The identity and technical contract details declared by the specification.
allow_deny4
string
Allow or deny decision applied to traffic matching the destination tag
switch_bgp_config_neighbor
object
Per-neighbor switch BGP session settings
5 properties
1 required
extra_route
object
IPv4 static route settings for a destination prefix
6 properties
dhcp_snooping3
object
DHCP snooping defaults provided by this network template
5 properties
switch_bgp_config_hold_time_zero
integer
BGP hold time value of 0
switch_matching3
object
Matching rules that select switches for this network template
2 properties
snmp_usm
object
SNMPv3 User-based Security Model configuration
3 properties
ospf_area
object
Property key is the OSPF Area (Area should be a number (0-255) / IP address)
3 properties
switch_network_multicast_igmp_version
string
IGMP version. '2' (default, ASM/IGMPv2) / '3' (SSM/IGMPv3)
switch_port_usage
object
Junos switch port usage template and authentication settings
46 properties
snmp_usm_user_authentication_type2
string
Authentication protocol used by this SNMPv3 USM user. enum: authentication-md5, authentication-none, authentication-sha, authentication-sha224, authentication-…
switch_port_usage_storm_control2
object
Only if mode!=dynamic. Storm-control settings for this port usage
6 properties
tacacs_acct_server
object
TACACS+ accounting server settings
4 properties
snmp_vacm_security_to_group_content_item
object
VACM security-name to group mapping entry
2 properties
snmpv3_config_notify_filter_item
object
SNMPv3 notification filter profile
3 properties
switch_port_usage_duplex2
string
Only if mode!=dynamic. Link duplex mode for this port usage. enum: auto, full, half.
ospf_area_type2
string
Area type for this OSPF area. enum: default, nssa, stub.
remote_syslog2
object
Remote syslog defaults provided by this network template
10 properties
sw_routing_policy_term_matching2
object
Route match criteria that must be satisfied before actions are applied
4 properties
response_http403
object
Standard HTTP 403 permission error response
1 property
protect_re3
object
Control-plane protection settings for the switch
5 properties
snmpv3_config_target_param_mess_process_model2
string
SNMP message processing model used by this target parameter profile. enum: v1, v2c, v3.
protect_re_allowed_service
string
Services allowed through protect-RE filters. enum: icmp, ssh
switch_matching_rule_ip_config2
object
In-band management IP configuration applied when this matching rule matches
2 properties
snmp_usm_user_encryption_type2
string
Privacy protocol used by this SNMPv3 USM user. enum: privacy-3des, privacy-aes128, privacy-des, privacy-none.
snmp_config2
object
SNMP defaults provided by this network template
13 properties
switch_mist_nac2
object
Mist NAC defaults applied by this network template
2 properties
snmp_vacm_access_item_prefix_list_item
object
Context prefix rule for a VACM access entry
7 properties
snmp_usm_user
object
SNMPv3 USM user definition
5 properties
vrf_extra_route
object
Additional IPv4 static route for a VRF instance
1 property
remote_syslog_archive3
object
Retention settings for generated syslog archive files
2 properties
snmp_config_engine_id_type2
string
Method used to derive the SNMP engine ID. enum: local, usemacaddress.
tacacs2
object
Management authentication settings using TACACS+
5 properties
remote_syslog_time_format2
string
Timestamp format used in forwarded syslog messages. enum: millisecond, year, year millisecond.
remote_syslog_user
object
User-specific syslog logging rule
3 properties
acl_policy
object
ACL Policy: - for GBP-based policy, all srctags and dsttags have to be gbp-based - for ACL-based policy, network is required in either the source or destinatio…
4 properties
protect_re_custom
object
Custom Protect RE ACL entry
3 properties
remote_syslog_severity1
string
Default syslog severity for messages sent to this server. enum: alert, any, critical, emergency, error, info, notice, warning.
junos_port_config
object
Junos switch port configuration
19 properties
1 required
acl_tag_spec
object
Layer 4 protocol and destination-port match constraint for an ACL tag
2 properties
snmp_config_client_list
object
SNMP client allowlist definition
2 properties
config_switch_local_accounts_user_role2
string
Access role granted to the local switch user account. enum: admin, helpdesk, none, read.
snmpv3_config_target_param_security_level2
string
Required security level for this target parameter profile. enum: authentication, none, privacy.
switch_radius_config3
object
RADIUS authentication and accounting defaults in this network template
12 properties
switch_port_usage_speed2
string
Only if mode!=dynamic. Link speed for this port usage. enum: 10m, 100m, 1g, 2.5g, 5g, 10g, 25g, 40g, 100g, auto.
switch_radius_config1
object
RADIUS configuration used when alternate RADIUS settings are required
12 properties
snmp_usm_engine_type2
string
SNMP engine type used for this USM configuration. enum: localengine, remoteengine.
response_http400
object
Standard HTTP 400 bad request error response
1 property
ospf_area_network_interface_type2
string
OSPF interface type used for this network. enum: broadcast, nbma, p2mp, p2p.
network_template
object
Network template configuration applied to sites or site groups
31 properties
switch_network_multicast2
object
Multicast (IGMP snooping) settings for this VLAN
2 properties
ospf_area_network_auth_type2
string
Authentication method used by this OSPF network. enum: md5, none, password.
config_switch_local_accounts_user
object
Local switch user account credentials and access role
2 properties
switch_matching_rule_oob_ip_config2
object
Out-of-band management IP configuration applied when this matching rule matches
3 properties
switch_port_usage_mode2
string
Switching mode for this port usage. enum: access, dynamic, inet, trunk.
sw_routing_policy_term_action2
object
Policy actions applied when this routing policy term matches
4 properties
switch_network
object
A network represents a network segment. It can either represent a VLAN (then usually ties to a L3 subnet), optionally associate it with a subnet which can late…
8 properties
1 required
snmpv3_config2
object
SNMPv3 user, VACM, notify, and target configuration
6 properties
switch_port_usage_dynamic_rule
object
Dynamic port usage rule evaluated against LLDP, RADIUS, or peer MAC attributes
6 properties
1 required
ip_type11
string
IP assignment mode for in-band switch management. enum: dhcp, static.
extra_route6_next_qualified_properties
object
Qualified next-hop attributes for an IPv6 static route
2 properties
tacacs_default_role2
string
Default switch-management role to use for TACACS+ logins. enum: admin, helpdesk, none, read.
response_http401
object
Standard HTTP 401 authentication error response
1 property
switch_bgp_config_type2
string
BGP session type for this switch BGP configuration. enum: external, internal.
extra_route_next_qualified_properties
object
Qualified next-hop attributes for an IPv4 static route
2 properties
vrf_extra_route6
object
Additional IPv6 static route for a VRF instance
1 property
snmp_config_v2c_config
object
SNMPv2c community configuration entry
4 properties
switch_vrf_instance
object
Switch VRF instance routing and network membership settings
8 properties
snmp_config_view
object
SNMP MIB view definition
3 properties
switch_radius2
object
Management authentication settings using RADIUS
3 properties
switch_radius_config_auth_server_selection2
string
Selection strategy for RADIUS authentication servers. enum: ordered, unordered.
remote_syslog_server_protocol2
string
Transport protocol used for this remote syslog server. enum: tcp, udp.
snmpv3_config_notify_filter_item_content
object
OID filter rule for an SNMPv3 notification profile
2 properties
snmp_vacm_access_item
object
VACM access rule for an SNMP group
2 properties
remote_syslog_server
object
Remote syslog server destination settings
13 properties
poe_priority3
string
Only if mode!=dynamic. PoE priority for ports using this port usage. enum: low, high.
bgp_as
BGP AS, value in range 1-4294967294. Can be a Variable (e.g. {{bgpas}} )
junos_port_config_speed1
string
Link speed for this Junos port. enum: 10m, 100m, 1g, 2.5g, 5g, 10g, 25g, 40g, 100g, auto.
remote_syslog_severity3
string
Syslog severity to match for this selector. enum: alert, any, critical, emergency, error, info, notice, warning.
response_http404
object
Standard HTTP 404 not found error response
1 property
tacacs_auth_server
object
TACACS+ authentication server settings
4 properties
switch_bgp_config
object
Switch BGP configuration for a routing instance
9 properties
2 required
snmp_vacm_access_item_prefix_list_item_model2
string
Required security model for this VACM access rule. enum: any, usm, v1, v2c.
switch_port_mirroring_property
object
Input and output settings for one switch port mirroring session
6 properties
switch_multicast_config1
object
Multicast settings for networks in the master VRF (not assigned to any vrfinstances); PIM is automatically enabled when any master-VRF network has multicast.en…
4 properties
remote_syslog_content
object
Syslog message content selector for remote logging
2 properties
snmpv3_config_target_address_item
object
SNMPv3 notification target address entry
6 properties
acl_policy_action
object
Action applied to traffic that matches a destination ACL tag
2 properties
1 required
switch_stp_config2
object
Spanning Tree Protocol configuration applied when this matching rule matches
1 property
ip_type12
string
IP assignment mode for out-of-band switch management. enum: dhcp, static.
switch_mgmt3
object
Management-plane defaults provided by this network template
16 properties
radius_auth_server
object
RADIUS authentication server settings
8 properties
2 required
snmpv3_config_target_param
object
SNMPv3 target parameter profile
6 properties
snmpv3_config_target_param_security_model2
string
Required security model for this target parameter profile. enum: usm, v1, v2c.
switch_port_usage_dynamic_rule_src2
string
Source attribute evaluated by this dynamic rule. enum: linkpeermac, lldpchassisid, lldphardwarerevision, lldpmanufacturername, lldpoui, lldpserialnumber, lldps…
extra_route6
object
IPv6 static route settings for a destination prefix
6 properties
snmp_config_trap_group
object
SNMP trap group definition
4 properties
radius_keywrap_format1
string
Encoding format for RADIUS keywrap KEK and MACK values. enum: ascii, hex.
ospf_areas_network
object
Property key is the network name. Networks to participate in an OSPF area
12 properties
remote_syslog_console2
object
Log forwarding filters for console messages sent to remote syslog
1 property
acl_tag
object
Resource tags (type==resource or type==gbpresource) can only be used in dsttags
9 properties
1 required
snmp_vacm_security_model2
string
Required security model for these VACM group mappings. enum: usm, v1, v2c.
switch_multicast_config3
object
Multicast configuration for this VRF instance. PIM is automatically enabled when any network in this VRF has multicast.enabled==true
4 properties
snmp_vacm_access_item_type2
string
VACM context matching type for this access rule. enum: contextprefix, defaultcontextprefix.
radius_acct_server
object
RADIUS accounting server settings
7 properties
2 required
switch_mgmt2
object
Management-plane settings applied when this matching rule matches
16 properties
snmp_vacm2
object
SNMPv3 VACM access control configuration
2 properties
sw_routing_policy_term_matching_protocol_enum
string
enum: bgp, direct, evpn, ospf, static
snmpv3_config_notify_items
object
SNMPv3 notification definition for traps or informs
3 properties
remote_syslog_archive1
object
Retention settings for this generated syslog file
2 properties
switch_port_usage_mac_auth_protocol2
string
Only if mode!=dynamic and enablemacauth==true. MAC authentication protocol to use; ignored if Mist NAC is enabled. enum: eap-md5, eap-peap, pap.
sw_routing_policy
object
Switch routing policy made of ordered match-action terms
1 property
remote_syslog_file_config
object
Generated syslog file output settings
7 properties
snmp_vacm_security_to_group2
object
VACM security-name to group mappings
2 properties
snmp_vacm_access_item_prefix_list_item_level2
string
Required security level for this VACM access rule. enum: authentication, none, privacy.
response_http429
object
Standard HTTP 429 rate limit error response
1 property
vrf_config5
object
VRF defaults applied by this network template
1 property
protect_re_custom_protocol2
string
Transport protocol matched by this custom Protect RE ACL. enum: any, icmp, tcp, udp.
remote_syslog_facility1
string
Default syslog facility for messages sent to this server. enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, int…
sw_routing_policy_term
object
Switch routing policy term with match criteria and actions
3 properties
1 required
remote_syslog_facility3
string
Syslog facility to match for this selector. enum: any, authorization, change-log, config, conflict-log, daemon, dfc, external, firewall, ftp, interactive-comma…
snmpv3_config_notify_type2
string
Delivery mode for this SNMPv3 notification, such as trap or inform
acl_tag_type2
string
Classifier type that determines which ACL tag fields are evaluated. enum: any, arubauserrole, dynamicgbp, gbpresource, mac, network, portusage, radiusgroup, re…
snmp_config_trap_version2
string
SNMP trap protocol version used by this group. enum: all, v1, v2.
junos_port_config_duplex2
string
Link duplex mode for this Junos port. enum: auto, full, half.
switch_port_usage_dot1x2
string
Only if mode!=dynamic. 802.1X authentication mode for this port usage. enum: dot1x.
aggregate_route
object
Aggregate route configuration for a network or routing instance
3 properties
switch_matching_rule
object
Property key defines the type of matching, value is the string to match. e.g: matchname[0:3]: switch name must match the first 3 letters of the property value…
9 properties
switch_port_usage_dynamic_reset_default_when2
string
Only if mode==dynamic. Condition that resets a dynamic port to the default port usage. enum: linkdown, none.
The full machine-readable OpenAPI contract behind this narrative.
Other APIs Juniper Networks publishes across the network.
