-
Notifications
You must be signed in to change notification settings - Fork 64
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
aca3884
commit f3b4142
Showing
12 changed files
with
523 additions
and
3 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,31 @@ | ||
# routeros_capsman_aaa (Resource) | ||
|
||
|
||
## Example Usage | ||
```terraform | ||
resource "routeros_capsman_aaa" "test_3a" { | ||
called_format = "ssid" | ||
mac_mode = "as-username-and-password" | ||
} | ||
``` | ||
|
||
<!-- schema generated by tfplugindocs --> | ||
## Schema | ||
|
||
### Optional | ||
|
||
- `called_format` (String) Format of how the 'called-id' identifier will be passed to RADIUS. When configuring radius server clients, you can specify 'called-id' in order to separate multiple entires. | ||
- `interim_update` (String) When RADIUS accounting is used, Access Point periodically sends accounting information updates to the RADIUS server. This property specifies the default update interval that can be overridden by the RADIUS server using the Acct-Interim-Interval attribute. | ||
- `mac_caching` (String) If this value is set to a time interval, the Access Point will cache RADIUS MAC authentication responses for a specified time, and will not contact the RADIUS server if matching cache entry already exists. The value disabled will disable the cache, Access Point will always contact the RADIUS server. | ||
- `mac_format` (String) Controls how the MAC address of the client is encoded by Access Point in the User-Name attribute of the MAC authentication and MAC accounting RADIUS requests. | ||
- `mac_mode` (String) By default Access Point uses an empty password, when sending Access-Request during MAC authentication. When this property is set to as-username-and-password, Access Point will use the same value for the User-Password attribute as for the User-Name attribute. | ||
|
||
### Read-Only | ||
|
||
- `id` (String) The ID of this resource. | ||
|
||
## Import | ||
Import is supported using the following syntax: | ||
```shell | ||
terraform import routeros_capsman_aaa.test_3a . | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,51 @@ | ||
# routeros_capsman_channel (Resource) | ||
|
||
|
||
## Example Usage | ||
```terraform | ||
resource "routeros_capsman_channel" "test_channel" { | ||
name = "test_channel" | ||
comment = "test_channel" | ||
band = "2ghz-b/g/n" | ||
control_channel_width = "10mhz" | ||
extension_channel = "eCee" | ||
frequency = 2412 | ||
reselect_interval = "1h" | ||
save_selected = true | ||
secondary_frequency = "disabled" | ||
skip_dfs_channels = true | ||
tx_power = 20 | ||
} | ||
``` | ||
|
||
<!-- schema generated by tfplugindocs --> | ||
## Schema | ||
|
||
### Required | ||
|
||
- `name` (String) | ||
|
||
### Optional | ||
|
||
- `band` (String) Define operational radio frequency band and mode taken from hardware capability of wireless card. | ||
- `comment` (String) | ||
- `control_channel_width` (String) Control channel width. | ||
- `extension_channel` (String) Extension channel configuration. (E.g. Ce = extension channel is above Control channel, eC = extension channel is below Control channel) | ||
- `frequency` (Number) Channel frequency value in MHz on which AP will operate. If left blank, CAPsMAN will automatically determine the best frequency that is least occupied. | ||
- `reselect_interval` (String) The interval after which the least occupied frequency is chosen, can be defined as a random interval, ex. as '30m..60m'. Works only if channel.frequency is left blank. | ||
- `save_selected` (Boolean) If channel frequency is chosen automatically and channel.reselect-interval is used, then saves the last picked frequency. | ||
- `secondary_frequency` (String) Specifies the second frequency that will be used for 80+80MHz configuration. Set it to Disabled in order to disable 80+80MHz capability. | ||
- `skip_dfs_channels` (Boolean) If channel.frequency is left blank, the selection will skip DFS channels. | ||
- `tx_power` (Number) TX Power for CAP interface (for the whole interface not for individual chains) in dBm. It is not possible to set higher than allowed by country regulations or interface. By default max allowed by country or interface is used. | ||
- `width` (String) Channel Width in MHz. | ||
|
||
### Read-Only | ||
|
||
- `id` (String) The ID of this resource. | ||
|
||
## Import | ||
Import is supported using the following syntax: | ||
```shell | ||
# Import with the name of the CAPsMAN channel configuration in case of the example use test-channel-config | ||
terraform import routeros_capsman_channel.test_channel test-channel-config | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,150 @@ | ||
# routeros_capsman_configuration (Resource) | ||
|
||
|
||
## Example Usage | ||
```terraform | ||
resource "routeros_capsman_configuration" "test_configuration" { | ||
comment = "Comment" | ||
country = "no_country_set" | ||
disconnect_timeout = "1s150ms" | ||
distance = "indoors" | ||
frame_lifetime = "0.12" // 120ms | ||
guard_interval = "long" | ||
hide_ssid = true | ||
hw_protection_mode = "rts-cts" | ||
hw_retries = 1 | ||
installation = "indoor" | ||
keepalive_frames = "enabled" | ||
load_balancing_group = "" | ||
max_sta_count = 1 | ||
mode = "ap" | ||
multicast_helper = "full" | ||
name = "test_configuration" | ||
rx_chains = [1, 3] | ||
ssid = "SSID" | ||
tx_chains = [0, 2] | ||
} | ||
resource "routeros_capsman_channel" "test_channel" { | ||
name = "test-channel-config" | ||
} | ||
resource "routeros_capsman_datapath" "test_datapath" { | ||
name = "test-datapath-config" | ||
} | ||
resource "routeros_capsman_rates" "test_rates" { | ||
name = "test-rates-config" | ||
} | ||
resource "routeros_capsman_security" "test_security" { | ||
name = "test-security-config" | ||
} | ||
resource "routeros_capsman_configuration" "test_configuration_2" { | ||
name = "test_configuration_name" | ||
channel = { | ||
config = "${routeros_capsman_channel.test_channel.name}" | ||
band = "2ghz-b/g/n" | ||
control_channel_width = "10mhz" | ||
extension_channel = "eCee" | ||
frequency = 2412 | ||
reselect_interval = "1h" | ||
save_selected = "true" | ||
secondary_frequency = "disabled" | ||
skip_dfs_channels = "true" | ||
tx_power = 20 | ||
} | ||
datapath = { | ||
config = "${routeros_capsman_datapath.test_datapath.name}" | ||
arp = "local-proxy-arp" | ||
bridge = "bridge" | ||
bridge_cost = "100" | ||
bridge_horizon = "200" | ||
client_to_client_forwarding = "true" | ||
interface_list = "static" | ||
l2mtu = "1450" | ||
local_forwarding = "true" | ||
mtu = "1500" | ||
vlan_id = "101" | ||
vlan_mode = "no-tag" | ||
// openflow_switch = "aaa" | ||
} | ||
rates = { | ||
config = "${routeros_capsman_rates.test_rates.name}" | ||
basic = "1Mbps,5.5Mbps,6Mbps,18Mbps,36Mbps,54Mbps" | ||
ht_basic_mcs = "mcs-0,mcs-7,mcs-11,mcs-14,mcs-16,mcs-21" | ||
ht_supported_mcs = "mcs-3,mcs-8,mcs-10,mcs-13,mcs-17,mcs-18" | ||
supported = "2Mbps,11Mbps,9Mbps,12Mbps,24Mbps,48Mbps" | ||
vht_basic_mcs = "none" | ||
vht_supported_mcs = "mcs0-9,mcs0-7" | ||
} | ||
security = { | ||
config = "${routeros_capsman_security.test_security.name}" | ||
authentication_types = "wpa-psk,wpa-eap" | ||
disable_pmkid = "true" | ||
eap_methods = "eap-tls,passthrough" | ||
eap_radius_accounting = "true" | ||
encryption = "aes-ccm,tkip" | ||
group_encryption = "aes-ccm" | ||
group_key_update = "1h" | ||
passphrase = "AAAAAAAAA" | ||
tls_certificate = "none" | ||
tls_mode = "verify-certificate" | ||
} | ||
depends_on = [ | ||
routeros_capsman_channel.test_channel, | ||
routeros_capsman_datapath.test_datapath, | ||
routeros_capsman_rates.test_rates, | ||
routeros_capsman_security.test_security | ||
] | ||
} | ||
``` | ||
|
||
<!-- schema generated by tfplugindocs --> | ||
## Schema | ||
|
||
### Required | ||
|
||
- `name` (String) | ||
|
||
### Optional | ||
|
||
- `channel` (Map of String) Channel inline settings. | ||
- `comment` (String) | ||
- `country` (String) Limits available bands, frequencies and maximum transmit power for each frequency. Also specifies default value of scan-list. Value no_country_set is an FCC compliant set of channels. | ||
- `datapath` (Map of String) Datapath inline settings. | ||
- `disconnect_timeout` (String) This interval is measured from third sending failure on the lowest data rate. At this point 3 * (hw-retries + 1) frame transmits on the lowest data rate had failed. During disconnect-timeout packet transmission will be retried with on-fail-retry-time interval. If no frame can be transmitted successfully during disconnect-timeout, the connection is closed, and this event is logged as "extensive data loss". Successful frame transmission resets this timer. | ||
- `distance` (String) How long to wait for confirmation of unicast frames (ACKs) before considering transmission unsuccessful, or in short ACK-Timeout. | ||
- `frame_lifetime` (String) Discard frames that have been queued for sending longer than frame-lifetime. By default, when value of this property is 0, frames are discarded only after connection is closed (format: 0.00 sec). | ||
- `guard_interval` (String) Whether to allow use of short guard interval (refer to 802.11n MCS specification to see how this may affect throughput). "any" will use either short or long, depending on data rate, "long" will use long. | ||
- `hide_ssid` (Boolean) This property has effect only in AP mode. Setting it to yes can remove this network from the list of wireless networks that are shown by some client software. Changing this setting does not improve the security of the wireless network, because SSID is included in other frames sent by the AP. | ||
- `hw_protection_mode` (String) Frame protection support property. [See docs](https://wiki.mikrotik.com/wiki/Manual:Interface/Wireless#Frame_protection_support_(RTS/CTS)). | ||
- `hw_retries` (Number) Number of times sending frame is retried without considering it a transmission failure. [See docs](https://wiki.mikrotik.com/wiki/Manual:Interface/Wireless) | ||
- `installation` (String) Adjusts scan-list to use indoor, outdoor or all frequencies for the country that is set. | ||
- `keepalive_frames` (String) If a client has not communicated for around 20 seconds, AP sends a "keepalive-frame". | ||
- `load_balancing_group` (String) Tags the interface to the load balancing group. For a client to connect to interface in this group, the interface should have the same number of already connected clients as all other interfaces in the group or smaller. Useful in setups where ranges of CAPs mostly overlap. | ||
- `max_sta_count` (Number) Maximum number of associated clients. | ||
- `mode` (String) Set operational mode. Only **ap** currently supported. | ||
- `multicast_helper` (String) When set to full multicast packets will be sent with unicast destination MAC address, resolving multicast problem on a wireless link. This option should be enabled only on the access point, clients should be configured in station-bridge mode. | ||
- `rates` (Map of String) Rates inline settings. | ||
- `rx_chains` (List of Number) Which antennas to use for receive. | ||
- `security` (Map of String) Security inline settings. | ||
- `ssid` (String) SSID (service set identifier) is a name broadcast in the beacons that identifies wireless network. | ||
- `tx_chains` (List of Number) Which antennas to use for transmit. | ||
|
||
### Read-Only | ||
|
||
- `id` (String) The ID of this resource. | ||
|
||
## Import | ||
Import is supported using the following syntax: | ||
```shell | ||
# Import with the name of the CAPsMAN configuration in case of the example use test_configuration_name | ||
terraform import routeros_capsman_configuration.test_configuration_2 test_configuration_name | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,56 @@ | ||
# routeros_capsman_datapath (Resource) | ||
|
||
|
||
## Example Usage | ||
```terraform | ||
resource "routeros_capsman_datapath" "test_datapath" { | ||
name = "test_datapath" | ||
comment = "test_datapath" | ||
arp = "local-proxy-arp" | ||
bridge = "bridge" | ||
bridge_cost = 100 | ||
bridge_horizon = 200 | ||
client_to_client_forwarding = true | ||
interface_list = "static" | ||
l2mtu = 1450 | ||
local_forwarding = true | ||
mtu = 1500 | ||
vlan_id = 101 | ||
vlan_mode = "no-tag" | ||
// openflow_switch = "aaa" | ||
} | ||
``` | ||
|
||
<!-- schema generated by tfplugindocs --> | ||
## Schema | ||
|
||
### Required | ||
|
||
- `name` (String) | ||
|
||
### Optional | ||
|
||
- `arp` (String) ARP mode. See [docs](https://wiki.mikrotik.com/wiki/Manual:IP/ARP#ARP_Modes) for info. | ||
- `bridge` (String) Bridge to which particular interface should be automatically added as port. Required only when local-forwarding is not used. | ||
- `bridge_cost` (Number) Bridge port cost to use when adding as bridge port. | ||
- `bridge_horizon` (Number) Bridge horizon to use when adding as bridge port. | ||
- `client_to_client_forwarding` (Boolean) Controls if client-to-client forwarding between wireless clients connected to interface should be allowed, in local forwarding mode this function is performed by CAP, otherwise it is performed by CAPsMAN. | ||
- `comment` (String) | ||
- `interface_list` (String) Interface list name. | ||
- `l2mtu` (Number) Layer2 MTU size. | ||
- `local_forwarding` (Boolean) Controls forwarding mode. If disabled, all L2 and L3 data will be forwarded to CAPsMAN, and further forwarding decisions will be made only then. See [docs](https://wiki.mikrotik.com/wiki/Manual:CAPsMAN#Local_Forwarding_Mode) for info. | ||
- `mtu` (Number) MTU size. | ||
- `openflow_switch` (String) OpenFlow switch to add interface to, as port when enabled. | ||
- `vlan_id` (Number) VLAN ID to assign to interface if vlan-mode enables use of VLAN tagging. | ||
- `vlan_mode` (String) VLAN tagging mode specifies if VLAN tag should be assigned to interface (causes all received data to get tagged with VLAN tag and allows interface to only send out data tagged with given tag) | ||
|
||
### Read-Only | ||
|
||
- `id` (String) The ID of this resource. | ||
|
||
## Import | ||
Import is supported using the following syntax: | ||
```shell | ||
# Import with the name of the CAPsMAN datapath configuration in case of the example use test-datapath-config | ||
terraform import routeros_capsman_datapath.test_datapath test-datapath-config | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,32 @@ | ||
# routeros_capsman_manager (Resource) | ||
|
||
|
||
## Example Usage | ||
```terraform | ||
resource "routeros_capsman_manager" "test_manager" { | ||
enabled = true | ||
upgrade_policy = "require-same-version" | ||
} | ||
``` | ||
|
||
<!-- schema generated by tfplugindocs --> | ||
## Schema | ||
|
||
### Optional | ||
|
||
- `ca_certificate` (String) Device CA certificate. | ||
- `certificate` (String) Device certificate. | ||
- `enabled` (Boolean) Disable or enable CAPsMAN functionality. | ||
- `package_path` (String) Folder location for the RouterOS packages. For example, use '/upgrade' to specify the upgrade folder from the files section. If empty string is set, CAPsMAN can use built-in RouterOS packages, note that in this case only CAPs with the same architecture as CAPsMAN will be upgraded. | ||
- `require_peer_certificate` (Boolean) Require all connecting CAPs to have a valid certificate. | ||
- `upgrade_policy` (String) Upgrade policy options. | ||
|
||
### Read-Only | ||
|
||
- `id` (String) The ID of this resource. | ||
|
||
## Import | ||
Import is supported using the following syntax: | ||
```shell | ||
terraform import routeros_capsman_manager.test_manager . | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,37 @@ | ||
# routeros_capsman_manager_interface (Resource) | ||
|
||
|
||
## Example Usage | ||
```terraform | ||
resource "routeros_capsman_manager_interface" "test_manager_interface" { | ||
interface = "ether1" | ||
forbid = true | ||
} | ||
``` | ||
|
||
<!-- schema generated by tfplugindocs --> | ||
## Schema | ||
|
||
### Required | ||
|
||
- `interface` (String) Name of the interface. | ||
|
||
### Optional | ||
|
||
- `comment` (String) | ||
- `disabled` (Boolean) | ||
- `forbid` (Boolean) Disable interface listening. | ||
|
||
### Read-Only | ||
|
||
- `default` (Boolean) | ||
- `dynamic` (Boolean) Configuration item created by software, not by management interface. It is not exported, and cannot be directly modified. | ||
- `id` (String) The ID of this resource. | ||
|
||
## Import | ||
Import is supported using the following syntax: | ||
```shell | ||
#The ID can be found via API or the terminal | ||
#The command for the terminal is -> :put [/caps-man/manager/interface get [print show-ids]] | ||
terraform import routeros_capsman_manager_interface.test_manager_interface "*6" | ||
``` |
Oops, something went wrong.