A Mist Edge Cluster (MxCluster) is a group of Juniper Mist Edge devices that are configured to work together in order to provide high availability and load balancing for the tunneling of traffic from access points (APs). The cluster can consist of a single edge device or multiple edge devices.
openapi: 3.1.0
info:
contact:
email: tmunzer@juniper.net
name: Thomas Munzer
description: '> Version: **2606.1.1**
>
> Date: **July 10, 2026**
<div class="notification"> NOTE:<br>Some important API changes will be introduced. Please make sure to read the <a href="https://www.juniper.net/documentation/us/en/software/mist/api/http/guides/important-api-changes">announcements</a> </div>
---
## Additional Documentation
* [Mist Automation Guide](https://www.juniper.net/documentation/us/en/software/mist/automation-integration/index.html)
* [Mist Location SDK](https://www.juniper.net/documentation/us/en/software/mist/location-services/topics/concept/mist-how-get-mist-sdk.html)
* [Mist Product Updates](https://www.juniper.net/documentation/us/en/software/mist/product-updates/)
## Helpful Resources
* [API Sandbox and Exercises](https://api-class.mist.com/)
* [Postman Collection, Runners and Webhook Samples](https://www.postman.com/juniper-mist/workspace/mist-systems-s-public-workspace)
* [Python Script Examples](https://github.com/tmunzer/mist_library)
* [API Demo Apps](https://apps.mist-lab.fr/)
* [Juniper Blog](https://blogs.juniper.net/)
## Mist Web Browser Extension:
* Google Chrome, Microsoft Edge and other Chromium-based browser: [Chrome Web Store](https://chromewebstore.google.com/detail/mist-extension/ejhpdcljeamillfhdihkkmoakanpbplh)
* Firefox: [Firefox Add-ons](https://addons.mozilla.org/en-US/firefox/addon/mist-extension/)
---'
license:
name: MIT
url: https://raw.githubusercontent.com/tmunzer/Mist-OAS3.0/main/LICENSE
title: Mist Admins Orgs MxClusters API
version: 2606.1.1
x-logo:
altText: Juniper-MistAI
backgroundColor: '#FFFFFF'
url: https://www.mist.com/wp-content/uploads/logo.png
servers:
- description: Mist Global 01
url: https://api.mist.com
- description: Mist Global 02
url: https://api.gc1.mist.com
- description: Mist Global 03
url: https://api.ac2.mist.com
- description: Mist Global 04
url: https://api.gc2.mist.com
- description: Mist Global 05
url: https://api.gc4.mist.com
- description: Mist EMEA 01
url: https://api.eu.mist.com
- description: Mist EMEA 02
url: https://api.gc3.mist.com
- description: Mist EMEA 03
url: https://api.ac6.mist.com
- description: Mist EMEA 04
url: https://api.gc6.mist.com
- description: Mist APAC 01
url: https://api.ac5.mist.com
- description: Mist APAC 02
url: https://api.gc5.mist.com
- description: Mist APAC 03
url: https://api.gc7.mist.com
security:
- apiToken: []
- csrfToken: []
tags:
- description: A Mist Edge Cluster (MxCluster) is a group of Juniper Mist Edge devices that are configured to work together in order to provide high availability and load balancing for the tunneling of traffic from access points (APs). The cluster can consist of a single edge device or multiple edge devices.
name: Orgs MxClusters
paths:
/api/v1/orgs/{org_id}/mxclusters:
parameters:
- $ref: '#/components/parameters/org_id'
get:
description: List Mist Edge clusters in the organization, which group one or more Mist Edge devices for tunneling, RadSec, and related edge services.
operationId: listOrgMxEdgeClusters
parameters:
- $ref: '#/components/parameters/limit'
- $ref: '#/components/parameters/page'
responses:
'200':
$ref: '#/components/responses/MxclustersArray'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: listOrgMxEdgeClusters
tags:
- Orgs MxClusters
post:
description: 'Create a Mist Edge cluster with tunnel termination, RadSec, NAC,
and management settings.
**Note**: It is not recommended to combine multiple roles (tunnel termination, RadSec, NAC) on the same Mist Edge cluster'
operationId: createOrgMxEdgeCluster
requestBody:
content:
application/json:
examples:
Example:
value:
name: string
radsec:
auth_servers:
- host: string
port: 0
enabled: true
tunterm_ap_subnets:
- string
tunterm_hosts:
- string
schema:
$ref: '#/components/schemas/mxcluster'
description: Request Body
responses:
'200':
$ref: '#/components/responses/Mxcluster'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: createOrgMxEdgeCluster
tags:
- Orgs MxClusters
/api/v1/orgs/{org_id}/mxclusters/{mxcluster_id}:
parameters:
- $ref: '#/components/parameters/org_id'
- $ref: '#/components/parameters/mxcluster_id'
delete:
description: Delete a Mist Edge cluster by cluster ID, removing its cluster configuration from the organization.
operationId: deleteOrgMxEdgeCluster
responses:
'200':
$ref: '#/components/responses/OK'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: deleteOrgMxEdgeCluster
tags:
- Orgs MxClusters
get:
description: Retrieve configuration details for a specific Mist Edge cluster, including tunneling, RadSec, NAC, and management settings.
operationId: getOrgMxEdgeCluster
responses:
'200':
$ref: '#/components/responses/Mxcluster'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: getOrgMxEdgeCluster
tags:
- Orgs MxClusters
put:
description: Update a Mist Edge cluster's tunneling, RadSec, NAC, and management settings.
operationId: updateOrgMxEdgeCluster
requestBody:
content:
application/json:
examples:
Example:
value:
name: string
radsec:
auth_servers:
- host: string
port: 0
enabled: true
tunterm_ap_subnets:
- string
tunterm_hosts:
- string
schema:
$ref: '#/components/schemas/mxcluster'
description: Request Body
responses:
'200':
$ref: '#/components/responses/Mxcluster'
'400':
$ref: '#/components/responses/HTTP400'
'401':
$ref: '#/components/responses/HTTP401'
'403':
$ref: '#/components/responses/HTTP403'
'404':
$ref: '#/components/responses/HTTP404'
'429':
$ref: '#/components/responses/HTTP429'
summary: updateOrgMxEdgeCluster
tags:
- Orgs MxClusters
components:
schemas:
mxedge_mgmt:
additionalProperties: false
description: Management settings for a Mist Edge appliance
properties:
config_auto_revert:
default: false
description: Whether the Mist Edge automatically reverts configuration changes if connectivity is lost
type: boolean
fips_enabled:
default: false
description: Whether FIPS mode is enabled on the Mist Edge
type: boolean
mist_password:
description: Password for the Mist service account on the Mist Edge
examples:
- MIST_PASSWORD
type: string
oob_ip_type:
$ref: '#/components/schemas/mxedge_mgmt_oob_ip_type'
description: IPv4 address assignment mode for out-of-band management
oob_ip_type6:
$ref: '#/components/schemas/mxedge_mgmt_oob_ip_type6'
description: IPv6 address assignment mode for out-of-band management
root_password:
description: Root account password for the Mist Edge
examples:
- ROOT_PASSWORD
format: password
type: string
type: object
mxcluster_tunterm_hosts_order:
description: List of index of tunterm_hosts
items:
type: integer
type: array
mxcluster_radsec_proxy_hosts:
description: Hostnames or IPs for Mist AP to use as the TLS Server (i.e. they are reachable from AP) in addition to `tunterm_hosts`
items:
type: string
type: array
mxcluster_nac_client_vendor:
description: 'convention to be followed is : "<vendor>-<variant>", <variant> could be an os/platform/model/company. For ex: for cisco vendor, there could variants wrt os (such as ios, nxos etc), platforms (asa etc), or acquired companies (such as meraki, aironet) etc. enum: `aruba`, `cisco-aironet`, `cisco-dnac`, `cisco-ios`, `cisco-meraki`, `brocade`, `generic`, `juniper`, `paloalto`'
enum:
- aruba
- cisco-aironet
- cisco-dnac
- cisco-ios
- cisco-meraki
- brocade
- generic
- juniper
- paloalto
examples:
- cisco-ios
type: string
mxcluster_tunterm_hosts_selection:
default: shuffle
description: "Ordering of tunterm_hosts for Mist Edge within the same mxcluster. enum:\n * `shuffle`: the ordering of tunterm_hosts is randomized by the device''s MAC\n * `shuffle-by-site`: shuffle by site_id+tunnel_id (so when client connects to a specific Tunnel, it will go to the same (order of) mxedge, and we load-balancing between tunnels)\n * `ordered`: order decided by tunterm_hosts_order"
enum:
- ordered
- shuffle
- shuffle-by-site
type: string
mxcluster_radsec_tls:
additionalProperties: false
description: TLS settings for RadSec on a Mist Edge cluster
properties:
keypair:
description: Name or identifier of the TLS keypair used by RadSec
type: string
type: object
proxy:
additionalProperties: false
description: Proxy Configuration to talk to Mist
properties:
disabled:
default: false
description: Whether this proxy configuration is disabled
examples:
- true
type: boolean
url:
description: Proxy URL used to reach Mist
examples:
- https://proxy.corp.com:8080/
type: string
type: object
mxedge_das_coa_server:
additionalProperties: false
description: CoA or Disconnect-Message client allowed to contact Mist Edge DAS
properties:
disable_event_timestamp_check:
default: false
description: Whether to disable Event-Timestamp Check
type: boolean
enabled:
description: Whether this DAS CoA or Disconnect-Message client is enabled
type: boolean
host:
description: Server host allowed to send CoA or Disconnect-Message requests to Mist Edges
type: string
port:
default: 3799
description: UDP port where Mist Edges accept CoA or Disconnect-Message requests from this host
type: integer
require_message_authenticator:
default: false
description: Whether to require Message-Authenticator in requests
type: boolean
secret:
description: Shared secret used by this DAS CoA or Disconnect-Message client
format: password
type: string
type: object
mxcluster_radsec:
additionalProperties: false
description: RadSec proxy configuration for a Mist Edge cluster. Used when the Mist Edge Cluster is used as a RADIUS Proxy between the local devices and external RADIUS Server.
properties:
acct_servers:
$ref: '#/components/schemas/mxcluster_radsec_acct_servers'
description: RADIUS accounting servers used by the RadSec proxy
auth_servers:
$ref: '#/components/schemas/mxcluster_radsec_auth_servers'
description: RADIUS authentication servers used by the RadSec proxy
enabled:
description: Whether to enable service on Mist Edge i.e. RADIUS proxy over TLS
type: boolean
match_ssid:
description: Whether to match ssid in request message to select from a subset of RADIUS servers
type: boolean
nas_ip_source:
$ref: '#/components/schemas/mxcluster_radsec_nas_ip_source'
description: Source used to populate NAS-IP-Address and NAS-IPv6-Address attributes
proxy_hosts:
$ref: '#/components/schemas/mxcluster_radsec_proxy_hosts'
description: AP-reachable hostnames or IP addresses advertised as RadSec TLS servers
server_selection:
$ref: '#/components/schemas/mxcluster_radsec_server_selection'
description: RADIUS server selection strategy for RadSec failover
src_ip_source:
$ref: '#/components/schemas/mxcluster_radsec_src_ip_source'
description: Connection source interface or address used when reaching RADIUS servers
type: object
mxcluster_tunterm_extra_route:
additionalProperties: false
description: Extra route for Mist Tunneled VLAN traffic
properties:
via:
description: Next-hop IP address for this extra route
type: string
type: object
id:
description: Unique ID of the object instance in the Mist Organization
examples:
- 53f10664-3ce8-4c27-b382-0ef66432349f
format: uuid
readOnly: true
type: string
strings:
description: Unique string values returned or accepted by this schema
items:
type: string
type: array
uniqueItems: true
org_id:
description: Unique identifier of a Mist organization
examples:
- a97c1b22-a4e9-411e-9bfd-d8695a0f9e61
format: uuid
readOnly: true
type: string
response_http429:
additionalProperties: false
description: Standard HTTP 429 rate limit error response
properties:
detail:
description: Human-readable explanation of the rate limit error
examples:
- Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold
type: string
type: object
response_http401:
additionalProperties: false
description: Standard HTTP 401 authentication error response
properties:
detail:
description: Human-readable explanation of the authentication error
examples:
- Authentication credentials were not provided.
type: string
type: object
mxcluster_nac_client_ip:
additionalProperties: false
description: Mist NAC client settings for a RADIUS client IP or subnet
properties:
require_message_authenticator:
default: false
description: Whether to require Message-Authenticator in requests
type: boolean
secret:
description: Client-specific shared secret, if different from the cluster default
type: string
site_id:
description: Present only for third-party clients, identifies the associated site
examples:
- 00000000-0000-0000-1234-000000000000
format: uuid
type: string
vendor:
$ref: '#/components/schemas/mxcluster_nac_client_vendor'
description: RADIUS client vendor profile for this IP or subnet
type: object
created_time:
description: When the object has been created, in epoch
format: double
readOnly: true
type: number
mxcluster:
description: Mist Edge cluster that groups one or more Mist Edge devices for tunneling, RadSec, and related edge services
properties:
created_time:
$ref: '#/components/schemas/created_time'
description: Timestamp when the Mist Edge cluster was created
for_site:
description: Whether this Mist Edge cluster is scoped to a site
readOnly: true
type: boolean
id:
$ref: '#/components/schemas/id'
description: Unique identifier of the Mist Edge cluster
mist_das:
$ref: '#/components/schemas/mxedge_das'
description: Dynamic authorization service settings for the cluster
mist_nac:
$ref: '#/components/schemas/mxcluster_nac'
description: NAC settings for the Mist Edge cluster
mist_nacedge:
$ref: '#/components/schemas/mxcluster_nacedge'
description: NAC Edge survivability settings for the cluster; requires `mist_nac` to be enabled
modified_time:
$ref: '#/components/schemas/modified_time'
description: Timestamp when the Mist Edge cluster was last modified
mxedge_mgmt:
$ref: '#/components/schemas/mxedge_mgmt'
description: Out-of-band management settings for Mist Edges in the cluster
name:
description: Display name of the Mist Edge cluster
type: string
org_id:
$ref: '#/components/schemas/org_id'
description: Identifier of the org that owns the Mist Edge cluster
proxy:
$ref: '#/components/schemas/proxy'
description: Network proxy settings used by Mist Edges in the cluster to communicate with the Mist Cloud
radsec:
$ref: '#/components/schemas/mxcluster_radsec'
description: TLS RADIUS proxy settings for the Mist Edge cluster
radsec_tls:
$ref: '#/components/schemas/mxcluster_radsec_tls'
description: TLS keypair settings for RadSec on the Mist Edge cluster
site_id:
$ref: '#/components/schemas/site_id'
description: Identifier of the site when the Mist Edge cluster is site-scoped
tunterm_ap_subnets:
$ref: '#/components/schemas/mxcluster_tunterm_ap_subnets'
description: AP source subnets allowed to establish Mist tunnels
tunterm_dhcpd_config:
$ref: '#/components/schemas/tunterm_dhcpd_config'
description: DHCP relay or server settings for tunneled VLANs
tunterm_extra_routes:
$ref: '#/components/schemas/mxcluster_tunterm_extra_routes'
description: Extra routes for Mist Tunnel VLAN traffic
tunterm_hosts:
$ref: '#/components/schemas/mxcluster_tunterm_hosts'
description: Hostnames or IP addresses used as Mist Tunnel peers
tunterm_hosts_order:
$ref: '#/components/schemas/mxcluster_tunterm_hosts_order'
description: Explicit host ordering indexes used when ordered selection is configured
tunterm_hosts_selection:
$ref: '#/components/schemas/mxcluster_tunterm_hosts_selection'
description: Selection strategy for ordering tunnel termination hosts
tunterm_monitoring:
$ref: '#/components/schemas/mxcluster_tunterm_monitoring'
description: Monitoring checks for tunnel termination reachability
tunterm_monitoring_disabled:
description: Whether tunnel termination monitoring is disabled for the cluster
type: boolean
type: object
mxcluster_tunterm_monitoring:
description: Tunnel termination monitoring checks for a Mist Edge cluster
items:
$ref: '#/components/schemas/tunterm_monitoring'
type: array
mxcluster_tunterm_hosts:
description: Hostnames or IPs where a Mist Tunnel will use as the Peer (i.e. they are reachable from AP)
items:
type: string
type: array
mxcluster_tunterm_ap_subnets:
description: List of subnets where we allow AP to establish Mist Tunnels from
items:
type: string
type: array
response_http403:
additionalProperties: false
description: Standard HTTP 403 permission error response
properties:
detail:
description: Human-readable explanation of the permission error
examples:
- You do not have permission to perform this action.
type: string
type: object
mxcluster_radsec_src_ip_source:
default: any
description: 'Specify IP address to connect to auth_servers and acct_servers. enum: `any`, `oob`, `oob6`, `tunnel`, `tunnel6`'
enum:
- any
- oob
- oob6
- tunnel
- tunnel6
type: string
tunterm_dhcpd_type:
default: relay
description: 'DHCP handling mode for tunnel termination. enum: `relay`'
enum:
- relay
type: string
mxclusters:
description: List of Mist Edge clusters
items:
$ref: '#/components/schemas/mxcluster'
type: array
tunterm_dhcpd_config_property:
additionalProperties: false
description: Per-VLAN DHCP relay configuration for tunnel termination
properties:
enabled:
default: false
description: Whether DHCP relay is enabled for this tunneled VLAN
type: boolean
servers:
$ref: '#/components/schemas/strings'
description: DHCP server IP addresses used as relay targets for this VLAN
type:
$ref: '#/components/schemas/tunterm_dhcpd_type'
description: DHCP forwarding mode for this tunneled VLAN
type: object
tunterm_monitoring_protocol:
description: 'enum: `arp`, `ping`, `tcp`'
enum:
- arp
- ping
- tcp
examples:
- tcp
minLength: 1
type: string
mxcluster_tunterm_extra_routes:
additionalProperties:
$ref: '#/components/schemas/mxcluster_tunterm_extra_route'
description: Extra routes for Mist Tunneled VLANs. Property key is a CIDR
type: object
response_http400:
additionalProperties: false
description: Standard HTTP 400 bad request error response
properties:
detail:
description: Human-readable explanation of the bad request error
examples:
- 'JSON parse error - Expecting value: line 5 column 8 (char 56)'
type: string
type: object
mxcluster_rad_auth_server_keywrap_format:
default: ascii
description: 'if used for Mist APs. enum: `ascii`, `hex`'
enum:
- ascii
- hex
type:
- string
- 'null'
mxcluster_nacedge_caching_site_ids:
description: Site UUIDs whose auth requests are cached by NAC Edges in the cluster
examples:
- - 4ac1dcf4-9d8b-7910-ac87-6ad873648a5c
- 7dc1acf4-9d8b-7910-ac87-6ad873648a5c
items:
format: uuid
type: string
type: array
mxcluster_radsec_nas_ip_source:
default: any
description: 'SSpecify NAS-IP-ADDRESS, NAS-IPv6-ADDRESS to use with auth_servers. enum: `any`, `oob`, `oob6`, `tunnel`, `tunnel6`'
enum:
- any
- oob
- oob6
- tunnel
- tunnel6
type: string
mxedge_mgmt_oob_ip_type6:
default: autoconf
description: 'enum: `autoconf`, `dhcp`, `disabled`, `static`'
enum:
- autoconf
- dhcp
- disabled
- static
type: string
mxcluster_nac:
additionalProperties: false
description: Mist NAC RADIUS settings for a Mist Edge cluster. Used when the Mist Edge Cluster is used as a RADIUS Proxy between the local devices and the Mist NAC
properties:
acct_server_port:
default: 1813
description: RADIUS accounting port used by Mist NAC on the cluster
type: integer
auth_server_port:
default: 1812
description: RADIUS authentication port used by Mist NAC on the cluster
type: integer
client_ips:
additionalProperties:
$ref: '#/components/schemas/mxcluster_nac_client_ips'
description: Property key is the RADIUS Client IP/Subnet.
type: object
enabled:
default: false
description: Whether Mist NAC is enabled on the cluster
type: boolean
secret:
description: Shared RADIUS secret used by Mist NAC clients
examples:
- testing123
type: string
type: object
tunterm_dhcpd_config:
additionalProperties:
$ref: '#/components/schemas/tunterm_dhcpd_config_property'
description: DHCP server/relay configuration of Mist Tunneled VLANs. Property key is the VLAN ID
properties:
enabled:
default: false
description: Whether DHCP relay is enabled for tunnel termination VLANs
type: boolean
servers:
$ref: '#/components/schemas/strings'
description: DHCP server IP addresses used as relay targets
type:
$ref: '#/components/schemas/tunterm_dhcpd_type'
description: DHCP forwarding mode for tunnel termination VLANs
type: object
mxedge_mgmt_oob_ip_type:
default: dhcp
description: 'enum: `dhcp`, `disabled`, `static`'
enum:
- dhcp
- disabled
- static
type: string
mxcluster_radsec_acct_server:
additionalProperties: false
description: RadSec accounting server settings for a Mist Edge cluster
properties:
host:
description: IP / hostname of RADIUS server
type: string
port:
default: 1813
description: Acct port of RADIUS server
type: integer
secret:
description: Shared secret used with this RADIUS accounting server
format: password
type: string
ssids:
$ref: '#/components/schemas/mxcluster_radsec_acct_server_ssids'
description: WLAN SSID filters that use this accounting server when matching is enabled
type: object
mxcluster_radsec_server_selection:
default: ordered
description: 'When ordered, Mist Edge will prefer and go back to the first RADIUS server if possible. enum: `ordered`, `unordered`'
enum:
- ordered
- unordered
type: string
mxcluster_radsec_acct_servers:
description: List of RADIUS accounting servers, optional, order matters where the first one is treated as primary
items:
$ref: '#/components/schemas/mxcluster_radsec_acct_server'
type: array
uniqueItems: true
mxcluster_nac_client_ips:
additionalProperties:
$ref: '#/components/schemas/mxcluster_nac_client_ip'
description: Mist NAC client settings keyed by RADIUS client IP address or subnet
type: object
site_id:
description: Unique identifier of a Mist site
examples:
- 441a1214-6928-442a-8e92-e1d34b8ec6a6
format: uuid
readOnly: true
type: string
mxedge_das:
additionalProperties: false
description: Cloud-assisted Dynamic Authorization Service settings for a Mist Edge cluster
properties:
coa_servers:
$ref: '#/components/schemas/mxedge_das_coa_servers'
description: Dynamic authorization clients allowed to send CoA or Disconnect-Message requests
enabled:
default: false
description: Whether cloud-assisted DAS is enabled for the Mist Edge cluster
type: boolean
type: object
mxcluster_nacedge:
additionalProperties: false
description: NAC Edge survivability settings for a Mist Edge cluster. Requires `mist_nac` to be enabled on the cluster
properties:
auth_ttl:
default: 604800
description: Cache TTL for last auth result in seconds
maximum: 2592000
minimum: 60
type: integer
caching_site_ids:
$ref: '#/components/schemas/mxcluster_nacedge_caching_site_ids'
description: List of site UUIDs whose auth requests should be cached by NAC Edges in this cluster
default_dot1x_vlan:
description: Default VLAN for all dot1x devices, if different from default_vlan
examples:
- '20'
type: string
default_vlan:
description: Default VLAN to assign for devices not in the cache
examples:
- testVlan
type: string
enabled:
default: false
description: Whether NAC Edge survivability is enabled for this cluster
type: boolean
nac_edge_hosts:
$ref: '#/components/schemas/mxcluster_nacedge_nac_edge_hosts'
description: NAC Edge hostnames used by APs for survivability authentication
type: object
mxcluster_radsec_auth_servers:
description: List of RADIUS authentication servers, order matters where the first one is treated as primary
items:
$ref: '#/components/schemas/mxcluster_radsec_auth_server'
type: array
uniqueItems: true
mxcluster_radsec_auth_server_ssids:
description: List of ssids that will use this server if match_ssid is true and match is found
items:
type: string
type: array
tunterm_monitoring_item:
additionalProperties: false
description: Monitoring check for tunnel termination reachability
properties:
host:
description: Can be ip, ipv6, hostname
examples:
- 10.2.8.15
minLength: 1
type: string
port:
description: When `protocol`==`tcp`, TCP port checked by the monitoring probe
examples:
- 80
type: integer
protocol:
$ref: '#/components/schemas/tunterm_monitoring_protocol'
description: Monitoring method used for this tunnel termination check
src_vlan_id:
description: Optional source for the monitoring check, vlan_id configured in tunterm_other_ip_configs
examples:
- 5
type: integer
timeout:
default: 300
description: Maximum time for this monitoring check, in seconds
examples:
- 300
type: integer
type: object
mxedge_das_coa_servers:
description: Dynamic authorization clients configured to send CoA|DM to mist edges on port 3799
items:
$ref: '#/components/schemas/mxedge_das_coa_server'
type: array
tunterm_monitoring:
description: Tunnel termination monitoring checks
items:
$ref: '#/components/schemas/tunterm_monitoring_item'
type: array
modified_time:
description: When the object has been modified for the last time, in epoch
format: double
readOnly: true
type: number
mxcluster_radsec_auth_server:
additionalProperties: false
description: RadSec authentication server settings for a Mist Edge cluster
properties:
host:
description: IP / hostname of RADIUS server
type: string
inband_status_check:
default: false
description: Whether to enable inband status check
type: boolean
inband_status_interval:
default: 300
description: Inband status interval, in seconds
minimum: 0
type: integer
keywrap_enabled:
description: If used for Mist APs, enable keywrap algorithm. Default is false
type: boolean
keywrap_format:
$ref: '#/components/schemas/mxcluster_rad_auth_server_keywrap_format'
description: Encoding format for Mist AP RADIUS keywrap keys
keywrap_kek:
description: If used for Mist APs, encryption key
type: string
keywrap_mack:
description: If used for Mist APs, Message Authentication Code Key
type: string
port:
default: 1812
description: Auth port of RADI
# --- truncated at 32 KB (41 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mist/refs/heads/main/openapi/mist-orgs-mxclusters-api-openapi.yml