Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
All 92 tools →
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/mist-ai-orgs-security-policies-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
contact:
email: tmunzer@juniper.net
name: Thomas Munzer
description: '> Version: **2604.1.1**
>
> Date: **May 13, 2026**
<div class="notification"> NOTE:<br>Some important API changes will be introduced. Please make sure to read the <a href="https://www.juniper.net/documentation/us/en/software/mist/api/http/guides/important-api-changes">announcements</a> </div>
---
## Additional Documentation
* [Mist Automation Guide](https://www.juniper.net/documentation/us/en/software/mist/automation-integration/index.html)
* [Mist Location SDK](https://www.juniper.net/documentation/us/en/software/mist/location-services/topics/concept/mist-how-get-mist-sdk.html)
* [Mist Product Updates](https://www.juniper.net/documentation/us/en/software/mist/product-updates/)
## Helpful Resources
* [API Sandbox and Exercises](https://api-class.mist.com/)
* [Postman Collection, Runners and Webhook Samples](https://www.postman.com/juniper-mist/workspace/mist-systems-s-public-workspace)
* [Python Script Examples](https://github.com/tmunzer/mist_library)
* [API Demo Apps](https://apps.mist-lab.fr/)
* [Juniper Blog](https://blogs.juniper.net/)
## Mist Web Browser Extension:
* Google Chrome, Microsoft Edge and other Chromium-based browser: [Chrome Web Store](https://chromewebstore.google.com/detail/mist-extension/ejhpdcljeamillfhdihkkmoakanpbplh)
* Firefox: [Firefox Add-ons](https://addons.mozilla.org/en-US/firefox/addon/mist-extension/)
---'
license:
name: MIT
url: https://raw.githubusercontent.com/tmunzer/Mist-OAS3.0/main/LICENSE
title: Mist Orgs Security Policies API
version: 2604.1.1
x-logo:
altText: Juniper-MistAI
backgroundColor: '#FFFFFF'
url: https://www.mist.com/wp-content/uploads/logo.png
servers:
- description: Mist Global 01
url: https://api.mist.com
- description: Mist Global 02
url: https://api.gc1.mist.com
- description: Mist Global 03
url: https://api.ac2.mist.com
- description: Mist Global 04
url: https://api.gc2.mist.com
- description: Mist Global 05
url: https://api.gc4.mist.com
- description: Mist EMEA 01
url: https://api.eu.mist.com
- description: Mist EMEA 02
url: https://api.gc3.mist.com
- description: Mist EMEA 03
url: https://api.ac6.mist.com
- description: Mist EMEA 04
url: https://api.gc6.mist.com
- description: Mist APAC 01
url: https://api.ac5.mist.com
- description: Mist APAC 02
url: https://api.gc5.mist.com
- description: Mist APAC 03
url: https://api.gc7.mist.com
security:
- apiToken: []
- basicAuth: []
- basicAuth: []
csrfToken: []
tags:
- description: "Security Policy is designed to audit / catch discrepancies between\n\"what's intended to be running\" versus \"what's actually running\" in a network. \n\nMany big organizations have separated Security and IT team (for good reasons). Each site can be assigned a security policy.\n Whenever an AP is provisioned, the configuration will be checked against the security policy.\n Any violations will be flagged in [Device Config History](/#operations/searchSiteDeviceConfigHistory) where you can search for the when and where the violation occurs."
name: Orgs Security Policies
paths:
/api/v1/orgs/{org_id}/secpolicies:
parameters:
- $ref: '#/components/parameters/org_id'
get:
description: Get List of Org Security Policies
operationId: listOrgSecPolicies
parameters:
- $ref: '#/components/parameters/limit'
- $ref: '#/components/parameters/page'
responses:
'200':
$ref: '#/components/responses/SecpoliciesArray'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: listOrgSecPolicies
tags:
- Orgs Security Policies
post:
description: Create Org Security Policy
operationId: createOrgSecPolicy
requestBody:
content:
application/json:
examples:
Example:
value:
name: string
wlans:
- acct_immediate_update: false
acct_interim_interval: 0
acct_servers:
- host: 1.2.3.4
keywrap_enabled: true
keywrap_format: hex
keywrap_kek: '1122334455'
keywrap_mack: '1122334455'
port: 1813
secret: testing123
allow_ipv6_ndp: true
allow_mdns: false
allow_ssdp: false
app_limit:
apps:
dropbox: 300
netflix: 60
enabled: false
wxtag_ids:
f99862d9-2726-931f-7559-3dfdf5d070d3: 30
app_qos:
apps:
skype-business-video:
dscp: 32
dst_subnet: 10.2.0.0/16
src_subnet: 10.2.0.0/16
enabled: true
others:
- dscp: 32
dst_subnet: 10.2.0.0/16
port_ranges: 80,1024-6553
protocol: udp
src_subnet: 10.2.0.0/16
arp_filter: false
auth:
anticlog_threshold: 16
eap_reauth: false
enable_mac_auth: false
key_idx: 1
keys:
- string
multi_psk_only: false
pairwise:
- wpa2-ccmp
private_wlan: true
psk: foryoureyesonly
type: psk
wep_as_secondary_auth: true
auth_server_selection: ordered
auth_servers:
- host: 1.2.3.4
keywrap_enabled: true
keywrap_format: hex
keywrap_kek: '1122334455'
keywrap_mack: '1122334455'
port: 1812
secret: testing123
auth_servers_nas_id: 5c5b350e0101-nas
auth_servers_nas_ip: 15.3.1.5
auth_servers_retries: 5
auth_servers_timeout: 5
band: string
band_steer: false
band_steer_force_band5: false
bands:
- '24'
- '5'
block_blacklist_clients: false
bonjour:
additional_vlan_ids: 10,20
enabled: false
services:
airplay:
radius_groups:
- teachers
scope: same_ap
cisco_cwa:
allowed_hostnames:
- snapchat.com
allowed_subnets:
- 63.5.3.0/24
blocked_subnets:
- 192.168.0.0/16
enabled: false
client_limit_down: 1000
client_limit_down_enabled: false
client_limit_up: 512
client_limit_up_enabled: false
coa_servers:
- disable_event_timestamp_check: false
enabled: false
ip: 1.2.3.4
port: 3799
secret: testing456
disable_11ax: false
disable_ht_vht_rates: false
disable_uapsd: false
disable_v1_roam_notify: false
disable_v2_roam_notify: false
disable_wmm: false
dns_server_rewrite:
enabled: false
radius_groups:
contractor: 172.1.1.1
guest: 8.8.8.8
dtim: 2
dynamic_psk:
default_psk: foryoureyesonly
default_vlan_id: 999
enabled: false
source: cloud_psks
dynamic_vlan:
default_vlan_id: 999
enabled: false
local_vlan_ids:
- 1
type: airespace-interface-name
vlans:
'131': default
'322': fast,video
enable_local_keycaching: false
enable_wireless_bridging: false
enabled: true
fast_dot1x_timers: false
hide_ssid: false
hostname_ie: false
hotspot20:
domain_name:
- mist.com
enabled: true
nai_realms:
- string
operators:
- google
- att
rcoi:
- 5A03BA0000
venue_name: some_name
interface: all
isolation: false
l2_isolation: false
legacy_overds: false
limit_bcast: false
limit_probe_response: true
max_idletime: 1800
mist_nac:
enabled: false
no_static_dns: false
no_static_ip: false
portal:
amazon_client_id: string
amazon_client_secret: string
amazon_email_domains:
- string
amazon_enabled: false
auth: none
azure_client_id: string
azure_client_secret: string
azure_enabled: false
azure_tenant_id: string
broadnet_password: password
broadnet_sid: MIST
broadnet_user_id: juniper
bypass_when_cloud_down: false
clickatell_api_key: string
cross_site: false
email_enabled: true
enabled: false
expire: 1440
external_portal_url: string
facebook_client_id: string
facebook_client_secret: string
facebook_email_domains:
- string
facebook_enabled: false
forward: false
forward_url: https://abc.com/promotions
google_client_id: string
google_client_secret: string
google_email_domains:
- mydomain.edu
- mydomain.org
google_enabled: false
gupshup_password: string
gupshup_userid: string
microsoft_client_id: string
microsoft_client_secret: string
microsoft_email_domains:
- string
microsoft_enabled: false
passphrase_enabled: false
password: let me in
predefined_sponsors_enabled: true
privacy: true
puzzel_password: string
puzzel_service_id: string
puzzel_username: string
smsMessageFormat: string
sms_enabled: false
sms_provider: twilio
sponsor_auto_approve: false
sponsor_email_domains:
- reserved.net
- reserved.org
sponsor_enabled: false
sponsor_link_validity_duration: '30'
sponsor_notify_all: false
sponsor_status_notify: false
sponsors:
sponsor1@company.com: FirstName1 LastName1
sponsor2@company.com: FirstName2 LastName2
sso_default_role: string
sso_forced_role: string
sso_idp_cert: string
sso_idp_sign_algo: sha256
sso_idp_sso_url: string
sso_issuer: string
sso_nameid_format: email
telstra_client_id: string
telstra_client_secret: string
twilio_auth_token: af9dac44c344a875ab5d31cb7abcdefg
twilio_phone_number: '+18548888888'
twilio_sid: AC72ec6ba0ec5af30e6731c5e47abcdefgh
portal_allowed_hostnames:
- snapchat.com
- ibm.com
portal_allowed_subnets:
- 63.5.3.0/24
portal_denied_hostnames:
- msg.snapchat.com
qos:
class: best_effort
overwrite: false
radsec:
enabled: true
idle_timeout: 60
mxcluster_ids:
- 572586b7-f97b-a22b-526c-8b97a3f609c4
proxy_hosts:
- mxedge1.local
server_name: radsec.abc.com
servers:
- host: 1.1.1.1
port: 1812
use_mxedge: true
use_site_mxedge: false
rateset:
'24':
ht: 00ff00ff00ff
legacy:
- '6'
- '9'
- '12'
- '18'
- 24b
- '36'
- '48'
- '54'
min_rssi: -70
template: custom
vht: 03ff03ff03ff01ff
'5':
ht: 00ff00ff00ff
legacy:
- '6'
- '9'
- '12'
- '18'
- 24b
- '36'
- '48'
- '54'
min_rssi: -70
template: custom
vht: 03ff03ff03ff01ff
roam_mode: NONE
schedule:
enabled: false
hours:
fri: 09:00-17:00
mon: 09:00-17:00
sle_excluded: false
ssid: corporate
use_eapol_v1: false
vlan_enabled: false
vlan_ids:
- 3
- 4
- 5
vlan_pooling: false
wxtag_ids:
- 497f6eca-6276-4993-bfeb-53e4bbba6f08
wxtunnel_id: string
wxtunnel_remote_id: string
schema:
$ref: '#/components/schemas/secpolicy'
responses:
'200':
$ref: '#/components/responses/Secpolicy'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: createOrgSecPolicy
tags:
- Orgs Security Policies
/api/v1/orgs/{org_id}/secpolicies/{secpolicy_id}:
parameters:
- $ref: '#/components/parameters/org_id'
- $ref: '#/components/parameters/secpolicy_id'
delete:
description: Delete Org Security Policy
operationId: deleteOrgSecPolicy
responses:
'200':
$ref: '#/components/responses/OK'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: deleteOrgSecPolicy
tags:
- Orgs Security Policies
get:
description: Get Org Security Policy
operationId: getOrgSecPolicy
responses:
'200':
$ref: '#/components/responses/Secpolicy'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: getOrgSecPolicy
tags:
- Orgs Security Policies
put:
description: Update Org Security Policy
operationId: updateOrgSecPolicy
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/secpolicy'
description: Request Body
responses:
'200':
$ref: '#/components/responses/Secpolicy'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: updateOrgSecPolicy
tags:
- Orgs Security Policies
components:
schemas:
wlan_dynamic_vlan_type:
default: standard
description: 'standard (using Tunnel-Private-Group-ID, widely supported), airespace-interface-name (Airespace/Cisco). enum: `airespace-interface-name`, `standard`'
enum:
- airespace-interface-name
- standard
examples:
- airespace-interface-name
type: string
radius_acct_port:
anyOf:
- maximum: 65545
minimum: 1
type: integer
- type: string
description: Radius Auth Port, value from 1 to 65535, default is 1813
wlan_cisco_cwa_allowed_hostnames:
description: List of hostnames without http(s):// (matched by substring)
items:
examples:
- snapchat.com
type: string
type: array
wlan_portal_denied_hostnames:
default: []
description: List of hostnames without http(s):// (matched by substring), this takes precedence over portal_allowed_hostnames
examples:
- - msg.snapchat.com
items:
type: string
type: array
org_id:
examples:
- a97c1b22-a4e9-411e-9bfd-d8695a0f9e61
format: uuid
readOnly: true
type: string
wlan_vlan_ids_list:
description: If `vlan_enabled`==`true` and `vlan_pooling`==`true`. List of VLAN IDs (comma separated) to be used in the VLAN Pool
examples:
- - 3
- 4
- 5
items:
$ref: '#/components/schemas/vlan_id_with_variable'
type: array
radius_acct_server:
additionalProperties: false
properties:
host:
description: IP/ hostname of RADIUS server
examples:
- 1.2.3.4
type: string
keywrap_enabled:
type: boolean
keywrap_format:
$ref: '#/components/schemas/radius_keywrap_format'
keywrap_kek:
examples:
- '1122334455'
type: string
keywrap_mack:
examples:
- '1122334455'
type: string
port:
$ref: '#/components/schemas/radius_acct_port'
secret:
description: Secret of RADIUS server
examples:
- testing123
format: password
type: string
required:
- host
- secret
type: object
wlan_auth_servers:
description: List of RADIUS authentication servers, at least one is needed if `auth type`==`eap`, order matters where the first one is treated as primary
items:
$ref: '#/components/schemas/radius_auth_server'
type: array
wlan_qos:
additionalProperties: false
properties:
class:
$ref: '#/components/schemas/wlan_qos_class'
overwrite:
default: false
description: Whether to overwrite QoS
type: boolean
type: object
wlan_acct_servers:
description: List of RADIUS accounting servers, optional, order matters where the first one is treated as primary
items:
$ref: '#/components/schemas/radius_acct_server'
type: array
radius_coa_port:
anyOf:
- maximum: 65545
minimum: 1
type: integer
- type: string
description: Radius CoA Port, value from 1 to 65535, default is 3799
wlan_portal_google_email_domains:
default: []
description: Optional if `google_enabled`==`true`. Matches authenticated user email against provided domains. If null or [], all authenticated emails will be allowed.
examples:
- - mydomain.edu
- mydomain.org
items:
type: string
type: array
strings:
items:
type: string
type: array
uniqueItems: true
secpolicy:
description: Security Policy is designed to audit / catch discrepancies between "what’s intended to be running" versus "what’s actually running" in a network. Many big organizations have separated Security and IT team (for good reasons). Each site can be assigned a security policy. Whenever an AP is provisioned, the configuration will be checked against the security policy. Any violations will be flagged in Device Config History where you can search for the when and where the violation occurs.
properties:
created_time:
$ref: '#/components/schemas/created_time'
id:
$ref: '#/components/schemas/id'
modified_time:
$ref: '#/components/schemas/modified_time'
name:
type: string
org_id:
$ref: '#/components/schemas/org_id'
site_id:
$ref: '#/components/schemas/site_id'
wlans:
$ref: '#/components/schemas/secpolicy_wlans'
type: object
coa_server:
additionalProperties: false
description: CoA Server
properties:
disable_event_timestamp_check:
default: false
description: Whether to disable Event-Timestamp Check
type: boolean
enabled:
default: false
type: boolean
ip:
examples:
- 1.2.3.4
format: ipv4
type: string
port:
$ref: '#/components/schemas/radius_coa_port'
secret:
examples:
- testing456
type: string
required:
- ip
- secret
type: object
wlan_dynamic_psk:
additionalProperties: false
description: "For dynamic PSK where we get per_user PSK from Radius. dynamic_psk allows PSK to be selected at runtime depending on context (wlan/site/user/...) thus following configurations are assumed (currently)\n * PSK will come from RADIUS server\n * AP sends client MAC as username and password (i.e. `enable_mac_auth` is assumed)\n * AP sends BSSID:SSID as Caller-Station-ID\n * `auth_servers` is required\n * PSK will come from cloud WLC if source is cloud_psks\n * default_psk will be used if cloud WLC is not available\n * `multi_psk_only` and `psk` is ignored\n * `pairwise` can only be wpa2-ccmp (for now, wpa3 support on the roadmap)"
properties:
default_psk:
description: Default PSK to use if cloud WLC is not available, 8-63 characters
examples:
- foryoureyesonly
maxLength: 63
minLength: 8
type: string
default_vlan_id:
$ref: '#/components/schemas/vlan_id_with_variable'
enabled:
default: false
type: boolean
force_lookup:
default: false
description: When 11r is enabled, we'll try to use the cached PMK, this can be disabled. `false` means auto
type: boolean
source:
$ref: '#/components/schemas/dynamic_psk_source'
type:
- object
- 'null'
wlan_cisco_cwa:
additionalProperties: false
description: 'Cisco CWA (central web authentication) required RADIUS with COA in order to work. See CWA: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html'
properties:
allowed_hostnames:
$ref: '#/components/schemas/wlan_cisco_cwa_allowed_hostnames'
allowed_subnets:
$ref: '#/components/schemas/wlan_cisco_cwa_allowed_subnets'
blocked_subnets:
$ref: '#/components/schemas/wlan_cisco_cwa_blocked_subnets'
enabled:
default: false
type: boolean
type: object
wlan_portal_sms_provider:
default: manual
description: 'Optional if `sms_enabled`==`true`. enum: `broadnet`, `clickatell`, `gupshup`, `manual`, `puzzel`, `smsglobal`, `telstra`, `twilio`'
enum:
- broadnet
- clickatell
- gupshup
- manual
- puzzel
- telstra
- twilio
- smsglobal
examples:
- twilio
type: string
msp_id:
examples:
- b9d42c2e-88ee-41f8-b798-f009ce7fe909
format: uuid
readOnly: true
type: string
wlan_hotspot20_operators:
description: List of operators to support
examples:
- - google
- att
items:
$ref: '#/components/schemas/wlan_hotspot20_operators_item'
type: array
radsec_proxy_hosts:
description: Default is site.mxedge.radsec.proxy_hosts which must be a superset of all `wlans[*].radsec.proxy_hosts`. When `radsec.proxy_hosts` are not used, tunnel peers (org or site mxedges) are used irrespective of `use_site_mxedge`
items:
examples:
- mxedge1.local
type: string
type: array
radsec:
additionalProperties: false
description: RadSec settings
properties:
coa_enabled:
default: false
type: boolean
enabled:
type: boolean
idle_timeout:
$ref: '#/components/schemas/radsec_idle_timeout'
mxcluster_ids:
$ref: '#/components/schemas/radsec_mxcluster_ids'
proxy_hosts:
$ref: '#/components/schemas/radsec_proxy_hosts'
server_name:
description: Name of the server to verify (against the cacerts in Org Setting). Only if not Mist Edge.
examples:
- radsec.abc.com
type: string
servers:
$ref: '#/components/schemas/radsec_servers'
use_mxedge:
description: use mxedge(s) as RadSec Proxy
type: boolean
use_site_mxedge:
default: false
description: To use Site mxedges when this WLAN does not use mxtunnel
type: boolean
type: object
dynamic_psk_source:
default: radius
description: 'enum: `cloud_psks`, `radius`'
enum:
- cloud_psks
- radius
examples:
- cloud_psks
type: string
radsec_idle_timeout:
anyOf:
- default: 60
type: integer
- type: string
description: Radsec Idle Timeout in seconds. Default is 60
wlan_ap_ids:
description: List of device ids
items:
format: uuid
type: string
type:
- array
- 'null'
wlan_hotspot20_domain_name:
examples:
- - mist.com
items:
type: string
type: array
wlan_dynamic_vlan_default_vlan_id:
description: VLAN ID, VLAN range or variable to use when there’s no match from RADIUS
oneOf:
- type: string
- default: 999
maximum: 4094
minimum: 1
type: integer
wlan_datarates_legacy:
description: If `template`==`custom`. List of supported rates (IE=1) and extended supported rates (IE=50) for custom template, append ‘b’ at the end to indicate a rate being basic/mandatory. If `template`==`custom` is configured and legacy does not define at least one basic rate, it will use `no-legacy` default values
examples:
- - '6'
- '9'
- '12'
- '18'
- 24b
- '36'
- '48'
- '54'
items:
$ref: '#/components/schemas/wlan_datarates_legacy_item'
type: array
wlan_mxtunnel_name:
description: When `interface`=`site_mxedge`, name of the mxtunnel that in mxtunnels under Site Setting
items:
default: default
examples:
- default
type: string
type: array
wlan_datarates:
additionalProperties: false
description: Data rates wlan settings
properties:
eht:
description: If `template`==`custom`. EHT MCS bitmasks for 4 streams (16-bit for each stream, MCS0 is least significant bit)
examples:
- 3fff0fff0fff03ff
type:
- string
- 'null'
he:
description: If `template`==`custom`. HE MCS bitmasks for 4 streams (16-bit for each stream, MCS0 is least significant bit
examples:
- 0fff0fff0fff0fff
type:
- string
- 'null'
ht:
description: If `template`==`custom`. MCS bitmasks for 4 streams (16-bit for each stream, MCS0 is least significant bit), e.g. 00ff 00f0 001f limits HT rates to MCS 0-7 for 1 stream, MCS 4-7 for 2 stream (i.e. MCS 12-15), MCS 1-5 for 3 stream (i.e. MCS 16-20)
examples:
- 00ff00ff00ff
type:
- string
- 'null'
legacy:
$ref: '#/components/schemas/wlan_datarates_legacy'
min_rssi:
default: 0
description: Minimum RSSI for client to connect, 0 means not enforcing
examples:
- -70
type: integer
template:
$ref: '#/components/schemas/wlan_datarates_template'
vht:
description: If `template`==`custom`. MCS bitmasks for 4 streams (16-bit for each stream, MCS0 is least significant bit), e.g. 03ff 01ff 00ff limits VHT rates to MCS 0-9 for 1 stream, MCS 0-8 for 2 streams, and MCS 0-7 for 3 streams.
examples:
- 03ff03ff03ff01ff
type:
- string
- 'null'
type: object
radsec_servers:
description: List of RadSec Servers. Only if not Mist Edge.
items:
$ref: '#/components/schemas/radsec_server'
type: array
uniqueItems: true
wlan_vlan_ids_string:
description: If `vlan_enabled`==`true` and `vlan_pooling`==`true`. List of VLAN IDs to be used in the VLAN Pool
examples:
- 1,2
type: string
wlan_dns_server_rewrite:
additionalProperties: false
description: For radius_group-based DNS server (rewrite DNS request depending on the Group RADIUS server returns)
properties:
enabled:
default: false
type: boolean
radius_groups:
additionalProperties:
type: string
description: Map between radius_group and the desired DNS server (IPv4 only). Property key is the RADIUS group, property value is the desired DNS Server
examples:
- contractor: 172.1.1.1
guest: 8.8.8.8
type: object
type:
- object
- 'null'
coa_servers:
# --- truncated at 32 KB (95 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mist-ai/refs/heads/main/openapi/mist-ai-orgs-security-policies-api-openapi.yml