A Site Wlan is a wireless local area network that is configured and applied to a specific site within an organization. It allows for the creation and management of wireless network settings, such as SSIDs (service set identifiers), authentication settings, VLAN configurations, etc... for a particular site. Site Wlans are created and managed at the site level and can only be referenced and used within that particular site.
openapi: 3.1.0
info:
contact:
email: tmunzer@juniper.net
name: Thomas Munzer
description: '> Version: **2604.1.1**
>
> Date: **May 13, 2026**
<div class="notification"> NOTE:<br>Some important API changes will be introduced. Please make sure to read the <a href="https://www.juniper.net/documentation/us/en/software/mist/api/http/guides/important-api-changes">announcements</a> </div>
---
## Additional Documentation
* [Mist Automation Guide](https://www.juniper.net/documentation/us/en/software/mist/automation-integration/index.html)
* [Mist Location SDK](https://www.juniper.net/documentation/us/en/software/mist/location-services/topics/concept/mist-how-get-mist-sdk.html)
* [Mist Product Updates](https://www.juniper.net/documentation/us/en/software/mist/product-updates/)
## Helpful Resources
* [API Sandbox and Exercises](https://api-class.mist.com/)
* [Postman Collection, Runners and Webhook Samples](https://www.postman.com/juniper-mist/workspace/mist-systems-s-public-workspace)
* [Python Script Examples](https://github.com/tmunzer/mist_library)
* [API Demo Apps](https://apps.mist-lab.fr/)
* [Juniper Blog](https://blogs.juniper.net/)
## Mist Web Browser Extension:
* Google Chrome, Microsoft Edge and other Chromium-based browser: [Chrome Web Store](https://chromewebstore.google.com/detail/mist-extension/ejhpdcljeamillfhdihkkmoakanpbplh)
* Firefox: [Firefox Add-ons](https://addons.mozilla.org/en-US/firefox/addon/mist-extension/)
---'
license:
name: MIT
url: https://raw.githubusercontent.com/tmunzer/Mist-OAS3.0/main/LICENSE
title: Mist Admins Sites Wlans API
version: 2604.1.1
x-logo:
altText: Juniper-MistAI
backgroundColor: '#FFFFFF'
url: https://www.mist.com/wp-content/uploads/logo.png
servers:
- description: Mist Global 01
url: https://api.mist.com
- description: Mist Global 02
url: https://api.gc1.mist.com
- description: Mist Global 03
url: https://api.ac2.mist.com
- description: Mist Global 04
url: https://api.gc2.mist.com
- description: Mist Global 05
url: https://api.gc4.mist.com
- description: Mist EMEA 01
url: https://api.eu.mist.com
- description: Mist EMEA 02
url: https://api.gc3.mist.com
- description: Mist EMEA 03
url: https://api.ac6.mist.com
- description: Mist EMEA 04
url: https://api.gc6.mist.com
- description: Mist APAC 01
url: https://api.ac5.mist.com
- description: Mist APAC 02
url: https://api.gc5.mist.com
- description: Mist APAC 03
url: https://api.gc7.mist.com
security:
- apiToken: []
- basicAuth: []
- basicAuth: []
csrfToken: []
tags:
- description: 'A Site Wlan is a wireless local area network that is configured and applied to a specific site within an organization.
It allows for the creation and management of wireless network settings, such as SSIDs (service set identifiers), authentication settings, VLAN configurations, etc... for a particular site.
Site Wlans are created and managed at the site level and can only be referenced and used within that particular site.'
name: Sites Wlans
paths:
/api/v1/sites/{site_id}/wlans:
parameters:
- $ref: '#/components/parameters/site_id'
get:
description: Get List of Site WLANs
operationId: listSiteWlans
parameters:
- $ref: '#/components/parameters/limit'
- $ref: '#/components/parameters/page'
responses:
'200':
$ref: '#/components/responses/WlansArray'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: listSiteWlans
tags:
- Sites Wlans
post:
description: Create Site WLAN
operationId: createSiteWlan
requestBody:
content:
application/json:
examples:
Example:
value:
acct_immediate_update: false
acct_interim_interval: 0
acct_servers:
- host: 1.2.3.4
keywrap_enabled: true
keywrap_format: hex
keywrap_kek: '1122334455'
keywrap_mack: '1122334455'
port: 1813
secret: testing123
airwatch:
api_key: aHhlbGxvYXNkZmFzZGZhc2Rmc2RmCg=="
console_url: https://hs1.airwatchportals.com
enabled: true
password: user1
username: test123
allow_ipv6_ndp: true
allow_mdns: false
allow_ssdp: false
ap_ids:
- 497f6eca-6276-4993-bfeb-53cbbbbb6f08
app_limit:
apps:
dropbox: 300
netflix: 60
enabled: false
wxtag_ids:
f99862d9-2726-931f-7559-3dfdf5d070d3: 30
app_qos:
apps:
skype-business-video:
dscp: 32
dst_subnet: 10.2.0.0/16
src_subnet: 10.2.0.0/16
enabled: true
others:
- dscp: 32
dst_subnet: 10.2.0.0/16
port_ranges: 80,1024-6553
protocol: udp
src_subnet: 10.2.0.0/16
apply_to: site
arp_filter: false
auth:
anticlog_threshold: 16
eap_reauth: false
enable_mac_auth: false
key_idx: 1
keys:
- string
multi_psk_only: false
pairwise:
- wpa2-ccmp
private_wlan: true
psk: foryoureyesonly
type: psk
wep_as_secondary_auth: true
auth_server_selection: ordered
auth_servers:
- host: 1.2.3.4
keywrap_enabled: true
keywrap_format: hex
keywrap_kek: '1122334455'
keywrap_mack: '1122334455'
port: 1812
secret: testing123
auth_servers_nas_id: 5c5b350e0101-nas
auth_servers_nas_ip: 15.3.1.5
auth_servers_retries: 5
auth_servers_timeout: 5
band: string
band_steer: false
band_steer_force_band5: false
bands:
- '24'
- '5'
block_blacklist_clients: false
bonjour:
additional_vlan_ids: 10,20
enabled: false
services:
airplay:
radius_groups:
- teachers
scope: same_ap
cisco_cwa:
allowed_hostnames:
- snapchat.com
allowed_subnets:
- 63.5.3.0/24
blocked_subnets:
- 192.168.0.0/16
enabled: false
client_limit_down: 1000
client_limit_down_enabled: false
client_limit_up: 512
client_limit_up_enabled: false
coa_servers:
- disable_event_timestamp_check: false
enabled: false
ip: 1.2.3.4
port: 3799
secret: testing456
disable_11ax: false
disable_ht_vht_rates: false
disable_uapsd: false
disable_v1_roam_notify: false
disable_v2_roam_notify: false
disable_wmm: false
dns_server_rewrite:
enabled: false
radius_groups:
contractor: 172.1.1.1
guest: 8.8.8.8
dtim: 2
dynamic_psk:
default_psk: foryoureyesonly
default_vlan_id: 999
enabled: false
source: cloud_psks
dynamic_vlan:
default_vlan_id: 999
enabled: false
local_vlan_ids:
- 1
type: airespace-interface-name
vlans:
'131': default
'322': fast,video
enable_local_keycaching: false
enable_wireless_bridging: false
enabled: true
fast_dot1x_timers: false
hide_ssid: false
hostname_ie: false
hotspot20:
domain_name:
- mist.com
enabled: true
nai_realms:
- string
operators:
- google
- att
rcoi:
- 5A03BA0000
venue_name: some_name
interface: all
isolation: false
l2_isolation: false
legacy_overds: false
limit_bcast: false
limit_probe_response: true
max_idletime: 1800
mist_nac:
enabled: false
no_static_dns: false
no_static_ip: false
ssid: demo
schema:
$ref: '#/components/schemas/wlan'
description: Request Body
responses:
'200':
$ref: '#/components/responses/Wlan'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: createSiteWlan
tags:
- Sites Wlans
/api/v1/sites/{site_id}/wlans/derived:
parameters:
- $ref: '#/components/parameters/site_id'
get:
description: Get the list of derived Wlans for a Site
operationId: listSiteWlansDerived
parameters:
- description: Whether to resolve SITE_VARS
in: query
name: resolve
schema:
default: false
examples:
- true
type: boolean
- description: Filter by WLAN ID
in: query
name: wlan_id
schema:
examples:
- 8bfc2490-d726-3587-038d-cb2e71bd2330
type: string
responses:
'200':
$ref: '#/components/responses/WlansArray'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: listSiteWlansDerived
tags:
- Sites Wlans
/api/v1/sites/{site_id}/wlans/{wlan_id}:
parameters:
- $ref: '#/components/parameters/site_id'
- $ref: '#/components/parameters/wlan_id'
delete:
description: Delete Site WLAN
operationId: deleteSiteWlan
responses:
'200':
$ref: '#/components/responses/OK'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: deleteSiteWlan
tags:
- Sites Wlans
get:
description: Get Site WLAN
operationId: getSiteWlan
responses:
'200':
$ref: '#/components/responses/Wlan'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: getSiteWlan
tags:
- Sites Wlans
put:
description: Update Site WLAN
operationId: updateSiteWlan
requestBody:
content:
application/json:
examples:
Example:
value:
acct_immediate_update: false
acct_interim_interval: 0
acct_servers:
- host: 1.2.3.4
keywrap_enabled: true
keywrap_format: hex
keywrap_kek: '1122334455'
keywrap_mack: '1122334455'
port: 1813
secret: testing123
airwatch:
api_key: aHhlbGxvYXNkZmFzZGZhc2Rmc2RmCg=="
console_url: https://hs1.airwatchportals.com
enabled: true
password: user1
username: test123
allow_ipv6_ndp: true
allow_mdns: false
allow_ssdp: false
ap_ids:
- 497f6eca-6276-4993-bfeb-53cbbbbe6f08
app_limit:
apps:
dropbox: 300
netflix: 60
enabled: false
wxtag_ids:
f99862d9-2726-931f-7559-3dfdf5d070d3: 30
app_qos:
apps:
skype-business-video:
dscp: 32
dst_subnet: 10.2.0.0/16
src_subnet: 10.2.0.0/16
enabled: true
others:
- dscp: 32
dst_subnet: 10.2.0.0/16
port_ranges: 80,1024-6553
protocol: udp
src_subnet: 10.2.0.0/16
apply_to: site
arp_filter: false
auth:
anticlog_threshold: 16
eap_reauth: false
enable_mac_auth: false
key_idx: 1
keys:
- string
multi_psk_only: false
pairwise:
- wpa2-ccmp
private_wlan: true
psk: foryoureyesonly
type: psk
wep_as_secondary_auth: true
auth_server_selection: ordered
auth_servers:
- host: 1.2.3.4
keywrap_enabled: true
keywrap_format: hex
keywrap_kek: '1122334455'
keywrap_mack: '1122334455'
port: 1812
secret: testing123
auth_servers_nas_id: 5c5b350e0101-nas
auth_servers_nas_ip: 15.3.1.5
auth_servers_retries: 5
auth_servers_timeout: 5
band: string
band_steer: false
band_steer_force_band5: false
bands:
- '24'
- '5'
block_blacklist_clients: false
bonjour:
additional_vlan_ids: 10,20
enabled: false
services:
airplay:
radius_groups:
- teachers
scope: same_ap
cisco_cwa:
allowed_hostnames:
- snapchat.com
allowed_subnets:
- 63.5.3.0/24
blocked_subnets:
- 192.168.0.0/16
enabled: false
client_limit_down: 1000
client_limit_down_enabled: false
client_limit_up: 512
client_limit_up_enabled: false
coa_servers:
- disable_event_timestamp_check: false
enabled: false
ip: 1.2.3.4
port: 3799
secret: testing456
disable_11ax: false
disable_ht_vht_rates: false
disable_uapsd: false
disable_v1_roam_notify: false
disable_v2_roam_notify: false
disable_wmm: false
dns_server_rewrite:
enabled: false
radius_groups:
contractor: 172.1.1.1
guest: 8.8.8.8
dtim: 2
dynamic_psk:
default_psk: foryoureyesonly
default_vlan_id: 999
enabled: false
source: cloud_psks
dynamic_vlan:
default_vlan_id: 999
enabled: false
local_vlan_ids:
- 1
type: airespace-interface-name
vlans:
'131': default
'322': fast,video
enable_local_keycaching: false
enable_wireless_bridging: false
enabled: true
fast_dot1x_timers: false
hide_ssid: false
hostname_ie: false
hotspot20:
domain_name:
- mist.com
enabled: true
nai_realms:
- string
operators:
- google
- att
rcoi:
- 5A03BA0000
venue_name: some_name
interface: all
isolation: false
l2_isolation: false
legacy_overds: false
limit_bcast: false
limit_probe_response: true
max_idletime: 1800
mist_nac:
enabled: false
no_static_dns: false
no_static_ip: false
ssid: demo
schema:
$ref: '#/components/schemas/wlan'
description: Request Body
responses:
'200':
$ref: '#/components/responses/Wlan'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: updateSiteWlan
tags:
- Sites Wlans
/api/v1/sites/{site_id}/wlans/{wlan_id}/portal_image:
parameters:
- $ref: '#/components/parameters/site_id'
- $ref: '#/components/parameters/wlan_id'
delete:
description: Delete Site WLAN Portal Image
operationId: deleteSiteWlanPortalImage
responses:
'200':
$ref: '#/components/responses/OK'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: deleteSiteWlanPortalImage
tags:
- Sites Wlans
post:
description: WLAN Portal Image Upload
operationId: uploadSiteWlanPortalImage
requestBody:
content:
multipart/form-data:
schema:
$ref: '#/components/schemas/image_import'
description: Request Body
responses:
'200':
$ref: '#/components/responses/OK'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: uploadSiteWlanPortalImage
tags:
- Sites Wlans
/api/v1/sites/{site_id}/wlans/{wlan_id}/portal_template:
parameters:
- $ref: '#/components/parameters/site_id'
- $ref: '#/components/parameters/wlan_id'
put:
description: 'Update a Portal Template
#### Sponsor Email Template
Sponsor Email Template supports following template variables:
| **Name** | **Description** |
| --- | --- |
| approve_url | Renders URL to approve the request; optionally &minutes=N query param can be appended to change the Authorization period of the guest, where N is a valid integer denoting number of minutes a guest remains authorized |
| deny_url | Renders URL to reject the request |
| guest_email | Renders Email ID of the guest |
| guest_name | Renders Name of the guest |
| field1 | Renders value of the Custom Field 1 |
| field2 | Renders value of the Custom Field 2 |
| company | Renders value of the Company field |
| sponsor_link_validity_duration | Renders validity time of the request (i.e. Approve/Deny URL) |
| auth_expire_minutes | Renders Wlan-level configured Guest Authorization Expiration time period (in minutes), If not configured then default (1 day in minutes) |'
operationId: updateSiteWlanPortalTemplate
requestBody:
content:
application/json:
examples:
Example:
value:
accessCodeAlternateEmail: string
alignment: string
authButtonAmazon: string
authButtonAzure: string
authButtonEmail: string
authButtonFacebook: string
authButtonGoogle: string
authButtonMicrosoft: string
authButtonPassphrase: string
authButtonSms: string
authButtonSponsor: string
authLabel: string
backLink: string
color: string
colorDark: string
colorLight: string
company: true
companyError: string
companyLabel: string
email: true
emailAccessDomainError: string
emailCancel: string
emailCodeError: string
emailError: string
emailFieldLabel: string
emailLabel: string
emailMessage: string
emailSubmit: string
emailTitle: string
field1: true
field1Error: string
field1Label: string
field1Required: true
field2: true
field2Error: string
field2Label: string
field2Required: true
field3: true
field3Error: string
field3Label: string
field3Required: true
field4: true
field4Error: string
field4Label: string
field4Required: true
message: string
name: true
nameError: string
nameLabel: string
optout: true
optoutLabel: string
pageTitle: string
passphraseCancel: string
passphraseError: string
passphraseLabel: string
passphraseMessage: string
passphraseSubmit: string
passphraseTitle: string
poweredBy: true
requiredFieldLabel: string
signInLabel: string
smsCarrierDefault: string
smsCarrierError: string
smsCarrierFieldLabel: string
smsCodeCancel: string
smsCodeError: string
smsCodeFieldLabel: string
smsCodeMessage: string
smsCodeSubmit: string
smsCodeTitle: string
smsCountryFieldLabel: string
smsCountryFormat: string
smsHaveAccessCode: string
smsMessageFormat: string
smsNumberCancel: string
smsNumberError: string
smsNumberFieldLabel: string
smsNumberFormat: string
smsNumberMessage: string
smsNumberSubmit: string
smsNumberTitle: string
smsUsernameFormat: string
smsValidityDuration: 0
sponsorBackLink: string
sponsorCancel: string
sponsorEmail: string
sponsorEmailError: string
sponsorEmailTemplate: string
sponsorInfoApproved: string
sponsorInfoDenied: string
sponsorInfoPending: string
sponsorName: string
sponsorNameError: string
sponsorNotePending: string
sponsorStatusApproved: string
sponsorStatusDenied: string
sponsorStatusPending: string
sponsorSubmit: string
sponsorsFieldLabel: string
tos: true
tosAcceptLabel: string
tosError: string
tosLink: string
tosText: string
schema:
$ref: '#/components/schemas/wlan_portal_template'
description: Request Body
responses:
'200':
$ref: '#/components/responses/Portaltemplate'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: updateSiteWlanPortalTemplate
tags:
- Sites Wlans
components:
schemas:
wlan_mxtunnel_ids:
description: When `interface`=`mxtunnel`, id of the Mist Tunnel
format: uuid
items:
examples:
- 08cd7499-5841-51c8-e663-fb16b6f3b45e
type: string
type: array
wlan_cisco_cwa_allowed_hostnames:
description: List of hostnames without http(s):// (matched by substring)
items:
examples:
- snapchat.com
type: string
type: array
coa_server:
additionalProperties: false
description: CoA Server
properties:
disable_event_timestamp_check:
default: false
description: Whether to disable Event-Timestamp Check
type: boolean
enabled:
default: false
type: boolean
ip:
examples:
- 1.2.3.4
format: ipv4
type: string
port:
$ref: '#/components/schemas/radius_coa_port'
secret:
examples:
- testing456
type: string
required:
- ip
- secret
type: object
strings:
items:
type: string
type: array
uniqueItems: true
wlan_bonjour:
additionalProperties: false
description: Bonjour gateway wlan settings
properties:
additional_vlan_ids:
$ref: '#/components/schemas/additional_vlan_ids'
enabled:
default: false
description: Whether to enable bonjour for this WLAN. Once enabled, limit_bcast is assumed true, allow_mdns is assumed false
type: boolean
services:
additionalProperties:
$ref: '#/components/schemas/wlan_bonjour_service_properties'
description: "What services are allowed. \nProperty key is the service name"
examples:
- airplay:
radius_groups:
- teachers
scope: same_ap
type: object
type: object
wlan_portal_sponsors:
description: Object of allowed sponsors email with name. Required if `sponsor_enabled` is `true` and `sponsor_email_domains` is empty. Property key is the sponsor email, Property value is the sponsor name. List of email allowed for backward compatibility
oneOf:
- $ref: '#/components/schemas/wlan_portal_sponsors_list'
- $ref: '#/components/schemas/wlan_portal_sponsors_object'
wlan_portal_template_setting:
additionalProperties: false
description: Portal template wlan settings
properties:
accessCodeAlternateEmail:
default: Use alternate email address
type: string
alignment:
$ref: '#/components/schemas/portal_template_alignment'
ar:
$ref: '#/components/schemas/wlan_portal_template_setting_locale'
authButtonAmazon:
default: Sign in with Amazon
description: Label for Amazon auth button
type: string
authButtonAzure:
default: Sign in with Azure
description: Label for Azure auth button
type: string
authButtonEmail:
default: Sign in with Email
description: Label for Email auth button
type: string
authButtonFacebook:
default: Sign in with Facebook
description: Label for Facebook auth button
type: string
authButtonGoogle:
default: Sign in with Google
description: Label for Google auth button
type: string
authButtonMicrosoft:
default: Sign in with Microsoft
description: Label for Microsoft auth button
type: string
authButtonPassphrase:
default: Sign in with Passphrase
description: Label for passphrase auth button
type: string
authButtonSms:
default: Sign in with Text Message
description: Label for SMS auth button
type: string
authButtonSponsor:
default: Sign in as Guest
description: Label for Sponsor auth button
type: string
authLabel:
default: Connect to Wi-Fi with
type: string
backLink:
description: Label of the link to go back to /logon
type: string
ca-ES:
$ref: '#/components/schemas/wlan_portal_template_setting_locale'
color:
default: '#1074bc'
description: Portal main color
type: string
colorDark:
default: '#0b5183'
type: string
colorLight:
default: '#3589c6'
type: string
company:
default: false
description: Whether company field is required
type: boolean
companyError:
default: Please provide your company name
description: Error message when company not provided
type: string
companyLabel:
default: Company
description: Label of company field
type: string
cs-CZ:
$ref: '#/components/schemas/wlan_portal_template_setting_locale'
da-DK:
$ref: '#/components/schemas/wlan_portal_template_setting_locale'
de-DE:
$ref: '#/components/schemas/wlan_portal_template_setting_locale'
el-GR:
$ref: '#/components/schemas/wlan_portal_template_setting_locale'
email:
default: f
# --- truncated at 32 KB (135 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mist-ai/refs/heads/main/openapi/mist-ai-sites-wlans-api-openapi.yml