Mist Sites Network Templates API

The API Endpoints for the Network Templates at the site level can be used to get the site derived networks, meaning the org level configuration with the site variables resolved.

OpenAPI Specification

mist-sites-network-templates-api-openapi.yml Raw ↑
openapi: 3.1.0
info:
  contact:
    email: tmunzer@juniper.net
    name: Thomas Munzer
  description: '> Version: **2606.1.1**

    >

    > Date: **July 10, 2026**

    <div class="notification"> NOTE:<br>Some important API changes will be introduced. Please make sure to read the <a href="https://www.juniper.net/documentation/us/en/software/mist/api/http/guides/important-api-changes">announcements</a> </div>


    ---

    ## Additional Documentation

    * [Mist Automation Guide](https://www.juniper.net/documentation/us/en/software/mist/automation-integration/index.html)

    * [Mist Location SDK](https://www.juniper.net/documentation/us/en/software/mist/location-services/topics/concept/mist-how-get-mist-sdk.html)

    * [Mist Product Updates](https://www.juniper.net/documentation/us/en/software/mist/product-updates/)


    ## Helpful Resources

    * [API Sandbox and Exercises](https://api-class.mist.com/)

    * [Postman Collection, Runners and Webhook Samples](https://www.postman.com/juniper-mist/workspace/mist-systems-s-public-workspace)

    * [Python Script Examples](https://github.com/tmunzer/mist_library)

    * [API Demo Apps](https://apps.mist-lab.fr/)

    * [Juniper Blog](https://blogs.juniper.net/)


    ## Mist Web Browser Extension:

    * Google Chrome, Microsoft Edge and other Chromium-based browser: [Chrome Web Store](https://chromewebstore.google.com/detail/mist-extension/ejhpdcljeamillfhdihkkmoakanpbplh)

    * Firefox: [Firefox Add-ons](https://addons.mozilla.org/en-US/firefox/addon/mist-extension/)


    ---'
  license:
    name: MIT
    url: https://raw.githubusercontent.com/tmunzer/Mist-OAS3.0/main/LICENSE
  title: Mist Admins Sites Network Templates API
  version: 2606.1.1
  x-logo:
    altText: Juniper-MistAI
    backgroundColor: '#FFFFFF'
    url: https://www.mist.com/wp-content/uploads/logo.png
servers:
- description: Mist Global 01
  url: https://api.mist.com
- description: Mist Global 02
  url: https://api.gc1.mist.com
- description: Mist Global 03
  url: https://api.ac2.mist.com
- description: Mist Global 04
  url: https://api.gc2.mist.com
- description: Mist Global 05
  url: https://api.gc4.mist.com
- description: Mist EMEA 01
  url: https://api.eu.mist.com
- description: Mist EMEA 02
  url: https://api.gc3.mist.com
- description: Mist EMEA 03
  url: https://api.ac6.mist.com
- description: Mist EMEA 04
  url: https://api.gc6.mist.com
- description: Mist APAC 01
  url: https://api.ac5.mist.com
- description: Mist APAC 02
  url: https://api.gc5.mist.com
- description: Mist APAC 03
  url: https://api.gc7.mist.com
security:
- apiToken: []
- csrfToken: []
tags:
- description: The API Endpoints for the Network Templates at the site level can be used to get the site derived networks, meaning the org level configuration with the site variables resolved.
  name: Sites Network Templates
paths:
  /api/v1/sites/{site_id}/networktemplates/derived:
    parameters:
    - $ref: '#/components/parameters/site_id'
    get:
      description: Get the list of derived Network Templates a Site
      operationId: listSiteNetworkTemplatesDerived
      parameters:
      - description: Whether resolve the site variables
        in: query
        name: resolve
        schema:
          type: boolean
      responses:
        '200':
          $ref: '#/components/responses/Networktemplate'
        '400':
          $ref: '#/components/responses/HTTP400'
        '401':
          $ref: '#/components/responses/HTTP401'
        '403':
          $ref: '#/components/responses/HTTP403'
        '404':
          $ref: '#/components/responses/HTTP404'
        '429':
          $ref: '#/components/responses/HTTP429'
      summary: listSiteNetworkTemplatesDerived
      tags:
      - Sites Network Templates
components:
  schemas:
    next_hop_via:
      description: Next-hop IP address. Can be a single IP address or an array of IP addresses for ECMP (Equal-Cost Multi-Path) load balancing across multiple next-hops.
      examples:
      - 10.2.1.1
      - - 10.2.1.1
        - 10.2.1.2
      oneOf:
      - type: string
      - items:
          type: string
        type: array
    acl_tag_spec:
      additionalProperties: false
      description: Layer 4 protocol and destination-port match constraint for an ACL tag
      properties:
        port_range:
          default: '0'
          description: Matched dst port, "0" means any
          type: string
        protocol:
          default: any
          description: '`tcp` / `udp` / `icmp` / `icmp6` / `gre` / `any` / `:protocol_number`, `protocol_number` is between 1-254, default is `any` `protocol_number` is between 1-254'
          type: string
      type: object
    routing_policy_term_action_prepend_as_path:
      description: When used as export policy, optional. By default, the local AS will be prepended, to change it. Can be a Variable (e.g. `{{as_path}}`)
      items:
        examples:
        - 65000 400
        type: string
      type: array
    vlan_id_with_variable:
      description: VLAN ID, either numeric or expressed as a template variable string
      oneOf:
      - type: string
      - maximum: 4094
        minimum: 1
        type: integer
    remote_syslog:
      additionalProperties: false
      description: Remote syslog forwarding settings
      properties:
        archive:
          $ref: '#/components/schemas/remote_syslog_archive'
          description: Retention settings for generated syslog archive files
        cacerts:
          $ref: '#/components/schemas/remote_syslog_cacerts'
          description: CA certificates used to verify TLS syslog servers
        console:
          $ref: '#/components/schemas/remote_syslog_console'
          description: Log forwarding filters for console messages sent to remote syslog
        enabled:
          default: false
          description: Whether remote syslog forwarding is enabled
          type: boolean
        files:
          $ref: '#/components/schemas/remote_syslog_files'
          description: Local syslog file definitions to generate and forward
        network:
          description: Source network used for syslog traffic. If `source_address` is configured, Mist uses the VLAN first; otherwise it uses `source_ip`
          examples:
          - default
          type: string
        send_to_all_servers:
          default: false
          description: Whether each log entry is sent to all configured remote syslog servers
          type: boolean
        servers:
          $ref: '#/components/schemas/remote_syslog_servers'
          description: Remote syslog server destinations
        time_format:
          $ref: '#/components/schemas/remote_syslog_time_format'
          description: Timestamp format used in forwarded syslog messages
        users:
          $ref: '#/components/schemas/remote_syslog_users'
          description: User-specific syslog logging rules
      type: object
    switch_networks:
      additionalProperties:
        $ref: '#/components/schemas/switch_network'
      description: Property key is network name
      type: object
    acl_policy_action:
      additionalProperties: false
      description: Action applied to traffic that matches a destination ACL tag
      properties:
        action:
          $ref: '#/components/schemas/allow_deny'
          description: Allow or deny decision applied to traffic matching the destination tag
        dst_tag:
          description: Destination ACL tag matched by this policy action
          examples:
          - corp
          type: string
      required:
      - dst_tag
      type: object
    remote_syslog_files:
      description: Generated syslog file output definitions
      items:
        $ref: '#/components/schemas/remote_syslog_file_config'
      type: array
    vrf_extra_routes6:
      additionalProperties:
        $ref: '#/components/schemas/vrf_extra_route6'
      description: Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
      examples:
      - 2a02:1234:420a:10c9::/64:
          via: 2a02:1234:200a::100
      type: object
    snmp_config_v2c_configs:
      description: SNMPv2c community configuration entries for this SNMP profile
      items:
        $ref: '#/components/schemas/snmp_config_v2c_config'
      type: array
    id:
      description: Unique ID of the object instance in the Mist Organization
      examples:
      - 53f10664-3ce8-4c27-b382-0ef66432349f
      format: uuid
      readOnly: true
      type: string
    switch_port_usage_dynamic_reset_default_when:
      default: link_down
      description: 'Only if `mode`==`dynamic` Control when the DPC port should be changed to the default port usage. enum: `link_down`, `none` (let the DPC port keep at the current port usage)'
      enum:
      - link_down
      - none
      examples:
      - link_down
      type: string
    snmpv3_config_notify_filter_item_contents:
      description: OID filter rules in an SNMPv3 notification filter profile
      items:
        $ref: '#/components/schemas/snmpv3_config_notify_filter_item_content'
      type: array
    snmp_usm_engine_type:
      description: 'SNMP engine type used for this USM configuration. enum: `local_engine`, `remote_engine`'
      enum:
      - local_engine
      - remote_engine
      type: string
    snmp_config_views:
      description: SNMP MIB view definitions
      items:
        $ref: '#/components/schemas/snmp_config_view'
      type: array
    remote_syslog_facility:
      default: any
      description: 'enum: `any`, `authorization`, `change-log`, `config`, `conflict-log`, `daemon`, `dfc`, `external`, `firewall`, `ftp`, `interactive-commands`, `kernel`, `ntp`, `pfe`, `security`, `user`'
      enum:
      - any
      - authorization
      - change-log
      - config
      - conflict-log
      - daemon
      - dfc
      - external
      - firewall
      - ftp
      - interactive-commands
      - kernel
      - ntp
      - pfe
      - security
      - user
      examples:
      - config
      type: string
    remote_syslog_server:
      additionalProperties: false
      description: Remote syslog server destination settings
      properties:
        contents:
          $ref: '#/components/schemas/remote_syslog_contents'
          description: Syslog facilities and severities sent to this server
        explicit_priority:
          description: Whether to include explicit syslog priority values in messages sent to this server
          type: boolean
        facility:
          $ref: '#/components/schemas/remote_syslog_facility'
          description: Default syslog facility for messages sent to this server
        host:
          description: Address or hostname of the remote syslog server
          examples:
          - syslogd.internal
          type: string
        match:
          description: Expression used to filter log messages sent to this server
          examples:
          - '!alarm|ntp|errors.crc_error[chan]'
          type: string
        port:
          $ref: '#/components/schemas/remote_syslog_server_port'
          description: Network port used by the remote syslog server
        protocol:
          $ref: '#/components/schemas/remote_syslog_server_protocol'
          description: Transport protocol used for this remote syslog server
        routing_instance:
          description: Routing instance used to reach this remote syslog server
          examples:
          - routing-instance-name
          type: string
        server_name:
          description: TLS server name used when verifying the remote syslog server certificate
          examples:
          - syslogd.internal
          type: string
        severity:
          $ref: '#/components/schemas/remote_syslog_severity'
          description: Default syslog severity for messages sent to this server
        source_address:
          description: Source address for syslog traffic. If configured, Mist uses the VLAN first; otherwise it uses `source_ip`
          type: string
        structured_data:
          description: Whether to include structured syslog data in messages sent to this server
          type: boolean
        tag:
          description: Syslog tag value added to messages sent to this server
          type: string
      type: object
    switch_port_usage:
      additionalProperties: false
      description: Junos switch port usage template and authentication settings
      properties:
        all_networks:
          default: false
          description: Only if `mode`==`trunk`. Whether to trunk all network/vlans
          type: boolean
        allow_dhcpd:
          description: 'Only applies when `mode`!=`dynamic`. Controls whether DHCP server traffic is allowed on ports using this configuration if DHCP snooping is enabled. This is a tri-state setting; `true`: ports become trusted ports allowing DHCP server traffic, `false`: ports become untrusted blocking DHCP server traffic, undefined: use system defaults (access ports default to untrusted, trunk ports default to trusted).'
          type: boolean
        allow_multiple_supplicants:
          default: false
          description: Only if `mode`!=`dynamic`
          type: boolean
        bypass_auth_when_server_down:
          default: false
          description: Only if `mode`!=`dynamic` and `port_auth`==`dot1x`. Bypass auth for known clients if set to true when RADIUS server is down
          type: boolean
        bypass_auth_when_server_down_for_unknown_client:
          default: false
          description: Only if `mode`!=`dynamic` and `port_auth`=`dot1x`. Bypass auth for all (including unknown clients) if set to true when RADIUS server is down
          type: boolean
        bypass_auth_when_server_down_for_voip:
          default: false
          description: Only if `mode`!=`dynamic` and `port_auth`==`dot1x`. Bypass auth for VOIP if set to true when RADIUS server is down
          type: boolean
        community_vlan_id:
          description: Only if `mode`!=`dynamic`. To be used together with `isolation` under networks. Signaling that this port connects to the networks isolated but wired clients belong to the same community can talk to each other
          type: integer
        description:
          description: Only if `mode`!=`dynamic`
          type: string
        disable_autoneg:
          default: false
          description: Only if `mode`!=`dynamic`. If speed and duplex are specified, whether to disable autonegotiation
          type: boolean
        disabled:
          default: false
          description: Only if `mode`!=`dynamic`. Whether the port is disabled
          type: boolean
        duplex:
          $ref: '#/components/schemas/switch_port_usage_duplex'
          description: Only if `mode`!=`dynamic`. Link duplex mode for this port usage
        dynamic_vlan_networks:
          $ref: '#/components/schemas/switch_port_usage_dynamic_vlan_networks'
          description: Only if `mode`!=`dynamic` and `port_auth`==`dot1x`. Networks or VLANs that RADIUS can return for dynamic VLAN assignment
        enable_mac_auth:
          default: false
          description: Only if `mode`!=`dynamic` and `port_auth`==`dot1x`. Whether to enable MAC Auth
          type: boolean
        enable_qos:
          default: false
          description: Only if `mode`!=`dynamic`
          type: boolean
        guest_network:
          description: Only if `mode`!=`dynamic` and `port_auth`==`dot1x`. Which network to put the device into if the device cannot do dot1x. default is null (i.e. not allowed)
          type:
          - string
          - 'null'
        inter_isolation_network_link:
          default: false
          description: Only if `mode`!=`dynamic`. `inter_isolation_network_link` is used together with `isolation` under networks, signaling that this port connects to isolated networks
          type: boolean
        inter_switch_link:
          default: false
          description: 'Only if `mode`!=`dynamic`. `inter_switch_link` is used together with `isolation` under networks. NOTE: `inter_switch_link` works only between Juniper devices. This has to be applied to both ports connected together'
          type: boolean
        mac_auth_only:
          description: Only if `mode`!=`dynamic` and `enable_mac_auth`==`true`
          type: boolean
        mac_auth_preferred:
          description: Only if `mode`!=`dynamic` + `enable_mac_auth`==`true` + `mac_auth_only`==`false`, dot1x will be given priority then mac_auth. Enable this to prefer mac_auth over dot1x.
          type: boolean
        mac_auth_protocol:
          $ref: '#/components/schemas/switch_port_usage_mac_auth_protocol'
          description: Only if `mode`!=`dynamic` and `enable_mac_auth`==`true`. MAC authentication protocol to use; ignored if Mist NAC is enabled
        mac_limit:
          $ref: '#/components/schemas/switch_port_usage_mac_limit'
          description: Only if `mode`!=`dynamic`. Maximum number of MAC addresses allowed on the port; 0 means unlimited
        mode:
          $ref: '#/components/schemas/switch_port_usage_mode'
          description: Switching mode for this port usage
        mtu:
          $ref: '#/components/schemas/switch_port_usage_mtu'
          description: Only if `mode`!=`dynamic`. MTU for ports using this port usage
        networks:
          $ref: '#/components/schemas/switch_port_usage_networks'
          description: Only if `mode`==`trunk`. Network or VLAN names to trunk
        persist_mac:
          default: false
          description: Only if `mode`==`access` and `port_auth`!=`dot1x`. Whether the port should retain dynamically learned MAC addresses
          type: boolean
        poe_disabled:
          default: false
          description: Only if `mode`!=`dynamic`. Whether PoE capabilities are disabled for a port
          type: boolean
        poe_keep_state_when_reboot:
          default: false
          description: Only if `mode`!=`dynamic`. Whether Perpetual PoE is enabled; keeps PoE state across reboots
          type: boolean
        poe_priority:
          $ref: '#/components/schemas/poe_priority'
          description: Only if `mode`!=`dynamic`. PoE priority for ports using this port usage
        port_auth:
          $ref: '#/components/schemas/switch_port_usage_dot1x'
          description: Only if `mode`!=`dynamic`. 802.1X authentication mode for this port usage
        port_network:
          description: Only if `mode`!=`dynamic`. Native network/vlan for untagged traffic
          type: string
        reauth_interval:
          $ref: '#/components/schemas/switch_port_usage_reauth_interval'
          description: Only if `mode`!=`dynamic` and `port_auth`==`dot1x`. RADIUS reauthentication interval for clients on the port
        reset_default_when:
          $ref: '#/components/schemas/switch_port_usage_dynamic_reset_default_when'
          description: Only if `mode`==`dynamic`. Condition that resets a dynamic port to the default port usage
        rules:
          $ref: '#/components/schemas/switch_port_usage_dynamic_rules'
          description: Only if `mode`==`dynamic`. Dynamic matching rules that select the port usage to apply
        server_fail_network:
          description: Only if `mode`!=`dynamic` and `port_auth`==`dot1x`. Sets server fail fallback vlan
          type:
          - string
          - 'null'
        server_fail_retry_interval:
          default: 120
          description: Only if `mode`!=`dynamic` and `port_auth`==`dot1x`. Interval, in seconds. Sets the wait time before retrying authentication after RADIUS failure to reduce client flapping. Range 120-65535
          maximum: 65535
          minimum: 120
          type: integer
        server_reject_network:
          description: Only if `mode`!=`dynamic` and `port_auth`==`dot1x`. When RADIUS server reject / fails
          type:
          - string
          - 'null'
        speed:
          $ref: '#/components/schemas/switch_port_usage_speed'
          description: Only if `mode`!=`dynamic`. Link speed for this port usage
        storm_control:
          $ref: '#/components/schemas/switch_port_usage_storm_control'
          description: Only if `mode`!=`dynamic`. Storm-control settings for this port usage
        stp_disable:
          default: false
          description: Only if `mode`!=`dynamic` and `stp_required`==`false`. Drop bridge protocol data units (BPDUs ) that enter any interface or a specified interface
          type: boolean
        stp_edge:
          default: false
          description: Only if `mode`!=`dynamic`. When enabled, the port is not expected to receive BPDU frames
          type: boolean
        stp_no_root_port:
          default: false
          description: Only if `mode`!=`dynamic`
          type: boolean
        stp_p2p:
          default: false
          description: Only if `mode`!=`dynamic`
          type: boolean
        stp_required:
          default: false
          description: Only if `mode`!=`dynamic`. Whether to remain in block state if no BPDU is received
          type: boolean
        ui_evpntopo_id:
          description: Optional for Campus Fabric Core-Distribution ESI-LAG profile. Helper used by the UI to select this port profile as the ESI-Lag between Distribution and Access switches
          format: uuid
          type: string
        use_vstp:
          default: false
          description: If this is connected to a vstp network
          type: boolean
        voip_network:
          description: Only if `mode`!=`dynamic`. Network/vlan for voip traffic, must also set port_network. to authenticate device, set port_auth
          type:
          - string
          - 'null'
      type: object
    snmp_vacm:
      additionalProperties: false
      description: SNMPv3 View-based Access Control Model configuration
      properties:
        access:
          $ref: '#/components/schemas/snmp_vacm_access'
          description: VACM access rules for SNMPv3
        security_to_group:
          $ref: '#/components/schemas/snmp_vacm_security_to_group'
          description: VACM security-name to group mappings
      type: object
    remote_syslog_server_protocol:
      default: udp
      description: 'Transport protocol used for this remote syslog server. enum: `tcp`, `udp`'
      enum:
      - tcp
      - udp
      type: string
    remote_syslog_time_format:
      description: 'enum: `millisecond`, `year`, `year millisecond`'
      enum:
      - millisecond
      - year
      - year millisecond
      examples:
      - millisecond
      type: string
    snmpv3_config_target_address:
      description: SNMPv3 notification target addresses
      items:
        $ref: '#/components/schemas/snmpv3_config_target_address_item'
      type: array
    tacacs_auth_servers:
      description: List of TACACS+ authentication servers
      items:
        $ref: '#/components/schemas/tacacs_auth_server'
      type: array
    sw_routing_policies:
      additionalProperties:
        $ref: '#/components/schemas/sw_routing_policy'
      description: Switch routing policies keyed by routing policy name
      type: object
    switch_port_mirroring:
      additionalProperties:
        $ref: '#/components/schemas/switch_port_mirroring_property'
      description: Property key is the port mirroring instance name. `port_mirroring` can be added under device/site settings. It takes interface and ports as input for ingress, interface as input for egress and can take interface and port as output. A maximum 4 mirroring ports is allowed
      type: object
    ospf_area_type:
      default: default
      description: 'OSPF type. enum: `default`, `nssa`, `stub`'
      enum:
      - default
      - nssa
      - stub
      examples:
      - default
      type: string
    snmp_vacm_access:
      description: VACM access rules for SNMPv3
      items:
        $ref: '#/components/schemas/snmp_vacm_access_item'
      type: array
    ospf_area_network_interface_type:
      default: broadcast
      description: 'interface type (nbma = non-broadcast multi-access). enum: `broadcast`, `nbma`, `p2mp`, `p2p`'
      enum:
      - broadcast
      - nbma
      - p2mp
      - p2p
      type: string
    switch_port_usage_storm_control:
      additionalProperties: false
      description: Switch storm control. Only if `mode`!=`dynamic`
      properties:
        disable_port:
          default: false
          description: Whether to disable the port when storm control is triggered
          type: boolean
        no_broadcast:
          default: false
          description: Whether to disable storm control on broadcast traffic
          type: boolean
        no_multicast:
          default: false
          description: Whether to disable storm control on multicast traffic
          type: boolean
        no_registered_multicast:
          default: false
          description: Whether to disable storm control on registered multicast traffic
          type: boolean
        no_unknown_unicast:
          default: false
          description: Whether to disable storm control on unknown unicast traffic
          type: boolean
        percentage:
          default: 80
          description: Bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
          maximum: 100
          minimum: 0
          type: integer
      type: object
    ospf_areas_network:
      additionalProperties: false
      description: Property key is the network name. Networks to participate in an OSPF area
      properties:
        auth_keys:
          additionalProperties:
            type: string
          description: Required if `auth_type`==`md5`. Property key is the key number
          examples:
          - '1': auth-key-1
          type: object
        auth_password:
          description: Required if `auth_type`==`password`, the password, max length is 8
          examples:
          - simple
          type: string
        auth_type:
          $ref: '#/components/schemas/ospf_area_network_auth_type'
          description: Authentication method used by this OSPF network
        bfd_minimum_interval:
          description: Minimum BFD interval for this OSPF network, in milliseconds
          examples:
          - 500
          maximum: 255000
          minimum: 1
          type: integer
        dead_interval:
          description: OSPF dead interval for this network, in seconds
          examples:
          - 40
          maximum: 65535
          minimum: 1
          type: integer
        export_policy:
          description: Routing policy used to export routes from this OSPF network
          examples:
          - export_policy
          type: string
        hello_interval:
          description: OSPF hello interval for this network, in seconds
          maximum: 255
          minimum: 1
          type: integer
        import_policy:
          description: Routing policy used to import routes for this OSPF network
          examples:
          - import_policy
          type: string
        interface_type:
          $ref: '#/components/schemas/ospf_area_network_interface_type'
          description: OSPF interface type used for this network
        metric:
          description: OSPF metric assigned to this network
          examples:
          - 10000
          maximum: 65535
          minimum: 1
          type:
          - integer
          - 'null'
        no_readvertise_to_overlay:
          default: false
          description: By default, we'll re-advertise all learned OSPF routes toward overlay
          type: boolean
        passive:
          default: false
          description: Whether to send OSPF-Hello
          type: boolean
      type: object
    radius_acct_server:
      additionalProperties: false
      description: RADIUS accounting server settings
      properties:
        host:
          description: Address or hostname of the RADIUS accounting server
          examples:
          - 1.2.3.4
          type: string
        keywrap_enabled:
          description: Whether RADIUS keywrap is enabled for messages sent to this accounting server
          type: boolean
        keywrap_format:
          $ref: '#/components/schemas/radius_keywrap_format'
          description: Encoding format for RADIUS keywrap KEK and MACK values
        keywrap_kek:
          description: RADIUS keywrap key encryption key (KEK)
          examples:
          - '1122334455'
          type: string
        keywrap_mack:
          description: RADIUS keywrap message authentication code key (MACK)
          examples:
          - '1122334455'
          type: string
        port:
          $ref: '#/components/schemas/radius_acct_port'
          description: UDP port used by the RADIUS accounting server
        secret:
          description: Shared secret used with this RADIUS accounting server
          examples:
          - testing123
          format: password
          type: string
      required:
      - host
      - secret
      type: object
    response_http400:
      additionalProperties: false
      description: Standard HTTP 400 bad request error response
      properties:
        detail:
          description: Human-readable explanation of the bad request error
          examples:
          - 'JSON parse error - Expecting value: line 5 column 8 (char 56)'
          type: string
      type: object
    switch_port_mirroring_ingress_networks:
      description: At least one of the `input_port_ids_ingress`, `input_port_ids_egress` or `input_networks_ingress ` should be specified
      items:
        examples:
        - corp
        type: string
      type: array
    vrf_extra_route:
      additionalProperties: false
      description: Additional IPv4 static route for a VRF instance
      properties:
        via:
          description: IPv4 next-hop address for this VRF extra route
          format: ipv4
          type: string
      type: object
    protect_re_allowed_service:
      description: 'Services allowed through protect-RE filters. enum: `icmp`, `ssh`'
      enum:
      - icmp
      - ssh
      type: string
    snmp_vacm_access_item_prefix_list:
      description: Context prefix rules for a VACM access entry
      items:
        $ref: '#/components/schemas/snmp_vacm_access_item_prefix_list_item'
      type: array
    snmpv3_config_target_address_item:
      additionalProperties: false
      description: SNMPv3 notification target address entry
      properties:
        address:
          description: IP address or hostname of the SNMP target
          examples:
          - 10.11.0.2
          type: string
        address_mask:
          description: Mask applied to the SNMP target address
          examples:
          - 255.255.255.0
          type: string
        port:
          default: '161'
          description: UDP port used by the SNMP target
          type:
          - string
          - 'null'
        tag_list:
          description: Set of notification tags for this target address; use spaces between multiple tags
          type: string
        target_address_name:
          description: Name of the SNMP target address entry
          examples:
          - target_address_name
          type: string
        target_parameters:
          description: Target parameter profile referenced by this target address
          type: string
      type: object
    switch_bgp_config_hold_time_integer:
      description: BGP hold time value from 3 to 65535 seconds
      maximum: 65535
      minimum: 3
      type: integer
    aggregate_routes:
      additionalProperties:
        $ref: '#/components/schemas/aggregate_route'
      description: Property key is the destination subnet (e.g. "172.16.3.0/24")
      examples:
      - 172.16.3.0/24:
          discard: false
          metric: null
          preference: 30
      type: object
    snmp_config_trap_version:
      default: v2
      description: 'enum: `all`, `v1`, `v2`'
      enum:
      - all
      - v1
      - v2
      type: string
    routing_policy_term_matching_as_path:
      description: BGP AS path values used as routing-policy match criteria
      items:
        $ref: '#/components/schemas/bgp_as'
      type: array
    junos_port_config_speed:
      default: auto
      description: 'enum: `100m`, `10m`, `1g`, `2.5g`, `5g`, `10g`, `25g`, `40g`, `100g`,`auto`'
      enum:
      - 10m
      - 100m
      - 1g
      - 2.5g
      - 5g
      - 10g
      - 25g
      - 40g
      - 100g
      - auto
      type: string
    sw_routing_policy_term_action:
      additionalProperties: false
      description: Actions applied to routes matched by a switch routing policy term
      properties:
        accept:
   

# --- truncated at 32 KB (126 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mist/refs/heads/main/openapi/mist-sites-network-templates-api-openapi.yml