iosxe.Template
Explore with Pulumi AI
This resource can manage the Template configuration.
Example Usage
Coming soon!
Coming soon!
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.iosxe.Template;
import com.pulumi.iosxe.TemplateArgs;
import com.pulumi.iosxe.inputs.TemplateIpAccessGroupArgs;
import com.pulumi.iosxe.inputs.TemplateSwitchportPortSecurityMaximumRangeArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new Template("example", TemplateArgs.builder()
.accessSessionClosed(true)
.accessSessionControlDirection("both")
.accessSessionHostMode("single-host")
.accessSessionInterfaceTemplateSticky(true)
.accessSessionInterfaceTemplateStickyTimer(100)
.accessSessionMonitor(true)
.accessSessionPortControl("auto")
.authenticationPeriodic(true)
.authenticationTimerReauthenticateServer(true)
.ctsManual(true)
.ctsManualPolicyStaticSgt(100)
.ctsManualPolicyStaticTrusted(false)
.ctsManualPropagateSgt(false)
.ctsRoleBasedEnforcement(false)
.deviceTracking(true)
.deviceTrackingVlanRange("100-199")
.dot1xMaxReauthReq(3)
.dot1xMaxReq(3)
.dot1xPae("both")
.dot1xTimeoutTxPeriod(2)
.ipAccessGroups(TemplateIpAccessGroupArgs.builder()
.access_list("ACL1")
.direction("in")
.build())
.ipDhcpSnoopingLimitRate(10)
.ipDhcpSnoopingTrust(true)
.loadInterval(30)
.mab(true)
.mabEap(true)
.servicePolicyInput("SP1")
.servicePolicyOutput("SP2")
.servicePolicyTypeControlSubscriber("dot1x_policy")
.spanningTreeBpduguardEnable(true)
.spanningTreePortfast(true)
.spanningTreePortfastDisable(false)
.spanningTreePortfastEdge(false)
.spanningTreePortfastNetwork(false)
.stormControlActionShutdown(true)
.stormControlActionTrap(true)
.stormControlBroadcastLevelBpsThreshold(10)
.stormControlBroadcastLevelPpsThreshold("10")
.stormControlBroadcastLevelThreshold(10)
.stormControlMulticastLevelBpsThreshold(10000)
.stormControlMulticastLevelPpsThreshold("10")
.stormControlMulticastLevelThreshold(10)
.subscriberAgingProbe(true)
.switchportAccessVlan(200)
.switchportBlockUnicast(false)
.switchportModeAccess(false)
.switchportModeTrunk(true)
.switchportNonegotiate(false)
.switchportPortSecurity(true)
.switchportPortSecurityAgingStatic(false)
.switchportPortSecurityAgingTime(100)
.switchportPortSecurityAgingType(true)
.switchportPortSecurityAgingTypeInactivity(true)
.switchportPortSecurityMaximumRanges(TemplateSwitchportPortSecurityMaximumRangeArgs.builder()
.range(100)
.vlan(true)
.vlan_access(true)
.build())
.switchportPortSecurityViolationProtect(false)
.switchportPortSecurityViolationRestrict(false)
.switchportPortSecurityViolationShutdown(false)
.switchportPrivateVlanHostAssociationPrimaryRange(301)
.switchportPrivateVlanHostAssociationSecondaryRange(302)
.switchportTrunkAllowedVlans("500-599")
.switchportTrunkNativeVlanVlanId(10)
.switchportVoiceVlan(201)
.templateName("TEMP1")
.build());
}
}
Coming soon!
Coming soon!
resources:
example:
type: iosxe:Template
properties:
accessSessionClosed: true
accessSessionControlDirection: both
accessSessionHostMode: single-host
accessSessionInterfaceTemplateSticky: true
accessSessionInterfaceTemplateStickyTimer: 100
accessSessionMonitor: true
accessSessionPortControl: auto
authenticationPeriodic: true
authenticationTimerReauthenticateServer: true
ctsManual: true
ctsManualPolicyStaticSgt: 100
ctsManualPolicyStaticTrusted: false
ctsManualPropagateSgt: false
ctsRoleBasedEnforcement: false
deviceTracking: true
deviceTrackingVlanRange: 100-199
dot1xMaxReauthReq: 3
dot1xMaxReq: 3
dot1xPae: both
dot1xTimeoutTxPeriod: 2
ipAccessGroups:
- access_list: ACL1
direction: in
ipDhcpSnoopingLimitRate: 10
ipDhcpSnoopingTrust: true
loadInterval: 30
mab: true
mabEap: true
servicePolicyInput: SP1
servicePolicyOutput: SP2
servicePolicyTypeControlSubscriber: dot1x_policy
spanningTreeBpduguardEnable: true
spanningTreePortfast: true
spanningTreePortfastDisable: false
spanningTreePortfastEdge: false
spanningTreePortfastNetwork: false
stormControlActionShutdown: true
stormControlActionTrap: true
stormControlBroadcastLevelBpsThreshold: 10
stormControlBroadcastLevelPpsThreshold: '10'
stormControlBroadcastLevelThreshold: 10
stormControlMulticastLevelBpsThreshold: 10000
stormControlMulticastLevelPpsThreshold: '10'
stormControlMulticastLevelThreshold: 10
subscriberAgingProbe: true
switchportAccessVlan: 200
switchportBlockUnicast: false
switchportModeAccess: false
switchportModeTrunk: true
switchportNonegotiate: false
switchportPortSecurity: true
switchportPortSecurityAgingStatic: false
switchportPortSecurityAgingTime: 100
switchportPortSecurityAgingType: true
switchportPortSecurityAgingTypeInactivity: true
switchportPortSecurityMaximumRanges:
- range: 100
vlan: true
vlan_access: true
switchportPortSecurityViolationProtect: false
switchportPortSecurityViolationRestrict: false
switchportPortSecurityViolationShutdown: false
switchportPrivateVlanHostAssociationPrimaryRange: 301
switchportPrivateVlanHostAssociationSecondaryRange: 302
switchportTrunkAllowedVlans: 500-599
switchportTrunkNativeVlanVlanId: 10
switchportVoiceVlan: 201
templateName: TEMP1
Create Template Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Template(name: string, args: TemplateArgs, opts?: CustomResourceOptions);
@overload
def Template(resource_name: str,
args: TemplateArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Template(resource_name: str,
opts: Optional[ResourceOptions] = None,
template_name: Optional[str] = None,
access_session_closed: Optional[bool] = None,
access_session_control_direction: Optional[str] = None,
access_session_host_mode: Optional[str] = None,
access_session_interface_template_sticky: Optional[bool] = None,
access_session_interface_template_sticky_timer: Optional[int] = None,
access_session_monitor: Optional[bool] = None,
access_session_port_control: Optional[str] = None,
authentication_periodic: Optional[bool] = None,
authentication_timer_reauthenticate_range: Optional[int] = None,
authentication_timer_reauthenticate_server: Optional[bool] = None,
cts_manual: Optional[bool] = None,
cts_manual_policy_static_sgt: Optional[int] = None,
cts_manual_policy_static_trusted: Optional[bool] = None,
cts_manual_propagate_sgt: Optional[bool] = None,
cts_role_based_enforcement: Optional[bool] = None,
delete_mode: Optional[str] = None,
device: Optional[str] = None,
device_tracking: Optional[bool] = None,
device_tracking_attach_policies: Optional[Sequence[TemplateDeviceTrackingAttachPolicyArgs]] = None,
device_tracking_vlan_range: Optional[str] = None,
dot1x_max_reauth_req: Optional[int] = None,
dot1x_max_req: Optional[int] = None,
dot1x_pae: Optional[str] = None,
dot1x_timeout_tx_period: Optional[int] = None,
ip_access_groups: Optional[Sequence[TemplateIpAccessGroupArgs]] = None,
ip_dhcp_snooping_limit_rate: Optional[int] = None,
ip_dhcp_snooping_trust: Optional[bool] = None,
load_interval: Optional[int] = None,
mab: Optional[bool] = None,
mab_eap: Optional[bool] = None,
service_policy_input: Optional[str] = None,
service_policy_output: Optional[str] = None,
service_policy_type_control_subscriber: Optional[str] = None,
source_template: Optional[str] = None,
spanning_tree_bpduguard_enable: Optional[bool] = None,
spanning_tree_portfast: Optional[bool] = None,
spanning_tree_portfast_disable: Optional[bool] = None,
spanning_tree_portfast_edge: Optional[bool] = None,
spanning_tree_portfast_network: Optional[bool] = None,
spanning_tree_service_policy: Optional[bool] = None,
storm_control_action_shutdown: Optional[bool] = None,
storm_control_action_trap: Optional[bool] = None,
storm_control_broadcast_level_bps_threshold: Optional[float] = None,
storm_control_broadcast_level_pps_threshold: Optional[str] = None,
storm_control_broadcast_level_threshold: Optional[float] = None,
storm_control_multicast_level_bps_threshold: Optional[float] = None,
storm_control_multicast_level_pps_threshold: Optional[str] = None,
storm_control_multicast_level_threshold: Optional[float] = None,
subscriber_aging_inactivity_timer_probe: Optional[bool] = None,
subscriber_aging_inactivity_timer_value: Optional[int] = None,
subscriber_aging_probe: Optional[bool] = None,
switchport_access_vlan: Optional[int] = None,
switchport_block_unicast: Optional[bool] = None,
switchport_mode_access: Optional[bool] = None,
switchport_mode_trunk: Optional[bool] = None,
switchport_nonegotiate: Optional[bool] = None,
switchport_port_security: Optional[bool] = None,
switchport_port_security_aging_static: Optional[bool] = None,
switchport_port_security_aging_time: Optional[int] = None,
switchport_port_security_aging_type: Optional[bool] = None,
switchport_port_security_aging_type_inactivity: Optional[bool] = None,
switchport_port_security_maximum_ranges: Optional[Sequence[TemplateSwitchportPortSecurityMaximumRangeArgs]] = None,
switchport_port_security_violation_protect: Optional[bool] = None,
switchport_port_security_violation_restrict: Optional[bool] = None,
switchport_port_security_violation_shutdown: Optional[bool] = None,
switchport_private_vlan_host_association_primary_range: Optional[int] = None,
switchport_private_vlan_host_association_secondary_range: Optional[int] = None,
switchport_trunk_allowed_vlans: Optional[str] = None,
switchport_trunk_allowed_vlans_all: Optional[bool] = None,
switchport_trunk_allowed_vlans_none: Optional[bool] = None,
switchport_trunk_native_vlan_tag: Optional[bool] = None,
switchport_trunk_native_vlan_vlan_id: Optional[int] = None,
switchport_voice_vlan: Optional[int] = None)
func NewTemplate(ctx *Context, name string, args TemplateArgs, opts ...ResourceOption) (*Template, error)
public Template(string name, TemplateArgs args, CustomResourceOptions? opts = null)
public Template(String name, TemplateArgs args)
public Template(String name, TemplateArgs args, CustomResourceOptions options)
type: iosxe:Template
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args TemplateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args TemplateArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args TemplateArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args TemplateArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args TemplateArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var templateResource = new Iosxe.Template("templateResource", new()
{
TemplateName = "string",
AccessSessionClosed = false,
AccessSessionControlDirection = "string",
AccessSessionHostMode = "string",
AccessSessionInterfaceTemplateSticky = false,
AccessSessionInterfaceTemplateStickyTimer = 0,
AccessSessionMonitor = false,
AccessSessionPortControl = "string",
AuthenticationPeriodic = false,
AuthenticationTimerReauthenticateRange = 0,
AuthenticationTimerReauthenticateServer = false,
CtsManual = false,
CtsManualPolicyStaticSgt = 0,
CtsManualPolicyStaticTrusted = false,
CtsManualPropagateSgt = false,
CtsRoleBasedEnforcement = false,
DeleteMode = "string",
Device = "string",
DeviceTracking = false,
DeviceTrackingAttachPolicies = new[]
{
new Iosxe.Inputs.TemplateDeviceTrackingAttachPolicyArgs
{
PolicyName = "string",
VlanRange = "string",
},
},
DeviceTrackingVlanRange = "string",
Dot1xMaxReauthReq = 0,
Dot1xMaxReq = 0,
Dot1xPae = "string",
Dot1xTimeoutTxPeriod = 0,
IpAccessGroups = new[]
{
new Iosxe.Inputs.TemplateIpAccessGroupArgs
{
Direction = "string",
AccessList = "string",
},
},
IpDhcpSnoopingLimitRate = 0,
IpDhcpSnoopingTrust = false,
LoadInterval = 0,
Mab = false,
MabEap = false,
ServicePolicyInput = "string",
ServicePolicyOutput = "string",
ServicePolicyTypeControlSubscriber = "string",
SourceTemplate = "string",
SpanningTreeBpduguardEnable = false,
SpanningTreePortfast = false,
SpanningTreePortfastDisable = false,
SpanningTreePortfastEdge = false,
SpanningTreePortfastNetwork = false,
SpanningTreeServicePolicy = false,
StormControlActionShutdown = false,
StormControlActionTrap = false,
StormControlBroadcastLevelBpsThreshold = 0,
StormControlBroadcastLevelPpsThreshold = "string",
StormControlBroadcastLevelThreshold = 0,
StormControlMulticastLevelBpsThreshold = 0,
StormControlMulticastLevelPpsThreshold = "string",
StormControlMulticastLevelThreshold = 0,
SubscriberAgingInactivityTimerProbe = false,
SubscriberAgingInactivityTimerValue = 0,
SubscriberAgingProbe = false,
SwitchportAccessVlan = 0,
SwitchportBlockUnicast = false,
SwitchportModeAccess = false,
SwitchportModeTrunk = false,
SwitchportNonegotiate = false,
SwitchportPortSecurity = false,
SwitchportPortSecurityAgingStatic = false,
SwitchportPortSecurityAgingTime = 0,
SwitchportPortSecurityAgingType = false,
SwitchportPortSecurityAgingTypeInactivity = false,
SwitchportPortSecurityMaximumRanges = new[]
{
new Iosxe.Inputs.TemplateSwitchportPortSecurityMaximumRangeArgs
{
Range = 0,
Vlan = false,
VlanAccess = false,
},
},
SwitchportPortSecurityViolationProtect = false,
SwitchportPortSecurityViolationRestrict = false,
SwitchportPortSecurityViolationShutdown = false,
SwitchportPrivateVlanHostAssociationPrimaryRange = 0,
SwitchportPrivateVlanHostAssociationSecondaryRange = 0,
SwitchportTrunkAllowedVlans = "string",
SwitchportTrunkAllowedVlansAll = false,
SwitchportTrunkAllowedVlansNone = false,
SwitchportTrunkNativeVlanTag = false,
SwitchportTrunkNativeVlanVlanId = 0,
SwitchportVoiceVlan = 0,
});
example, err := iosxe.NewTemplate(ctx, "templateResource", &iosxe.TemplateArgs{
TemplateName: pulumi.String("string"),
AccessSessionClosed: pulumi.Bool(false),
AccessSessionControlDirection: pulumi.String("string"),
AccessSessionHostMode: pulumi.String("string"),
AccessSessionInterfaceTemplateSticky: pulumi.Bool(false),
AccessSessionInterfaceTemplateStickyTimer: pulumi.Int(0),
AccessSessionMonitor: pulumi.Bool(false),
AccessSessionPortControl: pulumi.String("string"),
AuthenticationPeriodic: pulumi.Bool(false),
AuthenticationTimerReauthenticateRange: pulumi.Int(0),
AuthenticationTimerReauthenticateServer: pulumi.Bool(false),
CtsManual: pulumi.Bool(false),
CtsManualPolicyStaticSgt: pulumi.Int(0),
CtsManualPolicyStaticTrusted: pulumi.Bool(false),
CtsManualPropagateSgt: pulumi.Bool(false),
CtsRoleBasedEnforcement: pulumi.Bool(false),
DeleteMode: pulumi.String("string"),
Device: pulumi.String("string"),
DeviceTracking: pulumi.Bool(false),
DeviceTrackingAttachPolicies: iosxe.TemplateDeviceTrackingAttachPolicyArray{
&iosxe.TemplateDeviceTrackingAttachPolicyArgs{
PolicyName: pulumi.String("string"),
VlanRange: pulumi.String("string"),
},
},
DeviceTrackingVlanRange: pulumi.String("string"),
Dot1xMaxReauthReq: pulumi.Int(0),
Dot1xMaxReq: pulumi.Int(0),
Dot1xPae: pulumi.String("string"),
Dot1xTimeoutTxPeriod: pulumi.Int(0),
IpAccessGroups: iosxe.TemplateIpAccessGroupArray{
&iosxe.TemplateIpAccessGroupArgs{
Direction: pulumi.String("string"),
AccessList: pulumi.String("string"),
},
},
IpDhcpSnoopingLimitRate: pulumi.Int(0),
IpDhcpSnoopingTrust: pulumi.Bool(false),
LoadInterval: pulumi.Int(0),
Mab: pulumi.Bool(false),
MabEap: pulumi.Bool(false),
ServicePolicyInput: pulumi.String("string"),
ServicePolicyOutput: pulumi.String("string"),
ServicePolicyTypeControlSubscriber: pulumi.String("string"),
SourceTemplate: pulumi.String("string"),
SpanningTreeBpduguardEnable: pulumi.Bool(false),
SpanningTreePortfast: pulumi.Bool(false),
SpanningTreePortfastDisable: pulumi.Bool(false),
SpanningTreePortfastEdge: pulumi.Bool(false),
SpanningTreePortfastNetwork: pulumi.Bool(false),
SpanningTreeServicePolicy: pulumi.Bool(false),
StormControlActionShutdown: pulumi.Bool(false),
StormControlActionTrap: pulumi.Bool(false),
StormControlBroadcastLevelBpsThreshold: pulumi.Float64(0),
StormControlBroadcastLevelPpsThreshold: pulumi.String("string"),
StormControlBroadcastLevelThreshold: pulumi.Float64(0),
StormControlMulticastLevelBpsThreshold: pulumi.Float64(0),
StormControlMulticastLevelPpsThreshold: pulumi.String("string"),
StormControlMulticastLevelThreshold: pulumi.Float64(0),
SubscriberAgingInactivityTimerProbe: pulumi.Bool(false),
SubscriberAgingInactivityTimerValue: pulumi.Int(0),
SubscriberAgingProbe: pulumi.Bool(false),
SwitchportAccessVlan: pulumi.Int(0),
SwitchportBlockUnicast: pulumi.Bool(false),
SwitchportModeAccess: pulumi.Bool(false),
SwitchportModeTrunk: pulumi.Bool(false),
SwitchportNonegotiate: pulumi.Bool(false),
SwitchportPortSecurity: pulumi.Bool(false),
SwitchportPortSecurityAgingStatic: pulumi.Bool(false),
SwitchportPortSecurityAgingTime: pulumi.Int(0),
SwitchportPortSecurityAgingType: pulumi.Bool(false),
SwitchportPortSecurityAgingTypeInactivity: pulumi.Bool(false),
SwitchportPortSecurityMaximumRanges: iosxe.TemplateSwitchportPortSecurityMaximumRangeArray{
&iosxe.TemplateSwitchportPortSecurityMaximumRangeArgs{
Range: pulumi.Int(0),
Vlan: pulumi.Bool(false),
VlanAccess: pulumi.Bool(false),
},
},
SwitchportPortSecurityViolationProtect: pulumi.Bool(false),
SwitchportPortSecurityViolationRestrict: pulumi.Bool(false),
SwitchportPortSecurityViolationShutdown: pulumi.Bool(false),
SwitchportPrivateVlanHostAssociationPrimaryRange: pulumi.Int(0),
SwitchportPrivateVlanHostAssociationSecondaryRange: pulumi.Int(0),
SwitchportTrunkAllowedVlans: pulumi.String("string"),
SwitchportTrunkAllowedVlansAll: pulumi.Bool(false),
SwitchportTrunkAllowedVlansNone: pulumi.Bool(false),
SwitchportTrunkNativeVlanTag: pulumi.Bool(false),
SwitchportTrunkNativeVlanVlanId: pulumi.Int(0),
SwitchportVoiceVlan: pulumi.Int(0),
})
var templateResource = new Template("templateResource", TemplateArgs.builder()
.templateName("string")
.accessSessionClosed(false)
.accessSessionControlDirection("string")
.accessSessionHostMode("string")
.accessSessionInterfaceTemplateSticky(false)
.accessSessionInterfaceTemplateStickyTimer(0)
.accessSessionMonitor(false)
.accessSessionPortControl("string")
.authenticationPeriodic(false)
.authenticationTimerReauthenticateRange(0)
.authenticationTimerReauthenticateServer(false)
.ctsManual(false)
.ctsManualPolicyStaticSgt(0)
.ctsManualPolicyStaticTrusted(false)
.ctsManualPropagateSgt(false)
.ctsRoleBasedEnforcement(false)
.deleteMode("string")
.device("string")
.deviceTracking(false)
.deviceTrackingAttachPolicies(TemplateDeviceTrackingAttachPolicyArgs.builder()
.policyName("string")
.vlanRange("string")
.build())
.deviceTrackingVlanRange("string")
.dot1xMaxReauthReq(0)
.dot1xMaxReq(0)
.dot1xPae("string")
.dot1xTimeoutTxPeriod(0)
.ipAccessGroups(TemplateIpAccessGroupArgs.builder()
.direction("string")
.accessList("string")
.build())
.ipDhcpSnoopingLimitRate(0)
.ipDhcpSnoopingTrust(false)
.loadInterval(0)
.mab(false)
.mabEap(false)
.servicePolicyInput("string")
.servicePolicyOutput("string")
.servicePolicyTypeControlSubscriber("string")
.sourceTemplate("string")
.spanningTreeBpduguardEnable(false)
.spanningTreePortfast(false)
.spanningTreePortfastDisable(false)
.spanningTreePortfastEdge(false)
.spanningTreePortfastNetwork(false)
.spanningTreeServicePolicy(false)
.stormControlActionShutdown(false)
.stormControlActionTrap(false)
.stormControlBroadcastLevelBpsThreshold(0)
.stormControlBroadcastLevelPpsThreshold("string")
.stormControlBroadcastLevelThreshold(0)
.stormControlMulticastLevelBpsThreshold(0)
.stormControlMulticastLevelPpsThreshold("string")
.stormControlMulticastLevelThreshold(0)
.subscriberAgingInactivityTimerProbe(false)
.subscriberAgingInactivityTimerValue(0)
.subscriberAgingProbe(false)
.switchportAccessVlan(0)
.switchportBlockUnicast(false)
.switchportModeAccess(false)
.switchportModeTrunk(false)
.switchportNonegotiate(false)
.switchportPortSecurity(false)
.switchportPortSecurityAgingStatic(false)
.switchportPortSecurityAgingTime(0)
.switchportPortSecurityAgingType(false)
.switchportPortSecurityAgingTypeInactivity(false)
.switchportPortSecurityMaximumRanges(TemplateSwitchportPortSecurityMaximumRangeArgs.builder()
.range(0)
.vlan(false)
.vlanAccess(false)
.build())
.switchportPortSecurityViolationProtect(false)
.switchportPortSecurityViolationRestrict(false)
.switchportPortSecurityViolationShutdown(false)
.switchportPrivateVlanHostAssociationPrimaryRange(0)
.switchportPrivateVlanHostAssociationSecondaryRange(0)
.switchportTrunkAllowedVlans("string")
.switchportTrunkAllowedVlansAll(false)
.switchportTrunkAllowedVlansNone(false)
.switchportTrunkNativeVlanTag(false)
.switchportTrunkNativeVlanVlanId(0)
.switchportVoiceVlan(0)
.build());
template_resource = iosxe.Template("templateResource",
template_name="string",
access_session_closed=False,
access_session_control_direction="string",
access_session_host_mode="string",
access_session_interface_template_sticky=False,
access_session_interface_template_sticky_timer=0,
access_session_monitor=False,
access_session_port_control="string",
authentication_periodic=False,
authentication_timer_reauthenticate_range=0,
authentication_timer_reauthenticate_server=False,
cts_manual=False,
cts_manual_policy_static_sgt=0,
cts_manual_policy_static_trusted=False,
cts_manual_propagate_sgt=False,
cts_role_based_enforcement=False,
delete_mode="string",
device="string",
device_tracking=False,
device_tracking_attach_policies=[{
"policy_name": "string",
"vlan_range": "string",
}],
device_tracking_vlan_range="string",
dot1x_max_reauth_req=0,
dot1x_max_req=0,
dot1x_pae="string",
dot1x_timeout_tx_period=0,
ip_access_groups=[{
"direction": "string",
"access_list": "string",
}],
ip_dhcp_snooping_limit_rate=0,
ip_dhcp_snooping_trust=False,
load_interval=0,
mab=False,
mab_eap=False,
service_policy_input="string",
service_policy_output="string",
service_policy_type_control_subscriber="string",
source_template="string",
spanning_tree_bpduguard_enable=False,
spanning_tree_portfast=False,
spanning_tree_portfast_disable=False,
spanning_tree_portfast_edge=False,
spanning_tree_portfast_network=False,
spanning_tree_service_policy=False,
storm_control_action_shutdown=False,
storm_control_action_trap=False,
storm_control_broadcast_level_bps_threshold=0,
storm_control_broadcast_level_pps_threshold="string",
storm_control_broadcast_level_threshold=0,
storm_control_multicast_level_bps_threshold=0,
storm_control_multicast_level_pps_threshold="string",
storm_control_multicast_level_threshold=0,
subscriber_aging_inactivity_timer_probe=False,
subscriber_aging_inactivity_timer_value=0,
subscriber_aging_probe=False,
switchport_access_vlan=0,
switchport_block_unicast=False,
switchport_mode_access=False,
switchport_mode_trunk=False,
switchport_nonegotiate=False,
switchport_port_security=False,
switchport_port_security_aging_static=False,
switchport_port_security_aging_time=0,
switchport_port_security_aging_type=False,
switchport_port_security_aging_type_inactivity=False,
switchport_port_security_maximum_ranges=[{
"range": 0,
"vlan": False,
"vlan_access": False,
}],
switchport_port_security_violation_protect=False,
switchport_port_security_violation_restrict=False,
switchport_port_security_violation_shutdown=False,
switchport_private_vlan_host_association_primary_range=0,
switchport_private_vlan_host_association_secondary_range=0,
switchport_trunk_allowed_vlans="string",
switchport_trunk_allowed_vlans_all=False,
switchport_trunk_allowed_vlans_none=False,
switchport_trunk_native_vlan_tag=False,
switchport_trunk_native_vlan_vlan_id=0,
switchport_voice_vlan=0)
const templateResource = new iosxe.Template("templateResource", {
templateName: "string",
accessSessionClosed: false,
accessSessionControlDirection: "string",
accessSessionHostMode: "string",
accessSessionInterfaceTemplateSticky: false,
accessSessionInterfaceTemplateStickyTimer: 0,
accessSessionMonitor: false,
accessSessionPortControl: "string",
authenticationPeriodic: false,
authenticationTimerReauthenticateRange: 0,
authenticationTimerReauthenticateServer: false,
ctsManual: false,
ctsManualPolicyStaticSgt: 0,
ctsManualPolicyStaticTrusted: false,
ctsManualPropagateSgt: false,
ctsRoleBasedEnforcement: false,
deleteMode: "string",
device: "string",
deviceTracking: false,
deviceTrackingAttachPolicies: [{
policyName: "string",
vlanRange: "string",
}],
deviceTrackingVlanRange: "string",
dot1xMaxReauthReq: 0,
dot1xMaxReq: 0,
dot1xPae: "string",
dot1xTimeoutTxPeriod: 0,
ipAccessGroups: [{
direction: "string",
accessList: "string",
}],
ipDhcpSnoopingLimitRate: 0,
ipDhcpSnoopingTrust: false,
loadInterval: 0,
mab: false,
mabEap: false,
servicePolicyInput: "string",
servicePolicyOutput: "string",
servicePolicyTypeControlSubscriber: "string",
sourceTemplate: "string",
spanningTreeBpduguardEnable: false,
spanningTreePortfast: false,
spanningTreePortfastDisable: false,
spanningTreePortfastEdge: false,
spanningTreePortfastNetwork: false,
spanningTreeServicePolicy: false,
stormControlActionShutdown: false,
stormControlActionTrap: false,
stormControlBroadcastLevelBpsThreshold: 0,
stormControlBroadcastLevelPpsThreshold: "string",
stormControlBroadcastLevelThreshold: 0,
stormControlMulticastLevelBpsThreshold: 0,
stormControlMulticastLevelPpsThreshold: "string",
stormControlMulticastLevelThreshold: 0,
subscriberAgingInactivityTimerProbe: false,
subscriberAgingInactivityTimerValue: 0,
subscriberAgingProbe: false,
switchportAccessVlan: 0,
switchportBlockUnicast: false,
switchportModeAccess: false,
switchportModeTrunk: false,
switchportNonegotiate: false,
switchportPortSecurity: false,
switchportPortSecurityAgingStatic: false,
switchportPortSecurityAgingTime: 0,
switchportPortSecurityAgingType: false,
switchportPortSecurityAgingTypeInactivity: false,
switchportPortSecurityMaximumRanges: [{
range: 0,
vlan: false,
vlanAccess: false,
}],
switchportPortSecurityViolationProtect: false,
switchportPortSecurityViolationRestrict: false,
switchportPortSecurityViolationShutdown: false,
switchportPrivateVlanHostAssociationPrimaryRange: 0,
switchportPrivateVlanHostAssociationSecondaryRange: 0,
switchportTrunkAllowedVlans: "string",
switchportTrunkAllowedVlansAll: false,
switchportTrunkAllowedVlansNone: false,
switchportTrunkNativeVlanTag: false,
switchportTrunkNativeVlanVlanId: 0,
switchportVoiceVlan: 0,
});
type: iosxe:Template
properties:
accessSessionClosed: false
accessSessionControlDirection: string
accessSessionHostMode: string
accessSessionInterfaceTemplateSticky: false
accessSessionInterfaceTemplateStickyTimer: 0
accessSessionMonitor: false
accessSessionPortControl: string
authenticationPeriodic: false
authenticationTimerReauthenticateRange: 0
authenticationTimerReauthenticateServer: false
ctsManual: false
ctsManualPolicyStaticSgt: 0
ctsManualPolicyStaticTrusted: false
ctsManualPropagateSgt: false
ctsRoleBasedEnforcement: false
deleteMode: string
device: string
deviceTracking: false
deviceTrackingAttachPolicies:
- policyName: string
vlanRange: string
deviceTrackingVlanRange: string
dot1xMaxReauthReq: 0
dot1xMaxReq: 0
dot1xPae: string
dot1xTimeoutTxPeriod: 0
ipAccessGroups:
- accessList: string
direction: string
ipDhcpSnoopingLimitRate: 0
ipDhcpSnoopingTrust: false
loadInterval: 0
mab: false
mabEap: false
servicePolicyInput: string
servicePolicyOutput: string
servicePolicyTypeControlSubscriber: string
sourceTemplate: string
spanningTreeBpduguardEnable: false
spanningTreePortfast: false
spanningTreePortfastDisable: false
spanningTreePortfastEdge: false
spanningTreePortfastNetwork: false
spanningTreeServicePolicy: false
stormControlActionShutdown: false
stormControlActionTrap: false
stormControlBroadcastLevelBpsThreshold: 0
stormControlBroadcastLevelPpsThreshold: string
stormControlBroadcastLevelThreshold: 0
stormControlMulticastLevelBpsThreshold: 0
stormControlMulticastLevelPpsThreshold: string
stormControlMulticastLevelThreshold: 0
subscriberAgingInactivityTimerProbe: false
subscriberAgingInactivityTimerValue: 0
subscriberAgingProbe: false
switchportAccessVlan: 0
switchportBlockUnicast: false
switchportModeAccess: false
switchportModeTrunk: false
switchportNonegotiate: false
switchportPortSecurity: false
switchportPortSecurityAgingStatic: false
switchportPortSecurityAgingTime: 0
switchportPortSecurityAgingType: false
switchportPortSecurityAgingTypeInactivity: false
switchportPortSecurityMaximumRanges:
- range: 0
vlan: false
vlanAccess: false
switchportPortSecurityViolationProtect: false
switchportPortSecurityViolationRestrict: false
switchportPortSecurityViolationShutdown: false
switchportPrivateVlanHostAssociationPrimaryRange: 0
switchportPrivateVlanHostAssociationSecondaryRange: 0
switchportTrunkAllowedVlans: string
switchportTrunkAllowedVlansAll: false
switchportTrunkAllowedVlansNone: false
switchportTrunkNativeVlanTag: false
switchportTrunkNativeVlanVlanId: 0
switchportVoiceVlan: 0
templateName: string
Template Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Template resource accepts the following input properties:
- Template
Name string - Template name
- Access
Session boolClosed - Enable closed access on port (disabled by default, i.e. open access)
- Access
Session stringControl Direction - Set the control-direction on the interface - Choices:
both
,in
- Access
Session stringHost Mode - Set the Host mode for authentication on this interface - Choices:
multi-auth
,multi-domain
,multi-host
,single-host
- Access
Session boolInterface Template Sticky - Interface templates set to sticky
- Access
Session intInterface Template Sticky Timer - Sticky timer value - Range:
1
-65535
- Access
Session boolMonitor - Apply template to monitor access sessions on the port
- Access
Session stringPort Control - Set the port-control value - Choices:
auto
,force-authorized
,force-unauthorized
- Authentication
Periodic bool - Enable or Disable Reauthentication for this port
- Authentication
Timer intReauthenticate Range - Enter a value between 1 and 65535 - Range:
1
-65535
- Authentication
Timer boolReauthenticate Server - Obtain re-authentication timeout value from the server
- Cts
Manual bool - Supply local configuration for CTS parameters
- Cts
Manual intPolicy Static Sgt - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range:
2
-65519
- Cts
Manual boolPolicy Static Trusted - Trust the Source Group Tags (SGT) that the peer uses for sending
- Cts
Manual boolPropagate Sgt - CTS SGT Propagation configuration
- Cts
Role boolBased Enforcement - Enable Role-based Access Control enforcement
- Delete
Mode string - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is
all
. - Choices:all
,attributes
- Device string
- A device name from the provider configuration.
- Device
Tracking bool - Configure device-tracking on the interface
- Device
Tracking List<Lbrlabs.Attach Policies Pulumi Package. Iosxe. Inputs. Template Device Tracking Attach Policy> - policy name for device tracking
- Device
Tracking stringVlan Range - VLAN IDs of the VLANs for which this policy applies
- Dot1x
Max intReauth Req - Max No. of Reauthentication Attempts - Range:
1
-10
- Dot1x
Max intReq - Max No. of Retries - Range:
1
-10
- Dot1x
Pae string - Set 802.1x interface pae type - Choices:
authenticator
,both
,supplicant
- Dot1x
Timeout intTx Period - Timeout for supplicant retries - Range:
1
-65535
- Ip
Access List<Lbrlabs.Groups Pulumi Package. Iosxe. Inputs. Template Ip Access Group> - Access control list for IP packets
- Ip
Dhcp intSnooping Limit Rate - DHCP snooping rate limit - Range:
1
-2048
- Ip
Dhcp boolSnooping Trust - DHCP Snooping trust config
- Load
Interval int - Load interval delay in seconds - Range:
30
-600
- Mab bool
- MAC Authentication Bypass Interface Config Commands
- Mab
Eap bool - Use EAP authentication for MAC Auth Bypass
- Service
Policy stringInput - policy-map name
- Service
Policy stringOutput - policy-map name
- Service
Policy stringType Control Subscriber - Apply a subscriber control policy to the interface
- Source
Template string - Get config from a template
- Spanning
Tree boolBpduguard Enable - Enable BPDU guard for this interface
- Spanning
Tree boolPortfast - Portfast options for the interface
- Spanning
Tree boolPortfast Disable - Disable portfast for this interface
- Spanning
Tree boolPortfast Edge - Enable portfast edge on the interface
- Spanning
Tree boolPortfast Network - Enable portfast network on the interface
- Spanning
Tree boolService Policy - help
- Storm
Control boolAction Shutdown - Shutdown this interface if a storm occurs
- Storm
Control boolAction Trap - Send SNMP trap if a storm occurs
- Storm
Control doubleBroadcast Level Bps Threshold - Enter threshold
- Storm
Control stringBroadcast Level Pps Threshold - Enter threshold
- Storm
Control doubleBroadcast Level Threshold - Enter threshold
- Storm
Control doubleMulticast Level Bps Threshold - Enter threshold
- Storm
Control stringMulticast Level Pps Threshold - Enter threshold
- Storm
Control doubleMulticast Level Threshold - Enter threshold
- Subscriber
Aging boolInactivity Timer Probe - ARP probe
- Subscriber
Aging intInactivity Timer Value - Enter a value between 1 and 65535 in seconds - Range:
1
-65535
- Subscriber
Aging boolProbe - ARP probe
- Switchport
Access intVlan - VLAN ID of the VLAN when this port is in access mode - Range:
1
-4094
- Switchport
Block boolUnicast - Block unknown unicast addresses
- Switchport
Mode boolAccess - Set trunking mode to ACCESS unconditionally
- Switchport
Mode boolTrunk - Set trunking mode to TRUNK unconditionally
- Switchport
Nonegotiate bool - Device will not engage in negotiation protocol on this interface
- Switchport
Port boolSecurity - Security related command
- Switchport
Port boolSecurity Aging Static - Enable aging for configured secure addresses
- Switchport
Port intSecurity Aging Time - Port-security aging time - Range:
1
-1440
- Switchport
Port boolSecurity Aging Type - Port-security aging type
- Switchport
Port boolSecurity Aging Type Inactivity - Aging based on inactivity time period
- Switchport
Port List<Lbrlabs.Security Maximum Ranges Pulumi Package. Iosxe. Inputs. Template Switchport Port Security Maximum Range> - Switchport
Port boolSecurity Violation Protect - Security violation protect mode
- Switchport
Port boolSecurity Violation Restrict - Security violation restrict mode
- Switchport
Port boolSecurity Violation Shutdown - Security violation shutdown mode
- Switchport
Private intVlan Host Association Primary Range - Primary normal range VLAN ID of the private VLAN port association - Range:
2
-1001
- Switchport
Private intVlan Host Association Secondary Range - Secondary normal range VLAN ID of the private VLAN host port association - Range:
2
-1001
- Switchport
Trunk stringAllowed Vlans - VLAN IDs of the allowed VLANs when this port is in trunking mode
- Switchport
Trunk boolAllowed Vlans All - all VLANs
- Switchport
Trunk boolAllowed Vlans None - no VLANs
- Switchport
Trunk boolNative Vlan Tag - Set native VLAN tagging state
- Switchport
Trunk intNative Vlan Vlan Id - VLAN ID of the native VLAN when this port is in trunking mode - Range:
1
-4094
- Switchport
Voice intVlan - Vlan for voice traffic - Range:
1
-4094
- Template
Name string - Template name
- Access
Session boolClosed - Enable closed access on port (disabled by default, i.e. open access)
- Access
Session stringControl Direction - Set the control-direction on the interface - Choices:
both
,in
- Access
Session stringHost Mode - Set the Host mode for authentication on this interface - Choices:
multi-auth
,multi-domain
,multi-host
,single-host
- Access
Session boolInterface Template Sticky - Interface templates set to sticky
- Access
Session intInterface Template Sticky Timer - Sticky timer value - Range:
1
-65535
- Access
Session boolMonitor - Apply template to monitor access sessions on the port
- Access
Session stringPort Control - Set the port-control value - Choices:
auto
,force-authorized
,force-unauthorized
- Authentication
Periodic bool - Enable or Disable Reauthentication for this port
- Authentication
Timer intReauthenticate Range - Enter a value between 1 and 65535 - Range:
1
-65535
- Authentication
Timer boolReauthenticate Server - Obtain re-authentication timeout value from the server
- Cts
Manual bool - Supply local configuration for CTS parameters
- Cts
Manual intPolicy Static Sgt - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range:
2
-65519
- Cts
Manual boolPolicy Static Trusted - Trust the Source Group Tags (SGT) that the peer uses for sending
- Cts
Manual boolPropagate Sgt - CTS SGT Propagation configuration
- Cts
Role boolBased Enforcement - Enable Role-based Access Control enforcement
- Delete
Mode string - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is
all
. - Choices:all
,attributes
- Device string
- A device name from the provider configuration.
- Device
Tracking bool - Configure device-tracking on the interface
- Device
Tracking []TemplateAttach Policies Device Tracking Attach Policy Args - policy name for device tracking
- Device
Tracking stringVlan Range - VLAN IDs of the VLANs for which this policy applies
- Dot1x
Max intReauth Req - Max No. of Reauthentication Attempts - Range:
1
-10
- Dot1x
Max intReq - Max No. of Retries - Range:
1
-10
- Dot1x
Pae string - Set 802.1x interface pae type - Choices:
authenticator
,both
,supplicant
- Dot1x
Timeout intTx Period - Timeout for supplicant retries - Range:
1
-65535
- Ip
Access []TemplateGroups Ip Access Group Args - Access control list for IP packets
- Ip
Dhcp intSnooping Limit Rate - DHCP snooping rate limit - Range:
1
-2048
- Ip
Dhcp boolSnooping Trust - DHCP Snooping trust config
- Load
Interval int - Load interval delay in seconds - Range:
30
-600
- Mab bool
- MAC Authentication Bypass Interface Config Commands
- Mab
Eap bool - Use EAP authentication for MAC Auth Bypass
- Service
Policy stringInput - policy-map name
- Service
Policy stringOutput - policy-map name
- Service
Policy stringType Control Subscriber - Apply a subscriber control policy to the interface
- Source
Template string - Get config from a template
- Spanning
Tree boolBpduguard Enable - Enable BPDU guard for this interface
- Spanning
Tree boolPortfast - Portfast options for the interface
- Spanning
Tree boolPortfast Disable - Disable portfast for this interface
- Spanning
Tree boolPortfast Edge - Enable portfast edge on the interface
- Spanning
Tree boolPortfast Network - Enable portfast network on the interface
- Spanning
Tree boolService Policy - help
- Storm
Control boolAction Shutdown - Shutdown this interface if a storm occurs
- Storm
Control boolAction Trap - Send SNMP trap if a storm occurs
- Storm
Control float64Broadcast Level Bps Threshold - Enter threshold
- Storm
Control stringBroadcast Level Pps Threshold - Enter threshold
- Storm
Control float64Broadcast Level Threshold - Enter threshold
- Storm
Control float64Multicast Level Bps Threshold - Enter threshold
- Storm
Control stringMulticast Level Pps Threshold - Enter threshold
- Storm
Control float64Multicast Level Threshold - Enter threshold
- Subscriber
Aging boolInactivity Timer Probe - ARP probe
- Subscriber
Aging intInactivity Timer Value - Enter a value between 1 and 65535 in seconds - Range:
1
-65535
- Subscriber
Aging boolProbe - ARP probe
- Switchport
Access intVlan - VLAN ID of the VLAN when this port is in access mode - Range:
1
-4094
- Switchport
Block boolUnicast - Block unknown unicast addresses
- Switchport
Mode boolAccess - Set trunking mode to ACCESS unconditionally
- Switchport
Mode boolTrunk - Set trunking mode to TRUNK unconditionally
- Switchport
Nonegotiate bool - Device will not engage in negotiation protocol on this interface
- Switchport
Port boolSecurity - Security related command
- Switchport
Port boolSecurity Aging Static - Enable aging for configured secure addresses
- Switchport
Port intSecurity Aging Time - Port-security aging time - Range:
1
-1440
- Switchport
Port boolSecurity Aging Type - Port-security aging type
- Switchport
Port boolSecurity Aging Type Inactivity - Aging based on inactivity time period
- Switchport
Port []TemplateSecurity Maximum Ranges Switchport Port Security Maximum Range Args - Switchport
Port boolSecurity Violation Protect - Security violation protect mode
- Switchport
Port boolSecurity Violation Restrict - Security violation restrict mode
- Switchport
Port boolSecurity Violation Shutdown - Security violation shutdown mode
- Switchport
Private intVlan Host Association Primary Range - Primary normal range VLAN ID of the private VLAN port association - Range:
2
-1001
- Switchport
Private intVlan Host Association Secondary Range - Secondary normal range VLAN ID of the private VLAN host port association - Range:
2
-1001
- Switchport
Trunk stringAllowed Vlans - VLAN IDs of the allowed VLANs when this port is in trunking mode
- Switchport
Trunk boolAllowed Vlans All - all VLANs
- Switchport
Trunk boolAllowed Vlans None - no VLANs
- Switchport
Trunk boolNative Vlan Tag - Set native VLAN tagging state
- Switchport
Trunk intNative Vlan Vlan Id - VLAN ID of the native VLAN when this port is in trunking mode - Range:
1
-4094
- Switchport
Voice intVlan - Vlan for voice traffic - Range:
1
-4094
- template
Name String - Template name
- access
Session BooleanClosed - Enable closed access on port (disabled by default, i.e. open access)
- access
Session StringControl Direction - Set the control-direction on the interface - Choices:
both
,in
- access
Session StringHost Mode - Set the Host mode for authentication on this interface - Choices:
multi-auth
,multi-domain
,multi-host
,single-host
- access
Session BooleanInterface Template Sticky - Interface templates set to sticky
- access
Session IntegerInterface Template Sticky Timer - Sticky timer value - Range:
1
-65535
- access
Session BooleanMonitor - Apply template to monitor access sessions on the port
- access
Session StringPort Control - Set the port-control value - Choices:
auto
,force-authorized
,force-unauthorized
- authentication
Periodic Boolean - Enable or Disable Reauthentication for this port
- authentication
Timer IntegerReauthenticate Range - Enter a value between 1 and 65535 - Range:
1
-65535
- authentication
Timer BooleanReauthenticate Server - Obtain re-authentication timeout value from the server
- cts
Manual Boolean - Supply local configuration for CTS parameters
- cts
Manual IntegerPolicy Static Sgt - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range:
2
-65519
- cts
Manual BooleanPolicy Static Trusted - Trust the Source Group Tags (SGT) that the peer uses for sending
- cts
Manual BooleanPropagate Sgt - CTS SGT Propagation configuration
- cts
Role BooleanBased Enforcement - Enable Role-based Access Control enforcement
- delete
Mode String - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is
all
. - Choices:all
,attributes
- device String
- A device name from the provider configuration.
- device
Tracking Boolean - Configure device-tracking on the interface
- device
Tracking List<TemplateAttach Policies Device Tracking Attach Policy> - policy name for device tracking
- device
Tracking StringVlan Range - VLAN IDs of the VLANs for which this policy applies
- dot1x
Max IntegerReauth Req - Max No. of Reauthentication Attempts - Range:
1
-10
- dot1x
Max IntegerReq - Max No. of Retries - Range:
1
-10
- dot1x
Pae String - Set 802.1x interface pae type - Choices:
authenticator
,both
,supplicant
- dot1x
Timeout IntegerTx Period - Timeout for supplicant retries - Range:
1
-65535
- ip
Access List<TemplateGroups Ip Access Group> - Access control list for IP packets
- ip
Dhcp IntegerSnooping Limit Rate - DHCP snooping rate limit - Range:
1
-2048
- ip
Dhcp BooleanSnooping Trust - DHCP Snooping trust config
- load
Interval Integer - Load interval delay in seconds - Range:
30
-600
- mab Boolean
- MAC Authentication Bypass Interface Config Commands
- mab
Eap Boolean - Use EAP authentication for MAC Auth Bypass
- service
Policy StringInput - policy-map name
- service
Policy StringOutput - policy-map name
- service
Policy StringType Control Subscriber - Apply a subscriber control policy to the interface
- source
Template String - Get config from a template
- spanning
Tree BooleanBpduguard Enable - Enable BPDU guard for this interface
- spanning
Tree BooleanPortfast - Portfast options for the interface
- spanning
Tree BooleanPortfast Disable - Disable portfast for this interface
- spanning
Tree BooleanPortfast Edge - Enable portfast edge on the interface
- spanning
Tree BooleanPortfast Network - Enable portfast network on the interface
- spanning
Tree BooleanService Policy - help
- storm
Control BooleanAction Shutdown - Shutdown this interface if a storm occurs
- storm
Control BooleanAction Trap - Send SNMP trap if a storm occurs
- storm
Control DoubleBroadcast Level Bps Threshold - Enter threshold
- storm
Control StringBroadcast Level Pps Threshold - Enter threshold
- storm
Control DoubleBroadcast Level Threshold - Enter threshold
- storm
Control DoubleMulticast Level Bps Threshold - Enter threshold
- storm
Control StringMulticast Level Pps Threshold - Enter threshold
- storm
Control DoubleMulticast Level Threshold - Enter threshold
- subscriber
Aging BooleanInactivity Timer Probe - ARP probe
- subscriber
Aging IntegerInactivity Timer Value - Enter a value between 1 and 65535 in seconds - Range:
1
-65535
- subscriber
Aging BooleanProbe - ARP probe
- switchport
Access IntegerVlan - VLAN ID of the VLAN when this port is in access mode - Range:
1
-4094
- switchport
Block BooleanUnicast - Block unknown unicast addresses
- switchport
Mode BooleanAccess - Set trunking mode to ACCESS unconditionally
- switchport
Mode BooleanTrunk - Set trunking mode to TRUNK unconditionally
- switchport
Nonegotiate Boolean - Device will not engage in negotiation protocol on this interface
- switchport
Port BooleanSecurity - Security related command
- switchport
Port BooleanSecurity Aging Static - Enable aging for configured secure addresses
- switchport
Port IntegerSecurity Aging Time - Port-security aging time - Range:
1
-1440
- switchport
Port BooleanSecurity Aging Type - Port-security aging type
- switchport
Port BooleanSecurity Aging Type Inactivity - Aging based on inactivity time period
- switchport
Port List<TemplateSecurity Maximum Ranges Switchport Port Security Maximum Range> - switchport
Port BooleanSecurity Violation Protect - Security violation protect mode
- switchport
Port BooleanSecurity Violation Restrict - Security violation restrict mode
- switchport
Port BooleanSecurity Violation Shutdown - Security violation shutdown mode
- switchport
Private IntegerVlan Host Association Primary Range - Primary normal range VLAN ID of the private VLAN port association - Range:
2
-1001
- switchport
Private IntegerVlan Host Association Secondary Range - Secondary normal range VLAN ID of the private VLAN host port association - Range:
2
-1001
- switchport
Trunk StringAllowed Vlans - VLAN IDs of the allowed VLANs when this port is in trunking mode
- switchport
Trunk BooleanAllowed Vlans All - all VLANs
- switchport
Trunk BooleanAllowed Vlans None - no VLANs
- switchport
Trunk BooleanNative Vlan Tag - Set native VLAN tagging state
- switchport
Trunk IntegerNative Vlan Vlan Id - VLAN ID of the native VLAN when this port is in trunking mode - Range:
1
-4094
- switchport
Voice IntegerVlan - Vlan for voice traffic - Range:
1
-4094
- template
Name string - Template name
- access
Session booleanClosed - Enable closed access on port (disabled by default, i.e. open access)
- access
Session stringControl Direction - Set the control-direction on the interface - Choices:
both
,in
- access
Session stringHost Mode - Set the Host mode for authentication on this interface - Choices:
multi-auth
,multi-domain
,multi-host
,single-host
- access
Session booleanInterface Template Sticky - Interface templates set to sticky
- access
Session numberInterface Template Sticky Timer - Sticky timer value - Range:
1
-65535
- access
Session booleanMonitor - Apply template to monitor access sessions on the port
- access
Session stringPort Control - Set the port-control value - Choices:
auto
,force-authorized
,force-unauthorized
- authentication
Periodic boolean - Enable or Disable Reauthentication for this port
- authentication
Timer numberReauthenticate Range - Enter a value between 1 and 65535 - Range:
1
-65535
- authentication
Timer booleanReauthenticate Server - Obtain re-authentication timeout value from the server
- cts
Manual boolean - Supply local configuration for CTS parameters
- cts
Manual numberPolicy Static Sgt - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range:
2
-65519
- cts
Manual booleanPolicy Static Trusted - Trust the Source Group Tags (SGT) that the peer uses for sending
- cts
Manual booleanPropagate Sgt - CTS SGT Propagation configuration
- cts
Role booleanBased Enforcement - Enable Role-based Access Control enforcement
- delete
Mode string - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is
all
. - Choices:all
,attributes
- device string
- A device name from the provider configuration.
- device
Tracking boolean - Configure device-tracking on the interface
- device
Tracking TemplateAttach Policies Device Tracking Attach Policy[] - policy name for device tracking
- device
Tracking stringVlan Range - VLAN IDs of the VLANs for which this policy applies
- dot1x
Max numberReauth Req - Max No. of Reauthentication Attempts - Range:
1
-10
- dot1x
Max numberReq - Max No. of Retries - Range:
1
-10
- dot1x
Pae string - Set 802.1x interface pae type - Choices:
authenticator
,both
,supplicant
- dot1x
Timeout numberTx Period - Timeout for supplicant retries - Range:
1
-65535
- ip
Access TemplateGroups Ip Access Group[] - Access control list for IP packets
- ip
Dhcp numberSnooping Limit Rate - DHCP snooping rate limit - Range:
1
-2048
- ip
Dhcp booleanSnooping Trust - DHCP Snooping trust config
- load
Interval number - Load interval delay in seconds - Range:
30
-600
- mab boolean
- MAC Authentication Bypass Interface Config Commands
- mab
Eap boolean - Use EAP authentication for MAC Auth Bypass
- service
Policy stringInput - policy-map name
- service
Policy stringOutput - policy-map name
- service
Policy stringType Control Subscriber - Apply a subscriber control policy to the interface
- source
Template string - Get config from a template
- spanning
Tree booleanBpduguard Enable - Enable BPDU guard for this interface
- spanning
Tree booleanPortfast - Portfast options for the interface
- spanning
Tree booleanPortfast Disable - Disable portfast for this interface
- spanning
Tree booleanPortfast Edge - Enable portfast edge on the interface
- spanning
Tree booleanPortfast Network - Enable portfast network on the interface
- spanning
Tree booleanService Policy - help
- storm
Control booleanAction Shutdown - Shutdown this interface if a storm occurs
- storm
Control booleanAction Trap - Send SNMP trap if a storm occurs
- storm
Control numberBroadcast Level Bps Threshold - Enter threshold
- storm
Control stringBroadcast Level Pps Threshold - Enter threshold
- storm
Control numberBroadcast Level Threshold - Enter threshold
- storm
Control numberMulticast Level Bps Threshold - Enter threshold
- storm
Control stringMulticast Level Pps Threshold - Enter threshold
- storm
Control numberMulticast Level Threshold - Enter threshold
- subscriber
Aging booleanInactivity Timer Probe - ARP probe
- subscriber
Aging numberInactivity Timer Value - Enter a value between 1 and 65535 in seconds - Range:
1
-65535
- subscriber
Aging booleanProbe - ARP probe
- switchport
Access numberVlan - VLAN ID of the VLAN when this port is in access mode - Range:
1
-4094
- switchport
Block booleanUnicast - Block unknown unicast addresses
- switchport
Mode booleanAccess - Set trunking mode to ACCESS unconditionally
- switchport
Mode booleanTrunk - Set trunking mode to TRUNK unconditionally
- switchport
Nonegotiate boolean - Device will not engage in negotiation protocol on this interface
- switchport
Port booleanSecurity - Security related command
- switchport
Port booleanSecurity Aging Static - Enable aging for configured secure addresses
- switchport
Port numberSecurity Aging Time - Port-security aging time - Range:
1
-1440
- switchport
Port booleanSecurity Aging Type - Port-security aging type
- switchport
Port booleanSecurity Aging Type Inactivity - Aging based on inactivity time period
- switchport
Port TemplateSecurity Maximum Ranges Switchport Port Security Maximum Range[] - switchport
Port booleanSecurity Violation Protect - Security violation protect mode
- switchport
Port booleanSecurity Violation Restrict - Security violation restrict mode
- switchport
Port booleanSecurity Violation Shutdown - Security violation shutdown mode
- switchport
Private numberVlan Host Association Primary Range - Primary normal range VLAN ID of the private VLAN port association - Range:
2
-1001
- switchport
Private numberVlan Host Association Secondary Range - Secondary normal range VLAN ID of the private VLAN host port association - Range:
2
-1001
- switchport
Trunk stringAllowed Vlans - VLAN IDs of the allowed VLANs when this port is in trunking mode
- switchport
Trunk booleanAllowed Vlans All - all VLANs
- switchport
Trunk booleanAllowed Vlans None - no VLANs
- switchport
Trunk booleanNative Vlan Tag - Set native VLAN tagging state
- switchport
Trunk numberNative Vlan Vlan Id - VLAN ID of the native VLAN when this port is in trunking mode - Range:
1
-4094
- switchport
Voice numberVlan - Vlan for voice traffic - Range:
1
-4094
- template_
name str - Template name
- access_
session_ boolclosed - Enable closed access on port (disabled by default, i.e. open access)
- access_
session_ strcontrol_ direction - Set the control-direction on the interface - Choices:
both
,in
- access_
session_ strhost_ mode - Set the Host mode for authentication on this interface - Choices:
multi-auth
,multi-domain
,multi-host
,single-host
- access_
session_ boolinterface_ template_ sticky - Interface templates set to sticky
- access_
session_ intinterface_ template_ sticky_ timer - Sticky timer value - Range:
1
-65535
- access_
session_ boolmonitor - Apply template to monitor access sessions on the port
- access_
session_ strport_ control - Set the port-control value - Choices:
auto
,force-authorized
,force-unauthorized
- authentication_
periodic bool - Enable or Disable Reauthentication for this port
- authentication_
timer_ intreauthenticate_ range - Enter a value between 1 and 65535 - Range:
1
-65535
- authentication_
timer_ boolreauthenticate_ server - Obtain re-authentication timeout value from the server
- cts_
manual bool - Supply local configuration for CTS parameters
- cts_
manual_ intpolicy_ static_ sgt - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range:
2
-65519
- cts_
manual_ boolpolicy_ static_ trusted - Trust the Source Group Tags (SGT) that the peer uses for sending
- cts_
manual_ boolpropagate_ sgt - CTS SGT Propagation configuration
- cts_
role_ boolbased_ enforcement - Enable Role-based Access Control enforcement
- delete_
mode str - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is
all
. - Choices:all
,attributes
- device str
- A device name from the provider configuration.
- device_
tracking bool - Configure device-tracking on the interface
- device_
tracking_ Sequence[Templateattach_ policies Device Tracking Attach Policy Args] - policy name for device tracking
- device_
tracking_ strvlan_ range - VLAN IDs of the VLANs for which this policy applies
- dot1x_
max_ intreauth_ req - Max No. of Reauthentication Attempts - Range:
1
-10
- dot1x_
max_ intreq - Max No. of Retries - Range:
1
-10
- dot1x_
pae str - Set 802.1x interface pae type - Choices:
authenticator
,both
,supplicant
- dot1x_
timeout_ inttx_ period - Timeout for supplicant retries - Range:
1
-65535
- ip_
access_ Sequence[Templategroups Ip Access Group Args] - Access control list for IP packets
- ip_
dhcp_ intsnooping_ limit_ rate - DHCP snooping rate limit - Range:
1
-2048
- ip_
dhcp_ boolsnooping_ trust - DHCP Snooping trust config
- load_
interval int - Load interval delay in seconds - Range:
30
-600
- mab bool
- MAC Authentication Bypass Interface Config Commands
- mab_
eap bool - Use EAP authentication for MAC Auth Bypass
- service_
policy_ strinput - policy-map name
- service_
policy_ stroutput - policy-map name
- service_
policy_ strtype_ control_ subscriber - Apply a subscriber control policy to the interface
- source_
template str - Get config from a template
- spanning_
tree_ boolbpduguard_ enable - Enable BPDU guard for this interface
- spanning_
tree_ boolportfast - Portfast options for the interface
- spanning_
tree_ boolportfast_ disable - Disable portfast for this interface
- spanning_
tree_ boolportfast_ edge - Enable portfast edge on the interface
- spanning_
tree_ boolportfast_ network - Enable portfast network on the interface
- spanning_
tree_ boolservice_ policy - help
- storm_
control_ boolaction_ shutdown - Shutdown this interface if a storm occurs
- storm_
control_ boolaction_ trap - Send SNMP trap if a storm occurs
- storm_
control_ floatbroadcast_ level_ bps_ threshold - Enter threshold
- storm_
control_ strbroadcast_ level_ pps_ threshold - Enter threshold
- storm_
control_ floatbroadcast_ level_ threshold - Enter threshold
- storm_
control_ floatmulticast_ level_ bps_ threshold - Enter threshold
- storm_
control_ strmulticast_ level_ pps_ threshold - Enter threshold
- storm_
control_ floatmulticast_ level_ threshold - Enter threshold
- subscriber_
aging_ boolinactivity_ timer_ probe - ARP probe
- subscriber_
aging_ intinactivity_ timer_ value - Enter a value between 1 and 65535 in seconds - Range:
1
-65535
- subscriber_
aging_ boolprobe - ARP probe
- switchport_
access_ intvlan - VLAN ID of the VLAN when this port is in access mode - Range:
1
-4094
- switchport_
block_ boolunicast - Block unknown unicast addresses
- switchport_
mode_ boolaccess - Set trunking mode to ACCESS unconditionally
- switchport_
mode_ booltrunk - Set trunking mode to TRUNK unconditionally
- switchport_
nonegotiate bool - Device will not engage in negotiation protocol on this interface
- switchport_
port_ boolsecurity - Security related command
- switchport_
port_ boolsecurity_ aging_ static - Enable aging for configured secure addresses
- switchport_
port_ intsecurity_ aging_ time - Port-security aging time - Range:
1
-1440
- switchport_
port_ boolsecurity_ aging_ type - Port-security aging type
- switchport_
port_ boolsecurity_ aging_ type_ inactivity - Aging based on inactivity time period
- switchport_
port_ Sequence[Templatesecurity_ maximum_ ranges Switchport Port Security Maximum Range Args] - switchport_
port_ boolsecurity_ violation_ protect - Security violation protect mode
- switchport_
port_ boolsecurity_ violation_ restrict - Security violation restrict mode
- switchport_
port_ boolsecurity_ violation_ shutdown - Security violation shutdown mode
- switchport_
private_ intvlan_ host_ association_ primary_ range - Primary normal range VLAN ID of the private VLAN port association - Range:
2
-1001
- switchport_
private_ intvlan_ host_ association_ secondary_ range - Secondary normal range VLAN ID of the private VLAN host port association - Range:
2
-1001
- switchport_
trunk_ strallowed_ vlans - VLAN IDs of the allowed VLANs when this port is in trunking mode
- switchport_
trunk_ boolallowed_ vlans_ all - all VLANs
- switchport_
trunk_ boolallowed_ vlans_ none - no VLANs
- switchport_
trunk_ boolnative_ vlan_ tag - Set native VLAN tagging state
- switchport_
trunk_ intnative_ vlan_ vlan_ id - VLAN ID of the native VLAN when this port is in trunking mode - Range:
1
-4094
- switchport_
voice_ intvlan - Vlan for voice traffic - Range:
1
-4094
- template
Name String - Template name
- access
Session BooleanClosed - Enable closed access on port (disabled by default, i.e. open access)
- access
Session StringControl Direction - Set the control-direction on the interface - Choices:
both
,in
- access
Session StringHost Mode - Set the Host mode for authentication on this interface - Choices:
multi-auth
,multi-domain
,multi-host
,single-host
- access
Session BooleanInterface Template Sticky - Interface templates set to sticky
- access
Session NumberInterface Template Sticky Timer - Sticky timer value - Range:
1
-65535
- access
Session BooleanMonitor - Apply template to monitor access sessions on the port
- access
Session StringPort Control - Set the port-control value - Choices:
auto
,force-authorized
,force-unauthorized
- authentication
Periodic Boolean - Enable or Disable Reauthentication for this port
- authentication
Timer NumberReauthenticate Range - Enter a value between 1 and 65535 - Range:
1
-65535
- authentication
Timer BooleanReauthenticate Server - Obtain re-authentication timeout value from the server
- cts
Manual Boolean - Supply local configuration for CTS parameters
- cts
Manual NumberPolicy Static Sgt - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range:
2
-65519
- cts
Manual BooleanPolicy Static Trusted - Trust the Source Group Tags (SGT) that the peer uses for sending
- cts
Manual BooleanPropagate Sgt - CTS SGT Propagation configuration
- cts
Role BooleanBased Enforcement - Enable Role-based Access Control enforcement
- delete
Mode String - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is
all
. - Choices:all
,attributes
- device String
- A device name from the provider configuration.
- device
Tracking Boolean - Configure device-tracking on the interface
- device
Tracking List<Property Map>Attach Policies - policy name for device tracking
- device
Tracking StringVlan Range - VLAN IDs of the VLANs for which this policy applies
- dot1x
Max NumberReauth Req - Max No. of Reauthentication Attempts - Range:
1
-10
- dot1x
Max NumberReq - Max No. of Retries - Range:
1
-10
- dot1x
Pae String - Set 802.1x interface pae type - Choices:
authenticator
,both
,supplicant
- dot1x
Timeout NumberTx Period - Timeout for supplicant retries - Range:
1
-65535
- ip
Access List<Property Map>Groups - Access control list for IP packets
- ip
Dhcp NumberSnooping Limit Rate - DHCP snooping rate limit - Range:
1
-2048
- ip
Dhcp BooleanSnooping Trust - DHCP Snooping trust config
- load
Interval Number - Load interval delay in seconds - Range:
30
-600
- mab Boolean
- MAC Authentication Bypass Interface Config Commands
- mab
Eap Boolean - Use EAP authentication for MAC Auth Bypass
- service
Policy StringInput - policy-map name
- service
Policy StringOutput - policy-map name
- service
Policy StringType Control Subscriber - Apply a subscriber control policy to the interface
- source
Template String - Get config from a template
- spanning
Tree BooleanBpduguard Enable - Enable BPDU guard for this interface
- spanning
Tree BooleanPortfast - Portfast options for the interface
- spanning
Tree BooleanPortfast Disable - Disable portfast for this interface
- spanning
Tree BooleanPortfast Edge - Enable portfast edge on the interface
- spanning
Tree BooleanPortfast Network - Enable portfast network on the interface
- spanning
Tree BooleanService Policy - help
- storm
Control BooleanAction Shutdown - Shutdown this interface if a storm occurs
- storm
Control BooleanAction Trap - Send SNMP trap if a storm occurs
- storm
Control NumberBroadcast Level Bps Threshold - Enter threshold
- storm
Control StringBroadcast Level Pps Threshold - Enter threshold
- storm
Control NumberBroadcast Level Threshold - Enter threshold
- storm
Control NumberMulticast Level Bps Threshold - Enter threshold
- storm
Control StringMulticast Level Pps Threshold - Enter threshold
- storm
Control NumberMulticast Level Threshold - Enter threshold
- subscriber
Aging BooleanInactivity Timer Probe - ARP probe
- subscriber
Aging NumberInactivity Timer Value - Enter a value between 1 and 65535 in seconds - Range:
1
-65535
- subscriber
Aging BooleanProbe - ARP probe
- switchport
Access NumberVlan - VLAN ID of the VLAN when this port is in access mode - Range:
1
-4094
- switchport
Block BooleanUnicast - Block unknown unicast addresses
- switchport
Mode BooleanAccess - Set trunking mode to ACCESS unconditionally
- switchport
Mode BooleanTrunk - Set trunking mode to TRUNK unconditionally
- switchport
Nonegotiate Boolean - Device will not engage in negotiation protocol on this interface
- switchport
Port BooleanSecurity - Security related command
- switchport
Port BooleanSecurity Aging Static - Enable aging for configured secure addresses
- switchport
Port NumberSecurity Aging Time - Port-security aging time - Range:
1
-1440
- switchport
Port BooleanSecurity Aging Type - Port-security aging type
- switchport
Port BooleanSecurity Aging Type Inactivity - Aging based on inactivity time period
- switchport
Port List<Property Map>Security Maximum Ranges - switchport
Port BooleanSecurity Violation Protect - Security violation protect mode
- switchport
Port BooleanSecurity Violation Restrict - Security violation restrict mode
- switchport
Port BooleanSecurity Violation Shutdown - Security violation shutdown mode
- switchport
Private NumberVlan Host Association Primary Range - Primary normal range VLAN ID of the private VLAN port association - Range:
2
-1001
- switchport
Private NumberVlan Host Association Secondary Range - Secondary normal range VLAN ID of the private VLAN host port association - Range:
2
-1001
- switchport
Trunk StringAllowed Vlans - VLAN IDs of the allowed VLANs when this port is in trunking mode
- switchport
Trunk BooleanAllowed Vlans All - all VLANs
- switchport
Trunk BooleanAllowed Vlans None - no VLANs
- switchport
Trunk BooleanNative Vlan Tag - Set native VLAN tagging state
- switchport
Trunk NumberNative Vlan Vlan Id - VLAN ID of the native VLAN when this port is in trunking mode - Range:
1
-4094
- switchport
Voice NumberVlan - Vlan for voice traffic - Range:
1
-4094
Outputs
All input properties are implicitly available as output properties. Additionally, the Template resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Template Resource
Get an existing Template resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: TemplateState, opts?: CustomResourceOptions): Template
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
access_session_closed: Optional[bool] = None,
access_session_control_direction: Optional[str] = None,
access_session_host_mode: Optional[str] = None,
access_session_interface_template_sticky: Optional[bool] = None,
access_session_interface_template_sticky_timer: Optional[int] = None,
access_session_monitor: Optional[bool] = None,
access_session_port_control: Optional[str] = None,
authentication_periodic: Optional[bool] = None,
authentication_timer_reauthenticate_range: Optional[int] = None,
authentication_timer_reauthenticate_server: Optional[bool] = None,
cts_manual: Optional[bool] = None,
cts_manual_policy_static_sgt: Optional[int] = None,
cts_manual_policy_static_trusted: Optional[bool] = None,
cts_manual_propagate_sgt: Optional[bool] = None,
cts_role_based_enforcement: Optional[bool] = None,
delete_mode: Optional[str] = None,
device: Optional[str] = None,
device_tracking: Optional[bool] = None,
device_tracking_attach_policies: Optional[Sequence[TemplateDeviceTrackingAttachPolicyArgs]] = None,
device_tracking_vlan_range: Optional[str] = None,
dot1x_max_reauth_req: Optional[int] = None,
dot1x_max_req: Optional[int] = None,
dot1x_pae: Optional[str] = None,
dot1x_timeout_tx_period: Optional[int] = None,
ip_access_groups: Optional[Sequence[TemplateIpAccessGroupArgs]] = None,
ip_dhcp_snooping_limit_rate: Optional[int] = None,
ip_dhcp_snooping_trust: Optional[bool] = None,
load_interval: Optional[int] = None,
mab: Optional[bool] = None,
mab_eap: Optional[bool] = None,
service_policy_input: Optional[str] = None,
service_policy_output: Optional[str] = None,
service_policy_type_control_subscriber: Optional[str] = None,
source_template: Optional[str] = None,
spanning_tree_bpduguard_enable: Optional[bool] = None,
spanning_tree_portfast: Optional[bool] = None,
spanning_tree_portfast_disable: Optional[bool] = None,
spanning_tree_portfast_edge: Optional[bool] = None,
spanning_tree_portfast_network: Optional[bool] = None,
spanning_tree_service_policy: Optional[bool] = None,
storm_control_action_shutdown: Optional[bool] = None,
storm_control_action_trap: Optional[bool] = None,
storm_control_broadcast_level_bps_threshold: Optional[float] = None,
storm_control_broadcast_level_pps_threshold: Optional[str] = None,
storm_control_broadcast_level_threshold: Optional[float] = None,
storm_control_multicast_level_bps_threshold: Optional[float] = None,
storm_control_multicast_level_pps_threshold: Optional[str] = None,
storm_control_multicast_level_threshold: Optional[float] = None,
subscriber_aging_inactivity_timer_probe: Optional[bool] = None,
subscriber_aging_inactivity_timer_value: Optional[int] = None,
subscriber_aging_probe: Optional[bool] = None,
switchport_access_vlan: Optional[int] = None,
switchport_block_unicast: Optional[bool] = None,
switchport_mode_access: Optional[bool] = None,
switchport_mode_trunk: Optional[bool] = None,
switchport_nonegotiate: Optional[bool] = None,
switchport_port_security: Optional[bool] = None,
switchport_port_security_aging_static: Optional[bool] = None,
switchport_port_security_aging_time: Optional[int] = None,
switchport_port_security_aging_type: Optional[bool] = None,
switchport_port_security_aging_type_inactivity: Optional[bool] = None,
switchport_port_security_maximum_ranges: Optional[Sequence[TemplateSwitchportPortSecurityMaximumRangeArgs]] = None,
switchport_port_security_violation_protect: Optional[bool] = None,
switchport_port_security_violation_restrict: Optional[bool] = None,
switchport_port_security_violation_shutdown: Optional[bool] = None,
switchport_private_vlan_host_association_primary_range: Optional[int] = None,
switchport_private_vlan_host_association_secondary_range: Optional[int] = None,
switchport_trunk_allowed_vlans: Optional[str] = None,
switchport_trunk_allowed_vlans_all: Optional[bool] = None,
switchport_trunk_allowed_vlans_none: Optional[bool] = None,
switchport_trunk_native_vlan_tag: Optional[bool] = None,
switchport_trunk_native_vlan_vlan_id: Optional[int] = None,
switchport_voice_vlan: Optional[int] = None,
template_name: Optional[str] = None) -> Template
func GetTemplate(ctx *Context, name string, id IDInput, state *TemplateState, opts ...ResourceOption) (*Template, error)
public static Template Get(string name, Input<string> id, TemplateState? state, CustomResourceOptions? opts = null)
public static Template get(String name, Output<String> id, TemplateState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Access
Session boolClosed - Enable closed access on port (disabled by default, i.e. open access)
- Access
Session stringControl Direction - Set the control-direction on the interface - Choices:
both
,in
- Access
Session stringHost Mode - Set the Host mode for authentication on this interface - Choices:
multi-auth
,multi-domain
,multi-host
,single-host
- Access
Session boolInterface Template Sticky - Interface templates set to sticky
- Access
Session intInterface Template Sticky Timer - Sticky timer value - Range:
1
-65535
- Access
Session boolMonitor - Apply template to monitor access sessions on the port
- Access
Session stringPort Control - Set the port-control value - Choices:
auto
,force-authorized
,force-unauthorized
- Authentication
Periodic bool - Enable or Disable Reauthentication for this port
- Authentication
Timer intReauthenticate Range - Enter a value between 1 and 65535 - Range:
1
-65535
- Authentication
Timer boolReauthenticate Server - Obtain re-authentication timeout value from the server
- Cts
Manual bool - Supply local configuration for CTS parameters
- Cts
Manual intPolicy Static Sgt - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range:
2
-65519
- Cts
Manual boolPolicy Static Trusted - Trust the Source Group Tags (SGT) that the peer uses for sending
- Cts
Manual boolPropagate Sgt - CTS SGT Propagation configuration
- Cts
Role boolBased Enforcement - Enable Role-based Access Control enforcement
- Delete
Mode string - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is
all
. - Choices:all
,attributes
- Device string
- A device name from the provider configuration.
- Device
Tracking bool - Configure device-tracking on the interface
- Device
Tracking List<Lbrlabs.Attach Policies Pulumi Package. Iosxe. Inputs. Template Device Tracking Attach Policy> - policy name for device tracking
- Device
Tracking stringVlan Range - VLAN IDs of the VLANs for which this policy applies
- Dot1x
Max intReauth Req - Max No. of Reauthentication Attempts - Range:
1
-10
- Dot1x
Max intReq - Max No. of Retries - Range:
1
-10
- Dot1x
Pae string - Set 802.1x interface pae type - Choices:
authenticator
,both
,supplicant
- Dot1x
Timeout intTx Period - Timeout for supplicant retries - Range:
1
-65535
- Ip
Access List<Lbrlabs.Groups Pulumi Package. Iosxe. Inputs. Template Ip Access Group> - Access control list for IP packets
- Ip
Dhcp intSnooping Limit Rate - DHCP snooping rate limit - Range:
1
-2048
- Ip
Dhcp boolSnooping Trust - DHCP Snooping trust config
- Load
Interval int - Load interval delay in seconds - Range:
30
-600
- Mab bool
- MAC Authentication Bypass Interface Config Commands
- Mab
Eap bool - Use EAP authentication for MAC Auth Bypass
- Service
Policy stringInput - policy-map name
- Service
Policy stringOutput - policy-map name
- Service
Policy stringType Control Subscriber - Apply a subscriber control policy to the interface
- Source
Template string - Get config from a template
- Spanning
Tree boolBpduguard Enable - Enable BPDU guard for this interface
- Spanning
Tree boolPortfast - Portfast options for the interface
- Spanning
Tree boolPortfast Disable - Disable portfast for this interface
- Spanning
Tree boolPortfast Edge - Enable portfast edge on the interface
- Spanning
Tree boolPortfast Network - Enable portfast network on the interface
- Spanning
Tree boolService Policy - help
- Storm
Control boolAction Shutdown - Shutdown this interface if a storm occurs
- Storm
Control boolAction Trap - Send SNMP trap if a storm occurs
- Storm
Control doubleBroadcast Level Bps Threshold - Enter threshold
- Storm
Control stringBroadcast Level Pps Threshold - Enter threshold
- Storm
Control doubleBroadcast Level Threshold - Enter threshold
- Storm
Control doubleMulticast Level Bps Threshold - Enter threshold
- Storm
Control stringMulticast Level Pps Threshold - Enter threshold
- Storm
Control doubleMulticast Level Threshold - Enter threshold
- Subscriber
Aging boolInactivity Timer Probe - ARP probe
- Subscriber
Aging intInactivity Timer Value - Enter a value between 1 and 65535 in seconds - Range:
1
-65535
- Subscriber
Aging boolProbe - ARP probe
- Switchport
Access intVlan - VLAN ID of the VLAN when this port is in access mode - Range:
1
-4094
- Switchport
Block boolUnicast - Block unknown unicast addresses
- Switchport
Mode boolAccess - Set trunking mode to ACCESS unconditionally
- Switchport
Mode boolTrunk - Set trunking mode to TRUNK unconditionally
- Switchport
Nonegotiate bool - Device will not engage in negotiation protocol on this interface
- Switchport
Port boolSecurity - Security related command
- Switchport
Port boolSecurity Aging Static - Enable aging for configured secure addresses
- Switchport
Port intSecurity Aging Time - Port-security aging time - Range:
1
-1440
- Switchport
Port boolSecurity Aging Type - Port-security aging type
- Switchport
Port boolSecurity Aging Type Inactivity - Aging based on inactivity time period
- Switchport
Port List<Lbrlabs.Security Maximum Ranges Pulumi Package. Iosxe. Inputs. Template Switchport Port Security Maximum Range> - Switchport
Port boolSecurity Violation Protect - Security violation protect mode
- Switchport
Port boolSecurity Violation Restrict - Security violation restrict mode
- Switchport
Port boolSecurity Violation Shutdown - Security violation shutdown mode
- Switchport
Private intVlan Host Association Primary Range - Primary normal range VLAN ID of the private VLAN port association - Range:
2
-1001
- Switchport
Private intVlan Host Association Secondary Range - Secondary normal range VLAN ID of the private VLAN host port association - Range:
2
-1001
- Switchport
Trunk stringAllowed Vlans - VLAN IDs of the allowed VLANs when this port is in trunking mode
- Switchport
Trunk boolAllowed Vlans All - all VLANs
- Switchport
Trunk boolAllowed Vlans None - no VLANs
- Switchport
Trunk boolNative Vlan Tag - Set native VLAN tagging state
- Switchport
Trunk intNative Vlan Vlan Id - VLAN ID of the native VLAN when this port is in trunking mode - Range:
1
-4094
- Switchport
Voice intVlan - Vlan for voice traffic - Range:
1
-4094
- Template
Name string - Template name
- Access
Session boolClosed - Enable closed access on port (disabled by default, i.e. open access)
- Access
Session stringControl Direction - Set the control-direction on the interface - Choices:
both
,in
- Access
Session stringHost Mode - Set the Host mode for authentication on this interface - Choices:
multi-auth
,multi-domain
,multi-host
,single-host
- Access
Session boolInterface Template Sticky - Interface templates set to sticky
- Access
Session intInterface Template Sticky Timer - Sticky timer value - Range:
1
-65535
- Access
Session boolMonitor - Apply template to monitor access sessions on the port
- Access
Session stringPort Control - Set the port-control value - Choices:
auto
,force-authorized
,force-unauthorized
- Authentication
Periodic bool - Enable or Disable Reauthentication for this port
- Authentication
Timer intReauthenticate Range - Enter a value between 1 and 65535 - Range:
1
-65535
- Authentication
Timer boolReauthenticate Server - Obtain re-authentication timeout value from the server
- Cts
Manual bool - Supply local configuration for CTS parameters
- Cts
Manual intPolicy Static Sgt - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range:
2
-65519
- Cts
Manual boolPolicy Static Trusted - Trust the Source Group Tags (SGT) that the peer uses for sending
- Cts
Manual boolPropagate Sgt - CTS SGT Propagation configuration
- Cts
Role boolBased Enforcement - Enable Role-based Access Control enforcement
- Delete
Mode string - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is
all
. - Choices:all
,attributes
- Device string
- A device name from the provider configuration.
- Device
Tracking bool - Configure device-tracking on the interface
- Device
Tracking []TemplateAttach Policies Device Tracking Attach Policy Args - policy name for device tracking
- Device
Tracking stringVlan Range - VLAN IDs of the VLANs for which this policy applies
- Dot1x
Max intReauth Req - Max No. of Reauthentication Attempts - Range:
1
-10
- Dot1x
Max intReq - Max No. of Retries - Range:
1
-10
- Dot1x
Pae string - Set 802.1x interface pae type - Choices:
authenticator
,both
,supplicant
- Dot1x
Timeout intTx Period - Timeout for supplicant retries - Range:
1
-65535
- Ip
Access []TemplateGroups Ip Access Group Args - Access control list for IP packets
- Ip
Dhcp intSnooping Limit Rate - DHCP snooping rate limit - Range:
1
-2048
- Ip
Dhcp boolSnooping Trust - DHCP Snooping trust config
- Load
Interval int - Load interval delay in seconds - Range:
30
-600
- Mab bool
- MAC Authentication Bypass Interface Config Commands
- Mab
Eap bool - Use EAP authentication for MAC Auth Bypass
- Service
Policy stringInput - policy-map name
- Service
Policy stringOutput - policy-map name
- Service
Policy stringType Control Subscriber - Apply a subscriber control policy to the interface
- Source
Template string - Get config from a template
- Spanning
Tree boolBpduguard Enable - Enable BPDU guard for this interface
- Spanning
Tree boolPortfast - Portfast options for the interface
- Spanning
Tree boolPortfast Disable - Disable portfast for this interface
- Spanning
Tree boolPortfast Edge - Enable portfast edge on the interface
- Spanning
Tree boolPortfast Network - Enable portfast network on the interface
- Spanning
Tree boolService Policy - help
- Storm
Control boolAction Shutdown - Shutdown this interface if a storm occurs
- Storm
Control boolAction Trap - Send SNMP trap if a storm occurs
- Storm
Control float64Broadcast Level Bps Threshold - Enter threshold
- Storm
Control stringBroadcast Level Pps Threshold - Enter threshold
- Storm
Control float64Broadcast Level Threshold - Enter threshold
- Storm
Control float64Multicast Level Bps Threshold - Enter threshold
- Storm
Control stringMulticast Level Pps Threshold - Enter threshold
- Storm
Control float64Multicast Level Threshold - Enter threshold
- Subscriber
Aging boolInactivity Timer Probe - ARP probe
- Subscriber
Aging intInactivity Timer Value - Enter a value between 1 and 65535 in seconds - Range:
1
-65535
- Subscriber
Aging boolProbe - ARP probe
- Switchport
Access intVlan - VLAN ID of the VLAN when this port is in access mode - Range:
1
-4094
- Switchport
Block boolUnicast - Block unknown unicast addresses
- Switchport
Mode boolAccess - Set trunking mode to ACCESS unconditionally
- Switchport
Mode boolTrunk - Set trunking mode to TRUNK unconditionally
- Switchport
Nonegotiate bool - Device will not engage in negotiation protocol on this interface
- Switchport
Port boolSecurity - Security related command
- Switchport
Port boolSecurity Aging Static - Enable aging for configured secure addresses
- Switchport
Port intSecurity Aging Time - Port-security aging time - Range:
1
-1440
- Switchport
Port boolSecurity Aging Type - Port-security aging type
- Switchport
Port boolSecurity Aging Type Inactivity - Aging based on inactivity time period
- Switchport
Port []TemplateSecurity Maximum Ranges Switchport Port Security Maximum Range Args - Switchport
Port boolSecurity Violation Protect - Security violation protect mode
- Switchport
Port boolSecurity Violation Restrict - Security violation restrict mode
- Switchport
Port boolSecurity Violation Shutdown - Security violation shutdown mode
- Switchport
Private intVlan Host Association Primary Range - Primary normal range VLAN ID of the private VLAN port association - Range:
2
-1001
- Switchport
Private intVlan Host Association Secondary Range - Secondary normal range VLAN ID of the private VLAN host port association - Range:
2
-1001
- Switchport
Trunk stringAllowed Vlans - VLAN IDs of the allowed VLANs when this port is in trunking mode
- Switchport
Trunk boolAllowed Vlans All - all VLANs
- Switchport
Trunk boolAllowed Vlans None - no VLANs
- Switchport
Trunk boolNative Vlan Tag - Set native VLAN tagging state
- Switchport
Trunk intNative Vlan Vlan Id - VLAN ID of the native VLAN when this port is in trunking mode - Range:
1
-4094
- Switchport
Voice intVlan - Vlan for voice traffic - Range:
1
-4094
- Template
Name string - Template name
- access
Session BooleanClosed - Enable closed access on port (disabled by default, i.e. open access)
- access
Session StringControl Direction - Set the control-direction on the interface - Choices:
both
,in
- access
Session StringHost Mode - Set the Host mode for authentication on this interface - Choices:
multi-auth
,multi-domain
,multi-host
,single-host
- access
Session BooleanInterface Template Sticky - Interface templates set to sticky
- access
Session IntegerInterface Template Sticky Timer - Sticky timer value - Range:
1
-65535
- access
Session BooleanMonitor - Apply template to monitor access sessions on the port
- access
Session StringPort Control - Set the port-control value - Choices:
auto
,force-authorized
,force-unauthorized
- authentication
Periodic Boolean - Enable or Disable Reauthentication for this port
- authentication
Timer IntegerReauthenticate Range - Enter a value between 1 and 65535 - Range:
1
-65535
- authentication
Timer BooleanReauthenticate Server - Obtain re-authentication timeout value from the server
- cts
Manual Boolean - Supply local configuration for CTS parameters
- cts
Manual IntegerPolicy Static Sgt - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range:
2
-65519
- cts
Manual BooleanPolicy Static Trusted - Trust the Source Group Tags (SGT) that the peer uses for sending
- cts
Manual BooleanPropagate Sgt - CTS SGT Propagation configuration
- cts
Role BooleanBased Enforcement - Enable Role-based Access Control enforcement
- delete
Mode String - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is
all
. - Choices:all
,attributes
- device String
- A device name from the provider configuration.
- device
Tracking Boolean - Configure device-tracking on the interface
- device
Tracking List<TemplateAttach Policies Device Tracking Attach Policy> - policy name for device tracking
- device
Tracking StringVlan Range - VLAN IDs of the VLANs for which this policy applies
- dot1x
Max IntegerReauth Req - Max No. of Reauthentication Attempts - Range:
1
-10
- dot1x
Max IntegerReq - Max No. of Retries - Range:
1
-10
- dot1x
Pae String - Set 802.1x interface pae type - Choices:
authenticator
,both
,supplicant
- dot1x
Timeout IntegerTx Period - Timeout for supplicant retries - Range:
1
-65535
- ip
Access List<TemplateGroups Ip Access Group> - Access control list for IP packets
- ip
Dhcp IntegerSnooping Limit Rate - DHCP snooping rate limit - Range:
1
-2048
- ip
Dhcp BooleanSnooping Trust - DHCP Snooping trust config
- load
Interval Integer - Load interval delay in seconds - Range:
30
-600
- mab Boolean
- MAC Authentication Bypass Interface Config Commands
- mab
Eap Boolean - Use EAP authentication for MAC Auth Bypass
- service
Policy StringInput - policy-map name
- service
Policy StringOutput - policy-map name
- service
Policy StringType Control Subscriber - Apply a subscriber control policy to the interface
- source
Template String - Get config from a template
- spanning
Tree BooleanBpduguard Enable - Enable BPDU guard for this interface
- spanning
Tree BooleanPortfast - Portfast options for the interface
- spanning
Tree BooleanPortfast Disable - Disable portfast for this interface
- spanning
Tree BooleanPortfast Edge - Enable portfast edge on the interface
- spanning
Tree BooleanPortfast Network - Enable portfast network on the interface
- spanning
Tree BooleanService Policy - help
- storm
Control BooleanAction Shutdown - Shutdown this interface if a storm occurs
- storm
Control BooleanAction Trap - Send SNMP trap if a storm occurs
- storm
Control DoubleBroadcast Level Bps Threshold - Enter threshold
- storm
Control StringBroadcast Level Pps Threshold - Enter threshold
- storm
Control DoubleBroadcast Level Threshold - Enter threshold
- storm
Control DoubleMulticast Level Bps Threshold - Enter threshold
- storm
Control StringMulticast Level Pps Threshold - Enter threshold
- storm
Control DoubleMulticast Level Threshold - Enter threshold
- subscriber
Aging BooleanInactivity Timer Probe - ARP probe
- subscriber
Aging IntegerInactivity Timer Value - Enter a value between 1 and 65535 in seconds - Range:
1
-65535
- subscriber
Aging BooleanProbe - ARP probe
- switchport
Access IntegerVlan - VLAN ID of the VLAN when this port is in access mode - Range:
1
-4094
- switchport
Block BooleanUnicast - Block unknown unicast addresses
- switchport
Mode BooleanAccess - Set trunking mode to ACCESS unconditionally
- switchport
Mode BooleanTrunk - Set trunking mode to TRUNK unconditionally
- switchport
Nonegotiate Boolean - Device will not engage in negotiation protocol on this interface
- switchport
Port BooleanSecurity - Security related command
- switchport
Port BooleanSecurity Aging Static - Enable aging for configured secure addresses
- switchport
Port IntegerSecurity Aging Time - Port-security aging time - Range:
1
-1440
- switchport
Port BooleanSecurity Aging Type - Port-security aging type
- switchport
Port BooleanSecurity Aging Type Inactivity - Aging based on inactivity time period
- switchport
Port List<TemplateSecurity Maximum Ranges Switchport Port Security Maximum Range> - switchport
Port BooleanSecurity Violation Protect - Security violation protect mode
- switchport
Port BooleanSecurity Violation Restrict - Security violation restrict mode
- switchport
Port BooleanSecurity Violation Shutdown - Security violation shutdown mode
- switchport
Private IntegerVlan Host Association Primary Range - Primary normal range VLAN ID of the private VLAN port association - Range:
2
-1001
- switchport
Private IntegerVlan Host Association Secondary Range - Secondary normal range VLAN ID of the private VLAN host port association - Range:
2
-1001
- switchport
Trunk StringAllowed Vlans - VLAN IDs of the allowed VLANs when this port is in trunking mode
- switchport
Trunk BooleanAllowed Vlans All - all VLANs
- switchport
Trunk BooleanAllowed Vlans None - no VLANs
- switchport
Trunk BooleanNative Vlan Tag - Set native VLAN tagging state
- switchport
Trunk IntegerNative Vlan Vlan Id - VLAN ID of the native VLAN when this port is in trunking mode - Range:
1
-4094
- switchport
Voice IntegerVlan - Vlan for voice traffic - Range:
1
-4094
- template
Name String - Template name
- access
Session booleanClosed - Enable closed access on port (disabled by default, i.e. open access)
- access
Session stringControl Direction - Set the control-direction on the interface - Choices:
both
,in
- access
Session stringHost Mode - Set the Host mode for authentication on this interface - Choices:
multi-auth
,multi-domain
,multi-host
,single-host
- access
Session booleanInterface Template Sticky - Interface templates set to sticky
- access
Session numberInterface Template Sticky Timer - Sticky timer value - Range:
1
-65535
- access
Session booleanMonitor - Apply template to monitor access sessions on the port
- access
Session stringPort Control - Set the port-control value - Choices:
auto
,force-authorized
,force-unauthorized
- authentication
Periodic boolean - Enable or Disable Reauthentication for this port
- authentication
Timer numberReauthenticate Range - Enter a value between 1 and 65535 - Range:
1
-65535
- authentication
Timer booleanReauthenticate Server - Obtain re-authentication timeout value from the server
- cts
Manual boolean - Supply local configuration for CTS parameters
- cts
Manual numberPolicy Static Sgt - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range:
2
-65519
- cts
Manual booleanPolicy Static Trusted - Trust the Source Group Tags (SGT) that the peer uses for sending
- cts
Manual booleanPropagate Sgt - CTS SGT Propagation configuration
- cts
Role booleanBased Enforcement - Enable Role-based Access Control enforcement
- delete
Mode string - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is
all
. - Choices:all
,attributes
- device string
- A device name from the provider configuration.
- device
Tracking boolean - Configure device-tracking on the interface
- device
Tracking TemplateAttach Policies Device Tracking Attach Policy[] - policy name for device tracking
- device
Tracking stringVlan Range - VLAN IDs of the VLANs for which this policy applies
- dot1x
Max numberReauth Req - Max No. of Reauthentication Attempts - Range:
1
-10
- dot1x
Max numberReq - Max No. of Retries - Range:
1
-10
- dot1x
Pae string - Set 802.1x interface pae type - Choices:
authenticator
,both
,supplicant
- dot1x
Timeout numberTx Period - Timeout for supplicant retries - Range:
1
-65535
- ip
Access TemplateGroups Ip Access Group[] - Access control list for IP packets
- ip
Dhcp numberSnooping Limit Rate - DHCP snooping rate limit - Range:
1
-2048
- ip
Dhcp booleanSnooping Trust - DHCP Snooping trust config
- load
Interval number - Load interval delay in seconds - Range:
30
-600
- mab boolean
- MAC Authentication Bypass Interface Config Commands
- mab
Eap boolean - Use EAP authentication for MAC Auth Bypass
- service
Policy stringInput - policy-map name
- service
Policy stringOutput - policy-map name
- service
Policy stringType Control Subscriber - Apply a subscriber control policy to the interface
- source
Template string - Get config from a template
- spanning
Tree booleanBpduguard Enable - Enable BPDU guard for this interface
- spanning
Tree booleanPortfast - Portfast options for the interface
- spanning
Tree booleanPortfast Disable - Disable portfast for this interface
- spanning
Tree booleanPortfast Edge - Enable portfast edge on the interface
- spanning
Tree booleanPortfast Network - Enable portfast network on the interface
- spanning
Tree booleanService Policy - help
- storm
Control booleanAction Shutdown - Shutdown this interface if a storm occurs
- storm
Control booleanAction Trap - Send SNMP trap if a storm occurs
- storm
Control numberBroadcast Level Bps Threshold - Enter threshold
- storm
Control stringBroadcast Level Pps Threshold - Enter threshold
- storm
Control numberBroadcast Level Threshold - Enter threshold
- storm
Control numberMulticast Level Bps Threshold - Enter threshold
- storm
Control stringMulticast Level Pps Threshold - Enter threshold
- storm
Control numberMulticast Level Threshold - Enter threshold
- subscriber
Aging booleanInactivity Timer Probe - ARP probe
- subscriber
Aging numberInactivity Timer Value - Enter a value between 1 and 65535 in seconds - Range:
1
-65535
- subscriber
Aging booleanProbe - ARP probe
- switchport
Access numberVlan - VLAN ID of the VLAN when this port is in access mode - Range:
1
-4094
- switchport
Block booleanUnicast - Block unknown unicast addresses
- switchport
Mode booleanAccess - Set trunking mode to ACCESS unconditionally
- switchport
Mode booleanTrunk - Set trunking mode to TRUNK unconditionally
- switchport
Nonegotiate boolean - Device will not engage in negotiation protocol on this interface
- switchport
Port booleanSecurity - Security related command
- switchport
Port booleanSecurity Aging Static - Enable aging for configured secure addresses
- switchport
Port numberSecurity Aging Time - Port-security aging time - Range:
1
-1440
- switchport
Port booleanSecurity Aging Type - Port-security aging type
- switchport
Port booleanSecurity Aging Type Inactivity - Aging based on inactivity time period
- switchport
Port TemplateSecurity Maximum Ranges Switchport Port Security Maximum Range[] - switchport
Port booleanSecurity Violation Protect - Security violation protect mode
- switchport
Port booleanSecurity Violation Restrict - Security violation restrict mode
- switchport
Port booleanSecurity Violation Shutdown - Security violation shutdown mode
- switchport
Private numberVlan Host Association Primary Range - Primary normal range VLAN ID of the private VLAN port association - Range:
2
-1001
- switchport
Private numberVlan Host Association Secondary Range - Secondary normal range VLAN ID of the private VLAN host port association - Range:
2
-1001
- switchport
Trunk stringAllowed Vlans - VLAN IDs of the allowed VLANs when this port is in trunking mode
- switchport
Trunk booleanAllowed Vlans All - all VLANs
- switchport
Trunk booleanAllowed Vlans None - no VLANs
- switchport
Trunk booleanNative Vlan Tag - Set native VLAN tagging state
- switchport
Trunk numberNative Vlan Vlan Id - VLAN ID of the native VLAN when this port is in trunking mode - Range:
1
-4094
- switchport
Voice numberVlan - Vlan for voice traffic - Range:
1
-4094
- template
Name string - Template name
- access_
session_ boolclosed - Enable closed access on port (disabled by default, i.e. open access)
- access_
session_ strcontrol_ direction - Set the control-direction on the interface - Choices:
both
,in
- access_
session_ strhost_ mode - Set the Host mode for authentication on this interface - Choices:
multi-auth
,multi-domain
,multi-host
,single-host
- access_
session_ boolinterface_ template_ sticky - Interface templates set to sticky
- access_
session_ intinterface_ template_ sticky_ timer - Sticky timer value - Range:
1
-65535
- access_
session_ boolmonitor - Apply template to monitor access sessions on the port
- access_
session_ strport_ control - Set the port-control value - Choices:
auto
,force-authorized
,force-unauthorized
- authentication_
periodic bool - Enable or Disable Reauthentication for this port
- authentication_
timer_ intreauthenticate_ range - Enter a value between 1 and 65535 - Range:
1
-65535
- authentication_
timer_ boolreauthenticate_ server - Obtain re-authentication timeout value from the server
- cts_
manual bool - Supply local configuration for CTS parameters
- cts_
manual_ intpolicy_ static_ sgt - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range:
2
-65519
- cts_
manual_ boolpolicy_ static_ trusted - Trust the Source Group Tags (SGT) that the peer uses for sending
- cts_
manual_ boolpropagate_ sgt - CTS SGT Propagation configuration
- cts_
role_ boolbased_ enforcement - Enable Role-based Access Control enforcement
- delete_
mode str - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is
all
. - Choices:all
,attributes
- device str
- A device name from the provider configuration.
- device_
tracking bool - Configure device-tracking on the interface
- device_
tracking_ Sequence[Templateattach_ policies Device Tracking Attach Policy Args] - policy name for device tracking
- device_
tracking_ strvlan_ range - VLAN IDs of the VLANs for which this policy applies
- dot1x_
max_ intreauth_ req - Max No. of Reauthentication Attempts - Range:
1
-10
- dot1x_
max_ intreq - Max No. of Retries - Range:
1
-10
- dot1x_
pae str - Set 802.1x interface pae type - Choices:
authenticator
,both
,supplicant
- dot1x_
timeout_ inttx_ period - Timeout for supplicant retries - Range:
1
-65535
- ip_
access_ Sequence[Templategroups Ip Access Group Args] - Access control list for IP packets
- ip_
dhcp_ intsnooping_ limit_ rate - DHCP snooping rate limit - Range:
1
-2048
- ip_
dhcp_ boolsnooping_ trust - DHCP Snooping trust config
- load_
interval int - Load interval delay in seconds - Range:
30
-600
- mab bool
- MAC Authentication Bypass Interface Config Commands
- mab_
eap bool - Use EAP authentication for MAC Auth Bypass
- service_
policy_ strinput - policy-map name
- service_
policy_ stroutput - policy-map name
- service_
policy_ strtype_ control_ subscriber - Apply a subscriber control policy to the interface
- source_
template str - Get config from a template
- spanning_
tree_ boolbpduguard_ enable - Enable BPDU guard for this interface
- spanning_
tree_ boolportfast - Portfast options for the interface
- spanning_
tree_ boolportfast_ disable - Disable portfast for this interface
- spanning_
tree_ boolportfast_ edge - Enable portfast edge on the interface
- spanning_
tree_ boolportfast_ network - Enable portfast network on the interface
- spanning_
tree_ boolservice_ policy - help
- storm_
control_ boolaction_ shutdown - Shutdown this interface if a storm occurs
- storm_
control_ boolaction_ trap - Send SNMP trap if a storm occurs
- storm_
control_ floatbroadcast_ level_ bps_ threshold - Enter threshold
- storm_
control_ strbroadcast_ level_ pps_ threshold - Enter threshold
- storm_
control_ floatbroadcast_ level_ threshold - Enter threshold
- storm_
control_ floatmulticast_ level_ bps_ threshold - Enter threshold
- storm_
control_ strmulticast_ level_ pps_ threshold - Enter threshold
- storm_
control_ floatmulticast_ level_ threshold - Enter threshold
- subscriber_
aging_ boolinactivity_ timer_ probe - ARP probe
- subscriber_
aging_ intinactivity_ timer_ value - Enter a value between 1 and 65535 in seconds - Range:
1
-65535
- subscriber_
aging_ boolprobe - ARP probe
- switchport_
access_ intvlan - VLAN ID of the VLAN when this port is in access mode - Range:
1
-4094
- switchport_
block_ boolunicast - Block unknown unicast addresses
- switchport_
mode_ boolaccess - Set trunking mode to ACCESS unconditionally
- switchport_
mode_ booltrunk - Set trunking mode to TRUNK unconditionally
- switchport_
nonegotiate bool - Device will not engage in negotiation protocol on this interface
- switchport_
port_ boolsecurity - Security related command
- switchport_
port_ boolsecurity_ aging_ static - Enable aging for configured secure addresses
- switchport_
port_ intsecurity_ aging_ time - Port-security aging time - Range:
1
-1440
- switchport_
port_ boolsecurity_ aging_ type - Port-security aging type
- switchport_
port_ boolsecurity_ aging_ type_ inactivity - Aging based on inactivity time period
- switchport_
port_ Sequence[Templatesecurity_ maximum_ ranges Switchport Port Security Maximum Range Args] - switchport_
port_ boolsecurity_ violation_ protect - Security violation protect mode
- switchport_
port_ boolsecurity_ violation_ restrict - Security violation restrict mode
- switchport_
port_ boolsecurity_ violation_ shutdown - Security violation shutdown mode
- switchport_
private_ intvlan_ host_ association_ primary_ range - Primary normal range VLAN ID of the private VLAN port association - Range:
2
-1001
- switchport_
private_ intvlan_ host_ association_ secondary_ range - Secondary normal range VLAN ID of the private VLAN host port association - Range:
2
-1001
- switchport_
trunk_ strallowed_ vlans - VLAN IDs of the allowed VLANs when this port is in trunking mode
- switchport_
trunk_ boolallowed_ vlans_ all - all VLANs
- switchport_
trunk_ boolallowed_ vlans_ none - no VLANs
- switchport_
trunk_ boolnative_ vlan_ tag - Set native VLAN tagging state
- switchport_
trunk_ intnative_ vlan_ vlan_ id - VLAN ID of the native VLAN when this port is in trunking mode - Range:
1
-4094
- switchport_
voice_ intvlan - Vlan for voice traffic - Range:
1
-4094
- template_
name str - Template name
- access
Session BooleanClosed - Enable closed access on port (disabled by default, i.e. open access)
- access
Session StringControl Direction - Set the control-direction on the interface - Choices:
both
,in
- access
Session StringHost Mode - Set the Host mode for authentication on this interface - Choices:
multi-auth
,multi-domain
,multi-host
,single-host
- access
Session BooleanInterface Template Sticky - Interface templates set to sticky
- access
Session NumberInterface Template Sticky Timer - Sticky timer value - Range:
1
-65535
- access
Session BooleanMonitor - Apply template to monitor access sessions on the port
- access
Session StringPort Control - Set the port-control value - Choices:
auto
,force-authorized
,force-unauthorized
- authentication
Periodic Boolean - Enable or Disable Reauthentication for this port
- authentication
Timer NumberReauthenticate Range - Enter a value between 1 and 65535 - Range:
1
-65535
- authentication
Timer BooleanReauthenticate Server - Obtain re-authentication timeout value from the server
- cts
Manual Boolean - Supply local configuration for CTS parameters
- cts
Manual NumberPolicy Static Sgt - Source Security Group Tag to apply to untagged or non-trusted incoming traffic - Range:
2
-65519
- cts
Manual BooleanPolicy Static Trusted - Trust the Source Group Tags (SGT) that the peer uses for sending
- cts
Manual BooleanPropagate Sgt - CTS SGT Propagation configuration
- cts
Role BooleanBased Enforcement - Enable Role-based Access Control enforcement
- delete
Mode String - Configure behavior when deleting/destroying the resource. Either delete the entire object (YANG container) being
managed, or only delete the individual resource attributes configured explicitly and leave everything else as-is.
Default value is
all
. - Choices:all
,attributes
- device String
- A device name from the provider configuration.
- device
Tracking Boolean - Configure device-tracking on the interface
- device
Tracking List<Property Map>Attach Policies - policy name for device tracking
- device
Tracking StringVlan Range - VLAN IDs of the VLANs for which this policy applies
- dot1x
Max NumberReauth Req - Max No. of Reauthentication Attempts - Range:
1
-10
- dot1x
Max NumberReq - Max No. of Retries - Range:
1
-10
- dot1x
Pae String - Set 802.1x interface pae type - Choices:
authenticator
,both
,supplicant
- dot1x
Timeout NumberTx Period - Timeout for supplicant retries - Range:
1
-65535
- ip
Access List<Property Map>Groups - Access control list for IP packets
- ip
Dhcp NumberSnooping Limit Rate - DHCP snooping rate limit - Range:
1
-2048
- ip
Dhcp BooleanSnooping Trust - DHCP Snooping trust config
- load
Interval Number - Load interval delay in seconds - Range:
30
-600
- mab Boolean
- MAC Authentication Bypass Interface Config Commands
- mab
Eap Boolean - Use EAP authentication for MAC Auth Bypass
- service
Policy StringInput - policy-map name
- service
Policy StringOutput - policy-map name
- service
Policy StringType Control Subscriber - Apply a subscriber control policy to the interface
- source
Template String - Get config from a template
- spanning
Tree BooleanBpduguard Enable - Enable BPDU guard for this interface
- spanning
Tree BooleanPortfast - Portfast options for the interface
- spanning
Tree BooleanPortfast Disable - Disable portfast for this interface
- spanning
Tree BooleanPortfast Edge - Enable portfast edge on the interface
- spanning
Tree BooleanPortfast Network - Enable portfast network on the interface
- spanning
Tree BooleanService Policy - help
- storm
Control BooleanAction Shutdown - Shutdown this interface if a storm occurs
- storm
Control BooleanAction Trap - Send SNMP trap if a storm occurs
- storm
Control NumberBroadcast Level Bps Threshold - Enter threshold
- storm
Control StringBroadcast Level Pps Threshold - Enter threshold
- storm
Control NumberBroadcast Level Threshold - Enter threshold
- storm
Control NumberMulticast Level Bps Threshold - Enter threshold
- storm
Control StringMulticast Level Pps Threshold - Enter threshold
- storm
Control NumberMulticast Level Threshold - Enter threshold
- subscriber
Aging BooleanInactivity Timer Probe - ARP probe
- subscriber
Aging NumberInactivity Timer Value - Enter a value between 1 and 65535 in seconds - Range:
1
-65535
- subscriber
Aging BooleanProbe - ARP probe
- switchport
Access NumberVlan - VLAN ID of the VLAN when this port is in access mode - Range:
1
-4094
- switchport
Block BooleanUnicast - Block unknown unicast addresses
- switchport
Mode BooleanAccess - Set trunking mode to ACCESS unconditionally
- switchport
Mode BooleanTrunk - Set trunking mode to TRUNK unconditionally
- switchport
Nonegotiate Boolean - Device will not engage in negotiation protocol on this interface
- switchport
Port BooleanSecurity - Security related command
- switchport
Port BooleanSecurity Aging Static - Enable aging for configured secure addresses
- switchport
Port NumberSecurity Aging Time - Port-security aging time - Range:
1
-1440
- switchport
Port BooleanSecurity Aging Type - Port-security aging type
- switchport
Port BooleanSecurity Aging Type Inactivity - Aging based on inactivity time period
- switchport
Port List<Property Map>Security Maximum Ranges - switchport
Port BooleanSecurity Violation Protect - Security violation protect mode
- switchport
Port BooleanSecurity Violation Restrict - Security violation restrict mode
- switchport
Port BooleanSecurity Violation Shutdown - Security violation shutdown mode
- switchport
Private NumberVlan Host Association Primary Range - Primary normal range VLAN ID of the private VLAN port association - Range:
2
-1001
- switchport
Private NumberVlan Host Association Secondary Range - Secondary normal range VLAN ID of the private VLAN host port association - Range:
2
-1001
- switchport
Trunk StringAllowed Vlans - VLAN IDs of the allowed VLANs when this port is in trunking mode
- switchport
Trunk BooleanAllowed Vlans All - all VLANs
- switchport
Trunk BooleanAllowed Vlans None - no VLANs
- switchport
Trunk BooleanNative Vlan Tag - Set native VLAN tagging state
- switchport
Trunk NumberNative Vlan Vlan Id - VLAN ID of the native VLAN when this port is in trunking mode - Range:
1
-4094
- switchport
Voice NumberVlan - Vlan for voice traffic - Range:
1
-4094
- template
Name String - Template name
Supporting Types
TemplateDeviceTrackingAttachPolicy, TemplateDeviceTrackingAttachPolicyArgs
- Policy
Name string - Vlan
Range string
- Policy
Name string - Vlan
Range string
- policy
Name String - vlan
Range String
- policy
Name string - vlan
Range string
- policy_
name str - vlan_
range str
- policy
Name String - vlan
Range String
TemplateIpAccessGroup, TemplateIpAccessGroupArgs
- Direction string
- Access
List string
- Direction string
- Access
List string
- direction String
- access
List String
- direction string
- access
List string
- direction str
- access_
list str
- direction String
- access
List String
TemplateSwitchportPortSecurityMaximumRange, TemplateSwitchportPortSecurityMaximumRangeArgs
- Range int
- Vlan bool
- Vlan
Access bool
- Range int
- Vlan bool
- Vlan
Access bool
- range Integer
- vlan Boolean
- vlan
Access Boolean
- range number
- vlan boolean
- vlan
Access boolean
- range int
- vlan bool
- vlan_
access bool
- range Number
- vlan Boolean
- vlan
Access Boolean
Import
$ pulumi import iosxe:index/template:Template example "Cisco-IOS-XE-native:native/template/Cisco-IOS-XE-template:template_details=TEMP1"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- iosxe lbrlabs/pulumi-iosxe
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
iosxe
Terraform Provider.