createOrgWlan

Enable coa-immediate-update and address-change-immediate-update on the access profile.

How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled

RADIUS accounting servers used by this WLAN

Integration settings for AirWatch device compliance on this WLAN

Only applicable when limit_bcast==true, which allows or disallows ipv6 Neighbor Discovery packets to go through

Only applicable when limit_bcast==true, which allows mDNS / Bonjour packets to go through

Only applicable when limit_bcast==true, which allows SSDP

Access point identifiers used when apply_to==aps

Bandwidth limits for applications on this WLAN

QoS rules for application traffic on this WLAN

Scope that determines where this WLAN is applied. enum: aps, site, wxtags.

Whether to enable smart arp filter

Settings that control client authentication for this WLAN

RADIUS authentication server selection behavior for this WLAN. enum: ordered, unordered.

RADIUS authentication servers used by this WLAN. Required when auth.type==eap

Optional, up to 48 bytes, will be dynamically generated if not provided. used only for authentication servers

Optional, NAS-IP-ADDRESS to use

RADIUS auth session retries. Following fast timers are set if "fast_dot1x_timers" knob is enabled. ‘retries’ are set to value of auth_servers_retries. ‘max-requests’ is also set when setting auth_servers_retries and is set to default value to 3.

RADIUS auth session timeout. Following fast timers are set if "fast_dot1x_timers" knob is enabled. ‘quite-period’ and ‘transmit-period’ are set to half the value of auth_servers_timeout. ‘supplicant-timeout’ is also set when setting auth_servers_timeout and is set to default value of 10.

band is deprecated and kept for backward compatibility. Use bands instead

Whether to enable band_steering, this works only when band==both

Force dual_band capable client to connect to 5G

Radio bands on which this WLAN is broadcast

[  "24",  "5",  "6"]

Whether to block the clients in the blacklist (up to first 256 macs)

Service discovery gateway settings for Bonjour traffic on this WLAN

Central web authentication settings for Cisco CWA on this WLAN

Downlink bandwidth limit applied per client

If downlink limiting per-client is enabled

Downlink bandwidth limit applied per client

If uplink limiting per-client is enabled

RADIUS Change of Authorization servers available to this WLAN

Some old WLAN drivers may not be compatible

To disable Wi-Fi 7 EHT IEs

To disable ht or vht rates

whether to disable Message-Authenticator Check, which is used to verify the integrity of RADIUS messages, default is false (i.e. for better security)

Whether to disable U-APSD

Disable sending v2 roam notification messages

Disable sending v2 roam notification messages

When any of the following is true, this WLAN will be disabled

• cannot get IP
• cannot obtain default gateway
• cannot reach default gateway

Whether to disable this WLAN when the configured Mist tunnel is down

Whether to disable WMM

RADIUS group based DNS server rewrite settings for this WLAN

Delivery Traffic Indication Message interval for this WLAN

Per-user PSK selection settings for this WLAN

VLAN assignment settings for 802.1X dynamic VLANs

Enable FTM (Fine-Time Measurement, 802.11mc); configures the AP as an FTM Responder (target), allowing clients to perform ranging requests against it

Enable AP-AP keycaching via multicast

By default, we'd inspect all DHCP packets and drop those unrelated to the wireless client itself in the case where client is a wireless bridge (DHCP packets for other MACs will need to be forwarded), wireless_bridging can be enabled

If the client bridge is doing DHCP on behalf of other devices (L2-NAT), enable dhcp_tracking will cut down DHCP response packets to be forwarded to wireless

If this wlan is enabled

If set to true, sets default fast-timers with values calculated from ‘auth_servers_timeout’ and ‘auth_server_retries’ .

Whether to hide SSID in beacon

Include hostname inside IE in AP beacons / probe responses

Passpoint and Hotspot 2.0 settings for this WLAN

DHCP Option 82 insertion settings for this WLAN

Network interface or tunnel where this WLAN bridges client traffic. enum: all, eth0, eth1, eth2, eth3, mxtunnel, site_mxedge, wxtunnel.

Whether to stop clients to talk to each other

If isolation is enabled, whether to deny clients to talk to L2 on the LAN

Legacy devices requires the Over-DS (for Fast BSS Transition) bit set (while our chip doesn’t support it). Warning! Enabling this will cause problem for iOS devices.

Whether to limit broadcast packets going to wireless (i.e. only allow certain bcast packets to go through)

Limit probe response base on some heuristic rules

Max idle time in seconds

Maximum number of client connected to the SSID. 0 means unlimited

Juniper Mist NAC settings used by this WLAN

(deprecated, use mxtunnel_ids instead) when interface==mxtunnel, id of the Mist Tunnel

Mist Tunnel identifiers used when interface==mxtunnel

Mist Tunnel names used when interface==site_mxedge

Whether to only allow client to use DNS that we’ve learned from DHCP response

Whether to only allow client that we’ve learned from DHCP exchange to talk

Guest portal settings for this WLAN

Guest portal hostnames that clients may reach before authorization

Guest portal CIDR subnets that clients may reach before authorization

API secret (auto-generated) that can be used to sign guest authorization requests, only generated when auth is set to external

Guest portal hostnames denied before authorization, taking precedence over allowed hostnames

Quality-of-service settings for WLAN client traffic

TLS-secured RADIUS transport settings for this WLAN

Data rate settings by RF band for this WLAN

When different mxcluster is on different subnet, we'd want to disconnect clients (so they'll reconnect and get new IPs)

Fast roaming mode configured for this WLAN. enum: 11r, NONE, OKC.

Operating schedule controlling when this WLAN is active

Whether to exclude this WLAN from SLE metrics

Name of the SSID

Identifier of the WLAN template associated with this WLAN

If auth.type==eap or auth.type==psk, should only be set for legacy client, such as pre-2004, 802.11b devices

If vlan tagging is enabled

Default VLAN ID, range, or variable used when vlan_enabled==true

Pool of VLAN IDs used when vlan_enabled==true and vlan_pooling==true

Requires vlan_enabled==true to be set to true. Vlan pooling allows AP to place client on different VLAN using a deterministic algorithm

Downlink bandwidth limit applied per client

If downlink limiting for whole wlan is enabled

Downlink bandwidth limit applied per client

If uplink limiting for whole wlan is enabled

Identifiers of WxLAN tags used when apply_to==wxtags

When interface=wxtunnel, id of the WXLAN Tunnel

When interface=wxtunnel, remote tunnel identifier