1. Packages
  2. Cisco Meraki Provider
  3. API Docs
  4. networks
  5. WirelessSsids
Cisco Meraki v0.4.1 published on Saturday, Mar 15, 2025 by Pulumi

meraki.networks.WirelessSsids

Explore with Pulumi AI

Example Usage

Coming soon!
Coming soon!
Coming soon!
Coming soon!
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.meraki.networks.WirelessSsids;
import com.pulumi.meraki.networks.WirelessSsidsArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsActiveDirectoryArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsActiveDirectoryCredentialsArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsApTagsAndVlanIdArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsDnsRewriteArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsDot11rArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsDot11wArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsGreArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsGreConcentratorArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsLdapArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsLdapCredentialsArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsLocalRadiusArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsNamedVlansArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsNamedVlansRadiusArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsNamedVlansRadiusGuestVlanArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsNamedVlansTaggingArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsOauthArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsRadiusAccountingServerArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsRadiusServerArgs;
import com.pulumi.meraki.networks.inputs.WirelessSsidsSpeedBurstArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new WirelessSsids("example", WirelessSsidsArgs.builder()
            .activeDirectory(WirelessSsidsActiveDirectoryArgs.builder()
                .credentials(WirelessSsidsActiveDirectoryCredentialsArgs.builder()
                    .logonName("user")
                    .password("password")
                    .build())
                .servers(WirelessSsidsActiveDirectoryServerArgs.builder()
                    .host("127.0.0.1")
                    .port(3268)
                    .build())
                .build())
            .adultContentFilteringEnabled(false)
            .apTagsAndVlanIds(WirelessSsidsApTagsAndVlanIdArgs.builder()
                .tags(                
                    "tag1",
                    "tag2")
                .vlan_id(100)
                .build())
            .authMode("8021x-radius")
            .availabilityTags(            
                "tag1",
                "tag2")
            .availableOnAllAps(false)
            .bandSelection("5 GHz band only")
            .concentratorNetworkId("N_24329156")
            .defaultVlanId(1)
            .disassociateClientsOnVpnFailover(false)
            .dnsRewrite(WirelessSsidsDnsRewriteArgs.builder()
                .dns_custom_nameservers(                
                    "8.8.8.8",
                    "8.8.4.4")
                .enabled(true)
                .build())
            .dot11r(WirelessSsidsDot11rArgs.builder()
                .adaptive(true)
                .enabled(true)
                .build())
            .dot11w(WirelessSsidsDot11wArgs.builder()
                .enabled(true)
                .required(false)
                .build())
            .enabled(true)
            .encryptionMode("wpa")
            .enterpriseAdminAccess("access enabled")
            .gre(WirelessSsidsGreArgs.builder()
                .concentrator(WirelessSsidsGreConcentratorArgs.builder()
                    .host("192.168.1.1")
                    .build())
                .key(5)
                .build())
            .ipAssignmentMode("NAT mode")
            .lanIsolationEnabled(true)
            .ldap(WirelessSsidsLdapArgs.builder()
                .base_distinguished_name("dc=example,dc=com")
                .credentials(WirelessSsidsLdapCredentialsArgs.builder()
                    .distinguishedName("cn=user,dc=example,dc=com")
                    .password("password")
                    .build())
                .server_ca_certificate(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
                .servers(WirelessSsidsLdapServerArgs.builder()
                    .host("127.0.0.1")
                    .port(389)
                    .build())
                .build())
            .localRadius(WirelessSsidsLocalRadiusArgs.builder()
                .cache_timeout(60)
                .certificate_authentication(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
                .password_authentication(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
                .build())
            .mandatoryDhcpEnabled(false)
            .minBitrate(5.5)
            .name("My SSID")
            .namedVlans(WirelessSsidsNamedVlansArgs.builder()
                .radius(WirelessSsidsNamedVlansRadiusArgs.builder()
                    .guestVlan(WirelessSsidsNamedVlansRadiusGuestVlanArgs.builder()
                        .enabled(true)
                        .name("Guest VLAN")
                        .build())
                    .build())
                .tagging(WirelessSsidsNamedVlansTaggingArgs.builder()
                    .byApTags(WirelessSsidsNamedVlansTaggingByApTagArgs.builder()
                        .tags(                        
                            "tag1",
                            "tag2")
                        .vlanName("My VLAN")
                        .build())
                    .defaultVlanName("My VLAN")
                    .enabled(true)
                    .build())
                .build())
            .networkId("string")
            .number("string")
            .oauth(WirelessSsidsOauthArgs.builder()
                .allowed_domains("example.com")
                .build())
            .perClientBandwidthLimitDown(1)
            .perClientBandwidthLimitUp(1)
            .perSsidBandwidthLimitDown(1)
            .perSsidBandwidthLimitUp(1)
            .psk("deadbeef")
            .radiusAccountingEnabled(true)
            .radiusAccountingInterimInterval(5)
            .radiusAccountingServers(WirelessSsidsRadiusAccountingServerArgs.builder()
                .ca_certificate("""
          "-----BEGIN CERTIFICATE-----
        MIIDyTCCArGgAwIBAgIKBBNXOVCGU1YztjANBgkqhkiG9w0BAQsFADAnMQ4wDAYD
        VQQKEwVDaXNjbzEVMBMGA1UEAxMMQUNUMiBTVURJIENBMB4XDTIxMDUzMTEzNTUx
        NVoXDTI5MDUxNDIwMjU0MVowbTEpMCcGA1UEBRMgUElEOkM5MjAwTC0yNFAtNEcg
        U046SkFFMjUyMjBSMksxDjAMBgNVBAoTBUNpc2NvMRgwFgYDVQQLEw9BQ1QtMiBM
        aXRlIFNVREkxFjAUBgNVBAMTDUM5MjAwTC0yNFAtNEcwggEiMA0GCSqGSIb3DQEB
        AQUAA4IBDwAwggEKAoIBAQDaUPxW76gT5MdoEAt+UrDFiYA9RYh2iHicDViBEyow
        TR1TuP36bHh13X3vtGiDsCD88Ci2TZIqd/EDkkc7v9ipUUYVVH+YDrPt2Aukb1PH
        D6K0R+KhgEzRo5x54TlU6oWvjUpwNZUwwdhMWIQaUVkMyZBYNy0jGPLO8jwZhyBg
        1Fneybr9pwedGbLrAaz+gdEikB8B4a/fvPjVfL5Ngb4QRjFqWuE+X3nLc0kHedep
        6nfgpUNXMlStVm5nIXKP6OjmzfCHPYh9L2Ehs1TrSk1ser9Ofx0ZMVL/jBZR2EIj
        OZ8tH6KlX2/B2pbSPIO6kD5c4UA8Cf1SbDJCwJ/kI9ihAgMBAAGjgbAwga0wDgYD
        VR0PAQH/BAQDAgXgMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUSNjx8cJw1Vu7
        fHMJk6+4uDAD+H8wTQYDVR0RBEYwRKBCBgkrBgEEAQkVAgOgNRMzQ2hpcElEPVVV
        VUNNaElGcUVFMklFUUVBQWNBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUE9MB0GA1Ud
        DgQWBBRdhMkFD/z5hokaQeLbaRsp4hkvbzANBgkqhkiG9w0BAQsFAAOCAQEAMtuh
        YpBz4xEZ7YdJsLpw67Q0TTJGnTBRpzAeY1urYDoDz8TSx556XG7z3IRzuED5KVSp
        OwmH/iZ+tDfYQ3W3ElWTW93871DkuW4WQIfbnoHg/F7bF0DKYVkD3rpZjyz3NhzH
        d7cjTdJXQ85bTAOXDuxKH3qewrXxxOGXgh3I6NUq0UwMTWh84lND7Jl+ZAQkYNS2
        iHanTZFQBk3ML0NUb7fKDYGRTZRqwQ/upIO4S6LV1cxH/6V0qbMy3sCSHZoMLrW3
        0m3M6yKpe5+VZzHZwmWdUf3Ot+zKjhveK5/YNsMIASdvtvymxUizq2Hr1hvR/kPc
        p1vuyWxipU8JfzOh/A==
        -----END CERTIFICATE-----
        "
                """)
                .host("0.0.0.0")
                .port(3000)
                .radsec_enabled(true)
                .secret("secret-string")
                .build())
            .radiusAttributeForGroupPolicies("Filter-Id")
            .radiusAuthenticationNasId("00-11-22-33-44-55:AP1")
            .radiusCalledStationId("00-11-22-33-44-55:AP1")
            .radiusCoaEnabled(true)
            .radiusFailoverPolicy("Deny access")
            .radiusFallbackEnabled(true)
            .radiusGuestVlanEnabled(true)
            .radiusGuestVlanId(1)
            .radiusLoadBalancingPolicy("Round robin")
            .radiusOverride(false)
            .radiusProxyEnabled(false)
            .radiusServerAttemptsLimit(5)
            .radiusServerTimeout(5)
            .radiusServers(WirelessSsidsRadiusServerArgs.builder()
                .ca_certificate("""
          "-----BEGIN CERTIFICATE-----
        MIIDyTCCArGgAwIBAgIKBBNXOVCGU1YztjANBgkqhkiG9w0BAQsFADAnMQ4wDAYD
        VQQKEwVDaXNjbzEVMBMGA1UEAxMMQUNUMiBTVURJIENBMB4XDTIxMDUzMTEzNTUx
        NVoXDTI5MDUxNDIwMjU0MVowbTEpMCcGA1UEBRMgUElEOkM5MjAwTC0yNFAtNEcg
        U046SkFFMjUyMjBSMksxDjAMBgNVBAoTBUNpc2NvMRgwFgYDVQQLEw9BQ1QtMiBM
        aXRlIFNVREkxFjAUBgNVBAMTDUM5MjAwTC0yNFAtNEcwggEiMA0GCSqGSIb3DQEB
        AQUAA4IBDwAwggEKAoIBAQDaUPxW76gT5MdoEAt+UrDFiYA9RYh2iHicDViBEyow
        TR1TuP36bHh13X3vtGiDsCD88Ci2TZIqd/EDkkc7v9ipUUYVVH+YDrPt2Aukb1PH
        D6K0R+KhgEzRo5x54TlU6oWvjUpwNZUwwdhMWIQaUVkMyZBYNy0jGPLO8jwZhyBg
        1Fneybr9pwedGbLrAaz+gdEikB8B4a/fvPjVfL5Ngb4QRjFqWuE+X3nLc0kHedep
        6nfgpUNXMlStVm5nIXKP6OjmzfCHPYh9L2Ehs1TrSk1ser9Ofx0ZMVL/jBZR2EIj
        OZ8tH6KlX2/B2pbSPIO6kD5c4UA8Cf1SbDJCwJ/kI9ihAgMBAAGjgbAwga0wDgYD
        VR0PAQH/BAQDAgXgMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUSNjx8cJw1Vu7
        fHMJk6+4uDAD+H8wTQYDVR0RBEYwRKBCBgkrBgEEAQkVAgOgNRMzQ2hpcElEPVVV
        VUNNaElGcUVFMklFUUVBQWNBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUE9MB0GA1Ud
        DgQWBBRdhMkFD/z5hokaQeLbaRsp4hkvbzANBgkqhkiG9w0BAQsFAAOCAQEAMtuh
        YpBz4xEZ7YdJsLpw67Q0TTJGnTBRpzAeY1urYDoDz8TSx556XG7z3IRzuED5KVSp
        OwmH/iZ+tDfYQ3W3ElWTW93871DkuW4WQIfbnoHg/F7bF0DKYVkD3rpZjyz3NhzH
        d7cjTdJXQ85bTAOXDuxKH3qewrXxxOGXgh3I6NUq0UwMTWh84lND7Jl+ZAQkYNS2
        iHanTZFQBk3ML0NUb7fKDYGRTZRqwQ/upIO4S6LV1cxH/6V0qbMy3sCSHZoMLrW3
        0m3M6yKpe5+VZzHZwmWdUf3Ot+zKjhveK5/YNsMIASdvtvymxUizq2Hr1hvR/kPc
        p1vuyWxipU8JfzOh/A==
        -----END CERTIFICATE-----
        "
                """)
                .host("0.0.0.0")
                .open_roaming_certificate_id(2)
                .port(3000)
                .radsec_enabled(true)
                .secret("secret-string")
                .build())
            .radiusTestingEnabled(true)
            .secondaryConcentratorNetworkId("disabled")
            .speedBurst(WirelessSsidsSpeedBurstArgs.builder()
                .enabled(true)
                .build())
            .splashGuestSponsorDomains("example.com")
            .splashPage("Click-through splash page")
            .useVlanTagging(false)
            .visible(true)
            .vlanId(10)
            .walledGardenEnabled(true)
            .walledGardenRanges(            
                "example.com",
                "1.1.1.1/32")
            .wpaEncryptionMode("WPA2 only")
            .build());

        ctx.export("merakiNetworksWirelessSsidsExample", example);
    }
}
Copy
resources:
  example:
    type: meraki:networks:WirelessSsids
    properties:
      activeDirectory:
        credentials:
          logonName: user
          password: password
        servers:
          - host: 127.0.0.1
            port: 3268
      adultContentFilteringEnabled: false
      apTagsAndVlanIds:
        - tags:
            - tag1
            - tag2
          vlan_id: 100
      authMode: 8021x-radius
      availabilityTags:
        - tag1
        - tag2
      availableOnAllAps: false
      bandSelection: 5 GHz band only
      concentratorNetworkId: N_24329156
      defaultVlanId: 1
      disassociateClientsOnVpnFailover: false
      dnsRewrite:
        dns_custom_nameservers:
          - 8.8.8.8
          - 8.8.4.4
        enabled: true
      dot11r:
        adaptive: true
        enabled: true
      dot11w:
        enabled: true
        required: false
      enabled: true
      encryptionMode: wpa
      enterpriseAdminAccess: access enabled
      gre:
        concentrator:
          host: 192.168.1.1
        key: 5
      ipAssignmentMode: NAT mode
      lanIsolationEnabled: true
      ldap:
        base_distinguished_name: dc=example,dc=com
        credentials:
          distinguishedName: cn=user,dc=example,dc=com
          password: password
        server_ca_certificate:
          contents: |2
                      "-----BEGIN CERTIFICATE-----
                    MIIDyTCCArGgAwIBAgIKBBNXOVCGU1YztjANBgkqhkiG9w0BAQsFADAnMQ4wDAYD
                    VQQKEwVDaXNjbzEVMBMGA1UEAxMMQUNUMiBTVURJIENBMB4XDTIxMDUzMTEzNTUx
                    NVoXDTI5MDUxNDIwMjU0MVowbTEpMCcGA1UEBRMgUElEOkM5MjAwTC0yNFAtNEcg
                    U046SkFFMjUyMjBSMksxDjAMBgNVBAoTBUNpc2NvMRgwFgYDVQQLEw9BQ1QtMiBM
                    aXRlIFNVREkxFjAUBgNVBAMTDUM5MjAwTC0yNFAtNEcwggEiMA0GCSqGSIb3DQEB
                    AQUAA4IBDwAwggEKAoIBAQDaUPxW76gT5MdoEAt+UrDFiYA9RYh2iHicDViBEyow
                    TR1TuP36bHh13X3vtGiDsCD88Ci2TZIqd/EDkkc7v9ipUUYVVH+YDrPt2Aukb1PH
                    D6K0R+KhgEzRo5x54TlU6oWvjUpwNZUwwdhMWIQaUVkMyZBYNy0jGPLO8jwZhyBg
                    1Fneybr9pwedGbLrAaz+gdEikB8B4a/fvPjVfL5Ngb4QRjFqWuE+X3nLc0kHedep
                    6nfgpUNXMlStVm5nIXKP6OjmzfCHPYh9L2Ehs1TrSk1ser9Ofx0ZMVL/jBZR2EIj
                    OZ8tH6KlX2/B2pbSPIO6kD5c4UA8Cf1SbDJCwJ/kI9ihAgMBAAGjgbAwga0wDgYD
                    VR0PAQH/BAQDAgXgMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUSNjx8cJw1Vu7
                    fHMJk6+4uDAD+H8wTQYDVR0RBEYwRKBCBgkrBgEEAQkVAgOgNRMzQ2hpcElEPVVV
                    VUNNaElGcUVFMklFUUVBQWNBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUE9MB0GA1Ud
                    DgQWBBRdhMkFD/z5hokaQeLbaRsp4hkvbzANBgkqhkiG9w0BAQsFAAOCAQEAMtuh
                    YpBz4xEZ7YdJsLpw67Q0TTJGnTBRpzAeY1urYDoDz8TSx556XG7z3IRzuED5KVSp
                    OwmH/iZ+tDfYQ3W3ElWTW93871DkuW4WQIfbnoHg/F7bF0DKYVkD3rpZjyz3NhzH
                    d7cjTdJXQ85bTAOXDuxKH3qewrXxxOGXgh3I6NUq0UwMTWh84lND7Jl+ZAQkYNS2
                    iHanTZFQBk3ML0NUb7fKDYGRTZRqwQ/upIO4S6LV1cxH/6V0qbMy3sCSHZoMLrW3
                    0m3M6yKpe5+VZzHZwmWdUf3Ot+zKjhveK5/YNsMIASdvtvymxUizq2Hr1hvR/kPc
                    p1vuyWxipU8JfzOh/A==
                    -----END CERTIFICATE-----
                    "
        servers:
          - host: 127.0.0.1
            port: 389
      localRadius:
        cache_timeout: 60
        certificate_authentication:
          clientRootCaCertificate:
            contents: |2
                        "-----BEGIN CERTIFICATE-----
                      MIIDyTCCArGgAwIBAgIKBBNXOVCGU1YztjANBgkqhkiG9w0BAQsFADAnMQ4wDAYD
                      VQQKEwVDaXNjbzEVMBMGA1UEAxMMQUNUMiBTVURJIENBMB4XDTIxMDUzMTEzNTUx
                      NVoXDTI5MDUxNDIwMjU0MVowbTEpMCcGA1UEBRMgUElEOkM5MjAwTC0yNFAtNEcg
                      U046SkFFMjUyMjBSMksxDjAMBgNVBAoTBUNpc2NvMRgwFgYDVQQLEw9BQ1QtMiBM
                      aXRlIFNVREkxFjAUBgNVBAMTDUM5MjAwTC0yNFAtNEcwggEiMA0GCSqGSIb3DQEB
                      AQUAA4IBDwAwggEKAoIBAQDaUPxW76gT5MdoEAt+UrDFiYA9RYh2iHicDViBEyow
                      TR1TuP36bHh13X3vtGiDsCD88Ci2TZIqd/EDkkc7v9ipUUYVVH+YDrPt2Aukb1PH
                      D6K0R+KhgEzRo5x54TlU6oWvjUpwNZUwwdhMWIQaUVkMyZBYNy0jGPLO8jwZhyBg
                      1Fneybr9pwedGbLrAaz+gdEikB8B4a/fvPjVfL5Ngb4QRjFqWuE+X3nLc0kHedep
                      6nfgpUNXMlStVm5nIXKP6OjmzfCHPYh9L2Ehs1TrSk1ser9Ofx0ZMVL/jBZR2EIj
                      OZ8tH6KlX2/B2pbSPIO6kD5c4UA8Cf1SbDJCwJ/kI9ihAgMBAAGjgbAwga0wDgYD
                      VR0PAQH/BAQDAgXgMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUSNjx8cJw1Vu7
                      fHMJk6+4uDAD+H8wTQYDVR0RBEYwRKBCBgkrBgEEAQkVAgOgNRMzQ2hpcElEPVVV
                      VUNNaElGcUVFMklFUUVBQWNBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUE9MB0GA1Ud
                      DgQWBBRdhMkFD/z5hokaQeLbaRsp4hkvbzANBgkqhkiG9w0BAQsFAAOCAQEAMtuh
                      YpBz4xEZ7YdJsLpw67Q0TTJGnTBRpzAeY1urYDoDz8TSx556XG7z3IRzuED5KVSp
                      OwmH/iZ+tDfYQ3W3ElWTW93871DkuW4WQIfbnoHg/F7bF0DKYVkD3rpZjyz3NhzH
                      d7cjTdJXQ85bTAOXDuxKH3qewrXxxOGXgh3I6NUq0UwMTWh84lND7Jl+ZAQkYNS2
                      iHanTZFQBk3ML0NUb7fKDYGRTZRqwQ/upIO4S6LV1cxH/6V0qbMy3sCSHZoMLrW3
                      0m3M6yKpe5+VZzHZwmWdUf3Ot+zKjhveK5/YNsMIASdvtvymxUizq2Hr1hvR/kPc
                      p1vuyWxipU8JfzOh/A==
                      -----END CERTIFICATE-----
                      "
          enabled: true
          ocspResponderUrl: http://ocsp-server.example.com
          useLdap: false
          useOcsp: true
        password_authentication:
          enabled: false
      mandatoryDhcpEnabled: false
      minBitrate: 5.5
      name: My SSID
      namedVlans:
        radius:
          guestVlan:
            enabled: true
            name: Guest VLAN
        tagging:
          byApTags:
            - tags:
                - tag1
                - tag2
              vlanName: My VLAN
          defaultVlanName: My VLAN
          enabled: true
      networkId: string
      number: string
      oauth:
        allowed_domains:
          - example.com
      perClientBandwidthLimitDown: 1
      perClientBandwidthLimitUp: 1
      perSsidBandwidthLimitDown: 1
      perSsidBandwidthLimitUp: 1
      psk: deadbeef
      radiusAccountingEnabled: true
      radiusAccountingInterimInterval: 5
      radiusAccountingServers:
        - ca_certificate: |2
                      "-----BEGIN CERTIFICATE-----
                    MIIDyTCCArGgAwIBAgIKBBNXOVCGU1YztjANBgkqhkiG9w0BAQsFADAnMQ4wDAYD
                    VQQKEwVDaXNjbzEVMBMGA1UEAxMMQUNUMiBTVURJIENBMB4XDTIxMDUzMTEzNTUx
                    NVoXDTI5MDUxNDIwMjU0MVowbTEpMCcGA1UEBRMgUElEOkM5MjAwTC0yNFAtNEcg
                    U046SkFFMjUyMjBSMksxDjAMBgNVBAoTBUNpc2NvMRgwFgYDVQQLEw9BQ1QtMiBM
                    aXRlIFNVREkxFjAUBgNVBAMTDUM5MjAwTC0yNFAtNEcwggEiMA0GCSqGSIb3DQEB
                    AQUAA4IBDwAwggEKAoIBAQDaUPxW76gT5MdoEAt+UrDFiYA9RYh2iHicDViBEyow
                    TR1TuP36bHh13X3vtGiDsCD88Ci2TZIqd/EDkkc7v9ipUUYVVH+YDrPt2Aukb1PH
                    D6K0R+KhgEzRo5x54TlU6oWvjUpwNZUwwdhMWIQaUVkMyZBYNy0jGPLO8jwZhyBg
                    1Fneybr9pwedGbLrAaz+gdEikB8B4a/fvPjVfL5Ngb4QRjFqWuE+X3nLc0kHedep
                    6nfgpUNXMlStVm5nIXKP6OjmzfCHPYh9L2Ehs1TrSk1ser9Ofx0ZMVL/jBZR2EIj
                    OZ8tH6KlX2/B2pbSPIO6kD5c4UA8Cf1SbDJCwJ/kI9ihAgMBAAGjgbAwga0wDgYD
                    VR0PAQH/BAQDAgXgMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUSNjx8cJw1Vu7
                    fHMJk6+4uDAD+H8wTQYDVR0RBEYwRKBCBgkrBgEEAQkVAgOgNRMzQ2hpcElEPVVV
                    VUNNaElGcUVFMklFUUVBQWNBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUE9MB0GA1Ud
                    DgQWBBRdhMkFD/z5hokaQeLbaRsp4hkvbzANBgkqhkiG9w0BAQsFAAOCAQEAMtuh
                    YpBz4xEZ7YdJsLpw67Q0TTJGnTBRpzAeY1urYDoDz8TSx556XG7z3IRzuED5KVSp
                    OwmH/iZ+tDfYQ3W3ElWTW93871DkuW4WQIfbnoHg/F7bF0DKYVkD3rpZjyz3NhzH
                    d7cjTdJXQ85bTAOXDuxKH3qewrXxxOGXgh3I6NUq0UwMTWh84lND7Jl+ZAQkYNS2
                    iHanTZFQBk3ML0NUb7fKDYGRTZRqwQ/upIO4S6LV1cxH/6V0qbMy3sCSHZoMLrW3
                    0m3M6yKpe5+VZzHZwmWdUf3Ot+zKjhveK5/YNsMIASdvtvymxUizq2Hr1hvR/kPc
                    p1vuyWxipU8JfzOh/A==
                    -----END CERTIFICATE-----
                    "
          host: 0.0.0.0
          port: 3000
          radsec_enabled: true
          secret: secret-string
      radiusAttributeForGroupPolicies: Filter-Id
      radiusAuthenticationNasId: 00-11-22-33-44-55:AP1
      radiusCalledStationId: 00-11-22-33-44-55:AP1
      radiusCoaEnabled: true
      radiusFailoverPolicy: Deny access
      radiusFallbackEnabled: true
      radiusGuestVlanEnabled: true
      radiusGuestVlanId: 1
      radiusLoadBalancingPolicy: Round robin
      radiusOverride: false
      radiusProxyEnabled: false
      radiusServerAttemptsLimit: 5
      radiusServerTimeout: 5
      radiusServers:
        - ca_certificate: |2
                      "-----BEGIN CERTIFICATE-----
                    MIIDyTCCArGgAwIBAgIKBBNXOVCGU1YztjANBgkqhkiG9w0BAQsFADAnMQ4wDAYD
                    VQQKEwVDaXNjbzEVMBMGA1UEAxMMQUNUMiBTVURJIENBMB4XDTIxMDUzMTEzNTUx
                    NVoXDTI5MDUxNDIwMjU0MVowbTEpMCcGA1UEBRMgUElEOkM5MjAwTC0yNFAtNEcg
                    U046SkFFMjUyMjBSMksxDjAMBgNVBAoTBUNpc2NvMRgwFgYDVQQLEw9BQ1QtMiBM
                    aXRlIFNVREkxFjAUBgNVBAMTDUM5MjAwTC0yNFAtNEcwggEiMA0GCSqGSIb3DQEB
                    AQUAA4IBDwAwggEKAoIBAQDaUPxW76gT5MdoEAt+UrDFiYA9RYh2iHicDViBEyow
                    TR1TuP36bHh13X3vtGiDsCD88Ci2TZIqd/EDkkc7v9ipUUYVVH+YDrPt2Aukb1PH
                    D6K0R+KhgEzRo5x54TlU6oWvjUpwNZUwwdhMWIQaUVkMyZBYNy0jGPLO8jwZhyBg
                    1Fneybr9pwedGbLrAaz+gdEikB8B4a/fvPjVfL5Ngb4QRjFqWuE+X3nLc0kHedep
                    6nfgpUNXMlStVm5nIXKP6OjmzfCHPYh9L2Ehs1TrSk1ser9Ofx0ZMVL/jBZR2EIj
                    OZ8tH6KlX2/B2pbSPIO6kD5c4UA8Cf1SbDJCwJ/kI9ihAgMBAAGjgbAwga0wDgYD
                    VR0PAQH/BAQDAgXgMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUSNjx8cJw1Vu7
                    fHMJk6+4uDAD+H8wTQYDVR0RBEYwRKBCBgkrBgEEAQkVAgOgNRMzQ2hpcElEPVVV
                    VUNNaElGcUVFMklFUUVBQWNBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUE9MB0GA1Ud
                    DgQWBBRdhMkFD/z5hokaQeLbaRsp4hkvbzANBgkqhkiG9w0BAQsFAAOCAQEAMtuh
                    YpBz4xEZ7YdJsLpw67Q0TTJGnTBRpzAeY1urYDoDz8TSx556XG7z3IRzuED5KVSp
                    OwmH/iZ+tDfYQ3W3ElWTW93871DkuW4WQIfbnoHg/F7bF0DKYVkD3rpZjyz3NhzH
                    d7cjTdJXQ85bTAOXDuxKH3qewrXxxOGXgh3I6NUq0UwMTWh84lND7Jl+ZAQkYNS2
                    iHanTZFQBk3ML0NUb7fKDYGRTZRqwQ/upIO4S6LV1cxH/6V0qbMy3sCSHZoMLrW3
                    0m3M6yKpe5+VZzHZwmWdUf3Ot+zKjhveK5/YNsMIASdvtvymxUizq2Hr1hvR/kPc
                    p1vuyWxipU8JfzOh/A==
                    -----END CERTIFICATE-----
                    "
          host: 0.0.0.0
          open_roaming_certificate_id: 2
          port: 3000
          radsec_enabled: true
          secret: secret-string
      radiusTestingEnabled: true
      secondaryConcentratorNetworkId: disabled
      speedBurst:
        enabled: true
      splashGuestSponsorDomains:
        - example.com
      splashPage: Click-through splash page
      useVlanTagging: false
      visible: true
      vlanId: 10
      walledGardenEnabled: true
      walledGardenRanges:
        - example.com
        - 1.1.1.1/32
      wpaEncryptionMode: WPA2 only
outputs:
  merakiNetworksWirelessSsidsExample: ${example}
Copy

Create WirelessSsids Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new WirelessSsids(name: string, args: WirelessSsidsArgs, opts?: CustomResourceOptions);
@overload
def WirelessSsids(resource_name: str,
                  args: WirelessSsidsArgs,
                  opts: Optional[ResourceOptions] = None)

@overload
def WirelessSsids(resource_name: str,
                  opts: Optional[ResourceOptions] = None,
                  network_id: Optional[str] = None,
                  number: Optional[int] = None,
                  active_directory: Optional[WirelessSsidsActiveDirectoryArgs] = None,
                  adult_content_filtering_enabled: Optional[bool] = None,
                  ap_tags_and_vlan_ids: Optional[Sequence[WirelessSsidsApTagsAndVlanIdArgs]] = None,
                  auth_mode: Optional[str] = None,
                  availability_tags: Optional[Sequence[str]] = None,
                  available_on_all_aps: Optional[bool] = None,
                  band_selection: Optional[str] = None,
                  concentrator_network_id: Optional[str] = None,
                  default_vlan_id: Optional[int] = None,
                  disassociate_clients_on_vpn_failover: Optional[bool] = None,
                  dns_rewrite: Optional[WirelessSsidsDnsRewriteArgs] = None,
                  dot11r: Optional[WirelessSsidsDot11rArgs] = None,
                  dot11w: Optional[WirelessSsidsDot11wArgs] = None,
                  enabled: Optional[bool] = None,
                  encryption_mode: Optional[str] = None,
                  enterprise_admin_access: Optional[str] = None,
                  gre: Optional[WirelessSsidsGreArgs] = None,
                  ip_assignment_mode: Optional[str] = None,
                  lan_isolation_enabled: Optional[bool] = None,
                  ldap: Optional[WirelessSsidsLdapArgs] = None,
                  local_radius: Optional[WirelessSsidsLocalRadiusArgs] = None,
                  mandatory_dhcp_enabled: Optional[bool] = None,
                  min_bitrate: Optional[int] = None,
                  name: Optional[str] = None,
                  named_vlans: Optional[WirelessSsidsNamedVlansArgs] = None,
                  oauth: Optional[WirelessSsidsOauthArgs] = None,
                  per_client_bandwidth_limit_down: Optional[int] = None,
                  per_client_bandwidth_limit_up: Optional[int] = None,
                  per_ssid_bandwidth_limit_down: Optional[int] = None,
                  per_ssid_bandwidth_limit_up: Optional[int] = None,
                  psk: Optional[str] = None,
                  radius_accounting_enabled: Optional[bool] = None,
                  radius_accounting_interim_interval: Optional[int] = None,
                  radius_accounting_servers: Optional[Sequence[WirelessSsidsRadiusAccountingServerArgs]] = None,
                  radius_attribute_for_group_policies: Optional[str] = None,
                  radius_authentication_nas_id: Optional[str] = None,
                  radius_called_station_id: Optional[str] = None,
                  radius_coa_enabled: Optional[bool] = None,
                  radius_failover_policy: Optional[str] = None,
                  radius_fallback_enabled: Optional[bool] = None,
                  radius_guest_vlan_enabled: Optional[bool] = None,
                  radius_guest_vlan_id: Optional[int] = None,
                  radius_load_balancing_policy: Optional[str] = None,
                  radius_override: Optional[bool] = None,
                  radius_proxy_enabled: Optional[bool] = None,
                  radius_server_attempts_limit: Optional[int] = None,
                  radius_server_timeout: Optional[int] = None,
                  radius_servers: Optional[Sequence[WirelessSsidsRadiusServerArgs]] = None,
                  radius_testing_enabled: Optional[bool] = None,
                  secondary_concentrator_network_id: Optional[str] = None,
                  speed_burst: Optional[WirelessSsidsSpeedBurstArgs] = None,
                  splash_guest_sponsor_domains: Optional[Sequence[str]] = None,
                  splash_page: Optional[str] = None,
                  use_vlan_tagging: Optional[bool] = None,
                  visible: Optional[bool] = None,
                  vlan_id: Optional[int] = None,
                  walled_garden_enabled: Optional[bool] = None,
                  walled_garden_ranges: Optional[Sequence[str]] = None,
                  wpa_encryption_mode: Optional[str] = None)
func NewWirelessSsids(ctx *Context, name string, args WirelessSsidsArgs, opts ...ResourceOption) (*WirelessSsids, error)
public WirelessSsids(string name, WirelessSsidsArgs args, CustomResourceOptions? opts = null)
public WirelessSsids(String name, WirelessSsidsArgs args)
public WirelessSsids(String name, WirelessSsidsArgs args, CustomResourceOptions options)
type: meraki:networks:WirelessSsids
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. WirelessSsidsArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. WirelessSsidsArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. WirelessSsidsArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. WirelessSsidsArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. WirelessSsidsArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var wirelessSsidsResource = new Meraki.Networks.WirelessSsids("wirelessSsidsResource", new()
{
    NetworkId = "string",
    Number = 0,
    ActiveDirectory = new Meraki.Networks.Inputs.WirelessSsidsActiveDirectoryArgs
    {
        Credentials = new Meraki.Networks.Inputs.WirelessSsidsActiveDirectoryCredentialsArgs
        {
            LogonName = "string",
            Password = "string",
        },
        Servers = new[]
        {
            new Meraki.Networks.Inputs.WirelessSsidsActiveDirectoryServerArgs
            {
                Host = "string",
                Port = 0,
            },
        },
    },
    AdultContentFilteringEnabled = false,
    ApTagsAndVlanIds = new[]
    {
        new Meraki.Networks.Inputs.WirelessSsidsApTagsAndVlanIdArgs
        {
            Tags = new[]
            {
                "string",
            },
            VlanId = 0,
        },
    },
    AuthMode = "string",
    AvailabilityTags = new[]
    {
        "string",
    },
    AvailableOnAllAps = false,
    BandSelection = "string",
    ConcentratorNetworkId = "string",
    DefaultVlanId = 0,
    DisassociateClientsOnVpnFailover = false,
    DnsRewrite = new Meraki.Networks.Inputs.WirelessSsidsDnsRewriteArgs
    {
        DnsCustomNameservers = new[]
        {
            "string",
        },
        Enabled = false,
    },
    Dot11r = new Meraki.Networks.Inputs.WirelessSsidsDot11rArgs
    {
        Adaptive = false,
        Enabled = false,
    },
    Dot11w = new Meraki.Networks.Inputs.WirelessSsidsDot11wArgs
    {
        Enabled = false,
        Required = false,
    },
    Enabled = false,
    EncryptionMode = "string",
    EnterpriseAdminAccess = "string",
    Gre = new Meraki.Networks.Inputs.WirelessSsidsGreArgs
    {
        Concentrator = new Meraki.Networks.Inputs.WirelessSsidsGreConcentratorArgs
        {
            Host = "string",
        },
        Key = 0,
    },
    IpAssignmentMode = "string",
    LanIsolationEnabled = false,
    Ldap = new Meraki.Networks.Inputs.WirelessSsidsLdapArgs
    {
        BaseDistinguishedName = "string",
        Credentials = new Meraki.Networks.Inputs.WirelessSsidsLdapCredentialsArgs
        {
            DistinguishedName = "string",
            Password = "string",
        },
        ServerCaCertificate = new Meraki.Networks.Inputs.WirelessSsidsLdapServerCaCertificateArgs
        {
            Contents = "string",
        },
        Servers = new[]
        {
            new Meraki.Networks.Inputs.WirelessSsidsLdapServerArgs
            {
                Host = "string",
                Port = 0,
            },
        },
    },
    LocalRadius = new Meraki.Networks.Inputs.WirelessSsidsLocalRadiusArgs
    {
        CacheTimeout = 0,
        CertificateAuthentication = new Meraki.Networks.Inputs.WirelessSsidsLocalRadiusCertificateAuthenticationArgs
        {
            ClientRootCaCertificate = new Meraki.Networks.Inputs.WirelessSsidsLocalRadiusCertificateAuthenticationClientRootCaCertificateArgs
            {
                Contents = "string",
            },
            Enabled = false,
            OcspResponderUrl = "string",
            UseLdap = false,
            UseOcsp = false,
        },
        PasswordAuthentication = new Meraki.Networks.Inputs.WirelessSsidsLocalRadiusPasswordAuthenticationArgs
        {
            Enabled = false,
        },
    },
    MandatoryDhcpEnabled = false,
    MinBitrate = 0,
    Name = "string",
    NamedVlans = new Meraki.Networks.Inputs.WirelessSsidsNamedVlansArgs
    {
        Radius = new Meraki.Networks.Inputs.WirelessSsidsNamedVlansRadiusArgs
        {
            GuestVlan = new Meraki.Networks.Inputs.WirelessSsidsNamedVlansRadiusGuestVlanArgs
            {
                Enabled = false,
                Name = "string",
            },
        },
        Tagging = new Meraki.Networks.Inputs.WirelessSsidsNamedVlansTaggingArgs
        {
            ByApTags = new[]
            {
                new Meraki.Networks.Inputs.WirelessSsidsNamedVlansTaggingByApTagArgs
                {
                    Tags = new[]
                    {
                        "string",
                    },
                    VlanName = "string",
                },
            },
            DefaultVlanName = "string",
            Enabled = false,
        },
    },
    Oauth = new Meraki.Networks.Inputs.WirelessSsidsOauthArgs
    {
        AllowedDomains = new[]
        {
            "string",
        },
    },
    PerClientBandwidthLimitDown = 0,
    PerClientBandwidthLimitUp = 0,
    PerSsidBandwidthLimitDown = 0,
    PerSsidBandwidthLimitUp = 0,
    Psk = "string",
    RadiusAccountingEnabled = false,
    RadiusAccountingInterimInterval = 0,
    RadiusAccountingServers = new[]
    {
        new Meraki.Networks.Inputs.WirelessSsidsRadiusAccountingServerArgs
        {
            CaCertificate = "string",
            Host = "string",
            OpenRoamingCertificateId = 0,
            Port = 0,
            RadsecEnabled = false,
            Secret = "string",
        },
    },
    RadiusAttributeForGroupPolicies = "string",
    RadiusAuthenticationNasId = "string",
    RadiusCalledStationId = "string",
    RadiusCoaEnabled = false,
    RadiusFailoverPolicy = "string",
    RadiusFallbackEnabled = false,
    RadiusGuestVlanEnabled = false,
    RadiusGuestVlanId = 0,
    RadiusLoadBalancingPolicy = "string",
    RadiusOverride = false,
    RadiusProxyEnabled = false,
    RadiusServerAttemptsLimit = 0,
    RadiusServerTimeout = 0,
    RadiusServers = new[]
    {
        new Meraki.Networks.Inputs.WirelessSsidsRadiusServerArgs
        {
            CaCertificate = "string",
            Host = "string",
            OpenRoamingCertificateId = 0,
            Port = 0,
            RadsecEnabled = false,
            Secret = "string",
        },
    },
    RadiusTestingEnabled = false,
    SecondaryConcentratorNetworkId = "string",
    SpeedBurst = new Meraki.Networks.Inputs.WirelessSsidsSpeedBurstArgs
    {
        Enabled = false,
    },
    SplashGuestSponsorDomains = new[]
    {
        "string",
    },
    SplashPage = "string",
    UseVlanTagging = false,
    Visible = false,
    VlanId = 0,
    WalledGardenEnabled = false,
    WalledGardenRanges = new[]
    {
        "string",
    },
    WpaEncryptionMode = "string",
});
Copy
example, err := networks.NewWirelessSsids(ctx, "wirelessSsidsResource", &networks.WirelessSsidsArgs{
	NetworkId: pulumi.String("string"),
	Number:    pulumi.Int(0),
	ActiveDirectory: &networks.WirelessSsidsActiveDirectoryArgs{
		Credentials: &networks.WirelessSsidsActiveDirectoryCredentialsArgs{
			LogonName: pulumi.String("string"),
			Password:  pulumi.String("string"),
		},
		Servers: networks.WirelessSsidsActiveDirectoryServerArray{
			&networks.WirelessSsidsActiveDirectoryServerArgs{
				Host: pulumi.String("string"),
				Port: pulumi.Int(0),
			},
		},
	},
	AdultContentFilteringEnabled: pulumi.Bool(false),
	ApTagsAndVlanIds: networks.WirelessSsidsApTagsAndVlanIdArray{
		&networks.WirelessSsidsApTagsAndVlanIdArgs{
			Tags: pulumi.StringArray{
				pulumi.String("string"),
			},
			VlanId: pulumi.Int(0),
		},
	},
	AuthMode: pulumi.String("string"),
	AvailabilityTags: pulumi.StringArray{
		pulumi.String("string"),
	},
	AvailableOnAllAps:                pulumi.Bool(false),
	BandSelection:                    pulumi.String("string"),
	ConcentratorNetworkId:            pulumi.String("string"),
	DefaultVlanId:                    pulumi.Int(0),
	DisassociateClientsOnVpnFailover: pulumi.Bool(false),
	DnsRewrite: &networks.WirelessSsidsDnsRewriteArgs{
		DnsCustomNameservers: pulumi.StringArray{
			pulumi.String("string"),
		},
		Enabled: pulumi.Bool(false),
	},
	Dot11r: &networks.WirelessSsidsDot11rArgs{
		Adaptive: pulumi.Bool(false),
		Enabled:  pulumi.Bool(false),
	},
	Dot11w: &networks.WirelessSsidsDot11wArgs{
		Enabled:  pulumi.Bool(false),
		Required: pulumi.Bool(false),
	},
	Enabled:               pulumi.Bool(false),
	EncryptionMode:        pulumi.String("string"),
	EnterpriseAdminAccess: pulumi.String("string"),
	Gre: &networks.WirelessSsidsGreArgs{
		Concentrator: &networks.WirelessSsidsGreConcentratorArgs{
			Host: pulumi.String("string"),
		},
		Key: pulumi.Int(0),
	},
	IpAssignmentMode:    pulumi.String("string"),
	LanIsolationEnabled: pulumi.Bool(false),
	Ldap: &networks.WirelessSsidsLdapArgs{
		BaseDistinguishedName: pulumi.String("string"),
		Credentials: &networks.WirelessSsidsLdapCredentialsArgs{
			DistinguishedName: pulumi.String("string"),
			Password:          pulumi.String("string"),
		},
		ServerCaCertificate: &networks.WirelessSsidsLdapServerCaCertificateArgs{
			Contents: pulumi.String("string"),
		},
		Servers: networks.WirelessSsidsLdapServerArray{
			&networks.WirelessSsidsLdapServerArgs{
				Host: pulumi.String("string"),
				Port: pulumi.Int(0),
			},
		},
	},
	LocalRadius: &networks.WirelessSsidsLocalRadiusArgs{
		CacheTimeout: pulumi.Int(0),
		CertificateAuthentication: &networks.WirelessSsidsLocalRadiusCertificateAuthenticationArgs{
			ClientRootCaCertificate: &networks.WirelessSsidsLocalRadiusCertificateAuthenticationClientRootCaCertificateArgs{
				Contents: pulumi.String("string"),
			},
			Enabled:          pulumi.Bool(false),
			OcspResponderUrl: pulumi.String("string"),
			UseLdap:          pulumi.Bool(false),
			UseOcsp:          pulumi.Bool(false),
		},
		PasswordAuthentication: &networks.WirelessSsidsLocalRadiusPasswordAuthenticationArgs{
			Enabled: pulumi.Bool(false),
		},
	},
	MandatoryDhcpEnabled: pulumi.Bool(false),
	MinBitrate:           pulumi.Int(0),
	Name:                 pulumi.String("string"),
	NamedVlans: &networks.WirelessSsidsNamedVlansArgs{
		Radius: &networks.WirelessSsidsNamedVlansRadiusArgs{
			GuestVlan: &networks.WirelessSsidsNamedVlansRadiusGuestVlanArgs{
				Enabled: pulumi.Bool(false),
				Name:    pulumi.String("string"),
			},
		},
		Tagging: &networks.WirelessSsidsNamedVlansTaggingArgs{
			ByApTags: networks.WirelessSsidsNamedVlansTaggingByApTagArray{
				&networks.WirelessSsidsNamedVlansTaggingByApTagArgs{
					Tags: pulumi.StringArray{
						pulumi.String("string"),
					},
					VlanName: pulumi.String("string"),
				},
			},
			DefaultVlanName: pulumi.String("string"),
			Enabled:         pulumi.Bool(false),
		},
	},
	Oauth: &networks.WirelessSsidsOauthArgs{
		AllowedDomains: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	PerClientBandwidthLimitDown:     pulumi.Int(0),
	PerClientBandwidthLimitUp:       pulumi.Int(0),
	PerSsidBandwidthLimitDown:       pulumi.Int(0),
	PerSsidBandwidthLimitUp:         pulumi.Int(0),
	Psk:                             pulumi.String("string"),
	RadiusAccountingEnabled:         pulumi.Bool(false),
	RadiusAccountingInterimInterval: pulumi.Int(0),
	RadiusAccountingServers: networks.WirelessSsidsRadiusAccountingServerArray{
		&networks.WirelessSsidsRadiusAccountingServerArgs{
			CaCertificate:            pulumi.String("string"),
			Host:                     pulumi.String("string"),
			OpenRoamingCertificateId: pulumi.Int(0),
			Port:                     pulumi.Int(0),
			RadsecEnabled:            pulumi.Bool(false),
			Secret:                   pulumi.String("string"),
		},
	},
	RadiusAttributeForGroupPolicies: pulumi.String("string"),
	RadiusAuthenticationNasId:       pulumi.String("string"),
	RadiusCalledStationId:           pulumi.String("string"),
	RadiusCoaEnabled:                pulumi.Bool(false),
	RadiusFailoverPolicy:            pulumi.String("string"),
	RadiusFallbackEnabled:           pulumi.Bool(false),
	RadiusGuestVlanEnabled:          pulumi.Bool(false),
	RadiusGuestVlanId:               pulumi.Int(0),
	RadiusLoadBalancingPolicy:       pulumi.String("string"),
	RadiusOverride:                  pulumi.Bool(false),
	RadiusProxyEnabled:              pulumi.Bool(false),
	RadiusServerAttemptsLimit:       pulumi.Int(0),
	RadiusServerTimeout:             pulumi.Int(0),
	RadiusServers: networks.WirelessSsidsRadiusServerArray{
		&networks.WirelessSsidsRadiusServerArgs{
			CaCertificate:            pulumi.String("string"),
			Host:                     pulumi.String("string"),
			OpenRoamingCertificateId: pulumi.Int(0),
			Port:                     pulumi.Int(0),
			RadsecEnabled:            pulumi.Bool(false),
			Secret:                   pulumi.String("string"),
		},
	},
	RadiusTestingEnabled:           pulumi.Bool(false),
	SecondaryConcentratorNetworkId: pulumi.String("string"),
	SpeedBurst: &networks.WirelessSsidsSpeedBurstArgs{
		Enabled: pulumi.Bool(false),
	},
	SplashGuestSponsorDomains: pulumi.StringArray{
		pulumi.String("string"),
	},
	SplashPage:          pulumi.String("string"),
	UseVlanTagging:      pulumi.Bool(false),
	Visible:             pulumi.Bool(false),
	VlanId:              pulumi.Int(0),
	WalledGardenEnabled: pulumi.Bool(false),
	WalledGardenRanges: pulumi.StringArray{
		pulumi.String("string"),
	},
	WpaEncryptionMode: pulumi.String("string"),
})
Copy
var wirelessSsidsResource = new WirelessSsids("wirelessSsidsResource", WirelessSsidsArgs.builder()
    .networkId("string")
    .number(0)
    .activeDirectory(WirelessSsidsActiveDirectoryArgs.builder()
        .credentials(WirelessSsidsActiveDirectoryCredentialsArgs.builder()
            .logonName("string")
            .password("string")
            .build())
        .servers(WirelessSsidsActiveDirectoryServerArgs.builder()
            .host("string")
            .port(0)
            .build())
        .build())
    .adultContentFilteringEnabled(false)
    .apTagsAndVlanIds(WirelessSsidsApTagsAndVlanIdArgs.builder()
        .tags("string")
        .vlanId(0)
        .build())
    .authMode("string")
    .availabilityTags("string")
    .availableOnAllAps(false)
    .bandSelection("string")
    .concentratorNetworkId("string")
    .defaultVlanId(0)
    .disassociateClientsOnVpnFailover(false)
    .dnsRewrite(WirelessSsidsDnsRewriteArgs.builder()
        .dnsCustomNameservers("string")
        .enabled(false)
        .build())
    .dot11r(WirelessSsidsDot11rArgs.builder()
        .adaptive(false)
        .enabled(false)
        .build())
    .dot11w(WirelessSsidsDot11wArgs.builder()
        .enabled(false)
        .required(false)
        .build())
    .enabled(false)
    .encryptionMode("string")
    .enterpriseAdminAccess("string")
    .gre(WirelessSsidsGreArgs.builder()
        .concentrator(WirelessSsidsGreConcentratorArgs.builder()
            .host("string")
            .build())
        .key(0)
        .build())
    .ipAssignmentMode("string")
    .lanIsolationEnabled(false)
    .ldap(WirelessSsidsLdapArgs.builder()
        .baseDistinguishedName("string")
        .credentials(WirelessSsidsLdapCredentialsArgs.builder()
            .distinguishedName("string")
            .password("string")
            .build())
        .serverCaCertificate(WirelessSsidsLdapServerCaCertificateArgs.builder()
            .contents("string")
            .build())
        .servers(WirelessSsidsLdapServerArgs.builder()
            .host("string")
            .port(0)
            .build())
        .build())
    .localRadius(WirelessSsidsLocalRadiusArgs.builder()
        .cacheTimeout(0)
        .certificateAuthentication(WirelessSsidsLocalRadiusCertificateAuthenticationArgs.builder()
            .clientRootCaCertificate(WirelessSsidsLocalRadiusCertificateAuthenticationClientRootCaCertificateArgs.builder()
                .contents("string")
                .build())
            .enabled(false)
            .ocspResponderUrl("string")
            .useLdap(false)
            .useOcsp(false)
            .build())
        .passwordAuthentication(WirelessSsidsLocalRadiusPasswordAuthenticationArgs.builder()
            .enabled(false)
            .build())
        .build())
    .mandatoryDhcpEnabled(false)
    .minBitrate(0)
    .name("string")
    .namedVlans(WirelessSsidsNamedVlansArgs.builder()
        .radius(WirelessSsidsNamedVlansRadiusArgs.builder()
            .guestVlan(WirelessSsidsNamedVlansRadiusGuestVlanArgs.builder()
                .enabled(false)
                .name("string")
                .build())
            .build())
        .tagging(WirelessSsidsNamedVlansTaggingArgs.builder()
            .byApTags(WirelessSsidsNamedVlansTaggingByApTagArgs.builder()
                .tags("string")
                .vlanName("string")
                .build())
            .defaultVlanName("string")
            .enabled(false)
            .build())
        .build())
    .oauth(WirelessSsidsOauthArgs.builder()
        .allowedDomains("string")
        .build())
    .perClientBandwidthLimitDown(0)
    .perClientBandwidthLimitUp(0)
    .perSsidBandwidthLimitDown(0)
    .perSsidBandwidthLimitUp(0)
    .psk("string")
    .radiusAccountingEnabled(false)
    .radiusAccountingInterimInterval(0)
    .radiusAccountingServers(WirelessSsidsRadiusAccountingServerArgs.builder()
        .caCertificate("string")
        .host("string")
        .openRoamingCertificateId(0)
        .port(0)
        .radsecEnabled(false)
        .secret("string")
        .build())
    .radiusAttributeForGroupPolicies("string")
    .radiusAuthenticationNasId("string")
    .radiusCalledStationId("string")
    .radiusCoaEnabled(false)
    .radiusFailoverPolicy("string")
    .radiusFallbackEnabled(false)
    .radiusGuestVlanEnabled(false)
    .radiusGuestVlanId(0)
    .radiusLoadBalancingPolicy("string")
    .radiusOverride(false)
    .radiusProxyEnabled(false)
    .radiusServerAttemptsLimit(0)
    .radiusServerTimeout(0)
    .radiusServers(WirelessSsidsRadiusServerArgs.builder()
        .caCertificate("string")
        .host("string")
        .openRoamingCertificateId(0)
        .port(0)
        .radsecEnabled(false)
        .secret("string")
        .build())
    .radiusTestingEnabled(false)
    .secondaryConcentratorNetworkId("string")
    .speedBurst(WirelessSsidsSpeedBurstArgs.builder()
        .enabled(false)
        .build())
    .splashGuestSponsorDomains("string")
    .splashPage("string")
    .useVlanTagging(false)
    .visible(false)
    .vlanId(0)
    .walledGardenEnabled(false)
    .walledGardenRanges("string")
    .wpaEncryptionMode("string")
    .build());
Copy
wireless_ssids_resource = meraki.networks.WirelessSsids("wirelessSsidsResource",
    network_id="string",
    number=0,
    active_directory={
        "credentials": {
            "logon_name": "string",
            "password": "string",
        },
        "servers": [{
            "host": "string",
            "port": 0,
        }],
    },
    adult_content_filtering_enabled=False,
    ap_tags_and_vlan_ids=[{
        "tags": ["string"],
        "vlan_id": 0,
    }],
    auth_mode="string",
    availability_tags=["string"],
    available_on_all_aps=False,
    band_selection="string",
    concentrator_network_id="string",
    default_vlan_id=0,
    disassociate_clients_on_vpn_failover=False,
    dns_rewrite={
        "dns_custom_nameservers": ["string"],
        "enabled": False,
    },
    dot11r={
        "adaptive": False,
        "enabled": False,
    },
    dot11w={
        "enabled": False,
        "required": False,
    },
    enabled=False,
    encryption_mode="string",
    enterprise_admin_access="string",
    gre={
        "concentrator": {
            "host": "string",
        },
        "key": 0,
    },
    ip_assignment_mode="string",
    lan_isolation_enabled=False,
    ldap={
        "base_distinguished_name": "string",
        "credentials": {
            "distinguished_name": "string",
            "password": "string",
        },
        "server_ca_certificate": {
            "contents": "string",
        },
        "servers": [{
            "host": "string",
            "port": 0,
        }],
    },
    local_radius={
        "cache_timeout": 0,
        "certificate_authentication": {
            "client_root_ca_certificate": {
                "contents": "string",
            },
            "enabled": False,
            "ocsp_responder_url": "string",
            "use_ldap": False,
            "use_ocsp": False,
        },
        "password_authentication": {
            "enabled": False,
        },
    },
    mandatory_dhcp_enabled=False,
    min_bitrate=0,
    name="string",
    named_vlans={
        "radius": {
            "guest_vlan": {
                "enabled": False,
                "name": "string",
            },
        },
        "tagging": {
            "by_ap_tags": [{
                "tags": ["string"],
                "vlan_name": "string",
            }],
            "default_vlan_name": "string",
            "enabled": False,
        },
    },
    oauth={
        "allowed_domains": ["string"],
    },
    per_client_bandwidth_limit_down=0,
    per_client_bandwidth_limit_up=0,
    per_ssid_bandwidth_limit_down=0,
    per_ssid_bandwidth_limit_up=0,
    psk="string",
    radius_accounting_enabled=False,
    radius_accounting_interim_interval=0,
    radius_accounting_servers=[{
        "ca_certificate": "string",
        "host": "string",
        "open_roaming_certificate_id": 0,
        "port": 0,
        "radsec_enabled": False,
        "secret": "string",
    }],
    radius_attribute_for_group_policies="string",
    radius_authentication_nas_id="string",
    radius_called_station_id="string",
    radius_coa_enabled=False,
    radius_failover_policy="string",
    radius_fallback_enabled=False,
    radius_guest_vlan_enabled=False,
    radius_guest_vlan_id=0,
    radius_load_balancing_policy="string",
    radius_override=False,
    radius_proxy_enabled=False,
    radius_server_attempts_limit=0,
    radius_server_timeout=0,
    radius_servers=[{
        "ca_certificate": "string",
        "host": "string",
        "open_roaming_certificate_id": 0,
        "port": 0,
        "radsec_enabled": False,
        "secret": "string",
    }],
    radius_testing_enabled=False,
    secondary_concentrator_network_id="string",
    speed_burst={
        "enabled": False,
    },
    splash_guest_sponsor_domains=["string"],
    splash_page="string",
    use_vlan_tagging=False,
    visible=False,
    vlan_id=0,
    walled_garden_enabled=False,
    walled_garden_ranges=["string"],
    wpa_encryption_mode="string")
Copy
const wirelessSsidsResource = new meraki.networks.WirelessSsids("wirelessSsidsResource", {
    networkId: "string",
    number: 0,
    activeDirectory: {
        credentials: {
            logonName: "string",
            password: "string",
        },
        servers: [{
            host: "string",
            port: 0,
        }],
    },
    adultContentFilteringEnabled: false,
    apTagsAndVlanIds: [{
        tags: ["string"],
        vlanId: 0,
    }],
    authMode: "string",
    availabilityTags: ["string"],
    availableOnAllAps: false,
    bandSelection: "string",
    concentratorNetworkId: "string",
    defaultVlanId: 0,
    disassociateClientsOnVpnFailover: false,
    dnsRewrite: {
        dnsCustomNameservers: ["string"],
        enabled: false,
    },
    dot11r: {
        adaptive: false,
        enabled: false,
    },
    dot11w: {
        enabled: false,
        required: false,
    },
    enabled: false,
    encryptionMode: "string",
    enterpriseAdminAccess: "string",
    gre: {
        concentrator: {
            host: "string",
        },
        key: 0,
    },
    ipAssignmentMode: "string",
    lanIsolationEnabled: false,
    ldap: {
        baseDistinguishedName: "string",
        credentials: {
            distinguishedName: "string",
            password: "string",
        },
        serverCaCertificate: {
            contents: "string",
        },
        servers: [{
            host: "string",
            port: 0,
        }],
    },
    localRadius: {
        cacheTimeout: 0,
        certificateAuthentication: {
            clientRootCaCertificate: {
                contents: "string",
            },
            enabled: false,
            ocspResponderUrl: "string",
            useLdap: false,
            useOcsp: false,
        },
        passwordAuthentication: {
            enabled: false,
        },
    },
    mandatoryDhcpEnabled: false,
    minBitrate: 0,
    name: "string",
    namedVlans: {
        radius: {
            guestVlan: {
                enabled: false,
                name: "string",
            },
        },
        tagging: {
            byApTags: [{
                tags: ["string"],
                vlanName: "string",
            }],
            defaultVlanName: "string",
            enabled: false,
        },
    },
    oauth: {
        allowedDomains: ["string"],
    },
    perClientBandwidthLimitDown: 0,
    perClientBandwidthLimitUp: 0,
    perSsidBandwidthLimitDown: 0,
    perSsidBandwidthLimitUp: 0,
    psk: "string",
    radiusAccountingEnabled: false,
    radiusAccountingInterimInterval: 0,
    radiusAccountingServers: [{
        caCertificate: "string",
        host: "string",
        openRoamingCertificateId: 0,
        port: 0,
        radsecEnabled: false,
        secret: "string",
    }],
    radiusAttributeForGroupPolicies: "string",
    radiusAuthenticationNasId: "string",
    radiusCalledStationId: "string",
    radiusCoaEnabled: false,
    radiusFailoverPolicy: "string",
    radiusFallbackEnabled: false,
    radiusGuestVlanEnabled: false,
    radiusGuestVlanId: 0,
    radiusLoadBalancingPolicy: "string",
    radiusOverride: false,
    radiusProxyEnabled: false,
    radiusServerAttemptsLimit: 0,
    radiusServerTimeout: 0,
    radiusServers: [{
        caCertificate: "string",
        host: "string",
        openRoamingCertificateId: 0,
        port: 0,
        radsecEnabled: false,
        secret: "string",
    }],
    radiusTestingEnabled: false,
    secondaryConcentratorNetworkId: "string",
    speedBurst: {
        enabled: false,
    },
    splashGuestSponsorDomains: ["string"],
    splashPage: "string",
    useVlanTagging: false,
    visible: false,
    vlanId: 0,
    walledGardenEnabled: false,
    walledGardenRanges: ["string"],
    wpaEncryptionMode: "string",
});
Copy
type: meraki:networks:WirelessSsids
properties:
    activeDirectory:
        credentials:
            logonName: string
            password: string
        servers:
            - host: string
              port: 0
    adultContentFilteringEnabled: false
    apTagsAndVlanIds:
        - tags:
            - string
          vlanId: 0
    authMode: string
    availabilityTags:
        - string
    availableOnAllAps: false
    bandSelection: string
    concentratorNetworkId: string
    defaultVlanId: 0
    disassociateClientsOnVpnFailover: false
    dnsRewrite:
        dnsCustomNameservers:
            - string
        enabled: false
    dot11r:
        adaptive: false
        enabled: false
    dot11w:
        enabled: false
        required: false
    enabled: false
    encryptionMode: string
    enterpriseAdminAccess: string
    gre:
        concentrator:
            host: string
        key: 0
    ipAssignmentMode: string
    lanIsolationEnabled: false
    ldap:
        baseDistinguishedName: string
        credentials:
            distinguishedName: string
            password: string
        serverCaCertificate:
            contents: string
        servers:
            - host: string
              port: 0
    localRadius:
        cacheTimeout: 0
        certificateAuthentication:
            clientRootCaCertificate:
                contents: string
            enabled: false
            ocspResponderUrl: string
            useLdap: false
            useOcsp: false
        passwordAuthentication:
            enabled: false
    mandatoryDhcpEnabled: false
    minBitrate: 0
    name: string
    namedVlans:
        radius:
            guestVlan:
                enabled: false
                name: string
        tagging:
            byApTags:
                - tags:
                    - string
                  vlanName: string
            defaultVlanName: string
            enabled: false
    networkId: string
    number: 0
    oauth:
        allowedDomains:
            - string
    perClientBandwidthLimitDown: 0
    perClientBandwidthLimitUp: 0
    perSsidBandwidthLimitDown: 0
    perSsidBandwidthLimitUp: 0
    psk: string
    radiusAccountingEnabled: false
    radiusAccountingInterimInterval: 0
    radiusAccountingServers:
        - caCertificate: string
          host: string
          openRoamingCertificateId: 0
          port: 0
          radsecEnabled: false
          secret: string
    radiusAttributeForGroupPolicies: string
    radiusAuthenticationNasId: string
    radiusCalledStationId: string
    radiusCoaEnabled: false
    radiusFailoverPolicy: string
    radiusFallbackEnabled: false
    radiusGuestVlanEnabled: false
    radiusGuestVlanId: 0
    radiusLoadBalancingPolicy: string
    radiusOverride: false
    radiusProxyEnabled: false
    radiusServerAttemptsLimit: 0
    radiusServerTimeout: 0
    radiusServers:
        - caCertificate: string
          host: string
          openRoamingCertificateId: 0
          port: 0
          radsecEnabled: false
          secret: string
    radiusTestingEnabled: false
    secondaryConcentratorNetworkId: string
    speedBurst:
        enabled: false
    splashGuestSponsorDomains:
        - string
    splashPage: string
    useVlanTagging: false
    visible: false
    vlanId: 0
    walledGardenEnabled: false
    walledGardenRanges:
        - string
    wpaEncryptionMode: string
Copy

WirelessSsids Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The WirelessSsids resource accepts the following input properties:

NetworkId This property is required. string
networkId path parameter. Network ID
Number This property is required. int
Unique identifier of the SSID
ActiveDirectory WirelessSsidsActiveDirectory
The current setting for Active Directory. Only valid if splashPage is 'Password-protected with Active Directory'
AdultContentFilteringEnabled bool
Boolean indicating whether or not adult content will be blocked
ApTagsAndVlanIds List<WirelessSsidsApTagsAndVlanId>
The list of tags and VLAN IDs used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
AuthMode string
The association control method for the SSID
AvailabilityTags List<string>
List of tags for this SSID. If availableOnAllAps is false, then the SSID is only broadcast by APs with tags matching any of the tags in this list
AvailableOnAllAps bool
Whether all APs broadcast the SSID or if it's restricted to APs matching any availability tags
BandSelection string
The client-serving radio frequencies of this SSID in the default indoor RF profile
ConcentratorNetworkId string
The concentrator to use when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'.
DefaultVlanId int
The default VLAN ID used for 'all other APs'. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
DisassociateClientsOnVpnFailover bool
Disassociate clients when 'VPN' concentrator failover occurs in order to trigger clients to re-associate and generate new DHCP requests. This param is only valid if ipAssignmentMode is 'VPN'.
DnsRewrite WirelessSsidsDnsRewrite
DNS servers rewrite settings
Dot11r WirelessSsidsDot11r
The current setting for 802.11r
Dot11w WirelessSsidsDot11w
The current setting for Protected Management Frames (802.11w).
Enabled bool
Whether or not the SSID is enabled
EncryptionMode string
The psk encryption mode for the SSID
EnterpriseAdminAccess string
Whether or not an SSID is accessible by 'enterprise' administrators ('access disabled' or 'access enabled')
Gre WirelessSsidsGre
Ethernet over GRE settings
IpAssignmentMode string
The client IP assignment mode
LanIsolationEnabled bool
Boolean indicating whether Layer 2 LAN isolation should be enabled or disabled. Only configurable when ipAssignmentMode is 'Bridge mode'.
Ldap WirelessSsidsLdap
The current setting for LDAP. Only valid if splashPage is 'Password-protected with LDAP'.
LocalRadius WirelessSsidsLocalRadius
The current setting for Local Authentication, a built-in RADIUS server on the access point. Only valid if authMode is '8021x-localradius'.
MandatoryDhcpEnabled bool
Whether clients connecting to this SSID must use the IP address assigned by the DHCP server
MinBitrate int
The minimum bitrate in Mbps of this SSID in the default indoor RF profile
Name string
The name of the SSID
NamedVlans WirelessSsidsNamedVlans
Named VLAN settings.
Oauth WirelessSsidsOauth
The OAuth settings of this SSID. Only valid if splashPage is 'Google OAuth'.
PerClientBandwidthLimitDown int
The download bandwidth limit in Kbps. (0 represents no limit.)
PerClientBandwidthLimitUp int
The upload bandwidth limit in Kbps. (0 represents no limit.)
PerSsidBandwidthLimitDown int
The total download bandwidth limit in Kbps (0 represents no limit)
PerSsidBandwidthLimitUp int
The total upload bandwidth limit in Kbps (0 represents no limit)
Psk string
The passkey for the SSID. This param is only valid if the authMode is 'psk'
RadiusAccountingEnabled bool
Whether or not RADIUS accounting is enabled
RadiusAccountingInterimInterval int
The interval (in seconds) in which accounting information is updated and sent to the RADIUS accounting server.
RadiusAccountingServers List<WirelessSsidsRadiusAccountingServer>
List of RADIUS accounting 802.1X servers to be used for authentication
RadiusAttributeForGroupPolicies string
RADIUS attribute used to look up group policies
RadiusAuthenticationNasId string
The template of the NAS identifier to be used for RADIUS authentication (ex. $NODEMAC$:$VAPNUM$).
RadiusCalledStationId string
The template of the called station identifier to be used for RADIUS (ex. $NODEMAC$:$VAPNUM$).
RadiusCoaEnabled bool
If true, Meraki devices will act as a RADIUS Dynamic Authorization Server and will respond to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server.
RadiusFailoverPolicy string
Policy which determines how authentication requests should be handled in the event that all of the configured RADIUS servers are unreachable
RadiusFallbackEnabled bool
Whether or not higher priority RADIUS servers should be retried after 60 seconds.
RadiusGuestVlanEnabled bool
Whether or not RADIUS Guest VLAN is enabled. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
RadiusGuestVlanId int
VLAN ID of the RADIUS Guest VLAN. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
RadiusLoadBalancingPolicy string
Policy which determines which RADIUS server will be contacted first in an authentication attempt, and the ordering of any necessary retry attempts
RadiusOverride bool
If true, the RADIUS response can override VLAN tag. This is not valid when ipAssignmentMode is 'NAT mode'.
RadiusProxyEnabled bool
If true, Meraki devices will proxy RADIUS messages through the Meraki cloud to the configured RADIUS auth and accounting servers.
RadiusServerAttemptsLimit int
The maximum number of transmit attempts after which a RADIUS server is failed over (must be between 1-5).
RadiusServerTimeout int
The amount of time for which a RADIUS client waits for a reply from the RADIUS server (must be between 1-10 seconds).
RadiusServers List<WirelessSsidsRadiusServer>
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
RadiusTestingEnabled bool
If true, Meraki devices will periodically send Access-Request messages to configured RADIUS servers using identity 'meraki8021xtest' to ensure that the RADIUS servers are reachable.
SecondaryConcentratorNetworkId string
The secondary concentrator to use when the ipAssignmentMode is 'VPN'. If configured, the APs will switch to using this concentrator if the primary concentrator is unreachable. This param is optional. ('disabled' represents no secondary concentrator.)
SpeedBurst WirelessSsidsSpeedBurst
The SpeedBurst setting for this SSID'
SplashGuestSponsorDomains List<string>
Array of valid sponsor email domains for sponsored guest splash type.
SplashPage string
The type of splash page for the SSID
UseVlanTagging bool
Whether or not traffic should be directed to use specific VLANs. This param is only valid if the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
Visible bool
Whether the SSID is advertised or hidden by the AP
VlanId int
The VLAN ID used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'
WalledGardenEnabled bool
Allow users to access a configurable list of IP ranges prior to sign-on
WalledGardenRanges List<string>
Domain names and IP address ranges available in Walled Garden mode
WpaEncryptionMode string
The types of WPA encryption
NetworkId This property is required. string
networkId path parameter. Network ID
Number This property is required. int
Unique identifier of the SSID
ActiveDirectory WirelessSsidsActiveDirectoryArgs
The current setting for Active Directory. Only valid if splashPage is 'Password-protected with Active Directory'
AdultContentFilteringEnabled bool
Boolean indicating whether or not adult content will be blocked
ApTagsAndVlanIds []WirelessSsidsApTagsAndVlanIdArgs
The list of tags and VLAN IDs used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
AuthMode string
The association control method for the SSID
AvailabilityTags []string
List of tags for this SSID. If availableOnAllAps is false, then the SSID is only broadcast by APs with tags matching any of the tags in this list
AvailableOnAllAps bool
Whether all APs broadcast the SSID or if it's restricted to APs matching any availability tags
BandSelection string
The client-serving radio frequencies of this SSID in the default indoor RF profile
ConcentratorNetworkId string
The concentrator to use when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'.
DefaultVlanId int
The default VLAN ID used for 'all other APs'. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
DisassociateClientsOnVpnFailover bool
Disassociate clients when 'VPN' concentrator failover occurs in order to trigger clients to re-associate and generate new DHCP requests. This param is only valid if ipAssignmentMode is 'VPN'.
DnsRewrite WirelessSsidsDnsRewriteArgs
DNS servers rewrite settings
Dot11r WirelessSsidsDot11rArgs
The current setting for 802.11r
Dot11w WirelessSsidsDot11wArgs
The current setting for Protected Management Frames (802.11w).
Enabled bool
Whether or not the SSID is enabled
EncryptionMode string
The psk encryption mode for the SSID
EnterpriseAdminAccess string
Whether or not an SSID is accessible by 'enterprise' administrators ('access disabled' or 'access enabled')
Gre WirelessSsidsGreArgs
Ethernet over GRE settings
IpAssignmentMode string
The client IP assignment mode
LanIsolationEnabled bool
Boolean indicating whether Layer 2 LAN isolation should be enabled or disabled. Only configurable when ipAssignmentMode is 'Bridge mode'.
Ldap WirelessSsidsLdapArgs
The current setting for LDAP. Only valid if splashPage is 'Password-protected with LDAP'.
LocalRadius WirelessSsidsLocalRadiusArgs
The current setting for Local Authentication, a built-in RADIUS server on the access point. Only valid if authMode is '8021x-localradius'.
MandatoryDhcpEnabled bool
Whether clients connecting to this SSID must use the IP address assigned by the DHCP server
MinBitrate int
The minimum bitrate in Mbps of this SSID in the default indoor RF profile
Name string
The name of the SSID
NamedVlans WirelessSsidsNamedVlansArgs
Named VLAN settings.
Oauth WirelessSsidsOauthArgs
The OAuth settings of this SSID. Only valid if splashPage is 'Google OAuth'.
PerClientBandwidthLimitDown int
The download bandwidth limit in Kbps. (0 represents no limit.)
PerClientBandwidthLimitUp int
The upload bandwidth limit in Kbps. (0 represents no limit.)
PerSsidBandwidthLimitDown int
The total download bandwidth limit in Kbps (0 represents no limit)
PerSsidBandwidthLimitUp int
The total upload bandwidth limit in Kbps (0 represents no limit)
Psk string
The passkey for the SSID. This param is only valid if the authMode is 'psk'
RadiusAccountingEnabled bool
Whether or not RADIUS accounting is enabled
RadiusAccountingInterimInterval int
The interval (in seconds) in which accounting information is updated and sent to the RADIUS accounting server.
RadiusAccountingServers []WirelessSsidsRadiusAccountingServerArgs
List of RADIUS accounting 802.1X servers to be used for authentication
RadiusAttributeForGroupPolicies string
RADIUS attribute used to look up group policies
RadiusAuthenticationNasId string
The template of the NAS identifier to be used for RADIUS authentication (ex. $NODEMAC$:$VAPNUM$).
RadiusCalledStationId string
The template of the called station identifier to be used for RADIUS (ex. $NODEMAC$:$VAPNUM$).
RadiusCoaEnabled bool
If true, Meraki devices will act as a RADIUS Dynamic Authorization Server and will respond to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server.
RadiusFailoverPolicy string
Policy which determines how authentication requests should be handled in the event that all of the configured RADIUS servers are unreachable
RadiusFallbackEnabled bool
Whether or not higher priority RADIUS servers should be retried after 60 seconds.
RadiusGuestVlanEnabled bool
Whether or not RADIUS Guest VLAN is enabled. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
RadiusGuestVlanId int
VLAN ID of the RADIUS Guest VLAN. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
RadiusLoadBalancingPolicy string
Policy which determines which RADIUS server will be contacted first in an authentication attempt, and the ordering of any necessary retry attempts
RadiusOverride bool
If true, the RADIUS response can override VLAN tag. This is not valid when ipAssignmentMode is 'NAT mode'.
RadiusProxyEnabled bool
If true, Meraki devices will proxy RADIUS messages through the Meraki cloud to the configured RADIUS auth and accounting servers.
RadiusServerAttemptsLimit int
The maximum number of transmit attempts after which a RADIUS server is failed over (must be between 1-5).
RadiusServerTimeout int
The amount of time for which a RADIUS client waits for a reply from the RADIUS server (must be between 1-10 seconds).
RadiusServers []WirelessSsidsRadiusServerArgs
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
RadiusTestingEnabled bool
If true, Meraki devices will periodically send Access-Request messages to configured RADIUS servers using identity 'meraki8021xtest' to ensure that the RADIUS servers are reachable.
SecondaryConcentratorNetworkId string
The secondary concentrator to use when the ipAssignmentMode is 'VPN'. If configured, the APs will switch to using this concentrator if the primary concentrator is unreachable. This param is optional. ('disabled' represents no secondary concentrator.)
SpeedBurst WirelessSsidsSpeedBurstArgs
The SpeedBurst setting for this SSID'
SplashGuestSponsorDomains []string
Array of valid sponsor email domains for sponsored guest splash type.
SplashPage string
The type of splash page for the SSID
UseVlanTagging bool
Whether or not traffic should be directed to use specific VLANs. This param is only valid if the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
Visible bool
Whether the SSID is advertised or hidden by the AP
VlanId int
The VLAN ID used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'
WalledGardenEnabled bool
Allow users to access a configurable list of IP ranges prior to sign-on
WalledGardenRanges []string
Domain names and IP address ranges available in Walled Garden mode
WpaEncryptionMode string
The types of WPA encryption
networkId This property is required. String
networkId path parameter. Network ID
number This property is required. Integer
Unique identifier of the SSID
activeDirectory WirelessSsidsActiveDirectory
The current setting for Active Directory. Only valid if splashPage is 'Password-protected with Active Directory'
adultContentFilteringEnabled Boolean
Boolean indicating whether or not adult content will be blocked
apTagsAndVlanIds List<WirelessSsidsApTagsAndVlanId>
The list of tags and VLAN IDs used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
authMode String
The association control method for the SSID
availabilityTags List<String>
List of tags for this SSID. If availableOnAllAps is false, then the SSID is only broadcast by APs with tags matching any of the tags in this list
availableOnAllAps Boolean
Whether all APs broadcast the SSID or if it's restricted to APs matching any availability tags
bandSelection String
The client-serving radio frequencies of this SSID in the default indoor RF profile
concentratorNetworkId String
The concentrator to use when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'.
defaultVlanId Integer
The default VLAN ID used for 'all other APs'. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
disassociateClientsOnVpnFailover Boolean
Disassociate clients when 'VPN' concentrator failover occurs in order to trigger clients to re-associate and generate new DHCP requests. This param is only valid if ipAssignmentMode is 'VPN'.
dnsRewrite WirelessSsidsDnsRewrite
DNS servers rewrite settings
dot11r WirelessSsidsDot11r
The current setting for 802.11r
dot11w WirelessSsidsDot11w
The current setting for Protected Management Frames (802.11w).
enabled Boolean
Whether or not the SSID is enabled
encryptionMode String
The psk encryption mode for the SSID
enterpriseAdminAccess String
Whether or not an SSID is accessible by 'enterprise' administrators ('access disabled' or 'access enabled')
gre WirelessSsidsGre
Ethernet over GRE settings
ipAssignmentMode String
The client IP assignment mode
lanIsolationEnabled Boolean
Boolean indicating whether Layer 2 LAN isolation should be enabled or disabled. Only configurable when ipAssignmentMode is 'Bridge mode'.
ldap WirelessSsidsLdap
The current setting for LDAP. Only valid if splashPage is 'Password-protected with LDAP'.
localRadius WirelessSsidsLocalRadius
The current setting for Local Authentication, a built-in RADIUS server on the access point. Only valid if authMode is '8021x-localradius'.
mandatoryDhcpEnabled Boolean
Whether clients connecting to this SSID must use the IP address assigned by the DHCP server
minBitrate Integer
The minimum bitrate in Mbps of this SSID in the default indoor RF profile
name String
The name of the SSID
namedVlans WirelessSsidsNamedVlans
Named VLAN settings.
oauth WirelessSsidsOauth
The OAuth settings of this SSID. Only valid if splashPage is 'Google OAuth'.
perClientBandwidthLimitDown Integer
The download bandwidth limit in Kbps. (0 represents no limit.)
perClientBandwidthLimitUp Integer
The upload bandwidth limit in Kbps. (0 represents no limit.)
perSsidBandwidthLimitDown Integer
The total download bandwidth limit in Kbps (0 represents no limit)
perSsidBandwidthLimitUp Integer
The total upload bandwidth limit in Kbps (0 represents no limit)
psk String
The passkey for the SSID. This param is only valid if the authMode is 'psk'
radiusAccountingEnabled Boolean
Whether or not RADIUS accounting is enabled
radiusAccountingInterimInterval Integer
The interval (in seconds) in which accounting information is updated and sent to the RADIUS accounting server.
radiusAccountingServers List<WirelessSsidsRadiusAccountingServer>
List of RADIUS accounting 802.1X servers to be used for authentication
radiusAttributeForGroupPolicies String
RADIUS attribute used to look up group policies
radiusAuthenticationNasId String
The template of the NAS identifier to be used for RADIUS authentication (ex. $NODEMAC$:$VAPNUM$).
radiusCalledStationId String
The template of the called station identifier to be used for RADIUS (ex. $NODEMAC$:$VAPNUM$).
radiusCoaEnabled Boolean
If true, Meraki devices will act as a RADIUS Dynamic Authorization Server and will respond to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server.
radiusFailoverPolicy String
Policy which determines how authentication requests should be handled in the event that all of the configured RADIUS servers are unreachable
radiusFallbackEnabled Boolean
Whether or not higher priority RADIUS servers should be retried after 60 seconds.
radiusGuestVlanEnabled Boolean
Whether or not RADIUS Guest VLAN is enabled. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radiusGuestVlanId Integer
VLAN ID of the RADIUS Guest VLAN. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radiusLoadBalancingPolicy String
Policy which determines which RADIUS server will be contacted first in an authentication attempt, and the ordering of any necessary retry attempts
radiusOverride Boolean
If true, the RADIUS response can override VLAN tag. This is not valid when ipAssignmentMode is 'NAT mode'.
radiusProxyEnabled Boolean
If true, Meraki devices will proxy RADIUS messages through the Meraki cloud to the configured RADIUS auth and accounting servers.
radiusServerAttemptsLimit Integer
The maximum number of transmit attempts after which a RADIUS server is failed over (must be between 1-5).
radiusServerTimeout Integer
The amount of time for which a RADIUS client waits for a reply from the RADIUS server (must be between 1-10 seconds).
radiusServers List<WirelessSsidsRadiusServer>
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
radiusTestingEnabled Boolean
If true, Meraki devices will periodically send Access-Request messages to configured RADIUS servers using identity 'meraki8021xtest' to ensure that the RADIUS servers are reachable.
secondaryConcentratorNetworkId String
The secondary concentrator to use when the ipAssignmentMode is 'VPN'. If configured, the APs will switch to using this concentrator if the primary concentrator is unreachable. This param is optional. ('disabled' represents no secondary concentrator.)
speedBurst WirelessSsidsSpeedBurst
The SpeedBurst setting for this SSID'
splashGuestSponsorDomains List<String>
Array of valid sponsor email domains for sponsored guest splash type.
splashPage String
The type of splash page for the SSID
useVlanTagging Boolean
Whether or not traffic should be directed to use specific VLANs. This param is only valid if the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
visible Boolean
Whether the SSID is advertised or hidden by the AP
vlanId Integer
The VLAN ID used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'
walledGardenEnabled Boolean
Allow users to access a configurable list of IP ranges prior to sign-on
walledGardenRanges List<String>
Domain names and IP address ranges available in Walled Garden mode
wpaEncryptionMode String
The types of WPA encryption
networkId This property is required. string
networkId path parameter. Network ID
number This property is required. number
Unique identifier of the SSID
activeDirectory WirelessSsidsActiveDirectory
The current setting for Active Directory. Only valid if splashPage is 'Password-protected with Active Directory'
adultContentFilteringEnabled boolean
Boolean indicating whether or not adult content will be blocked
apTagsAndVlanIds WirelessSsidsApTagsAndVlanId[]
The list of tags and VLAN IDs used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
authMode string
The association control method for the SSID
availabilityTags string[]
List of tags for this SSID. If availableOnAllAps is false, then the SSID is only broadcast by APs with tags matching any of the tags in this list
availableOnAllAps boolean
Whether all APs broadcast the SSID or if it's restricted to APs matching any availability tags
bandSelection string
The client-serving radio frequencies of this SSID in the default indoor RF profile
concentratorNetworkId string
The concentrator to use when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'.
defaultVlanId number
The default VLAN ID used for 'all other APs'. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
disassociateClientsOnVpnFailover boolean
Disassociate clients when 'VPN' concentrator failover occurs in order to trigger clients to re-associate and generate new DHCP requests. This param is only valid if ipAssignmentMode is 'VPN'.
dnsRewrite WirelessSsidsDnsRewrite
DNS servers rewrite settings
dot11r WirelessSsidsDot11r
The current setting for 802.11r
dot11w WirelessSsidsDot11w
The current setting for Protected Management Frames (802.11w).
enabled boolean
Whether or not the SSID is enabled
encryptionMode string
The psk encryption mode for the SSID
enterpriseAdminAccess string
Whether or not an SSID is accessible by 'enterprise' administrators ('access disabled' or 'access enabled')
gre WirelessSsidsGre
Ethernet over GRE settings
ipAssignmentMode string
The client IP assignment mode
lanIsolationEnabled boolean
Boolean indicating whether Layer 2 LAN isolation should be enabled or disabled. Only configurable when ipAssignmentMode is 'Bridge mode'.
ldap WirelessSsidsLdap
The current setting for LDAP. Only valid if splashPage is 'Password-protected with LDAP'.
localRadius WirelessSsidsLocalRadius
The current setting for Local Authentication, a built-in RADIUS server on the access point. Only valid if authMode is '8021x-localradius'.
mandatoryDhcpEnabled boolean
Whether clients connecting to this SSID must use the IP address assigned by the DHCP server
minBitrate number
The minimum bitrate in Mbps of this SSID in the default indoor RF profile
name string
The name of the SSID
namedVlans WirelessSsidsNamedVlans
Named VLAN settings.
oauth WirelessSsidsOauth
The OAuth settings of this SSID. Only valid if splashPage is 'Google OAuth'.
perClientBandwidthLimitDown number
The download bandwidth limit in Kbps. (0 represents no limit.)
perClientBandwidthLimitUp number
The upload bandwidth limit in Kbps. (0 represents no limit.)
perSsidBandwidthLimitDown number
The total download bandwidth limit in Kbps (0 represents no limit)
perSsidBandwidthLimitUp number
The total upload bandwidth limit in Kbps (0 represents no limit)
psk string
The passkey for the SSID. This param is only valid if the authMode is 'psk'
radiusAccountingEnabled boolean
Whether or not RADIUS accounting is enabled
radiusAccountingInterimInterval number
The interval (in seconds) in which accounting information is updated and sent to the RADIUS accounting server.
radiusAccountingServers WirelessSsidsRadiusAccountingServer[]
List of RADIUS accounting 802.1X servers to be used for authentication
radiusAttributeForGroupPolicies string
RADIUS attribute used to look up group policies
radiusAuthenticationNasId string
The template of the NAS identifier to be used for RADIUS authentication (ex. $NODEMAC$:$VAPNUM$).
radiusCalledStationId string
The template of the called station identifier to be used for RADIUS (ex. $NODEMAC$:$VAPNUM$).
radiusCoaEnabled boolean
If true, Meraki devices will act as a RADIUS Dynamic Authorization Server and will respond to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server.
radiusFailoverPolicy string
Policy which determines how authentication requests should be handled in the event that all of the configured RADIUS servers are unreachable
radiusFallbackEnabled boolean
Whether or not higher priority RADIUS servers should be retried after 60 seconds.
radiusGuestVlanEnabled boolean
Whether or not RADIUS Guest VLAN is enabled. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radiusGuestVlanId number
VLAN ID of the RADIUS Guest VLAN. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radiusLoadBalancingPolicy string
Policy which determines which RADIUS server will be contacted first in an authentication attempt, and the ordering of any necessary retry attempts
radiusOverride boolean
If true, the RADIUS response can override VLAN tag. This is not valid when ipAssignmentMode is 'NAT mode'.
radiusProxyEnabled boolean
If true, Meraki devices will proxy RADIUS messages through the Meraki cloud to the configured RADIUS auth and accounting servers.
radiusServerAttemptsLimit number
The maximum number of transmit attempts after which a RADIUS server is failed over (must be between 1-5).
radiusServerTimeout number
The amount of time for which a RADIUS client waits for a reply from the RADIUS server (must be between 1-10 seconds).
radiusServers WirelessSsidsRadiusServer[]
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
radiusTestingEnabled boolean
If true, Meraki devices will periodically send Access-Request messages to configured RADIUS servers using identity 'meraki8021xtest' to ensure that the RADIUS servers are reachable.
secondaryConcentratorNetworkId string
The secondary concentrator to use when the ipAssignmentMode is 'VPN'. If configured, the APs will switch to using this concentrator if the primary concentrator is unreachable. This param is optional. ('disabled' represents no secondary concentrator.)
speedBurst WirelessSsidsSpeedBurst
The SpeedBurst setting for this SSID'
splashGuestSponsorDomains string[]
Array of valid sponsor email domains for sponsored guest splash type.
splashPage string
The type of splash page for the SSID
useVlanTagging boolean
Whether or not traffic should be directed to use specific VLANs. This param is only valid if the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
visible boolean
Whether the SSID is advertised or hidden by the AP
vlanId number
The VLAN ID used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'
walledGardenEnabled boolean
Allow users to access a configurable list of IP ranges prior to sign-on
walledGardenRanges string[]
Domain names and IP address ranges available in Walled Garden mode
wpaEncryptionMode string
The types of WPA encryption
network_id This property is required. str
networkId path parameter. Network ID
number This property is required. int
Unique identifier of the SSID
active_directory WirelessSsidsActiveDirectoryArgs
The current setting for Active Directory. Only valid if splashPage is 'Password-protected with Active Directory'
adult_content_filtering_enabled bool
Boolean indicating whether or not adult content will be blocked
ap_tags_and_vlan_ids Sequence[WirelessSsidsApTagsAndVlanIdArgs]
The list of tags and VLAN IDs used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
auth_mode str
The association control method for the SSID
availability_tags Sequence[str]
List of tags for this SSID. If availableOnAllAps is false, then the SSID is only broadcast by APs with tags matching any of the tags in this list
available_on_all_aps bool
Whether all APs broadcast the SSID or if it's restricted to APs matching any availability tags
band_selection str
The client-serving radio frequencies of this SSID in the default indoor RF profile
concentrator_network_id str
The concentrator to use when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'.
default_vlan_id int
The default VLAN ID used for 'all other APs'. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
disassociate_clients_on_vpn_failover bool
Disassociate clients when 'VPN' concentrator failover occurs in order to trigger clients to re-associate and generate new DHCP requests. This param is only valid if ipAssignmentMode is 'VPN'.
dns_rewrite WirelessSsidsDnsRewriteArgs
DNS servers rewrite settings
dot11r WirelessSsidsDot11rArgs
The current setting for 802.11r
dot11w WirelessSsidsDot11wArgs
The current setting for Protected Management Frames (802.11w).
enabled bool
Whether or not the SSID is enabled
encryption_mode str
The psk encryption mode for the SSID
enterprise_admin_access str
Whether or not an SSID is accessible by 'enterprise' administrators ('access disabled' or 'access enabled')
gre WirelessSsidsGreArgs
Ethernet over GRE settings
ip_assignment_mode str
The client IP assignment mode
lan_isolation_enabled bool
Boolean indicating whether Layer 2 LAN isolation should be enabled or disabled. Only configurable when ipAssignmentMode is 'Bridge mode'.
ldap WirelessSsidsLdapArgs
The current setting for LDAP. Only valid if splashPage is 'Password-protected with LDAP'.
local_radius WirelessSsidsLocalRadiusArgs
The current setting for Local Authentication, a built-in RADIUS server on the access point. Only valid if authMode is '8021x-localradius'.
mandatory_dhcp_enabled bool
Whether clients connecting to this SSID must use the IP address assigned by the DHCP server
min_bitrate int
The minimum bitrate in Mbps of this SSID in the default indoor RF profile
name str
The name of the SSID
named_vlans WirelessSsidsNamedVlansArgs
Named VLAN settings.
oauth WirelessSsidsOauthArgs
The OAuth settings of this SSID. Only valid if splashPage is 'Google OAuth'.
per_client_bandwidth_limit_down int
The download bandwidth limit in Kbps. (0 represents no limit.)
per_client_bandwidth_limit_up int
The upload bandwidth limit in Kbps. (0 represents no limit.)
per_ssid_bandwidth_limit_down int
The total download bandwidth limit in Kbps (0 represents no limit)
per_ssid_bandwidth_limit_up int
The total upload bandwidth limit in Kbps (0 represents no limit)
psk str
The passkey for the SSID. This param is only valid if the authMode is 'psk'
radius_accounting_enabled bool
Whether or not RADIUS accounting is enabled
radius_accounting_interim_interval int
The interval (in seconds) in which accounting information is updated and sent to the RADIUS accounting server.
radius_accounting_servers Sequence[WirelessSsidsRadiusAccountingServerArgs]
List of RADIUS accounting 802.1X servers to be used for authentication
radius_attribute_for_group_policies str
RADIUS attribute used to look up group policies
radius_authentication_nas_id str
The template of the NAS identifier to be used for RADIUS authentication (ex. $NODEMAC$:$VAPNUM$).
radius_called_station_id str
The template of the called station identifier to be used for RADIUS (ex. $NODEMAC$:$VAPNUM$).
radius_coa_enabled bool
If true, Meraki devices will act as a RADIUS Dynamic Authorization Server and will respond to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server.
radius_failover_policy str
Policy which determines how authentication requests should be handled in the event that all of the configured RADIUS servers are unreachable
radius_fallback_enabled bool
Whether or not higher priority RADIUS servers should be retried after 60 seconds.
radius_guest_vlan_enabled bool
Whether or not RADIUS Guest VLAN is enabled. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radius_guest_vlan_id int
VLAN ID of the RADIUS Guest VLAN. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radius_load_balancing_policy str
Policy which determines which RADIUS server will be contacted first in an authentication attempt, and the ordering of any necessary retry attempts
radius_override bool
If true, the RADIUS response can override VLAN tag. This is not valid when ipAssignmentMode is 'NAT mode'.
radius_proxy_enabled bool
If true, Meraki devices will proxy RADIUS messages through the Meraki cloud to the configured RADIUS auth and accounting servers.
radius_server_attempts_limit int
The maximum number of transmit attempts after which a RADIUS server is failed over (must be between 1-5).
radius_server_timeout int
The amount of time for which a RADIUS client waits for a reply from the RADIUS server (must be between 1-10 seconds).
radius_servers Sequence[WirelessSsidsRadiusServerArgs]
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
radius_testing_enabled bool
If true, Meraki devices will periodically send Access-Request messages to configured RADIUS servers using identity 'meraki8021xtest' to ensure that the RADIUS servers are reachable.
secondary_concentrator_network_id str
The secondary concentrator to use when the ipAssignmentMode is 'VPN'. If configured, the APs will switch to using this concentrator if the primary concentrator is unreachable. This param is optional. ('disabled' represents no secondary concentrator.)
speed_burst WirelessSsidsSpeedBurstArgs
The SpeedBurst setting for this SSID'
splash_guest_sponsor_domains Sequence[str]
Array of valid sponsor email domains for sponsored guest splash type.
splash_page str
The type of splash page for the SSID
use_vlan_tagging bool
Whether or not traffic should be directed to use specific VLANs. This param is only valid if the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
visible bool
Whether the SSID is advertised or hidden by the AP
vlan_id int
The VLAN ID used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'
walled_garden_enabled bool
Allow users to access a configurable list of IP ranges prior to sign-on
walled_garden_ranges Sequence[str]
Domain names and IP address ranges available in Walled Garden mode
wpa_encryption_mode str
The types of WPA encryption
networkId This property is required. String
networkId path parameter. Network ID
number This property is required. Number
Unique identifier of the SSID
activeDirectory Property Map
The current setting for Active Directory. Only valid if splashPage is 'Password-protected with Active Directory'
adultContentFilteringEnabled Boolean
Boolean indicating whether or not adult content will be blocked
apTagsAndVlanIds List<Property Map>
The list of tags and VLAN IDs used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
authMode String
The association control method for the SSID
availabilityTags List<String>
List of tags for this SSID. If availableOnAllAps is false, then the SSID is only broadcast by APs with tags matching any of the tags in this list
availableOnAllAps Boolean
Whether all APs broadcast the SSID or if it's restricted to APs matching any availability tags
bandSelection String
The client-serving radio frequencies of this SSID in the default indoor RF profile
concentratorNetworkId String
The concentrator to use when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'.
defaultVlanId Number
The default VLAN ID used for 'all other APs'. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
disassociateClientsOnVpnFailover Boolean
Disassociate clients when 'VPN' concentrator failover occurs in order to trigger clients to re-associate and generate new DHCP requests. This param is only valid if ipAssignmentMode is 'VPN'.
dnsRewrite Property Map
DNS servers rewrite settings
dot11r Property Map
The current setting for 802.11r
dot11w Property Map
The current setting for Protected Management Frames (802.11w).
enabled Boolean
Whether or not the SSID is enabled
encryptionMode String
The psk encryption mode for the SSID
enterpriseAdminAccess String
Whether or not an SSID is accessible by 'enterprise' administrators ('access disabled' or 'access enabled')
gre Property Map
Ethernet over GRE settings
ipAssignmentMode String
The client IP assignment mode
lanIsolationEnabled Boolean
Boolean indicating whether Layer 2 LAN isolation should be enabled or disabled. Only configurable when ipAssignmentMode is 'Bridge mode'.
ldap Property Map
The current setting for LDAP. Only valid if splashPage is 'Password-protected with LDAP'.
localRadius Property Map
The current setting for Local Authentication, a built-in RADIUS server on the access point. Only valid if authMode is '8021x-localradius'.
mandatoryDhcpEnabled Boolean
Whether clients connecting to this SSID must use the IP address assigned by the DHCP server
minBitrate Number
The minimum bitrate in Mbps of this SSID in the default indoor RF profile
name String
The name of the SSID
namedVlans Property Map
Named VLAN settings.
oauth Property Map
The OAuth settings of this SSID. Only valid if splashPage is 'Google OAuth'.
perClientBandwidthLimitDown Number
The download bandwidth limit in Kbps. (0 represents no limit.)
perClientBandwidthLimitUp Number
The upload bandwidth limit in Kbps. (0 represents no limit.)
perSsidBandwidthLimitDown Number
The total download bandwidth limit in Kbps (0 represents no limit)
perSsidBandwidthLimitUp Number
The total upload bandwidth limit in Kbps (0 represents no limit)
psk String
The passkey for the SSID. This param is only valid if the authMode is 'psk'
radiusAccountingEnabled Boolean
Whether or not RADIUS accounting is enabled
radiusAccountingInterimInterval Number
The interval (in seconds) in which accounting information is updated and sent to the RADIUS accounting server.
radiusAccountingServers List<Property Map>
List of RADIUS accounting 802.1X servers to be used for authentication
radiusAttributeForGroupPolicies String
RADIUS attribute used to look up group policies
radiusAuthenticationNasId String
The template of the NAS identifier to be used for RADIUS authentication (ex. $NODEMAC$:$VAPNUM$).
radiusCalledStationId String
The template of the called station identifier to be used for RADIUS (ex. $NODEMAC$:$VAPNUM$).
radiusCoaEnabled Boolean
If true, Meraki devices will act as a RADIUS Dynamic Authorization Server and will respond to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server.
radiusFailoverPolicy String
Policy which determines how authentication requests should be handled in the event that all of the configured RADIUS servers are unreachable
radiusFallbackEnabled Boolean
Whether or not higher priority RADIUS servers should be retried after 60 seconds.
radiusGuestVlanEnabled Boolean
Whether or not RADIUS Guest VLAN is enabled. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radiusGuestVlanId Number
VLAN ID of the RADIUS Guest VLAN. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radiusLoadBalancingPolicy String
Policy which determines which RADIUS server will be contacted first in an authentication attempt, and the ordering of any necessary retry attempts
radiusOverride Boolean
If true, the RADIUS response can override VLAN tag. This is not valid when ipAssignmentMode is 'NAT mode'.
radiusProxyEnabled Boolean
If true, Meraki devices will proxy RADIUS messages through the Meraki cloud to the configured RADIUS auth and accounting servers.
radiusServerAttemptsLimit Number
The maximum number of transmit attempts after which a RADIUS server is failed over (must be between 1-5).
radiusServerTimeout Number
The amount of time for which a RADIUS client waits for a reply from the RADIUS server (must be between 1-10 seconds).
radiusServers List<Property Map>
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
radiusTestingEnabled Boolean
If true, Meraki devices will periodically send Access-Request messages to configured RADIUS servers using identity 'meraki8021xtest' to ensure that the RADIUS servers are reachable.
secondaryConcentratorNetworkId String
The secondary concentrator to use when the ipAssignmentMode is 'VPN'. If configured, the APs will switch to using this concentrator if the primary concentrator is unreachable. This param is optional. ('disabled' represents no secondary concentrator.)
speedBurst Property Map
The SpeedBurst setting for this SSID'
splashGuestSponsorDomains List<String>
Array of valid sponsor email domains for sponsored guest splash type.
splashPage String
The type of splash page for the SSID
useVlanTagging Boolean
Whether or not traffic should be directed to use specific VLANs. This param is only valid if the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
visible Boolean
Whether the SSID is advertised or hidden by the AP
vlanId Number
The VLAN ID used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'
walledGardenEnabled Boolean
Allow users to access a configurable list of IP ranges prior to sign-on
walledGardenRanges List<String>
Domain names and IP address ranges available in Walled Garden mode
wpaEncryptionMode String
The types of WPA encryption

Outputs

All input properties are implicitly available as output properties. Additionally, the WirelessSsids resource produces the following output properties:

AdminSplashUrl string
Id string
The provider-assigned unique ID for this managed resource.
RadiusAccountingServersResponses List<WirelessSsidsRadiusAccountingServersResponse>
List of RADIUS accounting 802.1X servers to be used for authentication
RadiusServersResponses List<WirelessSsidsRadiusServersResponse>
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
SplashTimeout string
Splash page timeout
SsidAdminAccessible bool
SSID Administrator access status
AdminSplashUrl string
Id string
The provider-assigned unique ID for this managed resource.
RadiusAccountingServersResponses []WirelessSsidsRadiusAccountingServersResponse
List of RADIUS accounting 802.1X servers to be used for authentication
RadiusServersResponses []WirelessSsidsRadiusServersResponse
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
SplashTimeout string
Splash page timeout
SsidAdminAccessible bool
SSID Administrator access status
adminSplashUrl String
id String
The provider-assigned unique ID for this managed resource.
radiusAccountingServersResponses List<WirelessSsidsRadiusAccountingServersResponse>
List of RADIUS accounting 802.1X servers to be used for authentication
radiusServersResponses List<WirelessSsidsRadiusServersResponse>
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
splashTimeout String
Splash page timeout
ssidAdminAccessible Boolean
SSID Administrator access status
adminSplashUrl string
id string
The provider-assigned unique ID for this managed resource.
radiusAccountingServersResponses WirelessSsidsRadiusAccountingServersResponse[]
List of RADIUS accounting 802.1X servers to be used for authentication
radiusServersResponses WirelessSsidsRadiusServersResponse[]
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
splashTimeout string
Splash page timeout
ssidAdminAccessible boolean
SSID Administrator access status
admin_splash_url str
id str
The provider-assigned unique ID for this managed resource.
radius_accounting_servers_responses Sequence[WirelessSsidsRadiusAccountingServersResponse]
List of RADIUS accounting 802.1X servers to be used for authentication
radius_servers_responses Sequence[WirelessSsidsRadiusServersResponse]
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
splash_timeout str
Splash page timeout
ssid_admin_accessible bool
SSID Administrator access status
adminSplashUrl String
id String
The provider-assigned unique ID for this managed resource.
radiusAccountingServersResponses List<Property Map>
List of RADIUS accounting 802.1X servers to be used for authentication
radiusServersResponses List<Property Map>
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
splashTimeout String
Splash page timeout
ssidAdminAccessible Boolean
SSID Administrator access status

Look up Existing WirelessSsids Resource

Get an existing WirelessSsids resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: WirelessSsidsState, opts?: CustomResourceOptions): WirelessSsids
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        active_directory: Optional[WirelessSsidsActiveDirectoryArgs] = None,
        admin_splash_url: Optional[str] = None,
        adult_content_filtering_enabled: Optional[bool] = None,
        ap_tags_and_vlan_ids: Optional[Sequence[WirelessSsidsApTagsAndVlanIdArgs]] = None,
        auth_mode: Optional[str] = None,
        availability_tags: Optional[Sequence[str]] = None,
        available_on_all_aps: Optional[bool] = None,
        band_selection: Optional[str] = None,
        concentrator_network_id: Optional[str] = None,
        default_vlan_id: Optional[int] = None,
        disassociate_clients_on_vpn_failover: Optional[bool] = None,
        dns_rewrite: Optional[WirelessSsidsDnsRewriteArgs] = None,
        dot11r: Optional[WirelessSsidsDot11rArgs] = None,
        dot11w: Optional[WirelessSsidsDot11wArgs] = None,
        enabled: Optional[bool] = None,
        encryption_mode: Optional[str] = None,
        enterprise_admin_access: Optional[str] = None,
        gre: Optional[WirelessSsidsGreArgs] = None,
        ip_assignment_mode: Optional[str] = None,
        lan_isolation_enabled: Optional[bool] = None,
        ldap: Optional[WirelessSsidsLdapArgs] = None,
        local_radius: Optional[WirelessSsidsLocalRadiusArgs] = None,
        mandatory_dhcp_enabled: Optional[bool] = None,
        min_bitrate: Optional[int] = None,
        name: Optional[str] = None,
        named_vlans: Optional[WirelessSsidsNamedVlansArgs] = None,
        network_id: Optional[str] = None,
        number: Optional[int] = None,
        oauth: Optional[WirelessSsidsOauthArgs] = None,
        per_client_bandwidth_limit_down: Optional[int] = None,
        per_client_bandwidth_limit_up: Optional[int] = None,
        per_ssid_bandwidth_limit_down: Optional[int] = None,
        per_ssid_bandwidth_limit_up: Optional[int] = None,
        psk: Optional[str] = None,
        radius_accounting_enabled: Optional[bool] = None,
        radius_accounting_interim_interval: Optional[int] = None,
        radius_accounting_servers: Optional[Sequence[WirelessSsidsRadiusAccountingServerArgs]] = None,
        radius_accounting_servers_responses: Optional[Sequence[WirelessSsidsRadiusAccountingServersResponseArgs]] = None,
        radius_attribute_for_group_policies: Optional[str] = None,
        radius_authentication_nas_id: Optional[str] = None,
        radius_called_station_id: Optional[str] = None,
        radius_coa_enabled: Optional[bool] = None,
        radius_failover_policy: Optional[str] = None,
        radius_fallback_enabled: Optional[bool] = None,
        radius_guest_vlan_enabled: Optional[bool] = None,
        radius_guest_vlan_id: Optional[int] = None,
        radius_load_balancing_policy: Optional[str] = None,
        radius_override: Optional[bool] = None,
        radius_proxy_enabled: Optional[bool] = None,
        radius_server_attempts_limit: Optional[int] = None,
        radius_server_timeout: Optional[int] = None,
        radius_servers: Optional[Sequence[WirelessSsidsRadiusServerArgs]] = None,
        radius_servers_responses: Optional[Sequence[WirelessSsidsRadiusServersResponseArgs]] = None,
        radius_testing_enabled: Optional[bool] = None,
        secondary_concentrator_network_id: Optional[str] = None,
        speed_burst: Optional[WirelessSsidsSpeedBurstArgs] = None,
        splash_guest_sponsor_domains: Optional[Sequence[str]] = None,
        splash_page: Optional[str] = None,
        splash_timeout: Optional[str] = None,
        ssid_admin_accessible: Optional[bool] = None,
        use_vlan_tagging: Optional[bool] = None,
        visible: Optional[bool] = None,
        vlan_id: Optional[int] = None,
        walled_garden_enabled: Optional[bool] = None,
        walled_garden_ranges: Optional[Sequence[str]] = None,
        wpa_encryption_mode: Optional[str] = None) -> WirelessSsids
func GetWirelessSsids(ctx *Context, name string, id IDInput, state *WirelessSsidsState, opts ...ResourceOption) (*WirelessSsids, error)
public static WirelessSsids Get(string name, Input<string> id, WirelessSsidsState? state, CustomResourceOptions? opts = null)
public static WirelessSsids get(String name, Output<String> id, WirelessSsidsState state, CustomResourceOptions options)
resources:  _:    type: meraki:networks:WirelessSsids    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
ActiveDirectory WirelessSsidsActiveDirectory
The current setting for Active Directory. Only valid if splashPage is 'Password-protected with Active Directory'
AdminSplashUrl string
AdultContentFilteringEnabled bool
Boolean indicating whether or not adult content will be blocked
ApTagsAndVlanIds List<WirelessSsidsApTagsAndVlanId>
The list of tags and VLAN IDs used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
AuthMode string
The association control method for the SSID
AvailabilityTags List<string>
List of tags for this SSID. If availableOnAllAps is false, then the SSID is only broadcast by APs with tags matching any of the tags in this list
AvailableOnAllAps bool
Whether all APs broadcast the SSID or if it's restricted to APs matching any availability tags
BandSelection string
The client-serving radio frequencies of this SSID in the default indoor RF profile
ConcentratorNetworkId string
The concentrator to use when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'.
DefaultVlanId int
The default VLAN ID used for 'all other APs'. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
DisassociateClientsOnVpnFailover bool
Disassociate clients when 'VPN' concentrator failover occurs in order to trigger clients to re-associate and generate new DHCP requests. This param is only valid if ipAssignmentMode is 'VPN'.
DnsRewrite WirelessSsidsDnsRewrite
DNS servers rewrite settings
Dot11r WirelessSsidsDot11r
The current setting for 802.11r
Dot11w WirelessSsidsDot11w
The current setting for Protected Management Frames (802.11w).
Enabled bool
Whether or not the SSID is enabled
EncryptionMode string
The psk encryption mode for the SSID
EnterpriseAdminAccess string
Whether or not an SSID is accessible by 'enterprise' administrators ('access disabled' or 'access enabled')
Gre WirelessSsidsGre
Ethernet over GRE settings
IpAssignmentMode string
The client IP assignment mode
LanIsolationEnabled bool
Boolean indicating whether Layer 2 LAN isolation should be enabled or disabled. Only configurable when ipAssignmentMode is 'Bridge mode'.
Ldap WirelessSsidsLdap
The current setting for LDAP. Only valid if splashPage is 'Password-protected with LDAP'.
LocalRadius WirelessSsidsLocalRadius
The current setting for Local Authentication, a built-in RADIUS server on the access point. Only valid if authMode is '8021x-localradius'.
MandatoryDhcpEnabled bool
Whether clients connecting to this SSID must use the IP address assigned by the DHCP server
MinBitrate int
The minimum bitrate in Mbps of this SSID in the default indoor RF profile
Name string
The name of the SSID
NamedVlans WirelessSsidsNamedVlans
Named VLAN settings.
NetworkId string
networkId path parameter. Network ID
Number int
Unique identifier of the SSID
Oauth WirelessSsidsOauth
The OAuth settings of this SSID. Only valid if splashPage is 'Google OAuth'.
PerClientBandwidthLimitDown int
The download bandwidth limit in Kbps. (0 represents no limit.)
PerClientBandwidthLimitUp int
The upload bandwidth limit in Kbps. (0 represents no limit.)
PerSsidBandwidthLimitDown int
The total download bandwidth limit in Kbps (0 represents no limit)
PerSsidBandwidthLimitUp int
The total upload bandwidth limit in Kbps (0 represents no limit)
Psk string
The passkey for the SSID. This param is only valid if the authMode is 'psk'
RadiusAccountingEnabled bool
Whether or not RADIUS accounting is enabled
RadiusAccountingInterimInterval int
The interval (in seconds) in which accounting information is updated and sent to the RADIUS accounting server.
RadiusAccountingServers List<WirelessSsidsRadiusAccountingServer>
List of RADIUS accounting 802.1X servers to be used for authentication
RadiusAccountingServersResponses List<WirelessSsidsRadiusAccountingServersResponse>
List of RADIUS accounting 802.1X servers to be used for authentication
RadiusAttributeForGroupPolicies string
RADIUS attribute used to look up group policies
RadiusAuthenticationNasId string
The template of the NAS identifier to be used for RADIUS authentication (ex. $NODEMAC$:$VAPNUM$).
RadiusCalledStationId string
The template of the called station identifier to be used for RADIUS (ex. $NODEMAC$:$VAPNUM$).
RadiusCoaEnabled bool
If true, Meraki devices will act as a RADIUS Dynamic Authorization Server and will respond to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server.
RadiusFailoverPolicy string
Policy which determines how authentication requests should be handled in the event that all of the configured RADIUS servers are unreachable
RadiusFallbackEnabled bool
Whether or not higher priority RADIUS servers should be retried after 60 seconds.
RadiusGuestVlanEnabled bool
Whether or not RADIUS Guest VLAN is enabled. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
RadiusGuestVlanId int
VLAN ID of the RADIUS Guest VLAN. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
RadiusLoadBalancingPolicy string
Policy which determines which RADIUS server will be contacted first in an authentication attempt, and the ordering of any necessary retry attempts
RadiusOverride bool
If true, the RADIUS response can override VLAN tag. This is not valid when ipAssignmentMode is 'NAT mode'.
RadiusProxyEnabled bool
If true, Meraki devices will proxy RADIUS messages through the Meraki cloud to the configured RADIUS auth and accounting servers.
RadiusServerAttemptsLimit int
The maximum number of transmit attempts after which a RADIUS server is failed over (must be between 1-5).
RadiusServerTimeout int
The amount of time for which a RADIUS client waits for a reply from the RADIUS server (must be between 1-10 seconds).
RadiusServers List<WirelessSsidsRadiusServer>
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
RadiusServersResponses List<WirelessSsidsRadiusServersResponse>
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
RadiusTestingEnabled bool
If true, Meraki devices will periodically send Access-Request messages to configured RADIUS servers using identity 'meraki8021xtest' to ensure that the RADIUS servers are reachable.
SecondaryConcentratorNetworkId string
The secondary concentrator to use when the ipAssignmentMode is 'VPN'. If configured, the APs will switch to using this concentrator if the primary concentrator is unreachable. This param is optional. ('disabled' represents no secondary concentrator.)
SpeedBurst WirelessSsidsSpeedBurst
The SpeedBurst setting for this SSID'
SplashGuestSponsorDomains List<string>
Array of valid sponsor email domains for sponsored guest splash type.
SplashPage string
The type of splash page for the SSID
SplashTimeout string
Splash page timeout
SsidAdminAccessible bool
SSID Administrator access status
UseVlanTagging bool
Whether or not traffic should be directed to use specific VLANs. This param is only valid if the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
Visible bool
Whether the SSID is advertised or hidden by the AP
VlanId int
The VLAN ID used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'
WalledGardenEnabled bool
Allow users to access a configurable list of IP ranges prior to sign-on
WalledGardenRanges List<string>
Domain names and IP address ranges available in Walled Garden mode
WpaEncryptionMode string
The types of WPA encryption
ActiveDirectory WirelessSsidsActiveDirectoryArgs
The current setting for Active Directory. Only valid if splashPage is 'Password-protected with Active Directory'
AdminSplashUrl string
AdultContentFilteringEnabled bool
Boolean indicating whether or not adult content will be blocked
ApTagsAndVlanIds []WirelessSsidsApTagsAndVlanIdArgs
The list of tags and VLAN IDs used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
AuthMode string
The association control method for the SSID
AvailabilityTags []string
List of tags for this SSID. If availableOnAllAps is false, then the SSID is only broadcast by APs with tags matching any of the tags in this list
AvailableOnAllAps bool
Whether all APs broadcast the SSID or if it's restricted to APs matching any availability tags
BandSelection string
The client-serving radio frequencies of this SSID in the default indoor RF profile
ConcentratorNetworkId string
The concentrator to use when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'.
DefaultVlanId int
The default VLAN ID used for 'all other APs'. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
DisassociateClientsOnVpnFailover bool
Disassociate clients when 'VPN' concentrator failover occurs in order to trigger clients to re-associate and generate new DHCP requests. This param is only valid if ipAssignmentMode is 'VPN'.
DnsRewrite WirelessSsidsDnsRewriteArgs
DNS servers rewrite settings
Dot11r WirelessSsidsDot11rArgs
The current setting for 802.11r
Dot11w WirelessSsidsDot11wArgs
The current setting for Protected Management Frames (802.11w).
Enabled bool
Whether or not the SSID is enabled
EncryptionMode string
The psk encryption mode for the SSID
EnterpriseAdminAccess string
Whether or not an SSID is accessible by 'enterprise' administrators ('access disabled' or 'access enabled')
Gre WirelessSsidsGreArgs
Ethernet over GRE settings
IpAssignmentMode string
The client IP assignment mode
LanIsolationEnabled bool
Boolean indicating whether Layer 2 LAN isolation should be enabled or disabled. Only configurable when ipAssignmentMode is 'Bridge mode'.
Ldap WirelessSsidsLdapArgs
The current setting for LDAP. Only valid if splashPage is 'Password-protected with LDAP'.
LocalRadius WirelessSsidsLocalRadiusArgs
The current setting for Local Authentication, a built-in RADIUS server on the access point. Only valid if authMode is '8021x-localradius'.
MandatoryDhcpEnabled bool
Whether clients connecting to this SSID must use the IP address assigned by the DHCP server
MinBitrate int
The minimum bitrate in Mbps of this SSID in the default indoor RF profile
Name string
The name of the SSID
NamedVlans WirelessSsidsNamedVlansArgs
Named VLAN settings.
NetworkId string
networkId path parameter. Network ID
Number int
Unique identifier of the SSID
Oauth WirelessSsidsOauthArgs
The OAuth settings of this SSID. Only valid if splashPage is 'Google OAuth'.
PerClientBandwidthLimitDown int
The download bandwidth limit in Kbps. (0 represents no limit.)
PerClientBandwidthLimitUp int
The upload bandwidth limit in Kbps. (0 represents no limit.)
PerSsidBandwidthLimitDown int
The total download bandwidth limit in Kbps (0 represents no limit)
PerSsidBandwidthLimitUp int
The total upload bandwidth limit in Kbps (0 represents no limit)
Psk string
The passkey for the SSID. This param is only valid if the authMode is 'psk'
RadiusAccountingEnabled bool
Whether or not RADIUS accounting is enabled
RadiusAccountingInterimInterval int
The interval (in seconds) in which accounting information is updated and sent to the RADIUS accounting server.
RadiusAccountingServers []WirelessSsidsRadiusAccountingServerArgs
List of RADIUS accounting 802.1X servers to be used for authentication
RadiusAccountingServersResponses []WirelessSsidsRadiusAccountingServersResponseArgs
List of RADIUS accounting 802.1X servers to be used for authentication
RadiusAttributeForGroupPolicies string
RADIUS attribute used to look up group policies
RadiusAuthenticationNasId string
The template of the NAS identifier to be used for RADIUS authentication (ex. $NODEMAC$:$VAPNUM$).
RadiusCalledStationId string
The template of the called station identifier to be used for RADIUS (ex. $NODEMAC$:$VAPNUM$).
RadiusCoaEnabled bool
If true, Meraki devices will act as a RADIUS Dynamic Authorization Server and will respond to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server.
RadiusFailoverPolicy string
Policy which determines how authentication requests should be handled in the event that all of the configured RADIUS servers are unreachable
RadiusFallbackEnabled bool
Whether or not higher priority RADIUS servers should be retried after 60 seconds.
RadiusGuestVlanEnabled bool
Whether or not RADIUS Guest VLAN is enabled. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
RadiusGuestVlanId int
VLAN ID of the RADIUS Guest VLAN. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
RadiusLoadBalancingPolicy string
Policy which determines which RADIUS server will be contacted first in an authentication attempt, and the ordering of any necessary retry attempts
RadiusOverride bool
If true, the RADIUS response can override VLAN tag. This is not valid when ipAssignmentMode is 'NAT mode'.
RadiusProxyEnabled bool
If true, Meraki devices will proxy RADIUS messages through the Meraki cloud to the configured RADIUS auth and accounting servers.
RadiusServerAttemptsLimit int
The maximum number of transmit attempts after which a RADIUS server is failed over (must be between 1-5).
RadiusServerTimeout int
The amount of time for which a RADIUS client waits for a reply from the RADIUS server (must be between 1-10 seconds).
RadiusServers []WirelessSsidsRadiusServerArgs
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
RadiusServersResponses []WirelessSsidsRadiusServersResponseArgs
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
RadiusTestingEnabled bool
If true, Meraki devices will periodically send Access-Request messages to configured RADIUS servers using identity 'meraki8021xtest' to ensure that the RADIUS servers are reachable.
SecondaryConcentratorNetworkId string
The secondary concentrator to use when the ipAssignmentMode is 'VPN'. If configured, the APs will switch to using this concentrator if the primary concentrator is unreachable. This param is optional. ('disabled' represents no secondary concentrator.)
SpeedBurst WirelessSsidsSpeedBurstArgs
The SpeedBurst setting for this SSID'
SplashGuestSponsorDomains []string
Array of valid sponsor email domains for sponsored guest splash type.
SplashPage string
The type of splash page for the SSID
SplashTimeout string
Splash page timeout
SsidAdminAccessible bool
SSID Administrator access status
UseVlanTagging bool
Whether or not traffic should be directed to use specific VLANs. This param is only valid if the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
Visible bool
Whether the SSID is advertised or hidden by the AP
VlanId int
The VLAN ID used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'
WalledGardenEnabled bool
Allow users to access a configurable list of IP ranges prior to sign-on
WalledGardenRanges []string
Domain names and IP address ranges available in Walled Garden mode
WpaEncryptionMode string
The types of WPA encryption
activeDirectory WirelessSsidsActiveDirectory
The current setting for Active Directory. Only valid if splashPage is 'Password-protected with Active Directory'
adminSplashUrl String
adultContentFilteringEnabled Boolean
Boolean indicating whether or not adult content will be blocked
apTagsAndVlanIds List<WirelessSsidsApTagsAndVlanId>
The list of tags and VLAN IDs used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
authMode String
The association control method for the SSID
availabilityTags List<String>
List of tags for this SSID. If availableOnAllAps is false, then the SSID is only broadcast by APs with tags matching any of the tags in this list
availableOnAllAps Boolean
Whether all APs broadcast the SSID or if it's restricted to APs matching any availability tags
bandSelection String
The client-serving radio frequencies of this SSID in the default indoor RF profile
concentratorNetworkId String
The concentrator to use when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'.
defaultVlanId Integer
The default VLAN ID used for 'all other APs'. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
disassociateClientsOnVpnFailover Boolean
Disassociate clients when 'VPN' concentrator failover occurs in order to trigger clients to re-associate and generate new DHCP requests. This param is only valid if ipAssignmentMode is 'VPN'.
dnsRewrite WirelessSsidsDnsRewrite
DNS servers rewrite settings
dot11r WirelessSsidsDot11r
The current setting for 802.11r
dot11w WirelessSsidsDot11w
The current setting for Protected Management Frames (802.11w).
enabled Boolean
Whether or not the SSID is enabled
encryptionMode String
The psk encryption mode for the SSID
enterpriseAdminAccess String
Whether or not an SSID is accessible by 'enterprise' administrators ('access disabled' or 'access enabled')
gre WirelessSsidsGre
Ethernet over GRE settings
ipAssignmentMode String
The client IP assignment mode
lanIsolationEnabled Boolean
Boolean indicating whether Layer 2 LAN isolation should be enabled or disabled. Only configurable when ipAssignmentMode is 'Bridge mode'.
ldap WirelessSsidsLdap
The current setting for LDAP. Only valid if splashPage is 'Password-protected with LDAP'.
localRadius WirelessSsidsLocalRadius
The current setting for Local Authentication, a built-in RADIUS server on the access point. Only valid if authMode is '8021x-localradius'.
mandatoryDhcpEnabled Boolean
Whether clients connecting to this SSID must use the IP address assigned by the DHCP server
minBitrate Integer
The minimum bitrate in Mbps of this SSID in the default indoor RF profile
name String
The name of the SSID
namedVlans WirelessSsidsNamedVlans
Named VLAN settings.
networkId String
networkId path parameter. Network ID
number Integer
Unique identifier of the SSID
oauth WirelessSsidsOauth
The OAuth settings of this SSID. Only valid if splashPage is 'Google OAuth'.
perClientBandwidthLimitDown Integer
The download bandwidth limit in Kbps. (0 represents no limit.)
perClientBandwidthLimitUp Integer
The upload bandwidth limit in Kbps. (0 represents no limit.)
perSsidBandwidthLimitDown Integer
The total download bandwidth limit in Kbps (0 represents no limit)
perSsidBandwidthLimitUp Integer
The total upload bandwidth limit in Kbps (0 represents no limit)
psk String
The passkey for the SSID. This param is only valid if the authMode is 'psk'
radiusAccountingEnabled Boolean
Whether or not RADIUS accounting is enabled
radiusAccountingInterimInterval Integer
The interval (in seconds) in which accounting information is updated and sent to the RADIUS accounting server.
radiusAccountingServers List<WirelessSsidsRadiusAccountingServer>
List of RADIUS accounting 802.1X servers to be used for authentication
radiusAccountingServersResponses List<WirelessSsidsRadiusAccountingServersResponse>
List of RADIUS accounting 802.1X servers to be used for authentication
radiusAttributeForGroupPolicies String
RADIUS attribute used to look up group policies
radiusAuthenticationNasId String
The template of the NAS identifier to be used for RADIUS authentication (ex. $NODEMAC$:$VAPNUM$).
radiusCalledStationId String
The template of the called station identifier to be used for RADIUS (ex. $NODEMAC$:$VAPNUM$).
radiusCoaEnabled Boolean
If true, Meraki devices will act as a RADIUS Dynamic Authorization Server and will respond to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server.
radiusFailoverPolicy String
Policy which determines how authentication requests should be handled in the event that all of the configured RADIUS servers are unreachable
radiusFallbackEnabled Boolean
Whether or not higher priority RADIUS servers should be retried after 60 seconds.
radiusGuestVlanEnabled Boolean
Whether or not RADIUS Guest VLAN is enabled. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radiusGuestVlanId Integer
VLAN ID of the RADIUS Guest VLAN. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radiusLoadBalancingPolicy String
Policy which determines which RADIUS server will be contacted first in an authentication attempt, and the ordering of any necessary retry attempts
radiusOverride Boolean
If true, the RADIUS response can override VLAN tag. This is not valid when ipAssignmentMode is 'NAT mode'.
radiusProxyEnabled Boolean
If true, Meraki devices will proxy RADIUS messages through the Meraki cloud to the configured RADIUS auth and accounting servers.
radiusServerAttemptsLimit Integer
The maximum number of transmit attempts after which a RADIUS server is failed over (must be between 1-5).
radiusServerTimeout Integer
The amount of time for which a RADIUS client waits for a reply from the RADIUS server (must be between 1-10 seconds).
radiusServers List<WirelessSsidsRadiusServer>
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
radiusServersResponses List<WirelessSsidsRadiusServersResponse>
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
radiusTestingEnabled Boolean
If true, Meraki devices will periodically send Access-Request messages to configured RADIUS servers using identity 'meraki8021xtest' to ensure that the RADIUS servers are reachable.
secondaryConcentratorNetworkId String
The secondary concentrator to use when the ipAssignmentMode is 'VPN'. If configured, the APs will switch to using this concentrator if the primary concentrator is unreachable. This param is optional. ('disabled' represents no secondary concentrator.)
speedBurst WirelessSsidsSpeedBurst
The SpeedBurst setting for this SSID'
splashGuestSponsorDomains List<String>
Array of valid sponsor email domains for sponsored guest splash type.
splashPage String
The type of splash page for the SSID
splashTimeout String
Splash page timeout
ssidAdminAccessible Boolean
SSID Administrator access status
useVlanTagging Boolean
Whether or not traffic should be directed to use specific VLANs. This param is only valid if the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
visible Boolean
Whether the SSID is advertised or hidden by the AP
vlanId Integer
The VLAN ID used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'
walledGardenEnabled Boolean
Allow users to access a configurable list of IP ranges prior to sign-on
walledGardenRanges List<String>
Domain names and IP address ranges available in Walled Garden mode
wpaEncryptionMode String
The types of WPA encryption
activeDirectory WirelessSsidsActiveDirectory
The current setting for Active Directory. Only valid if splashPage is 'Password-protected with Active Directory'
adminSplashUrl string
adultContentFilteringEnabled boolean
Boolean indicating whether or not adult content will be blocked
apTagsAndVlanIds WirelessSsidsApTagsAndVlanId[]
The list of tags and VLAN IDs used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
authMode string
The association control method for the SSID
availabilityTags string[]
List of tags for this SSID. If availableOnAllAps is false, then the SSID is only broadcast by APs with tags matching any of the tags in this list
availableOnAllAps boolean
Whether all APs broadcast the SSID or if it's restricted to APs matching any availability tags
bandSelection string
The client-serving radio frequencies of this SSID in the default indoor RF profile
concentratorNetworkId string
The concentrator to use when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'.
defaultVlanId number
The default VLAN ID used for 'all other APs'. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
disassociateClientsOnVpnFailover boolean
Disassociate clients when 'VPN' concentrator failover occurs in order to trigger clients to re-associate and generate new DHCP requests. This param is only valid if ipAssignmentMode is 'VPN'.
dnsRewrite WirelessSsidsDnsRewrite
DNS servers rewrite settings
dot11r WirelessSsidsDot11r
The current setting for 802.11r
dot11w WirelessSsidsDot11w
The current setting for Protected Management Frames (802.11w).
enabled boolean
Whether or not the SSID is enabled
encryptionMode string
The psk encryption mode for the SSID
enterpriseAdminAccess string
Whether or not an SSID is accessible by 'enterprise' administrators ('access disabled' or 'access enabled')
gre WirelessSsidsGre
Ethernet over GRE settings
ipAssignmentMode string
The client IP assignment mode
lanIsolationEnabled boolean
Boolean indicating whether Layer 2 LAN isolation should be enabled or disabled. Only configurable when ipAssignmentMode is 'Bridge mode'.
ldap WirelessSsidsLdap
The current setting for LDAP. Only valid if splashPage is 'Password-protected with LDAP'.
localRadius WirelessSsidsLocalRadius
The current setting for Local Authentication, a built-in RADIUS server on the access point. Only valid if authMode is '8021x-localradius'.
mandatoryDhcpEnabled boolean
Whether clients connecting to this SSID must use the IP address assigned by the DHCP server
minBitrate number
The minimum bitrate in Mbps of this SSID in the default indoor RF profile
name string
The name of the SSID
namedVlans WirelessSsidsNamedVlans
Named VLAN settings.
networkId string
networkId path parameter. Network ID
number number
Unique identifier of the SSID
oauth WirelessSsidsOauth
The OAuth settings of this SSID. Only valid if splashPage is 'Google OAuth'.
perClientBandwidthLimitDown number
The download bandwidth limit in Kbps. (0 represents no limit.)
perClientBandwidthLimitUp number
The upload bandwidth limit in Kbps. (0 represents no limit.)
perSsidBandwidthLimitDown number
The total download bandwidth limit in Kbps (0 represents no limit)
perSsidBandwidthLimitUp number
The total upload bandwidth limit in Kbps (0 represents no limit)
psk string
The passkey for the SSID. This param is only valid if the authMode is 'psk'
radiusAccountingEnabled boolean
Whether or not RADIUS accounting is enabled
radiusAccountingInterimInterval number
The interval (in seconds) in which accounting information is updated and sent to the RADIUS accounting server.
radiusAccountingServers WirelessSsidsRadiusAccountingServer[]
List of RADIUS accounting 802.1X servers to be used for authentication
radiusAccountingServersResponses WirelessSsidsRadiusAccountingServersResponse[]
List of RADIUS accounting 802.1X servers to be used for authentication
radiusAttributeForGroupPolicies string
RADIUS attribute used to look up group policies
radiusAuthenticationNasId string
The template of the NAS identifier to be used for RADIUS authentication (ex. $NODEMAC$:$VAPNUM$).
radiusCalledStationId string
The template of the called station identifier to be used for RADIUS (ex. $NODEMAC$:$VAPNUM$).
radiusCoaEnabled boolean
If true, Meraki devices will act as a RADIUS Dynamic Authorization Server and will respond to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server.
radiusFailoverPolicy string
Policy which determines how authentication requests should be handled in the event that all of the configured RADIUS servers are unreachable
radiusFallbackEnabled boolean
Whether or not higher priority RADIUS servers should be retried after 60 seconds.
radiusGuestVlanEnabled boolean
Whether or not RADIUS Guest VLAN is enabled. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radiusGuestVlanId number
VLAN ID of the RADIUS Guest VLAN. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radiusLoadBalancingPolicy string
Policy which determines which RADIUS server will be contacted first in an authentication attempt, and the ordering of any necessary retry attempts
radiusOverride boolean
If true, the RADIUS response can override VLAN tag. This is not valid when ipAssignmentMode is 'NAT mode'.
radiusProxyEnabled boolean
If true, Meraki devices will proxy RADIUS messages through the Meraki cloud to the configured RADIUS auth and accounting servers.
radiusServerAttemptsLimit number
The maximum number of transmit attempts after which a RADIUS server is failed over (must be between 1-5).
radiusServerTimeout number
The amount of time for which a RADIUS client waits for a reply from the RADIUS server (must be between 1-10 seconds).
radiusServers WirelessSsidsRadiusServer[]
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
radiusServersResponses WirelessSsidsRadiusServersResponse[]
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
radiusTestingEnabled boolean
If true, Meraki devices will periodically send Access-Request messages to configured RADIUS servers using identity 'meraki8021xtest' to ensure that the RADIUS servers are reachable.
secondaryConcentratorNetworkId string
The secondary concentrator to use when the ipAssignmentMode is 'VPN'. If configured, the APs will switch to using this concentrator if the primary concentrator is unreachable. This param is optional. ('disabled' represents no secondary concentrator.)
speedBurst WirelessSsidsSpeedBurst
The SpeedBurst setting for this SSID'
splashGuestSponsorDomains string[]
Array of valid sponsor email domains for sponsored guest splash type.
splashPage string
The type of splash page for the SSID
splashTimeout string
Splash page timeout
ssidAdminAccessible boolean
SSID Administrator access status
useVlanTagging boolean
Whether or not traffic should be directed to use specific VLANs. This param is only valid if the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
visible boolean
Whether the SSID is advertised or hidden by the AP
vlanId number
The VLAN ID used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'
walledGardenEnabled boolean
Allow users to access a configurable list of IP ranges prior to sign-on
walledGardenRanges string[]
Domain names and IP address ranges available in Walled Garden mode
wpaEncryptionMode string
The types of WPA encryption
active_directory WirelessSsidsActiveDirectoryArgs
The current setting for Active Directory. Only valid if splashPage is 'Password-protected with Active Directory'
admin_splash_url str
adult_content_filtering_enabled bool
Boolean indicating whether or not adult content will be blocked
ap_tags_and_vlan_ids Sequence[WirelessSsidsApTagsAndVlanIdArgs]
The list of tags and VLAN IDs used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
auth_mode str
The association control method for the SSID
availability_tags Sequence[str]
List of tags for this SSID. If availableOnAllAps is false, then the SSID is only broadcast by APs with tags matching any of the tags in this list
available_on_all_aps bool
Whether all APs broadcast the SSID or if it's restricted to APs matching any availability tags
band_selection str
The client-serving radio frequencies of this SSID in the default indoor RF profile
concentrator_network_id str
The concentrator to use when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'.
default_vlan_id int
The default VLAN ID used for 'all other APs'. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
disassociate_clients_on_vpn_failover bool
Disassociate clients when 'VPN' concentrator failover occurs in order to trigger clients to re-associate and generate new DHCP requests. This param is only valid if ipAssignmentMode is 'VPN'.
dns_rewrite WirelessSsidsDnsRewriteArgs
DNS servers rewrite settings
dot11r WirelessSsidsDot11rArgs
The current setting for 802.11r
dot11w WirelessSsidsDot11wArgs
The current setting for Protected Management Frames (802.11w).
enabled bool
Whether or not the SSID is enabled
encryption_mode str
The psk encryption mode for the SSID
enterprise_admin_access str
Whether or not an SSID is accessible by 'enterprise' administrators ('access disabled' or 'access enabled')
gre WirelessSsidsGreArgs
Ethernet over GRE settings
ip_assignment_mode str
The client IP assignment mode
lan_isolation_enabled bool
Boolean indicating whether Layer 2 LAN isolation should be enabled or disabled. Only configurable when ipAssignmentMode is 'Bridge mode'.
ldap WirelessSsidsLdapArgs
The current setting for LDAP. Only valid if splashPage is 'Password-protected with LDAP'.
local_radius WirelessSsidsLocalRadiusArgs
The current setting for Local Authentication, a built-in RADIUS server on the access point. Only valid if authMode is '8021x-localradius'.
mandatory_dhcp_enabled bool
Whether clients connecting to this SSID must use the IP address assigned by the DHCP server
min_bitrate int
The minimum bitrate in Mbps of this SSID in the default indoor RF profile
name str
The name of the SSID
named_vlans WirelessSsidsNamedVlansArgs
Named VLAN settings.
network_id str
networkId path parameter. Network ID
number int
Unique identifier of the SSID
oauth WirelessSsidsOauthArgs
The OAuth settings of this SSID. Only valid if splashPage is 'Google OAuth'.
per_client_bandwidth_limit_down int
The download bandwidth limit in Kbps. (0 represents no limit.)
per_client_bandwidth_limit_up int
The upload bandwidth limit in Kbps. (0 represents no limit.)
per_ssid_bandwidth_limit_down int
The total download bandwidth limit in Kbps (0 represents no limit)
per_ssid_bandwidth_limit_up int
The total upload bandwidth limit in Kbps (0 represents no limit)
psk str
The passkey for the SSID. This param is only valid if the authMode is 'psk'
radius_accounting_enabled bool
Whether or not RADIUS accounting is enabled
radius_accounting_interim_interval int
The interval (in seconds) in which accounting information is updated and sent to the RADIUS accounting server.
radius_accounting_servers Sequence[WirelessSsidsRadiusAccountingServerArgs]
List of RADIUS accounting 802.1X servers to be used for authentication
radius_accounting_servers_responses Sequence[WirelessSsidsRadiusAccountingServersResponseArgs]
List of RADIUS accounting 802.1X servers to be used for authentication
radius_attribute_for_group_policies str
RADIUS attribute used to look up group policies
radius_authentication_nas_id str
The template of the NAS identifier to be used for RADIUS authentication (ex. $NODEMAC$:$VAPNUM$).
radius_called_station_id str
The template of the called station identifier to be used for RADIUS (ex. $NODEMAC$:$VAPNUM$).
radius_coa_enabled bool
If true, Meraki devices will act as a RADIUS Dynamic Authorization Server and will respond to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server.
radius_failover_policy str
Policy which determines how authentication requests should be handled in the event that all of the configured RADIUS servers are unreachable
radius_fallback_enabled bool
Whether or not higher priority RADIUS servers should be retried after 60 seconds.
radius_guest_vlan_enabled bool
Whether or not RADIUS Guest VLAN is enabled. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radius_guest_vlan_id int
VLAN ID of the RADIUS Guest VLAN. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radius_load_balancing_policy str
Policy which determines which RADIUS server will be contacted first in an authentication attempt, and the ordering of any necessary retry attempts
radius_override bool
If true, the RADIUS response can override VLAN tag. This is not valid when ipAssignmentMode is 'NAT mode'.
radius_proxy_enabled bool
If true, Meraki devices will proxy RADIUS messages through the Meraki cloud to the configured RADIUS auth and accounting servers.
radius_server_attempts_limit int
The maximum number of transmit attempts after which a RADIUS server is failed over (must be between 1-5).
radius_server_timeout int
The amount of time for which a RADIUS client waits for a reply from the RADIUS server (must be between 1-10 seconds).
radius_servers Sequence[WirelessSsidsRadiusServerArgs]
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
radius_servers_responses Sequence[WirelessSsidsRadiusServersResponseArgs]
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
radius_testing_enabled bool
If true, Meraki devices will periodically send Access-Request messages to configured RADIUS servers using identity 'meraki8021xtest' to ensure that the RADIUS servers are reachable.
secondary_concentrator_network_id str
The secondary concentrator to use when the ipAssignmentMode is 'VPN'. If configured, the APs will switch to using this concentrator if the primary concentrator is unreachable. This param is optional. ('disabled' represents no secondary concentrator.)
speed_burst WirelessSsidsSpeedBurstArgs
The SpeedBurst setting for this SSID'
splash_guest_sponsor_domains Sequence[str]
Array of valid sponsor email domains for sponsored guest splash type.
splash_page str
The type of splash page for the SSID
splash_timeout str
Splash page timeout
ssid_admin_accessible bool
SSID Administrator access status
use_vlan_tagging bool
Whether or not traffic should be directed to use specific VLANs. This param is only valid if the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
visible bool
Whether the SSID is advertised or hidden by the AP
vlan_id int
The VLAN ID used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'
walled_garden_enabled bool
Allow users to access a configurable list of IP ranges prior to sign-on
walled_garden_ranges Sequence[str]
Domain names and IP address ranges available in Walled Garden mode
wpa_encryption_mode str
The types of WPA encryption
activeDirectory Property Map
The current setting for Active Directory. Only valid if splashPage is 'Password-protected with Active Directory'
adminSplashUrl String
adultContentFilteringEnabled Boolean
Boolean indicating whether or not adult content will be blocked
apTagsAndVlanIds List<Property Map>
The list of tags and VLAN IDs used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
authMode String
The association control method for the SSID
availabilityTags List<String>
List of tags for this SSID. If availableOnAllAps is false, then the SSID is only broadcast by APs with tags matching any of the tags in this list
availableOnAllAps Boolean
Whether all APs broadcast the SSID or if it's restricted to APs matching any availability tags
bandSelection String
The client-serving radio frequencies of this SSID in the default indoor RF profile
concentratorNetworkId String
The concentrator to use when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'.
defaultVlanId Number
The default VLAN ID used for 'all other APs'. This param is only valid when the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
disassociateClientsOnVpnFailover Boolean
Disassociate clients when 'VPN' concentrator failover occurs in order to trigger clients to re-associate and generate new DHCP requests. This param is only valid if ipAssignmentMode is 'VPN'.
dnsRewrite Property Map
DNS servers rewrite settings
dot11r Property Map
The current setting for 802.11r
dot11w Property Map
The current setting for Protected Management Frames (802.11w).
enabled Boolean
Whether or not the SSID is enabled
encryptionMode String
The psk encryption mode for the SSID
enterpriseAdminAccess String
Whether or not an SSID is accessible by 'enterprise' administrators ('access disabled' or 'access enabled')
gre Property Map
Ethernet over GRE settings
ipAssignmentMode String
The client IP assignment mode
lanIsolationEnabled Boolean
Boolean indicating whether Layer 2 LAN isolation should be enabled or disabled. Only configurable when ipAssignmentMode is 'Bridge mode'.
ldap Property Map
The current setting for LDAP. Only valid if splashPage is 'Password-protected with LDAP'.
localRadius Property Map
The current setting for Local Authentication, a built-in RADIUS server on the access point. Only valid if authMode is '8021x-localradius'.
mandatoryDhcpEnabled Boolean
Whether clients connecting to this SSID must use the IP address assigned by the DHCP server
minBitrate Number
The minimum bitrate in Mbps of this SSID in the default indoor RF profile
name String
The name of the SSID
namedVlans Property Map
Named VLAN settings.
networkId String
networkId path parameter. Network ID
number Number
Unique identifier of the SSID
oauth Property Map
The OAuth settings of this SSID. Only valid if splashPage is 'Google OAuth'.
perClientBandwidthLimitDown Number
The download bandwidth limit in Kbps. (0 represents no limit.)
perClientBandwidthLimitUp Number
The upload bandwidth limit in Kbps. (0 represents no limit.)
perSsidBandwidthLimitDown Number
The total download bandwidth limit in Kbps (0 represents no limit)
perSsidBandwidthLimitUp Number
The total upload bandwidth limit in Kbps (0 represents no limit)
psk String
The passkey for the SSID. This param is only valid if the authMode is 'psk'
radiusAccountingEnabled Boolean
Whether or not RADIUS accounting is enabled
radiusAccountingInterimInterval Number
The interval (in seconds) in which accounting information is updated and sent to the RADIUS accounting server.
radiusAccountingServers List<Property Map>
List of RADIUS accounting 802.1X servers to be used for authentication
radiusAccountingServersResponses List<Property Map>
List of RADIUS accounting 802.1X servers to be used for authentication
radiusAttributeForGroupPolicies String
RADIUS attribute used to look up group policies
radiusAuthenticationNasId String
The template of the NAS identifier to be used for RADIUS authentication (ex. $NODEMAC$:$VAPNUM$).
radiusCalledStationId String
The template of the called station identifier to be used for RADIUS (ex. $NODEMAC$:$VAPNUM$).
radiusCoaEnabled Boolean
If true, Meraki devices will act as a RADIUS Dynamic Authorization Server and will respond to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server.
radiusFailoverPolicy String
Policy which determines how authentication requests should be handled in the event that all of the configured RADIUS servers are unreachable
radiusFallbackEnabled Boolean
Whether or not higher priority RADIUS servers should be retried after 60 seconds.
radiusGuestVlanEnabled Boolean
Whether or not RADIUS Guest VLAN is enabled. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radiusGuestVlanId Number
VLAN ID of the RADIUS Guest VLAN. This param is only valid if the authMode is 'open-with-radius' and addressing mode is not set to 'isolated' or 'nat' mode
radiusLoadBalancingPolicy String
Policy which determines which RADIUS server will be contacted first in an authentication attempt, and the ordering of any necessary retry attempts
radiusOverride Boolean
If true, the RADIUS response can override VLAN tag. This is not valid when ipAssignmentMode is 'NAT mode'.
radiusProxyEnabled Boolean
If true, Meraki devices will proxy RADIUS messages through the Meraki cloud to the configured RADIUS auth and accounting servers.
radiusServerAttemptsLimit Number
The maximum number of transmit attempts after which a RADIUS server is failed over (must be between 1-5).
radiusServerTimeout Number
The amount of time for which a RADIUS client waits for a reply from the RADIUS server (must be between 1-10 seconds).
radiusServers List<Property Map>
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
radiusServersResponses List<Property Map>
The RADIUS 802.1X servers to be used for authentication. This param is only valid if the authMode is 'open-with-radius', '8021x-radius' or 'ipsk-with-radius'
radiusTestingEnabled Boolean
If true, Meraki devices will periodically send Access-Request messages to configured RADIUS servers using identity 'meraki8021xtest' to ensure that the RADIUS servers are reachable.
secondaryConcentratorNetworkId String
The secondary concentrator to use when the ipAssignmentMode is 'VPN'. If configured, the APs will switch to using this concentrator if the primary concentrator is unreachable. This param is optional. ('disabled' represents no secondary concentrator.)
speedBurst Property Map
The SpeedBurst setting for this SSID'
splashGuestSponsorDomains List<String>
Array of valid sponsor email domains for sponsored guest splash type.
splashPage String
The type of splash page for the SSID
splashTimeout String
Splash page timeout
ssidAdminAccessible Boolean
SSID Administrator access status
useVlanTagging Boolean
Whether or not traffic should be directed to use specific VLANs. This param is only valid if the ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'
visible Boolean
Whether the SSID is advertised or hidden by the AP
vlanId Number
The VLAN ID used for VLAN tagging. This param is only valid when the ipAssignmentMode is 'Layer 3 roaming with a concentrator' or 'VPN'
walledGardenEnabled Boolean
Allow users to access a configurable list of IP ranges prior to sign-on
walledGardenRanges List<String>
Domain names and IP address ranges available in Walled Garden mode
wpaEncryptionMode String
The types of WPA encryption

Supporting Types

WirelessSsidsActiveDirectory
, WirelessSsidsActiveDirectoryArgs

Credentials WirelessSsidsActiveDirectoryCredentials
(Optional) The credentials of the user account to be used by the AP to bind to your Active Directory server. The Active Directory account should have permissions on all your Active Directory servers. Only valid if the splashPage is 'Password-protected with Active Directory'.
Servers List<WirelessSsidsActiveDirectoryServer>
The Active Directory servers to be used for authentication.
Credentials WirelessSsidsActiveDirectoryCredentials
(Optional) The credentials of the user account to be used by the AP to bind to your Active Directory server. The Active Directory account should have permissions on all your Active Directory servers. Only valid if the splashPage is 'Password-protected with Active Directory'.
Servers []WirelessSsidsActiveDirectoryServer
The Active Directory servers to be used for authentication.
credentials WirelessSsidsActiveDirectoryCredentials
(Optional) The credentials of the user account to be used by the AP to bind to your Active Directory server. The Active Directory account should have permissions on all your Active Directory servers. Only valid if the splashPage is 'Password-protected with Active Directory'.
servers List<WirelessSsidsActiveDirectoryServer>
The Active Directory servers to be used for authentication.
credentials WirelessSsidsActiveDirectoryCredentials
(Optional) The credentials of the user account to be used by the AP to bind to your Active Directory server. The Active Directory account should have permissions on all your Active Directory servers. Only valid if the splashPage is 'Password-protected with Active Directory'.
servers WirelessSsidsActiveDirectoryServer[]
The Active Directory servers to be used for authentication.
credentials WirelessSsidsActiveDirectoryCredentials
(Optional) The credentials of the user account to be used by the AP to bind to your Active Directory server. The Active Directory account should have permissions on all your Active Directory servers. Only valid if the splashPage is 'Password-protected with Active Directory'.
servers Sequence[WirelessSsidsActiveDirectoryServer]
The Active Directory servers to be used for authentication.
credentials Property Map
(Optional) The credentials of the user account to be used by the AP to bind to your Active Directory server. The Active Directory account should have permissions on all your Active Directory servers. Only valid if the splashPage is 'Password-protected with Active Directory'.
servers List<Property Map>
The Active Directory servers to be used for authentication.

WirelessSsidsActiveDirectoryCredentials
, WirelessSsidsActiveDirectoryCredentialsArgs

LogonName string
The logon name of the Active Directory account.
Password string
The password to the Active Directory user account.
LogonName string
The logon name of the Active Directory account.
Password string
The password to the Active Directory user account.
logonName String
The logon name of the Active Directory account.
password String
The password to the Active Directory user account.
logonName string
The logon name of the Active Directory account.
password string
The password to the Active Directory user account.
logon_name str
The logon name of the Active Directory account.
password str
The password to the Active Directory user account.
logonName String
The logon name of the Active Directory account.
password String
The password to the Active Directory user account.

WirelessSsidsActiveDirectoryServer
, WirelessSsidsActiveDirectoryServerArgs

Host string
IP address (or FQDN) of your Active Directory server.
Port int
(Optional) UDP port the Active Directory server listens on. By default, uses port 3268.
Host string
IP address (or FQDN) of your Active Directory server.
Port int
(Optional) UDP port the Active Directory server listens on. By default, uses port 3268.
host String
IP address (or FQDN) of your Active Directory server.
port Integer
(Optional) UDP port the Active Directory server listens on. By default, uses port 3268.
host string
IP address (or FQDN) of your Active Directory server.
port number
(Optional) UDP port the Active Directory server listens on. By default, uses port 3268.
host str
IP address (or FQDN) of your Active Directory server.
port int
(Optional) UDP port the Active Directory server listens on. By default, uses port 3268.
host String
IP address (or FQDN) of your Active Directory server.
port Number
(Optional) UDP port the Active Directory server listens on. By default, uses port 3268.

WirelessSsidsApTagsAndVlanId
, WirelessSsidsApTagsAndVlanIdArgs

Tags List<string>
Array of AP tags
VlanId int
Numerical identifier that is assigned to the VLAN
Tags []string
Array of AP tags
VlanId int
Numerical identifier that is assigned to the VLAN
tags List<String>
Array of AP tags
vlanId Integer
Numerical identifier that is assigned to the VLAN
tags string[]
Array of AP tags
vlanId number
Numerical identifier that is assigned to the VLAN
tags Sequence[str]
Array of AP tags
vlan_id int
Numerical identifier that is assigned to the VLAN
tags List<String>
Array of AP tags
vlanId Number
Numerical identifier that is assigned to the VLAN

WirelessSsidsDnsRewrite
, WirelessSsidsDnsRewriteArgs

DnsCustomNameservers List<string>
User specified DNS servers (up to two servers)
Enabled bool
Boolean indicating whether or not DNS server rewrite is enabled. If disabled, upstream DNS will be used
DnsCustomNameservers []string
User specified DNS servers (up to two servers)
Enabled bool
Boolean indicating whether or not DNS server rewrite is enabled. If disabled, upstream DNS will be used
dnsCustomNameservers List<String>
User specified DNS servers (up to two servers)
enabled Boolean
Boolean indicating whether or not DNS server rewrite is enabled. If disabled, upstream DNS will be used
dnsCustomNameservers string[]
User specified DNS servers (up to two servers)
enabled boolean
Boolean indicating whether or not DNS server rewrite is enabled. If disabled, upstream DNS will be used
dns_custom_nameservers Sequence[str]
User specified DNS servers (up to two servers)
enabled bool
Boolean indicating whether or not DNS server rewrite is enabled. If disabled, upstream DNS will be used
dnsCustomNameservers List<String>
User specified DNS servers (up to two servers)
enabled Boolean
Boolean indicating whether or not DNS server rewrite is enabled. If disabled, upstream DNS will be used

WirelessSsidsDot11r
, WirelessSsidsDot11rArgs

Adaptive bool
(Optional) Whether 802.11r is adaptive or not.
Enabled bool
Whether 802.11r is enabled or not.
Adaptive bool
(Optional) Whether 802.11r is adaptive or not.
Enabled bool
Whether 802.11r is enabled or not.
adaptive Boolean
(Optional) Whether 802.11r is adaptive or not.
enabled Boolean
Whether 802.11r is enabled or not.
adaptive boolean
(Optional) Whether 802.11r is adaptive or not.
enabled boolean
Whether 802.11r is enabled or not.
adaptive bool
(Optional) Whether 802.11r is adaptive or not.
enabled bool
Whether 802.11r is enabled or not.
adaptive Boolean
(Optional) Whether 802.11r is adaptive or not.
enabled Boolean
Whether 802.11r is enabled or not.

WirelessSsidsDot11w
, WirelessSsidsDot11wArgs

Enabled bool
Whether 802.11w is enabled or not.
Required bool
(Optional) Whether 802.11w is required or not.
Enabled bool
Whether 802.11w is enabled or not.
Required bool
(Optional) Whether 802.11w is required or not.
enabled Boolean
Whether 802.11w is enabled or not.
required Boolean
(Optional) Whether 802.11w is required or not.
enabled boolean
Whether 802.11w is enabled or not.
required boolean
(Optional) Whether 802.11w is required or not.
enabled bool
Whether 802.11w is enabled or not.
required bool
(Optional) Whether 802.11w is required or not.
enabled Boolean
Whether 802.11w is enabled or not.
required Boolean
(Optional) Whether 802.11w is required or not.

WirelessSsidsGre
, WirelessSsidsGreArgs

Concentrator WirelessSsidsGreConcentrator
The EoGRE concentrator's settings
Key int
Optional numerical identifier that will add the GRE key field to the GRE header. Used to identify an individual traffic flow within a tunnel.
Concentrator WirelessSsidsGreConcentrator
The EoGRE concentrator's settings
Key int
Optional numerical identifier that will add the GRE key field to the GRE header. Used to identify an individual traffic flow within a tunnel.
concentrator WirelessSsidsGreConcentrator
The EoGRE concentrator's settings
key Integer
Optional numerical identifier that will add the GRE key field to the GRE header. Used to identify an individual traffic flow within a tunnel.
concentrator WirelessSsidsGreConcentrator
The EoGRE concentrator's settings
key number
Optional numerical identifier that will add the GRE key field to the GRE header. Used to identify an individual traffic flow within a tunnel.
concentrator WirelessSsidsGreConcentrator
The EoGRE concentrator's settings
key int
Optional numerical identifier that will add the GRE key field to the GRE header. Used to identify an individual traffic flow within a tunnel.
concentrator Property Map
The EoGRE concentrator's settings
key Number
Optional numerical identifier that will add the GRE key field to the GRE header. Used to identify an individual traffic flow within a tunnel.

WirelessSsidsGreConcentrator
, WirelessSsidsGreConcentratorArgs

Host string
The EoGRE concentrator's IP or FQDN. This param is required when ipAssignmentMode is 'Ethernet over GRE'.
Host string
The EoGRE concentrator's IP or FQDN. This param is required when ipAssignmentMode is 'Ethernet over GRE'.
host String
The EoGRE concentrator's IP or FQDN. This param is required when ipAssignmentMode is 'Ethernet over GRE'.
host string
The EoGRE concentrator's IP or FQDN. This param is required when ipAssignmentMode is 'Ethernet over GRE'.
host str
The EoGRE concentrator's IP or FQDN. This param is required when ipAssignmentMode is 'Ethernet over GRE'.
host String
The EoGRE concentrator's IP or FQDN. This param is required when ipAssignmentMode is 'Ethernet over GRE'.

WirelessSsidsLdap
, WirelessSsidsLdapArgs

BaseDistinguishedName string
The base distinguished name of users on the LDAP server.
Credentials WirelessSsidsLdapCredentials
(Optional) The credentials of the user account to be used by the AP to bind to your LDAP server. The LDAP account should have permissions on all your LDAP servers.
ServerCaCertificate WirelessSsidsLdapServerCaCertificate
The CA certificate used to sign the LDAP server's key.
Servers List<WirelessSsidsLdapServer>
The LDAP servers to be used for authentication.
BaseDistinguishedName string
The base distinguished name of users on the LDAP server.
Credentials WirelessSsidsLdapCredentials
(Optional) The credentials of the user account to be used by the AP to bind to your LDAP server. The LDAP account should have permissions on all your LDAP servers.
ServerCaCertificate WirelessSsidsLdapServerCaCertificate
The CA certificate used to sign the LDAP server's key.
Servers []WirelessSsidsLdapServer
The LDAP servers to be used for authentication.
baseDistinguishedName String
The base distinguished name of users on the LDAP server.
credentials WirelessSsidsLdapCredentials
(Optional) The credentials of the user account to be used by the AP to bind to your LDAP server. The LDAP account should have permissions on all your LDAP servers.
serverCaCertificate WirelessSsidsLdapServerCaCertificate
The CA certificate used to sign the LDAP server's key.
servers List<WirelessSsidsLdapServer>
The LDAP servers to be used for authentication.
baseDistinguishedName string
The base distinguished name of users on the LDAP server.
credentials WirelessSsidsLdapCredentials
(Optional) The credentials of the user account to be used by the AP to bind to your LDAP server. The LDAP account should have permissions on all your LDAP servers.
serverCaCertificate WirelessSsidsLdapServerCaCertificate
The CA certificate used to sign the LDAP server's key.
servers WirelessSsidsLdapServer[]
The LDAP servers to be used for authentication.
base_distinguished_name str
The base distinguished name of users on the LDAP server.
credentials WirelessSsidsLdapCredentials
(Optional) The credentials of the user account to be used by the AP to bind to your LDAP server. The LDAP account should have permissions on all your LDAP servers.
server_ca_certificate WirelessSsidsLdapServerCaCertificate
The CA certificate used to sign the LDAP server's key.
servers Sequence[WirelessSsidsLdapServer]
The LDAP servers to be used for authentication.
baseDistinguishedName String
The base distinguished name of users on the LDAP server.
credentials Property Map
(Optional) The credentials of the user account to be used by the AP to bind to your LDAP server. The LDAP account should have permissions on all your LDAP servers.
serverCaCertificate Property Map
The CA certificate used to sign the LDAP server's key.
servers List<Property Map>
The LDAP servers to be used for authentication.

WirelessSsidsLdapCredentials
, WirelessSsidsLdapCredentialsArgs

DistinguishedName string
The distinguished name of the LDAP user account (example: cn=user,dc=meraki,dc=com).
Password string
The password of the LDAP user account.
DistinguishedName string
The distinguished name of the LDAP user account (example: cn=user,dc=meraki,dc=com).
Password string
The password of the LDAP user account.
distinguishedName String
The distinguished name of the LDAP user account (example: cn=user,dc=meraki,dc=com).
password String
The password of the LDAP user account.
distinguishedName string
The distinguished name of the LDAP user account (example: cn=user,dc=meraki,dc=com).
password string
The password of the LDAP user account.
distinguished_name str
The distinguished name of the LDAP user account (example: cn=user,dc=meraki,dc=com).
password str
The password of the LDAP user account.
distinguishedName String
The distinguished name of the LDAP user account (example: cn=user,dc=meraki,dc=com).
password String
The password of the LDAP user account.

WirelessSsidsLdapServer
, WirelessSsidsLdapServerArgs

Host string
IP address (or FQDN) of your LDAP server.
Port int
UDP port the LDAP server listens on.
Host string
IP address (or FQDN) of your LDAP server.
Port int
UDP port the LDAP server listens on.
host String
IP address (or FQDN) of your LDAP server.
port Integer
UDP port the LDAP server listens on.
host string
IP address (or FQDN) of your LDAP server.
port number
UDP port the LDAP server listens on.
host str
IP address (or FQDN) of your LDAP server.
port int
UDP port the LDAP server listens on.
host String
IP address (or FQDN) of your LDAP server.
port Number
UDP port the LDAP server listens on.

WirelessSsidsLdapServerCaCertificate
, WirelessSsidsLdapServerCaCertificateArgs

Contents string
The contents of the CA certificate. Must be in PEM or DER format.
Contents string
The contents of the CA certificate. Must be in PEM or DER format.
contents String
The contents of the CA certificate. Must be in PEM or DER format.
contents string
The contents of the CA certificate. Must be in PEM or DER format.
contents str
The contents of the CA certificate. Must be in PEM or DER format.
contents String
The contents of the CA certificate. Must be in PEM or DER format.

WirelessSsidsLocalRadius
, WirelessSsidsLocalRadiusArgs

CacheTimeout int
The duration (in seconds) for which LDAP and OCSP lookups are cached.
CertificateAuthentication WirelessSsidsLocalRadiusCertificateAuthentication
The current setting for certificate verification.
PasswordAuthentication WirelessSsidsLocalRadiusPasswordAuthentication
The current setting for password-based authentication.
CacheTimeout int
The duration (in seconds) for which LDAP and OCSP lookups are cached.
CertificateAuthentication WirelessSsidsLocalRadiusCertificateAuthentication
The current setting for certificate verification.
PasswordAuthentication WirelessSsidsLocalRadiusPasswordAuthentication
The current setting for password-based authentication.
cacheTimeout Integer
The duration (in seconds) for which LDAP and OCSP lookups are cached.
certificateAuthentication WirelessSsidsLocalRadiusCertificateAuthentication
The current setting for certificate verification.
passwordAuthentication WirelessSsidsLocalRadiusPasswordAuthentication
The current setting for password-based authentication.
cacheTimeout number
The duration (in seconds) for which LDAP and OCSP lookups are cached.
certificateAuthentication WirelessSsidsLocalRadiusCertificateAuthentication
The current setting for certificate verification.
passwordAuthentication WirelessSsidsLocalRadiusPasswordAuthentication
The current setting for password-based authentication.
cache_timeout int
The duration (in seconds) for which LDAP and OCSP lookups are cached.
certificate_authentication WirelessSsidsLocalRadiusCertificateAuthentication
The current setting for certificate verification.
password_authentication WirelessSsidsLocalRadiusPasswordAuthentication
The current setting for password-based authentication.
cacheTimeout Number
The duration (in seconds) for which LDAP and OCSP lookups are cached.
certificateAuthentication Property Map
The current setting for certificate verification.
passwordAuthentication Property Map
The current setting for password-based authentication.

WirelessSsidsLocalRadiusCertificateAuthentication
, WirelessSsidsLocalRadiusCertificateAuthenticationArgs

ClientRootCaCertificate WirelessSsidsLocalRadiusCertificateAuthenticationClientRootCaCertificate
The Client CA Certificate used to sign the client certificate.
Enabled bool
Whether or not to use EAP-TLS certificate-based authentication to validate wireless clients.
OcspResponderUrl string
(Optional) The URL of the OCSP responder to verify client certificate status.
UseLdap bool
Whether or not to verify the certificate with LDAP.
UseOcsp bool
Whether or not to verify the certificate with OCSP.
ClientRootCaCertificate WirelessSsidsLocalRadiusCertificateAuthenticationClientRootCaCertificate
The Client CA Certificate used to sign the client certificate.
Enabled bool
Whether or not to use EAP-TLS certificate-based authentication to validate wireless clients.
OcspResponderUrl string
(Optional) The URL of the OCSP responder to verify client certificate status.
UseLdap bool
Whether or not to verify the certificate with LDAP.
UseOcsp bool
Whether or not to verify the certificate with OCSP.
clientRootCaCertificate WirelessSsidsLocalRadiusCertificateAuthenticationClientRootCaCertificate
The Client CA Certificate used to sign the client certificate.
enabled Boolean
Whether or not to use EAP-TLS certificate-based authentication to validate wireless clients.
ocspResponderUrl String
(Optional) The URL of the OCSP responder to verify client certificate status.
useLdap Boolean
Whether or not to verify the certificate with LDAP.
useOcsp Boolean
Whether or not to verify the certificate with OCSP.
clientRootCaCertificate WirelessSsidsLocalRadiusCertificateAuthenticationClientRootCaCertificate
The Client CA Certificate used to sign the client certificate.
enabled boolean
Whether or not to use EAP-TLS certificate-based authentication to validate wireless clients.
ocspResponderUrl string
(Optional) The URL of the OCSP responder to verify client certificate status.
useLdap boolean
Whether or not to verify the certificate with LDAP.
useOcsp boolean
Whether or not to verify the certificate with OCSP.
client_root_ca_certificate WirelessSsidsLocalRadiusCertificateAuthenticationClientRootCaCertificate
The Client CA Certificate used to sign the client certificate.
enabled bool
Whether or not to use EAP-TLS certificate-based authentication to validate wireless clients.
ocsp_responder_url str
(Optional) The URL of the OCSP responder to verify client certificate status.
use_ldap bool
Whether or not to verify the certificate with LDAP.
use_ocsp bool
Whether or not to verify the certificate with OCSP.
clientRootCaCertificate Property Map
The Client CA Certificate used to sign the client certificate.
enabled Boolean
Whether or not to use EAP-TLS certificate-based authentication to validate wireless clients.
ocspResponderUrl String
(Optional) The URL of the OCSP responder to verify client certificate status.
useLdap Boolean
Whether or not to verify the certificate with LDAP.
useOcsp Boolean
Whether or not to verify the certificate with OCSP.

WirelessSsidsLocalRadiusCertificateAuthenticationClientRootCaCertificate
, WirelessSsidsLocalRadiusCertificateAuthenticationClientRootCaCertificateArgs

Contents string
The contents of the Client CA Certificate. Must be in PEM or DER format.
Contents string
The contents of the Client CA Certificate. Must be in PEM or DER format.
contents String
The contents of the Client CA Certificate. Must be in PEM or DER format.
contents string
The contents of the Client CA Certificate. Must be in PEM or DER format.
contents str
The contents of the Client CA Certificate. Must be in PEM or DER format.
contents String
The contents of the Client CA Certificate. Must be in PEM or DER format.

WirelessSsidsLocalRadiusPasswordAuthentication
, WirelessSsidsLocalRadiusPasswordAuthenticationArgs

Enabled bool
Whether or not to use EAP-TTLS/PAP or PEAP-GTC password-based authentication via LDAP lookup.
Enabled bool
Whether or not to use EAP-TTLS/PAP or PEAP-GTC password-based authentication via LDAP lookup.
enabled Boolean
Whether or not to use EAP-TTLS/PAP or PEAP-GTC password-based authentication via LDAP lookup.
enabled boolean
Whether or not to use EAP-TTLS/PAP or PEAP-GTC password-based authentication via LDAP lookup.
enabled bool
Whether or not to use EAP-TTLS/PAP or PEAP-GTC password-based authentication via LDAP lookup.
enabled Boolean
Whether or not to use EAP-TTLS/PAP or PEAP-GTC password-based authentication via LDAP lookup.

WirelessSsidsNamedVlans
, WirelessSsidsNamedVlansArgs

Radius WirelessSsidsNamedVlansRadius
RADIUS settings. This param is only valid when authMode is 'open-with-radius' and ipAssignmentMode is not 'NAT mode'.
Tagging WirelessSsidsNamedVlansTagging
VLAN tagging settings. This param is only valid when ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'.
Radius WirelessSsidsNamedVlansRadius
RADIUS settings. This param is only valid when authMode is 'open-with-radius' and ipAssignmentMode is not 'NAT mode'.
Tagging WirelessSsidsNamedVlansTagging
VLAN tagging settings. This param is only valid when ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'.
radius WirelessSsidsNamedVlansRadius
RADIUS settings. This param is only valid when authMode is 'open-with-radius' and ipAssignmentMode is not 'NAT mode'.
tagging WirelessSsidsNamedVlansTagging
VLAN tagging settings. This param is only valid when ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'.
radius WirelessSsidsNamedVlansRadius
RADIUS settings. This param is only valid when authMode is 'open-with-radius' and ipAssignmentMode is not 'NAT mode'.
tagging WirelessSsidsNamedVlansTagging
VLAN tagging settings. This param is only valid when ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'.
radius WirelessSsidsNamedVlansRadius
RADIUS settings. This param is only valid when authMode is 'open-with-radius' and ipAssignmentMode is not 'NAT mode'.
tagging WirelessSsidsNamedVlansTagging
VLAN tagging settings. This param is only valid when ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'.
radius Property Map
RADIUS settings. This param is only valid when authMode is 'open-with-radius' and ipAssignmentMode is not 'NAT mode'.
tagging Property Map
VLAN tagging settings. This param is only valid when ipAssignmentMode is 'Bridge mode' or 'Layer 3 roaming'.

WirelessSsidsNamedVlansRadius
, WirelessSsidsNamedVlansRadiusArgs

GuestVlan WirelessSsidsNamedVlansRadiusGuestVlan
Guest VLAN settings. Used to direct traffic to a guest VLAN when none of the RADIUS servers are reachable or a client receives access-reject from the RADIUS server.
GuestVlan WirelessSsidsNamedVlansRadiusGuestVlan
Guest VLAN settings. Used to direct traffic to a guest VLAN when none of the RADIUS servers are reachable or a client receives access-reject from the RADIUS server.
guestVlan WirelessSsidsNamedVlansRadiusGuestVlan
Guest VLAN settings. Used to direct traffic to a guest VLAN when none of the RADIUS servers are reachable or a client receives access-reject from the RADIUS server.
guestVlan WirelessSsidsNamedVlansRadiusGuestVlan
Guest VLAN settings. Used to direct traffic to a guest VLAN when none of the RADIUS servers are reachable or a client receives access-reject from the RADIUS server.
guest_vlan WirelessSsidsNamedVlansRadiusGuestVlan
Guest VLAN settings. Used to direct traffic to a guest VLAN when none of the RADIUS servers are reachable or a client receives access-reject from the RADIUS server.
guestVlan Property Map
Guest VLAN settings. Used to direct traffic to a guest VLAN when none of the RADIUS servers are reachable or a client receives access-reject from the RADIUS server.

WirelessSsidsNamedVlansRadiusGuestVlan
, WirelessSsidsNamedVlansRadiusGuestVlanArgs

Enabled bool
Whether or not RADIUS guest named VLAN is enabled.
Name string
RADIUS guest VLAN name.
Enabled bool
Whether or not RADIUS guest named VLAN is enabled.
Name string
RADIUS guest VLAN name.
enabled Boolean
Whether or not RADIUS guest named VLAN is enabled.
name String
RADIUS guest VLAN name.
enabled boolean
Whether or not RADIUS guest named VLAN is enabled.
name string
RADIUS guest VLAN name.
enabled bool
Whether or not RADIUS guest named VLAN is enabled.
name str
RADIUS guest VLAN name.
enabled Boolean
Whether or not RADIUS guest named VLAN is enabled.
name String
RADIUS guest VLAN name.

WirelessSsidsNamedVlansTagging
, WirelessSsidsNamedVlansTaggingArgs

ByApTags List<WirelessSsidsNamedVlansTaggingByApTag>
The list of AP tags and VLAN names used for named VLAN tagging. If an AP has a tag matching one in the list, then traffic on this SSID will be directed to use the VLAN name associated to the tag.
DefaultVlanName string
The default VLAN name used to tag traffic in the absence of a matching AP tag.
Enabled bool
Whether or not traffic should be directed to use specific VLAN names.
ByApTags []WirelessSsidsNamedVlansTaggingByApTag
The list of AP tags and VLAN names used for named VLAN tagging. If an AP has a tag matching one in the list, then traffic on this SSID will be directed to use the VLAN name associated to the tag.
DefaultVlanName string
The default VLAN name used to tag traffic in the absence of a matching AP tag.
Enabled bool
Whether or not traffic should be directed to use specific VLAN names.
byApTags List<WirelessSsidsNamedVlansTaggingByApTag>
The list of AP tags and VLAN names used for named VLAN tagging. If an AP has a tag matching one in the list, then traffic on this SSID will be directed to use the VLAN name associated to the tag.
defaultVlanName String
The default VLAN name used to tag traffic in the absence of a matching AP tag.
enabled Boolean
Whether or not traffic should be directed to use specific VLAN names.
byApTags WirelessSsidsNamedVlansTaggingByApTag[]
The list of AP tags and VLAN names used for named VLAN tagging. If an AP has a tag matching one in the list, then traffic on this SSID will be directed to use the VLAN name associated to the tag.
defaultVlanName string
The default VLAN name used to tag traffic in the absence of a matching AP tag.
enabled boolean
Whether or not traffic should be directed to use specific VLAN names.
by_ap_tags Sequence[WirelessSsidsNamedVlansTaggingByApTag]
The list of AP tags and VLAN names used for named VLAN tagging. If an AP has a tag matching one in the list, then traffic on this SSID will be directed to use the VLAN name associated to the tag.
default_vlan_name str
The default VLAN name used to tag traffic in the absence of a matching AP tag.
enabled bool
Whether or not traffic should be directed to use specific VLAN names.
byApTags List<Property Map>
The list of AP tags and VLAN names used for named VLAN tagging. If an AP has a tag matching one in the list, then traffic on this SSID will be directed to use the VLAN name associated to the tag.
defaultVlanName String
The default VLAN name used to tag traffic in the absence of a matching AP tag.
enabled Boolean
Whether or not traffic should be directed to use specific VLAN names.

WirelessSsidsNamedVlansTaggingByApTag
, WirelessSsidsNamedVlansTaggingByApTagArgs

Tags List<string>
List of AP tags.
VlanName string
VLAN name that will be used to tag traffic.
Tags []string
List of AP tags.
VlanName string
VLAN name that will be used to tag traffic.
tags List<String>
List of AP tags.
vlanName String
VLAN name that will be used to tag traffic.
tags string[]
List of AP tags.
vlanName string
VLAN name that will be used to tag traffic.
tags Sequence[str]
List of AP tags.
vlan_name str
VLAN name that will be used to tag traffic.
tags List<String>
List of AP tags.
vlanName String
VLAN name that will be used to tag traffic.

WirelessSsidsOauth
, WirelessSsidsOauthArgs

AllowedDomains List<string>
(Optional) The list of domains allowed access to the network.
AllowedDomains []string
(Optional) The list of domains allowed access to the network.
allowedDomains List<String>
(Optional) The list of domains allowed access to the network.
allowedDomains string[]
(Optional) The list of domains allowed access to the network.
allowed_domains Sequence[str]
(Optional) The list of domains allowed access to the network.
allowedDomains List<String>
(Optional) The list of domains allowed access to the network.

WirelessSsidsRadiusAccountingServer
, WirelessSsidsRadiusAccountingServerArgs

CaCertificate string
Certificate used for authorization for the RADSEC Server
Host string
IP address (or FQDN) to which the APs will send RADIUS accounting messages
OpenRoamingCertificateId int
The ID of the Openroaming Certificate attached to radius server
Port int
Port on the RADIUS server that is listening for accounting messages
RadsecEnabled bool
Use RADSEC (TLS over TCP) to connect to this RADIUS accounting server. Requires radiusProxyEnabled.
Secret string
Shared key used to authenticate messages between the APs and RADIUS server
CaCertificate string
Certificate used for authorization for the RADSEC Server
Host string
IP address (or FQDN) to which the APs will send RADIUS accounting messages
OpenRoamingCertificateId int
The ID of the Openroaming Certificate attached to radius server
Port int
Port on the RADIUS server that is listening for accounting messages
RadsecEnabled bool
Use RADSEC (TLS over TCP) to connect to this RADIUS accounting server. Requires radiusProxyEnabled.
Secret string
Shared key used to authenticate messages between the APs and RADIUS server
caCertificate String
Certificate used for authorization for the RADSEC Server
host String
IP address (or FQDN) to which the APs will send RADIUS accounting messages
openRoamingCertificateId Integer
The ID of the Openroaming Certificate attached to radius server
port Integer
Port on the RADIUS server that is listening for accounting messages
radsecEnabled Boolean
Use RADSEC (TLS over TCP) to connect to this RADIUS accounting server. Requires radiusProxyEnabled.
secret String
Shared key used to authenticate messages between the APs and RADIUS server
caCertificate string
Certificate used for authorization for the RADSEC Server
host string
IP address (or FQDN) to which the APs will send RADIUS accounting messages
openRoamingCertificateId number
The ID of the Openroaming Certificate attached to radius server
port number
Port on the RADIUS server that is listening for accounting messages
radsecEnabled boolean
Use RADSEC (TLS over TCP) to connect to this RADIUS accounting server. Requires radiusProxyEnabled.
secret string
Shared key used to authenticate messages between the APs and RADIUS server
ca_certificate str
Certificate used for authorization for the RADSEC Server
host str
IP address (or FQDN) to which the APs will send RADIUS accounting messages
open_roaming_certificate_id int
The ID of the Openroaming Certificate attached to radius server
port int
Port on the RADIUS server that is listening for accounting messages
radsec_enabled bool
Use RADSEC (TLS over TCP) to connect to this RADIUS accounting server. Requires radiusProxyEnabled.
secret str
Shared key used to authenticate messages between the APs and RADIUS server
caCertificate String
Certificate used for authorization for the RADSEC Server
host String
IP address (or FQDN) to which the APs will send RADIUS accounting messages
openRoamingCertificateId Number
The ID of the Openroaming Certificate attached to radius server
port Number
Port on the RADIUS server that is listening for accounting messages
radsecEnabled Boolean
Use RADSEC (TLS over TCP) to connect to this RADIUS accounting server. Requires radiusProxyEnabled.
secret String
Shared key used to authenticate messages between the APs and RADIUS server

WirelessSsidsRadiusAccountingServersResponse
, WirelessSsidsRadiusAccountingServersResponseArgs

CaCertificate string
Certificate used for authorization for the RADSEC Server
Host string
IP address (or FQDN) to which the APs will send RADIUS accounting messages
OpenRoamingCertificateId int
The ID of the Openroaming Certificate attached to radius server
Port int
Port on the RADIUS server that is listening for accounting messages
RadsecEnabled bool
Use RADSEC (TLS over TCP) to connect to this RADIUS accounting server. Requires radiusProxyEnabled.
Secret string
Shared key used to authenticate messages between the APs and RADIUS server
CaCertificate string
Certificate used for authorization for the RADSEC Server
Host string
IP address (or FQDN) to which the APs will send RADIUS accounting messages
OpenRoamingCertificateId int
The ID of the Openroaming Certificate attached to radius server
Port int
Port on the RADIUS server that is listening for accounting messages
RadsecEnabled bool
Use RADSEC (TLS over TCP) to connect to this RADIUS accounting server. Requires radiusProxyEnabled.
Secret string
Shared key used to authenticate messages between the APs and RADIUS server
caCertificate String
Certificate used for authorization for the RADSEC Server
host String
IP address (or FQDN) to which the APs will send RADIUS accounting messages
openRoamingCertificateId Integer
The ID of the Openroaming Certificate attached to radius server
port Integer
Port on the RADIUS server that is listening for accounting messages
radsecEnabled Boolean
Use RADSEC (TLS over TCP) to connect to this RADIUS accounting server. Requires radiusProxyEnabled.
secret String
Shared key used to authenticate messages between the APs and RADIUS server
caCertificate string
Certificate used for authorization for the RADSEC Server
host string
IP address (or FQDN) to which the APs will send RADIUS accounting messages
openRoamingCertificateId number
The ID of the Openroaming Certificate attached to radius server
port number
Port on the RADIUS server that is listening for accounting messages
radsecEnabled boolean
Use RADSEC (TLS over TCP) to connect to this RADIUS accounting server. Requires radiusProxyEnabled.
secret string
Shared key used to authenticate messages between the APs and RADIUS server
ca_certificate str
Certificate used for authorization for the RADSEC Server
host str
IP address (or FQDN) to which the APs will send RADIUS accounting messages
open_roaming_certificate_id int
The ID of the Openroaming Certificate attached to radius server
port int
Port on the RADIUS server that is listening for accounting messages
radsec_enabled bool
Use RADSEC (TLS over TCP) to connect to this RADIUS accounting server. Requires radiusProxyEnabled.
secret str
Shared key used to authenticate messages between the APs and RADIUS server
caCertificate String
Certificate used for authorization for the RADSEC Server
host String
IP address (or FQDN) to which the APs will send RADIUS accounting messages
openRoamingCertificateId Number
The ID of the Openroaming Certificate attached to radius server
port Number
Port on the RADIUS server that is listening for accounting messages
radsecEnabled Boolean
Use RADSEC (TLS over TCP) to connect to this RADIUS accounting server. Requires radiusProxyEnabled.
secret String
Shared key used to authenticate messages between the APs and RADIUS server

WirelessSsidsRadiusServer
, WirelessSsidsRadiusServerArgs

CaCertificate string
Certificate used for authorization for the RADSEC Server
Host string
IP address of your RADIUS server
OpenRoamingCertificateId int
The ID of the Openroaming Certificate attached to radius server.
Port int
UDP port the RADIUS server listens on for Access-requests
RadsecEnabled bool
Use RADSEC (TLS over TCP) to connect to this RADIUS server. Requires radiusProxyEnabled.
Secret string
RADIUS client shared secret
CaCertificate string
Certificate used for authorization for the RADSEC Server
Host string
IP address of your RADIUS server
OpenRoamingCertificateId int
The ID of the Openroaming Certificate attached to radius server.
Port int
UDP port the RADIUS server listens on for Access-requests
RadsecEnabled bool
Use RADSEC (TLS over TCP) to connect to this RADIUS server. Requires radiusProxyEnabled.
Secret string
RADIUS client shared secret
caCertificate String
Certificate used for authorization for the RADSEC Server
host String
IP address of your RADIUS server
openRoamingCertificateId Integer
The ID of the Openroaming Certificate attached to radius server.
port Integer
UDP port the RADIUS server listens on for Access-requests
radsecEnabled Boolean
Use RADSEC (TLS over TCP) to connect to this RADIUS server. Requires radiusProxyEnabled.
secret String
RADIUS client shared secret
caCertificate string
Certificate used for authorization for the RADSEC Server
host string
IP address of your RADIUS server
openRoamingCertificateId number
The ID of the Openroaming Certificate attached to radius server.
port number
UDP port the RADIUS server listens on for Access-requests
radsecEnabled boolean
Use RADSEC (TLS over TCP) to connect to this RADIUS server. Requires radiusProxyEnabled.
secret string
RADIUS client shared secret
ca_certificate str
Certificate used for authorization for the RADSEC Server
host str
IP address of your RADIUS server
open_roaming_certificate_id int
The ID of the Openroaming Certificate attached to radius server.
port int
UDP port the RADIUS server listens on for Access-requests
radsec_enabled bool
Use RADSEC (TLS over TCP) to connect to this RADIUS server. Requires radiusProxyEnabled.
secret str
RADIUS client shared secret
caCertificate String
Certificate used for authorization for the RADSEC Server
host String
IP address of your RADIUS server
openRoamingCertificateId Number
The ID of the Openroaming Certificate attached to radius server.
port Number
UDP port the RADIUS server listens on for Access-requests
radsecEnabled Boolean
Use RADSEC (TLS over TCP) to connect to this RADIUS server. Requires radiusProxyEnabled.
secret String
RADIUS client shared secret

WirelessSsidsRadiusServersResponse
, WirelessSsidsRadiusServersResponseArgs

CaCertificate string
Certificate used for authorization for the RADSEC Server
Host string
IP address of your RADIUS server
OpenRoamingCertificateId int
The ID of the Openroaming Certificate attached to radius server.
Port int
UDP port the RADIUS server listens on for Access-requests
RadsecEnabled bool
Use RADSEC (TLS over TCP) to connect to this RADIUS server. Requires radiusProxyEnabled.
Secret string
RADIUS client shared secret
CaCertificate string
Certificate used for authorization for the RADSEC Server
Host string
IP address of your RADIUS server
OpenRoamingCertificateId int
The ID of the Openroaming Certificate attached to radius server.
Port int
UDP port the RADIUS server listens on for Access-requests
RadsecEnabled bool
Use RADSEC (TLS over TCP) to connect to this RADIUS server. Requires radiusProxyEnabled.
Secret string
RADIUS client shared secret
caCertificate String
Certificate used for authorization for the RADSEC Server
host String
IP address of your RADIUS server
openRoamingCertificateId Integer
The ID of the Openroaming Certificate attached to radius server.
port Integer
UDP port the RADIUS server listens on for Access-requests
radsecEnabled Boolean
Use RADSEC (TLS over TCP) to connect to this RADIUS server. Requires radiusProxyEnabled.
secret String
RADIUS client shared secret
caCertificate string
Certificate used for authorization for the RADSEC Server
host string
IP address of your RADIUS server
openRoamingCertificateId number
The ID of the Openroaming Certificate attached to radius server.
port number
UDP port the RADIUS server listens on for Access-requests
radsecEnabled boolean
Use RADSEC (TLS over TCP) to connect to this RADIUS server. Requires radiusProxyEnabled.
secret string
RADIUS client shared secret
ca_certificate str
Certificate used for authorization for the RADSEC Server
host str
IP address of your RADIUS server
open_roaming_certificate_id int
The ID of the Openroaming Certificate attached to radius server.
port int
UDP port the RADIUS server listens on for Access-requests
radsec_enabled bool
Use RADSEC (TLS over TCP) to connect to this RADIUS server. Requires radiusProxyEnabled.
secret str
RADIUS client shared secret
caCertificate String
Certificate used for authorization for the RADSEC Server
host String
IP address of your RADIUS server
openRoamingCertificateId Number
The ID of the Openroaming Certificate attached to radius server.
port Number
UDP port the RADIUS server listens on for Access-requests
radsecEnabled Boolean
Use RADSEC (TLS over TCP) to connect to this RADIUS server. Requires radiusProxyEnabled.
secret String
RADIUS client shared secret

WirelessSsidsSpeedBurst
, WirelessSsidsSpeedBurstArgs

Enabled bool
Boolean indicating whether or not to allow users to temporarily exceed the bandwidth limit for short periods while still keeping them under the bandwidth limit over time.
Enabled bool
Boolean indicating whether or not to allow users to temporarily exceed the bandwidth limit for short periods while still keeping them under the bandwidth limit over time.
enabled Boolean
Boolean indicating whether or not to allow users to temporarily exceed the bandwidth limit for short periods while still keeping them under the bandwidth limit over time.
enabled boolean
Boolean indicating whether or not to allow users to temporarily exceed the bandwidth limit for short periods while still keeping them under the bandwidth limit over time.
enabled bool
Boolean indicating whether or not to allow users to temporarily exceed the bandwidth limit for short periods while still keeping them under the bandwidth limit over time.
enabled Boolean
Boolean indicating whether or not to allow users to temporarily exceed the bandwidth limit for short periods while still keeping them under the bandwidth limit over time.

Import

$ pulumi import meraki:networks/wirelessSsids:WirelessSsids example "network_id,number"
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
meraki pulumi/pulumi-meraki
License
Apache-2.0
Notes
This Pulumi package is based on the meraki Terraform Provider.