Mist Sites Network Templates API

openapi: 3.2.0
info:
  contact:
    email: tmunzer@juniper.net
    name: Thomas Munzer
  description: '> Version: **2606.1.1**

    >

    > Date: **July 10, 2026**

    <div class="notification"> NOTE:<br>Some important API changes will be introduced. Please make sure to read the <a href="https://www.juniper.net/documentation/us/en/software/mist/api/http/guides/important-api-changes">announcements</a> </div>


    ---

    ## Additional Documentation

    * [Mist Automation Guide](https://www.juniper.net/documentation/us/en/software/mist/automation-integration/index.html)

    * [Mist Location SDK](https://www.juniper.net/documentation/us/en/software/mist/location-services/topics/concept/mist-how-get-mist-sdk.html)

    * [Mist Product Updates](https://www.juniper.net/documentation/us/en/software/mist/product-updates/)


    ## Helpful Resources

    * [API Sandbox and Exercises](https://api-class.mist.com/)

    * [Postman Collection, Runners and Webhook Samples](https://www.postman.com/juniper-mist/workspace/mist-systems-s-public-workspace)

    * [Python Script Examples](https://github.com/tmunzer/mist_library)

    * [API Demo Apps](https://apps.mist-lab.fr/)

    * [Juniper Blog](https://blogs.juniper.net/)


    ## Mist Web Browser Extension:

    * Google Chrome, Microsoft Edge and other Chromium-based browser: [Chrome Web Store](https://chromewebstore.google.com/detail/mist-extension/ejhpdcljeamillfhdihkkmoakanpbplh)

    * Firefox: [Firefox Add-ons](https://addons.mozilla.org/en-US/firefox/addon/mist-extension/)


    ---'
  license:
    name: MIT
    url: https://raw.githubusercontent.com/tmunzer/Mist-OAS3.0/main/LICENSE
  title: Mist Sites Network Templates API
  version: 2606.1.1
  x-logo:
    altText: Juniper-MistAI
    backgroundColor: '#FFFFFF'
    url: https://www.mist.com/wp-content/uploads/logo.png
servers:
- description: Mist Global 01
  url: https://api.mist.com
- description: Mist Global 02
  url: https://api.gc1.mist.com
- description: Mist Global 03
  url: https://api.ac2.mist.com
- description: Mist Global 04
  url: https://api.gc2.mist.com
- description: Mist Global 05
  url: https://api.gc4.mist.com
- description: Mist EMEA 01
  url: https://api.eu.mist.com
- description: Mist EMEA 02
  url: https://api.gc3.mist.com
- description: Mist EMEA 03
  url: https://api.ac6.mist.com
- description: Mist EMEA 04
  url: https://api.gc6.mist.com
- description: Mist APAC 01
  url: https://api.ac5.mist.com
- description: Mist APAC 02
  url: https://api.gc5.mist.com
- description: Mist APAC 03
  url: https://api.gc7.mist.com
security:
- apiToken: []
- csrfToken: []
tags:
- description: The API Endpoints for the Network Templates at the site level can be used to get the site derived networks, meaning the org level configuration with the site variables resolved.
  name: Sites Network Templates
paths:
  /api/v1/sites/{site_id}/networktemplates/derived:
    parameters:
    - $ref: '#/components/parameters/site_id'
    get:
      description: Get the list of derived Network Templates a Site
      operationId: listSiteNetworkTemplatesDerived
      parameters:
      - description: Whether resolve the site variables
        in: query
        name: resolve
        schema:
          type: boolean
      responses:
        '200':
          $ref: '#/components/responses/Networktemplate'
        '400':
          $ref: '#/components/responses/HTTP400'
        '401':
          $ref: '#/components/responses/HTTP401'
        '403':
          $ref: '#/components/responses/HTTP403'
        '404':
          $ref: '#/components/responses/HTTP404'
        '429':
          $ref: '#/components/responses/HTTP429'
      summary: listSiteNetworkTemplatesDerived
      tags:
      - Sites Network Templates
components:
  schemas:
    radius_acct_port:
      anyOf:
      - maximum: 65545
        minimum: 1
        type: integer
      - type: string
      description: RADIUS Auth Port, value from 1 to 65535, default is 1813
    junos_port_config_duplex:
      default: auto
      description: 'enum: `auto`, `full`, `half`'
      enum:
      - auto
      - full
      - half
      type: string
    switch_port_usage_dynamic_rule:
      additionalProperties: false
      description: Dynamic port usage rule evaluated against LLDP, RADIUS, or peer MAC attributes
      properties:
        description:
          description: Optional description of the rule
          type: string
        equals:
          description: Exact value that the selected source attribute must match
          type: string
        equals_any:
          $ref: '#/components/schemas/switch_port_usage_dynamic_rule_equals_any'
          description: List of values where any match satisfies this dynamic rule
        expression:
          description: '"[0:3]":"abcdef" -> "abc"

            "split(.)[1]": "a.b.c" -> "b"

            "split(-)[1][0:3]: "a1234-b5678-c90" -> "b56"'
          type: string
        src:
          $ref: '#/components/schemas/switch_port_usage_dynamic_rule_src'
          description: Source attribute evaluated by this dynamic rule
        usage:
          description: Port usage name to apply when this dynamic rule matches
          type: string
      required:
      - src
      type: object
    switch_vrf_instances:
      additionalProperties:
        $ref: '#/components/schemas/switch_vrf_instance'
      description: Property key is the network name
      examples:
      - guest:
          extra_routes:
            0.0.0.0/0:
              via: 192.168.31.1
          networks:
          - guest
      type: object
    switch_mist_nac:
      additionalProperties: false
      description: Mist NAC RadSec settings for a switch
      properties:
        enabled:
          description: Whether Mist NAC RadSec is enabled for the switch
          type: boolean
        network:
          description: Switch network used for Mist NAC RadSec connectivity
          type: string
      type: object
    snmp_usm:
      additionalProperties: false
      description: SNMPv3 User-based Security Model configuration
      properties:
        engine_type:
          $ref: '#/components/schemas/snmp_usm_engine_type'
          description: SNMP engine type used for this USM configuration
        remote_engine_id:
          description: Required only if `engine_type`==`remote_engine`
          examples:
          - 00:00:00:0b:00:00:70:10:6f:08:b6:3f
          type: string
        users:
          $ref: '#/components/schemas/snmp_usm_users'
          description: SNMPv3 USM users for this engine
      type: object
    org_id:
      description: Unique identifier of a Mist organization
      examples:
      - a97c1b22-a4e9-411e-9bfd-d8695a0f9e61
      format: uuid
      readOnly: true
      type: string
    tacacs_auth_server:
      additionalProperties: false
      description: TACACS+ authentication server settings
      properties:
        host:
          description: Address or hostname of the TACACS+ authentication server
          type: string
        port:
          description: TCP port used by the TACACS+ authentication server
          type: string
        secret:
          description: Shared secret used with this TACACS+ authentication server
          format: password
          type: string
        timeout:
          default: 10
          description: TACACS+ authentication server timeout, in seconds
          type: integer
      type: object
    switch_radius_config_auth_server_selection:
      default: ordered
      description: 'Selection strategy for RADIUS authentication servers. enum: `ordered`, `unordered`'
      enum:
      - ordered
      - unordered
      type: string
    sw_routing_policies:
      additionalProperties:
        $ref: '#/components/schemas/sw_routing_policy'
      description: Switch routing policies keyed by routing policy name
      type: object
    switch_bgp_config_hold_time:
      description: Hold time is three times the interval at which keepalive messages are sent. It indicates to the peer the length of time that it should consider the sender valid. Must be 0 or a number in the range 3-65535.
      oneOf:
      - $ref: '#/components/schemas/switch_bgp_config_hold_time_zero'
      - $ref: '#/components/schemas/switch_bgp_config_hold_time_integer'
    radius_acct_server:
      additionalProperties: false
      description: RADIUS accounting server settings
      properties:
        host:
          description: Address or hostname of the RADIUS accounting server
          examples:
          - 1.2.3.4
          type: string
        keywrap_enabled:
          description: Whether RADIUS keywrap is enabled for messages sent to this accounting server
          type: boolean
        keywrap_format:
          $ref: '#/components/schemas/radius_keywrap_format'
          description: Encoding format for RADIUS keywrap KEK and MACK values
        keywrap_kek:
          description: RADIUS keywrap key encryption key (KEK)
          examples:
          - '1122334455'
          type: string
        keywrap_mack:
          description: RADIUS keywrap message authentication code key (MACK)
          examples:
          - '1122334455'
          type: string
        port:
          $ref: '#/components/schemas/radius_acct_port'
          description: UDP port used by the RADIUS accounting server
        secret:
          description: Shared secret used with this RADIUS accounting server
          examples:
          - testing123
          format: password
          type: string
      required:
      - host
      - secret
      type: object
    acl_tag_spec:
      additionalProperties: false
      description: Layer 4 protocol and destination-port match constraint for an ACL tag
      properties:
        port_range:
          default: '0'
          description: Matched dst port, "0" means any
          type: string
        protocol:
          default: any
          description: '`tcp` / `udp` / `icmp` / `icmp6` / `gre` / `any` / `:protocol_number`, `protocol_number` is between 1-254, default is `any` `protocol_number` is between 1-254'
          type: string
      type: object
    switch_port_usage_dynamic_vlan_networks:
      description: Only if `mode`!=`dynamic` and `port_auth`==`dot1x`, if dynamic vlan is used, specify the possible networks/vlans RADIUS can return
      examples:
      - - corp
        - user
      items:
        type: string
      type: array
    ntp_servers:
      description: List of NTP servers specific to this device. By default, those in Site Settings will be used
      items:
        type: string
      type: array
    junos_port_config:
      additionalProperties: false
      description: Junos switch port configuration
      properties:
        ae_disable_lacp:
          description: To disable LACP support for the AE interface
          type: boolean
        ae_idx:
          description: Users could force to use the designated AE name
          type: integer
        ae_lacp_force_up:
          default: false
          description: 'If `aggregated`==`true`, sets the state of the interface as UP when the peer has limited LACP capability. Use case: When a device connected to this AE port is ZTPing for the first time, it will not have LACP configured on the other end. **Note:** Turning this on will enable force-up on one of the interfaces in the bundle only'
          type: boolean
        ae_lacp_passive:
          default: false
          description: If `aggregated`==`true`, sets LACP to passive mode on this AE interface; by default, active (fast) mode is used
          type: boolean
        ae_lacp_slow:
          description: To use slow timeout
          type: boolean
        aggregated:
          default: false
          description: Whether this port is configured as an aggregated Ethernet member
          type: boolean
        critical:
          default: false
          description: To generate port up/down alarm
          type: boolean
        description:
          description: Human-readable description for this Junos port
          type: string
        disable_autoneg:
          default: false
          description: If `speed` and `duplex` are specified, whether to disable autonegotiation
          type: boolean
        duplex:
          $ref: '#/components/schemas/junos_port_config_duplex'
          description: Link duplex mode for this Junos port
        dynamic_usage:
          description: Enable dynamic usage for this port. Set to `dynamic` to enable.
          type:
          - string
          - 'null'
        esilag:
          description: Whether this Junos port participates in an ESI-LAG
          type: boolean
        mtu:
          default: 1514
          description: Media maximum transmission unit (MTU) is the largest data unit that can be forwarded without fragmentation
          type: integer
        networks:
          description: List of network names. Required if `usage`==`inet`
          items:
            type: string
          type: array
        no_local_overwrite:
          default: true
          description: Prevent helpdesk to override the port config
          type: boolean
        poe_disabled:
          default: false
          description: Whether PoE capabilities are disabled for this Junos port
          type: boolean
        port_network:
          description: Required if `usage`==`vlan_tunnel`. Q-in-Q tunneling using All-in-one bundling. This also enables standard L2PT for interfaces that are not encapsulation tunnel interfaces and uses MAC rewrite operation. [View more information](https://www.juniper.net/documentation/us/en/software/junos/multicast-l2/topics/topic-map/q-in-q.html#id-understanding-qinq-tunneling-and-vlan-translation)
          type: string
        speed:
          $ref: '#/components/schemas/junos_port_config_speed'
          description: Link speed for this Junos port
        usage:
          description: Port usage name. For Q-in-Q, use `vlan_tunnel`. If EVPN is used, use `evpn_uplink`or `evpn_downlink`
          type: string
      required:
      - usage
      type: object
    aggregate_routes:
      additionalProperties:
        $ref: '#/components/schemas/aggregate_route'
      description: Property key is the destination subnet (e.g. "172.16.3.0/24")
      examples:
      - 172.16.3.0/24:
          discard: false
          metric: null
          preference: 30
      type: object
    vrf_extra_route6:
      additionalProperties: false
      description: Additional IPv6 static route for a VRF instance
      properties:
        via:
          description: IPv6 next-hop address for this VRF extra route
          format: ipv6
          type: string
      type: object
    extra_routes6:
      additionalProperties:
        $ref: '#/components/schemas/extra_route6'
      description: Property key is the destination CIDR (e.g. "2a02:1234:420a:10c9::/64")
      examples:
      - 2a02:1234:420a:10c9::/64:
          via: 2a02:1234:200a::100
      type: object
    snmp_vacm_security_to_group_content:
      description: VACM security-name to group mapping entries
      items:
        $ref: '#/components/schemas/snmp_vacm_security_to_group_content_item'
      type: array
    remote_syslog_server_protocol:
      default: udp
      description: 'Transport protocol used for this remote syslog server. enum: `tcp`, `udp`'
      enum:
      - tcp
      - udp
      type: string
    radius_coa_port:
      anyOf:
      - maximum: 65545
        minimum: 1
        type: integer
      - type: string
      description: RADIUS CoA Port, value from 1 to 65535, default is 3799
    snmpv3_config_notify_filter:
      description: SNMPv3 notification filter profiles
      items:
        $ref: '#/components/schemas/snmpv3_config_notify_filter_item'
      type: array
    extra_routes:
      additionalProperties:
        $ref: '#/components/schemas/extra_route'
      description: Property key is the destination CIDR (e.g. "10.0.0.0/8")
      examples:
      - 0.0.0.0/0:
          via: 192.168.1.10
      type: object
    ospf_area:
      additionalProperties: false
      description: Property key is the OSPF Area (Area should be a number (0-255) / IP address)
      properties:
        include_loopback:
          default: false
          description: Whether loopback interfaces are included in this OSPF area
          type: boolean
        networks:
          additionalProperties:
            $ref: '#/components/schemas/ospf_areas_network'
          description: OSPF network settings keyed by network name
          examples:
          - corp:
              auth_keys:
                '1': auth-key-1
              auth_type: md5
              bfd_minimum_interval: 500
              dead_interval: 40
              hello_interval: 10
              interface_type: nbma
              metric: 10000
            guest:
              passive: true
          type: object
        type:
          $ref: '#/components/schemas/ospf_area_type'
          description: Area type for this OSPF area
      type: object
    strings:
      description: Unique string values returned or accepted by this schema
      items:
        type: string
      type: array
      uniqueItems: true
    ospf_areas_network:
      additionalProperties: false
      description: Property key is the network name. Networks to participate in an OSPF area
      properties:
        auth_keys:
          additionalProperties:
            type: string
          description: Required if `auth_type`==`md5`. Property key is the key number
          examples:
          - '1': auth-key-1
          type: object
        auth_password:
          description: Required if `auth_type`==`password`, the password, max length is 8
          examples:
          - simple
          type: string
        auth_type:
          $ref: '#/components/schemas/ospf_area_network_auth_type'
          description: Authentication method used by this OSPF network
        bfd_minimum_interval:
          description: Minimum BFD interval for this OSPF network, in milliseconds
          examples:
          - 500
          maximum: 255000
          minimum: 1
          type: integer
        dead_interval:
          description: OSPF dead interval for this network, in seconds
          examples:
          - 40
          maximum: 65535
          minimum: 1
          type: integer
        export_policy:
          description: Routing policy used to export routes from this OSPF network
          examples:
          - export_policy
          type: string
        hello_interval:
          description: OSPF hello interval for this network, in seconds
          maximum: 255
          minimum: 1
          type: integer
        import_policy:
          description: Routing policy used to import routes for this OSPF network
          examples:
          - import_policy
          type: string
        interface_type:
          $ref: '#/components/schemas/ospf_area_network_interface_type'
          description: OSPF interface type used for this network
        metric:
          description: OSPF metric assigned to this network
          examples:
          - 10000
          maximum: 65535
          minimum: 1
          type:
          - integer
          - 'null'
        no_readvertise_to_overlay:
          default: false
          description: By default, we'll re-advertise all learned OSPF routes toward overlay
          type: boolean
        passive:
          default: false
          description: Whether to send OSPF-Hello
          type: boolean
      type: object
    switch_port_usage_storm_control:
      additionalProperties: false
      description: Switch storm control. Only if `mode`!=`dynamic`
      properties:
        disable_port:
          default: false
          description: Whether to disable the port when storm control is triggered
          type: boolean
        no_broadcast:
          default: false
          description: Whether to disable storm control on broadcast traffic
          type: boolean
        no_multicast:
          default: false
          description: Whether to disable storm control on multicast traffic
          type: boolean
        no_registered_multicast:
          default: false
          description: Whether to disable storm control on registered multicast traffic
          type: boolean
        no_unknown_unicast:
          default: false
          description: Whether to disable storm control on unknown unicast traffic
          type: boolean
        percentage:
          default: 80
          description: Bandwidth-percentage, configures the storm control level as a percentage of the available bandwidth
          maximum: 100
          minimum: 0
          type: integer
      type: object
    sw_routing_policy_term_action:
      additionalProperties: false
      description: Actions applied to routes matched by a switch routing policy term
      properties:
        accept:
          description: Whether to accept routes that match this term
          type: boolean
        community:
          $ref: '#/components/schemas/routing_policy_term_action_community'
          description: BGP communities to set when this term is used as an export policy
        local_preference:
          $ref: '#/components/schemas/routing_policy_local_preference'
          description: Preference value to set when this term is used as an import policy
        prepend_as_path:
          $ref: '#/components/schemas/routing_policy_term_action_prepend_as_path'
          description: AS path values to prepend when this term is used as an export policy
      type: object
    allow_deny:
      description: 'Policy action value that either allows or denies matching traffic. enum: `allow`, `deny`'
      enum:
      - allow
      - deny
      type: string
    switch_bgp_config_hold_time_zero:
      description: BGP hold time value of 0
      enum:
      - 0
      type: integer
    switch_port_usage_mac_limit:
      anyOf:
      - default: 0
        maximum: 16383
        minimum: 0
        type: integer
      - type: string
      description: Only if `mode`!=`dynamic`, max number of MAC addresses, default is 0 for unlimited, otherwise range is 1 to 16383 (upper bound constrained by platform)
    switch_stp_config:
      additionalProperties: false
      description: Switch spanning-tree protocol configuration
      properties:
        bridge_priority:
          default: 32k
          description: Switch STP priority. Range [0, 4k, 8k.. 60k] in steps of 4k. Bridge priority applies to both VSTP and RSTP.
          examples:
          - 40k
          type: string
      type: object
    routing_policy_term_matching_prefix:
      description: zero or more criteria/filter can be specified to match the term, all criteria have to be met
      items:
        examples:
        - 192.168.0.0/16-30
        type: string
      type: array
    routing_policy_term_matching_community:
      description: BGP community values used as routing-policy match criteria
      items:
        examples:
        - '3900062'
        type: string
      type: array
    extra_route_next_qualified_properties:
      additionalProperties: false
      description: Qualified next-hop attributes for an IPv4 static route
      properties:
        metric:
          description: Route metric for this qualified IPv4 next hop
          type:
          - integer
          - 'null'
        preference:
          description: Route preference for this qualified IPv4 next hop
          type:
          - integer
          - 'null'
      type: object
    wired_port_config:
      additionalProperties:
        $ref: '#/components/schemas/junos_port_config'
      description: Property key is the port name or range (e.g. "ge-0/0/0-10")
      type: object
    switch_radius:
      additionalProperties: false
      description: Switch RADIUS override settings. By default, the switch `radius_config` is used; set `use_different_radius` to use alternate RADIUS settings.
      properties:
        enabled:
          description: Whether RADIUS is enabled for switch management authentication
          type: boolean
        radius_config:
          $ref: '#/components/schemas/switch_radius_config'
          description: RADIUS configuration used when alternate RADIUS settings are required
        use_different_radius:
          description: Selector for alternate RADIUS settings instead of the default switch `radius_config`
          type: string
      type: object
    acl_tag_subnets:
      description: "If \n- `type`==`subnet` \n- `type`==`resource` (optional. default is `any`)\n- `type`==`static_gbp` if from matching subnet"
      items:
        type: string
      type: array
    switch_port_mirroring_property:
      additionalProperties: false
      description: Input and output settings for one switch port mirroring session
      properties:
        input_networks_ingress:
          $ref: '#/components/schemas/switch_port_mirroring_ingress_networks'
          description: At least one mirror input source should be specified. Networks whose ingress traffic is mirrored
        input_port_ids_egress:
          $ref: '#/components/schemas/switch_port_mirroring_egress_port_ids'
          description: At least one mirror input source should be specified. Switch ports whose egress traffic is mirrored
        input_port_ids_ingress:
          $ref: '#/components/schemas/switch_port_mirroring_ingress_port_ids'
          description: At least one mirror input source should be specified. Switch ports whose ingress traffic is mirrored
        output_ip_address:
          description: Exactly one of the `output_ip_address`, `output_port_id` or `output_network` should be provided
          examples:
          - 1.2.3.4
          type: string
        output_network:
          description: Exactly one of the `output_ip_address`, `output_port_id` or `output_network` should be provided
          examples:
          - analyze
          type: string
        output_port_id:
          description: Exactly one of the `output_ip_address`, `output_port_id` or `output_network` should be provided
          examples:
          - ge-0/0/5
          type: string
      type: object
    switch_mgmt:
      additionalProperties: false
      description: Switch management-plane access and proxy settings
      properties:
        ap_affinity_threshold:
          default: 10
          description: AP affinity threshold for switch management. If set in both site settings and organization settings, the site setting value is used.
          type: integer
        cli_banner:
          description: Set Banners for switches. Allows markup formatting
          examples:
          - \t\tWELCOME!
          type: string
        cli_idle_timeout:
          description: Sets timeout for switches
          maximum: 60
          minimum: 1
          type: integer
        config_revert_timer:
          default: 10
          description: Rollback timer for commit confirmed
          maximum: 30
          minimum: 1
          type: integer
        dhcp_option_fqdn:
          default: false
          description: Enable to provide the FQDN with DHCP option 81
          type: boolean
        disable_oob_down_alarm:
          description: Whether to suppress alarms when the switch out-of-band management interface is down
          type: boolean
        fips_enabled:
          default: false
          description: Whether FIPS mode is enabled on the switch
          type: boolean
        local_accounts:
          $ref: '#/components/schemas/config_switch_local_accounts'
          description: Local switch user accounts keyed by username
        mxedge_proxy_host:
          description: IP address or FQDN of the Mist Edge used to proxy the switch management traffic to the Mist Cloud
          type: string
        mxedge_proxy_port:
          $ref: '#/components/schemas/switch_mgmt_mxedge_proxy_port'
          description: Mist Edge proxy port used for switch management traffic
        protect_re:
          $ref: '#/components/schemas/protect_re'
          description: Control-plane protection settings for the switch
        radius:
          $ref: '#/components/schemas/switch_radius'
          description: Management authentication settings using RADIUS
        remove_existing_configs:
          default: false
          description: By default, only the configuration generated by Mist is cleaned up during the configuration process. If `true`, all the existing configuration will be removed.
          type: boolean
        root_password:
          description: Root password for local switch access
          format: password
          type: string
        tacacs:
          $ref: '#/components/schemas/tacacs'
          description: Management authentication settings using TACACS+
        use_mxedge_proxy:
          description: Whether to use Mist Edge as a proxy for switch management traffic
          type: boolean
      type: object
    remote_syslog_users:
      description: User-specific syslog logging rules
      items:
        $ref: '#/components/schemas/remote_syslog_user'
      type: array
    switch_bgp_config_neighbors:
      additionalProperties:
        $ref: '#/components/schemas/switch_bgp_config_neighbor'
      description: Switch BGP neighbor settings keyed by neighbor IP address
      type: object
    snmp_vacm_access:
      description: VACM access rules for SNMPv3
      items:
        $ref: '#/components/schemas/snmp_vacm_access_item'
      type: array
    switch_radius_config:
      additionalProperties: false
      description: Switch RADIUS authentication and accounting configuration
      properties:
        acct_immediate_update:
          description: Whether immediate RADIUS accounting updates are sent
          type: boolean
        acct_interim_interval:
          default: 0
          description: How frequently should interim accounting be reported, 60-65535. default is 0 (use one specified in Access-Accept request from RADIUS Server). Very frequent messages can affect the performance of the RADIUS server, 600 and up is recommended when enabled
          maximum: 65535
          minimum: 0
          type: integer
        acct_servers:
          $ref: '#/components/schemas/radius_acct_servers'
          description: RADIUS accounting servers used by this switch configuration
        auth_server_selection:
          $ref: '#/components/schemas/switch_radius_config_auth_server_selection'
          description: Selection strategy for RADIUS authentication servers
        auth_servers:
          $ref: '#/components/schemas/radius_auth_servers'
          description: RADIUS authentication servers used by this switch configuration
        auth_servers_retries:
          default: 3
          description: RADIUS auth session retries
          type: integer
        auth_servers_timeout:
          default: 5
          description: RADIUS auth session timeout
          type: integer
        coa_enabled:
          default: false
          description: Whether RADIUS Change of Authorization (CoA) is enabled
          type: boolean
        coa_port:
          $ref: '#/components/schemas/radius_coa_port'
          description: UDP port used for RADIUS Change of Authorization (CoA)
        fast_dot1x_timers:
          default: false
          description: Whether fast 802.1X timers are enabled for RADIUS authentication
          type: boolean
        network:
          description: Use `network`or `source_ip`. Which network the RADIUS server resides, if there's static IP for this network, we'd use it as source-ip
          type: string
        source_ip:
          description: Use `network` or `source_ip`. Explicit source IP address for RADIUS traffic
          type: string
      type: object
    snmp_config_trap_group:
      additionalProperties: false
      description: SNMP trap group definition
      properties:
        categories:
          $ref: '#/components/schemas/snmp_config_trap_group_categories'
          description: Trap categories included in this SNMP trap group
        group_name:
          description: Trap group name for this SNMP trap group
          examples:
          - profiler
          type: string
        targets:
          $ref: '#/components/schemas/snmp_config_trap_group_targets'
          description: Trap target addresses for this SNMP trap group
        version:
          $ref: '#/components/schemas/snmp_config_trap_version'
          description: SNMP trap protocol version used by this group
      type: object
    switch_network:
      additionalProperties: false
      description: A network represents a network segment. It can either represent a VLAN (then usually ties

# --- truncated at 32 KB (126 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/mist/refs/heads/main/openapi/mist-sites-network-templates-api-openapi.yml