Gateway Template is applied to a site for gateway(s) in a site. When Templates are not used, Site Setting holds settings for multiple device types and they can differ to set device_type specific configs, use this whatever is defined under `gateway` will overwrite/shadow the one at root-level
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/mist-orgs-gateway-templates-api"curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
contact:
email: tmunzer@juniper.net
name: Thomas Munzer
description: '> Version: **2606.1.1**
>
> Date: **July 10, 2026**
<div class="notification"> NOTE:<br>Some important API changes will be introduced. Please make sure to read the <a href="https://www.juniper.net/documentation/us/en/software/mist/api/http/guides/important-api-changes">announcements</a> </div>
---
## Additional Documentation
* [Mist Automation Guide](https://www.juniper.net/documentation/us/en/software/mist/automation-integration/index.html)
* [Mist Location SDK](https://www.juniper.net/documentation/us/en/software/mist/location-services/topics/concept/mist-how-get-mist-sdk.html)
* [Mist Product Updates](https://www.juniper.net/documentation/us/en/software/mist/product-updates/)
## Helpful Resources
* [API Sandbox and Exercises](https://api-class.mist.com/)
* [Postman Collection, Runners and Webhook Samples](https://www.postman.com/juniper-mist/workspace/mist-systems-s-public-workspace)
* [Python Script Examples](https://github.com/tmunzer/mist_library)
* [API Demo Apps](https://apps.mist-lab.fr/)
* [Juniper Blog](https://blogs.juniper.net/)
## Mist Web Browser Extension:
* Google Chrome, Microsoft Edge and other Chromium-based browser: [Chrome Web Store](https://chromewebstore.google.com/detail/mist-extension/ejhpdcljeamillfhdihkkmoakanpbplh)
* Firefox: [Firefox Add-ons](https://addons.mozilla.org/en-US/firefox/addon/mist-extension/)
---'
license:
name: MIT
url: https://raw.githubusercontent.com/tmunzer/Mist-OAS3.0/main/LICENSE
title: Mist Orgs Gateway Templates API
version: 2606.1.1
x-logo:
altText: Juniper-MistAI
backgroundColor: '#FFFFFF'
url: https://www.mist.com/wp-content/uploads/logo.png
servers:
- description: Mist Global 01
url: https://api.mist.com
- description: Mist Global 02
url: https://api.gc1.mist.com
- description: Mist Global 03
url: https://api.ac2.mist.com
- description: Mist Global 04
url: https://api.gc2.mist.com
- description: Mist Global 05
url: https://api.gc4.mist.com
- description: Mist EMEA 01
url: https://api.eu.mist.com
- description: Mist EMEA 02
url: https://api.gc3.mist.com
- description: Mist EMEA 03
url: https://api.ac6.mist.com
- description: Mist EMEA 04
url: https://api.gc6.mist.com
- description: Mist APAC 01
url: https://api.ac5.mist.com
- description: Mist APAC 02
url: https://api.gc5.mist.com
- description: Mist APAC 03
url: https://api.gc7.mist.com
security:
- apiToken: []
- csrfToken: []
tags:
- description: 'Gateway Template is applied to a site for gateway(s) in a site.
When Templates are not used, Site Setting holds settings for multiple device types and they can differ to set device_type specific configs, use this whatever is defined under `gateway` will overwrite/shadow the one at root-level'
name: Orgs Gateway Templates
paths:
/api/v1/orgs/{org_id}/gatewaytemplates:
parameters:
- $ref: '#/components/parameters/org_id'
get:
description: List organization gateway templates, which provide reusable WAN gateway configuration that can be applied to gateways at sites.
operationId: listOrgGatewayTemplates
parameters:
- $ref: '#/components/parameters/limit'
- $ref: '#/components/parameters/page'
responses:
'200':
$ref: '#/components/responses/GatewaytemplatesArray'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: listOrgGatewayTemplates
tags:
- Orgs Gateway Templates
post:
description: 'Create an organization gateway template with reusable WAN gateway networks, ports, routing, and service-policy configuration.
Gateway templates can be applied to multiple sites within the organization to provide consistent gateway configuration across sites.
To assign a gateway template to a site, use the [Update Site](/#operations/updateSiteInfo) endpoint and specify the gateway template ID in the `gatewaytemplate_id` field of the request body.'
operationId: createOrgGatewayTemplate
requestBody:
content:
application/json:
examples:
Example:
value:
dhcpd_config:
Corp-Mgmt:
dns_servers:
- 8.8.8.8
dns_suffix:
- stag.one
gateway: 10.3.172.9
ip_end: 10.3.172.99
ip_start: 10.3.172.50
type: local
Corp-lan:
dns_servers:
- 8.8.8.8
dns_suffix:
- stag.one
gateway: 10.3.171.9
ip_end: 10.3.171.99
ip_start: 10.3.171.50
type: local
dnsOverride: true
dns_servers:
- 10.3.20.201
- 10.3.51.222
- 1.1.1.1
dns_suffix:
- example.com
extra_routes:
10.101.0.0/16:
via: 10.3.100.10
ip_configs:
Corp-Core:
ip: 10.3.100.9
netmask: /24
type: static
Corp-Mgmt:
ip: 10.3.172.9
netmask: /24
type: static
Corp-lan:
ip: 10.3.171.9
netmask: /24
type: static
name: ITParis
ntpOverride: true
ntp_servers:
- 10.3.51.222
path_preferences:
core:
paths:
- networks:
- Corp-Core
type: local
strategy: ordered
lab:
paths:
- networks:
- Corp-lan
type: local
strategy: ordered
mgmt:
paths:
- networks:
- Corp-Mgmt
type: local
strategy: ordered
untrust:
paths:
- name: wan
type: wan
strategy: ordered
port_config:
ge-0/0/0:
aggregated: false
ip_config:
gateway: 192.168.1.1
ip: 192.168.1.9
netmask: /24
type: static
name: wan
redundant: false
traffic_shaping:
enabled: false
usage: wan
wan_type: broadband
ge-0/0/6-7:
ae_disable_lacp: false
ae_idx: '0'
ae_lacp_force_up: true
aggregated: true
networks:
- Corp-lan
- Corp-Mgmt
- Corp-Core
usage: lan
service_policies:
- action: allow
idp:
enabled: false
name: ITParis-Internal
path_preference: core
services:
- internal_dns
- drive
tenants:
- ITParis
- action: deny
idp:
enabled: false
name: ITParis-internet
path_preference: untrust
services:
- internet_any
tenants:
- ITParis
type: standalone
schema:
$ref: '#/components/schemas/gateway_template'
description: Gateway Template
responses:
'200':
$ref: '#/components/responses/Gatewaytemplate'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: createOrgGatewayTemplate
tags:
- Orgs Gateway Templates
/api/v1/orgs/{org_id}/gatewaytemplates/{gatewaytemplate_id}:
parameters:
- $ref: '#/components/parameters/org_id'
- $ref: '#/components/parameters/gatewaytemplate_id'
delete:
description: Delete an organization gateway template and remove that reusable gateway configuration object from the organization.
operationId: deleteOrgGatewayTemplate
responses:
'200':
$ref: '#/components/responses/OK'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: deleteOrgGatewayTemplate
tags:
- Orgs Gateway Templates
get:
description: Retrieve the configuration stored in a specific organization gateway template.
operationId: getOrgGatewayTemplate
responses:
'200':
$ref: '#/components/responses/Gatewaytemplate'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: getOrgGatewayTemplate
tags:
- Orgs Gateway Templates
put:
description: Update the configuration stored in an organization gateway template.
operationId: updateOrgGatewayTemplate
requestBody:
content:
application/json:
examples:
Example:
value:
dhcpd_config:
Corp-Mgmt:
dns_servers:
- 8.8.8.8
dns_suffix:
- stag.one
gateway: 10.3.172.9
ip_end: 10.3.172.99
ip_start: 10.3.172.50
type: local
Corp-lan:
dns_servers:
- 8.8.8.8
dns_suffix:
- stag.one
gateway: 10.3.171.9
ip_end: 10.3.171.99
ip_start: 10.3.171.50
type: local
dnsOverride: true
dns_servers:
- 10.3.20.201
- 10.3.51.222
- 1.1.1.1
dns_suffix:
- example.com
extra_routes:
10.101.0.0/16:
via: 10.3.100.10
ip_configs:
Corp-Core:
ip: 10.3.100.9
netmask: /24
type: static
Corp-Mgmt:
ip: 10.3.172.9
netmask: /24
type: static
Corp-lan:
ip: 10.3.171.9
netmask: /24
type: static
name: ITParis
ntpOverride: true
ntp_servers:
- 10.3.51.222
path_preferences:
core:
paths:
- networks:
- Corp-Core
type: local
strategy: ordered
lab:
paths:
- networks:
- Corp-lan
type: local
strategy: ordered
mgmt:
paths:
- networks:
- Corp-Mgmt
type: local
strategy: ordered
untrust:
paths:
- name: wan
type: wan
strategy: ordered
port_config:
ge-0/0/0:
aggregated: false
ip_config:
gateway: 192.168.1.1
ip: 192.168.1.9
netmask: /24
type: static
name: wan
redundant: false
traffic_shaping:
enabled: false
usage: wan
wan_type: broadband
ge-0/0/6-7:
ae_disable_lacp: false
ae_idx: '0'
ae_lacp_force_up: true
aggregated: true
networks:
- Corp-lan
- Corp-Mgmt
- Corp-Core
usage: lan
service_policies:
- action: allow
idp:
enabled: false
name: ITParis-Internal
path_preference: core
services:
- internal_dns
- drive
tenants:
- ITParis
- action: deny
idp:
enabled: false
name: ITParis-internet
path_preference: untrust
services:
- internet_any
tenants:
- ITParis
type: standalone
schema:
$ref: '#/components/schemas/gateway_template'
description: Gateway Template
responses:
'200':
$ref: '#/components/responses/Gatewaytemplate'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: updateOrgGatewayTemplate
tags:
- Orgs Gateway Templates
components:
schemas:
dhcpd_config_servers:
description: If `type`==`relay`, upstream IPv4 DHCP servers
examples:
- - 11.2.3.4
items:
type: string
type: array
wan_extra_routes6:
additionalProperties: false
description: Additional IPv6 route for a WAN interface
properties:
via:
description: IPv6 next-hop address for this WAN extra route
format: ipv6
type: string
type: object
gateway_mgmt:
additionalProperties: false
description: Gateway management-plane and access settings
properties:
admin_sshkeys:
$ref: '#/components/schemas/gateway_mgmt_admin_sshkeys'
description: SSR-only SSH public keys for administrative access
app_probing:
$ref: '#/components/schemas/app_probing'
description: Application probing configuration for gateway monitoring
app_usage:
description: Consumes uplink bandwidth, requires WA license
type: boolean
auto_signature_update:
$ref: '#/components/schemas/gateway_mgmt_auto_signature_update'
description: Schedule for automatic security signature updates
config_revert_timer:
default: 10
description: Rollback timer for commit confirmed
maximum: 30
minimum: 1
type: integer
disable_console:
default: false
description: For SSR and SRX, disable console port
type: boolean
disable_oob:
default: false
description: For SSR and SRX, disable management interface
type: boolean
disable_usb:
default: false
description: For SSR and SRX, disable usb interface
type: boolean
fips_enabled:
default: false
description: Whether FIPS mode is enabled on the gateway
type: boolean
probe_hosts:
$ref: '#/components/schemas/gateway_mgmt_probe_hosts'
description: IPv4 probe targets used for gateway connectivity checks
probe_hostsv6:
$ref: '#/components/schemas/gateway_mgmt_probe_hostsv6'
description: IPv6 probe targets used for gateway connectivity checks
protect_re:
$ref: '#/components/schemas/protect_re'
description: Control-plane protection settings for the gateway
root_password:
description: SRX only. Root password for local gateway access
format: password
type: string
security_log_source_address:
description: IPv4 source address used for gateway security log traffic
examples:
- 192.168.1.1
format: ipv4
type: string
security_log_source_interface:
description: Source interface used for gateway security log traffic
examples:
- ge-0/0/1.0
type: string
type: object
service_policy_skyatp_dns_tunnel_detection_profile:
description: 'enum: `default`, `standard`, `strict`'
enum:
- default
- standard
- strict
type: string
org_id:
description: Unique identifier of a Mist organization
examples:
- a97c1b22-a4e9-411e-9bfd-d8695a0f9e61
format: uuid
readOnly: true
type: string
tunnel_config_node_remote_ids:
description: Only if `provider`==`jse-ipsec` or `provider`==`custom-ipsec`
items:
type: string
type: array
dhcpd_config_property:
additionalProperties: false
description: DHCP server or relay configuration for one network
properties:
dns_servers:
$ref: '#/components/schemas/dhcpd_config_dns_servers'
description: If `type`==`local` or `type6`==`local`, DNS servers advertised to DHCP clients
dns_suffix:
$ref: '#/components/schemas/dhcpd_config_dns_suffix'
description: If `type`==`local` or `type6`==`local`, DNS search suffixes advertised to DHCP clients
fixed_bindings:
$ref: '#/components/schemas/dhcpd_config_fixed_bindings'
description: If `type`==`local` or `type6`==`local`, fixed client bindings for local DHCP service
gateway:
description: If `type`==`local` - optional, `ip` will be used if not provided
examples:
- 192.168.70.1
type: string
ip6_end:
description: If `type6`==`local`, ending IPv6 address for the DHCP lease pool
examples:
- 2607:f8b0:4005:808::ff
type: string
ip6_start:
description: If `type6`==`local`, starting IPv6 address for the DHCP lease pool
examples:
- 2607:f8b0:4005:808::2
type: string
ip_end:
description: If `type`==`local`, ending IPv4 address for the DHCP lease pool
examples:
- 192.168.70.200
type: string
ip_start:
description: If `type`==`local`, starting IPv4 address for the DHCP lease pool
examples:
- 192.168.70.100
type: string
lease_time:
default: 86400
description: In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
maximum: 604800
minimum: 3600
type: integer
options:
$ref: '#/components/schemas/dhcpd_config_options'
description: If `type`==`local` or `type6`==`local`, custom DHCP options advertised to clients
server_id_override:
default: false
description: "`server_id_override`==`true` means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, \nshould overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address."
type: boolean
servers:
$ref: '#/components/schemas/dhcpd_config_servers'
description: If `type`==`relay`, upstream IPv4 DHCP servers
serversv6:
$ref: '#/components/schemas/dhcpd_config_servers6'
description: If `type6`==`relay`, upstream IPv6 DHCP servers
type:
$ref: '#/components/schemas/dhcpd_config_type'
description: IPv4 DHCP mode for this network
type6:
$ref: '#/components/schemas/dhcpd_config_type6'
description: IPv6 DHCP mode for this network
vendor_encapsulated:
$ref: '#/components/schemas/dhcpd_config_vendor_options'
description: If `type`==`local` or `type6`==`local`, vendor-encapsulated DHCP options advertised to clients
type: object
gateway_template_type:
default: standalone
description: 'Gateway template deployment type. enum: `spoke`, `standalone`'
enum:
- spoke
- standalone
examples:
- standalone
type: string
ntp_servers:
description: List of NTP servers specific to this device. By default, those in Site Settings will be used
items:
type: string
type: array
bgp_config:
additionalProperties: false
description: BGP session configuration. BFD is enabled when either bfd_minimum_interval or bfd_multiplier is configured
properties:
auth_key:
description: Optional if `via`==`lan`, `via`==`tunnel` or `via`==`wan`
type: string
bfd_minimum_interval:
default: 350
description: "Optional if `via`==`lan`, `via`==`tunnel` or `via`==`wan`, when bfd_multiplier is configured alone. Default:\n * 1000 if `type`==`external`\n * 350 `type`==`internal`"
maximum: 255000
minimum: 1
type:
- integer
- 'null'
bfd_multiplier:
default: 3
description: Optional if `via`==`lan`, `via`==`tunnel` or `via`==`wan`, when bfd_minimum_interval_is_configured alone
maximum: 255
minimum: 1
type:
- integer
- 'null'
disable_bfd:
default: false
description: Optional if `via`==`lan`, `via`==`tunnel` or `via`==`wan`. BFD provides faster path failure detection and is enabled by default
type: boolean
export:
description: Routing policy applied to routes exported by this BGP session
type: string
export_policy:
description: Default export policies if no per-neighbor policies defined
type: string
extended_v4_nexthop:
description: Optional if `via`==`lan`, `via`==`tunnel` or `via`==`wan`. By default, either inet/net6 unicast depending on neighbor IP family (v4 or v6). For v6 neighbors, to exchange v4 nexthop, which allows dual-stack support, enable this
type: boolean
graceful_restart_time:
default: 0
description: Optional if `via`==`lan`, `via`==`tunnel` or `via`==`wan`. `0` means disable
maximum: 4095
minimum: 0
type: integer
hold_time:
default: 90
description: Optional if `via`==`lan`, `via`==`tunnel` or `via`==`wan`. Default is 90.
maximum: 65535
minimum: 0
type: integer
import:
description: Routing policy applied to routes imported by this BGP session
type: string
import_policy:
description: Optional if `via`==`lan`, `via`==`tunnel` or `via`==`wan`. Default import policies if no per-neighbor policies defined
type: string
local_as:
$ref: '#/components/schemas/bgp_local_as'
description: Required if `via`==`lan`, `via`==`tunnel` or `via`==`wan`; local BGP Autonomous System (AS) number
neighbor_as:
$ref: '#/components/schemas/bgp_as'
description: Default BGP neighbor Autonomous System (AS) number for this session
neighbors:
additionalProperties:
$ref: '#/components/schemas/bgp_config_neighbors'
description: Required if `via`==`lan`, `via`==`tunnel` or `via`==`wan`. If per-neighbor as is desired. Property key is the neighbor address
type: object
networks:
$ref: '#/components/schemas/bgp_config_networks'
description: Optional if `via`==`lan`; networks where BGP neighbors can connect to or from
no_private_as:
default: false
description: Optional if `via`==`lan`, `via`==`tunnel` or `via`==`wan`. If true, we will not advertise private ASNs (AS 64512-65534) to this neighbor
type: boolean
no_readvertise_to_overlay:
default: false
description: Optional if `via`==`lan`, `via`==`tunnel` or `via`==`wan`. By default, we'll re-advertise all learned BGP routers toward overlay
type: boolean
tunnel_name:
description: Optional if `via`==`tunnel`; tunnel name used for this BGP session
type: string
type:
$ref: '#/components/schemas/bgp_config_type'
description: Required if `via`==`lan`, `via`==`tunnel` or `via`==`wan`; BGP session type, internal or external
via:
$ref: '#/components/schemas/bgp_config_via'
description: Transport used for this BGP session, such as LAN, tunnel, VPN, or WAN
vpn_name:
description: Optional if `via`==`vpn`; VPN name used for this BGP session
type: string
wan_name:
description: Optional if `via`==`wan`; WAN interface name used for this BGP session
type: string
required:
- via
type: object
gateway_path_strategy:
default: ordered
description: 'enum: `ecmp`, `ordered`, `weighted`'
enum:
- ecmp
- ordered
- weighted
type: string
gateway_ip_configs:
additionalProperties:
$ref: '#/components/schemas/gateway_ip_config_property'
description: Property key is the network name
type: object
gateway_port_reth_nodes:
description: SSR only - supporting vlan-based redundancy (matching the size of `networks`)
examples:
- - node0
- node1
items:
type: string
type: array
gw_routing_policy_term_matching_vpn_neighbor_mac:
description: Overlay neighbor MAC addresses used for bgp_config where `via`==`vpn`
items:
type: string
type: array
gateway_vrf_instances:
additionalProperties:
$ref: '#/components/schemas/gateway_vrf_instance'
description: Property key is the VRF instance name
examples:
- CORP_VRF:
networks:
- CORP_NET
- MGMT_NET
type: object
tunnel_config:
additionalProperties: false
description: Gateway tunnel configuration for provider-managed or custom tunnels
properties:
auto_provision:
$ref: '#/components/schemas/tunnel_config_auto_provision'
description: Provider auto-provisioning settings for tunnel endpoints
ike_lifetime:
description: Only if `provider`==`custom-ipsec`. IKE lifetime configured for the custom IPsec tunnel
type: integer
ike_mode:
$ref: '#/components/schemas/tunnel_config_ike_mode'
description: Only if `provider`==`custom-ipsec`. IKE negotiation mode for the tunnel
ike_proposals:
$ref: '#/components/schemas/tunnel_config_ike_proposals'
description: If `provider`==`custom-ipsec`, IKE proposals used for custom IPsec negotiation
ipsec_lifetime:
description: If `provider`==`custom-ipsec`, IPsec lifetime configured for the custom tunnel
type: integer
ipsec_proposals:
$ref: '#/components/schemas/tunnel_config_ipsec_proposals'
description: Only if `provider`==`custom-ipsec`. IPsec proposals used for custom IPsec negotiation
local_id:
description: Required if `provider`==`zscaler-ipsec`, `provider`==`jse-ipsec` or `provider`==`custom-ipsec`
type: string
local_subnets:
$ref: '#/components/schemas/tunnel_config_local_subnets'
description: Local protected subnets advertised by this tunnel
mode:
$ref: '#/components/schemas/tunnel_config_tunnel_mode'
description: Tunnel failover mode used for primary and secondary endpoints
networks:
$ref: '#/components/schemas/tunnel_config_networks'
description: Destination networks reachable through this tunnel
primary:
$ref: '#/components/schemas/tunnel_config_node'
description: Main remote tunnel endpoint settings
probe:
$ref: '#/components/schemas/tunnel_config_probe'
description: Tunnel health probe settings
protocol:
$ref: '#/components/schemas/tunnel_config_protocol'
description: Only if `provider`==`custom-ipsec`. Tunnel protocol for custom tunnel negotiation
provider:
$ref: '#/components/schemas/tunnel_config_provider'
description: Tunnel provider used when auto provisioning is disabled
psk:
description: Required if `provider`==`zscaler-ipsec`, `provider`==`jse-ipsec` or `provider`==`custom-ipsec`
type: string
remote_subnets:
$ref: '#/components/schemas/tunnel_config_remote_subnets'
description: Remote protected subnets reached through policy-based IPsec
secondary:
$ref: '#/components/schemas/tunnel_config_node'
description: Backup remote tunnel endpoint settings
version:
$ref: '#/components/schemas/tunnel_config_version'
description: Only if `provider`==`custom-gre` or `provider`==`custom-ipsec`. Tunnel version value for custom tunnel configuration
type: object
network_multicast_groups:
additionalProperties:
$ref: '#/components/schemas/network_multicast_group'
description: Group address to RP (rendezvous point) mapping. Property Key is the CIDR (example "225.1.0.3/32")
type: object
strings:
description: Unique string values returned or accepted by this schema
items:
type: string
type: array
uniqueItems: true
tunnel_provider_options:
additionalProperties: false
description: Provider-specific options for gateway tunnel auto provisioning
properties:
jse:
$ref: '#/components/schemas/tunnel_provider_options_jse'
description: Juniper Secure Edge provisioning options for tunnel endpoints
prisma:
$ref: '#/components/schemas/tunnel_provider_options_prisma'
description: Palo Alto Prisma Access provisioning options for tunnel endpoints
zscaler:
$ref: '#/components/schemas/tunnel_provider_options_zscaler'
description: Provider settings for Zscaler tunnel endpoints
type: object
network_tenant_addresses:
description: IP addresses or subnets assigned to a network tenant
items:
description: The user/tenant IP address (i.e. "192.168.70.30"), an Subnet (i.e. "192.168.70.0/24") or a Variable (i.e. "{{myvar}}")
examples:
- 192.
# --- truncated at 32 KB (145 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mist/refs/heads/main/openapi/mist-orgs-gateway-templates-api-openapi.yml