are permitted for RADIUS mac authentication.
radius_mac_mpsk_auth str
Enable/disable RADIUS-based MAC authentication of clients for MPSK authentication (default = disable). Valid values: disable, enable.
radius_mac_mpsk_timeout float
RADIUS MAC MPSK cache timeout interval (1800 - 864000, default = 86400).
radius_server str
RADIUS server to be used to authenticate WiFi users.
rates11ac_mcs_map str
Comma separated list of max supported VHT MCS for spatial streams 1 through 8.
rates11ac_ss12s Sequence[str]
Allowed data rates for 802.11ac/ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/1, mcs11/1, mcs10/2, mcs11/2.
rates11ac_ss34s Sequence[str]
Allowed data rates for 802.11ac/ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/3, mcs11/3, mcs10/4, mcs11/4.
rates11as Sequence[str]
Allowed data rates for 802.11a. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11ax_mcs_map str
Comma separated list of max supported HE MCS for spatial streams 1 through 8.
rates11ax_ss12s Sequence[str]
Allowed data rates for 802.11ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs10/1, mcs11/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/2, mcs11/2.
rates11ax_ss34s Sequence[str]
Allowed data rates for 802.11ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs10/3, mcs11/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/4, mcs11/4.
rates11bgs Sequence[str]
Allowed data rates for 802.11b/g. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11n_ss12s Sequence[str]
Allowed data rates for 802.11n with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/2, mcs9/2, mcs10/2, mcs11/2, mcs12/2, mcs13/2, mcs14/2, mcs15/2.
rates11n_ss34s Sequence[str]
Allowed data rates for 802.11n with 3 or 4 spatial streams. Valid values: mcs16/3, mcs17/3, mcs18/3, mcs19/3, mcs20/3, mcs21/3, mcs22/3, mcs23/3, mcs24/4, mcs25/4, mcs26/4, mcs27/4, mcs28/4, mcs29/4, mcs30/4, mcs31/4.
roaming_acct_interim_update str
Enable/disable using accounting interim update instead of accounting start/stop on roaming for WPA-Enterprise security. Valid values: disable, enable.
sae_groups Sequence[str]
SAE-Groups. Valid values: 1, 2, 5, 14, 15, 16, 17, 18, 19, 20, 21, 27, 28, 29, 30, 31.
sae_h2e_only str
Use hash-to-element-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
sae_hnp_only str
Use hunting-and-pecking-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
sae_passwords Sequence[str]
WPA3 SAE password to be used to authenticate WiFi users.
sae_pk str
Enable/disable WPA3 SAE-PK (default = disable). Valid values: disable, enable.
sae_private_key str
Private key used for WPA3 SAE-PK authentication.
scan_botnet_connections str
Block or monitor connections to Botnet servers or disable Botnet scanning. Valid values: disable, block, monitor.
schedule str
Firewall schedules for enabling this VAP on the FortiAP. This VAP will be enabled when at least one of the schedules is valid. Separate multiple schedule names with a space.
scopetype str
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
secondary_wag_profile str
Secondary wireless access gateway profile name.
security str
Security mode for the wireless interface (default = wpa2-only-personal). Valid values: None, WEP64, wep64, WEP128, wep128, WPA_PSK, WPA_RADIUS, WPA, WPA2, WPA2_AUTO, open, wpa-personal, wpa-enterprise, captive-portal, wpa-only-personal, wpa-only-enterprise, wpa2-only-personal, wpa2-only-enterprise, wpa-personal+captive-portal, wpa-only-personal+captive-portal, wpa2-only-personal+captive-portal, osen, wpa3-enterprise, sae, sae-transition, owe, wpa3-sae, wpa3-sae-transition.
security_exempt_list str
Optional security exempt list for captive portal authentication.
security_obsolete_option str
Enable/disable obsolete security options. Valid values: disable, enable.
security_redirect_url str
Optional URL for redirecting users after they pass captive portal authentication.
selected_usergroups str
Selective user groups that are permitted to authenticate.
split_tunneling str
Enable/disable split tunneling (default = disable). Valid values: disable, enable.
ssid str
IEEE 802.11 service set identifier (SSID) for the wireless interface. Users who wish to use the wireless network must configure their computers to access this SSID name.
sticky_client_remove str
Sticky-Client-Remove. Valid values: disable, enable.
sticky_client_threshold2g str
Sticky-Client-Threshold-2G.
sticky_client_threshold5g str
Sticky-Client-Threshold-5G.
sticky_client_threshold6g str
Minimum signal level/threshold in dBm required for the 6G client to be serviced by the AP (-95 to -20, default = -76).
target_wake_time str
Enable/disable 802.11ax target wake time (default = enable). Valid values: disable, enable.
tkip_counter_measure str
Enable/disable TKIP counter measure. Valid values: disable, enable.
tunnel_echo_interval float
The time interval to send echo to both primary and secondary tunnel peers (1 - 65535 sec, default = 300).
tunnel_fallback_interval float
The time interval for secondary tunnel to fall back to primary tunnel (0 - 65535 sec, default = 7200).
usergroup str
Firewall user group to be used to authenticate WiFi users.
utm_log str
Enable/disable UTM logging. Valid values: disable, enable.
utm_profile str
UTM profile name.
utm_status str
Enable to add one or more security profiles (AV, IPS, etc.) to the VAP. Valid values: disable, enable.
vdom str
Vdom.
vlan_auto str
Enable/disable automatic management of SSID VLAN interface. Valid values: disable, enable.
vlan_pooling str
Enable/disable VLAN pooling, to allow grouping of multiple wireless controller VLANs into VLAN pools (default = disable). When set to wtp-group, VLAN pooling occurs with VLAN assignment by wtp-group. Valid values: wtp-group, round-robin, hash, disable.
vlanid float
Optional VLAN ID.
voice_enterprise str
Enable/disable 802.11k and 802.11v assisted Voice-Enterprise roaming (default = disable). Valid values: disable, enable.
webfilter_profile str
WebFilter profile name.
vap This property is required. String
Vap.
_centmgmt String
_Centmgmt. Valid values: disable, enable.
_dhcpSvrId String
_Dhcp_Svr_Id.
_intfAllowaccesses List<String>
_Intf_Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, fgfm, auto-ipsec, radius-acct, probe-response, capwap.
_intfDeviceAccessList String
_Intf_Device-Access-List.
_intfDeviceIdentification String
_Intf_Device-Identification. Valid values: disable, enable.
_intfDeviceNetscan String
_Intf_Device-Netscan. Valid values: disable, enable.
_intfDhcp6RelayIp String
_Intf_Dhcp6-Relay-Ip.
_intfDhcp6RelayService String
_Intf_Dhcp6-Relay-Service. Valid values: disable, enable.
_intfDhcp6RelayType String
_Intf_Dhcp6-Relay-Type. Valid values: regular.
_intfDhcpRelayIps List<String>
_Intf_Dhcp-Relay-Ip.
_intfDhcpRelayService String
_Intf_Dhcp-Relay-Service. Valid values: disable, enable.
_intfDhcpRelayType String
_Intf_Dhcp-Relay-Type. Valid values: regular, ipsec.
_intfIp String
_Intf_Ip.
_intfIp6Address String
_Intf_Ip6-Address.
_intfIp6Allowaccesses List<String>
_Intf_Ip6-Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, any, fgfm, capwap.
_intfListenForticlientConnection String
_Intf_Listen-Forticlient-Connection. Valid values: disable, enable.
_isFactorySetting String
_Is_Factory_Setting. Valid values: disable, enable, ext.
_scopes List<Property Map>
_Scope. The structure of _scope block is documented below.
accessControlList String
Access-Control-List.
acctInterimInterval Number
WiFi RADIUS accounting interim interval (60 - 86400 sec, default = 0).
additionalAkms List<String>
Additional-Akms. Valid values: akm6.
addressGroup String
Address group ID.
addressGroupPolicy String
Address-Group-Policy. Valid values: disable, allow, deny.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
alias String
Alias.
antivirusProfile String
AntiVirus profile name.
applicationDetectionEngine String
Application-Detection-Engine. Valid values: disable, enable.
applicationDscpMarking String
Enable/disable application attribute based DSCP marking (default = disable). Valid values: disable, enable.
applicationList String
Application control list name.
applicationReportIntv Number
Application-Report-Intv.
atfWeight Number
Airtime weight in percentage (default = 20).
auth String
Authentication protocol. Valid values: PSK, psk, RADIUS, radius, usergroup.
authCert String
HTTPS server certificate.
authPortalAddr String
Address of captive portal.
beaconAdvertisings List<String>
Fortinet beacon advertising IE data (default = empty). Valid values: name, model, serial-number.
broadcastSsid String
Enable/disable broadcasting the SSID (default = enable). Valid values: disable, enable.
broadcastSuppressions List<String>
Optional suppression of broadcast messages. For example, you can keep DHCP messages, ARP broadcasts, and so on off of the wireless network. Valid values: dhcp, arp, dhcp2, arp2, netbios-ns, netbios-ds, arp3, dhcp-up, dhcp-down, arp-known, arp-unknown, arp-reply, ipv6, dhcp-starvation, arp-poison, all-other-mc, all-other-bc, arp-proxy, dhcp-ucast.
bssColorPartial String
Bss-Color-Partial. Valid values: disable, enable.
bstmDisassociationImminent String
Bstm-Disassociation-Imminent. Valid values: disable, enable.
bstmLoadBalancingDisassocTimer Number
Bstm-Load-Balancing-Disassoc-Timer.
bstmRssiDisassocTimer Number
Bstm-Rssi-Disassoc-Timer.
captivePortalAcName String
Local-bridging captive portal ac-name.
captivePortalAuthTimeout Number
Captive-Portal-Auth-Timeout.
captivePortalFwAccounting String
Enable/disable RADIUS accounting for captive portal firewall authentication session. Valid values: disable, enable.
captivePortalMacauthRadiusSecrets List<String>
Secret key to access the macauth RADIUS server.
captivePortalMacauthRadiusServer String
Captive portal external RADIUS server domain name or IP address.
captivePortalRadiusSecrets List<String>
Secret key to access the RADIUS server.
captivePortalRadiusServer String
Captive portal RADIUS server domain name or IP address.
captivePortalSessionTimeoutInterval Number
Session timeout interval (0 - 864000 sec, default = 0).
clientCount Number
Client-Count.
dhcpAddressEnforcement String
Dhcp-Address-Enforcement. Valid values: disable, enable.
dhcpLeaseTime Number
DHCP lease time in seconds for NAT IP address.
dhcpOption43Insertion String
Dhcp-Option43-Insertion. Valid values: disable, enable.
dhcpOption82CircuitIdInsertion String
Enable/disable DHCP option 82 circuit-id insert (default = disable). Valid values: disable, style-1, style-2, style-3.
dhcpOption82Insertion String
Enable/disable DHCP option 82 insert (default = disable). Valid values: disable, enable.
dhcpOption82RemoteIdInsertion String
Enable/disable DHCP option 82 remote-id insert (default = disable). Valid values: disable, style-1.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
dynamicVlan String
Enable/disable dynamic VLAN assignment. Valid values: disable, enable.
eapReauth String
Enable/disable EAP re-authentication for WPA-Enterprise security. Valid values: disable, enable.
eapReauthIntv Number
EAP re-authentication interval (1800 - 864000 sec, default = 86400).
eapolKeyRetries String
Enable/disable retransmission of EAPOL-Key frames (message 3/4 and group message 1/2) (default = enable). Valid values: disable, enable.
encrypt String
Encryption protocol to use (only available when security is set to a WPA type). Valid values: TKIP, AES, TKIP-AES.
externalFastRoaming String
Enable/disable fast roaming or pre-authentication with external APs not managed by the FortiGate (default = disable). Valid values: disable, enable.
externalLogout String
URL of external authentication logout server.
externalWeb String
URL of external authentication web server.
externalWebFormat String
URL query parameter detection (default = auto-detect). Valid values: auto-detect, no-query-string, partial-query-string.
fastBssTransition String
Enable/disable 802.11r Fast BSS Transition (FT) (default = disable). Valid values: disable, enable.
fastRoaming String
Enable/disable fast-roaming, or pre-authentication, where supported by clients (default = disable). Valid values: disable, enable.
ftMobilityDomain Number
Mobility domain identifier in FT (1 - 65535, default = 1000).
ftOverDs String
Enable/disable FT over the Distribution System (DS). Valid values: disable, enable.
ftR0KeyLifetime Number
Lifetime of the PMK-R0 key in FT, 1-65535 minutes.
gasComebackDelay Number
Gas-Comeback-Delay.
gasFragmentationLimit Number
Gas-Fragmentation-Limit.
gtkRekey String
Enable/disable GTK rekey for WPA security. Valid values: disable, enable.
gtkRekeyIntv Number
GTK rekey interval (1800 - 864000 sec, default = 86400).
highEfficiency String
Enable/disable 802.11ax high efficiency (default = enable). Valid values: disable, enable.
hotspot20Profile String
Hotspot 2.0 profile name.
igmpSnooping String
Igmp-Snooping. Valid values: disable, enable.
intraVapPrivacy String
Enable/disable blocking communication between clients on the same SSID (called intra-SSID privacy) (default = disable). Valid values: disable, enable.
ip String
IP address and subnet mask for the local standalone NAT subnet.
ipsSensor String
IPS sensor name.
ipv6Rules List<String>
Ipv6-Rules. Valid values: drop-icmp6ra, drop-icmp6rs, drop-llmnr6, drop-icmp6mld2, drop-dhcp6s, drop-dhcp6c, ndp-proxy, drop-ns-dad, drop-ns-nondad.
keyindex Number
WEP key index (1 - 4).
keys List<String>
WEP Key.
l3Roaming String
L3-Roaming. Valid values: disable, enable.
l3RoamingMode String
Select the way that layer 3 roaming traffic is passed (default = direct). Valid values: direct, indirect.
ldpc String
VAP low-density parity-check (LDPC) coding configuration. Valid values: disable, tx, rx, rxtx.
localAuthentication String
Enable/disable AP local authentication. Valid values: disable, enable.
localBridging String
Enable/disable bridging of wireless and Ethernet interfaces on the FortiAP (default = disable). Valid values: disable, enable.
localLan String
Allow/deny traffic destined for a Class A, B, or C private IP address (default = allow). Valid values: deny, allow.
localStandalone String
Enable/disable AP local standalone (default = disable). Valid values: disable, enable.
localStandaloneDns String
Enable/disable AP local standalone DNS. Valid values: disable, enable.
localStandaloneDnsIps List<String>
IPv4 addresses for the local standalone DNS.
localStandaloneNat String
Enable/disable AP local standalone NAT mode. Valid values: disable, enable.
localSwitching String
Local-Switching. Valid values: disable, enable.
macAuthBypass String
Enable/disable MAC authentication bypass. Valid values: disable, enable.
macCalledStationDelimiter String
Mac-Called-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macCallingStationDelimiter String
Mac-Calling-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macCase String
Mac-Case. Valid values: uppercase, lowercase.
macFilter String
Enable/disable MAC filtering to block wireless clients by mac address. Valid values: disable, enable.
macFilterPolicyOther String
Allow or block clients with MAC addresses that are not in the filter list. Valid values: deny, allow.
macPasswordDelimiter String
Mac-Password-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macUsernameDelimiter String
Mac-Username-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
maxClients Number
Maximum number of clients that can connect simultaneously to the VAP (default = 0, meaning no limitation).
maxClientsAp Number
Maximum number of clients that can connect simultaneously to the VAP per AP radio (default = 0, meaning no limitation).
mbo String
Mbo. Valid values: disable, enable.
mboCellDataConnPref String
Mbo-Cell-Data-Conn-Pref. Valid values: excluded, prefer-not, prefer-use.
meDisableThresh Number
Disable multicast enhancement when this many clients are receiving multicast traffic.
meshBackhaul String
Enable/disable using this VAP as a WiFi mesh backhaul (default = disable). This entry is only available when security is set to a WPA type or open. Valid values: disable, enable.
mpsk String
Enable/disable multiple PSK authentication. Valid values: disable, enable.
mpskConcurrentClients Number
Maximum number of concurrent clients that connect using the same passphrase in multiple PSK authentication (0 - 65535, default = 0, meaning no limitation).
mpskProfile String
Mpsk-Profile.
muMimo String
Enable/disable Multi-user MIMO (default = enable). Valid values: disable, enable.
multicastEnhance String
Enable/disable converting multicast to unicast to improve performance (default = disable). Valid values: disable, enable.
multicastRate String
Multicast rate (0, 6000, 12000, or 24000 kbps, default = 0). Valid values: 0, 6000, 12000, 24000.
n80211k String
Enable/disable 802.11k assisted roaming (default = enable). Valid values: disable, enable.
n80211v String
Enable/disable 802.11v assisted roaming (default = enable). Valid values: disable, enable.
nac String
Nac. Valid values: disable, enable.
nacProfile String
Nac-Profile.
neighborReportDualBand String
Neighbor-Report-Dual-Band. Valid values: disable, enable.
objectWirelesscontrollerVapDynamicMappingId String
an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
okc String
Enable/disable Opportunistic Key Caching (OKC) (default = enable). Valid values: disable, enable.
osen String
Enable/disable OSEN as part of key management (default = disable). Valid values: disable, enable.
oweGroups List<String>
OWE-Groups. Valid values: 19, 20, 21.
oweTransition String
Enable/disable OWE transition mode support. Valid values: disable, enable.
oweTransitionSsid String
OWE transition mode peer SSID.
passphrases List<String>
WPA pre-shared key (PSK) to be used to authenticate WiFi users.
pmf String
Protected Management Frames (PMF) support (default = disable). Valid values: disable, enable, optional.
pmfAssocComebackTimeout Number
Protected Management Frames (PMF) comeback maximum timeout (1-20 sec).
pmfSaQueryRetryTimeout Number
Protected Management Frames (PMF) SA query retry timeout interval (1 - 5 100s of msec).
portMacauth String
Port-Macauth. Valid values: disable, radius, address-group.
portMacauthReauthTimeout Number
Port-Macauth-Reauth-Timeout.
portMacauthTimeout Number
Port-Macauth-Timeout.
portalMessageOverrideGroup String
Replacement message group for this VAP (only available when security is set to a captive portal type).
portalType String
Captive portal functionality. Configure how the captive portal authenticates users and whether it includes a disclaimer. Valid values: auth, auth+disclaimer, disclaimer, email-collect, cmcc, cmcc-macauth, auth-mac, external-auth.
primaryWagProfile String
Primary wireless access gateway profile name.
probeRespSuppression String
Enable/disable probe response suppression (to ignore weak signals) (default = disable). Valid values: disable, enable.
probeRespThreshold String
Minimum signal level/threshold in dBm required for the AP response to probe requests (-95 to -20, default = -80).
ptkRekey String
Enable/disable PTK rekey for WPA-Enterprise security. Valid values: disable, enable.
ptkRekeyIntv Number
PTK rekey interval (1800 - 864000 sec, default = 86400).
qosProfile String
Quality of service profile name.
quarantine String
Enable/disable station quarantine (default = enable). Valid values: disable, enable.
radio2gThreshold String
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 2.4G band (-95 to -20, default = -79).
radio5gThreshold String
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 5G band(-95 to -20, default = -76).
radioSensitivity String
Enable/disable software radio sensitivity (to ignore weak signals) (default = disable). Valid values: disable, enable.
radiusMacAuth String
Enable/disable RADIUS-based MAC authentication of clients (default = disable). Valid values: disable, enable.
radiusMacAuthBlockInterval Number
Don't send RADIUS MAC auth request again if the client has been rejected within specific interval (0 or 30 - 864000 seconds, default = 0, 0 to disable blocking).
radiusMacAuthServer String
RADIUS-based MAC authentication server.
radiusMacAuthUsergroups List<String>
Selective user groups that are permitted for RADIUS mac authentication.
radiusMacMpskAuth String
Enable/disable RADIUS-based MAC authentication of clients for MPSK authentication (default = disable). Valid values: disable, enable.
radiusMacMpskTimeout Number
RADIUS MAC MPSK cache timeout interval (1800 - 864000, default = 86400).
radiusServer String
RADIUS server to be used to authenticate WiFi users.
rates11acMcsMap String
Comma separated list of max supported VHT MCS for spatial streams 1 through 8.
rates11acSs12s List<String>
Allowed data rates for 802.11ac/ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/1, mcs11/1, mcs10/2, mcs11/2.
rates11acSs34s List<String>
Allowed data rates for 802.11ac/ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/3, mcs11/3, mcs10/4, mcs11/4.
rates11as List<String>
Allowed data rates for 802.11a. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11axMcsMap String
Comma separated list of max supported HE MCS for spatial streams 1 through 8.
rates11axSs12s List<String>
Allowed data rates for 802.11ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs10/1, mcs11/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/2, mcs11/2.
rates11axSs34s List<String>
Allowed data rates for 802.11ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs10/3, mcs11/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/4, mcs11/4.
rates11bgs List<String>
Allowed data rates for 802.11b/g. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11nSs12s List<String>
Allowed data rates for 802.11n with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/2, mcs9/2, mcs10/2, mcs11/2, mcs12/2, mcs13/2, mcs14/2, mcs15/2.
rates11nSs34s List<String>
Allowed data rates for 802.11n with 3 or 4 spatial streams. Valid values: mcs16/3, mcs17/3, mcs18/3, mcs19/3, mcs20/3, mcs21/3, mcs22/3, mcs23/3, mcs24/4, mcs25/4, mcs26/4, mcs27/4, mcs28/4, mcs29/4, mcs30/4, mcs31/4.
roamingAcctInterimUpdate String
Enable/disable using accounting interim update instead of accounting start/stop on roaming for WPA-Enterprise security. Valid values: disable, enable.
saeGroups List<String>
SAE-Groups. Valid values: 1, 2, 5, 14, 15, 16, 17, 18, 19, 20, 21, 27, 28, 29, 30, 31.
saeH2eOnly String
Use hash-to-element-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
saeHnpOnly String
Use hunting-and-pecking-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
saePasswords List<String>
WPA3 SAE password to be used to authenticate WiFi users.
saePk String
Enable/disable WPA3 SAE-PK (default = disable). Valid values: disable, enable.
saePrivateKey String
Private key used for WPA3 SAE-PK authentication.
scanBotnetConnections String
Block or monitor connections to Botnet servers or disable Botnet scanning. Valid values: disable, block, monitor.
schedule String
Firewall schedules for enabling this VAP on the FortiAP. This VAP will be enabled when at least one of the schedules is valid. Separate multiple schedule names with a space.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
secondaryWagProfile String
Secondary wireless access gateway profile name.
security String
Security mode for the wireless interface (default = wpa2-only-personal). Valid values: None, WEP64, wep64, WEP128, wep128, WPA_PSK, WPA_RADIUS, WPA, WPA2, WPA2_AUTO, open, wpa-personal, wpa-enterprise, captive-portal, wpa-only-personal, wpa-only-enterprise, wpa2-only-personal, wpa2-only-enterprise, wpa-personal+captive-portal, wpa-only-personal+captive-portal, wpa2-only-personal+captive-portal, osen, wpa3-enterprise, sae, sae-transition, owe, wpa3-sae, wpa3-sae-transition.
securityExemptList String
Optional security exempt list for captive portal authentication.
securityObsoleteOption String
Enable/disable obsolete security options. Valid values: disable, enable.
securityRedirectUrl String
Optional URL for redirecting users after they pass captive portal authentication.
selectedUsergroups String
Selective user groups that are permitted to authenticate.
splitTunneling String
Enable/disable split tunneling (default = disable). Valid values: disable, enable.
ssid String
IEEE 802.11 service set identifier (SSID) for the wireless interface. Users who wish to use the wireless network must configure their computers to access this SSID name.
stickyClientRemove String
Sticky-Client-Remove. Valid values: disable, enable.
stickyClientThreshold2g String
Sticky-Client-Threshold-2G.
stickyClientThreshold5g String
Sticky-Client-Threshold-5G.
stickyClientThreshold6g String
Minimum signal level/threshold in dBm required for the 6G client to be serviced by the AP (-95 to -20, default = -76).
targetWakeTime String
Enable/disable 802.11ax target wake time (default = enable). Valid values: disable, enable.
tkipCounterMeasure String
Enable/disable TKIP counter measure. Valid values: disable, enable.
tunnelEchoInterval Number
The time interval to send echo to both primary and secondary tunnel peers (1 - 65535 sec, default = 300).
tunnelFallbackInterval Number
The time interval for secondary tunnel to fall back to primary tunnel (0 - 65535 sec, default = 7200).
usergroup String
Firewall user group to be used to authenticate WiFi users.
utmLog String
Enable/disable UTM logging. Valid values: disable, enable.
utmProfile String
UTM profile name.
utmStatus String
Enable to add one or more security profiles (AV, IPS, etc.) to the VAP. Valid values: disable, enable.
vdom String
Vdom.
vlanAuto String
Enable/disable automatic management of SSID VLAN interface. Valid values: disable, enable.
vlanPooling String
Enable/disable VLAN pooling, to allow grouping of multiple wireless controller VLANs into VLAN pools (default = disable). When set to wtp-group, VLAN pooling occurs with VLAN assignment by wtp-group. Valid values: wtp-group, round-robin, hash, disable.
vlanid Number
Optional VLAN ID.
voiceEnterprise String
Enable/disable 802.11k and 802.11v assisted Voice-Enterprise roaming (default = disable). Valid values: disable, enable.
webfilterProfile String
WebFilter profile name.

Outputs

All input properties are implicitly available as output properties. Additionally, the ObjectWirelesscontrollerVapDynamicMapping resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing ObjectWirelesscontrollerVapDynamicMapping Resource

Get an existing ObjectWirelesscontrollerVapDynamicMapping resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ObjectWirelesscontrollerVapDynamicMappingState, opts?: CustomResourceOptions): ObjectWirelesscontrollerVapDynamicMapping
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        _centmgmt: Optional[str] = None,
        _dhcp_svr_id: Optional[str] = None,
        _intf_allowaccesses: Optional[Sequence[str]] = None,
        _intf_device_access_list: Optional[str] = None,
        _intf_device_identification: Optional[str] = None,
        _intf_device_netscan: Optional[str] = None,
        _intf_dhcp6_relay_ip: Optional[str] = None,
        _intf_dhcp6_relay_service: Optional[str] = None,
        _intf_dhcp6_relay_type: Optional[str] = None,
        _intf_dhcp_relay_ips: Optional[Sequence[str]] = None,
        _intf_dhcp_relay_service: Optional[str] = None,
        _intf_dhcp_relay_type: Optional[str] = None,
        _intf_ip: Optional[str] = None,
        _intf_ip6_address: Optional[str] = None,
        _intf_ip6_allowaccesses: Optional[Sequence[str]] = None,
        _intf_listen_forticlient_connection: Optional[str] = None,
        _is_factory_setting: Optional[str] = None,
        _scopes: Optional[Sequence[ObjectWirelesscontrollerVapDynamicMapping_ScopeArgs]] = None,
        access_control_list: Optional[str] = None,
        acct_interim_interval: Optional[float] = None,
        additional_akms: Optional[Sequence[str]] = None,
        address_group: Optional[str] = None,
        address_group_policy: Optional[str] = None,
        adom: Optional[str] = None,
        alias: Optional[str] = None,
        antivirus_profile: Optional[str] = None,
        application_detection_engine: Optional[str] = None,
        application_dscp_marking: Optional[str] = None,
        application_list: Optional[str] = None,
        application_report_intv: Optional[float] = None,
        atf_weight: Optional[float] = None,
        auth: Optional[str] = None,
        auth_cert: Optional[str] = None,
        auth_portal_addr: Optional[str] = None,
        beacon_advertisings: Optional[Sequence[str]] = None,
        broadcast_ssid: Optional[str] = None,
        broadcast_suppressions: Optional[Sequence[str]] = None,
        bss_color_partial: Optional[str] = None,
        bstm_disassociation_imminent: Optional[str] = None,
        bstm_load_balancing_disassoc_timer: Optional[float] = None,
        bstm_rssi_disassoc_timer: Optional[float] = None,
        captive_portal_ac_name: Optional[str] = None,
        captive_portal_auth_timeout: Optional[float] = None,
        captive_portal_fw_accounting: Optional[str] = None,
        captive_portal_macauth_radius_secrets: Optional[Sequence[str]] = None,
        captive_portal_macauth_radius_server: Optional[str] = None,
        captive_portal_radius_secrets: Optional[Sequence[str]] = None,
        captive_portal_radius_server: Optional[str] = None,
        captive_portal_session_timeout_interval: Optional[float] = None,
        client_count: Optional[float] = None,
        dhcp_address_enforcement: Optional[str] = None,
        dhcp_lease_time: Optional[float] = None,
        dhcp_option43_insertion: Optional[str] = None,
        dhcp_option82_circuit_id_insertion: Optional[str] = None,
        dhcp_option82_insertion: Optional[str] = None,
        dhcp_option82_remote_id_insertion: Optional[str] = None,
        dynamic_sort_subtable: Optional[str] = None,
        dynamic_vlan: Optional[str] = None,
        eap_reauth: Optional[str] = None,
        eap_reauth_intv: Optional[float] = None,
        eapol_key_retries: Optional[str] = None,
        encrypt: Optional[str] = None,
        external_fast_roaming: Optional[str] = None,
        external_logout: Optional[str] = None,
        external_web: Optional[str] = None,
        external_web_format: Optional[str] = None,
        fast_bss_transition: Optional[str] = None,
        fast_roaming: Optional[str] = None,
        ft_mobility_domain: Optional[float] = None,
        ft_over_ds: Optional[str] = None,
        ft_r0_key_lifetime: Optional[float] = None,
        gas_comeback_delay: Optional[float] = None,
        gas_fragmentation_limit: Optional[float] = None,
        gtk_rekey: Optional[str] = None,
        gtk_rekey_intv: Optional[float] = None,
        high_efficiency: Optional[str] = None,
        hotspot20_profile: Optional[str] = None,
        igmp_snooping: Optional[str] = None,
        intra_vap_privacy: Optional[str] = None,
        ip: Optional[str] = None,
        ips_sensor: Optional[str] = None,
        ipv6_rules: Optional[Sequence[str]] = None,
        keyindex: Optional[float] = None,
        keys: Optional[Sequence[str]] = None,
        l3_roaming: Optional[str] = None,
        l3_roaming_mode: Optional[str] = None,
        ldpc: Optional[str] = None,
        local_authentication: Optional[str] = None,
        local_bridging: Optional[str] = None,
        local_lan: Optional[str] = None,
        local_standalone: Optional[str] = None,
        local_standalone_dns: Optional[str] = None,
        local_standalone_dns_ips: Optional[Sequence[str]] = None,
        local_standalone_nat: Optional[str] = None,
        local_switching: Optional[str] = None,
        mac_auth_bypass: Optional[str] = None,
        mac_called_station_delimiter: Optional[str] = None,
        mac_calling_station_delimiter: Optional[str] = None,
        mac_case: Optional[str] = None,
        mac_filter: Optional[str] = None,
        mac_filter_policy_other: Optional[str] = None,
        mac_password_delimiter: Optional[str] = None,
        mac_username_delimiter: Optional[str] = None,
        max_clients: Optional[float] = None,
        max_clients_ap: Optional[float] = None,
        mbo: Optional[str] = None,
        mbo_cell_data_conn_pref: Optional[str] = None,
        me_disable_thresh: Optional[float] = None,
        mesh_backhaul: Optional[str] = None,
        mpsk: Optional[str] = None,
        mpsk_concurrent_clients: Optional[float] = None,
        mpsk_profile: Optional[str] = None,
        mu_mimo: Optional[str] = None,
        multicast_enhance: Optional[str] = None,
        multicast_rate: Optional[str] = None,
        n80211k: Optional[str] = None,
        n80211v: Optional[str] = None,
        nac: Optional[str] = None,
        nac_profile: Optional[str] = None,
        neighbor_report_dual_band: Optional[str] = None,
        object_wirelesscontroller_vap_dynamic_mapping_id: Optional[str] = None,
        okc: Optional[str] = None,
        osen: Optional[str] = None,
        owe_groups: Optional[Sequence[str]] = None,
        owe_transition: Optional[str] = None,
        owe_transition_ssid: Optional[str] = None,
        passphrases: Optional[Sequence[str]] = None,
        pmf: Optional[str] = None,
        pmf_assoc_comeback_timeout: Optional[float] = None,
        pmf_sa_query_retry_timeout: Optional[float] = None,
        port_macauth: Optional[str] = None,
        port_macauth_reauth_timeout: Optional[float] = None,
        port_macauth_timeout: Optional[float] = None,
        portal_message_override_group: Optional[str] = None,
        portal_type: Optional[str] = None,
        primary_wag_profile: Optional[str] = None,
        probe_resp_suppression: Optional[str] = None,
        probe_resp_threshold: Optional[str] = None,
        ptk_rekey: Optional[str] = None,
        ptk_rekey_intv: Optional[float] = None,
        qos_profile: Optional[str] = None,
        quarantine: Optional[str] = None,
        radio2g_threshold: Optional[str] = None,
        radio5g_threshold: Optional[str] = None,
        radio_sensitivity: Optional[str] = None,
        radius_mac_auth: Optional[str] = None,
        radius_mac_auth_block_interval: Optional[float] = None,
        radius_mac_auth_server: Optional[str] = None,
        radius_mac_auth_usergroups: Optional[Sequence[str]] = None,
        radius_mac_mpsk_auth: Optional[str] = None,
        radius_mac_mpsk_timeout: Optional[float] = None,
        radius_server: Optional[str] = None,
        rates11ac_mcs_map: Optional[str] = None,
        rates11ac_ss12s: Optional[Sequence[str]] = None,
        rates11ac_ss34s: Optional[Sequence[str]] = None,
        rates11as: Optional[Sequence[str]] = None,
        rates11ax_mcs_map: Optional[str] = None,
        rates11ax_ss12s: Optional[Sequence[str]] = None,
        rates11ax_ss34s: Optional[Sequence[str]] = None,
        rates11bgs: Optional[Sequence[str]] = None,
        rates11n_ss12s: Optional[Sequence[str]] = None,
        rates11n_ss34s: Optional[Sequence[str]] = None,
        roaming_acct_interim_update: Optional[str] = None,
        sae_groups: Optional[Sequence[str]] = None,
        sae_h2e_only: Optional[str] = None,
        sae_hnp_only: Optional[str] = None,
        sae_passwords: Optional[Sequence[str]] = None,
        sae_pk: Optional[str] = None,
        sae_private_key: Optional[str] = None,
        scan_botnet_connections: Optional[str] = None,
        schedule: Optional[str] = None,
        scopetype: Optional[str] = None,
        secondary_wag_profile: Optional[str] = None,
        security: Optional[str] = None,
        security_exempt_list: Optional[str] = None,
        security_obsolete_option: Optional[str] = None,
        security_redirect_url: Optional[str] = None,
        selected_usergroups: Optional[str] = None,
        split_tunneling: Optional[str] = None,
        ssid: Optional[str] = None,
        sticky_client_remove: Optional[str] = None,
        sticky_client_threshold2g: Optional[str] = None,
        sticky_client_threshold5g: Optional[str] = None,
        sticky_client_threshold6g: Optional[str] = None,
        target_wake_time: Optional[str] = None,
        tkip_counter_measure: Optional[str] = None,
        tunnel_echo_interval: Optional[float] = None,
        tunnel_fallback_interval: Optional[float] = None,
        usergroup: Optional[str] = None,
        utm_log: Optional[str] = None,
        utm_profile: Optional[str] = None,
        utm_status: Optional[str] = None,
        vap: Optional[str] = None,
        vdom: Optional[str] = None,
        vlan_auto: Optional[str] = None,
        vlan_pooling: Optional[str] = None,
        vlanid: Optional[float] = None,
        voice_enterprise: Optional[str] = None,
        webfilter_profile: Optional[str] = None) -> ObjectWirelesscontrollerVapDynamicMapping
func GetObjectWirelesscontrollerVapDynamicMapping(ctx *Context, name string, id IDInput, state *ObjectWirelesscontrollerVapDynamicMappingState, opts ...ResourceOption) (*ObjectWirelesscontrollerVapDynamicMapping, error)
public static ObjectWirelesscontrollerVapDynamicMapping Get(string name, Input<string> id, ObjectWirelesscontrollerVapDynamicMappingState? state, CustomResourceOptions? opts = null)
public static ObjectWirelesscontrollerVapDynamicMapping get(String name, Output<String> id, ObjectWirelesscontrollerVapDynamicMappingState state, CustomResourceOptions options)
resources:  _:    type: fortimanager:ObjectWirelesscontrollerVapDynamicMapping    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AccessControlList string
Access-Control-List.
AcctInterimInterval double
WiFi RADIUS accounting interim interval (60 - 86400 sec, default = 0).
AdditionalAkms List<string>
Additional-Akms. Valid values: akm6.
AddressGroup string
Address group ID.
AddressGroupPolicy string
Address-Group-Policy. Valid values: disable, allow, deny.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
Alias string
Alias.
AntivirusProfile string
AntiVirus profile name.
ApplicationDetectionEngine string
Application-Detection-Engine. Valid values: disable, enable.
ApplicationDscpMarking string
Enable/disable application attribute based DSCP marking (default = disable). Valid values: disable, enable.
ApplicationList string
Application control list name.
ApplicationReportIntv double
Application-Report-Intv.
AtfWeight double
Airtime weight in percentage (default = 20).
Auth string
Authentication protocol. Valid values: PSK, psk, RADIUS, radius, usergroup.
AuthCert string
HTTPS server certificate.
AuthPortalAddr string
Address of captive portal.
BeaconAdvertisings List<string>
Fortinet beacon advertising IE data (default = empty). Valid values: name, model, serial-number.
BroadcastSsid string
Enable/disable broadcasting the SSID (default = enable). Valid values: disable, enable.
BroadcastSuppressions List<string>
Optional suppression of broadcast messages. For example, you can keep DHCP messages, ARP broadcasts, and so on off of the wireless network. Valid values: dhcp, arp, dhcp2, arp2, netbios-ns, netbios-ds, arp3, dhcp-up, dhcp-down, arp-known, arp-unknown, arp-reply, ipv6, dhcp-starvation, arp-poison, all-other-mc, all-other-bc, arp-proxy, dhcp-ucast.
BssColorPartial string
Bss-Color-Partial. Valid values: disable, enable.
BstmDisassociationImminent string
Bstm-Disassociation-Imminent. Valid values: disable, enable.
BstmLoadBalancingDisassocTimer double
Bstm-Load-Balancing-Disassoc-Timer.
BstmRssiDisassocTimer double
Bstm-Rssi-Disassoc-Timer.
CaptivePortalAcName string
Local-bridging captive portal ac-name.
CaptivePortalAuthTimeout double
Captive-Portal-Auth-Timeout.
CaptivePortalFwAccounting string
Enable/disable RADIUS accounting for captive portal firewall authentication session. Valid values: disable, enable.
CaptivePortalMacauthRadiusSecrets List<string>
Secret key to access the macauth RADIUS server.
CaptivePortalMacauthRadiusServer string
Captive portal external RADIUS server domain name or IP address.
CaptivePortalRadiusSecrets List<string>
Secret key to access the RADIUS server.
CaptivePortalRadiusServer string
Captive portal RADIUS server domain name or IP address.
CaptivePortalSessionTimeoutInterval double
Session timeout interval (0 - 864000 sec, default = 0).
ClientCount double
Client-Count.
DhcpAddressEnforcement string
Dhcp-Address-Enforcement. Valid values: disable, enable.
DhcpLeaseTime double
DHCP lease time in seconds for NAT IP address.
DhcpOption43Insertion string
Dhcp-Option43-Insertion. Valid values: disable, enable.
DhcpOption82CircuitIdInsertion string
Enable/disable DHCP option 82 circuit-id insert (default = disable). Valid values: disable, style-1, style-2, style-3.
DhcpOption82Insertion string
Enable/disable DHCP option 82 insert (default = disable). Valid values: disable, enable.
DhcpOption82RemoteIdInsertion string
Enable/disable DHCP option 82 remote-id insert (default = disable). Valid values: disable, style-1.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
DynamicVlan string
Enable/disable dynamic VLAN assignment. Valid values: disable, enable.
EapReauth string
Enable/disable EAP re-authentication for WPA-Enterprise security. Valid values: disable, enable.
EapReauthIntv double
EAP re-authentication interval (1800 - 864000 sec, default = 86400).
EapolKeyRetries string
Enable/disable retransmission of EAPOL-Key frames (message 3/4 and group message 1/2) (default = enable). Valid values: disable, enable.
Encrypt string
Encryption protocol to use (only available when security is set to a WPA type). Valid values: TKIP, AES, TKIP-AES.
ExternalFastRoaming string
Enable/disable fast roaming or pre-authentication with external APs not managed by the FortiGate (default = disable). Valid values: disable, enable.
ExternalLogout string
URL of external authentication logout server.
ExternalWeb string
URL of external authentication web server.
ExternalWebFormat string
URL query parameter detection (default = auto-detect). Valid values: auto-detect, no-query-string, partial-query-string.
FastBssTransition string
Enable/disable 802.11r Fast BSS Transition (FT) (default = disable). Valid values: disable, enable.
FastRoaming string
Enable/disable fast-roaming, or pre-authentication, where supported by clients (default = disable). Valid values: disable, enable.
FtMobilityDomain double
Mobility domain identifier in FT (1 - 65535, default = 1000).
FtOverDs string
Enable/disable FT over the Distribution System (DS). Valid values: disable, enable.
FtR0KeyLifetime double
Lifetime of the PMK-R0 key in FT, 1-65535 minutes.
GasComebackDelay double
Gas-Comeback-Delay.
GasFragmentationLimit double
Gas-Fragmentation-Limit.
GtkRekey string
Enable/disable GTK rekey for WPA security. Valid values: disable, enable.
GtkRekeyIntv double
GTK rekey interval (1800 - 864000 sec, default = 86400).
HighEfficiency string
Enable/disable 802.11ax high efficiency (default = enable). Valid values: disable, enable.
Hotspot20Profile string
Hotspot 2.0 profile name.
IgmpSnooping string
Igmp-Snooping. Valid values: disable, enable.
IntraVapPrivacy string
Enable/disable blocking communication between clients on the same SSID (called intra-SSID privacy) (default = disable). Valid values: disable, enable.
Ip string
IP address and subnet mask for the local standalone NAT subnet.
IpsSensor string
IPS sensor name.
Ipv6Rules List<string>
Ipv6-Rules. Valid values: drop-icmp6ra, drop-icmp6rs, drop-llmnr6, drop-icmp6mld2, drop-dhcp6s, drop-dhcp6c, ndp-proxy, drop-ns-dad, drop-ns-nondad.
Keyindex double
WEP key index (1 - 4).
Keys List<string>
WEP Key.
L3Roaming string
L3-Roaming. Valid values: disable, enable.
L3RoamingMode string
Select the way that layer 3 roaming traffic is passed (default = direct). Valid values: direct, indirect.
Ldpc string
VAP low-density parity-check (LDPC) coding configuration. Valid values: disable, tx, rx, rxtx.
LocalAuthentication string
Enable/disable AP local authentication. Valid values: disable, enable.
LocalBridging string
Enable/disable bridging of wireless and Ethernet interfaces on the FortiAP (default = disable). Valid values: disable, enable.
LocalLan string
Allow/deny traffic destined for a Class A, B, or C private IP address (default = allow). Valid values: deny, allow.
LocalStandalone string
Enable/disable AP local standalone (default = disable). Valid values: disable, enable.
LocalStandaloneDns string
Enable/disable AP local standalone DNS. Valid values: disable, enable.
LocalStandaloneDnsIps List<string>
IPv4 addresses for the local standalone DNS.
LocalStandaloneNat string
Enable/disable AP local standalone NAT mode. Valid values: disable, enable.
LocalSwitching string
Local-Switching. Valid values: disable, enable.
MacAuthBypass string
Enable/disable MAC authentication bypass. Valid values: disable, enable.
MacCalledStationDelimiter string
Mac-Called-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MacCallingStationDelimiter string
Mac-Calling-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MacCase string
Mac-Case. Valid values: uppercase, lowercase.
MacFilter string
Enable/disable MAC filtering to block wireless clients by mac address. Valid values: disable, enable.
MacFilterPolicyOther string
Allow or block clients with MAC addresses that are not in the filter list. Valid values: deny, allow.
MacPasswordDelimiter string
Mac-Password-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MacUsernameDelimiter string
Mac-Username-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MaxClients double
Maximum number of clients that can connect simultaneously to the VAP (default = 0, meaning no limitation).
MaxClientsAp double
Maximum number of clients that can connect simultaneously to the VAP per AP radio (default = 0, meaning no limitation).
Mbo string
Mbo. Valid values: disable, enable.
MboCellDataConnPref string
Mbo-Cell-Data-Conn-Pref. Valid values: excluded, prefer-not, prefer-use.
MeDisableThresh double
Disable multicast enhancement when this many clients are receiving multicast traffic.
MeshBackhaul string
Enable/disable using this VAP as a WiFi mesh backhaul (default = disable). This entry is only available when security is set to a WPA type or open. Valid values: disable, enable.
Mpsk string
Enable/disable multiple PSK authentication. Valid values: disable, enable.
MpskConcurrentClients double
Maximum number of concurrent clients that connect using the same passphrase in multiple PSK authentication (0 - 65535, default = 0, meaning no limitation).
MpskProfile string
Mpsk-Profile.
MuMimo string
Enable/disable Multi-user MIMO (default = enable). Valid values: disable, enable.
MulticastEnhance string
Enable/disable converting multicast to unicast to improve performance (default = disable). Valid values: disable, enable.
MulticastRate string
Multicast rate (0, 6000, 12000, or 24000 kbps, default = 0). Valid values: 0, 6000, 12000, 24000.
N80211k string
Enable/disable 802.11k assisted roaming (default = enable). Valid values: disable, enable.
N80211v string
Enable/disable 802.11v assisted roaming (default = enable). Valid values: disable, enable.
Nac string
Nac. Valid values: disable, enable.
NacProfile string
Nac-Profile.
NeighborReportDualBand string
Neighbor-Report-Dual-Band. Valid values: disable, enable.
ObjectWirelesscontrollerVapDynamicMappingId string
an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
Okc string
Enable/disable Opportunistic Key Caching (OKC) (default = enable). Valid values: disable, enable.
Osen string
Enable/disable OSEN as part of key management (default = disable). Valid values: disable, enable.
OweGroups List<string>
OWE-Groups. Valid values: 19, 20, 21.
OweTransition string
Enable/disable OWE transition mode support. Valid values: disable, enable.
OweTransitionSsid string
OWE transition mode peer SSID.
Passphrases List<string>
WPA pre-shared key (PSK) to be used to authenticate WiFi users.
Pmf string
Protected Management Frames (PMF) support (default = disable). Valid values: disable, enable, optional.
PmfAssocComebackTimeout double
Protected Management Frames (PMF) comeback maximum timeout (1-20 sec).
PmfSaQueryRetryTimeout double
Protected Management Frames (PMF) SA query retry timeout interval (1 - 5 100s of msec).
PortMacauth string
Port-Macauth. Valid values: disable, radius, address-group.
PortMacauthReauthTimeout double
Port-Macauth-Reauth-Timeout.
PortMacauthTimeout double
Port-Macauth-Timeout.
PortalMessageOverrideGroup string
Replacement message group for this VAP (only available when security is set to a captive portal type).
PortalType string
Captive portal functionality. Configure how the captive portal authenticates users and whether it includes a disclaimer. Valid values: auth, auth+disclaimer, disclaimer, email-collect, cmcc, cmcc-macauth, auth-mac, external-auth.
PrimaryWagProfile string
Primary wireless access gateway profile name.
ProbeRespSuppression string
Enable/disable probe response suppression (to ignore weak signals) (default = disable). Valid values: disable, enable.
ProbeRespThreshold string
Minimum signal level/threshold in dBm required for the AP response to probe requests (-95 to -20, default = -80).
PtkRekey string
Enable/disable PTK rekey for WPA-Enterprise security. Valid values: disable, enable.
PtkRekeyIntv double
PTK rekey interval (1800 - 864000 sec, default = 86400).
QosProfile string
Quality of service profile name.
Quarantine string
Enable/disable station quarantine (default = enable). Valid values: disable, enable.
Radio2gThreshold string
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 2.4G band (-95 to -20, default = -79).
Radio5gThreshold string
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 5G band(-95 to -20, default = -76).
RadioSensitivity string
Enable/disable software radio sensitivity (to ignore weak signals) (default = disable). Valid values: disable, enable.
RadiusMacAuth string
Enable/disable RADIUS-based MAC authentication of clients (default = disable). Valid values: disable, enable.
RadiusMacAuthBlockInterval double
Don't send RADIUS MAC auth request again if the client has been rejected within specific interval (0 or 30 - 864000 seconds, default = 0, 0 to disable blocking).
RadiusMacAuthServer string
RADIUS-based MAC authentication server.
RadiusMacAuthUsergroups List<string>
Selective user groups that are permitted for RADIUS mac authentication.
RadiusMacMpskAuth string
Enable/disable RADIUS-based MAC authentication of clients for MPSK authentication (default = disable). Valid values: disable, enable.
RadiusMacMpskTimeout double
RADIUS MAC MPSK cache timeout interval (1800 - 864000, default = 86400).
RadiusServer string
RADIUS server to be used to authenticate WiFi users.
Rates11acMcsMap string
Comma separated list of max supported VHT MCS for spatial streams 1 through 8.
Rates11acSs12s List<string>
Allowed data rates for 802.11ac/ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/1, mcs11/1, mcs10/2, mcs11/2.
Rates11acSs34s List<string>
Allowed data rates for 802.11ac/ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/3, mcs11/3, mcs10/4, mcs11/4.
Rates11as List<string>
Allowed data rates for 802.11a. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
Rates11axMcsMap string
Comma separated list of max supported HE MCS for spatial streams 1 through 8.
Rates11axSs12s List<string>
Allowed data rates for 802.11ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs10/1, mcs11/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/2, mcs11/2.
Rates11axSs34s List<string>
Allowed data rates for 802.11ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs10/3, mcs11/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/4, mcs11/4.
Rates11bgs List<string>
Allowed data rates for 802.11b/g. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
Rates11nSs12s List<string>
Allowed data rates for 802.11n with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/2, mcs9/2, mcs10/2, mcs11/2, mcs12/2, mcs13/2, mcs14/2, mcs15/2.
Rates11nSs34s List<string>
Allowed data rates for 802.11n with 3 or 4 spatial streams. Valid values: mcs16/3, mcs17/3, mcs18/3, mcs19/3, mcs20/3, mcs21/3, mcs22/3, mcs23/3, mcs24/4, mcs25/4, mcs26/4, mcs27/4, mcs28/4, mcs29/4, mcs30/4, mcs31/4.
RoamingAcctInterimUpdate string
Enable/disable using accounting interim update instead of accounting start/stop on roaming for WPA-Enterprise security. Valid values: disable, enable.
SaeGroups List<string>
SAE-Groups. Valid values: 1, 2, 5, 14, 15, 16, 17, 18, 19, 20, 21, 27, 28, 29, 30, 31.
SaeH2eOnly string
Use hash-to-element-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
SaeHnpOnly string
Use hunting-and-pecking-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
SaePasswords List<string>
WPA3 SAE password to be used to authenticate WiFi users.
SaePk string
Enable/disable WPA3 SAE-PK (default = disable). Valid values: disable, enable.
SaePrivateKey string
Private key used for WPA3 SAE-PK authentication.
ScanBotnetConnections string
Block or monitor connections to Botnet servers or disable Botnet scanning. Valid values: disable, block, monitor.
Schedule string
Firewall schedules for enabling this VAP on the FortiAP. This VAP will be enabled when at least one of the schedules is valid. Separate multiple schedule names with a space.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SecondaryWagProfile string
Secondary wireless access gateway profile name.
Security string
Security mode for the wireless interface (default = wpa2-only-personal). Valid values: None, WEP64, wep64, WEP128, wep128, WPA_PSK, WPA_RADIUS, WPA, WPA2, WPA2_AUTO, open, wpa-personal, wpa-enterprise, captive-portal, wpa-only-personal, wpa-only-enterprise, wpa2-only-personal, wpa2-only-enterprise, wpa-personal+captive-portal, wpa-only-personal+captive-portal, wpa2-only-personal+captive-portal, osen, wpa3-enterprise, sae, sae-transition, owe, wpa3-sae, wpa3-sae-transition.
SecurityExemptList string
Optional security exempt list for captive portal authentication.
SecurityObsoleteOption string
Enable/disable obsolete security options. Valid values: disable, enable.
SecurityRedirectUrl string
Optional URL for redirecting users after they pass captive portal authentication.
SelectedUsergroups string
Selective user groups that are permitted to authenticate.
SplitTunneling string
Enable/disable split tunneling (default = disable). Valid values: disable, enable.
Ssid string
IEEE 802.11 service set identifier (SSID) for the wireless interface. Users who wish to use the wireless network must configure their computers to access this SSID name.
StickyClientRemove string
Sticky-Client-Remove. Valid values: disable, enable.
StickyClientThreshold2g string
Sticky-Client-Threshold-2G.
StickyClientThreshold5g string
Sticky-Client-Threshold-5G.
StickyClientThreshold6g string
Minimum signal level/threshold in dBm required for the 6G client to be serviced by the AP (-95 to -20, default = -76).
TargetWakeTime string
Enable/disable 802.11ax target wake time (default = enable). Valid values: disable, enable.
TkipCounterMeasure string
Enable/disable TKIP counter measure. Valid values: disable, enable.
TunnelEchoInterval double
The time interval to send echo to both primary and secondary tunnel peers (1 - 65535 sec, default = 300).
TunnelFallbackInterval double
The time interval for secondary tunnel to fall back to primary tunnel (0 - 65535 sec, default = 7200).
Usergroup string
Firewall user group to be used to authenticate WiFi users.
UtmLog string
Enable/disable UTM logging. Valid values: disable, enable.
UtmProfile string
UTM profile name.
UtmStatus string
Enable to add one or more security profiles (AV, IPS, etc.) to the VAP. Valid values: disable, enable.
Vap string
Vap.
Vdom string
Vdom.
VlanAuto string
Enable/disable automatic management of SSID VLAN interface. Valid values: disable, enable.
VlanPooling string
Enable/disable VLAN pooling, to allow grouping of multiple wireless controller VLANs into VLAN pools (default = disable). When set to wtp-group, VLAN pooling occurs with VLAN assignment by wtp-group. Valid values: wtp-group, round-robin, hash, disable.
Vlanid double
Optional VLAN ID.
VoiceEnterprise string
Enable/disable 802.11k and 802.11v assisted Voice-Enterprise roaming (default = disable). Valid values: disable, enable.
WebfilterProfile string
WebFilter profile name.
_centmgmt string
_Centmgmt. Valid values: disable, enable.
_dhcpSvrId string
_Dhcp_Svr_Id.
_intfAllowaccesses List<string>
_Intf_Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, fgfm, auto-ipsec, radius-acct, probe-response, capwap.
_intfDeviceAccessList string
_Intf_Device-Access-List.
_intfDeviceIdentification string
_Intf_Device-Identification. Valid values: disable, enable.
_intfDeviceNetscan string
_Intf_Device-Netscan. Valid values: disable, enable.
_intfDhcp6RelayIp string
_Intf_Dhcp6-Relay-Ip.
_intfDhcp6RelayService string
_Intf_Dhcp6-Relay-Service. Valid values: disable, enable.
_intfDhcp6RelayType string
_Intf_Dhcp6-Relay-Type. Valid values: regular.
_intfDhcpRelayIps List<string>
_Intf_Dhcp-Relay-Ip.
_intfDhcpRelayService string
_Intf_Dhcp-Relay-Service. Valid values: disable, enable.
_intfDhcpRelayType string
_Intf_Dhcp-Relay-Type. Valid values: regular, ipsec.
_intfIp string
_Intf_Ip.
_intfIp6Address string
_Intf_Ip6-Address.
_intfIp6Allowaccesses List<string>
_Intf_Ip6-Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, any, fgfm, capwap.
_intfListenForticlientConnection string
_Intf_Listen-Forticlient-Connection. Valid values: disable, enable.
_isFactorySetting string
_Is_Factory_Setting. Valid values: disable, enable, ext.
_scopes List<ObjectWirelesscontrollerVapDynamicMapping_Scope>
_Scope. The structure of _scope block is documented below.
AccessControlList string
Access-Control-List.
AcctInterimInterval float64
WiFi RADIUS accounting interim interval (60 - 86400 sec, default = 0).
AdditionalAkms []string
Additional-Akms. Valid values: akm6.
AddressGroup string
Address group ID.
AddressGroupPolicy string
Address-Group-Policy. Valid values: disable, allow, deny.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
Alias string
Alias.
AntivirusProfile string
AntiVirus profile name.
ApplicationDetectionEngine string
Application-Detection-Engine. Valid values: disable, enable.
ApplicationDscpMarking string
Enable/disable application attribute based DSCP marking (default = disable). Valid values: disable, enable.
ApplicationList string
Application control list name.
ApplicationReportIntv float64
Application-Report-Intv.
AtfWeight float64
Airtime weight in percentage (default = 20).
Auth string
Authentication protocol. Valid values: PSK, psk, RADIUS, radius, usergroup.
AuthCert string
HTTPS server certificate.
AuthPortalAddr string
Address of captive portal.
BeaconAdvertisings []string
Fortinet beacon advertising IE data (default = empty). Valid values: name, model, serial-number.
BroadcastSsid string
Enable/disable broadcasting the SSID (default = enable). Valid values: disable, enable.
BroadcastSuppressions []string
Optional suppression of broadcast messages. For example, you can keep DHCP messages, ARP broadcasts, and so on off of the wireless network. Valid values: dhcp, arp, dhcp2, arp2, netbios-ns, netbios-ds, arp3, dhcp-up, dhcp-down, arp-known, arp-unknown, arp-reply, ipv6, dhcp-starvation, arp-poison, all-other-mc, all-other-bc, arp-proxy, dhcp-ucast.
BssColorPartial string
Bss-Color-Partial. Valid values: disable, enable.
BstmDisassociationImminent string
Bstm-Disassociation-Imminent. Valid values: disable, enable.
BstmLoadBalancingDisassocTimer float64
Bstm-Load-Balancing-Disassoc-Timer.
BstmRssiDisassocTimer float64
Bstm-Rssi-Disassoc-Timer.
CaptivePortalAcName string
Local-bridging captive portal ac-name.
CaptivePortalAuthTimeout float64
Captive-Portal-Auth-Timeout.
CaptivePortalFwAccounting string
Enable/disable RADIUS accounting for captive portal firewall authentication session. Valid values: disable, enable.
CaptivePortalMacauthRadiusSecrets []string
Secret key to access the macauth RADIUS server.
CaptivePortalMacauthRadiusServer string
Captive portal external RADIUS server domain name or IP address.
CaptivePortalRadiusSecrets []string
Secret key to access the RADIUS server.
CaptivePortalRadiusServer string
Captive portal RADIUS server domain name or IP address.
CaptivePortalSessionTimeoutInterval float64
Session timeout interval (0 - 864000 sec, default = 0).
ClientCount float64
Client-Count.
DhcpAddressEnforcement string
Dhcp-Address-Enforcement. Valid values: disable, enable.
DhcpLeaseTime float64
DHCP lease time in seconds for NAT IP address.
DhcpOption43Insertion string
Dhcp-Option43-Insertion. Valid values: disable, enable.
DhcpOption82CircuitIdInsertion string
Enable/disable DHCP option 82 circuit-id insert (default = disable). Valid values: disable, style-1, style-2, style-3.
DhcpOption82Insertion string
Enable/disable DHCP option 82 insert (default = disable). Valid values: disable, enable.
DhcpOption82RemoteIdInsertion string
Enable/disable DHCP option 82 remote-id insert (default = disable). Valid values: disable, style-1.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
DynamicVlan string
Enable/disable dynamic VLAN assignment. Valid values: disable, enable.
EapReauth string
Enable/disable EAP re-authentication for WPA-Enterprise security. Valid values: disable, enable.
EapReauthIntv float64
EAP re-authentication interval (1800 - 864000 sec, default = 86400).
EapolKeyRetries string
Enable/disable retransmission of EAPOL-Key frames (message 3/4 and group message 1/2) (default = enable). Valid values: disable, enable.
Encrypt string
Encryption protocol to use (only available when security is set to a WPA type). Valid values: TKIP, AES, TKIP-AES.
ExternalFastRoaming string
Enable/disable fast roaming or pre-authentication with external APs not managed by the FortiGate (default = disable). Valid values: disable, enable.
ExternalLogout string
URL of external authentication logout server.
ExternalWeb string
URL of external authentication web server.
ExternalWebFormat string
URL query parameter detection (default = auto-detect). Valid values: auto-detect, no-query-string, partial-query-string.
FastBssTransition string
Enable/disable 802.11r Fast BSS Transition (FT) (default = disable). Valid values: disable, enable.
FastRoaming string
Enable/disable fast-roaming, or pre-authentication, where supported by clients (default = disable). Valid values: disable, enable.
FtMobilityDomain float64
Mobility domain identifier in FT (1 - 65535, default = 1000).
FtOverDs string
Enable/disable FT over the Distribution System (DS). Valid values: disable, enable.
FtR0KeyLifetime float64
Lifetime of the PMK-R0 key in FT, 1-65535 minutes.
GasComebackDelay float64
Gas-Comeback-Delay.
GasFragmentationLimit float64
Gas-Fragmentation-Limit.
GtkRekey string
Enable/disable GTK rekey for WPA security. Valid values: disable, enable.
GtkRekeyIntv float64
GTK rekey interval (1800 - 864000 sec, default = 86400).
HighEfficiency string
Enable/disable 802.11ax high efficiency (default = enable). Valid values: disable, enable.
Hotspot20Profile string
Hotspot 2.0 profile name.
IgmpSnooping string
Igmp-Snooping. Valid values: disable, enable.
IntraVapPrivacy string
Enable/disable blocking communication between clients on the same SSID (called intra-SSID privacy) (default = disable). Valid values: disable, enable.
Ip string
IP address and subnet mask for the local standalone NAT subnet.
IpsSensor string
IPS sensor name.
Ipv6Rules []string
Ipv6-Rules. Valid values: drop-icmp6ra, drop-icmp6rs, drop-llmnr6, drop-icmp6mld2, drop-dhcp6s, drop-dhcp6c, ndp-proxy, drop-ns-dad, drop-ns-nondad.
Keyindex float64
WEP key index (1 - 4).
Keys []string
WEP Key.
L3Roaming string
L3-Roaming. Valid values: disable, enable.
L3RoamingMode string
Select the way that layer 3 roaming traffic is passed (default = direct). Valid values: direct, indirect.
Ldpc string
VAP low-density parity-check (LDPC) coding configuration. Valid values: disable, tx, rx, rxtx.
LocalAuthentication string
Enable/disable AP local authentication. Valid values: disable, enable.
LocalBridging string
Enable/disable bridging of wireless and Ethernet interfaces on the FortiAP (default = disable). Valid values: disable, enable.
LocalLan string
Allow/deny traffic destined for a Class A, B, or C private IP address (default = allow). Valid values: deny, allow.
LocalStandalone string
Enable/disable AP local standalone (default = disable). Valid values: disable, enable.
LocalStandaloneDns string
Enable/disable AP local standalone DNS. Valid values: disable, enable.
LocalStandaloneDnsIps []string
IPv4 addresses for the local standalone DNS.
LocalStandaloneNat string
Enable/disable AP local standalone NAT mode. Valid values: disable, enable.
LocalSwitching string
Local-Switching. Valid values: disable, enable.
MacAuthBypass string
Enable/disable MAC authentication bypass. Valid values: disable, enable.
MacCalledStationDelimiter string
Mac-Called-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MacCallingStationDelimiter string
Mac-Calling-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MacCase string
Mac-Case. Valid values: uppercase, lowercase.
MacFilter string
Enable/disable MAC filtering to block wireless clients by mac address. Valid values: disable, enable.
MacFilterPolicyOther string
Allow or block clients with MAC addresses that are not in the filter list. Valid values: deny, allow.
MacPasswordDelimiter string
Mac-Password-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MacUsernameDelimiter string
Mac-Username-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
MaxClients float64
Maximum number of clients that can connect simultaneously to the VAP (default = 0, meaning no limitation).
MaxClientsAp float64
Maximum number of clients that can connect simultaneously to the VAP per AP radio (default = 0, meaning no limitation).
Mbo string
Mbo. Valid values: disable, enable.
MboCellDataConnPref string
Mbo-Cell-Data-Conn-Pref. Valid values: excluded, prefer-not, prefer-use.
MeDisableThresh float64
Disable multicast enhancement when this many clients are receiving multicast traffic.
MeshBackhaul string
Enable/disable using this VAP as a WiFi mesh backhaul (default = disable). This entry is only available when security is set to a WPA type or open. Valid values: disable, enable.
Mpsk string
Enable/disable multiple PSK authentication. Valid values: disable, enable.
MpskConcurrentClients float64
Maximum number of concurrent clients that connect using the same passphrase in multiple PSK authentication (0 - 65535, default = 0, meaning no limitation).
MpskProfile string
Mpsk-Profile.
MuMimo string
Enable/disable Multi-user MIMO (default = enable). Valid values: disable, enable.
MulticastEnhance string
Enable/disable converting multicast to unicast to improve performance (default = disable). Valid values: disable, enable.
MulticastRate string
Multicast rate (0, 6000, 12000, or 24000 kbps, default = 0). Valid values: 0, 6000, 12000, 24000.
N80211k string
Enable/disable 802.11k assisted roaming (default = enable). Valid values: disable, enable.
N80211v string
Enable/disable 802.11v assisted roaming (default = enable). Valid values: disable, enable.
Nac string
Nac. Valid values: disable, enable.
NacProfile string
Nac-Profile.
NeighborReportDualBand string
Neighbor-Report-Dual-Band. Valid values: disable, enable.
ObjectWirelesscontrollerVapDynamicMappingId string
an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
Okc string
Enable/disable Opportunistic Key Caching (OKC) (default = enable). Valid values: disable, enable.
Osen string
Enable/disable OSEN as part of key management (default = disable). Valid values: disable, enable.
OweGroups []string
OWE-Groups. Valid values: 19, 20, 21.
OweTransition string
Enable/disable OWE transition mode support. Valid values: disable, enable.
OweTransitionSsid string
OWE transition mode peer SSID.
Passphrases []string
WPA pre-shared key (PSK) to be used to authenticate WiFi users.
Pmf string
Protected Management Frames (PMF) support (default = disable). Valid values: disable, enable, optional.
PmfAssocComebackTimeout float64
Protected Management Frames (PMF) comeback maximum timeout (1-20 sec).
PmfSaQueryRetryTimeout float64
Protected Management Frames (PMF) SA query retry timeout interval (1 - 5 100s of msec).
PortMacauth string
Port-Macauth. Valid values: disable, radius, address-group.
PortMacauthReauthTimeout float64
Port-Macauth-Reauth-Timeout.
PortMacauthTimeout float64
Port-Macauth-Timeout.
PortalMessageOverrideGroup string
Replacement message group for this VAP (only available when security is set to a captive portal type).
PortalType string
Captive portal functionality. Configure how the captive portal authenticates users and whether it includes a disclaimer. Valid values: auth, auth+disclaimer, disclaimer, email-collect, cmcc, cmcc-macauth, auth-mac, external-auth.
PrimaryWagProfile string
Primary wireless access gateway profile name.
ProbeRespSuppression string
Enable/disable probe response suppression (to ignore weak signals) (default = disable). Valid values: disable, enable.
ProbeRespThreshold string
Minimum signal level/threshold in dBm required for the AP response to probe requests (-95 to -20, default = -80).
PtkRekey string
Enable/disable PTK rekey for WPA-Enterprise security. Valid values: disable, enable.
PtkRekeyIntv float64
PTK rekey interval (1800 - 864000 sec, default = 86400).
QosProfile string
Quality of service profile name.
Quarantine string
Enable/disable station quarantine (default = enable). Valid values: disable, enable.
Radio2gThreshold string
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 2.4G band (-95 to -20, default = -79).
Radio5gThreshold string
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 5G band(-95 to -20, default = -76).
RadioSensitivity string
Enable/disable software radio sensitivity (to ignore weak signals) (default = disable). Valid values: disable, enable.
RadiusMacAuth string
Enable/disable RADIUS-based MAC authentication of clients (default = disable). Valid values: disable, enable.
RadiusMacAuthBlockInterval float64
Don't send RADIUS MAC auth request again if the client has been rejected within specific interval (0 or 30 - 864000 seconds, default = 0, 0 to disable blocking).
RadiusMacAuthServer string
RADIUS-based MAC authentication server.
RadiusMacAuthUsergroups []string
Selective user groups that are permitted for RADIUS mac authentication.
RadiusMacMpskAuth string
Enable/disable RADIUS-based MAC authentication of clients for MPSK authentication (default = disable). Valid values: disable, enable.
RadiusMacMpskTimeout float64
RADIUS MAC MPSK cache timeout interval (1800 - 864000, default = 86400).
RadiusServer string
RADIUS server to be used to authenticate WiFi users.
Rates11acMcsMap string
Comma separated list of max supported VHT MCS for spatial streams 1 through 8.
Rates11acSs12s []string
Allowed data rates for 802.11ac/ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/1, mcs11/1, mcs10/2, mcs11/2.
Rates11acSs34s []string
Allowed data rates for 802.11ac/ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/3, mcs11/3, mcs10/4, mcs11/4.
Rates11as []string
Allowed data rates for 802.11a. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
Rates11axMcsMap string
Comma separated list of max supported HE MCS for spatial streams 1 through 8.
Rates11axSs12s []string
Allowed data rates for 802.11ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs10/1, mcs11/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/2, mcs11/2.
Rates11axSs34s []string
Allowed data rates for 802.11ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs10/3, mcs11/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/4, mcs11/4.
Rates11bgs []string
Allowed data rates for 802.11b/g. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
Rates11nSs12s []string
Allowed data rates for 802.11n with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/2, mcs9/2, mcs10/2, mcs11/2, mcs12/2, mcs13/2, mcs14/2, mcs15/2.
Rates11nSs34s []string
Allowed data rates for 802.11n with 3 or 4 spatial streams. Valid values: mcs16/3, mcs17/3, mcs18/3, mcs19/3, mcs20/3, mcs21/3, mcs22/3, mcs23/3, mcs24/4, mcs25/4, mcs26/4, mcs27/4, mcs28/4, mcs29/4, mcs30/4, mcs31/4.
RoamingAcctInterimUpdate string
Enable/disable using accounting interim update instead of accounting start/stop on roaming for WPA-Enterprise security. Valid values: disable, enable.
SaeGroups []string
SAE-Groups. Valid values: 1, 2, 5, 14, 15, 16, 17, 18, 19, 20, 21, 27, 28, 29, 30, 31.
SaeH2eOnly string
Use hash-to-element-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
SaeHnpOnly string
Use hunting-and-pecking-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
SaePasswords []string
WPA3 SAE password to be used to authenticate WiFi users.
SaePk string
Enable/disable WPA3 SAE-PK (default = disable). Valid values: disable, enable.
SaePrivateKey string
Private key used for WPA3 SAE-PK authentication.
ScanBotnetConnections string
Block or monitor connections to Botnet servers or disable Botnet scanning. Valid values: disable, block, monitor.
Schedule string
Firewall schedules for enabling this VAP on the FortiAP. This VAP will be enabled when at least one of the schedules is valid. Separate multiple schedule names with a space.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SecondaryWagProfile string
Secondary wireless access gateway profile name.
Security string
Security mode for the wireless interface (default = wpa2-only-personal). Valid values: None, WEP64, wep64, WEP128, wep128, WPA_PSK, WPA_RADIUS, WPA, WPA2, WPA2_AUTO, open, wpa-personal, wpa-enterprise, captive-portal, wpa-only-personal, wpa-only-enterprise, wpa2-only-personal, wpa2-only-enterprise, wpa-personal+captive-portal, wpa-only-personal+captive-portal, wpa2-only-personal+captive-portal, osen, wpa3-enterprise, sae, sae-transition, owe, wpa3-sae, wpa3-sae-transition.
SecurityExemptList string
Optional security exempt list for captive portal authentication.
SecurityObsoleteOption string
Enable/disable obsolete security options. Valid values: disable, enable.
SecurityRedirectUrl string
Optional URL for redirecting users after they pass captive portal authentication.
SelectedUsergroups string
Selective user groups that are permitted to authenticate.
SplitTunneling string
Enable/disable split tunneling (default = disable). Valid values: disable, enable.
Ssid string
IEEE 802.11 service set identifier (SSID) for the wireless interface. Users who wish to use the wireless network must configure their computers to access this SSID name.
StickyClientRemove string
Sticky-Client-Remove. Valid values: disable, enable.
StickyClientThreshold2g string
Sticky-Client-Threshold-2G.
StickyClientThreshold5g string
Sticky-Client-Threshold-5G.
StickyClientThreshold6g string
Minimum signal level/threshold in dBm required for the 6G client to be serviced by the AP (-95 to -20, default = -76).
TargetWakeTime string
Enable/disable 802.11ax target wake time (default = enable). Valid values: disable, enable.
TkipCounterMeasure string
Enable/disable TKIP counter measure. Valid values: disable, enable.
TunnelEchoInterval float64
The time interval to send echo to both primary and secondary tunnel peers (1 - 65535 sec, default = 300).
TunnelFallbackInterval float64
The time interval for secondary tunnel to fall back to primary tunnel (0 - 65535 sec, default = 7200).
Usergroup string
Firewall user group to be used to authenticate WiFi users.
UtmLog string
Enable/disable UTM logging. Valid values: disable, enable.
UtmProfile string
UTM profile name.
UtmStatus string
Enable to add one or more security profiles (AV, IPS, etc.) to the VAP. Valid values: disable, enable.
Vap string
Vap.
Vdom string
Vdom.
VlanAuto string
Enable/disable automatic management of SSID VLAN interface. Valid values: disable, enable.
VlanPooling string
Enable/disable VLAN pooling, to allow grouping of multiple wireless controller VLANs into VLAN pools (default = disable). When set to wtp-group, VLAN pooling occurs with VLAN assignment by wtp-group. Valid values: wtp-group, round-robin, hash, disable.
Vlanid float64
Optional VLAN ID.
VoiceEnterprise string
Enable/disable 802.11k and 802.11v assisted Voice-Enterprise roaming (default = disable). Valid values: disable, enable.
WebfilterProfile string
WebFilter profile name.
_centmgmt string
_Centmgmt. Valid values: disable, enable.
_dhcpSvrId string
_Dhcp_Svr_Id.
_intfAllowaccesses []string
_Intf_Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, fgfm, auto-ipsec, radius-acct, probe-response, capwap.
_intfDeviceAccessList string
_Intf_Device-Access-List.
_intfDeviceIdentification string
_Intf_Device-Identification. Valid values: disable, enable.
_intfDeviceNetscan string
_Intf_Device-Netscan. Valid values: disable, enable.
_intfDhcp6RelayIp string
_Intf_Dhcp6-Relay-Ip.
_intfDhcp6RelayService string
_Intf_Dhcp6-Relay-Service. Valid values: disable, enable.
_intfDhcp6RelayType string
_Intf_Dhcp6-Relay-Type. Valid values: regular.
_intfDhcpRelayIps []string
_Intf_Dhcp-Relay-Ip.
_intfDhcpRelayService string
_Intf_Dhcp-Relay-Service. Valid values: disable, enable.
_intfDhcpRelayType string
_Intf_Dhcp-Relay-Type. Valid values: regular, ipsec.
_intfIp string
_Intf_Ip.
_intfIp6Address string
_Intf_Ip6-Address.
_intfIp6Allowaccesses []string
_Intf_Ip6-Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, any, fgfm, capwap.
_intfListenForticlientConnection string
_Intf_Listen-Forticlient-Connection. Valid values: disable, enable.
_isFactorySetting string
_Is_Factory_Setting. Valid values: disable, enable, ext.
_scopes []ObjectWirelesscontrollerVapDynamicMapping_ScopeArgs
_Scope. The structure of _scope block is documented below.
_centmgmt String
_Centmgmt. Valid values: disable, enable.
_dhcpSvrId String
_Dhcp_Svr_Id.
_intfAllowaccesses List<String>
_Intf_Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, fgfm, auto-ipsec, radius-acct, probe-response, capwap.
_intfDeviceAccessList String
_Intf_Device-Access-List.
_intfDeviceIdentification String
_Intf_Device-Identification. Valid values: disable, enable.
_intfDeviceNetscan String
_Intf_Device-Netscan. Valid values: disable, enable.
_intfDhcp6RelayIp String
_Intf_Dhcp6-Relay-Ip.
_intfDhcp6RelayService String
_Intf_Dhcp6-Relay-Service. Valid values: disable, enable.
_intfDhcp6RelayType String
_Intf_Dhcp6-Relay-Type. Valid values: regular.
_intfDhcpRelayIps List<String>
_Intf_Dhcp-Relay-Ip.
_intfDhcpRelayService String
_Intf_Dhcp-Relay-Service. Valid values: disable, enable.
_intfDhcpRelayType String
_Intf_Dhcp-Relay-Type. Valid values: regular, ipsec.
_intfIp String
_Intf_Ip.
_intfIp6Address String
_Intf_Ip6-Address.
_intfIp6Allowaccesses List<String>
_Intf_Ip6-Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, any, fgfm, capwap.
_intfListenForticlientConnection String
_Intf_Listen-Forticlient-Connection. Valid values: disable, enable.
_isFactorySetting String
_Is_Factory_Setting. Valid values: disable, enable, ext.
_scopes List<ObjectWirelesscontrollerVapDynamicMapping_Scope>
_Scope. The structure of _scope block is documented below.
accessControlList String
Access-Control-List.
acctInterimInterval Double
WiFi RADIUS accounting interim interval (60 - 86400 sec, default = 0).
additionalAkms List<String>
Additional-Akms. Valid values: akm6.
addressGroup String
Address group ID.
addressGroupPolicy String
Address-Group-Policy. Valid values: disable, allow, deny.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
alias String
Alias.
antivirusProfile String
AntiVirus profile name.
applicationDetectionEngine String
Application-Detection-Engine. Valid values: disable, enable.
applicationDscpMarking String
Enable/disable application attribute based DSCP marking (default = disable). Valid values: disable, enable.
applicationList String
Application control list name.
applicationReportIntv Double
Application-Report-Intv.
atfWeight Double
Airtime weight in percentage (default = 20).
auth String
Authentication protocol. Valid values: PSK, psk, RADIUS, radius, usergroup.
authCert String
HTTPS server certificate.
authPortalAddr String
Address of captive portal.
beaconAdvertisings List<String>
Fortinet beacon advertising IE data (default = empty). Valid values: name, model, serial-number.
broadcastSsid String
Enable/disable broadcasting the SSID (default = enable). Valid values: disable, enable.
broadcastSuppressions List<String>
Optional suppression of broadcast messages. For example, you can keep DHCP messages, ARP broadcasts, and so on off of the wireless network. Valid values: dhcp, arp, dhcp2, arp2, netbios-ns, netbios-ds, arp3, dhcp-up, dhcp-down, arp-known, arp-unknown, arp-reply, ipv6, dhcp-starvation, arp-poison, all-other-mc, all-other-bc, arp-proxy, dhcp-ucast.
bssColorPartial String
Bss-Color-Partial. Valid values: disable, enable.
bstmDisassociationImminent String
Bstm-Disassociation-Imminent. Valid values: disable, enable.
bstmLoadBalancingDisassocTimer Double
Bstm-Load-Balancing-Disassoc-Timer.
bstmRssiDisassocTimer Double
Bstm-Rssi-Disassoc-Timer.
captivePortalAcName String
Local-bridging captive portal ac-name.
captivePortalAuthTimeout Double
Captive-Portal-Auth-Timeout.
captivePortalFwAccounting String
Enable/disable RADIUS accounting for captive portal firewall authentication session. Valid values: disable, enable.
captivePortalMacauthRadiusSecrets List<String>
Secret key to access the macauth RADIUS server.
captivePortalMacauthRadiusServer String
Captive portal external RADIUS server domain name or IP address.
captivePortalRadiusSecrets List<String>
Secret key to access the RADIUS server.
captivePortalRadiusServer String
Captive portal RADIUS server domain name or IP address.
captivePortalSessionTimeoutInterval Double
Session timeout interval (0 - 864000 sec, default = 0).
clientCount Double
Client-Count.
dhcpAddressEnforcement String
Dhcp-Address-Enforcement. Valid values: disable, enable.
dhcpLeaseTime Double
DHCP lease time in seconds for NAT IP address.
dhcpOption43Insertion String
Dhcp-Option43-Insertion. Valid values: disable, enable.
dhcpOption82CircuitIdInsertion String
Enable/disable DHCP option 82 circuit-id insert (default = disable). Valid values: disable, style-1, style-2, style-3.
dhcpOption82Insertion String
Enable/disable DHCP option 82 insert (default = disable). Valid values: disable, enable.
dhcpOption82RemoteIdInsertion String
Enable/disable DHCP option 82 remote-id insert (default = disable). Valid values: disable, style-1.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
dynamicVlan String
Enable/disable dynamic VLAN assignment. Valid values: disable, enable.
eapReauth String
Enable/disable EAP re-authentication for WPA-Enterprise security. Valid values: disable, enable.
eapReauthIntv Double
EAP re-authentication interval (1800 - 864000 sec, default = 86400).
eapolKeyRetries String
Enable/disable retransmission of EAPOL-Key frames (message 3/4 and group message 1/2) (default = enable). Valid values: disable, enable.
encrypt String
Encryption protocol to use (only available when security is set to a WPA type). Valid values: TKIP, AES, TKIP-AES.
externalFastRoaming String
Enable/disable fast roaming or pre-authentication with external APs not managed by the FortiGate (default = disable). Valid values: disable, enable.
externalLogout String
URL of external authentication logout server.
externalWeb String
URL of external authentication web server.
externalWebFormat String
URL query parameter detection (default = auto-detect). Valid values: auto-detect, no-query-string, partial-query-string.
fastBssTransition String
Enable/disable 802.11r Fast BSS Transition (FT) (default = disable). Valid values: disable, enable.
fastRoaming String
Enable/disable fast-roaming, or pre-authentication, where supported by clients (default = disable). Valid values: disable, enable.
ftMobilityDomain Double
Mobility domain identifier in FT (1 - 65535, default = 1000).
ftOverDs String
Enable/disable FT over the Distribution System (DS). Valid values: disable, enable.
ftR0KeyLifetime Double
Lifetime of the PMK-R0 key in FT, 1-65535 minutes.
gasComebackDelay Double
Gas-Comeback-Delay.
gasFragmentationLimit Double
Gas-Fragmentation-Limit.
gtkRekey String
Enable/disable GTK rekey for WPA security. Valid values: disable, enable.
gtkRekeyIntv Double
GTK rekey interval (1800 - 864000 sec, default = 86400).
highEfficiency String
Enable/disable 802.11ax high efficiency (default = enable). Valid values: disable, enable.
hotspot20Profile String
Hotspot 2.0 profile name.
igmpSnooping String
Igmp-Snooping. Valid values: disable, enable.
intraVapPrivacy String
Enable/disable blocking communication between clients on the same SSID (called intra-SSID privacy) (default = disable). Valid values: disable, enable.
ip String
IP address and subnet mask for the local standalone NAT subnet.
ipsSensor String
IPS sensor name.
ipv6Rules List<String>
Ipv6-Rules. Valid values: drop-icmp6ra, drop-icmp6rs, drop-llmnr6, drop-icmp6mld2, drop-dhcp6s, drop-dhcp6c, ndp-proxy, drop-ns-dad, drop-ns-nondad.
keyindex Double
WEP key index (1 - 4).
keys List<String>
WEP Key.
l3Roaming String
L3-Roaming. Valid values: disable, enable.
l3RoamingMode String
Select the way that layer 3 roaming traffic is passed (default = direct). Valid values: direct, indirect.
ldpc String
VAP low-density parity-check (LDPC) coding configuration. Valid values: disable, tx, rx, rxtx.
localAuthentication String
Enable/disable AP local authentication. Valid values: disable, enable.
localBridging String
Enable/disable bridging of wireless and Ethernet interfaces on the FortiAP (default = disable). Valid values: disable, enable.
localLan String
Allow/deny traffic destined for a Class A, B, or C private IP address (default = allow). Valid values: deny, allow.
localStandalone String
Enable/disable AP local standalone (default = disable). Valid values: disable, enable.
localStandaloneDns String
Enable/disable AP local standalone DNS. Valid values: disable, enable.
localStandaloneDnsIps List<String>
IPv4 addresses for the local standalone DNS.
localStandaloneNat String
Enable/disable AP local standalone NAT mode. Valid values: disable, enable.
localSwitching String
Local-Switching. Valid values: disable, enable.
macAuthBypass String
Enable/disable MAC authentication bypass. Valid values: disable, enable.
macCalledStationDelimiter String
Mac-Called-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macCallingStationDelimiter String
Mac-Calling-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macCase String
Mac-Case. Valid values: uppercase, lowercase.
macFilter String
Enable/disable MAC filtering to block wireless clients by mac address. Valid values: disable, enable.
macFilterPolicyOther String
Allow or block clients with MAC addresses that are not in the filter list. Valid values: deny, allow.
macPasswordDelimiter String
Mac-Password-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macUsernameDelimiter String
Mac-Username-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
maxClients Double
Maximum number of clients that can connect simultaneously to the VAP (default = 0, meaning no limitation).
maxClientsAp Double
Maximum number of clients that can connect simultaneously to the VAP per AP radio (default = 0, meaning no limitation).
mbo String
Mbo. Valid values: disable, enable.
mboCellDataConnPref String
Mbo-Cell-Data-Conn-Pref. Valid values: excluded, prefer-not, prefer-use.
meDisableThresh Double
Disable multicast enhancement when this many clients are receiving multicast traffic.
meshBackhaul String
Enable/disable using this VAP as a WiFi mesh backhaul (default = disable). This entry is only available when security is set to a WPA type or open. Valid values: disable, enable.
mpsk String
Enable/disable multiple PSK authentication. Valid values: disable, enable.
mpskConcurrentClients Double
Maximum number of concurrent clients that connect using the same passphrase in multiple PSK authentication (0 - 65535, default = 0, meaning no limitation).
mpskProfile String
Mpsk-Profile.
muMimo String
Enable/disable Multi-user MIMO (default = enable). Valid values: disable, enable.
multicastEnhance String
Enable/disable converting multicast to unicast to improve performance (default = disable). Valid values: disable, enable.
multicastRate String
Multicast rate (0, 6000, 12000, or 24000 kbps, default = 0). Valid values: 0, 6000, 12000, 24000.
n80211k String
Enable/disable 802.11k assisted roaming (default = enable). Valid values: disable, enable.
n80211v String
Enable/disable 802.11v assisted roaming (default = enable). Valid values: disable, enable.
nac String
Nac. Valid values: disable, enable.
nacProfile String
Nac-Profile.
neighborReportDualBand String
Neighbor-Report-Dual-Band. Valid values: disable, enable.
objectWirelesscontrollerVapDynamicMappingId String
an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
okc String
Enable/disable Opportunistic Key Caching (OKC) (default = enable). Valid values: disable, enable.
osen String
Enable/disable OSEN as part of key management (default = disable). Valid values: disable, enable.
oweGroups List<String>
OWE-Groups. Valid values: 19, 20, 21.
oweTransition String
Enable/disable OWE transition mode support. Valid values: disable, enable.
oweTransitionSsid String
OWE transition mode peer SSID.
passphrases List<String>
WPA pre-shared key (PSK) to be used to authenticate WiFi users.
pmf String
Protected Management Frames (PMF) support (default = disable). Valid values: disable, enable, optional.
pmfAssocComebackTimeout Double
Protected Management Frames (PMF) comeback maximum timeout (1-20 sec).
pmfSaQueryRetryTimeout Double
Protected Management Frames (PMF) SA query retry timeout interval (1 - 5 100s of msec).
portMacauth String
Port-Macauth. Valid values: disable, radius, address-group.
portMacauthReauthTimeout Double
Port-Macauth-Reauth-Timeout.
portMacauthTimeout Double
Port-Macauth-Timeout.
portalMessageOverrideGroup String
Replacement message group for this VAP (only available when security is set to a captive portal type).
portalType String
Captive portal functionality. Configure how the captive portal authenticates users and whether it includes a disclaimer. Valid values: auth, auth+disclaimer, disclaimer, email-collect, cmcc, cmcc-macauth, auth-mac, external-auth.
primaryWagProfile String
Primary wireless access gateway profile name.
probeRespSuppression String
Enable/disable probe response suppression (to ignore weak signals) (default = disable). Valid values: disable, enable.
probeRespThreshold String
Minimum signal level/threshold in dBm required for the AP response to probe requests (-95 to -20, default = -80).
ptkRekey String
Enable/disable PTK rekey for WPA-Enterprise security. Valid values: disable, enable.
ptkRekeyIntv Double
PTK rekey interval (1800 - 864000 sec, default = 86400).
qosProfile String
Quality of service profile name.
quarantine String
Enable/disable station quarantine (default = enable). Valid values: disable, enable.
radio2gThreshold String
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 2.4G band (-95 to -20, default = -79).
radio5gThreshold String
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 5G band(-95 to -20, default = -76).
radioSensitivity String
Enable/disable software radio sensitivity (to ignore weak signals) (default = disable). Valid values: disable, enable.
radiusMacAuth String
Enable/disable RADIUS-based MAC authentication of clients (default = disable). Valid values: disable, enable.
radiusMacAuthBlockInterval Double
Don't send RADIUS MAC auth request again if the client has been rejected within specific interval (0 or 30 - 864000 seconds, default = 0, 0 to disable blocking).
radiusMacAuthServer String
RADIUS-based MAC authentication server.
radiusMacAuthUsergroups List<String>
Selective user groups that are permitted for RADIUS mac authentication.
radiusMacMpskAuth String
Enable/disable RADIUS-based MAC authentication of clients for MPSK authentication (default = disable). Valid values: disable, enable.
radiusMacMpskTimeout Double
RADIUS MAC MPSK cache timeout interval (1800 - 864000, default = 86400).
radiusServer String
RADIUS server to be used to authenticate WiFi users.
rates11acMcsMap String
Comma separated list of max supported VHT MCS for spatial streams 1 through 8.
rates11acSs12s List<String>
Allowed data rates for 802.11ac/ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/1, mcs11/1, mcs10/2, mcs11/2.
rates11acSs34s List<String>
Allowed data rates for 802.11ac/ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/3, mcs11/3, mcs10/4, mcs11/4.
rates11as List<String>
Allowed data rates for 802.11a. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11axMcsMap String
Comma separated list of max supported HE MCS for spatial streams 1 through 8.
rates11axSs12s List<String>
Allowed data rates for 802.11ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs10/1, mcs11/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/2, mcs11/2.
rates11axSs34s List<String>
Allowed data rates for 802.11ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs10/3, mcs11/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/4, mcs11/4.
rates11bgs List<String>
Allowed data rates for 802.11b/g. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11nSs12s List<String>
Allowed data rates for 802.11n with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/2, mcs9/2, mcs10/2, mcs11/2, mcs12/2, mcs13/2, mcs14/2, mcs15/2.
rates11nSs34s List<String>
Allowed data rates for 802.11n with 3 or 4 spatial streams. Valid values: mcs16/3, mcs17/3, mcs18/3, mcs19/3, mcs20/3, mcs21/3, mcs22/3, mcs23/3, mcs24/4, mcs25/4, mcs26/4, mcs27/4, mcs28/4, mcs29/4, mcs30/4, mcs31/4.
roamingAcctInterimUpdate String
Enable/disable using accounting interim update instead of accounting start/stop on roaming for WPA-Enterprise security. Valid values: disable, enable.
saeGroups List<String>
SAE-Groups. Valid values: 1, 2, 5, 14, 15, 16, 17, 18, 19, 20, 21, 27, 28, 29, 30, 31.
saeH2eOnly String
Use hash-to-element-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
saeHnpOnly String
Use hunting-and-pecking-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
saePasswords List<String>
WPA3 SAE password to be used to authenticate WiFi users.
saePk String
Enable/disable WPA3 SAE-PK (default = disable). Valid values: disable, enable.
saePrivateKey String
Private key used for WPA3 SAE-PK authentication.
scanBotnetConnections String
Block or monitor connections to Botnet servers or disable Botnet scanning. Valid values: disable, block, monitor.
schedule String
Firewall schedules for enabling this VAP on the FortiAP. This VAP will be enabled when at least one of the schedules is valid. Separate multiple schedule names with a space.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
secondaryWagProfile String
Secondary wireless access gateway profile name.
security String
Security mode for the wireless interface (default = wpa2-only-personal). Valid values: None, WEP64, wep64, WEP128, wep128, WPA_PSK, WPA_RADIUS, WPA, WPA2, WPA2_AUTO, open, wpa-personal, wpa-enterprise, captive-portal, wpa-only-personal, wpa-only-enterprise, wpa2-only-personal, wpa2-only-enterprise, wpa-personal+captive-portal, wpa-only-personal+captive-portal, wpa2-only-personal+captive-portal, osen, wpa3-enterprise, sae, sae-transition, owe, wpa3-sae, wpa3-sae-transition.
securityExemptList String
Optional security exempt list for captive portal authentication.
securityObsoleteOption String
Enable/disable obsolete security options. Valid values: disable, enable.
securityRedirectUrl String
Optional URL for redirecting users after they pass captive portal authentication.
selectedUsergroups String
Selective user groups that are permitted to authenticate.
splitTunneling String
Enable/disable split tunneling (default = disable). Valid values: disable, enable.
ssid String
IEEE 802.11 service set identifier (SSID) for the wireless interface. Users who wish to use the wireless network must configure their computers to access this SSID name.
stickyClientRemove String
Sticky-Client-Remove. Valid values: disable, enable.
stickyClientThreshold2g String
Sticky-Client-Threshold-2G.
stickyClientThreshold5g String
Sticky-Client-Threshold-5G.
stickyClientThreshold6g String
Minimum signal level/threshold in dBm required for the 6G client to be serviced by the AP (-95 to -20, default = -76).
targetWakeTime String
Enable/disable 802.11ax target wake time (default = enable). Valid values: disable, enable.
tkipCounterMeasure String
Enable/disable TKIP counter measure. Valid values: disable, enable.
tunnelEchoInterval Double
The time interval to send echo to both primary and secondary tunnel peers (1 - 65535 sec, default = 300).
tunnelFallbackInterval Double
The time interval for secondary tunnel to fall back to primary tunnel (0 - 65535 sec, default = 7200).
usergroup String
Firewall user group to be used to authenticate WiFi users.
utmLog String
Enable/disable UTM logging. Valid values: disable, enable.
utmProfile String
UTM profile name.
utmStatus String
Enable to add one or more security profiles (AV, IPS, etc.) to the VAP. Valid values: disable, enable.
vap String
Vap.
vdom String
Vdom.
vlanAuto String
Enable/disable automatic management of SSID VLAN interface. Valid values: disable, enable.
vlanPooling String
Enable/disable VLAN pooling, to allow grouping of multiple wireless controller VLANs into VLAN pools (default = disable). When set to wtp-group, VLAN pooling occurs with VLAN assignment by wtp-group. Valid values: wtp-group, round-robin, hash, disable.
vlanid Double
Optional VLAN ID.
voiceEnterprise String
Enable/disable 802.11k and 802.11v assisted Voice-Enterprise roaming (default = disable). Valid values: disable, enable.
webfilterProfile String
WebFilter profile name.
_centmgmt string
_Centmgmt. Valid values: disable, enable.
_dhcpSvrId string
_Dhcp_Svr_Id.
_intfAllowaccesses string[]
_Intf_Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, fgfm, auto-ipsec, radius-acct, probe-response, capwap.
_intfDeviceAccessList string
_Intf_Device-Access-List.
_intfDeviceIdentification string
_Intf_Device-Identification. Valid values: disable, enable.
_intfDeviceNetscan string
_Intf_Device-Netscan. Valid values: disable, enable.
_intfDhcp6RelayIp string
_Intf_Dhcp6-Relay-Ip.
_intfDhcp6RelayService string
_Intf_Dhcp6-Relay-Service. Valid values: disable, enable.
_intfDhcp6RelayType string
_Intf_Dhcp6-Relay-Type. Valid values: regular.
_intfDhcpRelayIps string[]
_Intf_Dhcp-Relay-Ip.
_intfDhcpRelayService string
_Intf_Dhcp-Relay-Service. Valid values: disable, enable.
_intfDhcpRelayType string
_Intf_Dhcp-Relay-Type. Valid values: regular, ipsec.
_intfIp string
_Intf_Ip.
_intfIp6Address string
_Intf_Ip6-Address.
_intfIp6Allowaccesses string[]
_Intf_Ip6-Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, any, fgfm, capwap.
_intfListenForticlientConnection string
_Intf_Listen-Forticlient-Connection. Valid values: disable, enable.
_isFactorySetting string
_Is_Factory_Setting. Valid values: disable, enable, ext.
_scopes ObjectWirelesscontrollerVapDynamicMapping_Scope[]
_Scope. The structure of _scope block is documented below.
accessControlList string
Access-Control-List.
acctInterimInterval number
WiFi RADIUS accounting interim interval (60 - 86400 sec, default = 0).
additionalAkms string[]
Additional-Akms. Valid values: akm6.
addressGroup string
Address group ID.
addressGroupPolicy string
Address-Group-Policy. Valid values: disable, allow, deny.
adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
alias string
Alias.
antivirusProfile string
AntiVirus profile name.
applicationDetectionEngine string
Application-Detection-Engine. Valid values: disable, enable.
applicationDscpMarking string
Enable/disable application attribute based DSCP marking (default = disable). Valid values: disable, enable.
applicationList string
Application control list name.
applicationReportIntv number
Application-Report-Intv.
atfWeight number
Airtime weight in percentage (default = 20).
auth string
Authentication protocol. Valid values: PSK, psk, RADIUS, radius, usergroup.
authCert string
HTTPS server certificate.
authPortalAddr string
Address of captive portal.
beaconAdvertisings string[]
Fortinet beacon advertising IE data (default = empty). Valid values: name, model, serial-number.
broadcastSsid string
Enable/disable broadcasting the SSID (default = enable). Valid values: disable, enable.
broadcastSuppressions string[]
Optional suppression of broadcast messages. For example, you can keep DHCP messages, ARP broadcasts, and so on off of the wireless network. Valid values: dhcp, arp, dhcp2, arp2, netbios-ns, netbios-ds, arp3, dhcp-up, dhcp-down, arp-known, arp-unknown, arp-reply, ipv6, dhcp-starvation, arp-poison, all-other-mc, all-other-bc, arp-proxy, dhcp-ucast.
bssColorPartial string
Bss-Color-Partial. Valid values: disable, enable.
bstmDisassociationImminent string
Bstm-Disassociation-Imminent. Valid values: disable, enable.
bstmLoadBalancingDisassocTimer number
Bstm-Load-Balancing-Disassoc-Timer.
bstmRssiDisassocTimer number
Bstm-Rssi-Disassoc-Timer.
captivePortalAcName string
Local-bridging captive portal ac-name.
captivePortalAuthTimeout number
Captive-Portal-Auth-Timeout.
captivePortalFwAccounting string
Enable/disable RADIUS accounting for captive portal firewall authentication session. Valid values: disable, enable.
captivePortalMacauthRadiusSecrets string[]
Secret key to access the macauth RADIUS server.
captivePortalMacauthRadiusServer string
Captive portal external RADIUS server domain name or IP address.
captivePortalRadiusSecrets string[]
Secret key to access the RADIUS server.
captivePortalRadiusServer string
Captive portal RADIUS server domain name or IP address.
captivePortalSessionTimeoutInterval number
Session timeout interval (0 - 864000 sec, default = 0).
clientCount number
Client-Count.
dhcpAddressEnforcement string
Dhcp-Address-Enforcement. Valid values: disable, enable.
dhcpLeaseTime number
DHCP lease time in seconds for NAT IP address.
dhcpOption43Insertion string
Dhcp-Option43-Insertion. Valid values: disable, enable.
dhcpOption82CircuitIdInsertion string
Enable/disable DHCP option 82 circuit-id insert (default = disable). Valid values: disable, style-1, style-2, style-3.
dhcpOption82Insertion string
Enable/disable DHCP option 82 insert (default = disable). Valid values: disable, enable.
dhcpOption82RemoteIdInsertion string
Enable/disable DHCP option 82 remote-id insert (default = disable). Valid values: disable, style-1.
dynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
dynamicVlan string
Enable/disable dynamic VLAN assignment. Valid values: disable, enable.
eapReauth string
Enable/disable EAP re-authentication for WPA-Enterprise security. Valid values: disable, enable.
eapReauthIntv number
EAP re-authentication interval (1800 - 864000 sec, default = 86400).
eapolKeyRetries string
Enable/disable retransmission of EAPOL-Key frames (message 3/4 and group message 1/2) (default = enable). Valid values: disable, enable.
encrypt string
Encryption protocol to use (only available when security is set to a WPA type). Valid values: TKIP, AES, TKIP-AES.
externalFastRoaming string
Enable/disable fast roaming or pre-authentication with external APs not managed by the FortiGate (default = disable). Valid values: disable, enable.
externalLogout string
URL of external authentication logout server.
externalWeb string
URL of external authentication web server.
externalWebFormat string
URL query parameter detection (default = auto-detect). Valid values: auto-detect, no-query-string, partial-query-string.
fastBssTransition string
Enable/disable 802.11r Fast BSS Transition (FT) (default = disable). Valid values: disable, enable.
fastRoaming string
Enable/disable fast-roaming, or pre-authentication, where supported by clients (default = disable). Valid values: disable, enable.
ftMobilityDomain number
Mobility domain identifier in FT (1 - 65535, default = 1000).
ftOverDs string
Enable/disable FT over the Distribution System (DS). Valid values: disable, enable.
ftR0KeyLifetime number
Lifetime of the PMK-R0 key in FT, 1-65535 minutes.
gasComebackDelay number
Gas-Comeback-Delay.
gasFragmentationLimit number
Gas-Fragmentation-Limit.
gtkRekey string
Enable/disable GTK rekey for WPA security. Valid values: disable, enable.
gtkRekeyIntv number
GTK rekey interval (1800 - 864000 sec, default = 86400).
highEfficiency string
Enable/disable 802.11ax high efficiency (default = enable). Valid values: disable, enable.
hotspot20Profile string
Hotspot 2.0 profile name.
igmpSnooping string
Igmp-Snooping. Valid values: disable, enable.
intraVapPrivacy string
Enable/disable blocking communication between clients on the same SSID (called intra-SSID privacy) (default = disable). Valid values: disable, enable.
ip string
IP address and subnet mask for the local standalone NAT subnet.
ipsSensor string
IPS sensor name.
ipv6Rules string[]
Ipv6-Rules. Valid values: drop-icmp6ra, drop-icmp6rs, drop-llmnr6, drop-icmp6mld2, drop-dhcp6s, drop-dhcp6c, ndp-proxy, drop-ns-dad, drop-ns-nondad.
keyindex number
WEP key index (1 - 4).
keys string[]
WEP Key.
l3Roaming string
L3-Roaming. Valid values: disable, enable.
l3RoamingMode string
Select the way that layer 3 roaming traffic is passed (default = direct). Valid values: direct, indirect.
ldpc string
VAP low-density parity-check (LDPC) coding configuration. Valid values: disable, tx, rx, rxtx.
localAuthentication string
Enable/disable AP local authentication. Valid values: disable, enable.
localBridging string
Enable/disable bridging of wireless and Ethernet interfaces on the FortiAP (default = disable). Valid values: disable, enable.
localLan string
Allow/deny traffic destined for a Class A, B, or C private IP address (default = allow). Valid values: deny, allow.
localStandalone string
Enable/disable AP local standalone (default = disable). Valid values: disable, enable.
localStandaloneDns string
Enable/disable AP local standalone DNS. Valid values: disable, enable.
localStandaloneDnsIps string[]
IPv4 addresses for the local standalone DNS.
localStandaloneNat string
Enable/disable AP local standalone NAT mode. Valid values: disable, enable.
localSwitching string
Local-Switching. Valid values: disable, enable.
macAuthBypass string
Enable/disable MAC authentication bypass. Valid values: disable, enable.
macCalledStationDelimiter string
Mac-Called-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macCallingStationDelimiter string
Mac-Calling-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macCase string
Mac-Case. Valid values: uppercase, lowercase.
macFilter string
Enable/disable MAC filtering to block wireless clients by mac address. Valid values: disable, enable.
macFilterPolicyOther string
Allow or block clients with MAC addresses that are not in the filter list. Valid values: deny, allow.
macPasswordDelimiter string
Mac-Password-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macUsernameDelimiter string
Mac-Username-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
maxClients number
Maximum number of clients that can connect simultaneously to the VAP (default = 0, meaning no limitation).
maxClientsAp number
Maximum number of clients that can connect simultaneously to the VAP per AP radio (default = 0, meaning no limitation).
mbo string
Mbo. Valid values: disable, enable.
mboCellDataConnPref string
Mbo-Cell-Data-Conn-Pref. Valid values: excluded, prefer-not, prefer-use.
meDisableThresh number
Disable multicast enhancement when this many clients are receiving multicast traffic.
meshBackhaul string
Enable/disable using this VAP as a WiFi mesh backhaul (default = disable). This entry is only available when security is set to a WPA type or open. Valid values: disable, enable.
mpsk string
Enable/disable multiple PSK authentication. Valid values: disable, enable.
mpskConcurrentClients number
Maximum number of concurrent clients that connect using the same passphrase in multiple PSK authentication (0 - 65535, default = 0, meaning no limitation).
mpskProfile string
Mpsk-Profile.
muMimo string
Enable/disable Multi-user MIMO (default = enable). Valid values: disable, enable.
multicastEnhance string
Enable/disable converting multicast to unicast to improve performance (default = disable). Valid values: disable, enable.
multicastRate string
Multicast rate (0, 6000, 12000, or 24000 kbps, default = 0). Valid values: 0, 6000, 12000, 24000.
n80211k string
Enable/disable 802.11k assisted roaming (default = enable). Valid values: disable, enable.
n80211v string
Enable/disable 802.11v assisted roaming (default = enable). Valid values: disable, enable.
nac string
Nac. Valid values: disable, enable.
nacProfile string
Nac-Profile.
neighborReportDualBand string
Neighbor-Report-Dual-Band. Valid values: disable, enable.
objectWirelesscontrollerVapDynamicMappingId string
an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
okc string
Enable/disable Opportunistic Key Caching (OKC) (default = enable). Valid values: disable, enable.
osen string
Enable/disable OSEN as part of key management (default = disable). Valid values: disable, enable.
oweGroups string[]
OWE-Groups. Valid values: 19, 20, 21.
oweTransition string
Enable/disable OWE transition mode support. Valid values: disable, enable.
oweTransitionSsid string
OWE transition mode peer SSID.
passphrases string[]
WPA pre-shared key (PSK) to be used to authenticate WiFi users.
pmf string
Protected Management Frames (PMF) support (default = disable). Valid values: disable, enable, optional.
pmfAssocComebackTimeout number
Protected Management Frames (PMF) comeback maximum timeout (1-20 sec).
pmfSaQueryRetryTimeout number
Protected Management Frames (PMF) SA query retry timeout interval (1 - 5 100s of msec).
portMacauth string
Port-Macauth. Valid values: disable, radius, address-group.
portMacauthReauthTimeout number
Port-Macauth-Reauth-Timeout.
portMacauthTimeout number
Port-Macauth-Timeout.
portalMessageOverrideGroup string
Replacement message group for this VAP (only available when security is set to a captive portal type).
portalType string
Captive portal functionality. Configure how the captive portal authenticates users and whether it includes a disclaimer. Valid values: auth, auth+disclaimer, disclaimer, email-collect, cmcc, cmcc-macauth, auth-mac, external-auth.
primaryWagProfile string
Primary wireless access gateway profile name.
probeRespSuppression string
Enable/disable probe response suppression (to ignore weak signals) (default = disable). Valid values: disable, enable.
probeRespThreshold string
Minimum signal level/threshold in dBm required for the AP response to probe requests (-95 to -20, default = -80).
ptkRekey string
Enable/disable PTK rekey for WPA-Enterprise security. Valid values: disable, enable.
ptkRekeyIntv number
PTK rekey interval (1800 - 864000 sec, default = 86400).
qosProfile string
Quality of service profile name.
quarantine string
Enable/disable station quarantine (default = enable). Valid values: disable, enable.
radio2gThreshold string
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 2.4G band (-95 to -20, default = -79).
radio5gThreshold string
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 5G band(-95 to -20, default = -76).
radioSensitivity string
Enable/disable software radio sensitivity (to ignore weak signals) (default = disable). Valid values: disable, enable.
radiusMacAuth string
Enable/disable RADIUS-based MAC authentication of clients (default = disable). Valid values: disable, enable.
radiusMacAuthBlockInterval number
Don't send RADIUS MAC auth request again if the client has been rejected within specific interval (0 or 30 - 864000 seconds, default = 0, 0 to disable blocking).
radiusMacAuthServer string
RADIUS-based MAC authentication server.
radiusMacAuthUsergroups string[]
Selective user groups that are permitted for RADIUS mac authentication.
radiusMacMpskAuth string
Enable/disable RADIUS-based MAC authentication of clients for MPSK authentication (default = disable). Valid values: disable, enable.
radiusMacMpskTimeout number
RADIUS MAC MPSK cache timeout interval (1800 - 864000, default = 86400).
radiusServer string
RADIUS server to be used to authenticate WiFi users.
rates11acMcsMap string
Comma separated list of max supported VHT MCS for spatial streams 1 through 8.
rates11acSs12s string[]
Allowed data rates for 802.11ac/ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/1, mcs11/1, mcs10/2, mcs11/2.
rates11acSs34s string[]
Allowed data rates for 802.11ac/ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/3, mcs11/3, mcs10/4, mcs11/4.
rates11as string[]
Allowed data rates for 802.11a. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11axMcsMap string
Comma separated list of max supported HE MCS for spatial streams 1 through 8.
rates11axSs12s string[]
Allowed data rates for 802.11ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs10/1, mcs11/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/2, mcs11/2.
rates11axSs34s string[]
Allowed data rates for 802.11ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs10/3, mcs11/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/4, mcs11/4.
rates11bgs string[]
Allowed data rates for 802.11b/g. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11nSs12s string[]
Allowed data rates for 802.11n with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/2, mcs9/2, mcs10/2, mcs11/2, mcs12/2, mcs13/2, mcs14/2, mcs15/2.
rates11nSs34s string[]
Allowed data rates for 802.11n with 3 or 4 spatial streams. Valid values: mcs16/3, mcs17/3, mcs18/3, mcs19/3, mcs20/3, mcs21/3, mcs22/3, mcs23/3, mcs24/4, mcs25/4, mcs26/4, mcs27/4, mcs28/4, mcs29/4, mcs30/4, mcs31/4.
roamingAcctInterimUpdate string
Enable/disable using accounting interim update instead of accounting start/stop on roaming for WPA-Enterprise security. Valid values: disable, enable.
saeGroups string[]
SAE-Groups. Valid values: 1, 2, 5, 14, 15, 16, 17, 18, 19, 20, 21, 27, 28, 29, 30, 31.
saeH2eOnly string
Use hash-to-element-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
saeHnpOnly string
Use hunting-and-pecking-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
saePasswords string[]
WPA3 SAE password to be used to authenticate WiFi users.
saePk string
Enable/disable WPA3 SAE-PK (default = disable). Valid values: disable, enable.
saePrivateKey string
Private key used for WPA3 SAE-PK authentication.
scanBotnetConnections string
Block or monitor connections to Botnet servers or disable Botnet scanning. Valid values: disable, block, monitor.
schedule string
Firewall schedules for enabling this VAP on the FortiAP. This VAP will be enabled when at least one of the schedules is valid. Separate multiple schedule names with a space.
scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
secondaryWagProfile string
Secondary wireless access gateway profile name.
security string
Security mode for the wireless interface (default = wpa2-only-personal). Valid values: None, WEP64, wep64, WEP128, wep128, WPA_PSK, WPA_RADIUS, WPA, WPA2, WPA2_AUTO, open, wpa-personal, wpa-enterprise, captive-portal, wpa-only-personal, wpa-only-enterprise, wpa2-only-personal, wpa2-only-enterprise, wpa-personal+captive-portal, wpa-only-personal+captive-portal, wpa2-only-personal+captive-portal, osen, wpa3-enterprise, sae, sae-transition, owe, wpa3-sae, wpa3-sae-transition.
securityExemptList string
Optional security exempt list for captive portal authentication.
securityObsoleteOption string
Enable/disable obsolete security options. Valid values: disable, enable.
securityRedirectUrl string
Optional URL for redirecting users after they pass captive portal authentication.
selectedUsergroups string
Selective user groups that are permitted to authenticate.
splitTunneling string
Enable/disable split tunneling (default = disable). Valid values: disable, enable.
ssid string
IEEE 802.11 service set identifier (SSID) for the wireless interface. Users who wish to use the wireless network must configure their computers to access this SSID name.
stickyClientRemove string
Sticky-Client-Remove. Valid values: disable, enable.
stickyClientThreshold2g string
Sticky-Client-Threshold-2G.
stickyClientThreshold5g string
Sticky-Client-Threshold-5G.
stickyClientThreshold6g string
Minimum signal level/threshold in dBm required for the 6G client to be serviced by the AP (-95 to -20, default = -76).
targetWakeTime string
Enable/disable 802.11ax target wake time (default = enable). Valid values: disable, enable.
tkipCounterMeasure string
Enable/disable TKIP counter measure. Valid values: disable, enable.
tunnelEchoInterval number
The time interval to send echo to both primary and secondary tunnel peers (1 - 65535 sec, default = 300).
tunnelFallbackInterval number
The time interval for secondary tunnel to fall back to primary tunnel (0 - 65535 sec, default = 7200).
usergroup string
Firewall user group to be used to authenticate WiFi users.
utmLog string
Enable/disable UTM logging. Valid values: disable, enable.
utmProfile string
UTM profile name.
utmStatus string
Enable to add one or more security profiles (AV, IPS, etc.) to the VAP. Valid values: disable, enable.
vap string
Vap.
vdom string
Vdom.
vlanAuto string
Enable/disable automatic management of SSID VLAN interface. Valid values: disable, enable.
vlanPooling string
Enable/disable VLAN pooling, to allow grouping of multiple wireless controller VLANs into VLAN pools (default = disable). When set to wtp-group, VLAN pooling occurs with VLAN assignment by wtp-group. Valid values: wtp-group, round-robin, hash, disable.
vlanid number
Optional VLAN ID.
voiceEnterprise string
Enable/disable 802.11k and 802.11v assisted Voice-Enterprise roaming (default = disable). Valid values: disable, enable.
webfilterProfile string
WebFilter profile name.
_centmgmt str
_Centmgmt. Valid values: disable, enable.
_dhcp_svr_id str
_Dhcp_Svr_Id.
_intf_allowaccesses Sequence[str]
_Intf_Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, fgfm, auto-ipsec, radius-acct, probe-response, capwap.
_intf_device_access_list str
_Intf_Device-Access-List.
_intf_device_identification str
_Intf_Device-Identification. Valid values: disable, enable.
_intf_device_netscan str
_Intf_Device-Netscan. Valid values: disable, enable.
_intf_dhcp6_relay_ip str
_Intf_Dhcp6-Relay-Ip.
_intf_dhcp6_relay_service str
_Intf_Dhcp6-Relay-Service. Valid values: disable, enable.
_intf_dhcp6_relay_type str
_Intf_Dhcp6-Relay-Type. Valid values: regular.
_intf_dhcp_relay_ips Sequence[str]
_Intf_Dhcp-Relay-Ip.
_intf_dhcp_relay_service str
_Intf_Dhcp-Relay-Service. Valid values: disable, enable.
_intf_dhcp_relay_type str
_Intf_Dhcp-Relay-Type. Valid values: regular, ipsec.
_intf_ip str
_Intf_Ip.
_intf_ip6_address str
_Intf_Ip6-Address.
_intf_ip6_allowaccesses Sequence[str]
_Intf_Ip6-Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, any, fgfm, capwap.
_intf_listen_forticlient_connection str
_Intf_Listen-Forticlient-Connection. Valid values: disable, enable.
_is_factory_setting str
_Is_Factory_Setting. Valid values: disable, enable, ext.
_scopes Sequence[ObjectWirelesscontrollerVapDynamicMapping_ScopeArgs]
_Scope. The structure of _scope block is documented below.
access_control_list str
Access-Control-List.
acct_interim_interval float
WiFi RADIUS accounting interim interval (60 - 86400 sec, default = 0).
additional_akms Sequence[str]
Additional-Akms. Valid values: akm6.
address_group str
Address group ID.
address_group_policy str
Address-Group-Policy. Valid values: disable, allow, deny.
adom str
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
alias str
Alias.
antivirus_profile str
AntiVirus profile name.
application_detection_engine str
Application-Detection-Engine. Valid values: disable, enable.
application_dscp_marking str
Enable/disable application attribute based DSCP marking (default = disable). Valid values: disable, enable.
application_list str
Application control list name.
application_report_intv float
Application-Report-Intv.
atf_weight float
Airtime weight in percentage (default = 20).
auth str
Authentication protocol. Valid values: PSK, psk, RADIUS, radius, usergroup.
auth_cert str
HTTPS server certificate.
auth_portal_addr str
Address of captive portal.
beacon_advertisings Sequence[str]
Fortinet beacon advertising IE data (default = empty). Valid values: name, model, serial-number.
broadcast_ssid str
Enable/disable broadcasting the SSID (default = enable). Valid values: disable, enable.
broadcast_suppressions Sequence[str]
Optional suppression of broadcast messages. For example, you can keep DHCP messages, ARP broadcasts, and so on off of the wireless network. Valid values: dhcp, arp, dhcp2, arp2, netbios-ns, netbios-ds, arp3, dhcp-up, dhcp-down, arp-known, arp-unknown, arp-reply, ipv6, dhcp-starvation, arp-poison, all-other-mc, all-other-bc, arp-proxy, dhcp-ucast.
bss_color_partial str
Bss-Color-Partial. Valid values: disable, enable.
bstm_disassociation_imminent str
Bstm-Disassociation-Imminent. Valid values: disable, enable.
bstm_load_balancing_disassoc_timer float
Bstm-Load-Balancing-Disassoc-Timer.
bstm_rssi_disassoc_timer float
Bstm-Rssi-Disassoc-Timer.
captive_portal_ac_name str
Local-bridging captive portal ac-name.
captive_portal_auth_timeout float
Captive-Portal-Auth-Timeout.
captive_portal_fw_accounting str
Enable/disable RADIUS accounting for captive portal firewall authentication session. Valid values: disable, enable.
captive_portal_macauth_radius_secrets Sequence[str]
Secret key to access the macauth RADIUS server.
captive_portal_macauth_radius_server str
Captive portal external RADIUS server domain name or IP address.
captive_portal_radius_secrets Sequence[str]
Secret key to access the RADIUS server.
captive_portal_radius_server str
Captive portal RADIUS server domain name or IP address.
captive_portal_session_timeout_interval float
Session timeout interval (0 - 864000 sec, default = 0).
client_count float
Client-Count.
dhcp_address_enforcement str
Dhcp-Address-Enforcement. Valid values: disable, enable.
dhcp_lease_time float
DHCP lease time in seconds for NAT IP address.
dhcp_option43_insertion str
Dhcp-Option43-Insertion. Valid values: disable, enable.
dhcp_option82_circuit_id_insertion str
Enable/disable DHCP option 82 circuit-id insert (default = disable). Valid values: disable, style-1, style-2, style-3.
dhcp_option82_insertion str
Enable/disable DHCP option 82 insert (default = disable). Valid values: disable, enable.
dhcp_option82_remote_id_insertion str
Enable/disable DHCP option 82 remote-id insert (default = disable). Valid values: disable, style-1.
dynamic_sort_subtable str
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
dynamic_vlan str
Enable/disable dynamic VLAN assignment. Valid values: disable, enable.
eap_reauth str
Enable/disable EAP re-authentication for WPA-Enterprise security. Valid values: disable, enable.
eap_reauth_intv float
EAP re-authentication interval (1800 - 864000 sec, default = 86400).
eapol_key_retries str
Enable/disable retransmission of EAPOL-Key frames (message 3/4 and group message 1/2) (default = enable). Valid values: disable, enable.
encrypt str
Encryption protocol to use (only available when security is set to a WPA type). Valid values: TKIP, AES, TKIP-AES.
external_fast_roaming str
Enable/disable fast roaming or pre-authentication with external APs not managed by the FortiGate (default = disable). Valid values: disable, enable.
external_logout str
URL of external authentication logout server.
external_web str
URL of external authentication web server.
external_web_format str
URL query parameter detection (default = auto-detect). Valid values: auto-detect, no-query-string, partial-query-string.
fast_bss_transition str
Enable/disable 802.11r Fast BSS Transition (FT) (default = disable). Valid values: disable, enable.
fast_roaming str
Enable/disable fast-roaming, or pre-authentication, where supported by clients (default = disable). Valid values: disable, enable.
ft_mobility_domain float
Mobility domain identifier in FT (1 - 65535, default = 1000).
ft_over_ds str
Enable/disable FT over the Distribution System (DS). Valid values: disable, enable.
ft_r0_key_lifetime float
Lifetime of the PMK-R0 key in FT, 1-65535 minutes.
gas_comeback_delay float
Gas-Comeback-Delay.
gas_fragmentation_limit float
Gas-Fragmentation-Limit.
gtk_rekey str
Enable/disable GTK rekey for WPA security. Valid values: disable, enable.
gtk_rekey_intv float
GTK rekey interval (1800 - 864000 sec, default = 86400).
high_efficiency str
Enable/disable 802.11ax high efficiency (default = enable). Valid values: disable, enable.
hotspot20_profile str
Hotspot 2.0 profile name.
igmp_snooping str
Igmp-Snooping. Valid values: disable, enable.
intra_vap_privacy str
Enable/disable blocking communication between clients on the same SSID (called intra-SSID privacy) (default = disable). Valid values: disable, enable.
ip str
IP address and subnet mask for the local standalone NAT subnet.
ips_sensor str
IPS sensor name.
ipv6_rules Sequence[str]
Ipv6-Rules. Valid values: drop-icmp6ra, drop-icmp6rs, drop-llmnr6, drop-icmp6mld2, drop-dhcp6s, drop-dhcp6c, ndp-proxy, drop-ns-dad, drop-ns-nondad.
keyindex float
WEP key index (1 - 4).
keys Sequence[str]
WEP Key.
l3_roaming str
L3-Roaming. Valid values: disable, enable.
l3_roaming_mode str
Select the way that layer 3 roaming traffic is passed (default = direct). Valid values: direct, indirect.
ldpc str
VAP low-density parity-check (LDPC) coding configuration. Valid values: disable, tx, rx, rxtx.
local_authentication str
Enable/disable AP local authentication. Valid values: disable, enable.
local_bridging str
Enable/disable bridging of wireless and Ethernet interfaces on the FortiAP (default = disable). Valid values: disable, enable.
local_lan str
Allow/deny traffic destined for a Class A, B, or C private IP address (default = allow). Valid values: deny, allow.
local_standalone str
Enable/disable AP local standalone (default = disable). Valid values: disable, enable.
local_standalone_dns str
Enable/disable AP local standalone DNS. Valid values: disable, enable.
local_standalone_dns_ips Sequence[str]
IPv4 addresses for the local standalone DNS.
local_standalone_nat str
Enable/disable AP local standalone NAT mode. Valid values: disable, enable.
local_switching str
Local-Switching. Valid values: disable, enable.
mac_auth_bypass str
Enable/disable MAC authentication bypass. Valid values: disable, enable.
mac_called_station_delimiter str
Mac-Called-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
mac_calling_station_delimiter str
Mac-Calling-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
mac_case str
Mac-Case. Valid values: uppercase, lowercase.
mac_filter str
Enable/disable MAC filtering to block wireless clients by mac address. Valid values: disable, enable.
mac_filter_policy_other str
Allow or block clients with MAC addresses that are not in the filter list. Valid values: deny, allow.
mac_password_delimiter str
Mac-Password-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
mac_username_delimiter str
Mac-Username-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
max_clients float
Maximum number of clients that can connect simultaneously to the VAP (default = 0, meaning no limitation).
max_clients_ap float
Maximum number of clients that can connect simultaneously to the VAP per AP radio (default = 0, meaning no limitation).
mbo str
Mbo. Valid values: disable, enable.
mbo_cell_data_conn_pref str
Mbo-Cell-Data-Conn-Pref. Valid values: excluded, prefer-not, prefer-use.
me_disable_thresh float
Disable multicast enhancement when this many clients are receiving multicast traffic.
mesh_backhaul str
Enable/disable using this VAP as a WiFi mesh backhaul (default = disable). This entry is only available when security is set to a WPA type or open. Valid values: disable, enable.
mpsk str
Enable/disable multiple PSK authentication. Valid values: disable, enable.
mpsk_concurrent_clients float
Maximum number of concurrent clients that connect using the same passphrase in multiple PSK authentication (0 - 65535, default = 0, meaning no limitation).
mpsk_profile str
Mpsk-Profile.
mu_mimo str
Enable/disable Multi-user MIMO (default = enable). Valid values: disable, enable.
multicast_enhance str
Enable/disable converting multicast to unicast to improve performance (default = disable). Valid values: disable, enable.
multicast_rate str
Multicast rate (0, 6000, 12000, or 24000 kbps, default = 0). Valid values: 0, 6000, 12000, 24000.
n80211k str
Enable/disable 802.11k assisted roaming (default = enable). Valid values: disable, enable.
n80211v str
Enable/disable 802.11v assisted roaming (default = enable). Valid values: disable, enable.
nac str
Nac. Valid values: disable, enable.
nac_profile str
Nac-Profile.
neighbor_report_dual_band str
Neighbor-Report-Dual-Band. Valid values: disable, enable.
object_wirelesscontroller_vap_dynamic_mapping_id str
an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
okc str
Enable/disable Opportunistic Key Caching (OKC) (default = enable). Valid values: disable, enable.
osen str
Enable/disable OSEN as part of key management (default = disable). Valid values: disable, enable.
owe_groups Sequence[str]
OWE-Groups. Valid values: 19, 20, 21.
owe_transition str
Enable/disable OWE transition mode support. Valid values: disable, enable.
owe_transition_ssid str
OWE transition mode peer SSID.
passphrases Sequence[str]
WPA pre-shared key (PSK) to be used to authenticate WiFi users.
pmf str
Protected Management Frames (PMF) support (default = disable). Valid values: disable, enable, optional.
pmf_assoc_comeback_timeout float
Protected Management Frames (PMF) comeback maximum timeout (1-20 sec).
pmf_sa_query_retry_timeout float
Protected Management Frames (PMF) SA query retry timeout interval (1 - 5 100s of msec).
port_macauth str
Port-Macauth. Valid values: disable, radius, address-group.
port_macauth_reauth_timeout float
Port-Macauth-Reauth-Timeout.
port_macauth_timeout float
Port-Macauth-Timeout.
portal_message_override_group str
Replacement message group for this VAP (only available when security is set to a captive portal type).
portal_type str
Captive portal functionality. Configure how the captive portal authenticates users and whether it includes a disclaimer. Valid values: auth, auth+disclaimer, disclaimer, email-collect, cmcc, cmcc-macauth, auth-mac, external-auth.
primary_wag_profile str
Primary wireless access gateway profile name.
probe_resp_suppression str
Enable/disable probe response suppression (to ignore weak signals) (default = disable). Valid values: disable, enable.
probe_resp_threshold str
Minimum signal level/threshold in dBm required for the AP response to probe requests (-95 to -20, default = -80).
ptk_rekey str
Enable/disable PTK rekey for WPA-Enterprise security. Valid values: disable, enable.
ptk_rekey_intv float
PTK rekey interval (1800 - 864000 sec, default = 86400).
qos_profile str
Quality of service profile name.
quarantine str
Enable/disable station quarantine (default = enable). Valid values: disable, enable.
radio2g_threshold str
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 2.4G band (-95 to -20, default = -79).
radio5g_threshold str
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 5G band(-95 to -20, default = -76).
radio_sensitivity str
Enable/disable software radio sensitivity (to ignore weak signals) (default = disable). Valid values: disable, enable.
radius_mac_auth str
Enable/disable RADIUS-based MAC authentication of clients (default = disable). Valid values: disable, enable.
radius_mac_auth_block_interval float
Don't send RADIUS MAC auth request again if the client has been rejected within specific interval (0 or 30 - 864000 seconds, default = 0, 0 to disable blocking).
radius_mac_auth_server str
RADIUS-based MAC authentication server.
radius_mac_auth_usergroups Sequence[str]
Selective user groups that are permitted for RADIUS mac authentication.
radius_mac_mpsk_auth str
Enable/disable RADIUS-based MAC authentication of clients for MPSK authentication (default = disable). Valid values: disable, enable.
radius_mac_mpsk_timeout float
RADIUS MAC MPSK cache timeout interval (1800 - 864000, default = 86400).
radius_server str
RADIUS server to be used to authenticate WiFi users.
rates11ac_mcs_map str
Comma separated list of max supported VHT MCS for spatial streams 1 through 8.
rates11ac_ss12s Sequence[str]
Allowed data rates for 802.11ac/ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/1, mcs11/1, mcs10/2, mcs11/2.
rates11ac_ss34s Sequence[str]
Allowed data rates for 802.11ac/ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/3, mcs11/3, mcs10/4, mcs11/4.
rates11as Sequence[str]
Allowed data rates for 802.11a. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11ax_mcs_map str
Comma separated list of max supported HE MCS for spatial streams 1 through 8.
rates11ax_ss12s Sequence[str]
Allowed data rates for 802.11ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs10/1, mcs11/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/2, mcs11/2.
rates11ax_ss34s Sequence[str]
Allowed data rates for 802.11ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs10/3, mcs11/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/4, mcs11/4.
rates11bgs Sequence[str]
Allowed data rates for 802.11b/g. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11n_ss12s Sequence[str]
Allowed data rates for 802.11n with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/2, mcs9/2, mcs10/2, mcs11/2, mcs12/2, mcs13/2, mcs14/2, mcs15/2.
rates11n_ss34s Sequence[str]
Allowed data rates for 802.11n with 3 or 4 spatial streams. Valid values: mcs16/3, mcs17/3, mcs18/3, mcs19/3, mcs20/3, mcs21/3, mcs22/3, mcs23/3, mcs24/4, mcs25/4, mcs26/4, mcs27/4, mcs28/4, mcs29/4, mcs30/4, mcs31/4.
roaming_acct_interim_update str
Enable/disable using accounting interim update instead of accounting start/stop on roaming for WPA-Enterprise security. Valid values: disable, enable.
sae_groups Sequence[str]
SAE-Groups. Valid values: 1, 2, 5, 14, 15, 16, 17, 18, 19, 20, 21, 27, 28, 29, 30, 31.
sae_h2e_only str
Use hash-to-element-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
sae_hnp_only str
Use hunting-and-pecking-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
sae_passwords Sequence[str]
WPA3 SAE password to be used to authenticate WiFi users.
sae_pk str
Enable/disable WPA3 SAE-PK (default = disable). Valid values: disable, enable.
sae_private_key str
Private key used for WPA3 SAE-PK authentication.
scan_botnet_connections str
Block or monitor connections to Botnet servers or disable Botnet scanning. Valid values: disable, block, monitor.
schedule str
Firewall schedules for enabling this VAP on the FortiAP. This VAP will be enabled when at least one of the schedules is valid. Separate multiple schedule names with a space.
scopetype str
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
secondary_wag_profile str
Secondary wireless access gateway profile name.
security str
Security mode for the wireless interface (default = wpa2-only-personal). Valid values: None, WEP64, wep64, WEP128, wep128, WPA_PSK, WPA_RADIUS, WPA, WPA2, WPA2_AUTO, open, wpa-personal, wpa-enterprise, captive-portal, wpa-only-personal, wpa-only-enterprise, wpa2-only-personal, wpa2-only-enterprise, wpa-personal+captive-portal, wpa-only-personal+captive-portal, wpa2-only-personal+captive-portal, osen, wpa3-enterprise, sae, sae-transition, owe, wpa3-sae, wpa3-sae-transition.
security_exempt_list str
Optional security exempt list for captive portal authentication.
security_obsolete_option str
Enable/disable obsolete security options. Valid values: disable, enable.
security_redirect_url str
Optional URL for redirecting users after they pass captive portal authentication.
selected_usergroups str
Selective user groups that are permitted to authenticate.
split_tunneling str
Enable/disable split tunneling (default = disable). Valid values: disable, enable.
ssid str
IEEE 802.11 service set identifier (SSID) for the wireless interface. Users who wish to use the wireless network must configure their computers to access this SSID name.
sticky_client_remove str
Sticky-Client-Remove. Valid values: disable, enable.
sticky_client_threshold2g str
Sticky-Client-Threshold-2G.
sticky_client_threshold5g str
Sticky-Client-Threshold-5G.
sticky_client_threshold6g str
Minimum signal level/threshold in dBm required for the 6G client to be serviced by the AP (-95 to -20, default = -76).
target_wake_time str
Enable/disable 802.11ax target wake time (default = enable). Valid values: disable, enable.
tkip_counter_measure str
Enable/disable TKIP counter measure. Valid values: disable, enable.
tunnel_echo_interval float
The time interval to send echo to both primary and secondary tunnel peers (1 - 65535 sec, default = 300).
tunnel_fallback_interval float
The time interval for secondary tunnel to fall back to primary tunnel (0 - 65535 sec, default = 7200).
usergroup str
Firewall user group to be used to authenticate WiFi users.
utm_log str
Enable/disable UTM logging. Valid values: disable, enable.
utm_profile str
UTM profile name.
utm_status str
Enable to add one or more security profiles (AV, IPS, etc.) to the VAP. Valid values: disable, enable.
vap str
Vap.
vdom str
Vdom.
vlan_auto str
Enable/disable automatic management of SSID VLAN interface. Valid values: disable, enable.
vlan_pooling str
Enable/disable VLAN pooling, to allow grouping of multiple wireless controller VLANs into VLAN pools (default = disable). When set to wtp-group, VLAN pooling occurs with VLAN assignment by wtp-group. Valid values: wtp-group, round-robin, hash, disable.
vlanid float
Optional VLAN ID.
voice_enterprise str
Enable/disable 802.11k and 802.11v assisted Voice-Enterprise roaming (default = disable). Valid values: disable, enable.
webfilter_profile str
WebFilter profile name.
_centmgmt String
_Centmgmt. Valid values: disable, enable.
_dhcpSvrId String
_Dhcp_Svr_Id.
_intfAllowaccesses List<String>
_Intf_Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, fgfm, auto-ipsec, radius-acct, probe-response, capwap.
_intfDeviceAccessList String
_Intf_Device-Access-List.
_intfDeviceIdentification String
_Intf_Device-Identification. Valid values: disable, enable.
_intfDeviceNetscan String
_Intf_Device-Netscan. Valid values: disable, enable.
_intfDhcp6RelayIp String
_Intf_Dhcp6-Relay-Ip.
_intfDhcp6RelayService String
_Intf_Dhcp6-Relay-Service. Valid values: disable, enable.
_intfDhcp6RelayType String
_Intf_Dhcp6-Relay-Type. Valid values: regular.
_intfDhcpRelayIps List<String>
_Intf_Dhcp-Relay-Ip.
_intfDhcpRelayService String
_Intf_Dhcp-Relay-Service. Valid values: disable, enable.
_intfDhcpRelayType String
_Intf_Dhcp-Relay-Type. Valid values: regular, ipsec.
_intfIp String
_Intf_Ip.
_intfIp6Address String
_Intf_Ip6-Address.
_intfIp6Allowaccesses List<String>
_Intf_Ip6-Allowaccess. Valid values: https, ping, ssh, snmp, http, telnet, any, fgfm, capwap.
_intfListenForticlientConnection String
_Intf_Listen-Forticlient-Connection. Valid values: disable, enable.
_isFactorySetting String
_Is_Factory_Setting. Valid values: disable, enable, ext.
_scopes List<Property Map>
_Scope. The structure of _scope block is documented below.
accessControlList String
Access-Control-List.
acctInterimInterval Number
WiFi RADIUS accounting interim interval (60 - 86400 sec, default = 0).
additionalAkms List<String>
Additional-Akms. Valid values: akm6.
addressGroup String
Address group ID.
addressGroupPolicy String
Address-Group-Policy. Valid values: disable, allow, deny.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
alias String
Alias.
antivirusProfile String
AntiVirus profile name.
applicationDetectionEngine String
Application-Detection-Engine. Valid values: disable, enable.
applicationDscpMarking String
Enable/disable application attribute based DSCP marking (default = disable). Valid values: disable, enable.
applicationList String
Application control list name.
applicationReportIntv Number
Application-Report-Intv.
atfWeight Number
Airtime weight in percentage (default = 20).
auth String
Authentication protocol. Valid values: PSK, psk, RADIUS, radius, usergroup.
authCert String
HTTPS server certificate.
authPortalAddr String
Address of captive portal.
beaconAdvertisings List<String>
Fortinet beacon advertising IE data (default = empty). Valid values: name, model, serial-number.
broadcastSsid String
Enable/disable broadcasting the SSID (default = enable). Valid values: disable, enable.
broadcastSuppressions List<String>
Optional suppression of broadcast messages. For example, you can keep DHCP messages, ARP broadcasts, and so on off of the wireless network. Valid values: dhcp, arp, dhcp2, arp2, netbios-ns, netbios-ds, arp3, dhcp-up, dhcp-down, arp-known, arp-unknown, arp-reply, ipv6, dhcp-starvation, arp-poison, all-other-mc, all-other-bc, arp-proxy, dhcp-ucast.
bssColorPartial String
Bss-Color-Partial. Valid values: disable, enable.
bstmDisassociationImminent String
Bstm-Disassociation-Imminent. Valid values: disable, enable.
bstmLoadBalancingDisassocTimer Number
Bstm-Load-Balancing-Disassoc-Timer.
bstmRssiDisassocTimer Number
Bstm-Rssi-Disassoc-Timer.
captivePortalAcName String
Local-bridging captive portal ac-name.
captivePortalAuthTimeout Number
Captive-Portal-Auth-Timeout.
captivePortalFwAccounting String
Enable/disable RADIUS accounting for captive portal firewall authentication session. Valid values: disable, enable.
captivePortalMacauthRadiusSecrets List<String>
Secret key to access the macauth RADIUS server.
captivePortalMacauthRadiusServer String
Captive portal external RADIUS server domain name or IP address.
captivePortalRadiusSecrets List<String>
Secret key to access the RADIUS server.
captivePortalRadiusServer String
Captive portal RADIUS server domain name or IP address.
captivePortalSessionTimeoutInterval Number
Session timeout interval (0 - 864000 sec, default = 0).
clientCount Number
Client-Count.
dhcpAddressEnforcement String
Dhcp-Address-Enforcement. Valid values: disable, enable.
dhcpLeaseTime Number
DHCP lease time in seconds for NAT IP address.
dhcpOption43Insertion String
Dhcp-Option43-Insertion. Valid values: disable, enable.
dhcpOption82CircuitIdInsertion String
Enable/disable DHCP option 82 circuit-id insert (default = disable). Valid values: disable, style-1, style-2, style-3.
dhcpOption82Insertion String
Enable/disable DHCP option 82 insert (default = disable). Valid values: disable, enable.
dhcpOption82RemoteIdInsertion String
Enable/disable DHCP option 82 remote-id insert (default = disable). Valid values: disable, style-1.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
dynamicVlan String
Enable/disable dynamic VLAN assignment. Valid values: disable, enable.
eapReauth String
Enable/disable EAP re-authentication for WPA-Enterprise security. Valid values: disable, enable.
eapReauthIntv Number
EAP re-authentication interval (1800 - 864000 sec, default = 86400).
eapolKeyRetries String
Enable/disable retransmission of EAPOL-Key frames (message 3/4 and group message 1/2) (default = enable). Valid values: disable, enable.
encrypt String
Encryption protocol to use (only available when security is set to a WPA type). Valid values: TKIP, AES, TKIP-AES.
externalFastRoaming String
Enable/disable fast roaming or pre-authentication with external APs not managed by the FortiGate (default = disable). Valid values: disable, enable.
externalLogout String
URL of external authentication logout server.
externalWeb String
URL of external authentication web server.
externalWebFormat String
URL query parameter detection (default = auto-detect). Valid values: auto-detect, no-query-string, partial-query-string.
fastBssTransition String
Enable/disable 802.11r Fast BSS Transition (FT) (default = disable). Valid values: disable, enable.
fastRoaming String
Enable/disable fast-roaming, or pre-authentication, where supported by clients (default = disable). Valid values: disable, enable.
ftMobilityDomain Number
Mobility domain identifier in FT (1 - 65535, default = 1000).
ftOverDs String
Enable/disable FT over the Distribution System (DS). Valid values: disable, enable.
ftR0KeyLifetime Number
Lifetime of the PMK-R0 key in FT, 1-65535 minutes.
gasComebackDelay Number
Gas-Comeback-Delay.
gasFragmentationLimit Number
Gas-Fragmentation-Limit.
gtkRekey String
Enable/disable GTK rekey for WPA security. Valid values: disable, enable.
gtkRekeyIntv Number
GTK rekey interval (1800 - 864000 sec, default = 86400).
highEfficiency String
Enable/disable 802.11ax high efficiency (default = enable). Valid values: disable, enable.
hotspot20Profile String
Hotspot 2.0 profile name.
igmpSnooping String
Igmp-Snooping. Valid values: disable, enable.
intraVapPrivacy String
Enable/disable blocking communication between clients on the same SSID (called intra-SSID privacy) (default = disable). Valid values: disable, enable.
ip String
IP address and subnet mask for the local standalone NAT subnet.
ipsSensor String
IPS sensor name.
ipv6Rules List<String>
Ipv6-Rules. Valid values: drop-icmp6ra, drop-icmp6rs, drop-llmnr6, drop-icmp6mld2, drop-dhcp6s, drop-dhcp6c, ndp-proxy, drop-ns-dad, drop-ns-nondad.
keyindex Number
WEP key index (1 - 4).
keys List<String>
WEP Key.
l3Roaming String
L3-Roaming. Valid values: disable, enable.
l3RoamingMode String
Select the way that layer 3 roaming traffic is passed (default = direct). Valid values: direct, indirect.
ldpc String
VAP low-density parity-check (LDPC) coding configuration. Valid values: disable, tx, rx, rxtx.
localAuthentication String
Enable/disable AP local authentication. Valid values: disable, enable.
localBridging String
Enable/disable bridging of wireless and Ethernet interfaces on the FortiAP (default = disable). Valid values: disable, enable.
localLan String
Allow/deny traffic destined for a Class A, B, or C private IP address (default = allow). Valid values: deny, allow.
localStandalone String
Enable/disable AP local standalone (default = disable). Valid values: disable, enable.
localStandaloneDns String
Enable/disable AP local standalone DNS. Valid values: disable, enable.
localStandaloneDnsIps List<String>
IPv4 addresses for the local standalone DNS.
localStandaloneNat String
Enable/disable AP local standalone NAT mode. Valid values: disable, enable.
localSwitching String
Local-Switching. Valid values: disable, enable.
macAuthBypass String
Enable/disable MAC authentication bypass. Valid values: disable, enable.
macCalledStationDelimiter String
Mac-Called-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macCallingStationDelimiter String
Mac-Calling-Station-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macCase String
Mac-Case. Valid values: uppercase, lowercase.
macFilter String
Enable/disable MAC filtering to block wireless clients by mac address. Valid values: disable, enable.
macFilterPolicyOther String
Allow or block clients with MAC addresses that are not in the filter list. Valid values: deny, allow.
macPasswordDelimiter String
Mac-Password-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
macUsernameDelimiter String
Mac-Username-Delimiter. Valid values: hyphen, single-hyphen, colon, none.
maxClients Number
Maximum number of clients that can connect simultaneously to the VAP (default = 0, meaning no limitation).
maxClientsAp Number
Maximum number of clients that can connect simultaneously to the VAP per AP radio (default = 0, meaning no limitation).
mbo String
Mbo. Valid values: disable, enable.
mboCellDataConnPref String
Mbo-Cell-Data-Conn-Pref. Valid values: excluded, prefer-not, prefer-use.
meDisableThresh Number
Disable multicast enhancement when this many clients are receiving multicast traffic.
meshBackhaul String
Enable/disable using this VAP as a WiFi mesh backhaul (default = disable). This entry is only available when security is set to a WPA type or open. Valid values: disable, enable.
mpsk String
Enable/disable multiple PSK authentication. Valid values: disable, enable.
mpskConcurrentClients Number
Maximum number of concurrent clients that connect using the same passphrase in multiple PSK authentication (0 - 65535, default = 0, meaning no limitation).
mpskProfile String
Mpsk-Profile.
muMimo String
Enable/disable Multi-user MIMO (default = enable). Valid values: disable, enable.
multicastEnhance String
Enable/disable converting multicast to unicast to improve performance (default = disable). Valid values: disable, enable.
multicastRate String
Multicast rate (0, 6000, 12000, or 24000 kbps, default = 0). Valid values: 0, 6000, 12000, 24000.
n80211k String
Enable/disable 802.11k assisted roaming (default = enable). Valid values: disable, enable.
n80211v String
Enable/disable 802.11v assisted roaming (default = enable). Valid values: disable, enable.
nac String
Nac. Valid values: disable, enable.
nacProfile String
Nac-Profile.
neighborReportDualBand String
Neighbor-Report-Dual-Band. Valid values: disable, enable.
objectWirelesscontrollerVapDynamicMappingId String
an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
okc String
Enable/disable Opportunistic Key Caching (OKC) (default = enable). Valid values: disable, enable.
osen String
Enable/disable OSEN as part of key management (default = disable). Valid values: disable, enable.
oweGroups List<String>
OWE-Groups. Valid values: 19, 20, 21.
oweTransition String
Enable/disable OWE transition mode support. Valid values: disable, enable.
oweTransitionSsid String
OWE transition mode peer SSID.
passphrases List<String>
WPA pre-shared key (PSK) to be used to authenticate WiFi users.
pmf String
Protected Management Frames (PMF) support (default = disable). Valid values: disable, enable, optional.
pmfAssocComebackTimeout Number
Protected Management Frames (PMF) comeback maximum timeout (1-20 sec).
pmfSaQueryRetryTimeout Number
Protected Management Frames (PMF) SA query retry timeout interval (1 - 5 100s of msec).
portMacauth String
Port-Macauth. Valid values: disable, radius, address-group.
portMacauthReauthTimeout Number
Port-Macauth-Reauth-Timeout.
portMacauthTimeout Number
Port-Macauth-Timeout.
portalMessageOverrideGroup String
Replacement message group for this VAP (only available when security is set to a captive portal type).
portalType String
Captive portal functionality. Configure how the captive portal authenticates users and whether it includes a disclaimer. Valid values: auth, auth+disclaimer, disclaimer, email-collect, cmcc, cmcc-macauth, auth-mac, external-auth.
primaryWagProfile String
Primary wireless access gateway profile name.
probeRespSuppression String
Enable/disable probe response suppression (to ignore weak signals) (default = disable). Valid values: disable, enable.
probeRespThreshold String
Minimum signal level/threshold in dBm required for the AP response to probe requests (-95 to -20, default = -80).
ptkRekey String
Enable/disable PTK rekey for WPA-Enterprise security. Valid values: disable, enable.
ptkRekeyIntv Number
PTK rekey interval (1800 - 864000 sec, default = 86400).
qosProfile String
Quality of service profile name.
quarantine String
Enable/disable station quarantine (default = enable). Valid values: disable, enable.
radio2gThreshold String
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 2.4G band (-95 to -20, default = -79).
radio5gThreshold String
Minimum signal level/threshold in dBm required for the AP response to receive a packet in 5G band(-95 to -20, default = -76).
radioSensitivity String
Enable/disable software radio sensitivity (to ignore weak signals) (default = disable). Valid values: disable, enable.
radiusMacAuth String
Enable/disable RADIUS-based MAC authentication of clients (default = disable). Valid values: disable, enable.
radiusMacAuthBlockInterval Number
Don't send RADIUS MAC auth request again if the client has been rejected within specific interval (0 or 30 - 864000 seconds, default = 0, 0 to disable blocking).
radiusMacAuthServer String
RADIUS-based MAC authentication server.
radiusMacAuthUsergroups List<String>
Selective user groups that are permitted for RADIUS mac authentication.
radiusMacMpskAuth String
Enable/disable RADIUS-based MAC authentication of clients for MPSK authentication (default = disable). Valid values: disable, enable.
radiusMacMpskTimeout Number
RADIUS MAC MPSK cache timeout interval (1800 - 864000, default = 86400).
radiusServer String
RADIUS server to be used to authenticate WiFi users.
rates11acMcsMap String
Comma separated list of max supported VHT MCS for spatial streams 1 through 8.
rates11acSs12s List<String>
Allowed data rates for 802.11ac/ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/1, mcs11/1, mcs10/2, mcs11/2.
rates11acSs34s List<String>
Allowed data rates for 802.11ac/ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/3, mcs11/3, mcs10/4, mcs11/4.
rates11as List<String>
Allowed data rates for 802.11a. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11axMcsMap String
Comma separated list of max supported HE MCS for spatial streams 1 through 8.
rates11axSs12s List<String>
Allowed data rates for 802.11ax with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/1, mcs9/1, mcs10/1, mcs11/1, mcs0/2, mcs1/2, mcs2/2, mcs3/2, mcs4/2, mcs5/2, mcs6/2, mcs7/2, mcs8/2, mcs9/2, mcs10/2, mcs11/2.
rates11axSs34s List<String>
Allowed data rates for 802.11ax with 3 or 4 spatial streams. Valid values: mcs0/3, mcs1/3, mcs2/3, mcs3/3, mcs4/3, mcs5/3, mcs6/3, mcs7/3, mcs8/3, mcs9/3, mcs10/3, mcs11/3, mcs0/4, mcs1/4, mcs2/4, mcs3/4, mcs4/4, mcs5/4, mcs6/4, mcs7/4, mcs8/4, mcs9/4, mcs10/4, mcs11/4.
rates11bgs List<String>
Allowed data rates for 802.11b/g. Valid values: 1, 1-basic, 2, 2-basic, 5.5, 5.5-basic, 6, 6-basic, 9, 9-basic, 12, 12-basic, 18, 18-basic, 24, 24-basic, 36, 36-basic, 48, 48-basic, 54, 54-basic, 11, 11-basic.
rates11nSs12s List<String>
Allowed data rates for 802.11n with 1 or 2 spatial streams. Valid values: mcs0/1, mcs1/1, mcs2/1, mcs3/1, mcs4/1, mcs5/1, mcs6/1, mcs7/1, mcs8/2, mcs9/2, mcs10/2, mcs11/2, mcs12/2, mcs13/2, mcs14/2, mcs15/2.
rates11nSs34s List<String>
Allowed data rates for 802.11n with 3 or 4 spatial streams. Valid values: mcs16/3, mcs17/3, mcs18/3, mcs19/3, mcs20/3, mcs21/3, mcs22/3, mcs23/3, mcs24/4, mcs25/4, mcs26/4, mcs27/4, mcs28/4, mcs29/4, mcs30/4, mcs31/4.
roamingAcctInterimUpdate String
Enable/disable using accounting interim update instead of accounting start/stop on roaming for WPA-Enterprise security. Valid values: disable, enable.
saeGroups List<String>
SAE-Groups. Valid values: 1, 2, 5, 14, 15, 16, 17, 18, 19, 20, 21, 27, 28, 29, 30, 31.
saeH2eOnly String
Use hash-to-element-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
saeHnpOnly String
Use hunting-and-pecking-only mechanism for PWE derivation (default = disable). Valid values: disable, enable.
saePasswords List<String>
WPA3 SAE password to be used to authenticate WiFi users.
saePk String
Enable/disable WPA3 SAE-PK (default = disable). Valid values: disable, enable.
saePrivateKey String
Private key used for WPA3 SAE-PK authentication.
scanBotnetConnections String
Block or monitor connections to Botnet servers or disable Botnet scanning. Valid values: disable, block, monitor.
schedule String
Firewall schedules for enabling this VAP on the FortiAP. This VAP will be enabled when at least one of the schedules is valid. Separate multiple schedule names with a space.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
secondaryWagProfile String
Secondary wireless access gateway profile name.
security String
Security mode for the wireless interface (default = wpa2-only-personal). Valid values: None, WEP64, wep64, WEP128, wep128, WPA_PSK, WPA_RADIUS, WPA, WPA2, WPA2_AUTO, open, wpa-personal, wpa-enterprise, captive-portal, wpa-only-personal, wpa-only-enterprise, wpa2-only-personal, wpa2-only-enterprise, wpa-personal+captive-portal, wpa-only-personal+captive-portal, wpa2-only-personal+captive-portal, osen, wpa3-enterprise, sae, sae-transition, owe, wpa3-sae, wpa3-sae-transition.
securityExemptList String
Optional security exempt list for captive portal authentication.
securityObsoleteOption String
Enable/disable obsolete security options. Valid values: disable, enable.
securityRedirectUrl String
Optional URL for redirecting users after they pass captive portal authentication.
selectedUsergroups String
Selective user groups that are permitted to authenticate.
splitTunneling String
Enable/disable split tunneling (default = disable). Valid values: disable, enable.
ssid String
IEEE 802.11 service set identifier (SSID) for the wireless interface. Users who wish to use the wireless network must configure their computers to access this SSID name.
stickyClientRemove String
Sticky-Client-Remove. Valid values: disable, enable.
stickyClientThreshold2g String
Sticky-Client-Threshold-2G.
stickyClientThreshold5g String
Sticky-Client-Threshold-5G.
stickyClientThreshold6g String
Minimum signal level/threshold in dBm required for the 6G client to be serviced by the AP (-95 to -20, default = -76).
targetWakeTime String
Enable/disable 802.11ax target wake time (default = enable). Valid values: disable, enable.
tkipCounterMeasure String
Enable/disable TKIP counter measure. Valid values: disable, enable.
tunnelEchoInterval Number
The time interval to send echo to both primary and secondary tunnel peers (1 - 65535 sec, default = 300).
tunnelFallbackInterval Number
The time interval for secondary tunnel to fall back to primary tunnel (0 - 65535 sec, default = 7200).
usergroup String
Firewall user group to be used to authenticate WiFi users.
utmLog String
Enable/disable UTM logging. Valid values: disable, enable.
utmProfile String
UTM profile name.
utmStatus String
Enable to add one or more security profiles (AV, IPS, etc.) to the VAP. Valid values: disable, enable.
vap String
Vap.
vdom String
Vdom.
vlanAuto String
Enable/disable automatic management of SSID VLAN interface. Valid values: disable, enable.
vlanPooling String
Enable/disable VLAN pooling, to allow grouping of multiple wireless controller VLANs into VLAN pools (default = disable). When set to wtp-group, VLAN pooling occurs with VLAN assignment by wtp-group. Valid values: wtp-group, round-robin, hash, disable.
vlanid Number
Optional VLAN ID.
voiceEnterprise String
Enable/disable 802.11k and 802.11v assisted Voice-Enterprise roaming (default = disable). Valid values: disable, enable.
webfilterProfile String
WebFilter profile name.

Supporting Types

ObjectWirelesscontrollerVapDynamicMapping_Scope
, ObjectWirelesscontrollerVapDynamicMapping_ScopeArgs

Name string
Name.
Vdom string
Vdom.
Name string
Name.
Vdom string
Vdom.
name String
Name.
vdom String
Vdom.
name string
Name.
vdom string
Vdom.
name str
Name.
vdom str
Vdom.
name String
Name.
vdom String
Vdom.

Import

ObjectWirelessController VapDynamicMapping can be imported using any of these accepted formats:

Set import_options = [“vap=YOUR_VALUE”] in the provider section.

$ export “FORTIMANAGER_IMPORT_TABLE”=“true”

$ pulumi import fortimanager:index/objectWirelesscontrollerVapDynamicMapping:ObjectWirelesscontrollerVapDynamicMapping labelname {{_scope.name}}.{{_scope.vdom}}
Copy

$ unset “FORTIMANAGER_IMPORT_TABLE”

-> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
fortimanager fortinetdev/terraform-provider-fortimanager
License
Notes
This Pulumi package is based on the fortimanager Terraform Provider.
fortimanager 1.14.0 published on Tuesday, Apr 15, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager