Mist Sites Device Profiles API

openapi: 3.2.0
info:
  contact:
    email: tmunzer@juniper.net
    name: Thomas Munzer
  description: '> Version: **2606.1.1**

    >

    > Date: **July 10, 2026**

    <div class="notification"> NOTE:<br>Some important API changes will be introduced. Please make sure to read the <a href="https://www.juniper.net/documentation/us/en/software/mist/api/http/guides/important-api-changes">announcements</a> </div>


    ---

    ## Additional Documentation

    * [Mist Automation Guide](https://www.juniper.net/documentation/us/en/software/mist/automation-integration/index.html)

    * [Mist Location SDK](https://www.juniper.net/documentation/us/en/software/mist/location-services/topics/concept/mist-how-get-mist-sdk.html)

    * [Mist Product Updates](https://www.juniper.net/documentation/us/en/software/mist/product-updates/)


    ## Helpful Resources

    * [API Sandbox and Exercises](https://api-class.mist.com/)

    * [Postman Collection, Runners and Webhook Samples](https://www.postman.com/juniper-mist/workspace/mist-systems-s-public-workspace)

    * [Python Script Examples](https://github.com/tmunzer/mist_library)

    * [API Demo Apps](https://apps.mist-lab.fr/)

    * [Juniper Blog](https://blogs.juniper.net/)


    ## Mist Web Browser Extension:

    * Google Chrome, Microsoft Edge and other Chromium-based browser: [Chrome Web Store](https://chromewebstore.google.com/detail/mist-extension/ejhpdcljeamillfhdihkkmoakanpbplh)

    * Firefox: [Firefox Add-ons](https://addons.mozilla.org/en-US/firefox/addon/mist-extension/)


    ---'
  license:
    name: MIT
    url: https://raw.githubusercontent.com/tmunzer/Mist-OAS3.0/main/LICENSE
  title: Mist Sites Device Profiles API
  version: 2606.1.1
  x-logo:
    altText: Juniper-MistAI
    backgroundColor: '#FFFFFF'
    url: https://www.mist.com/wp-content/uploads/logo.png
servers:
- description: Mist Global 01
  url: https://api.mist.com
- description: Mist Global 02
  url: https://api.gc1.mist.com
- description: Mist Global 03
  url: https://api.ac2.mist.com
- description: Mist Global 04
  url: https://api.gc2.mist.com
- description: Mist Global 05
  url: https://api.gc4.mist.com
- description: Mist EMEA 01
  url: https://api.eu.mist.com
- description: Mist EMEA 02
  url: https://api.gc3.mist.com
- description: Mist EMEA 03
  url: https://api.ac6.mist.com
- description: Mist EMEA 04
  url: https://api.gc6.mist.com
- description: Mist APAC 01
  url: https://api.ac5.mist.com
- description: Mist APAC 02
  url: https://api.gc5.mist.com
- description: Mist APAC 03
  url: https://api.gc7.mist.com
security:
- apiToken: []
- csrfToken: []
tags:
- description: The API Endpoints for the Device Profiles at the site level can be used to get the site derived networks, meaning the org level configuration with the site variables resolved..
  name: Sites Device Profiles
paths:
  /api/v1/sites/{site_id}/deviceprofiles/derived:
    parameters:
    - $ref: '#/components/parameters/site_id'
    get:
      description: Get the list of derived Device Profiles for a Site
      operationId: listSiteDeviceProfilesDerived
      parameters:
      - description: Whether resolve the site variables
        in: query
        name: resolve
        schema:
          default: false
          type: boolean
      responses:
        '200':
          $ref: '#/components/responses/DeviceprofilesArray'
        '400':
          $ref: '#/components/responses/HTTP400'
        '401':
          $ref: '#/components/responses/HTTP401'
        '403':
          $ref: '#/components/responses/HTTP403'
        '404':
          $ref: '#/components/responses/HTTP404'
        '429':
          $ref: '#/components/responses/HTTP429'
      summary: listSiteDeviceProfilesDerived
      tags:
      - Sites Device Profiles
components:
  schemas:
    switch_port_usage_dynamic_rule:
      additionalProperties: false
      description: Dynamic port usage rule evaluated against LLDP, RADIUS, or peer MAC attributes
      properties:
        description:
          description: Optional description of the rule
          type: string
        equals:
          description: Exact value that the selected source attribute must match
          type: string
        equals_any:
          $ref: '#/components/schemas/switch_port_usage_dynamic_rule_equals_any'
          description: List of values where any match satisfies this dynamic rule
        expression:
          description: '"[0:3]":"abcdef" -> "abc"

            "split(.)[1]": "a.b.c" -> "b"

            "split(-)[1][0:3]: "a1234-b5678-c90" -> "b56"'
          type: string
        src:
          $ref: '#/components/schemas/switch_port_usage_dynamic_rule_src'
          description: Source attribute evaluated by this dynamic rule
        usage:
          description: Port usage name to apply when this dynamic rule matches
          type: string
      required:
      - src
      type: object
    switch_mist_nac:
      additionalProperties: false
      description: Mist NAC RadSec settings for a switch
      properties:
        enabled:
          description: Whether Mist NAC RadSec is enabled for the switch
          type: boolean
        network:
          description: Switch network used for Mist NAC RadSec connectivity
          type: string
      type: object
    switch_dhcpd_config_property:
      additionalProperties: false
      description: DHCP server or relay configuration for one switch network. The property key is the network name. In case of DHCP relay, it's common for many networks to use the same dhcp relay, comma-separated network names can be used here (e.g. "net1,net2")
      properties:
        dns_servers:
          $ref: '#/components/schemas/switch_dhcpd_config_dns_servers'
          description: If `type`==`server` or `type6`==`server`, DNS servers advertised to DHCP clients
        dns_suffix:
          $ref: '#/components/schemas/switch_dhcpd_config_dns_suffix'
          description: If `type`==`server` or `type6`==`server`, DNS search suffixes advertised to DHCP clients
        fixed_bindings:
          $ref: '#/components/schemas/switch_dhcpd_config_fixed_bindings'
          description: If `type`==`server` or `type6`==`server`, fixed client bindings for DHCP service
        gateway:
          description: If `type`==`server` - optional, `ip` will be used if not provided
          examples:
          - 192.168.70.1
          type: string
        ip_end:
          description: If `type`==`server`, ending IPv4 address for the DHCP lease pool
          examples:
          - 192.168.70.200
          type: string
        ip_end6:
          description: If `type6`==`server`, ending IPv6 address for the DHCP lease pool
          examples:
          - 2607:f8b0:4005:808::ff
          type: string
        ip_start:
          description: If `type`==`server`, starting IPv4 address for the DHCP lease pool
          examples:
          - 192.168.70.100
          type: string
        ip_start6:
          description: If `type6`==`server`, starting IPv6 address for the DHCP lease pool
          examples:
          - 2607:f8b0:4005:808::2
          type: string
        lease_time:
          default: 86400
          description: In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
          maximum: 604800
          minimum: 3600
          type: integer
        options:
          $ref: '#/components/schemas/switch_dhcpd_config_options'
          description: If `type`==`server` or `type6`==`server`, custom DHCP options advertised to clients
        server_id_override:
          default: false
          description: "`server_id_override`==`true` means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, \nshould overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address."
          type: boolean
        servers:
          $ref: '#/components/schemas/dhcpd_config_servers'
          description: If `type`==`relay`, upstream IPv4 DHCP servers
        servers6:
          $ref: '#/components/schemas/dhcpd_config_servers6'
          description: If `type6`==`relay`, upstream IPv6 DHCP servers
        type:
          $ref: '#/components/schemas/switch_dhcpd_config_type'
          description: IPv4 DHCP mode for this switch network
        type6:
          $ref: '#/components/schemas/switch_dhcpd_config_type6'
          description: IPv6 DHCP mode for this switch network
        vendor_encapsulated:
          $ref: '#/components/schemas/switch_dhcpd_config_vendor_options'
          description: If `type`==`server` or `type6`==`server`, vendor-encapsulated DHCP options advertised to clients
      type: object
    service_policy_skyatp_dns_tunnel_detection_profile:
      description: 'enum: `default`, `standard`, `strict`'
      enum:
      - default
      - standard
      - strict
      type: string
    dhcpd_config_property:
      additionalProperties: false
      description: DHCP server or relay configuration for one network
      properties:
        dns_servers:
          $ref: '#/components/schemas/dhcpd_config_dns_servers'
          description: If `type`==`local` or `type6`==`local`, DNS servers advertised to DHCP clients
        dns_suffix:
          $ref: '#/components/schemas/dhcpd_config_dns_suffix'
          description: If `type`==`local` or `type6`==`local`, DNS search suffixes advertised to DHCP clients
        fixed_bindings:
          $ref: '#/components/schemas/dhcpd_config_fixed_bindings'
          description: If `type`==`local` or `type6`==`local`, fixed client bindings for local DHCP service
        gateway:
          description: If `type`==`local` - optional, `ip` will be used if not provided
          examples:
          - 192.168.70.1
          type: string
        ip6_end:
          description: If `type6`==`local`, ending IPv6 address for the DHCP lease pool
          examples:
          - 2607:f8b0:4005:808::ff
          type: string
        ip6_start:
          description: If `type6`==`local`, starting IPv6 address for the DHCP lease pool
          examples:
          - 2607:f8b0:4005:808::2
          type: string
        ip_end:
          description: If `type`==`local`, ending IPv4 address for the DHCP lease pool
          examples:
          - 192.168.70.200
          type: string
        ip_start:
          description: If `type`==`local`, starting IPv4 address for the DHCP lease pool
          examples:
          - 192.168.70.100
          type: string
        lease_time:
          default: 86400
          description: In seconds, lease time has to be between 3600 [1hr] - 604800 [1 week], default is 86400 [1 day]
          maximum: 604800
          minimum: 3600
          type: integer
        options:
          $ref: '#/components/schemas/dhcpd_config_options'
          description: If `type`==`local` or `type6`==`local`, custom DHCP options advertised to clients
        server_id_override:
          default: false
          description: "`server_id_override`==`true` means the device, when acts as DHCP relay and forwards DHCP responses from DHCP server to clients, \nshould overwrite the Sever Identifier option (i.e. DHCP option 54) in DHCP responses with its own IP address."
          type: boolean
        servers:
          $ref: '#/components/schemas/dhcpd_config_servers'
          description: If `type`==`relay`, upstream IPv4 DHCP servers
        serversv6:
          $ref: '#/components/schemas/dhcpd_config_servers6'
          description: If `type6`==`relay`, upstream IPv6 DHCP servers
        type:
          $ref: '#/components/schemas/dhcpd_config_type'
          description: IPv4 DHCP mode for this network
        type6:
          $ref: '#/components/schemas/dhcpd_config_type6'
          description: IPv6 DHCP mode for this network
        vendor_encapsulated:
          $ref: '#/components/schemas/dhcpd_config_vendor_options'
          description: If `type`==`local` or `type6`==`local`, vendor-encapsulated DHCP options advertised to clients
      type: object
    radius_acct_server:
      additionalProperties: false
      description: RADIUS accounting server settings
      properties:
        host:
          description: Address or hostname of the RADIUS accounting server
          examples:
          - 1.2.3.4
          type: string
        keywrap_enabled:
          description: Whether RADIUS keywrap is enabled for messages sent to this accounting server
          type: boolean
        keywrap_format:
          $ref: '#/components/schemas/radius_keywrap_format'
          description: Encoding format for RADIUS keywrap KEK and MACK values
        keywrap_kek:
          description: RADIUS keywrap key encryption key (KEK)
          examples:
          - '1122334455'
          type: string
        keywrap_mack:
          description: RADIUS keywrap message authentication code key (MACK)
          examples:
          - '1122334455'
          type: string
        port:
          $ref: '#/components/schemas/radius_acct_port'
          description: UDP port used by the RADIUS accounting server
        secret:
          description: Shared secret used with this RADIUS accounting server
          examples:
          - testing123
          format: password
          type: string
      required:
      - host
      - secret
      type: object
    ntp_servers:
      description: List of NTP servers specific to this device. By default, those in Site Settings will be used
      items:
        type: string
      type: array
    junos_port_config:
      additionalProperties: false
      description: Junos switch port configuration
      properties:
        ae_disable_lacp:
          description: To disable LACP support for the AE interface
          type: boolean
        ae_idx:
          description: Users could force to use the designated AE name
          type: integer
        ae_lacp_force_up:
          default: false
          description: 'If `aggregated`==`true`, sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only'
          type: boolean
        ae_lacp_passive:
          default: false
          description: If `aggregated`==`true`, sets LACP to passive mode on this AE interface; by default, active (fast) mode is used
          type: boolean
        ae_lacp_slow:
          description: To use slow timeout
          type: boolean
        aggregated:
          default: false
          description: Whether this port is configured as an aggregated Ethernet member
          type: boolean
        critical:
          default: false
          description: To generate port up/down alarm
          type: boolean
        description:
          description: Human-readable description for this Junos port
          type: string
        disable_autoneg:
          default: false
          description: If `speed` and `duplex` are specified, whether to disable autonegotiation
          type: boolean
        duplex:
          $ref: '#/components/schemas/junos_port_config_duplex'
          description: Link duplex mode for this Junos port
        dynamic_usage:
          description: Enable dynamic usage for this port. Set to `dynamic` to enable.
          type:
          - string
          - 'null'
        esilag:
          description: Whether this Junos port participates in an ESI-LAG
          type: boolean
        mtu:
          default: 1514
          description: Media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
          type: integer
        networks:
          description: List of network names. Required if `usage`==`inet`
          items:
            type: string
          type: array
        no_local_overwrite:
          default: true
          description: Prevent helpdesk to override the port config
          type: boolean
        poe_disabled:
          default: false
          description: Whether PoE capabilities are disabled for this Junos port
          type: boolean
        port_network:
          description: Required if `usage`==`vlan_tunnel`. Q-in-Q tunneling using All-in-one bundling. This also enables standard L2PT for interfaces that are not encapsulation tunnel interfaces and uses MAC rewrite operation. [View more information](https://www.juniper.net/documentation/us/en/software/junos/multicast-l2/topics/topic-map/q-in-q.html#id-understanding-qinq-tunneling-and-vlan-translation)
          type: string
        speed:
          $ref: '#/components/schemas/junos_port_config_speed'
          description: Link speed for this Junos port
        usage:
          description: Port usage name. For Q-in-Q, use `vlan_tunnel`. If EVPN is used, use `evpn_uplink`or `evpn_downlink`
          type: string
      required:
      - usage
      type: object
    vrf_extra_route6:
      additionalProperties: false
      description: Additional IPv6 static route for a VRF instance
      properties:
        via:
          description: IPv6 next-hop address for this VRF extra route
          format: ipv6
          type: string
      type: object
    gateway_ip_configs:
      additionalProperties:
        $ref: '#/components/schemas/gateway_ip_config_property'
      description: Property key is the network name
      type: object
    remote_syslog_server_protocol:
      default: udp
      description: 'Transport protocol used for this remote syslog server. enum: `tcp`, `udp`'
      enum:
      - tcp
      - udp
      type: string
    ospf_area:
      additionalProperties: false
      description: Property key is the OSPF Area (Area should be a number (0-255) / IP address)
      properties:
        include_loopback:
          default: false
          description: Whether loopback interfaces are included in this OSPF area
          type: boolean
        networks:
          additionalProperties:
            $ref: '#/components/schemas/ospf_areas_network'
          description: OSPF network settings keyed by network name
          examples:
          - corp:
              auth_keys:
                '1': auth-key-1
              auth_type: md5
              bfd_minimum_interval: 500
              dead_interval: 40
              hello_interval: 10
              interface_type: nbma
              metric: 10000
            guest:
              passive: true
          type: object
        type:
          $ref: '#/components/schemas/ospf_area_type'
          description: Area type for this OSPF area
      type: object
    tunnel_config:
      additionalProperties: false
      description: Gateway tunnel configuration for provider-managed or custom tunnels
      properties:
        auto_provision:
          $ref: '#/components/schemas/tunnel_config_auto_provision'
          description: Provider auto-provisioning settings for tunnel endpoints
        ike_lifetime:
          description: Only if `provider`==`custom-ipsec`. IKE lifetime configured for the custom IPsec tunnel
          type: integer
        ike_mode:
          $ref: '#/components/schemas/tunnel_config_ike_mode'
          description: Only if `provider`==`custom-ipsec`. IKE negotiation mode for the tunnel
        ike_proposals:
          $ref: '#/components/schemas/tunnel_config_ike_proposals'
          description: If `provider`==`custom-ipsec`, IKE proposals used for custom IPsec negotiation
        ipsec_lifetime:
          description: If `provider`==`custom-ipsec`, IPsec lifetime configured for the custom tunnel
          type: integer
        ipsec_proposals:
          $ref: '#/components/schemas/tunnel_config_ipsec_proposals'
          description: Only if `provider`==`custom-ipsec`. IPsec proposals used for custom IPsec negotiation
        local_id:
          description: Required if `provider`==`zscaler-ipsec`, `provider`==`jse-ipsec` or `provider`==`custom-ipsec`
          type: string
        local_subnets:
          $ref: '#/components/schemas/tunnel_config_local_subnets'
          description: Local protected subnets advertised by this tunnel
        mode:
          $ref: '#/components/schemas/tunnel_config_tunnel_mode'
          description: Tunnel failover mode used for primary and secondary endpoints
        networks:
          $ref: '#/components/schemas/tunnel_config_networks'
          description: Destination networks reachable through this tunnel
        primary:
          $ref: '#/components/schemas/tunnel_config_node'
          description: Main remote tunnel endpoint settings
        probe:
          $ref: '#/components/schemas/tunnel_config_probe'
          description: Tunnel health probe settings
        protocol:
          $ref: '#/components/schemas/tunnel_config_protocol'
          description: Only if `provider`==`custom-ipsec`. Tunnel protocol for custom tunnel negotiation
        provider:
          $ref: '#/components/schemas/tunnel_config_provider'
          description: Tunnel provider used when auto provisioning is disabled
        psk:
          description: Required if `provider`==`zscaler-ipsec`, `provider`==`jse-ipsec` or `provider`==`custom-ipsec`
          type: string
        remote_subnets:
          $ref: '#/components/schemas/tunnel_config_remote_subnets'
          description: Remote protected subnets reached through policy-based IPsec
        secondary:
          $ref: '#/components/schemas/tunnel_config_node'
          description: Backup remote tunnel endpoint settings
        version:
          $ref: '#/components/schemas/tunnel_config_version'
          description: Only if `provider`==`custom-gre` or `provider`==`custom-ipsec`. Tunnel version value for custom tunnel configuration
      type: object
    network_multicast_groups:
      additionalProperties:
        $ref: '#/components/schemas/network_multicast_group'
      description: Group address to RP (rendezvous point) mapping. Property Key is the CIDR (example "225.1.0.3/32")
      type: object
    strings:
      description: Unique string values returned or accepted by this schema
      items:
        type: string
      type: array
      uniqueItems: true
    network_source_nat:
      additionalProperties: false
      description: If `routed`==`false` (usually at Spoke), but some hosts needs to be reachable from Hub
      properties:
        external_ip:
          description: External source NAT IP or subnet used when spoke hosts must be reachable from the hub
          examples:
          - 172.16.0.8/30
          type: string
      type: object
    sw_routing_policy_term_action:
      additionalProperties: false
      description: Actions applied to routes matched by a switch routing policy term
      properties:
        accept:
          description: Whether to accept routes that match this term
          type: boolean
        community:
          $ref: '#/components/schemas/routing_policy_term_action_community'
          description: BGP communities to set when this term is used as an export policy
        local_preference:
          $ref: '#/components/schemas/routing_policy_local_preference'
          description: Preference value to set when this term is used as an import policy
        prepend_as_path:
          $ref: '#/components/schemas/routing_policy_term_action_prepend_as_path'
          description: AS path values to prepend when this term is used as an export policy
      type: object
    tunnel_config_probe_type:
      default: icmp
      description: 'Protocol used by the custom IPsec tunnel health probe. enum: `http`, `icmp`'
      enum:
      - http
      - icmp
      type: string
    radsec:
      additionalProperties: false
      description: RadSec settings for sending RADIUS traffic over TLS
      properties:
        coa_enabled:
          default: false
          description: Whether RADIUS Change of Authorization (CoA) is enabled for RadSec traffic
          type: boolean
        enabled:
          description: Whether RadSec is enabled
          type: boolean
        idle_timeout:
          $ref: '#/components/schemas/radsec_idle_timeout'
          description: Idle timeout, in seconds, for RadSec connections
        mxcluster_ids:
          $ref: '#/components/schemas/radsec_mxcluster_ids'
          description: Mist Edge cluster IDs used as RadSec proxies when the WLAN does not use mxtunnel
        proxy_hosts:
          $ref: '#/components/schemas/radsec_proxy_hosts'
          description: RadSec proxy hostnames advertised to APs
        server_name:
          description: TLS server name to verify against the CA certificates in Org Setting. Only if not Mist Edge.
          examples:
          - radsec.abc.com
          type: string
        servers:
          $ref: '#/components/schemas/radsec_servers'
          description: External RadSec servers. Only if not Mist Edge.
        use_mxedge:
          description: Whether to use organization Mist Edge instances as RadSec proxies
          type: boolean
        use_site_mxedge:
          default: false
          description: Whether to use site Mist Edge instances when this WLAN does not use mxtunnel
          type: boolean
      type: object
    const_device_type_switch:
      description: 'Device Type. enum: `switch`'
      enum:
      - switch
      readOnly: true
      type: string
    vrrp_config_groups:
      additionalProperties:
        $ref: '#/components/schemas/vrrp_config_group'
      description: Property key is the VRRP name
      type: object
    routing_policy_term_matching_prefix:
      description: zero or more criteria/filter can be specified to match the term, all criteria have to be met
      items:
        examples:
        - 192.168.0.0/16-30
        type: string
      type: array
    gateway_ip_config_property:
      additionalProperties: false
      description: Gateway network interface IP configuration
      properties:
        ip:
          description: Static IPv4 address for the gateway network interface when `type`==`static`
          format: ipv4
          type: string
        ip6:
          description: Static IPv6 address for the gateway network interface when `type6`==`static`
          format: ipv6
          type: string
        netmask:
          description: IPv4 netmask or prefix length for the gateway network interface when `type`==`static`
          examples:
          - /24
          type: string
        netmask6:
          description: IPv6 netmask or prefix length for the gateway network interface when `type6`==`static`
          examples:
          - 2001:db8:abcd:12::1
          type: string
        secondary_ips:
          $ref: '#/components/schemas/gateway_ip_config_property_second_ips'
          description: Additional IPv4 addresses in CIDR notation for this gateway network interface
        type:
          $ref: '#/components/schemas/ip_type'
          description: IPv4 address assignment mode for this gateway network interface
        type6:
          $ref: '#/components/schemas/ip_type6'
          description: IPv6 address assignment mode for this gateway network interface
      type: object
    ap_mesh:
      additionalProperties: false
      description: Wireless mesh settings for an access point
      properties:
        bands:
          $ref: '#/components/schemas/ap_mesh_bands'
          description: Radio bands allowed for AP mesh links
        enabled:
          default: false
          description: Whether mesh is enabled on this AP
          type: boolean
        group:
          description: Mesh group, base AP(s) will only allow remote AP(s) in the same mesh group to join, 1-9, optional
          examples:
          - 1
          maximum: 9
          minimum: 1
          type:
          - integer
          - 'null'
        role:
          $ref: '#/components/schemas/ap_mesh_role'
          description: Mesh role for this AP, either base or remote
        use_wpa3_on_5:
          default: false
          description: Whether to use WPA3 on the 5 GHz band for mesh links
          type: boolean
      type: object
    remote_syslog_users:
      description: User-specific syslog logging rules
      items:
        $ref: '#/components/schemas/remote_syslog_user'
      type: array
    idp_profile_matching:
      additionalProperties: false
      description: Criteria that select IDP signatures for an overwrite rule
      properties:
        attack_name:
          $ref: '#/components/schemas/idp_profile_matching_attack_name'
          description: Signature names matched by the IDP profile overwrite
        dst_subnet:
          $ref: '#/components/schemas/idp_profile_matching_dst_subnet'
          description: Destination subnets matched by the IDP profile overwrite
        severity:
          $ref: '#/components/schemas/idp_profile_matching_severity'
          description: Threat levels matched by the IDP profile overwrite
      type: object
    switch_radius_config:
      additionalProperties: false
      description: Switch RADIUS authentication and accounting configuration
      properties:
        acct_immediate_update:
          description: Whether immediate RADIUS accounting updates are sent
          type: boolean
        acct_interim_interval:
          default: 0
          description: How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled
          maximum: 65535
          minimum: 0
          type: integer
        acct_servers:
          $ref: '#/components/schemas/radius_acct_servers'
          description: RADIUS accounting servers used by this switch configuration
        auth_server_selection:
          $ref: '#/components/schemas/switch_radius_config_auth_server_selection'
          description: Selection strategy for RADIUS authentication servers
        auth_servers:
          $ref: '#/components/schemas/radius_auth_servers'
          description: RADIUS authentication servers used by this switch configuration
        auth_servers_retries:
          default: 3
          description: RADIUS auth session retries
          type: integer
        auth_servers_timeout:
          default: 5
          description: RADIUS auth session timeout
          type: integer
        coa_enabled:
          default: false
          description: Whether RADIUS Change of Authorization (CoA) is enabled
          type: boolean
        coa_port:
          $ref: '#/components/schemas/radius_coa_port'
          description: UDP port used for RADIUS Change of Authorization (CoA)
        fast_dot1x_timers:
          default: false
          description: Whether fast 802.1X timers are enabled for RADIUS authentication
          type: boolean
        network:
          description: Use `network`or `source_ip`. Which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip
          type: string
        source_ip:
          description: Use `network` or `source_ip`. Explicit source IP address for RADIUS traffic
          type: string
      type: object
    dhcpd_config_vendor_option:
      additionalProperties: false
      description: Vendor-encapsulated DHCP option value
      properties:
        type:
          $ref: '#/components/schemas/dhcpd_config_vendor_option_type'
          description: Data type used to encode this vendor option value
        value:
          description: Option value to send for this vendor option
          type: string
      type: object
    ospf_area_type:
      default: default
      description: 'OSPF type. enum: `default`, `nssa`, `stub`'
      enum:
      - default
      - nssa
      - stub
      examples:
      - default
      type: string
    service_policy_skyatp_iot_device_policy:
      additionalProperties: false
      description: Sky ATP IoT device policy settings
      properties:
        enabled:
          description: Whether Sky ATP IoT device policy inspection is enabled
          type: boolean
      type: object
    routing_policy_term_action_prepend_as_path:
      description: When used as export policy, optional. By default, the local AS will be prepended, to change it. Can be a Variable (e.g. `{{as_path}}`)
      items:
        examples:
        - 65000 400
        type: string
      type: array
    ip_type6:
      default: disabled
      description: 'enum: `autoconf`, `dhcp`, `disabled`, `static`'
      enum:
      - autoconf
      - dhcp
      - disabled
      - static
      examples:
    

# --- truncated at 32 KB (298 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mist/refs/heads/main/openapi/mist-sites-device-profiles-api-openapi.yml